Security policy oversight needed?

Jesse Keating jkeating at redhat.com
Thu Nov 19 16:48:12 UTC 2009


On Thu, 2009-11-19 at 09:14 -0500, Owen Taylor wrote:
> It doesn't work practically: configuration for packages needs to live
> with the package. Putting gigantic amounts of configuration into the 
> %post of a kickstart file quickly becomes unmanageable. And the idea
> that we make configuration changes in the %post of the kickstart really
> falls part badly once people start upgrading their install to the next
> version of Fedora.
> 

Which is why you do it with specifically selected policy packages, and
not trying to write out files in %post.  Create a set of policy packages
that define certain user cases, and pick from those as you construct a
spin.

-- 
Jesse Keating
Fedora -- Freedom² is a feature!
identi.ca: http://identi.ca/jkeating
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
URL: <http://listman.redhat.com/archives/fedora-devel-list/attachments/20091119/499ebbeb/attachment.sig>


More information about the fedora-devel-list mailing list