Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package selinux-policy for openSUSE:Factory checked in at 2026-01-12 10:16:17 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/selinux-policy (Old) and /work/SRC/openSUSE:Factory/.selinux-policy.new.1928 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "selinux-policy" Mon Jan 12 10:16:17 2026 rev:145 rq:1326334 version:20260108 Changes: -------- --- /work/SRC/openSUSE:Factory/selinux-policy/selinux-policy.changes 2026-01-06 17:42:21.524164734 +0100 +++ /work/SRC/openSUSE:Factory/.selinux-policy.new.1928/selinux-policy.changes 2026-01-12 10:24:00.180094499 +0100 @@ -1,0 +2,6 @@ +Fri Jan 09 12:19:46 UTC 2026 - Cathy Hu <[email protected]> + +- Update to version 20260108: + * Set /var/lib/logwatch to logwatch_var_lib_t (bsc#1255862) + +------------------------------------------------------------------- Old: ---- selinux-policy-20260106.tar.xz New: ---- selinux-policy-20260108.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ selinux-policy.spec ++++++ --- /var/tmp/diff_new_pack.u4zbhz/_old 2026-01-12 10:24:02.372184442 +0100 +++ /var/tmp/diff_new_pack.u4zbhz/_new 2026-01-12 10:24:02.376184606 +0100 @@ -36,7 +36,7 @@ License: GPL-2.0-or-later Group: System/Management Name: selinux-policy -Version: 20260106 +Version: 20260108 Release: 0 Source0: %{name}-%{version}.tar.xz Source1: container.fc ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.u4zbhz/_old 2026-01-12 10:24:02.444187395 +0100 +++ /var/tmp/diff_new_pack.u4zbhz/_new 2026-01-12 10:24:02.448187560 +0100 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://gitlab.suse.de/selinux/selinux-policy.git</param> - <param name="changesrevision">233d96579f268a6a082b61e3fc68cb2f08381daa</param></service></servicedata> + <param name="changesrevision">95c4a0017370c2005d5995e474a39aefa08abbf1</param></service></servicedata> (No newline at EOF) ++++++ selinux-policy-20260106.tar.xz -> selinux-policy-20260108.tar.xz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/selinux-policy-20260106/policy/modules/contrib/logwatch.fc new/selinux-policy-20260108/policy/modules/contrib/logwatch.fc --- old/selinux-policy-20260106/policy/modules/contrib/logwatch.fc 2026-01-06 11:32:43.000000000 +0100 +++ new/selinux-policy-20260108/policy/modules/contrib/logwatch.fc 2026-01-08 16:40:46.000000000 +0100 @@ -12,3 +12,6 @@ /run/lock/logcheck.* gen_context(system_u:object_r:logwatch_lock_t,s0) /run/epylog\.pid -- gen_context(system_u:object_r:logwatch_var_run_t,s0) + +# openSUSE only +/var/lib/logwatch(/.*)? gen_context(system_u:object_r:logwatch_var_lib_t,s0) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/selinux-policy-20260106/policy/modules/contrib/logwatch.te new/selinux-policy-20260108/policy/modules/contrib/logwatch.te --- old/selinux-policy-20260106/policy/modules/contrib/logwatch.te 2026-01-06 11:32:43.000000000 +0100 +++ new/selinux-policy-20260108/policy/modules/contrib/logwatch.te 2026-01-08 16:40:46.000000000 +0100 @@ -30,6 +30,9 @@ type logwatch_var_run_t; files_pid_file(logwatch_var_run_t) +type logwatch_var_lib_t; +files_type(logwatch_var_lib_t) + mta_base_mail_template(logwatch) role system_r types logwatch_mail_t; @@ -54,6 +57,9 @@ manage_files_pattern(logwatch_t, logwatch_tmp_t, logwatch_tmp_t) files_tmp_filetrans(logwatch_t, logwatch_tmp_t, { file dir }) +manage_dirs_pattern(logwatch_t, logwatch_var_lib_t, logwatch_var_lib_t) +manage_files_pattern(logwatch_t, logwatch_var_lib_t, logwatch_var_lib_t) + allow logwatch_t logwatch_var_run_t:file manage_file_perms; files_pid_filetrans(logwatch_t, logwatch_var_run_t, file)
