Yeah, well, it doesn't work. If I run semanage in %pre, the files in /usr/share/awstats/wwwroot/cgi-bin are still labelled usr_t. I've made a separate package, as advised by Stephen in your mail, which runs semanage in %pre (I tried %post too), and I have the following results : - If I install both awstats and awstats-selinux at the same time (sudo rpm -Uvh noarch/awstats-*.rpm), the files are still usr_t - If I install them separately, first awstats-selinux and then awstats, the files are labelled correctly (httpd_sys_script_exec_t) It looks like some transaction mechanism in RPM is causing the problem here. Is there a RPM guru here ? Stephen ? Dan ? What is the correct solution ? Run restorecon in %post ? Thanks for your help, Aurélien -- http://aurelien.bompard.org ~~~~ Jabber : abompard@xxxxxxxxx "They that can give up essential liberty to obtain a little temporary safety, deserve neither liberty nor safety." -- Benjamin Franklin -- fedora-selinux-list mailing list fedora-selinux-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-selinux-list
