| Message ID | 20240719191616.2795633-1-alejandro@enedino.org |
|---|---|
| State | New |
| Headers | show |
| Series | policycoreutils: fix packaging for sestatus binary | expand |
diff --git a/recipes-security/selinux/policycoreutils_3.7.bb b/recipes-security/selinux/policycoreutils_3.7.bb index 2871de0..9e59c4b 100644 --- a/recipes-security/selinux/policycoreutils_3.7.bb +++ b/recipes-security/selinux/policycoreutils_3.7.bb @@ -92,6 +92,7 @@ FILES:${PN}-secon = "${bindir}/secon" FILES:${PN}-semodule = "${base_sbindir}/semodule" FILES:${PN}-hll = "${prefix}/libexec/selinux/hll/*" FILES:${PN}-sestatus = "\ + ${bindir}/sestatus \ ${base_sbindir}/sestatus \ ${sysconfdir}/sestatus.conf \ "
sestatus is provided as ${base_sbindir}/sestatus which is currently packaged into PN-sestatus, however, this is only a symlink to the binary located in ${bindir}/sestatus. This causes that when runtime dependencies are calculated, bitbake properly detects a dependency from policycoreutils-sestatus to the main policycoreutils package. Hence the policycoreutils-sestatus package has no usability by itself, this has several implications, but one of them means that it recursively pulls all runtime dependencies, making policycoreutils-sestatus require everything that the main policycoreutils package RDEPENDS on, including python3. By correctly splitting these packages, an image that RDEPENDS only on policycoreutils-sestatus decreases its size by about ~13MB. Signed-off-by: Alejandro Enedino Hernandez Samaniego <alejandro@enedino.org> --- recipes-security/selinux/policycoreutils_3.7.bb | 1 + 1 file changed, 1 insertion(+)