Description of problem:
RPM leaves /etc/ld.so.cache with the an incorrect context.
Basically when rpm execs ldconfig it is doing it as rpm_script_t or
rpm_t when it should be doing ld_config_t.
A new feature in libselinux rpm_exec should be used for all execs in
This should only affect strict policy. FC3 release notes need to make
it clear that the strict policy is unsupported and that using the
strict policy with FC3 will require updating the system in the future.
I wouldn't say "unsupported" so much as something like "Users desiring
the SELinux 'strict' policy should track Dan Walsh's updates from
Dan -- do you agree with Elliot's and Colin's assessments? If so,
please help me by putting together some verbage that addresses this in
the way you feel most appropriate.
I'll also note that the fact that http://people.redhat.com/dwalsh/ is
completely empty doesn't give me much faith in pointing people
I would track the updates in rawhide not in my directory.
Also I use the ftp directory
But people should be getting updates to strict policy from rawhide.
Not enough time to put together an FC3 release notes entry on this;
pulling from the FC3 relnotes blocker bug...
11/12: Dan, need verification of the fix that Jeff built into FC4 [rpm-4.4.4-1]
*** Bug 139358 has been marked as a duplicate of this bug. ***
Fixed in rpm-4.3.3-3
Closing out based on comment 13.