When running inside a rootless Podman container on a SELinux-enabled host, the `patch` command fails because it cannot copy SELinux labels from the original file to the patched file. This only happens patching files that are located in a bind mount.