Re: [patch 1/3] libsemanage: genhomedircon replacement

[Eamon Walsh <ewalsh@tycho.nsa.gov>]

Karl MacMillan wrote:
> On Fri, 2007-06-22 at 12:58 -0400, Eamon Walsh wrote:
>> Karl MacMillan wrote:
>>> On Thu, 2007-06-21 at 16:54 -0400, Eamon Walsh wrote:
>>>
>>>>   I'm not a fan of the Python dependencies.
>>>>
>>> Why?
>> Here's a nice example of RPM hell, courtesy of our Python dependency.  I 
>> got this earlier in the year on one of my machines.
>>
>>
>> # yum -y upgrade
>> --> Running transaction check
>> --> Processing Dependency: gnutls-devel for package: libsoup-devel
>> --> Processing Dependency: python(abi) = 2.4 for package: audit-libs-python
>> --> Restarting Dependency Resolution with new changes.
>> --> Populating transaction set with selected packages. Please wait.
>> ---> Package gnutls-devel.i386 0:1.4.5-1 set to be updated
>> --> Running transaction check
>> --> Processing Dependency: python(abi) = 2.4 for package: audit-libs-python
>> --> Finished Dependency Resolution
>> Error: Missing Dependency: python(abi) = 2.4 is needed by package 
>> audit-libs-python
>>
> 
> Rawhide or a release? Was this during the move to 2.5?

It was upgrading across the 2.4/2.5 switch, not rawhide as I recall.  To 
answer James, this was just an example of a problem I ran into; I don't 
have any specific problems with the bindings.

> 
> Larger issue, though, is that any dependency could cause the same
> problem. I'm not convinced that what was likely a packaging error or yum
> error should prevent us from using the best tools for the job.
> 
> Again: I'm not totally against this. I'm just very concerned about the
> potential for problems in this code and the initial implementation
> confirmed all of those concerns. Is it possible to get this code correct
> in C? Sure. Is it likely for it to be correct initially and stay that
> way is the question.
> 
> Can I suggest a middle ground? Implement in C (or C++) but use a string
> library.

A library would be great, I'm still depressed about glib's 
abort-on-malloc making it unusable.  ustr was mentioned earlier as a 
possible library that could be used.


-- 
Eamon Walsh <ewalsh@tycho.nsa.gov>
National Security Agency

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.