Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package selinux-policy for openSUSE:Factory checked in at 2026-01-21 14:11:53 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/selinux-policy (Old) and /work/SRC/openSUSE:Factory/.selinux-policy.new.1928 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "selinux-policy" Wed Jan 21 14:11:53 2026 rev:146 rq:1328207 version:20260120 Changes: -------- --- /work/SRC/openSUSE:Factory/selinux-policy/selinux-policy.changes 2026-01-12 10:24:00.180094499 +0100 +++ /work/SRC/openSUSE:Factory/.selinux-policy.new.1928/selinux-policy.changes 2026-01-21 14:11:55.601257314 +0100 @@ -1,0 +2,7 @@ +Tue Jan 20 08:42:09 UTC 2026 - Robert Frohl <[email protected]> + +- Update to version 20260120: + * Allow bluetoothd to access alsa config (bsc#1255866) + * Allow snapper_sdbootutil_plugin to set targets file context during 'mv' (bsc#1256419) + +------------------------------------------------------------------- Old: ---- selinux-policy-20260108.tar.xz New: ---- selinux-policy-20260120.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ selinux-policy.spec ++++++ --- /var/tmp/diff_new_pack.VxZr5G/_old 2026-01-21 14:11:56.785306608 +0100 +++ /var/tmp/diff_new_pack.VxZr5G/_new 2026-01-21 14:11:56.785306608 +0100 @@ -36,7 +36,7 @@ License: GPL-2.0-or-later Group: System/Management Name: selinux-policy -Version: 20260108 +Version: 20260120 Release: 0 Source0: %{name}-%{version}.tar.xz Source1: container.fc ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.VxZr5G/_old 2026-01-21 14:11:56.861309773 +0100 +++ /var/tmp/diff_new_pack.VxZr5G/_new 2026-01-21 14:11:56.861309773 +0100 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://gitlab.suse.de/selinux/selinux-policy.git</param> - <param name="changesrevision">95c4a0017370c2005d5995e474a39aefa08abbf1</param></service></servicedata> + <param name="changesrevision">d0d57a55b9c2f43ea6d3c9c25513363acdb0802c</param></service></servicedata> (No newline at EOF) ++++++ selinux-policy-20260108.tar.xz -> selinux-policy-20260120.tar.xz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/selinux-policy-20260108/policy/modules/contrib/bluetooth.te new/selinux-policy-20260120/policy/modules/contrib/bluetooth.te --- old/selinux-policy-20260108/policy/modules/contrib/bluetooth.te 2026-01-08 16:40:46.000000000 +0100 +++ new/selinux-policy-20260120/policy/modules/contrib/bluetooth.te 2026-01-20 09:40:28.000000000 +0100 @@ -158,6 +158,7 @@ optional_policy(` alsa_read_lib(bluetooth_t) + alsa_read_rw_config(bluetooth_t) ') optional_policy(` diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/selinux-policy-20260108/policy/modules/contrib/snapper.te new/selinux-policy-20260120/policy/modules/contrib/snapper.te --- old/selinux-policy-20260108/policy/modules/contrib/snapper.te 2026-01-08 16:40:46.000000000 +0100 +++ new/selinux-policy-20260120/policy/modules/contrib/snapper.te 2026-01-20 09:40:28.000000000 +0100 @@ -188,6 +188,7 @@ # for btrfs allow snapper_sdbootutil_plugin_t self:capability sys_admin; +allow snapper_sdbootutil_plugin_t self:process { setfscreate }; # PCRE JIT for grep, not needed, has a fallback if it's denied dontaudit snapper_sdbootutil_plugin_t self:process execmem;
