[Buildroot] [PATCH 4/4] package/selinux-python: always build sepolgen

[Thomas Petazzoni]

Hello,

On Thu, 10 Oct 2019 00:06:41 +0200
"Arnout Vandecappelle (Essensium/Mind)" <arnout at mind.be> wrote:

> The selinux-python package has two suboptions, audit2allow and sepolgen.
> If neither of them is selected, nothing gets installed, which is not so
> nice. Since audit2allow selects sepolgen, sepolgen will always be
> installed if anything is installed. Therefore, it makes no sense to have
> a separate option for sepolgen.

That does not take into account the fact that our Buildroot package
does not install everything that selinux-python provides.

selinux-python provides:

 - audit2allow, a bunch of Python tools that use the sepolgen Python
   module, provided by the same package

 - chcat, a standalone Python that uses libselinux + semanage (it seems)

 - semanage, a Python tool that uses sepolicy and provides the seobject
   module used by chcat

 - sepolgen, a Python module used by audit2allow

 - sepolicy, a Python module used by semanage

As you can see, there's much more than audit2allow and sepolgen in this
package, even though those additional things are not installed today.

Therefore, I think it makes sense to keep separate options for the
different components, especially because it maps with the top-level
directories of selinux-python:

$ ls
audit2allow  chcat  COPYING  Makefile  semanage  sepolgen  sepolicy  VERSION

Best regards,

Thomas
-- 
Thomas Petazzoni, CTO, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com