Re: libselinux category patch

[Darrel Goeddel <dgoeddel@TrustedCS.com>]

Stephen Smalley wrote:
>>I was thinking conflicting rpm packages.  So You can not install MCS and 
>>MLS translation libaries at the same time.
> 
> 
> Hmmm...I recall that you didn't want to take that approach for multiple
> policies, but in that case, you were providing multiple policies in the
> distribution itself.  As long as you don't think you will ever need to
> support multiple translation libraries in the base distribution, then
> conflicting packages may be ok.  Darrel, what do you think?

I personally like just managing the symlink /lib/libsetrans.so.0 to point
to whatever translation lib should be used.  This allows for multiple
variations to be installed.  As pointed out earlier, the alternatives
system could be used here.  There should be no need to have more than one
translation scheme installed on a running system, but it may prove easier
to allow for that case.  I think the question comes down to what is easier
for installing a system such as RHEL that may support multiple schemes 
such as MCS and MLS.  Installing multiple policy types and switching between
them is a nice feature.  If the policies would want differing translation
schemes, I think it should be just as easy to switch - no rpm removal and 
installation.

-- 

Darrel

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.