[MIR] libselinux1

[Robert Ancell]

Many applications have Flatpak integration using libflatpak. The Ubuntu desktop team would like libflatpak in main so we can easily build such applications (LP: #1812456). libselinux is a dependency of this, so it would also need to be in main. We don't need SELinux functionality, and do not expect any other SELinux packages to be installed by default.

Availability
============
In Universe, builds for all architectures and in sync with Debian.

Rationale
=========
Required for libostree-1-1 being in main (LP: #1892454)

Security
========
This will need a Security review.

Quality Assurance
=================
Should be subscribed to by Ubuntu Desktop Bugs.

Contains a single .so and doesn't have any debconf prompts. Package is maintained in Debian. No major bugs in Debian or Ubuntu.

UI Standards
============
N/A

Dependencies
============
All in main.

Standards Compliance
====================
Package uses standards version 4.5.0.

Maintenance
===========
Actively developed upstream https://github.com/SELinuxProject/selinux.
Packages actively maintained in Debian.

Security Checks
===============
41 CVEs found in http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=selinux, but they seem to relate to actual SELinux functionality, not issues in libselinux.

[Seth Arnold (seth-arnold)]

libselinux1 has been in main for many years:

http://archive.ubuntu.com/ubuntu/pool/main/libs/libselinux/

Balint recently did some +1 work that mentioned libselinux: https://lists.ubuntu.com/archives/ubuntu-devel/2020-July/041095.html but I don't read that as suggesting that libselinux1 has been moved out of main.

The archives also don't show libselinux1 in universe:

http://archive.ubuntu.com/ubuntu/pool/universe/libs/libselinux/

Can you double-check my reasoning here?

Thanks

[Robert Ancell (robert-ancell)]

Oops, I thought it was in universe. This is not required then.