One suggestion we have come up with is for rpm to call selinux_status_updated before each package labels are going to be put down. This should fix the biggest problem. Only problem with this is what happens if the labeling is modified in the #pre section of the transaction. But I think this is a lot better then where we are now.
One suggestion we have come up with is for rpm to call selinux_ status_ updated before each package labels are going to be put down. This should fix the biggest problem. Only problem with this is what happens if the labeling is modified in the #pre section of the transaction. But I think this is a lot better then where we are now.