POSTIN
/bin/sh
if [ $1 = 1 ]; then
#Mark to initialize SELinux Policy Editor, when new install
touch /usr/share/seedit/sepolicy/need-init
fi
if [ $1 = 2 ]; then
#Mark to initialize RBAC config when upgrade
touch /usr/share/seedit/sepolicy/need-rbac-init
fi
POSTUN
/bin/sh
if [ $1 = 0 ]; then
sed -i 's/^SELINUXTYPE=.*/SELINUXTYPE=targeted/g' /etc/selinux/config
if [ /usr/sbin/selinuxenabled ]; then
sed -i 's/^SELINUX=.*/SELINUX=permissive/g' /etc/selinux/config
fi
sed -i '/# Added by seedit/,/# End of seedit/ d' /etc/audit/audit.rules
touch /.autorelabel
fi