[Unit] Description=Mark the need to relabel after reboot DefaultDependencies=no Requires=local-fs.target Conflicts=shutdown.target After=local-fs.target Before=sysinit.target shutdown.target ConditionSecurity=!selinux ConditionPathIsDirectory=/etc/selinux ConditionPathExists=!/.autorelabel [Service] ExecStart=-/bin/touch /.autorelabel Type=oneshot RemainAfterExit=yes [Install] WantedBy=sysinit.target