Re: [Rpm-maint] [RFC PATCH] install selinux policies from package header

2009-07-07 Thread Mark Hatle
I believe that calling out is the better solution, at least for me. I need to be able to install software into chroots and other "non-host" environments for other machines to run. If we call out, then I can intercept that and perform setup actions [or ignore actions] based on my configuration

Re: [Rpm-maint] [RFC PATCH] install selinux policies from package header

2009-07-07 Thread Joshua Brindle
Panu Matilainen wrote: Hi, On Mon, 6 Jul 2009, Stephen Lawrence wrote: Obviously I'm glossing over many implementation details that would need to be worked out. The point of this email is strictly to get feedback on our approach. Below is a patch that implements the beginnings of what I de

Re: [Rpm-maint] [RFC PATCH] install selinux policies from package header

2009-07-07 Thread Panu Matilainen
Hi, On Mon, 6 Jul 2009, Stephen Lawrence wrote: RPM currently has support for security policies to be stored in an rpm header but it doesn't currently do anything with the policies. We'd like to get some feedback on a prototype implementation that adds support for using those policies in an SE