From d319e75862c265cd8c53c418e90cee8bff3dad54 Mon Sep 17 00:00:00 2001 From: Lukas Vrabec Date: Jan 04 2018 10:45:11 +0000 Subject: sandbox SELinux module is part ofd distribution policy and should have 100 priority --- diff --git a/selinux-policy.spec b/selinux-policy.spec index 92ae0c9..d398a58 100644 --- a/selinux-policy.spec +++ b/selinux-policy.spec @@ -107,7 +107,7 @@ SELinux sandbox policy used for the policycoreutils-sandbox package %post sandbox rm -f /etc/selinux/*/modules/active/modules/sandbox.pp.disabled 2>/dev/null rm -f %{_sharedstatedir}/selinux/*/active/modules/disabled/sandbox 2>/dev/null -semodule -n -i /usr/share/selinux/packages/sandbox.pp +semodule -n -X 100 -i /usr/share/selinux/packages/sandbox.pp if /usr/sbin/selinuxenabled ; then /usr/sbin/load_policy fi;