Re: [RFC][PATCH v2] selinux: support deferred mapping of contexts

On Wed, 30 Apr 2008, Stephen Smalley wrote:

> As discussed in:
> http://marc.info/?t=120837952900003&r=1&w=2
> the ability to permit package managers and similar programs to set down
> unknown file contexts is still desired/required, not only for putting
> policy modules in packages but also for enabling build systems to create
> images of different distro releases with different policies w/o
> requiring all of the types to be defined in the build host policy.
> 

Does this solve all known issues for this case?  e.g. what if a script 
needs to be run by RPM on a file it just created ?  Does that ever happen?

- James
--

-- 
James Morris
<jmorris@...>