Florin Andrei wrote:
See bug report here:
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=155069
Essentially, what i'm saying is that it's ok that selinux prints out a
few warnings when updating the policy package via yum, but it's not ok
to do that for the whole Postfix queue on a large mail server!
Here i am, sitting like a sucker waiting for selinux to finish up
printing a million "/sbin/restorecon reset context /blah" messages
(literally a million) while being logged in via ssh across half the
Internet to a machine i'm updating. :-)
I wish it was more selective when printing out those messages.
What about making the rpm redirect those messages to
/var/log/policy-update-$date or something like that? Then all that info
isnt lost and is also kept for future reference.
--
Pedro Macedo