diff --git a/lib/src/install.rs b/lib/src/install.rs
index 9d2ca858..b9f421cc 100644
--- a/lib/src/install.rs
+++ b/lib/src/install.rs
@@ -644,6 +644,9 @@ async fn initialize_ostree_root_from_self(
     }
     f.flush()?;
 
+    let fstab_path = rootfs.join("etc/fstab");
+    state.lsm_label(&fstab_path, "/etc/fstab".into(), false)?;
+
     if let Some(contents) = state.root_ssh_authorized_keys.as_deref() {
         osconfig::inject_root_ssh_authorized_keys(&root, contents)?;
     }