libselinux: initial commit

4 files changed, 344 insertions, 0 deletions

diff --git a/libselinux/.footprint b/libselinux/.footprint
new file mode 100644
index 000000000..6b3ecc9c8
--- /dev/null
+++ b/libselinux/.footprint
@@ -0,0 +1,308 @@
+drwxr-xr-x	root/root	usr/
+drwxr-xr-x	root/root	usr/bin/
+-rwxr-xr-x	root/root	usr/bin/avcstat
+-rwxr-xr-x	root/root	usr/bin/compute_av
+-rwxr-xr-x	root/root	usr/bin/compute_create
+-rwxr-xr-x	root/root	usr/bin/compute_member
+-rwxr-xr-x	root/root	usr/bin/compute_relabel
+-rwxr-xr-x	root/root	usr/bin/compute_user
+-rwxr-xr-x	root/root	usr/bin/getconlist
+-rwxr-xr-x	root/root	usr/bin/getdefaultcon
+-rwxr-xr-x	root/root	usr/bin/getenforce
+-rwxr-xr-x	root/root	usr/bin/getfilecon
+-rwxr-xr-x	root/root	usr/bin/getpidcon
+-rwxr-xr-x	root/root	usr/bin/getsebool
+-rwxr-xr-x	root/root	usr/bin/getseuser
+-rwxr-xr-x	root/root	usr/bin/matchpathcon
+-rwxr-xr-x	root/root	usr/bin/policyvers
+-rwxr-xr-x	root/root	usr/bin/sefcontext_compile
+-rwxr-xr-x	root/root	usr/bin/selabel_digest
+-rwxr-xr-x	root/root	usr/bin/selabel_lookup
+-rwxr-xr-x	root/root	usr/bin/selabel_lookup_best_match
+-rwxr-xr-x	root/root	usr/bin/selabel_partial_match
+-rwxr-xr-x	root/root	usr/bin/selinux_check_access
+-rwxr-xr-x	root/root	usr/bin/selinux_check_securetty_context
+-rwxr-xr-x	root/root	usr/bin/selinuxenabled
+-rwxr-xr-x	root/root	usr/bin/selinuxexeccon
+-rwxr-xr-x	root/root	usr/bin/setenforce
+-rwxr-xr-x	root/root	usr/bin/setfilecon
+-rwxr-xr-x	root/root	usr/bin/togglesebool
+drwxr-xr-x	root/root	usr/include/
+drwxr-xr-x	root/root	usr/include/selinux/
+-rw-r--r--	root/root	usr/include/selinux/av_permissions.h
+-rw-r--r--	root/root	usr/include/selinux/avc.h
+-rw-r--r--	root/root	usr/include/selinux/context.h
+-rw-r--r--	root/root	usr/include/selinux/flask.h
+-rw-r--r--	root/root	usr/include/selinux/get_context_list.h
+-rw-r--r--	root/root	usr/include/selinux/get_default_type.h
+-rw-r--r--	root/root	usr/include/selinux/label.h
+-rw-r--r--	root/root	usr/include/selinux/restorecon.h
+-rw-r--r--	root/root	usr/include/selinux/selinux.h
+drwxr-xr-x	root/root	usr/lib/
+-rw-r--r--	root/root	usr/lib/libselinux.a
+lrwxrwxrwx	root/root	usr/lib/libselinux.so -> libselinux.so.1
+-rwxr-xr-x	root/root	usr/lib/libselinux.so.1
+drwxr-xr-x	root/root	usr/lib/pkgconfig/
+-rw-r--r--	root/root	usr/lib/pkgconfig/libselinux.pc
+drwxr-xr-x	root/root	usr/lib/python2.7/
+drwxr-xr-x	root/root	usr/lib/python2.7/site-packages/
+-rwxr-xr-x	root/root	usr/lib/python2.7/site-packages/_selinux.so
+drwxr-xr-x	root/root	usr/lib/python2.7/site-packages/selinux/
+-rw-r--r--	root/root	usr/lib/python2.7/site-packages/selinux/__init__.py
+-rwxr-xr-x	root/root	usr/lib/python2.7/site-packages/selinux/audit2why.so
+drwxr-xr-x	root/root	usr/lib/python3.7/
+drwxr-xr-x	root/root	usr/lib/python3.7/site-packages/
+-rwxr-xr-x	root/root	usr/lib/python3.7/site-packages/_selinux.cpython-37m-x86_64-linux-gnu.so
+drwxr-xr-x	root/root	usr/lib/python3.7/site-packages/selinux/
+-rw-r--r--	root/root	usr/lib/python3.7/site-packages/selinux/__init__.py
+-rwxr-xr-x	root/root	usr/lib/python3.7/site-packages/selinux/audit2why.cpython-37m-x86_64-linux-gnu.so
+drwxr-xr-x	root/root	usr/lib/ruby/
+drwxr-xr-x	root/root	usr/lib/ruby/vendor_ruby/
+drwxr-xr-x	root/root	usr/lib/ruby/vendor_ruby/2.6/
+drwxr-xr-x	root/root	usr/lib/ruby/vendor_ruby/2.6/x86_64-linux/
+-rwxr-xr-x	root/root	usr/lib/ruby/vendor_ruby/2.6/x86_64-linux/selinux.so
+drwxr-xr-x	root/root	usr/share/
+drwxr-xr-x	root/root	usr/share/man/
+drwxr-xr-x	root/root	usr/share/man/man3/
+-rw-r--r--	root/root	usr/share/man/man3/avc_add_callback.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/avc_audit.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/avc_av_stats.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/avc_cache_stats.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/avc_cleanup.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/avc_compute_create.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/avc_compute_member.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/avc_context_to_sid.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/avc_destroy.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/avc_entry_ref_init.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/avc_get_initial_context.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/avc_get_initial_sid.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/avc_has_perm.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/avc_has_perm_noaudit.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/avc_init.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/avc_netlink_acquire_fd.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/avc_netlink_check_nb.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/avc_netlink_close.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/avc_netlink_loop.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/avc_netlink_open.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/avc_netlink_release_fd.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/avc_open.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/avc_reset.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/avc_sid_stats.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/avc_sid_to_context.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/checkPasswdAccess.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/context_free.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/context_new.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/context_range_get.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/context_range_set.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/context_role_get.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/context_role_set.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/context_type_get.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/context_type_set.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/context_user_get.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/context_user_set.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/fgetfilecon.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/fgetfilecon_raw.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/fini_selinuxmnt.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/freecon.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/freeconary.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/fsetfilecon.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/fsetfilecon_raw.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/get_default_context.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/get_default_context_with_level.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/get_default_context_with_role.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/get_default_context_with_rolelevel.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/get_default_type.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/get_ordered_context_list.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/get_ordered_context_list_with_level.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/getcon.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/getcon_raw.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/getexeccon.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/getexeccon_raw.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/getfilecon.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/getfilecon_raw.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/getfscreatecon.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/getfscreatecon_raw.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/getkeycreatecon.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/getkeycreatecon_raw.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/getpeercon.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/getpeercon_raw.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/getpidcon.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/getpidcon_raw.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/getprevcon.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/getprevcon_raw.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/getseuserbyname.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/getsockcreatecon.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/getsockcreatecon_raw.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/init_selinuxmnt.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/is_context_customizable.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/is_selinux_enabled.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/is_selinux_mls_enabled.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/lgetfilecon.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/lgetfilecon_raw.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/lsetfilecon.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/lsetfilecon_raw.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/manual_user_enter_context.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/matchmediacon.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/matchpathcon.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/matchpathcon_checkmatches.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/matchpathcon_filespec_add.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/matchpathcon_filespec_destroy.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/matchpathcon_filespec_eval.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/matchpathcon_fini.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/matchpathcon_index.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/matchpathcon_init.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/mode_to_security_class.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/print_access_vector.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/query_user_context.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/rpm_execcon.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/security_av_perm_to_string.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/security_av_string.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/security_check_context.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/security_check_context_raw.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/security_class_to_string.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/security_commit_booleans.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/security_compute_av.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/security_compute_av_flags.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/security_compute_av_flags_raw.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/security_compute_av_raw.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/security_compute_create.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/security_compute_create_name.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/security_compute_create_name_raw.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/security_compute_create_raw.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/security_compute_member.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/security_compute_member_raw.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/security_compute_relabel.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/security_compute_relabel_raw.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/security_compute_user.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/security_compute_user_raw.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/security_deny_unknown.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/security_disable.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/security_get_boolean_active.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/security_get_boolean_names.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/security_get_boolean_pending.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/security_get_initial_context.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/security_get_initial_context_raw.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/security_getenforce.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/security_load_booleans.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/security_load_policy.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/security_mkload_policy.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/security_policyvers.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/security_reject_unknown.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/security_set_boolean.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/security_setenforce.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/selabel_close.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/selabel_digest.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/selabel_lookup.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/selabel_lookup_best_match.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/selabel_lookup_best_match_raw.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/selabel_lookup_raw.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/selabel_open.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/selabel_partial_match.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/selabel_stats.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/selinux_binary_policy_path.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/selinux_boolean_sub.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/selinux_booleans_path.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/selinux_check_access.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/selinux_check_passwd_access.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/selinux_check_securetty_context.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/selinux_colors_path.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/selinux_contexts_path.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/selinux_current_policy_path.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/selinux_default_context_path.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/selinux_default_type_path.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/selinux_failsafe_context_path.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/selinux_file_context_cmp.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/selinux_file_context_homedir_path.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/selinux_file_context_local_path.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/selinux_file_context_path.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/selinux_file_context_verify.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/selinux_getenforcemode.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/selinux_getpolicytype.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/selinux_homedir_context_path.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/selinux_init_load_policy.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/selinux_lsetfilecon_default.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/selinux_media_context_path.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/selinux_mkload_policy.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/selinux_netfilter_context_path.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/selinux_path.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/selinux_policy_root.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/selinux_raw_context_to_color.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/selinux_removable_context_path.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/selinux_restorecon.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/selinux_restorecon_default_handle.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/selinux_restorecon_set_alt_rootpath.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/selinux_restorecon_set_exclude_list.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/selinux_restorecon_set_sehandle.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/selinux_restorecon_xattr.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/selinux_securetty_types_path.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/selinux_set_callback.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/selinux_set_mapping.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/selinux_set_policy_root.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/selinux_status_close.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/selinux_status_deny_unknown.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/selinux_status_getenforce.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/selinux_status_open.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/selinux_status_policyload.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/selinux_status_updated.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/selinux_user_contexts_path.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/selinux_usersconf_path.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/selinux_x_context_path.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/set_matchpathcon_flags.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/set_matchpathcon_invalidcon.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/set_matchpathcon_printf.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/set_selinuxmnt.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/setcon.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/setcon_raw.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/setexeccon.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/setexeccon_raw.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/setfilecon.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/setfilecon_raw.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/setfscreatecon.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/setfscreatecon_raw.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/setkeycreatecon.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/setkeycreatecon_raw.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/setsockcreatecon.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/setsockcreatecon_raw.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/sidget.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/sidput.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/string_to_av_perm.3.gz
+-rw-r--r--	root/root	usr/share/man/man3/string_to_security_class.3.gz
+drwxr-xr-x	root/root	usr/share/man/man5/
+-rw-r--r--	root/root	usr/share/man/man5/booleans.5.gz
+-rw-r--r--	root/root	usr/share/man/man5/customizable_types.5.gz
+-rw-r--r--	root/root	usr/share/man/man5/default_contexts.5.gz
+-rw-r--r--	root/root	usr/share/man/man5/default_type.5.gz
+-rw-r--r--	root/root	usr/share/man/man5/failsafe_context.5.gz
+-rw-r--r--	root/root	usr/share/man/man5/file_contexts.5.gz
+-rw-r--r--	root/root	usr/share/man/man5/file_contexts.homedirs.5.gz
+-rw-r--r--	root/root	usr/share/man/man5/file_contexts.local.5.gz
+-rw-r--r--	root/root	usr/share/man/man5/file_contexts.subs.5.gz
+-rw-r--r--	root/root	usr/share/man/man5/file_contexts.subs_dist.5.gz
+-rw-r--r--	root/root	usr/share/man/man5/local.users.5.gz
+-rw-r--r--	root/root	usr/share/man/man5/media.5.gz
+-rw-r--r--	root/root	usr/share/man/man5/removable_context.5.gz
+-rw-r--r--	root/root	usr/share/man/man5/secolor.conf.5.gz
+-rw-r--r--	root/root	usr/share/man/man5/securetty_types.5.gz
+-rw-r--r--	root/root	usr/share/man/man5/selabel_db.5.gz
+-rw-r--r--	root/root	usr/share/man/man5/selabel_file.5.gz
+-rw-r--r--	root/root	usr/share/man/man5/selabel_media.5.gz
+-rw-r--r--	root/root	usr/share/man/man5/selabel_x.5.gz
+-rw-r--r--	root/root	usr/share/man/man5/sepgsql_contexts.5.gz
+-rw-r--r--	root/root	usr/share/man/man5/service_seusers.5.gz
+-rw-r--r--	root/root	usr/share/man/man5/seusers.5.gz
+-rw-r--r--	root/root	usr/share/man/man5/user_contexts.5.gz
+-rw-r--r--	root/root	usr/share/man/man5/virtual_domain_context.5.gz
+-rw-r--r--	root/root	usr/share/man/man5/virtual_image_context.5.gz
+-rw-r--r--	root/root	usr/share/man/man5/x_contexts.5.gz
+drwxr-xr-x	root/root	usr/share/man/man8/
+-rw-r--r--	root/root	usr/share/man/man8/avcstat.8.gz
+-rw-r--r--	root/root	usr/share/man/man8/booleans.8.gz
+-rw-r--r--	root/root	usr/share/man/man8/getenforce.8.gz
+-rw-r--r--	root/root	usr/share/man/man8/getsebool.8.gz
+-rw-r--r--	root/root	usr/share/man/man8/matchpathcon.8.gz
+-rw-r--r--	root/root	usr/share/man/man8/sefcontext_compile.8.gz
+-rw-r--r--	root/root	usr/share/man/man8/selinux.8.gz
+-rw-r--r--	root/root	usr/share/man/man8/selinuxenabled.8.gz
+-rw-r--r--	root/root	usr/share/man/man8/selinuxexeccon.8.gz
+-rw-r--r--	root/root	usr/share/man/man8/setenforce.8.gz
+-rw-r--r--	root/root	usr/share/man/man8/togglesebool.8.gz
diff --git a/libselinux/.md5sum b/libselinux/.md5sum
new file mode 100644
index 000000000..712f283b8
--- /dev/null
+++ b/libselinux/.md5sum
@@ -0,0 +1 @@
+bb449431b6ed55a0a0496dbc366d6e31  libselinux-2.9.tar.gz
diff --git a/libselinux/.signature b/libselinux/.signature
new file mode 100644
index 000000000..bde978531
--- /dev/null
+++ b/libselinux/.signature
@@ -0,0 +1,5 @@
+untrusted comment: verify with /etc/ports/contrib.pub
+RWSagIOpLGJF34oflW0yfQ7vFvDn12Fc0d3YndoqHqekFBKlJxdDZNUyGxA9lGhwF2jZ7NNSfw1OQ93rfF5VPb4mmX5H0oNyCAw=
+SHA256 (Pkgfile) = b883d7fdd7864fe995570200ccf626187f4fb56b5deb72a0f3dbb7b74a780d28
+SHA256 (.footprint) = 6effa220e2f161377b517562a097d8c08622d902a719d6ecd2d6e2b7b1930f58
+SHA256 (libselinux-2.9.tar.gz) = 1bccc8873e449587d9a2b2cf253de9b89a8291b9fbc7c59393ca9e5f5f4d2693
diff --git a/libselinux/Pkgfile b/libselinux/Pkgfile
new file mode 100644
index 000000000..3bb5acaf7
--- /dev/null
+++ b/libselinux/Pkgfile
@@ -0,0 +1,30 @@
+# Description: SELinux library and simple utilities
+# URL: http://userspace.selinuxproject.org
+# Maintainer: Tim Biermann, tbier at posteo dot de
+# Depends on: libsepol python python3 ruby swig
+
+name=libselinux
+version=2.9
+release=1
+source=(https://github.com/SELinuxProject/selinux/releases/download/20190315/$name-$version.tar.gz)
+
+build() {
+  cd $name-$version
+
+  # Do not build deprecated rpm_execcon() interface.
+  export DISABLE_RPM=y
+
+  make swigify
+  make all
+  make PYTHON=/usr/bin/python2 pywrap
+  make PYTHON=/usr/bin/python3 pywrap
+  make RUBY=/usr/bin/ruby rubywrap
+
+  make DESTDIR=$PKG SBINDIR=/usr/bin SHLIBDIR=/usr/lib install
+  make DESTDIR=$PKG PYTHON=/usr/bin/python2 SBINDIR=/usr/bin SHLIBDIR=/usr/lib install-pywrap
+  make DESTDIR=$PKG PYTHON=/usr/bin/python3 SBINDIR=/usr/bin SHLIBDIR=/usr/lib install-pywrap
+  make DESTDIR=$PKG RUBY=/usr/bin/ruby SBINDIR=/usr/bin SHLIBDIR=/usr/lib install-rubywrap
+  /usr/bin/python2 -m compileall "${pkgdir}/$(/usr/bin/python2 -c 'from distutils.sysconfig import *; print(get_python_lib(plat_specific=1))')"
+  /usr/bin/python3 -m compileall "${pkgdir}/$(/usr/bin/python3 -c 'from distutils.sysconfig import *; print(get_python_lib(plat_specific=1))')"
+  rm -r $PKG/usr/share/man/ru
+}