Comment 2 for bug 475619

Thanks! I've reproduced here. Looks like the steps are as you describe: set enforce, run application, set complain, remove, launch subprocess. I haven't managed to trigger it without the complain transition step. We'll investigate more and work on a fix for this.