Images now turn on the SELinux boolean use_nfs_home_dirs, which SELinux policy requires for access to home directories mounted over NFS (Configure NFS Client explains it). The build installs the policycoreutils-python-utils package in the image to set it.
SELinux now runs in permissive mode on every image type instead of being disabled: it logs what it would deny but blocks nothing. The builder no longer adds selinux=0 to the kernel command line, and it removes selinux=0 and enforcing=0 if the base image set them, so /etc/selinux/config alone sets the mode.
Files written during the build now get SELinux labels. virt-customize relabels the image at the end of the build when it can; when it cannot, the first boot of the new image labels every file, which takes longer and reboots the VM once.
Download ticrypt-image-builder-0.2.2.tgz and extract it with tar -xzf ticrypt-image-builder-0.2.2.tgz, or use the command in Get the Builder. ./ticrypt-image.sh version prints the version.
Configuration files written for 0.2.1 work unchanged.
Images built with an earlier version are not changed: rebuild an image with 0.2.2 to get the new SELinux settings. Automated: Linux Image Builder covers the build.
