Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package setroubleshoot for openSUSE:Factory checked in at 2026-08-01 18:28:32 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/setroubleshoot (Old) and /work/SRC/openSUSE:Factory/.setroubleshoot.new.16738 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "setroubleshoot" Sat Aug 1 18:28:32 2026 rev:13 rq:1368505 version:3.3.37 Changes: -------- --- /work/SRC/openSUSE:Factory/setroubleshoot/setroubleshoot.changes 2026-03-24 18:48:35.365764182 +0100 +++ /work/SRC/openSUSE:Factory/.setroubleshoot.new.16738/setroubleshoot.changes 2026-08-01 18:29:20.491795016 +0200 @@ -1,0 +2,15 @@ +Wed Jul 15 18:24:11 UTC 2026 - Zdenek Kubala <[email protected]> + +- update to version 3.3.37 + * browser: Always show "Report Bug" button + * Migrate from libxml2 to xml.etree.ElementTree + * Handle ImportError when setroubleshoot.browser is not available + * Add support for multiple commands in fix_cmd +- these patches have been dropped because they are now included in + upstream version 3.3.37 + * sealert_add_dependency_error_handling.patch + * setroubleshoot-3.3.36-libxml2_to_xml_etree_ElementTree.patch +- add add_avc_denials_log_priority.patch to set avc denial log level + (fixes bnc#1257152) + +------------------------------------------------------------------- Old: ---- sealert_add_dependency_error_handling.patch setroubleshoot-3.3.36-libxml2_to_xml_etree_ElementTree.patch setroubleshoot-3.3.36.tar.bz2 New: ---- add_avc_denials_log_priority.patch setroubleshoot-3.3.37.tar.bz2 ----------(Old B)---------- Old: upstream version 3.3.37 * sealert_add_dependency_error_handling.patch * setroubleshoot-3.3.36-libxml2_to_xml_etree_ElementTree.patch Old: * sealert_add_dependency_error_handling.patch * setroubleshoot-3.3.36-libxml2_to_xml_etree_ElementTree.patch - add add_avc_denials_log_priority.patch to set avc denial log level ----------(Old E)---------- ----------(New B)---------- New: * setroubleshoot-3.3.36-libxml2_to_xml_etree_ElementTree.patch - add add_avc_denials_log_priority.patch to set avc denial log level (fixes bnc#1257152) ----------(New E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ setroubleshoot.spec ++++++ --- /var/tmp/diff_new_pack.eQgyds/_old 2026-08-01 18:29:21.143817230 +0200 +++ /var/tmp/diff_new_pack.eQgyds/_new 2026-08-01 18:29:21.143817230 +0200 @@ -24,7 +24,7 @@ License: GPL-2.0-or-later Group: Productivity/Security Name: setroubleshoot -Version: 3.3.36 +Version: 3.3.37 Release: 0 URL: https://gitlab.com/setroubleshoot/setroubleshoot Source0: https://gitlab.com/setroubleshoot/setroubleshoot/-/archive/%{version}/setroubleshoot-%{version}.tar.bz2 @@ -34,8 +34,7 @@ Patch0: setroubleshoot-desktop.patch Patch1: remove-pip-from-makefile.patch Patch2: disable-send-bug-report-button.patch -Patch3: sealert_add_dependency_error_handling.patch -Patch4: setroubleshoot-3.3.36-libxml2_to_xml_etree_ElementTree.patch +Patch3: add_avc_denials_log_priority.patch # git format-patch -N 3.3.30 # i=1; for j in 00*patch; do printf "Patch%04d: %s\n" $i $j; i=$((i+1));done BuildRequires: autoconf ++++++ add_avc_denials_log_priority.patch ++++++ diff --git a/src/config.py.in b/src/config.py.in index 48a670a..6d6cb26 100644 --- a/src/config.py.in +++ b/src/config.py.in @@ -256,6 +256,12 @@ provide remote connections use this "{unix}%(path)s, hostname" setroubleshootd logging level. Levels are the same as in the python logging module, but are case insensitive. The defined levels in severity order are:[CRITICAL, ERROR, WARNING, INFO, DEBUG]''', + }, + 'avc_level': { + 'value': 'error', + 'description': ''' +Log priority for AVC denial messages. Useful with SELinux in PERMISSIVE mode. +Allowed: [CRITICAL, ERROR, WARNING, INFO, DEBUG]. Default: error.''', }, 'log_full_report': { 'value': 'True', diff --git a/src/setroubleshoot/server.py b/src/setroubleshoot/server.py index 3369af1..5b7ee94 100755 --- a/src/setroubleshoot/server.py +++ b/src/setroubleshoot/server.py @@ -98,7 +98,7 @@ from setroubleshoot.rpc_interfaces import (SETroubleshootServerInterface, from setroubleshoot.util import (get_hostname, make_database_filepath, assure_file_ownership_permissions, - get_identity, log_init, log_debug, syslog_trace + get_identity, log_init, log_debug, log_avc, syslog_trace ) log_init('setroubleshootd_log') @@ -225,14 +225,18 @@ class AlertPluginReportReceiver(PluginReportReceiver): log_debug("sending alert to all clients") from setroubleshoot.html_util import html_to_text - syslog.syslog(syslog.LOG_ERR, siginfo.summary() + _(" For complete SELinux messages run: sealert -l %s") % siginfo.local_id) + pid = None for audit_record in siginfo.audit_event.records: if audit_record.record_type == 'AVC': pid = audit_record.fields["pid"] break - if get_config('setroubleshootd_log', 'log_full_report', bool): - global pkg_name - systemd.journal.send(siginfo.format_text(), OBJECT_PID=pid, SYSLOG_IDENTIFIER=pkg_name) + global pkg_name + journal_text = siginfo.format_text() if get_config('setroubleshootd_log', 'log_full_report', bool) else None + log_avc('setroubleshootd_log', + siginfo.summary() + _(" For complete SELinux messages run: sealert -l %s") % siginfo.local_id, + journal_text=journal_text, + OBJECT_PID=pid, + SYSLOG_IDENTIFIER=pkg_name) for u in siginfo.users: if u.username[0:6] == "email:": diff --git a/src/setroubleshoot/util.py b/src/setroubleshoot/util.py index b6125aa..3797ead 100755 --- a/src/setroubleshoot/util.py +++ b/src/setroubleshoot/util.py @@ -146,6 +146,17 @@ def log_debug(msg): syslog.syslog(syslog.LOG_DEBUG, msg) +def log_avc(section, msg, journal_text=None, **journal_fields): + avc_prio = log_levels.get(get_config(section, 'avc_level').upper(), syslog.LOG_ERR) + min_prio = log_levels.get(get_config(section, 'level').upper(), syslog.LOG_WARNING) + if avc_prio > min_prio: + return + syslog.syslog(avc_prio, msg) + if journal_text is not None: + import systemd.journal + systemd.journal.send(journal_text, PRIORITY=avc_prio, **journal_fields) + + def syslog_trace(trace): log_lines = trace.split('\n') for line in log_lines: ++++++ setroubleshoot-3.3.36.tar.bz2 -> setroubleshoot-3.3.37.tar.bz2 ++++++ ++++ 2255 lines of diff (skipped)
