Under SELinux enforcement, the container was denied access to the bind-mounted ./searxng directory, causing permission errors. Adding the :z flag to the volume mount in docker-compose.yml applies the correct SELinux context for shared access.