[selinux] postinstall and postuninstall scripts should not contain restorecon -Rv /

[dahorak]

Postinstallation and postuninstallation scripts from following packages tendrl-collectd-selinux, tendrl-node-selinux should not contain command restorecon -Rv /. Rrestoring SELinux security contexts on whole filesystem will take very long time and might broke something else.

The target path should be more precisely specified just to relevant/affected files, not widely to whole filesystem.

# rpm -qp --scripts tendrl-collectd-selinux-1.5.2-1.el7.centos.noarch.rpm
# rpm -qp --scripts tendrl-node-selinux-1.5.2-1.el7.centos.noarch.rpm

[mkudlej]

@Tendrl/tendrl-core I vote for marking this issue as high priority one.

[nnDarshan]

@TimothyAsir Please take a look at this issue

[mbukatov]

This issues will be addressed during my work on moving selinux code into single repository tendrl-selinux.

[TimothyAsirJeyasing]

I understand the issue, I hope we can remove this only after we have a clear details about the list of files will be added or modified. Otherwise some other existing pkgs might not work if its required to work with the particular selinux flag present. I feel that, we can keep this until we have a full set of selinux policy available.