On Wed, 2007-11-07 at 12:18 -0500, Daniel J Walsh wrote:
Richi Plana wrote:
> I _WAS_ thinking of asking, however, what sort of actions can be placed
> in the %post section of packages which need immediate action? I know
> some services restart themselves after package updates (but some don't.
> I wonder if this should be made policy). In the case of selinux, would a
> kernel module reload solve the mislabeled device files? A restart? (I
> did notice that at one point in time, I got an advisory to restart the
> computer after a set of updates. I can't remember where or what it was
> now)
> --
>
> Richi Plana
>
selinux-policy attempts to fix labeling as it updates. Most of the time
you should/would not need to do anything. But occasionally restarting
domains/programs is necessary.
Being security-related, shouldn't actions needed to ensure effectivity
be encouraged? If not a system restart, what about that "domain
restarting" that you mentioned? How is that performed? Would it cover
all cases?
--
Richi Plana