Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package libvirt for openSUSE:Factory checked in at 2025-08-09 19:58:42 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libvirt (Old) and /work/SRC/openSUSE:Factory/.libvirt.new.1085 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "libvirt" Sat Aug 9 19:58:42 2025 rev:429 rq:1298163 version:11.6.0 Changes: -------- --- /work/SRC/openSUSE:Factory/libvirt/libvirt.changes 2025-08-03 13:36:20.692798643 +0200 +++ /work/SRC/openSUSE:Factory/.libvirt.new.1085/libvirt.changes 2025-08-09 20:04:34.114139173 +0200 @@ -1,0 +2,6 @@ +Wed Aug 6 17:55:30 UTC 2025 - Cathy Hu <cathy...@suse.com> + +- Set virt_hooks_unconfined boolean to true in libvirt-daemon-hooks + %post script (see comment 13 in bsc#1242998) + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libvirt.spec ++++++ --- /var/tmp/diff_new_pack.NUApuT/_old 2025-08-09 20:04:36.534240923 +0200 +++ /var/tmp/diff_new_pack.NUApuT/_new 2025-08-09 20:04:36.538241091 +0200 @@ -38,6 +38,7 @@ %define with_storage_gluster 0%{!?_without_storage_gluster:1} %define with_storage_iscsi_direct 0%{!?_without_storage_iscsi_direct:1} %define with_apparmor 0%{!?_without_apparmor:1} +%define with_selinux_unconfined_daemon_hooks 0%{!?_without_selinux:1} # The udev interface backend is the only one that works across SUSE distros. # It supports just a handful of read-only operations, has a history of # instability, and is insufficiently maintained. Completely disable the @@ -115,6 +116,10 @@ %define with_storage_rbd 0 %endif +%if 0%{?suse_version} < 1600 + %define with_selinux_unconfined_daemon_hooks 0 +%endif + # Factory and SLFO strive to drop iptables. The nwfilter driver has a runtime # dependency on iptables, but no build-time one. The driver will be built # unconditionally, but will no longer be required/recommended by the meta @@ -397,6 +402,10 @@ %package daemon-hooks Summary: Hook scripts for QEMU +%if %{with_selinux_unconfined_daemon_hooks} +BuildRequires: selinux-policy-devel +%selinux_requires +%endif Requires: %{name}-daemon-driver-qemu = %{version}-%{release} Requires: python3-lxml @@ -1241,6 +1250,18 @@ /sbin/ldconfig %service_del_postun_without_restart libvirt-guests.service +%if %{with_selinux_unconfined_daemon_hooks} +%post daemon-hooks +if [ $1 -eq 1 ]; then + %selinux_set_booleans -s targeted virt_hooks_unconfined=1 +fi + +%postun daemon-hooks +if [ $1 -eq 0 ]; then + %selinux_unset_booleans -s targeted virt_hooks_unconfined=1 +fi +%endif + %pre daemon-proxy %libvirt_daemon_systemd_pre_inet virtproxyd ++++++ libvirt-11.6.0.obscpio ++++++ /work/SRC/openSUSE:Factory/libvirt/libvirt-11.6.0.obscpio /work/SRC/openSUSE:Factory/.libvirt.new.1085/libvirt-11.6.0.obscpio differ: char 49, line 1 ++++++ libvirt.obsinfo ++++++ --- /var/tmp/diff_new_pack.NUApuT/_old 2025-08-09 20:04:37.642287509 +0200 +++ /var/tmp/diff_new_pack.NUApuT/_new 2025-08-09 20:04:37.686289359 +0200 @@ -1,5 +1,5 @@ name: libvirt version: 11.6.0 -mtime: 1754082673 -commit: 2fe02282b55c019abcc9018cb71118421e6ba51c +mtime: 1754467684 +commit: b486f7a4e1a714138891ef391aeb618ca91667da