Move SELinux debugging to the end

testsuite/features/build_validation/core/allcli_sanity.feature

@@ -25,7 +25,6 @@ Feature: Sanity checks
     And socket "tftp" is active on "server"
     And service "tomcat" is enabled on "server"
     And service "tomcat" is active on "server"
-    And files on container volumes should all have the proper SELinux label
 
 @proxy
   Scenario: The proxy is healthy

testsuite/features/build_validation/finishing/srv_selinux.feature

@@ -0,0 +1,9 @@
+# Copyright (c) 2025 SUSE LLC
+# Licensed under the terms of the MIT license.
+
+Feature: Sanity checks
+  In order for the server to behave correctly after a reboot
+  I want to be sure that there is no wrong SELinux label
+
+  Scenario: No previous operation has created wrong SELinux label
+    Then files on container volumes should all have the proper SELinux label

testsuite/features/core/allcli_sanity.feature

@@ -25,7 +25,6 @@ Feature: Sanity checks
     And socket "tftp" is active on "server"
     And service "tomcat" is enabled on "server"
     And service "tomcat" is active on "server"
-    And files on container volumes should all have the proper SELinux label
 
 @proxy
   Scenario: The proxy is healthy

testsuite/features/finishing/srv_selinux.feature

@@ -0,0 +1,9 @@
+# Copyright (c) 2025 SUSE LLC
+# Licensed under the terms of the MIT license.
+
+Feature: Sanity checks
+  In order for the server to behave correctly after a reboot
+  I want to be sure that there is no wrong SELinux label
+
+  Scenario: No previous operation has created wrong SELinux label
+    Then files on container volumes should all have the proper SELinux label

testsuite/run_sets/build_validation/build_validation_finishing.yml

@@ -5,6 +5,7 @@
 # IMMUTABLE ORDER
 
 # these features are needed for gathering log/debug info
+- features/build_validation/finishing/srv_selinux.feature
 - features/build_validation/finishing/srv_debug.feature
 - features/build_validation/finishing/allcli_debug.feature
 

testsuite/run_sets/finishing.yml

@@ -9,6 +9,7 @@
 
 # IMMUTABLE ORDER
 # these features are needed for gathering log/debug info
+- features/finishing/srv_selinux.feature
 - features/finishing/srv_debug.feature
 - features/finishing/allcli_debug.feature
 - features/finishing/srv_count_scc_access.feature

testsuite/run_sets/secondary_finishing.yml

@@ -6,8 +6,8 @@
 
 ## Finishing Secondary features  BEGIN ##
 
-# this feature is disruptive for other features, so it is better at the end
+# these features are disruptive for other features, so they are better at the end
 - features/secondary/srv_rename_hostname.feature
-- features/finishing/srv_smdba.feature
+- features/secondary/srv_smdba.feature
 
 ## Finishing Secondary features END ##