What were you trying to do that didn't work?

Installing selinux-policy-automotive pulls in additional dependencies compared to selinux-policy-targeted, extending the footprint of all automotive deployments.

What is the impact of this issue to you?

As a result, Python is also pulled in, significantly expanding automotive safety scope and, potentially, attack surface.

Please provide the package NVR for which the bug is seen:

selinux-policy-38.1.53-2.el9

How reproducible is this bug?:

Always

Steps to reproduce

1. Install selinux-policy-automotive in a minimal automotive environment, compare the resulting installed package set to that of installing selinux-policy targeted instead.
2. Notice the difference, notably policycoreutils-python-utils and its dependencies being pulled in.

Expected results

policycoreutils-python-utils and its dependencies are installed.

Actual results

policycoreutils-python-utils and its dependencies are NOT installed.