selinux-policy-devel?

Paul Howarth paul at city-fan.org
Wed Jun 21 14:38:19 UTC 2006


Daniel J Walsh wrote:
> Paul Howarth wrote:
>> Paul Howarth wrote:
>>> On Sat, 2006-06-17 at 06:16 -0400, Daniel J Walsh wrote:
>>>> Paul Howarth wrote:
>>>>> Perhaps the selinux-policy package should be split into an 
>>>>> selinux-policy and selinux-policy-devel package, with the -devel 
>>>>> package being needed for building new policy/modules, and the base 
>>>>> policy package containing just the stuff needed for regular runtime 
>>>>> usage?
>>>>>
>>>>> I suggest this because I just tried building a policy module in 
>>>>> mock with the new minimal environment and it fell over because 
>>>>> building policy modules requires m4, which is not in the minimal 
>>>>> environment. So m4 needs adding as a dep of selinux-policy (it's 
>>>>> referenced from /usr/share/selinux/devel/include/Makefile), and 
>>>>> this is really a devel-specific package that shouldn't be needed by 
>>>>> most people, hence splitting off a -devel subpackage and adding the 
>>>>> dep to that makes more sense. The -devel package could also have a 
>>>>> dep on checkpolicy, which would be nice...
>>>>>
>>>> We have gone back and forth on this one.   The original idea was to 
>>>> make it easier for people to build custom policy and not have to go 
>>>> looking for this package.
>>>
>>> Well that's OK but it really should have deps on m4 and checkpolicy
>>> then, since both are needed for building custom policy.
>>
>> I see from today's rawhide report that a -devel package has been split 
>> out :-)
>>
>> Is this going to happen in FC5 with the next update too?
>>
>> Paul.
> Probably,  although it really requires some coordination between 
> policycoreutils, so that audit2allow will tell you to install it if
> you want to build a loadable reference module.
> 
> Some other fixes are also going into tonights rawhide, to fix the 
> requires. 
> See we do listen to the user community.  :^)

Thanks. If you eventually decide not to split off -devel for FC5, would 
you please add "Provides: selinux-policy-devel" to the selinux-policy 
package so that the same buildreq of selinux-policy-devel can be used 
for FC5 and development packages that include policy modules?

Paul.




More information about the fedora-selinux-list mailing list