packaging selinux modules into rpms ?

[Jan-Frode Myklebust]

I've been building RPMs for syslog-ng and argus, that needs
to contain selinux-modules to work on enforcing RHEL5. Are
there any recommendations for how to package these with RPM?
      
In http://tanso.net/yum/repodata/repoview/syslog-ng-0-2.0.3-1.el5.html
I build the module by checkmodule/semodule_package/semodule -i in the
rpm %post, but maybe I should have done this in the source-rpm, and
just installed the .pp in the binary-rpm %post ?
       
      
   -jf

[Paul Howarth]

On Thu, 2007-04-19 at 09:01 +0200, Jan-Frode Myklebust wrote:
>  I've been building RPMs for syslog-ng and argus, that needs
>  to contain selinux-modules to work on enforcing RHEL5. Are
>  there any recommendations for how to package these with RPM?
>        
>  In http://tanso.net/yum/repodata/repoview/syslog-ng-0-2.0.3-1.el5.html
>  I build the module by checkmodule/semodule_package/semodule -i in the
>  rpm %post, but maybe I should have done this in the source-rpm, and
>  just installed the .pp in the binary-rpm %post ?
>     
A few people have contributed selinux module packaging guidelines here:
http://fedoraproject.org/wiki/PackagingDrafts/SELinux/PolicyModules

Paul.