Introducing new repository called selinux-policy-macros[1]. This repo is main store for rpm macros which can be used by rpm packages creating custom packages with policies.
Repo contains macros for installing/uninstalling SELinux modules, setting booleans and properly labeling objects installed by custom SELinux module.
These macros will be part of selinux-policy package on all supported Fedoras.
[1] https://github.com/fedora-selinux/selinux-policy-macros
Any feedback is welcomed. Lukas.
"LV" == Lukas Vrabec lvrabec@redhat.com writes:
LV> Introducing new repository called selinux-policy-macros[1]. This LV> repo is main store for rpm macros which can be used by rpm packages LV> creating custom packages with policies.
I would suggest that if we're at the point of needing a package with macros, we're probably at the point of needing some packaging guidelines. There is currently no mention of selinux _at all_ on the main guidelines page: https://fedoraproject.org/wiki/Packaging:Guidelines
That's probably not a good thing.
Perhaps someone could work on or finish either https://fedoraproject.org/wiki/SELinux_Policy_Modules_Packaging_Draft or https://fedoraproject.org/wiki/PackagingDrafts/SELinux
- J<
On 03/14/2017 04:57 PM, Jason L Tibbitts III wrote:
"LV" == Lukas Vrabec lvrabec@redhat.com writes:
LV> Introducing new repository called selinux-policy-macros[1]. This LV> repo is main store for rpm macros which can be used by rpm packages LV> creating custom packages with policies.
I would suggest that if we're at the point of needing a package with macros, we're probably at the point of needing some packaging guidelines. There is currently no mention of selinux _at all_ on the main guidelines page: https://fedoraproject.org/wiki/Packaging:Guidelines
That's probably not a good thing.
Perhaps someone could work on or finish either https://fedoraproject.org/wiki/SELinux_Policy_Modules_Packaging_Draft or https://fedoraproject.org/wiki/PackagingDrafts/SELinux
- J<
Hi Jason,
Yes, currently I'm working on guidelines how to package own SELinux module and selinux-policy-macros repo is technical backround for it. This guidelines will be published soon.
Hope, I answered your questions.
Lukas.
selinux@lists.fedoraproject.org