selinux-policy-devel?
Paul Howarth
paul at city-fan.org
Wed Jun 21 14:38:19 UTC 2006
Daniel J Walsh wrote:
> Paul Howarth wrote:
>> Paul Howarth wrote:
>>> On Sat, 2006-06-17 at 06:16 -0400, Daniel J Walsh wrote:
>>>> Paul Howarth wrote:
>>>>> Perhaps the selinux-policy package should be split into an
>>>>> selinux-policy and selinux-policy-devel package, with the -devel
>>>>> package being needed for building new policy/modules, and the base
>>>>> policy package containing just the stuff needed for regular runtime
>>>>> usage?
>>>>>
>>>>> I suggest this because I just tried building a policy module in
>>>>> mock with the new minimal environment and it fell over because
>>>>> building policy modules requires m4, which is not in the minimal
>>>>> environment. So m4 needs adding as a dep of selinux-policy (it's
>>>>> referenced from /usr/share/selinux/devel/include/Makefile), and
>>>>> this is really a devel-specific package that shouldn't be needed by
>>>>> most people, hence splitting off a -devel subpackage and adding the
>>>>> dep to that makes more sense. The -devel package could also have a
>>>>> dep on checkpolicy, which would be nice...
>>>>>
>>>> We have gone back and forth on this one. The original idea was to
>>>> make it easier for people to build custom policy and not have to go
>>>> looking for this package.
>>>
>>> Well that's OK but it really should have deps on m4 and checkpolicy
>>> then, since both are needed for building custom policy.
>>
>> I see from today's rawhide report that a -devel package has been split
>> out :-)
>>
>> Is this going to happen in FC5 with the next update too?
>>
>> Paul.
> Probably, although it really requires some coordination between
> policycoreutils, so that audit2allow will tell you to install it if
> you want to build a loadable reference module.
>
> Some other fixes are also going into tonights rawhide, to fix the
> requires.
> See we do listen to the user community. :^)
Thanks. If you eventually decide not to split off -devel for FC5, would
you please add "Provides: selinux-policy-devel" to the selinux-policy
package so that the same buildreq of selinux-policy-devel can be used
for FC5 and development packages that include policy modules?
Paul.
More information about the selinux
mailing list