Commit 710994484f for qemu.org

commit 710994484fe0e25abf19510c3c3e21e3afde367c
Author: Pierrick Bouvier <pierrick.bouvier@oss.qualcomm.com>
Date:   Thu Sep 17 15:11:15 2026 -0700

    tests/tcg/meson.build: fix host fs mount on SELinux enabled systems

    Fedora enables SELinux by default, which has the side effect to block
    writes to host fs done through containers (docker or podman).

    $ podman run -it --rm -v $(pwd):$(pwd) docker.io/debian:latest touch $(pwd)/file
    touch: cannot touch '/home/user/file': Permission denied

    There is a :z flag for mounts, that works with docker, but not with
    podman: SELinux: relabeling of /home/user is not allowed

    The right solution is to disable SELinux label confinment with
    --security-opt label=disable, which works with both podman and docker.

    Reported-by: John Snow <jsnow@redhat.com>
    Closes: https://lore.kernel.org/qemu-devel/CAFn=p-bXoctWNEdERPBL-SMRPYDisban2e0-mxYjws7UVcjVzw@mail.gmail.com/
    Tested-by: John Snow <jsnow@redhat.com>
    Reviewed-by: Pierrick Bouvier <pierrick.bouvier@oss.qualcomm.com>
    Link: https://lore.kernel.org/qemu-devel/20260917221117.274619-2-pierrick.bouvier@oss.qualcomm.com
    Signed-off-by: Pierrick Bouvier <pierrick.bouvier@oss.qualcomm.com>

diff --git a/tests/tcg/meson.build b/tests/tcg/meson.build
index a5e0462732..75f0a52fd2 100644
--- a/tests/tcg/meson.build
+++ b/tests/tcg/meson.build
@@ -277,6 +277,8 @@ foreach target, plan: tcg_tests
       mount = mount + ':' + mount
       here = meson.project_build_root()
       cc = [docker_wrapper, 'run', '--run-as-current-user', '--',
+            # SELinux blocks modification of host fs by default
+            '--security-opt', 'label=disable',
             '-w', here, '-v', here + ':' + here, '-v', mount,
             'qemu/' + cc_dockerfile, plan['cc']]
       has_cc = true