From: cpebenito@tresys.com (Christopher J. PeBenito)
Date: Wed, 14 Sep 2011 08:19:00 -0400
Subject: [refpolicy] ANN: Reference Policy contrib repository
In-Reply-To: <4E6FCBC4.6030403@gmail.com>
References: <4E6A3225.2090502@tresys.com> <4E6FCBC4.6030403@gmail.com>
Message-ID: <4E709BB4.8060800@tresys.com>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

On 09/13/11 17:31, Dominick Grift wrote:
> Op 9-9-2011 17:35, Christopher J. PeBenito schreef:
>> The core modules are critical modules on the system.  This includes all of the kernel layer, most of the system and roles layers, some admin modules, such as bootloader, su, and sudo, and userspace object managers.  It is possible to build a policy using only the core modules.  It is important to ensure these modules are well reviewed to ensure quality, so Reference Policy can be used as a base for both general-purpose systems (e.g. Linux distributions) and custom systems.  All remaining modules were moved to the contrib repository.  An important thing to note is that in the future, modules may move between core and contrib as necessary.
> 
> I like this, although i would prefer the core to be only the base
> modules (kernel layer) but it will not build without atleast a user,
> which is a pity.

This split was chosen because very few systems, if any, build their policy starting with only the kernel layer.

-- 
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com