[patch] optional -lsepol

[Bernhard Fischer]

On Tue, Jun 05, 2007 at 04:08:26PM +0900, Yuichi Nakamura wrote:
>Hi.
>
>If you configured ENABLE_SELINUX, and enabled SELinux applets,  libsepol is linked.
>However, current SELinux applets do not use libsepol.
>In addition, size of libsepol is big, so it is better not to link it by default.
>I prepared CONFIG_SELINUX_SEPOL(by default n).
>When it is enabled, libsepol is linked.
>
>Please see attached file.

Perhaps it would be better to flag sepol --as-needed

We currently would need to flag some debugging libraries add-needed
(dmalloc, efence et al). Then we could add optional libs as-needed or
provide means to trylink which only pulls in OPTIONAL_LIBS if they
satisfy unresolved syms.

Comments?