setroubleshoot: Import error....

[Tony Nelson]

At 2:48 PM -0400 8/8/06, Daniel J Walsh wrote:
 ...
>Try to run the update in permissive mode.
>
>setenforce 0
>semodule -b /usr/share/selinux/targeted/base.pp
>setenforce 1
>
>There is a Chicken and  Egg situation with the netfiler_contexts problem
>above, which is not allowing
>to update policy rules with the proper allows to eliminate this problem.
 ...

Would it be reasonable for SELinux policy update rpm post-install scripts
to do "setenforce 0" before updating (and restore the state after)?
____________________________________________________________________
TonyN.:'                       <mailto:tonynelson at georgeanelson.com>
      '                              <http://www.georgeanelson.com/>