Farkas Levente wrote:
Daniel J Walsh wrote:
> Also from Red Hat's perspective having policy sources installed
gives us
> major headaches for support. If users start moving
> files into/out of unused directories, things are going to start
> breaking. We don't want some support call because someone decided
> to try out the latest wizbang policy, and it broke their ABC
this can happend now with /etc/selinux directory too...
> Application. Also policy sources requires a full build environment
> to work.
> Make, M4, checkpolicy ... On a minimal install machine this is a big
> overhead.
i see, that's a bigger problem:-(((
so the only solution that package creator should have this enviroment
and he has to include binary application specific policy in the binary
rpm. which currently can't be added/loaded into the system (could
it?). so we have to wait for trsys:-(((
The only solution now would be to require policy-sources to be installed
and then add their policy to it.
Dan
--