Works for me (updating the packages in %post during installation).
The policy changes are similar to something I'd tried successfully before.
I still get a warning when moving a file from AFS into /tmp (not in the 
other direction, this now works).

Having these changes in 4.2 would be good.

NB when compared to CIFS:

   type cifs_t, fs_type, root_dir_type, noexattrfile, sysadmfile;
   type afs_t, fs_type, root_dir_type, noexattrfile;

Did I get it right that this will only make a difference under the strict 
policy? I have to learn more about SELinux...

Thanks a lot for the packages,
 	Stephan

On Fri, 11 Nov 2005, Jan Iven wrote:

> On Fri, 2005-11-11 at 15:29 +0100, Stephan Wiesand wrote:
>> Hallo Jan,
>>
>>> We are currently testing patched policy files, you may want to
>>> incorporate these.
>>
>> Would you make those available?
>
> http://linuxsoft.cern.ch/cern/slc4X/updates/testing/i386/RPMS/policycoreutils-1.18.1-4.7.cern.i386.rpm
> http://linuxsoft.cern.ch/cern/slc4X/updates/testing/i386/RPMS/selinux-policy-targeted-1.17.30-2.110.cern2.noarch.rpm
> http://linuxsoft.cern.ch/cern/slc4X/updates/testing/i386/RPMS/selinux-policy-targeted-sources-1.17.30-2.110.cern2.noarch.rpm
>
> http://linuxsoft.cern.ch/cern/slc4X/updates/testing/i386/SRPMS/policycoreutils-1.18.1-4.7.cern.src.rpm
> http://linuxsoft.cern.ch/cern/slc4X/updates/testing/i386/SRPMS/selinux-policy-targeted-1.17.30-2.110.cern2.src.rpm
>
> we have proposed the (minimal, just a new fs_type and some safeguards in
> the scripts) patches to Red Hat who hopefully will take them.
>
> Best regards
> jan
>

-- 

  ----------------------------------------------------
| Stephan Wiesand  |                                |
|                  |                                |
| DESY     - DV -  | phone  +49 33762 7 7370        |
| Platanenallee 6  | fax    +49 33762 7 7216        |
| 15738 Zeuthen    |                                |
| Germany          |                                |
  ----------------------------------------------------