Re: SELinux and RPM packages

[Joe Nall <joe@xxxxxxxx>]

On Feb 2, 2012, at 1:42 PM, Dmitry Makovey wrote:

> 
> Hi list,
> 
> I know I have asked that question before and the answer was to use 
> "semanage/setsebool" from %post section.
> 
> However here's my dilemma:
> 
> say I have packageA and packageB, both running some "semanage/setsebool" 
> combinations that overlap (most likely case for the setsebool). If I mirror 
> statements in %post into the %postun whenever I uninstall packageA I will be 
> wiping settings needed by packageB. How are people dealing with those? It 
> doesn't look like Fedora/RedHat has some strict policy or guideline on that 
> (or do they? did I miss it?) so I am interested how are others coping with 
> this? Falling back to manual process? Some extra scripting?

rpm triggers

http://rpm.org/api/4.4.2.2/triggers.html

joe


--
selinux mailing list
selinux@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/selinux