I agree with Metthew.
In dssp5-debian I take this even further and I generally prefer to use
extend over optional where possible.
I only use optional if both module do not depend on eachother.
I do this for various reasons (aside from what Matthew mentioned)
* Keeps the output of semodule -vvv cleaner if you disable modules
* I try to avoid optional because of its limitations
* Keeps the policy and file_contexts cleaner/more efficient when you disable modules
--
gpg --locate-keys [email protected]
Key fingerprint = FCD2 3660 5D6B 9D27 7FC6 E0FF DA7E 521F 10F6 4098
Dominick Grift