From mboxrd@z Thu Jan 1 00:00:00 1970 Message-ID: <45B0F088.2030104@mentalrootkit.com> Date: Fri, 19 Jan 2007 11:23:36 -0500 From: Karl MacMillan MIME-Version: 1.0 To: Stephen Smalley CC: SELinux Mail List , Joshua Brindle Subject: Re: [PATCH] add selpolgen References: <45ACEE9E.7000709@mentalrootkit.com> <1169135113.22731.285.camel@moss-spartans.epoch.ncsc.mil> <45AFD027.9070007@mentalrootkit.com> <1169214598.22731.508.camel@moss-spartans.epoch.ncsc.mil> <1169222979.22731.567.camel@moss-spartans.epoch.ncsc.mil> In-Reply-To: <1169222979.22731.567.camel@moss-spartans.epoch.ncsc.mil> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Sender: owner-selinux@tycho.nsa.gov List-Id: selinux@tycho.nsa.gov Stephen Smalley wrote: > On Fri, 2007-01-19 at 08:49 -0500, Stephen Smalley wrote: >> On Thu, 2007-01-18 at 14:53 -0500, Karl MacMillan wrote: >>> Stephen Smalley wrote: >> We can follow whatever practice is normal for python modules. However, >> how are those usually packaged? Separate from the application that uses >> them? Or together? As it stands, this module would become a dependency >> of audit2allow and thus of policycoreutils; is there any benefit to >> packaging it separately? > > Or conversely, we could remove audit2allow from policycoreutils and put > it and this new python module into a single package. It isn't as though > audit2allow is fundamental to system operation anyway. > I think that the separation is desirable and matches current python practice. The sepolgen module is meant to be generic and available to many python programs (which is why it gets installed in python site-packages). I would rather break policycoreutils into multiple packages to remove the dependency on this for minimal installations. There is a natural division between system / policy management tools (e.g., restorecon, semanage, newrole) and policy debugging / development (audit2allow, audit2why, semodule_link, semodule_expand, and semodule_package). Maybe selcoreutils (which can eventually be bundled under a single 'sel' command like git / svn) and policydevtools. Distros may want to further divide those packages into graphical and non-graphical. Karl -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.