Make it always do the "do_write_kernel" step so that the semantic is essentially "--build but with the module content checksum optimization", as otherwise the final policy doesn't get updated when there are no changes in modules, but other customizations are applied. Since the name --rebuild-if-modules-changed no longer matches the semantics, also change that to just --refresh, which fits better. Also update man pages and code comments. Ondrej Mosnacek (2): libsemanage: always write kernel policy when check_ext_changes is specified semodule: rename --rebuild-if-modules-changed to --refresh libsemanage/include/semanage/handle.h | 2 +- libsemanage/src/direct_api.c | 8 +++++--- policycoreutils/semodule/semodule.8 | 12 ++++++------ policycoreutils/semodule/semodule.c | 13 ++++++++++--- 4 files changed, 22 insertions(+), 13 deletions(-) -- 2.36.1