Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package selinux-policy-targeted-gaming for
openSUSE:Factory checked in at 2025-08-18 16:09:16
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/selinux-policy-targeted-gaming (Old)
and /work/SRC/openSUSE:Factory/.selinux-policy-targeted-gaming.new.1085
(New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "selinux-policy-targeted-gaming"
Mon Aug 18 16:09:16 2025 rev:3 rq:1300079 version:2
Changes:
--------
---
/work/SRC/openSUSE:Factory/selinux-policy-targeted-gaming/selinux-policy-targeted-gaming.changes
2025-05-08 18:26:07.891360710 +0200
+++
/work/SRC/openSUSE:Factory/.selinux-policy-targeted-gaming.new.1085/selinux-policy-targeted-gaming.changes
2025-08-18 16:09:48.670809226 +0200
@@ -1,0 +2,5 @@
+Thu Aug 14 13:23:10 UTC 2025 - Robert Frohl <[email protected]>
+
+- Enable selinuxuser_execstack=1 for new installations as well (bsc#1247992)
+
+-------------------------------------------------------------------
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ selinux-policy-targeted-gaming.spec ++++++
--- /var/tmp/diff_new_pack.1WKgDa/_old 2025-08-18 16:09:49.122827994 +0200
+++ /var/tmp/diff_new_pack.1WKgDa/_new 2025-08-18 16:09:49.122827994 +0200
@@ -13,10 +13,10 @@
# published by the Open Source Initiative.
%global selinuxtype targeted
-%global selinuxbooleans selinuxuser_execmod=1
+%global selinuxbooleans selinuxuser_execmod=1 selinuxuser_execstack=1
Name: selinux-policy-targeted-gaming
-Version: 1
+Version: 2
Release: 0
Summary: SELinux policy changes for a simplified gaming experience
License: MIT
@@ -24,7 +24,7 @@
Source1: README.md
BuildArch: noarch
BuildRequires: selinux-policy
-BuildRequires: selinux-policy-targeted
+BuildRequires: selinux-policy-%{selinuxtype}
Requires: selinux-tools
Requires: selinux-policy
Requires: selinux-policy-%{selinuxtype}
++++++ README.md ++++++
--- /var/tmp/diff_new_pack.1WKgDa/_old 2025-08-18 16:09:49.158829489 +0200
+++ /var/tmp/diff_new_pack.1WKgDa/_new 2025-08-18 16:09:49.162829655 +0200
@@ -16,10 +16,12 @@
The package makes the following change to the system during package install:
> semanage boolean -m --on selinuxuser_execmod
+> semanage boolean -m --on selinuxuser_execstack
or identical change, but using another tool
> setsebool -P selinuxuser_execmod 1
+> setsebool -P selinuxuser_execstack 1
This change has security implications, as it allows unconfined executables to
make their stack executable. Usually because certain libraries requiring text
