Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package selinux-policy-targeted-gaming for
openSUSE:Factory checked in at 2026-02-09 19:29:52
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/selinux-policy-targeted-gaming (Old)
and /work/SRC/openSUSE:Factory/.selinux-policy-targeted-gaming.new.1670
(New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "selinux-policy-targeted-gaming"
Mon Feb 9 19:29:52 2026 rev:4 rq:1332048 version:3
Changes:
--------
---
/work/SRC/openSUSE:Factory/selinux-policy-targeted-gaming/selinux-policy-targeted-gaming.changes
2025-08-18 16:09:48.670809226 +0200
+++
/work/SRC/openSUSE:Factory/.selinux-policy-targeted-gaming.new.1670/selinux-policy-targeted-gaming.changes
2026-02-09 19:30:23.935818122 +0100
@@ -1,0 +2,5 @@
+Fri Feb 6 20:47:55 UTC 2026 - Jehu Marcos Herrera Puentes
<[email protected]>
+
+- Enable selinuxuser_execheap=1 for some game mod loaders
+
+-------------------------------------------------------------------
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ selinux-policy-targeted-gaming.spec ++++++
--- /var/tmp/diff_new_pack.PeX2UC/_old 2026-02-09 19:30:25.127867976 +0100
+++ /var/tmp/diff_new_pack.PeX2UC/_new 2026-02-09 19:30:25.131868144 +0100
@@ -13,10 +13,10 @@
# published by the Open Source Initiative.
%global selinuxtype targeted
-%global selinuxbooleans selinuxuser_execmod=1 selinuxuser_execstack=1
+%global selinuxbooleans selinuxuser_execmod=1 selinuxuser_execstack=1
selinuxuser_execheap=1
Name: selinux-policy-targeted-gaming
-Version: 2
+Version: 3
Release: 0
Summary: SELinux policy changes for a simplified gaming experience
License: MIT
++++++ README.md ++++++
--- /var/tmp/diff_new_pack.PeX2UC/_old 2026-02-09 19:30:25.175869984 +0100
+++ /var/tmp/diff_new_pack.PeX2UC/_new 2026-02-09 19:30:25.179870151 +0100
@@ -17,11 +17,13 @@
> semanage boolean -m --on selinuxuser_execmod
> semanage boolean -m --on selinuxuser_execstack
+> semanage boolean -m --on selinuxuser_execheap
or identical change, but using another tool
> setsebool -P selinuxuser_execmod 1
> setsebool -P selinuxuser_execstack 1
+> setsebool -P selinuxuser_execheap 1
This change has security implications, as it allows unconfined executables to
make their stack executable. Usually because certain libraries requiring text
