Comment # 7 on bug 4647 from
(In reply to Nicolas Chauvet from comment #1)
> It doesn't look acceptable to edit the selinux configuration on post
> installation. First you need not to assume selinux might not run at all on
> the end-user system. Second you should better the needed changes to the
> targeted policy instead.

Ok, I did what I had to do to get a working package, going through all the work
to create a policy file is over my head. The same draft guideline that shows
you how to do it is the same one that suggested the stuff you wanted me to

> execstack need to be modified in %install step, not %post or you will break
> rpm -V

That doesn't appear to work...

+ execstack -c
error: Bad exit status from /var/tmp/rpm-tmp.o1jwU2 (%install)

> About the init_t in permissive, this is not at all acceptable either. You
> are really changing a system wide setting in the back of end-users. 

I created a bash script to wrap the command.

You are receiving this mail because: