On 09/22/2015 08:46 PM, Shawn Starr wrote:
Hello SELinux Fedora developers,
What is the process for packaging 3rd party SELinux
policies? the Icinga developers have been working on
this but in Fedora we have a package for each policy
type. Is the convention to merge this into the main
policy packages?
The general answer would that the icinga developers could ship their own
modules first. There's a blog explaining how to do it [1]. It allows the
developers to make updates of policy with the package and therefore
faster development and deployment.
However in long terms it's better to incorporate a package policy to
the system policy. You can either file a bug against selinux-policy or
try to contribute yourself using this [2] howto.
[1]
https://lvrabec-selinux.rhcloud.com/2015/07/07/how-to-create-selinux-prod...
[2]
https://github.com/fedora-selinux/selinux-policy/wiki/HowToContribute
Petr
--
Petr Lautrbach