[HEADS UP] libselinux golang bindings will be dropped from Rawhide

[Petr Lautrbach]

Hi,

libselinux golang bindings [1] haven't been touched since 2014, have
never been upstreamed, nothing requires/uses them in Fedora and since
there's another SELinux golang bindings maintained by opencontainers [2]
I'm going to drop them from Fedora Rawhide.

[1] https://github.com/fedora-selinux/selinux/tree/master/libselinux/golang
[2] https://github.com/opencontainers/selinux

Thanks,

Petr

[Neal Gompa]

On Tue, Oct 10, 2017 at 5:49 AM, Petr Lautrbach  wrote:
> Hi,
>
> libselinux golang bindings [1] haven't been touched since 2014, have
> never been upstreamed, nothing requires/uses them in Fedora and since
> there's another SELinux golang bindings maintained by opencontainers [2]
> I'm going to drop them from Fedora Rawhide.
>
> [1] https://github.com/fedora-selinux/selinux/tree/master/libselinux/golang
> [2] https://github.com/opencontainers/selinux

Why not merge that implementation into libselinux itself and make that
available?

For what it's worth, Zygmunt (CC'd to this email) has been working on
adding SELinux support to snapd, which necessitates using Go bindings
for libselinux. It'd be great if there was an officially supported set
of Go bindings that can be leveraged and enhanced as needed.

[Zygmunt Krynicki]

As it's too early to tell which way we'll go with SELinux and golang I
think it's okay to drop this. Once we start to make some progress into
making any policy work in snapd we'll either revive this or use a
maintained package.

Best regards
ZK

[Petr Lautrbach]

On Tue, Oct 10, 2017 at 05:06:02PM +0200, Zygmunt Krynicki wrote:
> As it's too early to tell which way we'll go with SELinux and golang I
> think it's okay to drop this. Once we start to make some progress into
> making any policy work in snapd we'll either revive this or use a
> maintained package.

According to selinux.go [1] the initial motivation for this
implementation was to add selinux support to docker but this is
maintained by opencontainers now.

Because there are python and ruby bindings in libselinux already, it
would make sense to have also golang bindings if there's any demand.
However, the current implementation needs to be updated and reviewed
before it can be proposed upstream. But I'm not familiar with GO.

So for now, I moved golang bindings to golang-bindings branch [2]
and I will drop it from master branch. It will not be part of the next
libselinux-devel build in Rawhide.

[1] https://github.com/fedora-selinux/selinux/blob/golang-bindings/libselinux/go...
[2] https://github.com/fedora-selinux/selinux/tree/golang-bindings

Petr