[Unit]

Description=Mark the need to relabel after reboot

DefaultDependencies=no

Requires=local-fs.target

Conflicts=shutdown.target

After=local-fs.target

Before=sysinit.target shutdown.target

ConditionSecurity=!selinux

ConditionPathIsDirectory=/etc/selinux

ConditionPathExists=!/.autorelabel

[Service]

ExecStart=-/bin/touch /.autorelabel

Type=oneshot

RemainAfterExit=yes