> >>>What's the proper way to upgrade the selinux policy? > >>> > >>>yum and rpm leave me with .rpmnew files every single time. > >>> > >>> > >>This suggests that you installed the policy source package as well, or > >>locally modified your policy directly. If you install or update the > >>policy source package (selinux-policy-strict-sources), then it should > >>rebuild the policy files from source and load the new ones automatically > >>as part of the %post. Updating the policy package > >>(selinux-policy-strict) will then leave you with .rpmnew files because > >>it sees that the files have been locally rebuilt. Let me nail this down for my own benefit; maybe I am dense. If you install the policy source package you should refrain from also installing the policy package? So is it one or the other, but not both?
