Description of problem: RPM leaves /etc/ld.so.cache with the an incorrect context. Basically when rpm execs ldconfig it is doing it as rpm_script_t or rpm_t when it should be doing ld_config_t. A new feature in libselinux rpm_exec should be used for all execs in rpm.
This should only affect strict policy. FC3 release notes need to make it clear that the strict policy is unsupported and that using the strict policy with FC3 will require updating the system in the future.
I wouldn't say "unsupported" so much as something like "Users desiring the SELinux 'strict' policy should track Dan Walsh's updates from http://people.redhat.com/dwalsh/...".
Dan -- do you agree with Elliot's and Colin's assessments? If so, please help me by putting together some verbage that addresses this in the way you feel most appropriate. I'll also note that the fact that http://people.redhat.com/dwalsh/ is completely empty doesn't give me much faith in pointing people there... :-)
I would track the updates in rawhide not in my directory. Also I use the ftp directory ftp://people.redhat.com/dwalsh/SELinux But people should be getting updates to strict policy from rawhide. Dan
Not enough time to put together an FC3 release notes entry on this; pulling from the FC3 relnotes blocker bug...
11/12: Dan, need verification of the fix that Jeff built into FC4 [rpm-4.4.4-1]
*** Bug 139358 has been marked as a duplicate of this bug. ***
Fixed in rpm-4.3.3-3
Closing out based on comment 13.