I agree with Metthew. In dssp5-debian I take this even further and I generally prefer to use extend over optional where possible. I only use optional if both module do not depend on eachother. I do this for various reasons (aside from what Matthew mentioned) * Keeps the output of semodule -vvv cleaner if you disable modules * I try to avoid optional because of its limitations * Keeps the policy and file_contexts cleaner/more efficient when you disable modules -- gpg --locate-keys dominick.grift@xxxxxxxxxxx Key fingerprint = FCD2 3660 5D6B 9D27 7FC6 E0FF DA7E 521F 10F6 4098 Dominick Grift
