PREIN
/bin/sh
if [ -s /etc/selinux/config ]; then
. /etc/selinux/config;
FILE_CONTEXT=/etc/selinux/targeted/contexts/files/file_contexts;
if [ "${SELINUXTYPE}" = targeted -a -f ${FILE_CONTEXT} ]; then
[ -f ${FILE_CONTEXT}.pre ] || cp -f ${FILE_CONTEXT} ${FILE_CONTEXT}.pre;
fi
fi
POSTIN
/bin/sh
packages=`cat /usr/share/selinux/targeted/modules.lst`
if [ $1 -eq 1 ]; then
( cd /usr/share/selinux/targeted;
semodule -b base.pp.bz2 -i $packages -s targeted;
); restorecon -R /root /var/log /var/run /var/lib 2> /dev/null
else
semodule -n -s targeted -r pyzor -r razor -r moilscanner mailscanner gamin audio_entropy iscsid polkit_auth polkit rtkit_daemon ModemManager telepathysofiasip ethereal 2>/dev/null
( cd /usr/share/selinux/targeted;
semodule -b base.pp.bz2 -i $packages -s targeted;
);
. /etc/selinux/config;
FILE_CONTEXT=/etc/selinux/targeted/contexts/files/file_contexts;
selinuxenabled;
if [ $? = 0 -a "${SELINUXTYPE}" = targeted -a -f ${FILE_CONTEXT}.pre ]; then
fixfiles -C ${FILE_CONTEXT}.pre restore;
restorecon -R /root /var/log /var/run /var/lib 2> /dev/null;
rm -f ${FILE_CONTEXT}.pre;
fi;fi
exit 0
Triggers
selinux-policy-targeted <
3.2.5-9.fc9
/bin/sh
. /etc/selinux/config
[ "${SELINUXTYPE}" != "targeted" ] && exit 0
setsebool -P use_nfs_home_dirs=1
semanage user -l | grep -s unconfined_u > /dev/null
if [ $? -eq 0 ]; then
semanage user -m -R "unconfined_r system_r" -r s0-s0:c0.c1023 unconfined_u
else
semanage user -a -P user -R "unconfined_r system_r" -r s0-s0:c0.c1023 unconfined_u
fi
seuser=`semanage login -l | grep __default__ | awk '{ print $2 }'`
[ "$seuser" != "unconfined_u" ] && semanage login -m -s "unconfined_u" -r s0-s0:c0.c1023 __default__
seuser=`semanage login -l | grep root | awk '{ print $2 }'`
[ "$seuser" = "system_u" ] && semanage login -m -s "unconfined_u" -r s0-s0:c0.c1023 root
restorecon -R /root /etc/selinux/targeted 2> /dev/null
semodule -r qmail 2> /dev/null
exit 0