Hi! On Tue, 2022-10-11 at 18:07:00 +0200, Christian Göttsche wrote: > Since libselinux 3.2, via commit 05bdc03130d7 ("libselinux: use kernel > status page by default") [1], selinux_status_updated(3) will issue log > messages on enforcing changes and policy loads. dpkg is only interested > in whether the policy changed to then reload the SELinux label database. > > Ignore non-relevant log messages and forward messages of type error, > warning and avc (which should be treated as error if not audited > according to selinux_set_callback(3)). Thanks! I've merged (with a couple of tiny style changes) and pushed, will be part of the upcoming dpkg 1.21.10 release. Regards, Guillem