[Rpm-maint] [RFC PATCH 0/3] New %policy directive

Steve Lawrence slawrence at tresys.com
Thu Sep 10 19:33:06 UTC 2009


The current %policy directive does not allow for storing any information 
about a policy other than its contents. More information, such as name and 
policy type, is required to fully integrate SELinux policy into rpm. Modifying 
the existing %policy directive would be inflexible, verbose, and prone to 
errors by packagers. This patchset removes the existing %policy directive from
the %files section and replaces it with a new %policy directive that is both 
flexible and straightforward. A full description of the new directive is in the
3rd patch.

This patchset does not add the ability to install policy. It only modifies the 
spec file format and adds new information to rpm headers. To install policy using
this new spec format, you can apply our previous patchset [1] without the test
sources and spec file patch.

[1] http://lists.rpm.org/pipermail/rpm-maint/2009-September/002502.html

- Steve

Steve Lawrence (3):
  Remove existing %policy directive
  Add test sources and spec file for %policy
  Add new %policy section to the spec file format

 build/Makefile.am                             |    4 +-
 build/build.c                                 |    4 +
 build/files.c                                 |   14 +-
 build/parsePolicies.c                         |   88 ++++++
 build/parseSpec.c                             |    5 +
 build/policies.c                              |  402 +++++++++++++++++++++++++
 build/rpmbuild.h                              |   18 +-
 build/rpmspec.h                               |    1 +
 build/spec.c                                  |    2 +
 lib/rpmfi.h                                   |    1 -
 lib/rpmtag.h                                  |    6 +
 tests/data/SOURCES/poltest-1.0.tar.bz2        |  Bin 0 -> 405 bytes
 tests/data/SOURCES/poltest-policy-1.0.tar.bz2 |  Bin 0 -> 555 bytes
 tests/data/SPECS/poltest.spec                 |   45 +++
 14 files changed, 574 insertions(+), 16 deletions(-)
 create mode 100644 build/parsePolicies.c
 create mode 100644 build/policies.c
 create mode 100644 tests/data/SOURCES/poltest-1.0.tar.bz2
 create mode 100644 tests/data/SOURCES/poltest-policy-1.0.tar.bz2
 create mode 100644 tests/data/SPECS/poltest.spec



More information about the Rpm-maint mailing list