On Wed, Apr 15, 2015, at 02:50 PM, Eric Paris wrote: > shouldn't atomic upgrade has CAP_MAC_ADMIN, so we never hit this in the > future?
That's what the 7.1 SELinux policy does, so this particular issue should never occur again.
On Wed, Apr 15, 2015, at 02:50 PM, Eric Paris wrote: > shouldn't atomic upgrade has CAP_MAC_ADMIN, so we never hit this in the > future?
That's what the 7.1 SELinux policy does, so this particular issue should never occur again.