Re: [PATCH] selinux-h: add stubs for selabel_open etc.

[Paul Eggert]

Yes, it's looking like great minds think alike.

The coreutils patch I had prepared is fancier than yours, though, as it caches 
the result of selabel_open and this should yield better performance.

I don't use SELinux either. From the look of the coreutils source it appears 
that the coreutils SELinux code has some issues (multiple FIXMEs and some other 
questionable stuff). I fixed one or two of the problems I found, but it would be 
better if someone who cares about SELinux would audit the coreutils SELinux code 
more carefully, as I'm pretty sure there are bugs in there, at least with 
respect to diagnostics that are not issued when they should be. Also, the 
attached patches could have introduced some bugs on SELinux.

At least these patches (which I just installed into coreutils) fix the broken 
build on Ubuntu 20.10 (also, on Solaris 10, which I found while doing a porting 
test of all this stuff).

0001-build-update-gnulib-submodule-to-latest.patch
Description: Text Data

0002-build-port-to-Solaris-10.patch
Description: Text Data

0003-maint-port-from-matchpathcon-to-selabel_lookup.patch
Description: Text Data