This currently leads to the following init script output on RHEL/CentOS:
The SP 2.x doesn't include a usable SELinux policy module, AFAICT (selinux/shibshar.* looks like 1.x stuff), so my conclusion is that the restorecon call in the Red Hat init script is pointless as of today (and should therefore be removed).
With SSPCPP-35, the following snippet was added to the Red Hat init script:
(see https://svn.shibboleth.net/view/cpp-sp?view=revision&revision=2458)
This currently leads to the following init script output on RHEL/CentOS:
The SP 2.x doesn't include a usable SELinux policy module, AFAICT (selinux/shibshar.* looks like 1.x stuff), so my conclusion is that the restorecon call in the Red Hat init script is pointless as of today (and should therefore be removed).