Right, this is in my TODO. I wanted to keep it since it is good to do
all semanage command in one transaction. I expect to set some bools.

GPL fixed.

On Mon, Jun 03, 2013 at 06:42:13AM -0700, Dominic Cleal wrote:
> > @@ -0,0 +1,12 @@
> > +#!/bin/bash
> > +
> > +# install policy modules in one transaction
> > +for selinuxvariant in targeted
> > +do
> > +  /usr/sbin/semodule -s $selinuxvariant -l >/dev/null 2>&1 && \
> > +  /usr/sbin/semanage -S $selinuxvariant -i - << _EOF
> > +  module -a /usr/share/selinux/${selinuxvariant}/foreman.pp.bz2
> > +  boolean -m --on httpd_can_network_connect
> 
> What's this needed for?  CRs?  I think there were some network bits permitted in the policy itself.
> 
> ---
> Reply to this email directly or view it on GitHub:
> https://github.com/theforeman/foreman-selinux/pull/1/files#r4499414

-- 
Later,

 Lukas "lzap" Zapletal
 irc: lzap #theforeman