On Wed, Apr 15, 2015, at 02:50 PM, Eric Paris wrote:

> shouldn't atomic upgrade has CAP_MAC_ADMIN, so we never hit this in the
> future?

That's what the 7.1 SELinux policy does, so this particular issue should never 
occur again.

Reply via email to