Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package selinux-policy for openSUSE:Factory checked in at 2025-12-18 18:29:10 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/selinux-policy (Old) and /work/SRC/openSUSE:Factory/.selinux-policy.new.1928 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "selinux-policy" Thu Dec 18 18:29:10 2025 rev:142 rq:1323298 version:20251217 Changes: -------- --- /work/SRC/openSUSE:Factory/selinux-policy/selinux-policy.changes 2025-12-15 11:35:29.209662067 +0100 +++ /work/SRC/openSUSE:Factory/.selinux-policy.new.1928/selinux-policy.changes 2025-12-18 18:29:17.708178348 +0100 @@ -1,0 +2,7 @@ +Wed Dec 17 09:20:40 UTC 2025 - Cathy Hu <[email protected]> + +- Update to version 20251217: + * Allow snapper_tu_etc_plugin_t to connect to machined varlink socket (bsc#1254889) + * Label amavis spool directory correctly (bsc#1254438) + +------------------------------------------------------------------- Old: ---- selinux-policy-20251211.tar.xz New: ---- selinux-policy-20251217.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ selinux-policy.spec ++++++ --- /var/tmp/diff_new_pack.tbq3YB/_old 2025-12-18 18:29:20.552297795 +0100 +++ /var/tmp/diff_new_pack.tbq3YB/_new 2025-12-18 18:29:20.572298634 +0100 @@ -36,7 +36,7 @@ License: GPL-2.0-or-later Group: System/Management Name: selinux-policy -Version: 20251211 +Version: 20251217 Release: 0 Source0: %{name}-%{version}.tar.xz Source1: container.fc ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.tbq3YB/_old 2025-12-18 18:29:21.052318795 +0100 +++ /var/tmp/diff_new_pack.tbq3YB/_new 2025-12-18 18:29:21.092320475 +0100 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://gitlab.suse.de/selinux/selinux-policy.git</param> - <param name="changesrevision">4e60e1a9c9346a246c9a2a3afe1da10ab97afcbd</param></service></servicedata> + <param name="changesrevision">1d2ac331a0bfb952d18e25596875674b3b1f093e</param></service></servicedata> (No newline at EOF) ++++++ selinux-policy-20251211.tar.xz -> selinux-policy-20251217.tar.xz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/selinux-policy-20251211/policy/modules/contrib/antivirus.fc new/selinux-policy-20251217/policy/modules/contrib/antivirus.fc --- old/selinux-policy-20251211/policy/modules/contrib/antivirus.fc 2025-12-11 11:24:54.000000000 +0100 +++ new/selinux-policy-20251217/policy/modules/contrib/antivirus.fc 2025-12-17 09:56:59.000000000 +0100 @@ -27,7 +27,7 @@ /var/lib/clamav(/.*)? gen_context(system_u:object_r:antivirus_db_t,s0) /var/lib/clamav-unofficial-sigs(/.*)? gen_context(system_u:object_r:antivirus_db_t,s0) /var/lib/clamd.* gen_context(system_u:object_r:antivirus_db_t,s0) -/var/spool/amavisd(/.*)? gen_context(system_u:object_r:antivirus_db_t,s0) +/var/spool/amavisd?(/.*)? gen_context(system_u:object_r:antivirus_db_t,s0) /var/virusmails(/.*)? gen_context(system_u:object_r:antivirus_db_t,s0) /var/log/amavisd\.log.* -- gen_context(system_u:object_r:antivirus_log_t,s0) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/selinux-policy-20251211/policy/modules/contrib/snapper.te new/selinux-policy-20251217/policy/modules/contrib/snapper.te --- old/selinux-policy-20251211/policy/modules/contrib/snapper.te 2025-12-11 11:24:54.000000000 +0100 +++ new/selinux-policy-20251217/policy/modules/contrib/snapper.te 2025-12-17 09:56:59.000000000 +0100 @@ -179,6 +179,10 @@ # needed for systemd dynamicuser kernel_stream_connect(snapper_tu_etc_plugin_t) +optional_policy(` + # rsync needs it to access nsswitch in enabled systems + systemd_machined_stream_connect(snapper_tu_etc_plugin_t) +') ### snapper sdbootutil plugin
