From: cpebenito@tresys.com (Christopher J. PeBenito) Date: Thu, 17 Dec 2015 13:52:29 -0500 Subject: [refpolicy] Use of distro_rhel6/7 in refpolicy In-Reply-To: <20151217171148.GA26674@x250> References: <20151217171148.GA26674@x250> Message-ID: <5673046D.7030404@tresys.com> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com On 12/17/2015 12:11 PM, Dominick Grift wrote: > On Thu, Dec 17, 2015 at 12:00:14PM -0500, Mike Palmiotto wrote: >> It appears that the major-version-specific redhat ifdefs were >> abandoned as of 6624f9cf7a3cdc3deb19ca680f559011a75e5e9f, in favor of >> generic distro names. Considering the fact that there are some major >> differences between RHEL6 and RHEL7, I wonder if it would be >> worthwhile to re-introduce major version numbers. It seems like >> current efforts have been using 'init_systemd,' but that doesn't seem >> appropriate for non-systemd policy. > > I suspect "init_systemd" is probably the most accurate identifier you > one can have in this case. > > systemd is not a RH specific technology even though it is heavily > influenced by RH. Thus using "distro_rhel7" to indicate systemd seems > like a bit of a stretch. Agreed. >> Is there a particular reason why we wouldn't want to be more specific >> with the distro ifdefs? There was a rhel4 distro build option in the past to restore some rules that were removed in newer distributions due to functional changes. I'm not opposed to versioned distro options but am reluctant to accept them unless their value is clear. -- Chris PeBenito Tresys Technology, LLC www.tresys.com | oss.tresys.com