[DSE-Dev] Work in progress on the refpolicy package

Laurent Bigonville bigon at debian.org
Sat May 25 10:36:42 UTC 2013

Le Mon, 6 May 2013 14:49:33 +0200,
Laurent Bigonville <bigon at debian.org> a écrit :

> Hi guys,

Hello again,

> This is just to let you know that I'm currently working (well I've
> resumed my work) on rewriting the build system of the refpolicy
> package (the last one that is still not using debhelper).

I've finished to rework the build system of the refpolicy package.


 - Drop the old build system and replace it by dh7 based debian/rules.
   All the rules are now in one file which is way better IMHO for
 - The .pp files are now compressed with bz2. The installed size
   went from 50M down to around 3M(!). semodule can load these
   compressed modules. I've also modified the postinstall script to
   load the .bz2 modules.

My goal here was to have generated packages that were more or less
exactly the same as the one currently in the archive.

We could do more modifications in the future. Two things that comes into
my mind:

 - The -dev package is shipping twice the same files, in fedora they
   are shipping only once the .if files and use a Makefile to figure out
   if the user wants to compile modules for the mcs or mls policy. I
   guess we could do the same in debian. (They put everything
   in /usr/share/selinux/devel)
 - The tarball in the -src pkg is containing a dangling symlink, that's
   probably a bug that should be addressed. I'm just not really sure
   what was the intents here.

I'm also thinking about cleaning up the really old conflicts, any
reasons they should stay?

You can find the code at:

If you could have a look and tell me if there is something wrong. I'm
planning to upload this in a week or so.


Laurent Bigonville

More information about the SELinux-devel mailing list