Thanks Vit!
That clears it up. It sounds like if we want to support multiple RHEL
minor releases *and* CentOS Stream, we're going to have to compile in
a buildroot that has the oldest version of selinux-policy that we want
to support.
- Ken
On Thu, Jan 28, 2021 at 2:00 AM Vit Mojzis wrote:
>
>
Hi,
the exact version requirement is in place to avoid incompatibility
between the policy on the target system (system you want to install the
module on) and the custom policy module.
Lets call the policy used to compile your module "A", policy on the
target system "B" and your custom module
Hi folks,
Many applications ship their own "-selinux" sub-package. These
subpackages usually set a minimal dependency on the exact
selinux-policy version in the buildroot.
In Ceph's case, we have:
Requires(post): selinux-policy-base >= %{_selinux_policy_version}
This version requirement cause
