new policy modules submission

Dominick Grift domg472 at gmail.com
Thu Apr 28 15:51:19 UTC 2011


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 04/28/2011 05:38 PM, Mr Dash Four wrote:

> is there a formal process for submission of new policy 
> modules for review (and possible inclusion into the main stream 
> -targeted policy with Fedora) or do I just go and do that through bugzilla?

I can review your patches if you enclose them.

Once reviewed we can ask the fedora maintainers to merge them. If i am
confident (e.g. the policy modules are pretty trivial) then i could push
them into the fedora git repository myself. Else we could either file a
bugzilla or just ask.

We could also try and get them straight into upstream. That way the
policy will find its way into Fedora policy automatically. Refpolicy
(upstream) has a more official way/channel to contribute, and also has
some information about the process of submission:

http://oss.tresys.com/projects/refpolicy/wiki/HowToContribute

The benefit of going the upstream route is that we do not have to bother
the Fedora maintainers. Downside is that inclusion may take longer.

Upside is that when the policy gets approved by upstream we can be
pretty sure that it will be adopted by Fedora. The other way around is
harder because refpolicy has some more/different requirements.

But can you enclose your modules please? Then i will review them and
then we can see what the best way to go forward may be.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.16 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAk25jPcACgkQMlxVo39jgT9e2QCfX9NCVvq7mtYoqoM2IC3uaTEy
/DQAoMk59eyxhZHCIRHDEstBtauItDXQ
=sIA/
-----END PGP SIGNATURE-----


More information about the selinux mailing list