Attn Colin: Overhelpful /usr/sbin/policy-remove-unwanted

[Dale Amon <amon@vnl.com>]

Colin's /usr/sbin/policy-remove-unwanted gets into trouble
when you are using syslog-ng and do not have klogd installed:

	Using policy installation method "Automatic"
	Copying the sample /usr/share/selinux/policy/current directory from
	/usr/share/selinux/policy/default
	Removal of unwanted policy files
	Removing "current/domains/program/gnome-pty-helper.te"
	Keeping "current/domains/program/checkpolicy.te"
	Keeping "current/domains/program/chkpwd.te"
	Keeping "current/domains/program/crond.te"
	Keeping "current/domains/program/crontab.te"
	Keeping "current/domains/program/fsadm.te"
	Keeping "current/domains/program/getty.te"
	Keeping "current/domains/program/ifconfig.te"
	Keeping "current/domains/program/init.te"
	Keeping "current/domains/program/initrc.te"
	Removing "current/domains/program/klogd.te"

I think he needs to special case this and either test
for syslog-ng if the .te to be removed is klogd and
klogd is not found; or else simply never remove klogd.te
under any circumstance.

This problem could pop up at other places under
Automatic install as there is an assumption of an
absolute correspondence between the xxxx.te and one or
more xxxxx*.deb packages. (Or that's what I get from
a quick read through of the code without figuring
out all the details.)

Colin? Pong... in your court! :-)

-- 
------------------------------------------------------
   Dale Amon     amon@islandone.org    +44-7802-188325
       International linux systems consultancy
     Hardware & software system design, security
    and networking, systems programming and Admin
	      "Have Laptop, Will Travel"
------------------------------------------------------

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.