NFS Update and SELinux

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Richi Plana wrote:
> On Tue, 2007-11-06 at 10:27 -0500, Daniel J Walsh wrote:
>> Ok please update to the latest fc7 policy.
>> selinux-policy-2.6.4-53.fc7 is in testing.
>>
>> I definitely see a path match for this in there.
>>
>> grep usbmon policy-20070501.patch
>> +/dev/usbmon[0-9]+      -c
>> gen_context(system_u:object_r:usb_device_t,s0)
> 
> Yes, so did I. I just didn't bother to post. I'm glad to say that it
> WORKSFORME, though.
> 
> I _WAS_ thinking of asking, however, what sort of actions can be placed
> in the %post section of packages which need immediate action? I know
> some services restart themselves after package updates (but some don't.
> I wonder if this should be made policy). In the case of selinux, would a
> kernel module reload solve the mislabeled device files? A restart? (I
> did notice that at one point in time, I got an advisory to restart the
> computer after a set of updates. I can't remember where or what it was
> now)
> --
> 
> Richi Plana
> 
selinux-policy attempts to fix labeling as it updates.  Most of the time
you should/would not need to do anything.  But occasionally restarting
domains/programs is necessary.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iD8DBQFHMfNXrlYvE4MpobMRAkRZAKDSAZZbR18OXhNuOrEpTLRozQvhswCgyg9y
LO0s27NTLG8sjFf6n4BZBFU=
=XUHT
-----END PGP SIGNATURE-----