On Wednesday 26 August 2009 05:08:09 Manoj Srivastava wrote: > > - selinux is only used a by very low percentage of our users > > But it is enabled in vompiled in by default in mainstrean > Debian, and if upstart wants to get into Debian, perhaps it should > follow Debian conventions
Of course another option is to have SE Linux packages depend on sysvinit. Another possibility is to have a shell script wrapper for /sbin/init which loads the policy and runs the real init. I've implemented this before, but the consensus of opinion was that a patch to the code was a better option. > > - linking against selinux means the list of dependencies increases, which > > increases the potential for failures. I try to keep the dependencies > > as minimal as possible. > > Adding a dependency on an initramfs is then a fail. None of my > non-laptop machines use an initramfs, and so upstart can't be used > without adding restrictions that DXebian has so far not added to the > install. Also it should be noted that using nash to do this in Fedora uses less resources than adding extra scripts that are conditionally included. > > - I don't see a good reason to patch each and every /sbin/init if we > > can just add support in one place, i.e. the initramfs Let's not get stuck on this "each and every" thing. The correct term is "both", and we have patches for both of them. -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]
