selinux policies should be packaged separately and handled on installation rather than in the kickstart
dwalsh suggested to build the selinux module during build and just install it in %post and pull it completely out of the -post ks script. That's a good reason why we should create the policy subpackage.
Mike, is there a reason why the ovirt policy is compiled and installed during post part of the KS file? I wonder if there are any constraints I have to take care of when pulling the policy into a separate package. Moving the module into a subpackage means that we will be building the module at buildtime (which is a good thing IMHO) and that we install it like a regular rpm.
No reason I can think of.
The following patch pulls out the selinux policy module compilation out of the post KS part into the node build process (actually into the package build process). The policy module is the installed during %install and activated during %post. http://gerrit.ovirt.org/14052