SELinux distro building

["Joshua Brindle" <JBrindle@snu.edu>]

Hi, I'm trying to set up support for SELinux in Gentoo linux (a source
based distro with a ports system for installing everything). Basically
instead of delivering a prepackaged/compiled SELinux build it downloads
and compiles right then and installs. The problems are numerous though
and I kinda wanted your advice
1) it installs to /usr/local/selinux which is unacceptable, it needs to
go to /usr/selinux (thats easily taken care of by patches to the
Makefiles which i already did)
2) when compiling the selinux archive it needs libsecure to already be
installed (and to have copied the .h files from the lsm kernel) before
the policy compiler can be built. This is a problem because the ports
system wants to compile everything, install it to a fake root so that it
can enumerate the files for uninstallation, then copy them to the file
system.
3) the Makefiles do not respect INSTALLPREFIX (which i also patched
for, but it's dirty) because we *must* install to the fake root before
installing to the filesystem, otherwise the sandbox kills it for
permissions (which is it supposed to do)

it seems to me that the entire archive package desperatly needs a
configure system so that it will be a little more flexible. What is your
opinion on this?
Also, i haven't looked at the debian builds since i don't have any
debian machines but how did you handle these problems, or did you? 

Thanks for any information you can give me.


Joshua Brindle
UNIX Administrator
Southern Nazarene University

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.