ca9cea7
diff --git a/libselinux/src/Makefile b/libselinux/src/Makefile
3c1b814
index bf665ab..ccd08ae 100644
ca9cea7
--- a/libselinux/src/Makefile
ca9cea7
+++ b/libselinux/src/Makefile
3c1b814
@@ -1,10 +1,11 @@
ca9cea7
 # Installation directories.
ca9cea7
+PYTHON ?= python
ca9cea7
 PREFIX ?= $(DESTDIR)/usr
ca9cea7
 LIBDIR ?= $(PREFIX)/lib
ca9cea7
 SHLIBDIR ?= $(DESTDIR)/lib
ca9cea7
 INCLUDEDIR ?= $(PREFIX)/include
ca9cea7
-PYLIBVER ?= $(shell python -c 'import sys;print "python%d.%d" % sys.version_info[0:2]')
3c1b814
-PYINC ?= /usr/include/$(PYLIBVER)
ca9cea7
+PYLIBVER ?= $(shell $(PYTHON) -c 'import sys;print("python%d.%d" % sys.version_info[0:2])')
3c1b814
+PYINC ?= $(shell pkg-config --cflags `basename $(PYTHON)`)
ca9cea7
 PYLIB ?= /usr/lib/$(PYLIBVER)
ca9cea7
 PYTHONLIBDIR ?= $(LIBDIR)/$(PYLIBVER)
3c1b814
 RUBYLIBVER ?= $(shell ruby -e 'print RUBY_VERSION.split(".")[0..1].join(".")')
ca9cea7
@@ -23,13 +24,13 @@ SWIGIF= selinuxswig_python.i selinuxswig_python_exception.i
ca9cea7
 SWIGRUBYIF= selinuxswig_ruby.i
ca9cea7
 SWIGCOUT= selinuxswig_wrap.c
ca9cea7
 SWIGRUBYCOUT= selinuxswig_ruby_wrap.c
ca9cea7
-SWIGLOBJ:= $(patsubst %.c,%.lo,$(SWIGCOUT)) 
ca9cea7
+SWIGLOBJ:= $(patsubst %.c,$(PYPREFIX)%.lo,$(SWIGCOUT)) 
ca9cea7
 SWIGRUBYLOBJ:= $(patsubst %.c,%.lo,$(SWIGRUBYCOUT)) 
ca9cea7
-SWIGSO=_selinux.so
ca9cea7
+SWIGSO=$(PYPREFIX)_selinux.so
ca9cea7
 SWIGFILES=$(SWIGSO) selinux.py selinuxswig_python_exception.i
ca9cea7
 SWIGRUBYSO=_rubyselinux.so
ca9cea7
 LIBSO=$(TARGET).$(LIBVERSION)
ca9cea7
-AUDIT2WHYSO=audit2why.so
ca9cea7
+AUDIT2WHYSO=$(PYPREFIX)audit2why.so
ca9cea7
 
ca9cea7
 ifeq ($(DISABLE_AVC),y)
ca9cea7
 	UNUSED_SRCS+=avc.c avc_internal.c avc_sidtab.c mapping.c stringrep.c checkAccess.c
3c1b814
@@ -70,7 +71,7 @@ $(LIBA):  $(OBJS)
3c1b814
 	$(RANLIB) $@
3c1b814
 
3c1b814
 $(SWIGLOBJ): $(SWIGCOUT)
3c1b814
-	$(CC) $(filter-out -Werror,$(CFLAGS)) -I$(PYINC) -fPIC -DSHARED -c -o $@ $<
3c1b814
+	$(CC) $(filter-out -Werror,$(CFLAGS)) $(PYINC) -fPIC -DSHARED -c -o $@ $<
3c1b814
 
3c1b814
 $(SWIGRUBYLOBJ): $(SWIGRUBYCOUT)
3c1b814
 	$(CC) $(filter-out -Werror,$(CFLAGS)) -I$(RUBYINC) -fPIC -DSHARED -c -o $@ $<
ca9cea7
@@ -91,10 +92,10 @@ $(LIBPC): $(LIBPC).in
ca9cea7
 selinuxswig_python_exception.i: ../include/selinux/selinux.h
ca9cea7
 	bash exception.sh > $@ 
ca9cea7
 
ca9cea7
-audit2why.lo: audit2why.c
3c1b814
-	$(CC) $(CFLAGS) -I$(PYINC) -fPIC -DSHARED -c -o $@ $<
ca9cea7
+$(PYPREFIX)audit2why.lo: audit2why.c
3c1b814
+	$(CC) $(CFLAGS) $(PYINC) -fPIC -DSHARED -c -o $@ $<
ca9cea7
 
ca9cea7
-$(AUDIT2WHYSO): audit2why.lo
ca9cea7
+$(AUDIT2WHYSO): $(PYPREFIX)audit2why.lo
ca9cea7
 	$(CC) $(CFLAGS) $(LDFLAGS) -shared -o $@ $^ -L. -lselinux ${LIBDIR}/libsepol.a -L$(LIBDIR) -Wl,-soname,$@
ca9cea7
 
ca9cea7
 %.o:  %.c policy.h
ca9cea7
@@ -123,8 +124,8 @@ install: all
ca9cea7
 
ca9cea7
 install-pywrap: pywrap
ca9cea7
 	test -d $(PYTHONLIBDIR)/site-packages/selinux || install -m 755 -d $(PYTHONLIBDIR)/site-packages/selinux
ca9cea7
-	install -m 755 $(SWIGSO) $(PYTHONLIBDIR)/site-packages/selinux
ca9cea7
-	install -m 755 $(AUDIT2WHYSO) $(PYTHONLIBDIR)/site-packages/selinux
ca9cea7
+	install -m 755 $(SWIGSO) $(PYTHONLIBDIR)/site-packages/selinux/_selinux.so
ca9cea7
+	install -m 755 $(AUDIT2WHYSO) $(PYTHONLIBDIR)/site-packages/selinux/audit2why.so
ca9cea7
 	install -m 644  selinux.py $(PYTHONLIBDIR)/site-packages/selinux/__init__.py
ca9cea7
 
ca9cea7
 install-rubywrap: rubywrap
ca9cea7
diff --git a/libselinux/src/audit2why.c b/libselinux/src/audit2why.c
ca9cea7
index 691bc67..12e8614 100644
ca9cea7
--- a/libselinux/src/audit2why.c
ca9cea7
+++ b/libselinux/src/audit2why.c
5abec27
@@ -1,3 +1,6 @@
5abec27
+/* Workaround for http://bugs.python.org/issue4835 */
5abec27
+#define SIZEOF_SOCKET_T SIZEOF_INT
5abec27
+
5abec27
 #include <Python.h>
5abec27
 #include <unistd.h>
5abec27
 #include <stdlib.h>
ca9cea7
@@ -255,6 +258,8 @@ static int __policy_init(const char *init_path)
4235807
 	fclose(fp);
4235807
 	sepol_set_policydb(&avc->policydb->p);
4235807
 	avc->handle = sepol_handle_create();
4235807
+	/* Turn off messages */
4235807
+	sepol_msg_set_callback(avc->handle, NULL, NULL);
4235807
 
4235807
 	rc = sepol_bool_count(avc->handle,
4235807
 			      avc->policydb, &cnt);
ca9cea7
@@ -287,8 +292,10 @@ static int __policy_init(const char *init_path)
5abec27
 static PyObject *init(PyObject *self __attribute__((unused)), PyObject *args) {
5abec27
   int result;
5abec27
   char *init_path=NULL;
5abec27
-  if (PyArg_ParseTuple(args,(char *)"|s:policy_init",&init_path)) 
5abec27
-	  result = __policy_init(init_path);
4235807
+  if (!PyArg_ParseTuple(args,(char *)"|s:policy_init",&init_path)) {
4235807
+    return NULL;
5abec27
+  }
5abec27
+  result = __policy_init(init_path);
5abec27
   return Py_BuildValue("i", result);
5abec27
 }
5abec27
 
ca9cea7
@@ -353,7 +360,11 @@ static PyObject *analyze(PyObject *self __attribute__((unused)) , PyObject *args
5abec27
 		strObj = PyList_GetItem(listObj, i); /* Can't fail */
5abec27
 		
5abec27
 		/* make it a string */
5abec27
+#if PY_MAJOR_VERSION >= 3
4235807
+		permstr = _PyUnicode_AsString( strObj );
5abec27
+#else
5abec27
 		permstr = PyString_AsString( strObj );
5abec27
+#endif
5abec27
 		
5abec27
 		perm = string_to_av_perm(tclass, permstr);
5abec27
 		if (!perm) {
ca9cea7
@@ -423,10 +434,39 @@ static PyMethodDef audit2whyMethods[] = {
5abec27
     {NULL, NULL, 0, NULL}        /* Sentinel */
5abec27
 };
5abec27
 
5abec27
+#if PY_MAJOR_VERSION >= 3
5abec27
+/* Module-initialization logic specific to Python 3 */
5abec27
+struct module_state {
5abec27
+	/* empty for now */
5abec27
+};
5abec27
+static struct PyModuleDef moduledef = {
5abec27
+	PyModuleDef_HEAD_INIT,
5abec27
+	"audit2why",
5abec27
+	NULL,
5abec27
+	sizeof(struct module_state),
5abec27
+	audit2whyMethods,
5abec27
+	NULL,
5abec27
+	NULL,
5abec27
+	NULL,
5abec27
+	NULL
5abec27
+};
5abec27
+
5abec27
+PyMODINIT_FUNC
5abec27
+PyInit_audit2why(void)
5abec27
+#else
5abec27
 PyMODINIT_FUNC
5abec27
 initaudit2why(void)
5abec27
+#endif
5abec27
 {
5abec27
-	PyObject *m = Py_InitModule("audit2why", audit2whyMethods);
5abec27
+	PyObject *m;
5abec27
+#if PY_MAJOR_VERSION >= 3
5abec27
+	m = PyModule_Create(&moduledef);
5abec27
+	if (m == NULL) {
5abec27
+		return NULL;
5abec27
+	}
5abec27
+#else
5abec27
+	m  = Py_InitModule("audit2why", audit2whyMethods);
5abec27
+#endif
5abec27
 	PyModule_AddIntConstant(m,"UNKNOWN", UNKNOWN);
5abec27
 	PyModule_AddIntConstant(m,"BADSCON", BADSCON);
5abec27
 	PyModule_AddIntConstant(m,"BADTCON", BADTCON);
ca9cea7
@@ -440,4 +480,8 @@ initaudit2why(void)
5abec27
 	PyModule_AddIntConstant(m,"BOOLEAN", BOOLEAN);
5abec27
 	PyModule_AddIntConstant(m,"CONSTRAINT", CONSTRAINT);
5abec27
 	PyModule_AddIntConstant(m,"RBAC", RBAC);
5abec27
+
5abec27
+#if PY_MAJOR_VERSION >= 3
5abec27
+	return m;
5abec27
+#endif
5abec27
 }
ca9cea7
diff --git a/libselinux/src/callbacks.c b/libselinux/src/callbacks.c
ca9cea7
index b245364..7c47222 100644
ca9cea7
--- a/libselinux/src/callbacks.c
ca9cea7
+++ b/libselinux/src/callbacks.c
ca9cea7
@@ -16,6 +16,7 @@ default_selinux_log(int type __attribute__((unused)), const char *fmt, ...)
ee77868
 {
d0a06b2
 	int rc;
d0a06b2
 	va_list ap;
d0a06b2
+	if (is_selinux_enabled() == 0) return 0;
d0a06b2
 	va_start(ap, fmt);
d0a06b2
 	rc = vfprintf(stderr, fmt, ap);
d0a06b2
 	va_end(ap);
ca9cea7
diff --git a/libselinux/src/matchpathcon.c b/libselinux/src/matchpathcon.c
ca9cea7
index bb4eb9f..c9ae42f 100644
ca9cea7
--- a/libselinux/src/matchpathcon.c
ca9cea7
+++ b/libselinux/src/matchpathcon.c
974a6e4
@@ -2,6 +2,7 @@
974a6e4
 #include <string.h>
974a6e4
 #include <errno.h>
974a6e4
 #include <stdio.h>
974a6e4
+#include <syslog.h>
974a6e4
 #include "selinux_internal.h"
974a6e4
 #include "label_internal.h"
974a6e4
 #include "callbacks.h"
ca9cea7
@@ -60,7 +61,7 @@ static void
974a6e4
 {
974a6e4
 	va_list ap;
974a6e4
 	va_start(ap, fmt);
974a6e4
-	vfprintf(stderr, fmt, ap);
974a6e4
+	vsyslog(LOG_ERR, fmt, ap);
974a6e4
 	va_end(ap);
974a6e4
 }
b5b41bc
 
ca9cea7
diff --git a/libselinux/src/selinuxswig_python.i b/libselinux/src/selinuxswig_python.i
ca9cea7
index dea0e80..bb227e9 100644
ca9cea7
--- a/libselinux/src/selinuxswig_python.i
ca9cea7
+++ b/libselinux/src/selinuxswig_python.i
ca9cea7
@@ -45,7 +45,7 @@ def install(src, dest):
5abec27
 	PyObject* list = PyList_New(*$2);
5abec27
 	int i;
5abec27
 	for (i = 0; i < *$2; i++) {
5abec27
-		PyList_SetItem(list, i, PyString_FromString((*$1)[i]));
5abec27
+		PyList_SetItem(list, i, PyBytes_FromString((*$1)[i]));
5abec27
 	}
5abec27
 	$result = SWIG_Python_AppendOutput($result, list);
5abec27
 }
ca9cea7
@@ -74,7 +74,9 @@ def install(src, dest):
5abec27
 			len++;
5abec27
 		plist = PyList_New(len);
5abec27
 		for (i = 0; i < len; i++) {
5abec27
-			PyList_SetItem(plist, i, PyString_FromString((*$1)[i]));
5abec27
+			PyList_SetItem(plist, i, 
5abec27
+                                       PyBytes_FromString((*$1)[i])
5abec27
+                                       );
5abec27
 		}
5abec27
 	} else {
5abec27
 		plist = PyList_New(0);
ca9cea7
@@ -91,7 +93,9 @@ def install(src, dest):
5abec27
 	if (*$1) {
5abec27
 		plist = PyList_New(result);
5abec27
 		for (i = 0; i < result; i++) {
5abec27
-			PyList_SetItem(plist, i, PyString_FromString((*$1)[i]));
5abec27
+			PyList_SetItem(plist, i, 
5abec27
+                                       PyBytes_FromString((*$1)[i])
5abec27
+                                       );
5abec27
 		}
5abec27
 	} else {
5abec27
 		plist = PyList_New(0);
ca9cea7
@@ -144,16 +148,20 @@ def install(src, dest):
5abec27
 	$1 = (char**) malloc(size + 1);
5abec27
 
5abec27
 	for(i = 0; i < size; i++) {
5abec27
-		if (!PyString_Check(PySequence_GetItem($input, i))) {
5abec27
-			PyErr_SetString(PyExc_ValueError, "Sequence must contain only strings");
5abec27
+		if (!PyBytes_Check(PySequence_GetItem($input, i))) {
5abec27
+			PyErr_SetString(PyExc_ValueError, "Sequence must contain only bytes");
5abec27
+
5abec27
 			return NULL;
5abec27
 		}
5abec27
+
5abec27
 	}
5abec27
 		
5abec27
 	for(i = 0; i < size; i++) {
5abec27
 		s = PySequence_GetItem($input, i);
5abec27
-		$1[i] = (char*) malloc(PyString_Size(s) + 1);
5abec27
-		strcpy($1[i], PyString_AsString(s));
5abec27
+
5abec27
+		$1[i] = (char*) malloc(PyBytes_Size(s) + 1);
5abec27
+		strcpy($1[i], PyBytes_AsString(s));
5abec27
+
5abec27
 	}
5abec27
 	$1[size] = NULL;
5abec27
 }