diff --git a/Rocky-9-Cinnamon.ks b/Rocky-9-Cinnamon.ks
index 204f5c3..6308cb8 100644
--- a/Rocky-9-Cinnamon.ks
+++ b/Rocky-9-Cinnamon.ks
@@ -87,6 +87,9 @@ systemctl disable network
 rm -f /etc/machine-id
 touch /etc/machine-id
 
+# relabel
+restorecon -R /
+
 %end
 
 %post --nochroot
diff --git a/Rocky-9-KDE.ks b/Rocky-9-KDE.ks
index 7d1cdd0..10fd179 100644
--- a/Rocky-9-KDE.ks
+++ b/Rocky-9-KDE.ks
@@ -87,6 +87,9 @@ systemctl disable network
 rm -f /etc/machine-id
 touch /etc/machine-id
 
+# relabel
+restorecon -R /
+
 %end
 
 %post --nochroot
diff --git a/Rocky-9-MATE.ks b/Rocky-9-MATE.ks
index 5c19113..e48049d 100644
--- a/Rocky-9-MATE.ks
+++ b/Rocky-9-MATE.ks
@@ -87,6 +87,9 @@ systemctl disable network
 rm -f /etc/machine-id
 touch /etc/machine-id
 
+# relabel
+restorecon -R /
+
 %end
 
 %post --nochroot
diff --git a/Rocky-9-Workstation-Lite.ks b/Rocky-9-Workstation-Lite.ks
index 0a0a05f..f4de458 100644
--- a/Rocky-9-Workstation-Lite.ks
+++ b/Rocky-9-Workstation-Lite.ks
@@ -86,6 +86,9 @@ systemctl disable network
 rm -f /etc/machine-id
 touch /etc/machine-id
 
+# relabel
+restorecon -R /
+
 %end
 
 %post --nochroot
diff --git a/Rocky-9-Workstation.ks b/Rocky-9-Workstation.ks
index cb81f86..9a9c69a 100644
--- a/Rocky-9-Workstation.ks
+++ b/Rocky-9-Workstation.ks
@@ -86,6 +86,9 @@ systemctl disable network
 rm -f /etc/machine-id
 touch /etc/machine-id
 
+# relabel
+restorecon -R /
+
 %end
 
 %post --nochroot
diff --git a/Rocky-9-XFCE.ks b/Rocky-9-XFCE.ks
index 6b8cbe3..6d29bc4 100644
--- a/Rocky-9-XFCE.ks
+++ b/Rocky-9-XFCE.ks
@@ -87,6 +87,9 @@ systemctl disable network
 rm -f /etc/machine-id
 touch /etc/machine-id
 
+# relabel
+restorecon -R /
+
 %end
 
 %post --nochroot
diff --git a/live/9/x86_64/peridot/rocky-live-base-spin.ks b/live/9/x86_64/peridot/rocky-live-base-spin.ks
index ae65473..f7bb3d3 100644
--- a/live/9/x86_64/peridot/rocky-live-base-spin.ks
+++ b/live/9/x86_64/peridot/rocky-live-base-spin.ks
@@ -124,6 +124,9 @@ systemctl disable network
 rm -f /etc/machine-id
 touch /etc/machine-id
 
+# relabel
+restorecon -R /
+
 %end
 %post --nochroot
 # only works on x86_64
diff --git a/live/9/x86_64/peridot/rocky-live-base.ks b/live/9/x86_64/peridot/rocky-live-base.ks
index 7e13b94..6447afd 100644
--- a/live/9/x86_64/peridot/rocky-live-base.ks
+++ b/live/9/x86_64/peridot/rocky-live-base.ks
@@ -120,6 +120,9 @@ systemctl disable network
 rm -f /etc/machine-id
 touch /etc/machine-id
 
+# relabel
+restorecon -R /
+
 %end
 %post --nochroot
 # only works on x86_64
diff --git a/live/9/x86_64/stage/rocky-live-base-spin.ks b/live/9/x86_64/stage/rocky-live-base-spin.ks
index ae65473..f7bb3d3 100644
--- a/live/9/x86_64/stage/rocky-live-base-spin.ks
+++ b/live/9/x86_64/stage/rocky-live-base-spin.ks
@@ -124,6 +124,9 @@ systemctl disable network
 rm -f /etc/machine-id
 touch /etc/machine-id
 
+# relabel
+restorecon -R /
+
 %end
 %post --nochroot
 # only works on x86_64
diff --git a/live/9/x86_64/stage/rocky-live-base.ks b/live/9/x86_64/stage/rocky-live-base.ks
index 7e13b94..6447afd 100644
--- a/live/9/x86_64/stage/rocky-live-base.ks
+++ b/live/9/x86_64/stage/rocky-live-base.ks
@@ -120,6 +120,9 @@ systemctl disable network
 rm -f /etc/machine-id
 touch /etc/machine-id
 
+# relabel
+restorecon -R /
+
 %end
 %post --nochroot
 # only works on x86_64