Patrice Dumas wrote:
On Mon, Nov 26, 2007 at 03:20:33PM +0300, Dmitry Butskoy wrote:
>
> Maybe just check in %post and %postun whether the "semodule" binary is
> present (i.e., "[ -x /usr/sbin/semodule ] && ....")? Or use
%triggerin for
> policycoreutils...
>
%triggerin should really be avoided.
But if the user will decide to use SELinux (install all needed packages)
later? Then it should re-install pam_ssh to activate its policies...
Dmitry