NFS Update and SELinux

[Richi Plana]

On Wed, 2007-11-07 at 12:18 -0500, Daniel J Walsh wrote:
> Richi Plana wrote:
> > I _WAS_ thinking of asking, however, what sort of actions can be placed
> > in the %post section of packages which need immediate action? I know
> > some services restart themselves after package updates (but some don't.
> > I wonder if this should be made policy). In the case of selinux, would a
> > kernel module reload solve the mislabeled device files? A restart? (I
> > did notice that at one point in time, I got an advisory to restart the
> > computer after a set of updates. I can't remember where or what it was
> > now)
> > --
> > 
> > Richi Plana
> > 
> selinux-policy attempts to fix labeling as it updates.  Most of the time
> you should/would not need to do anything.  But occasionally restarting
> domains/programs is necessary.

Being security-related, shouldn't actions needed to ensure effectivity
be encouraged? If not a system restart, what about that "domain
restarting" that you mentioned? How is that performed? Would it cover
all cases?
--

Richi Plana