diff --git a/live/9/x86_64/prod/rocky-live-base-spin.ks b/live/9/x86_64/prod/rocky-live-base-spin.ks
index ae65473..f7bb3d3 100644
--- a/live/9/x86_64/prod/rocky-live-base-spin.ks
+++ b/live/9/x86_64/prod/rocky-live-base-spin.ks
@@ -124,6 +124,9 @@ systemctl disable network
 rm -f /etc/machine-id
 touch /etc/machine-id
 
+# relabel
+restorecon -R /
+
 %end
 %post --nochroot
 # only works on x86_64
diff --git a/live/9/x86_64/prod/rocky-live-base.ks b/live/9/x86_64/prod/rocky-live-base.ks
index 7e13b94..6447afd 100644
--- a/live/9/x86_64/prod/rocky-live-base.ks
+++ b/live/9/x86_64/prod/rocky-live-base.ks
@@ -120,6 +120,9 @@ systemctl disable network
 rm -f /etc/machine-id
 touch /etc/machine-id
 
+# relabel
+restorecon -R /
+
 %end
 %post --nochroot
 # only works on x86_64