[postgis-devel] 3.4 Meet To Do - NOTE to packagers

[Sebastiaan Couwenberg]

On 6/19/23 21:40, Paul Ramsey wrote:
> Does Debian get used with SELinux at all?

AppArmor is the default MAC in Debian.

SELinux is only used if the admin chooses to install it.

> How would flipping PROJ_NETWORK to “on” work in that case?
> Is doing the network pull considered
> - “something the library is allowed to do if turned on” or
> - “no you cannot do that, that would be dumb”.
RHEL uses SELinux by default, the Fedora package does not include an 
SELinux policy, so it likely works out of the box.

Should be easy enough to test with a minimal Oracle Linux/Rocky 
Linux/AlmaLinux install with proj from EPEL.

EPEL has PROJ 6.3.2 for RHEL 8, and 8.2.20 for RHEL 9.

Fedora 37 and later have PROJ 9:

  https://src.fedoraproject.org/rpms/proj

Kind Regards,

Bas

-- 
  GPG Key ID: 4096R/6750F10AE88D4AF1
Fingerprint: 8182 DE41 7056 408D 6146  50D1 6750 F10A E88D 4AF1