[refpolicy3 RFC] Split broad file contexts
Dominick Grift <[email protected]> Thu, 23 Mar 2023 16:06:09 +0100
| Newsgroups | org.kernel.vger.selinux-refpolicy |
|---|---|
| Message-ID | <[email protected]> |
I agree with Metthew. In dssp5-debian I take this even further and I generally prefer to use extend over optional where possible. I only use optional if both module do not depend on eachother. I do this for various reasons (aside from what Matthew mentioned) * Keeps the output of semodule -vvv cleaner if you disable modules * I try to avoid optional because of its limitations * Keeps the policy and file_contexts cleaner/more efficient when you disable modules -- gpg --locate-keys [email protected] Key fingerprint = FCD2 3660 5D6B 9D27 7FC6 E0FF DA7E 521F 10F6 4098 Dominick Grift