Re: [CentOS-devel] Making the redhat selinux-policy repository publicly available
Zdenek Pytela <[email protected]> Wed, 12 Jul 2023 16:15:23 +0200
| Newsgroups | gmane.linux.redhat.fedora.selinux,gmane.linux.centos.devel |
|---|---|
| Message-ID | <CAO4UijAQ8yFUsPU_8vzt-4NraYhTj2OvysV6MPCb1pU7ewakpQ@mail.gmail.com> |
--===============5822341410017280741== Content-Type: multipart/alternative; boundary="000000000000765ff106004ad907" --000000000000765ff106004ad907 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Tue, Jul 11, 2023 at 10:37=E2=80=AFPM Troy Dawson <[email protected]> w= rote: > On Tue, Jul 11, 2023 at 12:50=E2=80=AFPM Neal Gompa <[email protected]> = wrote: > >> On Tue, Jul 11, 2023 at 9:31=E2=80=AFAM Troy Dawson <[email protected]>= wrote: >> > >> > On Tue, Jul 11, 2023 at 4:28=E2=80=AFAM Daan De Meyer <daan.j.demeyer@= gmail.com> >> wrote: >> >> >> >> Hi, >> >> >> >> It seems that the selinux-policy rpm is built from >> >> [email protected]:SELinux/selinux-policy.git which seems to b= e >> >> a redhat internal repository. More specifically, if I try to checkout >> >> the commit listed in the selinux-policy spec >> >> ( >> https://gitlab.com/redhat/centos-stream/rpms/selinux-policy/-/blob/c9s/s= elinux-policy.spec#L3 >> ) >> >> in the fedora-selinux repository cloned from github, I get an error >> >> saying that the commit does not exist. It would be great if the >> >> repository containing this commit was publicly available and open for >> >> external contributors just like all the other packages in CentOS >> >> Stream. Is it possible to make this happen? >> > >> > >> > I'm not the selinux-policy maintainer, so I can't comment on where the= y >> work on the selinux-policy source code. >> > >> > But this is how I get the sources, if that is what you are ultimately >> looking for. >> > >> > centpkg clone selinux-policy >> > cd selinux-policy >> > centpkg sources >> > or if you want to know where they really are >> > centpkg -v sources >> > This shows it to be coming from >> > >> https://sources.stream.centos.org/sources/rpms/selinux-policy/selinux-po= licy-66a4b6e.tar.gz/sha512/797e746ccd271fe531a91b2639aed06447fb2720267dadba= 225989d81634b1fb7b2a4e78262612a41b6073f6e0eca358b8c274adc33630cd3f0db1390cd= 57767/selinux-policy-66a4b6e.tar.gz >> > >> > The sources information is found in the sources file >> > >> https://gitlab.com/redhat/centos-stream/rpms/selinux-policy/-/blob/c9s/s= ources >> > >> > I know this isn't exactly what you asked for, but I hope it still help= s. >> > >> >> I think the idea is that having the Git repository in a public >> location would allow the CentOS Hyperscale SIG to contribute to the >> SELinux policy in a meaningful way. >> > > Ah, ok. That makes sense. > As I said, I'm not the maintainer so I don't know why it's where it is. > So I'll step out of the conversation. > Hi, I am one of the selinux-policy maintainers. Currently, repository for Fedora is at github.com and RHEL sources are in an internal repo. We have already discussed moving centos stream sources to some of the public repositories, but it did not happen. Currently we are discussing it again, there are a few options how to do so. To get just the latest repository content, steps described by Troy should work. Additionally, most of the upstream work is done in Fedora and anyway every new commit should go to Fedora first, RHEL content is mostly a subset of Fedora, there are very few differences. --=20 Zdenek Pytela Security SELinux team --000000000000765ff106004ad907 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr"><div dir=3D"ltr"><br></div><br><div class=3D"gmail_quote">= <div dir=3D"ltr" class=3D"gmail_attr">On Tue, Jul 11, 2023 at 10:37=E2=80= =AFPM Troy Dawson <<a href=3D"mailto:[email protected]">tdawson@redhat.= com</a>> wrote:<br></div><blockquote class=3D"gmail_quote" style=3D"marg= in:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1e= x"><div dir=3D"ltr"><div dir=3D"ltr">On Tue, Jul 11, 2023 at 12:50=E2=80=AF= PM Neal Gompa <<a href=3D"mailto:[email protected]" target=3D"_blank">n= [email protected]</a>> wrote:<br></div><div class=3D"gmail_quote"><block= quote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1= px solid rgb(204,204,204);padding-left:1ex">On Tue, Jul 11, 2023 at 9:31=E2= =80=AFAM Troy Dawson <<a href=3D"mailto:[email protected]" target=3D"_b= lank">[email protected]</a>> wrote:<br> ><br> > On Tue, Jul 11, 2023 at 4:28=E2=80=AFAM Daan De Meyer <<a href=3D"m= ailto:[email protected]" target=3D"_blank">[email protected]<= /a>> wrote:<br> >><br> >> Hi,<br> >><br> >> It seems that the selinux-policy rpm is built from<br> >> [email protected]:SELinux/selinux-policy.git which seems t= o be<br> >> a redhat internal repository. More specifically, if I try to check= out<br> >> the commit listed in the selinux-policy spec<br> >> (<a href=3D"https://gitlab.com/redhat/centos-stream/rpms/selinux-p= olicy/-/blob/c9s/selinux-policy.spec#L3" rel=3D"noreferrer" target=3D"_blan= k">https://gitlab.com/redhat/centos-stream/rpms/selinux-policy/-/blob/c9s/s= elinux-policy.spec#L3</a>)<br> >> in the fedora-selinux repository cloned from github, I get an erro= r<br> >> saying that the commit does not exist. It would be great if the<br= > >> repository containing this commit was publicly available and open = for<br> >> external contributors just like all the other packages in CentOS<b= r> >> Stream. Is it possible to make this happen?<br> ><br> ><br> > I'm not the selinux-policy maintainer, so I can't comment on w= here they work on the selinux-policy source code.<br> ><br> > But this is how I get the sources, if that is what you are ultimately = looking for.<br> ><br> >=C2=A0 =C2=A0centpkg clone selinux-policy<br> >=C2=A0 =C2=A0cd selinux-policy<br> >=C2=A0 =C2=A0centpkg sources<br> > or if you want to know where they really are<br> >=C2=A0 =C2=A0centpkg -v sources<br> > This shows it to be coming from<br> > <a href=3D"https://sources.stream.centos.org/sources/rpms/selinux-poli= cy/selinux-policy-66a4b6e.tar.gz/sha512/797e746ccd271fe531a91b2639aed06447f= b2720267dadba225989d81634b1fb7b2a4e78262612a41b6073f6e0eca358b8c274adc33630= cd3f0db1390cd57767/selinux-policy-66a4b6e.tar.gz" rel=3D"noreferrer" target= =3D"_blank">https://sources.stream.centos.org/sources/rpms/selinux-policy/s= elinux-policy-66a4b6e.tar.gz/sha512/797e746ccd271fe531a91b2639aed06447fb272= 0267dadba225989d81634b1fb7b2a4e78262612a41b6073f6e0eca358b8c274adc33630cd3f= 0db1390cd57767/selinux-policy-66a4b6e.tar.gz</a><br> ><br> > The sources information is found in the sources file<br> > <a href=3D"https://gitlab.com/redhat/centos-stream/rpms/selinux-policy= /-/blob/c9s/sources" rel=3D"noreferrer" target=3D"_blank">https://gitlab.co= m/redhat/centos-stream/rpms/selinux-policy/-/blob/c9s/sources</a><br> ><br> > I know this isn't exactly what you asked for, but I hope it still = helps.<br> ><br> <br> I think the idea is that having the Git repository in a public<br> location would allow the CentOS Hyperscale SIG to contribute to the<br> SELinux policy in a meaningful way.<br></blockquote><div><br></div><div>Ah,= ok.=C2=A0 That makes sense.</div><div>As I said, I'm not the maintaine= r so I don't know why it's where it is.=C2=A0 So I'll step out = of the conversation.</div></div></div></blockquote><div><br></div><div>Hi,<= /div><div><br></div><div>I am one of the selinux-policy maintainers. Curren= tly, repository for Fedora is at <a href=3D"http://github.com">github.com</= a> and RHEL sources are in an internal repo. We have already discussed movi= ng centos stream sources to some of the public repositories, but it did not= happen. Currently we are discussing it again, there are a few options how = to do so.<br></div><div><br></div><div>To get just the latest repository co= ntent, steps described by Troy should work. Additionally, most of the upstr= eam work is done in Fedora and anyway every new commit should go to Fedora = first, RHEL content is mostly a subset of Fedora, there are very few differ= ences.<br></div></div><br><span class=3D"gmail_signature_prefix">-- </span>= <br><div dir=3D"ltr" class=3D"gmail_signature"><div dir=3D"ltr"><div><div d= ir=3D"ltr"><div><div dir=3D"ltr"><div><div dir=3D"ltr"><div><div dir=3D"ltr= "><div><div dir=3D"ltr"><div><div dir=3D"ltr"><br> Zdenek Pytela</div><div dir=3D"ltr">Security SELinux team</div></div></div>= </div></div></div></div></div></div></div></div></div></div></div></div> --000000000000765ff106004ad907-- --===============5822341410017280741== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18Kc2VsaW51eCBt YWlsaW5nIGxpc3QgLS0gc2VsaW51eEBsaXN0cy5mZWRvcmFwcm9qZWN0Lm9yZwpUbyB1bnN1YnNj cmliZSBzZW5kIGFuIGVtYWlsIHRvIHNlbGludXgtbGVhdmVAbGlzdHMuZmVkb3JhcHJvamVjdC5v cmcKRmVkb3JhIENvZGUgb2YgQ29uZHVjdDogaHR0cHM6Ly9kb2NzLmZlZG9yYXByb2plY3Qub3Jn L2VuLVVTL3Byb2plY3QvY29kZS1vZi1jb25kdWN0LwpMaXN0IEd1aWRlbGluZXM6IGh0dHBzOi8v ZmVkb3JhcHJvamVjdC5vcmcvd2lraS9NYWlsaW5nX2xpc3RfZ3VpZGVsaW5lcwpMaXN0IEFyY2hp dmVzOiBodHRwczovL2xpc3RzLmZlZG9yYXByb2plY3Qub3JnL2FyY2hpdmVzL2xpc3Qvc2VsaW51 eEBsaXN0cy5mZWRvcmFwcm9qZWN0Lm9yZwpEbyBub3QgcmVwbHkgdG8gc3BhbSwgcmVwb3J0IGl0 OiBodHRwczovL3BhZ3VyZS5pby9mZWRvcmEtaW5mcmFzdHJ1Y3R1cmUvbmV3X2lzc3VlCg== --===============5822341410017280741==--