Last version of policycoreutils using Fedora only API

Last version of policycoreutils using Fedora only API

[Laurent Bigonville]

Hello,

The last release of policycoreutils is using a function
(selinux_current_policy_path()) that is only available in Fedora. I
guess this shouldn't have made upstream.

An idea how this could be sorted for other distributions?

Cheers

Laurent Bigonville

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: Last version of policycoreutils using Fedora only API

[Sven Vermeulen]

[-- Attachment #1: Type: text/plain, Size: 658 bytes --]

On May 23, 2013 1:09 AM, "Laurent Bigonville" <bigon@debian.org> wrote:
> The last release of policycoreutils is using a function
> (selinux_current_policy_path()) that is only available in Fedora. I
> guess this shouldn't have made upstream.
>
> An idea how this could be sorted for other distributions?

Please see my answer to Joshua's announcement on the new userspace. You'll
need to add in the function. There is also a dependency on yum Python
bindings that you might need to remove, and depending on your directory
structure you might need a /etc/selinux/sepolgen.conf (iirc) that defines
where to find the refpolicy Makefile.

Wkr,
  Sven Vermeulen

[-- Attachment #2: Type: text/html, Size: 829 bytes --]

Re: Last version of policycoreutils using Fedora only API

[Laurent Bigonville]

Le Thu, 23 May 2013 07:30:18 +0200,
Sven Vermeulen <sven.vermeulen@siphos.be> a écrit :

> On May 23, 2013 1:09 AM, "Laurent Bigonville" <bigon@debian.org>
> wrote:
> > The last release of policycoreutils is using a function
> > (selinux_current_policy_path()) that is only available in Fedora. I
> > guess this shouldn't have made upstream.
> >
> > An idea how this could be sorted for other distributions?
> 
> Please see my answer to Joshua's announcement on the new userspace.

Oh thanks, I messed this.

> You'll need to add in the function. 

Well I'm not a big fan of adding function in libraries that are not
merged upstream. IIRC eparis told me on IRC that he has not happy with
this new functions.

Is this (or a reworked) function planned to be merged?

> There is also a dependency on yum Python bindings that you might
> need to remove, and depending on your directory structure you might
> need a /etc/selinux/sepolgen.conf (iirc) that defines where to find
> the refpolicy Makefile.

Cheers

Laurent Bigonville


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: Last version of policycoreutils using Fedora only API

[Stephen Smalley]

On 05/23/2013 03:57 AM, Laurent Bigonville wrote:
> Le Thu, 23 May 2013 07:30:18 +0200,
> Sven Vermeulen <sven.vermeulen@siphos.be> a écrit :
>
>> On May 23, 2013 1:09 AM, "Laurent Bigonville" <bigon@debian.org>
>> wrote:
>>> The last release of policycoreutils is using a function
>>> (selinux_current_policy_path()) that is only available in Fedora. I
>>> guess this shouldn't have made upstream.
>>>
>>> An idea how this could be sorted for other distributions?
>>
>> Please see my answer to Joshua's announcement on the new userspace.
>
> Oh thanks, I messed this.
>
>> You'll need to add in the function.
>
> Well I'm not a big fan of adding function in libraries that are not
> merged upstream. IIRC eparis told me on IRC that he has not happy with
> this new functions.

Maybe we should back out the relevant changes and cut another release?
I agree that it is wrong for an upstream release to have Fedora-specific 
dependencies.



--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: Last version of policycoreutils using Fedora only API

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 05/23/2013 08:10 AM, Stephen Smalley wrote:
> On 05/23/2013 03:57 AM, Laurent Bigonville wrote:
>> Le Thu, 23 May 2013 07:30:18 +0200, Sven Vermeulen
>> <sven.vermeulen@siphos.be> a ￩crit :
>> 
>>> On May 23, 2013 1:09 AM, "Laurent Bigonville" <bigon@debian.org> 
>>> wrote:
>>>> The last release of policycoreutils is using a function 
>>>> (selinux_current_policy_path()) that is only available in Fedora. I 
>>>> guess this shouldn't have made upstream.
>>>> 
>>>> An idea how this could be sorted for other distributions?
>>> 
>>> Please see my answer to Joshua's announcement on the new userspace.
>> 
>> Oh thanks, I messed this.
>> 
>>> You'll need to add in the function.
>> 
>> Well I'm not a big fan of adding function in libraries that are not 
>> merged upstream. IIRC eparis told me on IRC that he has not happy with 
>> this new functions.
> 
> Maybe we should back out the relevant changes and cut another release? I
> agree that it is wrong for an upstream release to have Fedora-specific 
> dependencies.
> 
> 
> 
> -- This message was distributed to subscribers of the selinux mailing
> list. If you no longer wish to subscribe, send mail to
> majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes
> as the message.
Yes this was a mistake.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iEYEARECAAYFAlGeC/IACgkQrlYvE4MpobO9eQCg4nKtXkiv/rEIaCeDw8bOH0n/
9GUAnji3pwYR6v9YeIzyR51Imj6RSWSM
=xXXJ
-----END PGP SIGNATURE-----


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: Last version of policycoreutils using Fedora only API

[Joshua Brindle]

What were the relevant git hashes?


On Thu, May 23, 2013 at 8:30 AM, Daniel J Walsh <dwalsh@redhat.com> wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On 05/23/2013 08:10 AM, Stephen Smalley wrote:
>> On 05/23/2013 03:57 AM, Laurent Bigonville wrote:
>>> Le Thu, 23 May 2013 07:30:18 +0200, Sven Vermeulen
>>> <sven.vermeulen@siphos.be> a ￩crit :
>>>
>>>> On May 23, 2013 1:09 AM, "Laurent Bigonville" <bigon@debian.org>
>>>> wrote:
>>>>> The last release of policycoreutils is using a function
>>>>> (selinux_current_policy_path()) that is only available in Fedora. I
>>>>> guess this shouldn't have made upstream.
>>>>>
>>>>> An idea how this could be sorted for other distributions?
>>>>
>>>> Please see my answer to Joshua's announcement on the new userspace.
>>>
>>> Oh thanks, I messed this.
>>>
>>>> You'll need to add in the function.
>>>
>>> Well I'm not a big fan of adding function in libraries that are not
>>> merged upstream. IIRC eparis told me on IRC that he has not happy with
>>> this new functions.
>>
>> Maybe we should back out the relevant changes and cut another release? I
>> agree that it is wrong for an upstream release to have Fedora-specific
>> dependencies.
>>
>>
>>
>> -- This message was distributed to subscribers of the selinux mailing
>> list. If you no longer wish to subscribe, send mail to
>> majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes
>> as the message.
> Yes this was a mistake.
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.13 (GNU/Linux)
> Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
>
> iEYEARECAAYFAlGeC/IACgkQrlYvE4MpobO9eQCg4nKtXkiv/rEIaCeDw8bOH0n/
> 9GUAnji3pwYR6v9YeIzyR51Imj6RSWSM
> =xXXJ
> -----END PGP SIGNATURE-----


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: Last version of policycoreutils using Fedora only API

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 05/23/2013 08:36 AM, Joshua Brindle wrote:
> What were the relevant git hashes?
> 
> 
> On Thu, May 23, 2013 at 8:30 AM, Daniel J Walsh <dwalsh@redhat.com> wrote: 
> On 05/23/2013 08:10 AM, Stephen Smalley wrote:
>>>> On 05/23/2013 03:57 AM, Laurent Bigonville wrote:
>>>>> Le Thu, 23 May 2013 07:30:18 +0200, Sven Vermeulen 
>>>>> <sven.vermeulen@siphos.be> a ￩crit :
>>>>> 
>>>>>> On May 23, 2013 1:09 AM, "Laurent Bigonville" <bigon@debian.org> 
>>>>>> wrote:
>>>>>>> The last release of policycoreutils is using a function 
>>>>>>> (selinux_current_policy_path()) that is only available in
>>>>>>> Fedora. I guess this shouldn't have made upstream.
>>>>>>> 
>>>>>>> An idea how this could be sorted for other distributions?
>>>>>> 
>>>>>> Please see my answer to Joshua's announcement on the new
>>>>>> userspace.
>>>>> 
>>>>> Oh thanks, I messed this.
>>>>> 
>>>>>> You'll need to add in the function.
>>>>> 
>>>>> Well I'm not a big fan of adding function in libraries that are
>>>>> not merged upstream. IIRC eparis told me on IRC that he has not
>>>>> happy with this new functions.
>>>> 
>>>> Maybe we should back out the relevant changes and cut another
>>>> release? I agree that it is wrong for an upstream release to have
>>>> Fedora-specific dependencies.
>>>> 
>>>> 
>>>> 
>>>> -- This message was distributed to subscribers of the selinux
>>>> mailing list. If you no longer wish to subscribe, send mail to 
>>>> majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without
>>>> quotes as the message.
> Yes this was a mistake.

Lets wait for Eric to chime in and get this resolved.  We have a ton of new
patches that I would also like to get upstream.  :^)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iEYEARECAAYFAlGeDwIACgkQrlYvE4MpobPd6ACgmU/OGZnyAh+Cvt38qB0SkBf5
W58AoJKGMgJZ0nHe5Xu49FeVsvT8EaPA
=VC28
-----END PGP SIGNATURE-----


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.