Only run semodule command on hosts where selinux
is enabled.
Change-Id: I7bcfc758e44bb0f41ec657ad395352ddb92766eb
Signed-off-by: Matthew Smith <[email protected]>
%post selinux-policy
%_format MODULES %{_datadir}/selinux/packages/$x.pp
-%{_sbindir}/semodule -n -X 400 -s %{selinuxtype} -i $MODULES
if %{_sbindir}/selinuxenabled ; then
+ %{_sbindir}/semodule -n -X 400 -s %{selinuxtype} -i $MODULES
%{_sbindir}/load_policy
%relabel_files
fi