Supporting multiple OS releases

Daniel J Walsh dwalsh at redhat.com
Tue Jun 30 20:27:16 UTC 2009


On 06/30/2009 10:08 AM, Rob Crittenden wrote:
> In the freeIPA project we have our own SELinux policy. We support RHEL 5
> up through Fedora Rawhide. With Fedora 11 we saw some problems compiling
> our SELinux module which Dan Walsh provided a patch for. I haven't tried
> this on older releases yet but I'm guessing it won't work as expected
> (some policies seem to have been renamed, such as
> corenet_non_ipsec_sendrecv() -> corenet_all_recvfrom_unlabeled()
>
> My question is, how can we handle this in our source tree? Are we going
> to need to maintain per-release policies or does SELinux support some
> sort of versioning conditionals?
>
> thanks
>
> rob
>
>
> ------------------------------------------------------------------------
>
> --
> fedora-selinux-list mailing list
> fedora-selinux-list at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-selinux-list
The old interface will work, it just reports a nasty warning message 
when you compile it against newer policy.  So I think you are safe 
compiling it on RHEL5 and installing it on F10/F11.




More information about the fedora-selinux-list mailing list