fedora-selinux June 2009 archive
Main Archive Page > Month Archives  > fedora-selinux archives
fedora-selinux: Re: Usage of /usr/share/selinux/packages

Re: Usage of /usr/share/selinux/packages

From: Paul Howarth <paul_at_nospam>
Date: Tue Jun 02 2009 - 12:05:30 GMT
To: KaiGai Kohei <kaigai@kaigai.gr.jp>


KaiGai Kohei wrote:
> Daniel J Walsh wrote:
>> On 06/01/2009 07:44 PM, KaiGai Kohei wrote: >>> In the latest selinux-policy package, I could find an empty directory >>> at /usr/share/selinux/packages . >>> >>> What is the purpose? Is it intended to store policy packages installed >>> by other RPMs (such as mod_selinux)? >>> >>> Thanks, >> Yes the idea was to provide a location for third parties to put their PP >> files.
>
> Hmm... Now, I provide two types of policy packages (targeted and mls).
> Do you have any guideline to deploy these files?
>
> For example, the mod_selinux installs its policy modules at:
> /usr/share/selinux/targeted/mod_selinux.pp
> and
> /usr/share/selinux/mls/mod_selinux.pp
>
> If we put them on a single directory, it conflicts due to the name.

I think /usr/share/selinux/packages is a hangover from when packaging modules in RPMs was first being considered. The draft guidelines (which are old but still relevant) suggest that mod_selinux is doing the right thing.

http://fedoraproject.org/wiki/PackagingDrafts/SELinux/PolicyModules

Paul. -- fedora-selinux-list mailing list fedora-selinux-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-selinux-list