Jeff Spaleta wrote:
If we are going to make some packages mandatory...then well..we should make it mandatory though package requirements and not let anyone remove those features post-install. Make every single one of our users deal with that requirement, instead of making this sort a thing a blocker on trademark use.
Glad that we can bring so much fun discussion! For what it is worth, I liked the discussion earlier on which separated out the issue into trademark policy versus kickstart pool. Given the old and new rules, the AOS spin _should_ be allowed to carry the trademark (not the based on mark). However, I can see where the board would not want to promote it into the kickstart pool, since that is a defacto "best practice", and the board may wish to promote SELinux as a best practice.
Let me suggest this. Can we put forth 2 ks files, one enabled and one disabled and without the selinux packages (fedora-aos and fedora-aos-selinux)? Since, as Jeremy pointed out, we can enforce with the most recent tools... but as Jeroen and others have pointed out there may be folks who do not want to use selinux to provide security.
Thanks! -- bk _______________________________________________ fedora-advisory-board mailing list fedora-advisory-board@xxxxxxxxxx http://www.redhat.com/mailman/listinfo/fedora-advisory-board
