Bug 1700496

Summary: flatpak-selinux requires policycoreutils-python (ambiguous Python)
Product: [Fedora] Fedora Reporter: Miro Hrončok <mhroncok>
Component: flatpakAssignee: David King <amigadave>
Status: CLOSED RAWHIDE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: rawhideCC: amigadave, igor.raits
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: flatpak-1.3.2-2.fc31 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2019-04-18 19:17:47 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Miro Hrončok 2019-04-16 18:04:51 UTC
Description of problem:
flatpak added:

Requires(post): policycoreutils
Requires(post): policycoreutils-python
Requires(postun): policycoreutils-python

https://src.fedoraproject.org/rpms/flatpak/c/b6456a51bb98ec1bd6b6dbdc5bcc46bad2f1930a?branch=master

policycoreutils-python is ambiguous. flatpak should require one of the following:

python3-policycoreutils if it works with Python 3
python2-policycoreutils if it needs Python 2 (a fesco/fpc exception would be needed)
policycoreutils-python-utils if you need any of:
  /usr/bin/audit2allow
  /usr/bin/audit2why
  /usr/bin/chcat
  /usr/bin/sandbox
  /usr/sbin/semanage

Or, require the thing you need directly.

It seems that the requires were added together with %selinux_modules_install and %selinux_modules_uninstall. Those need:

/etc/selinux/config (selinux-policy)
/usr/sbin/semodule (policycoreutils)
/usr/sbin/selinuxenabled (libselinux-utils)
/usr/sbin/load_policy (policycoreutils)

I don't see why you need policycoreutils-python.

Version-Release number of selected component (if applicable):
flatpak-1.3.2-1.fc31