python package: pyo files

[Jeremy Katz]

On Wed, 2006-08-09 at 11:16 -0700, Toshio Kuratomi wrote:
> On Wed, 2006-08-09 at 13:03 -0400, Jeremy Katz wrote:
> > On Wed, 2006-08-09 at 18:46 +0200, Michał Bentkowski wrote:
> > > 2006/8/9, Laurent Rineau <laurent.rineau__fedora_extras at normalesup.org>:
> > > > Actually, those guidelines are quite ambiguous: can a package ship .pyo files
> > > > or not?
> > > It is really ambigous... IMHO .pyo shouldn't be added to package and
> > > this is done by doing %ghost macro.
> > 
> > They need to be present so that things can end up with the correct
> > SELinux context -- otherwise, if you run a python app with -O2 as a
> > user, you end up getting various avc denials
> 
> Unless I'm misremembering the issue, you get AVC denials in the logs due
> to python's just-in-time byte compilation trying to write out the .pyo
> file. The program should still run fine.

Sure, but denials (even when things end up working properly) still lead
people to believe that there's a problem.  

Jeremy