Comment # 7 on bug 4647 from Richard

(In reply to Nicolas Chauvet from comment #1)
> It doesn't look acceptable to edit the selinux configuration on post
> installation. First you need not to assume selinux might not run at all on
> the end-user system. Second you should better the needed changes to the
> targeted policy instead.

Ok, I did what I had to do to get a working package, going through all the work
to create a policy file is over my head. The same draft guideline that shows
you how to do it is the same one that suggested the stuff you wanted me to
remove. 


> execstack need to be modified in %install step, not %post or you will break
> rpm -V

That doesn't appear to work...

+ execstack -c
/home/build/rpmbuild/unifi/BUILDROOT/unifi-5.5.20-4.fc26.x86_64/usr/share/unifi/lib/native/Linux/amd64/libubnt_webrtc_jni.so
error: Bad exit status from /var/tmp/rpm-tmp.o1jwU2 (%install)


> About the init_t in permissive, this is not at all acceptable either. You
> are really changing a system wide setting in the back of end-users. 
> https://bugzilla.redhat.com/show_bug.cgi?id=1358476#c20

I created a bash script to wrap the command.