NFS Update and SELinux

[Richi Plana]

On Tue, 2007-11-06 at 10:27 -0500, Daniel J Walsh wrote:
> Ok please update to the latest fc7 policy.
> selinux-policy-2.6.4-53.fc7 is in testing.
> 
> I definitely see a path match for this in there.
> 
> grep usbmon policy-20070501.patch
> +/dev/usbmon[0-9]+      -c
> gen_context(system_u:object_r:usb_device_t,s0)

Yes, so did I. I just didn't bother to post. I'm glad to say that it
WORKSFORME, though.

I _WAS_ thinking of asking, however, what sort of actions can be placed
in the %post section of packages which need immediate action? I know
some services restart themselves after package updates (but some don't.
I wonder if this should be made policy). In the case of selinux, would a
kernel module reload solve the mislabeled device files? A restart? (I
did notice that at one point in time, I got an advisory to restart the
computer after a set of updates. I can't remember where or what it was
now)
--

Richi Plana