Does -devel package name only indicate "C" development packages?

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 05/18/2013 02:25 PM, Adam Williamson wrote:
> On Sat, 2013-05-18 at 13:41 -0400, Rahul Sundaram wrote:
>> On 05/18/2013 01:12 PM, Adam Williamson wrote:
>>> On Sat, 2013-05-18 at 06:18 -0400, Daniel J Walsh wrote: Well, there
>>> may have been some signals crossed somewhere. I've been part of the
>>> discussion about reducing the size of the desktop spin. 
>>> selinux-policy-devel doesn't look bad to me, the one that looks like a 
>>> problem is policycoreutils-devel
> 
>> Yep.  I was thinking of policycoreutils-devel and wrote 
>> selinux-policy-devel in the report instead.  Sorry for the confusion
> 
> And to make things clear there - the fact that policycoreutils and 
> policycoreutils-devel are split is not exactly a problem, in fact it's 
> making things better, it's just the nomenclature is off and it seems like
> the dependency of pcu-devel on selinux-policy-devel is sub-optimal and
> might be improveable.
> 
Well I guess the problem is with audit2allow and its potential need for
interface files.

Most people do
# grep BROKENAPP /var/log/audit/audit.log | audit2allow -M mybrokenapp
# semodule -i mybrokenapp.pp

Which does not require selinux-policy-devel, however if you run  audit2allow
- -R it does, and this is something I suggest people look at when building local
policy modules.

I can hack up audit2allow to suggest which packages to install depending on
the command options, we already have some of this.

The real trigger for the problem is setroubleshoot-server requires sepolicy
and audit2allow which brings in policycoreutils-devel, which brings in
selinux-policy-devel.

I guess I can work to hack out the parts of sepolicy/audit2allow that
setroubleshoot-server actually needs and move that back into policycoreutils,
then it can just require this.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iEYEARECAAYFAlGaGwEACgkQrlYvE4MpobP+EgCcCuxu/kbIUAlGsvFDjB2PMDXe
EKIAn03YsFJtP1Q2tASYtCFCytoqvk2Y
=7QLD
-----END PGP SIGNATURE-----