https://bugzilla.redhat.com/show_bug.cgi?id=1550595
--- Comment #26 from Javier Martinez Canillas <fmart...@redhat.com> ---
(In reply to dac.override from comment #25)
> Basically the way I see it is that this modularization effort requires that
> the headers are alway's installed if policy is installed. That then means
> that the various policy-devel packages need to alway's be installed.
Right, and then selinux-policy would need a BuildRequires dependency with
tpm2-abrmd-selinux-devel (and all the -devel packages exporting interfaces).
But then it won't be an independent SELinux policy module anymore as explained
in the IndependentPolicy guideline...
So I think that we have these options:
a) Due as you propose and make selinux-policy-contrib to BuildRequires
tpm2-abrmd-selinux-devel
b) Not having a tpm2-abrmd-selinux package and instead add the tpm2-abrmd AV
rules to selinux-policy-contrib.
c) Just have "allow system_dbusd_t tabrmd_t:unix_stream_socket { read write }"
in optional_policy as you first suggested.
--
You are receiving this mail because:
You are on the CC list for the bug.
You are always notified about changes to this product and component
_______________________________________________
package-review mailing list -- package-review@lists.fedoraproject.org
To unsubscribe send an email to package-review-le...@lists.fedoraproject.org
