I just came across a package that does this: %post /usr/bin/chcon -t unconfined_execmem_exec_t %{_libexecdir}/haddock.bin >/dev/null 2>&1 || : rpmlint complains bitterly about it, and honestly I'm really not sure what's supposed to happen here. This is a ghc-compiled binary. (ghc is a Haskell compiler.) So, if you have a binary in a package that really needs this context, is running chcon in %post the right way to do it? - J< -- fedora-selinux-list mailing list fedora-selinux-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-selinux-list