On 11/6/25 12:52, Daniel P. Berrangé via Devel wrote: > From: Daniel P. Berrangé <[email protected]> > > In RHEL and Fedora, the built-in GNUTLS default priority is changed > from "NORMAL" to "@SYSTEM", but because libvirt sets an explicit > policy with gnutls we don't honour that. Instead we force "NORMAL" > unless the 'tls_priority' meson option is changed. > > In RPM builds, meanwhile, we ask for "@LIBVIRT,SYSTEM" to make it > look for a libvirt specific profile first, falling back to "@SYSTEM" > > This changes the meson option to default to "@LIBVIRT,SYSTEM" if the > crypto-policies config is present on the local machine and the meson > option -Dsystem=true is given. > > This gives developers more appropriate default behaviour, matching > that seen in package builds. > > Signed-off-by: Daniel P. Berrangé <[email protected]> > --- > meson.build | 13 ++++++++++++- > meson_options.txt | 2 +- > 2 files changed, 13 insertions(+), 2 deletions(-) >
Reviewed-by: Michal Privoznik <[email protected]> Michal
