On Mon, 2007-04-23 at 11:48 -0400, Karl MacMillan wrote: > Glib, on the other hand, would provide everything that we need. In fact, > gobject is a perfect fit for the policy object abstraction that I > created with many advantages (including support for exporting the > objects to other languages like python). > > The Pros of using glib: > * All the data structures that we need. > * Better tested foundation. > * Safe string functions. > * Familiar environment for many developers. > * Complete object-oriented layer for the policy rep. > * Easy export to Python and other languages. > * Our code gets much smaller (libsemanage in particular could shrink if > we used glib). > > The Cons: > * Large dependency. > * Potential security issues in glib (not certain this is a real issue, > but glib is fairly big). > * Glib tends to be slightly verbose and boilerplate heavy. I'm pretty sure glib is used in a few security relevant places, so I doubt that's a problem. The "dependency" argument just seems like normal C programmer twitchyness ... glib is at least as portable as what we'd use it in and is included in pretty much every distro. The only real problem I've ever had with glib is that calling g_new() calls abort() on failure (and by extension so does everything that allocates in glib). This also tends to mean that glib code allocates much more freely than normal C code. But if you can swallow the allocation death pill, it's hard to argue against glib ... IMO. -- James Antill