Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package selinux-policy for openSUSE:Factory checked in at 2026-05-28 23:08:17 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/selinux-policy (Old) and /work/SRC/openSUSE:Factory/.selinux-policy.new.1937 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "selinux-policy" Thu May 28 23:08:17 2026 rev:160 rq:1355167 version:20260526 Changes: -------- --- /work/SRC/openSUSE:Factory/selinux-policy/selinux-policy.changes 2026-05-24 19:35:56.219972674 +0200 +++ /work/SRC/openSUSE:Factory/.selinux-policy.new.1937/selinux-policy.changes 2026-05-28 23:08:46.847607010 +0200 @@ -1,0 +2,7 @@ +Tue May 26 08:30:09 UTC 2026 - Cathy Hu <[email protected]> + +- Update to version 20260526: + * Dontaudit apcupsd dac_override (bsc#1261232) + * Allow virtqemud_t to call and transition into udev + +------------------------------------------------------------------- Old: ---- selinux-policy-20260522.tar.xz New: ---- selinux-policy-20260526.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ selinux-policy.spec ++++++ --- /var/tmp/diff_new_pack.9MDJM3/_old 2026-05-28 23:08:48.095658352 +0200 +++ /var/tmp/diff_new_pack.9MDJM3/_new 2026-05-28 23:08:48.099658516 +0200 @@ -36,7 +36,7 @@ License: GPL-2.0-or-later Group: System/Management Name: selinux-policy -Version: 20260522 +Version: 20260526 Release: 0 Source0: %{name}-%{version}.tar.xz Source1: container.fc ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.9MDJM3/_old 2026-05-28 23:08:48.203662795 +0200 +++ /var/tmp/diff_new_pack.9MDJM3/_new 2026-05-28 23:08:48.207662960 +0200 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://gitlab.suse.de/selinux/selinux-policy.git</param> - <param name="changesrevision">301440cf688535bae18eec52504568535a7b10e8</param></service></servicedata> + <param name="changesrevision">d498294bada924dabc106aed9b3463e2d93be002</param></service></servicedata> (No newline at EOF) ++++++ selinux-policy-20260522.tar.xz -> selinux-policy-20260526.tar.xz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/selinux-policy-20260522/policy/modules/contrib/apcupsd.te new/selinux-policy-20260526/policy/modules/contrib/apcupsd.te --- old/selinux-policy-20260522/policy/modules/contrib/apcupsd.te 2026-05-22 13:00:19.000000000 +0200 +++ new/selinux-policy-20260526/policy/modules/contrib/apcupsd.te 2026-05-26 10:29:38.000000000 +0200 @@ -35,6 +35,8 @@ # Local policy # +dontaudit apcupsd_t self:capability dac_override; + allow apcupsd_t self:capability { dac_read_search setgid sys_tty_config }; allow apcupsd_t self:process signal; allow apcupsd_t self:fifo_file rw_file_perms; diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/selinux-policy-20260522/policy/modules/contrib/virt.te new/selinux-policy-20260526/policy/modules/contrib/virt.te --- old/selinux-policy-20260522/policy/modules/contrib/virt.te 2026-05-22 13:00:19.000000000 +0200 +++ new/selinux-policy-20260526/policy/modules/contrib/virt.te 2026-05-26 10:29:38.000000000 +0200 @@ -2363,6 +2363,8 @@ term_use_generic_ptys(virtqemud_t) term_use_ptmx(virtqemud_t) +udev_domtrans(virtqemud_t) + tunable_policy(`virtqemud_use_execmem',` allow virtqemud_t self:process { execmem execstack }; ')
