On Sat, 2008-08-09 at 23:12 -0700, Ray Van Dolson wrote:
On Sun, Aug 10, 2008 at 12:06:09AM -0230, David Carter wrote:
> Hey folks!
>
> I'm a newbie to package submission, and I've encountered some selinux
> issues when packaging my Apache module. The module runs fine without
> selinux, but won't run without some new rules and file configurations.
>
> How is this normally handled in packages? Am I expected to add
> configurations to handle this? How do I handle cases where selinux isn't
> enabled?
I know some provide a -selinux sub-package to deal with doing selinux
policy changes. I'm not sure if this is the official, preferred way or
not however. And there's no real automated way for someone installing
your package (who has selinux enabled on their machine) to even be
aware that the -selinux package exists. I ran into this with awstats.
So you might make mention of it in the README.Fedora for the main
package at the very least.
I know the SELinux folks are keen to have packages that provide services
also provide an accompanying policy module. You might want to consider
asking this question on the fedora-selinux-list, where I'll bet you'll
be able to get some help and pointers:
http://www.redhat.com/mailman/listinfo/fedora-selinux-list
--
Paul W. Frields
gpg fingerprint: 3DA6 A0AC 6D58 FEC4 0233 5906 ACDB C937 BD11 3717
http://paul.frields.org/ - -
http://pfrields.fedorapeople.org/
irc.freenode.net: stickster @ #fedora-docs, #fedora-devel, #fredlug