Block a user
Always install selinux modules regardless of selinuxenabled status
I'm not advocating for quick action here. I'm advocating for discussing this and fixing it in the right place 😉
Always install selinux modules regardless of selinuxenabled status
Yes, selinux should take care about selinux and we should only care that the module is installed. It's selinux's problem to handle how it should handle its policy and modules when enabled or…
Always install selinux modules regardless of selinuxenabled status
This entire section should not be in an if block. The %selinux* macros already have their own conditionals.
Always install selinux modules regardless of selinuxenabled status
It seems almost like a broken architecture of selinux if you can't just install config files and have them used when selinux is actually enabled. On the other hand, selinux breaks completely when…
Always install selinux modules regardless of selinuxenabled status
Always install selinux modules regardless of selinuxenabled status
The question here is, do we need to split the subpackage at all? Can we just run this registration on all systems instead?
The macro expands to
> rpm --eval %selinux_modules_install
…