Bug #49034: loosen or drop selinux-policy version requirement - devops - Ceph

Actions

Copy link

Bug #49034

closed

loosen or drop selinux-policy version requirement

Added by Ken Dreyer about 3 years ago. Updated about 3 years ago.

Status:

Won't Fix

Priority:

Normal

Assignee:

Category:

Target version:

% Done:

Source:

Tags:

Backport:

Regression:

Severity:

3 - minor

Reviewed:

Affected Versions:

ceph-qa-suite:

Pull request ID:

Crash signature (v1):

Crash signature (v2):

Description

The ceph-selinux subpackage always requires the latest version of CentOS or RHEL that we built against.

Requires(post): selinux-policy-base >= %{_selinux_policy_version}

Many other projects that ship their own SELinux policy subpackage cargo-cult this same thing. In fact Fedora has a packaging draft that recommends it, https://fedoraproject.org/wiki/SELinux_Policy_Modules_Packaging_Draft (the Fedora Packaging Committee was never ratified it).

This causes problems in two scenarios:

If we build Ceph on CentOS Stream, the ceph-selinux package will be uninstallable on RHEL.
If we build Ceph on the latest RHEL 8, the ceph-selinux package package will be uninstallable on RHEL EUS.

I'm opening this ticket to see how we can loosen or drop the exact version requirement on selinux-policy-base.