From e05189134713c3dddda845e4cca6a01ebb21ccd7 Mon Sep 17 00:00:00 2001
From: Cole Robinson <crobinso@redhat.com>
Date: Tue, 30 Sep 2025 15:18:43 -0400
Subject: [PATCH] lib/launch-libvirt.c: make model='selinux' disabling explicit

Using `<seclabel type='none'/>` implies `model=selinux`, so lets fill it
in to be explicit.

Signed-off-by: Cole Robinson <crobinso@redhat.com>
---
 lib/launch-libvirt.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/lib/launch-libvirt.c b/lib/launch-libvirt.c
index fb8e70656..30fe49528 100644
--- a/lib/launch-libvirt.c
+++ b/lib/launch-libvirt.c
@@ -1238,6 +1238,7 @@ construct_libvirt_xml_seclabel (guestfs_h *g,
     /* This disables SELinux/sVirt confinement. */
     start_element ("seclabel") {
       attribute ("type", "none");
+      attribute ("model", "selinux");
     } end_element ();
   }
   else if (params->data->selinux_label) {