PREIN

/bin/sh

if [ -s /etc/selinux/config ]; then 
	. /etc/selinux/config; 
	FILE_CONTEXT=/etc/selinux/minimum/contexts/files/file_contexts; 
	if [ "${SELINUXTYPE}" == minimum -a -f ${FILE_CONTEXT} ]; then 
		cp -f ${FILE_CONTEXT} ${FILE_CONTEXT}.pre; 
	fi 
fi

POSTIN

/bin/sh

if [ $1 -eq 1 ]; then

tempdir=`mktemp -d /usr/share/selinux/minimum/tmpXXXX`; 
( cd $tempdir; 
cp ../base.pp.bz2 ../unconfined.pp.bz2 .; 
bunzip2 *; 
semodule -b base.pp -i unconfined.pp -s minimum; 
); 
rm -rf $tempdir;semanage -S minimum -i - << __eof
user -a -P user -R "unconfined_r system_r" -r s0-s0:c0.c1023 unconfined_u
__eof
semanage -S minimum -i - << __eof
login -m  -s unconfined_u -r s0-s0:c0.c1023 __default__
login -m  -s unconfined_u -r s0-s0:c0.c1023 root
__eof
restorecon -R /root /var/log /var/run 2> /dev/null
else

tempdir=`mktemp -d /usr/share/selinux/minimum/tmpXXXX`; 
( cd $tempdir; 
cp ../base.pp.bz2 ../unconfined.pp.bz2 .; 
bunzip2 *; 
semodule -b base.pp -i unconfined.pp -s minimum; 
); 
rm -rf $tempdir;
. /etc/selinux/config; 
FILE_CONTEXT=/etc/selinux/minimum/contexts/files/file_contexts; 
selinuxenabled; 
if [ $? == 0  -a "${SELINUXTYPE}" == minimum -a -f ${FILE_CONTEXT}.pre ]; then 
	fixfiles -C ${FILE_CONTEXT}.pre restore; 
	restorecon -R /var/log /var/run 2> /dev/null; 
	rm -f ${FILE_CONTEXT}.pre; 
fi;fi
exit 0