Jan-Frode Myklebust wrote: > > I've been building RPMs for syslog-ng and argus, that needs > to contain selinux-modules to work on enforcing RHEL5. Are > there any recommendations for how to package these with RPM? There are some drafts: http://fedoraproject.org/wiki/PackagingDrafts/SELinux http://fedoraproject.org/wiki/PackagingDrafts/SELinux/PolicyModules > In http://tanso.net/yum/repodata/repoview/syslog-ng-0-2.0.3-1.el5.html > I build the module by checkmodule/semodule_package/semodule -i in the > rpm %post, but maybe I should have done this in the source-rpm, and > just installed the .pp in the binary-rpm %post ? Building it in %build and scriptlets in %post, %preun, %postun seems to me to be the best proposal in the documentation. There is also %policy which one can use in %files, but I do not know what this does. Example: %policy %{_sysconfdir}/selinux/strict/src/policy/macros/pam_mount_macros.te %policy %{_sysconfdir}/selinux/strict/src/policy/file_contexts/misc/pam_mount.fc Regards, Till -- fedora-selinux-list mailing list fedora-selinux-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-selinux-list
