[DSE-Dev] Re: openssh packages with updated selinux patch

Frans Pop elendil at planet.nl
Tue Oct 24 11:42:42 UTC 2006


On Tuesday 24 October 2006 07:19, Manoj Srivastava wrote:
>         No, it is not. The configure patch:
>
>  ensures that LIBSELINUX expands to -lselinux only on machines where
>  it is available, not otherwise.
>
>         Unless you are saying that the configure.ac patch is broken,
>  in which case please supply a log of the regenerated configure script
>  showing that it fails.

AFAICT the argument is that selinux should not be hard linked at all. 
Having openssh require selinux libs is unwanted overhead for the 
installer.

A solution should be found so that selinux will only be used if it is 
available _at runtime_, as was already done for some other libs that also 
produce udebs.

See for comparison:
http://bugs.debian.org/318115
http://bugs.debian.org/375413

Alternatively the udebs could be compiled separately without selinux 
support.

Cheers,
FJP
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.alioth.debian.org/pipermail/selinux-devel/attachments/20061024/32488b09/attachment.pgp


More information about the SELinux-devel mailing list