Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package selinux-policy for openSUSE:Factory
checked in at 2024-12-08 11:36:52
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/selinux-policy (Old)
and /work/SRC/openSUSE:Factory/.selinux-policy.new.21547 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "selinux-policy"
Sun Dec 8 11:36:52 2024 rev:89 rq:1228810 version:20241206
Changes:
--------
--- /work/SRC/openSUSE:Factory/selinux-policy/selinux-policy.changes
2024-12-04 15:26:42.616186301 +0100
+++ /work/SRC/openSUSE:Factory/.selinux-policy.new.21547/selinux-policy.changes
2024-12-08 11:38:00.275800537 +0100
@@ -1,0 +2,7 @@
+Fri Dec 06 16:01:26 UTC 2024 - cathy...@suse.com
+
+- Update to version 20241206:
+ * Move systemd-homed interfaces to seperate optional_policy block
(bsc#1234228)
+ * adjust kandim binary paths (bsc#1232328)
+
+-------------------------------------------------------------------
Old:
----
selinux-policy-20241118.tar.xz
New:
----
selinux-policy-20241206.tar.xz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ selinux-policy.spec ++++++
--- /var/tmp/diff_new_pack.cdrOkN/_old 2024-12-08 11:38:00.895826295 +0100
+++ /var/tmp/diff_new_pack.cdrOkN/_new 2024-12-08 11:38:00.899826461 +0100
@@ -36,7 +36,7 @@
License: GPL-2.0-or-later
Group: System/Management
Name: selinux-policy
-Version: 20241118
+Version: 20241206
Release: 0
Source0: %{name}-%{version}.tar.xz
Source1: container.fc
++++++ _servicedata ++++++
--- /var/tmp/diff_new_pack.cdrOkN/_old 2024-12-08 11:38:00.959828954 +0100
+++ /var/tmp/diff_new_pack.cdrOkN/_new 2024-12-08 11:38:00.963829120 +0100
@@ -1,7 +1,7 @@
<servicedata>
<service name="tar_scm">
<param
name="url">https://gitlab.suse.de/selinux/selinux-policy.git</param>
- <param
name="changesrevision">8fe12e2d8c9c84620be4418dab55ad2cf91b3653</param></service><service
name="tar_scm">
+ <param
name="changesrevision">5408c3e4f5bda7e79e2e1957796ad43781345202</param></service><service
name="tar_scm">
<param
name="url">https://github.com/containers/container-selinux.git</param>
<param
name="changesrevision">07b3034f6d9625ab84508a2f46515d8ff79b4204</param></service><service
name="tar_scm">
<param
name="url">https://gitlab.suse.de/jsegitz/selinux-policy.git</param>
++++++ selinux-policy-20241118.tar.xz -> selinux-policy-20241206.tar.xz ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/selinux-policy-20241118/policy/modules/contrib/dbus.te
new/selinux-policy-20241206/policy/modules/contrib/dbus.te
--- old/selinux-policy-20241118/policy/modules/contrib/dbus.te 2024-11-18
09:25:52.000000000 +0100
+++ new/selinux-policy-20241206/policy/modules/contrib/dbus.te 2024-12-06
17:00:58.000000000 +0100
@@ -233,6 +233,9 @@
optional_policy(`
systemd_homed_write_pipes(system_dbusd_t)
+')
+
+optional_policy(`
systemd_status_systemd_services(system_dbusd_t)
systemd_use_fds_logind(system_dbusd_t)
systemd_write_inherited_logind_sessions_pipes(system_dbusd_t)
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/selinux-policy-20241118/policy/modules/contrib/kanidm_unixd.fc
new/selinux-policy-20241206/policy/modules/contrib/kanidm_unixd.fc
--- old/selinux-policy-20241118/policy/modules/contrib/kanidm_unixd.fc
2024-11-18 09:25:52.000000000 +0100
+++ new/selinux-policy-20241206/policy/modules/contrib/kanidm_unixd.fc
2024-12-06 17:00:58.000000000 +0100
@@ -1,9 +1,9 @@
-/usr/sbin/kanidm_unixd --
gen_context(system_u:object_r:kanidm_unixd_exec_t,s0)
-/usr/sbin/kanidm-unix --
gen_context(system_u:object_r:kanidm_unix_exec_t,s0)
+/usr/s?bin/kanidm_unixd --
gen_context(system_u:object_r:kanidm_unixd_exec_t,s0)
+/usr/s?bin/kanidm-unix --
gen_context(system_u:object_r:kanidm_unix_exec_t,s0)
-/usr/sbin/kanidm_ssh_authorizedkeys --
gen_context(system_u:object_r:kanidm_sshkeys_exec_t,s0)
-/usr/sbin/kanidm_ssh_authorizedkeys_direct --
gen_context(system_u:object_r:kanidm_sshkeys_direct_exec_t,s0)
-/usr/sbin/kanidm_unixd_tasks --
gen_context(system_u:object_r:kanidm_unixd_tasks_exec_t,s0)
+/usr/s?bin/kanidm_ssh_authorizedkeys --
gen_context(system_u:object_r:kanidm_sshkeys_exec_t,s0)
+/usr/s?bin/kanidm_ssh_authorizedkeys_direct --
gen_context(system_u:object_r:kanidm_sshkeys_direct_exec_t,s0)
+/usr/s?bin/kanidm_unixd_tasks --
gen_context(system_u:object_r:kanidm_unixd_tasks_exec_t,s0)
/etc/kanidm(/.*)?
gen_context(system_u:object_r:kanidm_conf_t,s0)
/run/kanidm-unixd(/.*)?
gen_context(system_u:object_r:kanidm_unixd_var_run_t,s0)
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/selinux-policy-20241118/policy/modules/contrib/virt.te
new/selinux-policy-20241206/policy/modules/contrib/virt.te
--- old/selinux-policy-20241118/policy/modules/contrib/virt.te 2024-11-18
09:25:52.000000000 +0100
+++ new/selinux-policy-20241206/policy/modules/contrib/virt.te 2024-12-06
17:00:58.000000000 +0100
@@ -2309,6 +2309,9 @@
optional_policy(`
systemd_dbus_chat_machined(virtqemud_t)
+')
+
+optional_policy(`
systemd_homed_stream_connect(virtqemud_t)
')
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/selinux-policy-20241118/policy/modules/system/authlogin.te
new/selinux-policy-20241206/policy/modules/system/authlogin.te
--- old/selinux-policy-20241118/policy/modules/system/authlogin.te
2024-11-18 09:25:52.000000000 +0100
+++ new/selinux-policy-20241206/policy/modules/system/authlogin.te
2024-12-06 17:00:58.000000000 +0100
@@ -580,6 +580,9 @@
optional_policy(`
systemd_homed_stream_connect(nsswitch_domain)
+')
+
+optional_policy(`
systemd_userdbd_stream_connect(nsswitch_domain)
systemd_machined_stream_connect(nsswitch_domain)
')
