https://bugzilla.redhat.com/show_bug.cgi?id=1550595
--- Comment #29 from Javier Martinez Canillas fmartine@redhat.com --- Got it. Thanks a lot for your explanations.
I think I'll probably go with (b) then. I like the idea of having independent modules for SELinux policies but now I understand that policies for the different components are more coupled than I thought.
I would like to go with (a), but my SELinux knowledge is close to non-existent so I'm by no means qualified to set a precedence on this.
I'm really just interested in updating tpm2-abrmd to the latest release to be honest.