Farkas Levente wrote:
Daniel J Walsh wrote:
> Also from Red Hat's perspective having policy sources installed
gives us
major headaches for support. If users start moving
files into/out of unused directories, things are going to start
breaking. We don't want some support call because someone decided
to try out the latest wizbang policy, and it broke their ABC
this can happend now with /etc/selinux directory too...
Application. Also policy sources requires a full build environment
to work.
Make, M4, checkpolicy ... On a minimal install machine this is a big
overhead.
i see, that's a bigger problem:-(((
so the only solution that package creator should have this enviroment
and he has to include binary application specific policy in the binary
rpm. which currently can't be added/loaded into the system (could
it?). so we have to wait for trsys:-(((
The only solution now would be to require policy-sources to be installed
and then add their policy to it.
Dan
--
