From dea0c4af43eb3eadf8b3770fb88cf961139653ac Mon Sep 17 00:00:00 2001
From: Miroslav Grepl <mgrepl@redhat.com>
Date: Tue, 3 Sep 2013 22:38:46 +0200
Subject: [PATCH] Fix selinux-policy-sandbox pkg handling

---
 selinux-policy.spec | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/selinux-policy.spec b/selinux-policy.spec
index e2842eac..dc8c4d6d 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -83,12 +83,17 @@ SELinux sandbox policy used for the policycoreutils-sandbox package
 %verify(not md5 size mtime) /usr/share/selinux/packages/sandbox.pp
 
 %post sandbox
+rm -f /etc/selinux/*/modules/active/modules/sandbox.pp.disabled 2>/dev/null
 semodule -n -i /usr/share/selinux/packages/sandbox.pp
 if /usr/sbin/selinuxenabled ; then
     /usr/sbin/load_policy
 fi;
 exit 0
 
+%postun sandbox
+semodule -d sandbox 2>/dev/null
+exit 0
+
 %package devel
 Summary: SELinux policy devel
 Group: System Environment/Base
@@ -455,7 +460,7 @@ selinuxenabled && semodule -nB
 exit 0
 
 %triggerpostun -- selinux-policy-targeted < 3.12.1-74
-rm -f /etc/selinux/*/modules/active/modules/sandbox.pp.disabled 
+rm -f /etc/selinux/*/modules/active/modules/sandbox.pp.disabled 2>/dev/null
 exit 0
 
 %triggerpostun targeted -- selinux-policy-targeted < 3.12.1-7