Manage selinux context of tftp directory

- Fixes: #1997

Signed-off-by: Jonathon Anderson <janderson@ciq.com>

internal/pkg/util/selinux.go

@@ -0,0 +1,34 @@
+package util
+
+import (
+	"fmt"
+	"os/exec"
+	"strings"
+
+	"github.com/opencontainers/selinux/go-selinux"
+	"github.com/warewulf/warewulf/internal/pkg/wwlog"
+)
+
+// RestoreSELinuxContext restores the SELinux context for a path and all its children
+// based on the system's SELinux policy, equivalent to running restorecon -R
+func RestoreSELinuxContext(rootPath string) error {
+	if !selinux.GetEnabled() {
+		wwlog.Debug("SELinux not enabled, skipping context restoration")
+		return nil
+	}
+
+	wwlog.Info("Restoring SELinux contexts for: %s", rootPath)
+
+	cmd := exec.Command("restorecon", "-vR", rootPath)
+	output, err := cmd.CombinedOutput()
+	if err != nil {
+		return fmt.Errorf("restorecon failed: %w: %s", err, string(output))
+	}
+
+	for _, line := range strings.Split(strings.TrimSpace(string(output)), "\n") {
+		if line != "" {
+			wwlog.Debug("restorecon output: %s", line)
+		}
+	}
+	return nil
+}