selinux policy updates - a question

[Tim]

On Sun, 2009-01-04 at 12:36 -0800, Mike Cloaked wrote:
> Fairly regularly there are selinux updates that come in during yum
> updates - I presume that nothing gets changed unless a relabel is
> done?  Or am I wrong?

A policy can set what can be done with certain types of file.  i.e. The
rules can change.  That doesn't involve relabelling a file.

Of course there are other things that can change in an update.  

As I understand it, if a relabel is required, the update will arrange it
to happen.

-- 
[tim at localhost ~]$ uname -r
2.6.27.9-73.fc9.i686

Don't send private replies to my address, the mailbox is ignored.  I
read messages from the public lists.