Directories for policy module packages

[Christopher J. PeBenito]

On Tue, 2006-07-25 at 10:14 +0100, Paul Howarth wrote:
> Now that RPM packages are starting to include policy module packages (my 
> mod_fcgid package was approved for Extras recently: 
> http://bugzilla.redhat.com/195666), it would be nice to have a standard 
> place for the .pp files to be dropped, and for that directory to be 
> owned by the selinux-policy package (so that all the packages don't need 
> to own it themselves).
> 
> I propose the following:
> 
> /usr/share/selinux/packages
> (container directory, separate from modules bundled with Core package)
> 
> /usr/share/selinux/packages/mls
> (policy modules for use with the mls base policy)
> 
> /usr/share/selinux/packages/strict
> (policy modules for use with the strict base policy)
> 
> /usr/share/selinux/packages/targeted
> (policy modules for use with the targeted base policy)
> 
> /usr/share/selinux/packages/share
> (policy modules that have no base-specific elements, and can be used 
> with all base policies)

There already is a standard location:

/usr/share/selinux/NAME/

where NAME is targeted, strict, mls, etc.

-- 
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150