diff --git a/src/firstboot/firstboot.c b/src/firstboot/firstboot.c
index 6bfc2dc1275..a7654ca6159 100644
--- a/src/firstboot/firstboot.c
+++ b/src/firstboot/firstboot.c
@@ -29,6 +29,7 @@
 #include "image-policy.h"
 #include "kbd-util.h"
 #include "label.h"
+#include "label-util.h"
 #include "libcrypt-util.h"
 #include "locale-util.h"
 #include "lock-util.h"
@@ -1685,6 +1686,10 @@ static int run(int argc, char *argv[]) {
                 }
         }
 
+        r = mac_init();
+        if (r < 0)
+                return r;
+
         if (arg_image) {
                 assert(!arg_root);