Script 'mail_helper' called by obssrc
Hello community,

here is the log from the commit of package microos-tools for openSUSE:Factory 
checked in at 2023-03-22 22:29:16
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/microos-tools (Old)
 and      /work/SRC/openSUSE:Factory/.microos-tools.new.31432 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "microos-tools"

Wed Mar 22 22:29:16 2023 rev:26 rq:1072387 version:2.20

Changes:
--------
--- /work/SRC/openSUSE:Factory/microos-tools/microos-tools.changes      
2023-03-14 18:15:32.703379133 +0100
+++ /work/SRC/openSUSE:Factory/.microos-tools.new.31432/microos-tools.changes   
2023-03-22 22:29:22.065808513 +0100
@@ -1,0 +2,6 @@
+Thu Mar 16 12:06:36 UTC 2023 - Fabian Vogt <fv...@suse.com>
+
+- Update to version 2.20:
+  - 98selinux-microos: don't load the policy to label the system
+
+-------------------------------------------------------------------

Old:
----
  microos-tools-2.19.tar.xz

New:
----
  microos-tools-2.20.tar.xz

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ microos-tools.spec ++++++
--- /var/tmp/diff_new_pack.0SMvG2/_old  2023-03-22 22:29:22.713811774 +0100
+++ /var/tmp/diff_new_pack.0SMvG2/_new  2023-03-22 22:29:22.717811794 +0100
@@ -19,7 +19,7 @@
 %{!?_distconfdir: %global _distconfdir %{_prefix}%{_sysconfdir}}
 
 Name:           microos-tools
-Version:        2.19
+Version:        2.20
 Release:        0
 Summary:        Files and Scripts for openSUSE MicroOS
 License:        GPL-2.0-or-later

++++++ microos-tools-2.19.tar.xz -> microos-tools-2.20.tar.xz ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/microos-tools-2.19/NEWS new/microos-tools-2.20/NEWS
--- old/microos-tools-2.19/NEWS 2023-03-14 11:00:50.000000000 +0100
+++ new/microos-tools-2.20/NEWS 2023-03-16 13:02:46.000000000 +0100
@@ -1,3 +1,6 @@
+Version 2.20:
+- 98selinux-microos: Don't load the policy to label the system
+
 Version 2.19:
 - Clean up selinux-autorelabel-generator and make it compatible with systemd 
253
 
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/microos-tools-2.19/configure 
new/microos-tools-2.20/configure
--- old/microos-tools-2.19/configure    2023-03-14 11:02:04.000000000 +0100
+++ new/microos-tools-2.20/configure    2023-03-16 13:02:54.000000000 +0100
@@ -1,6 +1,6 @@
 #! /bin/sh
 # Guess values for system-dependent variables and create Makefiles.
-# Generated by GNU Autoconf 2.71 for microos-tools 2.19.
+# Generated by GNU Autoconf 2.71 for microos-tools 2.20.
 #
 #
 # Copyright (C) 1992-1996, 1998-2017, 2020-2021 Free Software Foundation,
@@ -607,8 +607,8 @@
 # Identity of this package.
 PACKAGE_NAME='microos-tools'
 PACKAGE_TARNAME='microos-tools'
-PACKAGE_VERSION='2.19'
-PACKAGE_STRING='microos-tools 2.19'
+PACKAGE_VERSION='2.20'
+PACKAGE_STRING='microos-tools 2.20'
 PACKAGE_BUGREPORT=''
 PACKAGE_URL=''
 
@@ -1285,7 +1285,7 @@
   # Omit some internal or obsolete options to make the list less imposing.
   # This message is too long to be a string in the A/UX 3.1 sh.
   cat <<_ACEOF
-\`configure' configures microos-tools 2.19 to adapt to many kinds of systems.
+\`configure' configures microos-tools 2.20 to adapt to many kinds of systems.
 
 Usage: $0 [OPTION]... [VAR=VALUE]...
 
@@ -1352,7 +1352,7 @@
 
 if test -n "$ac_init_help"; then
   case $ac_init_help in
-     short | recursive ) echo "Configuration of microos-tools 2.19:";;
+     short | recursive ) echo "Configuration of microos-tools 2.20:";;
    esac
   cat <<\_ACEOF
 
@@ -1458,7 +1458,7 @@
 test -n "$ac_init_help" && exit $ac_status
 if $ac_init_version; then
   cat <<\_ACEOF
-microos-tools configure 2.19
+microos-tools configure 2.20
 generated by GNU Autoconf 2.71
 
 Copyright (C) 2021 Free Software Foundation, Inc.
@@ -1534,7 +1534,7 @@
 This file contains any messages produced by compilers while
 running configure, to aid debugging if configure makes a mistake.
 
-It was created by microos-tools $as_me 2.19, which was
+It was created by microos-tools $as_me 2.20, which was
 generated by GNU Autoconf 2.71.  Invocation command line was
 
   $ $0$ac_configure_args_raw
@@ -2794,7 +2794,7 @@
 
 # Define the identity of the package.
  PACKAGE='microos-tools'
- VERSION='2.19'
+ VERSION='2.20'
 
 
 printf "%s\n" "#define PACKAGE \"$PACKAGE\"" >>confdefs.h
@@ -5051,7 +5051,7 @@
 # report actual input values of CONFIG_FILES etc. instead of their
 # values after options handling.
 ac_log="
-This file was extended by microos-tools $as_me 2.19, which was
+This file was extended by microos-tools $as_me 2.20, which was
 generated by GNU Autoconf 2.71.  Invocation command line was
 
   CONFIG_FILES    = $CONFIG_FILES
@@ -5110,7 +5110,7 @@
 cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
 ac_cs_config='$ac_cs_config_escaped'
 ac_cs_version="\\
-microos-tools config.status 2.19
+microos-tools config.status 2.20
 configured by $0, generated by GNU Autoconf 2.71,
   with options \\"\$ac_cs_config\\"
 
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/microos-tools-2.19/configure.ac 
new/microos-tools-2.20/configure.ac
--- old/microos-tools-2.19/configure.ac 2023-03-14 11:00:54.000000000 +0100
+++ new/microos-tools-2.20/configure.ac 2023-03-16 13:02:24.000000000 +0100
@@ -1,5 +1,5 @@
 dnl Process this file with autoconf to produce a configure script.
-AC_INIT([microos-tools], [2.19])
+AC_INIT([microos-tools], [2.20])
 AM_INIT_AUTOMAKE
 AC_PREFIX_DEFAULT(/usr)
 
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/microos-tools-2.19/devel-tools/Makefile.in 
new/microos-tools-2.20/devel-tools/Makefile.in
--- old/microos-tools-2.19/devel-tools/Makefile.in      2023-03-14 
11:02:02.000000000 +0100
+++ new/microos-tools-2.20/devel-tools/Makefile.in      2023-03-16 
13:02:54.000000000 +0100
@@ -313,9 +313,9 @@
              exit 1;; \
          esac; \
        done; \
-       echo ' cd $(top_srcdir) && $(AUTOMAKE) --gnu devel-tools/Makefile'; \
+       echo ' cd $(top_srcdir) && $(AUTOMAKE) --foreign devel-tools/Makefile'; 
\
        $(am__cd) $(top_srcdir) && \
-         $(AUTOMAKE) --gnu devel-tools/Makefile
+         $(AUTOMAKE) --foreign devel-tools/Makefile
 Makefile: $(srcdir)/Makefile.in $(top_builddir)/config.status
        @case '$?' in \
          *config.status*) \
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' 
old/microos-tools-2.19/selinux/98selinux-microos/selinux-microos-relabel.sh 
new/microos-tools-2.20/selinux/98selinux-microos/selinux-microos-relabel.sh
--- old/microos-tools-2.19/selinux/98selinux-microos/selinux-microos-relabel.sh 
2023-03-14 09:51:35.000000000 +0100
+++ new/microos-tools-2.20/selinux/98selinux-microos/selinux-microos-relabel.sh 
2023-03-16 13:02:08.000000000 +0100
@@ -16,64 +16,55 @@
 
 rd_microos_relabel()
 {
-    # We need to load a SELinux policy to label the filesystem
-    if [ -x "$NEWROOT/usr/sbin/load_policy" ]; then
-        ret=0
-        info "SELinux: relabeling root filesystem"
-
-       # If this doesn't exist because e.g. it's not mounted yet due to a bug
-       # (boo#1197309), the exclusion is ignored. If it gets mounted during
-       # the relabel, it gets wrong labels assigned.
-       if ! [ -d "$NEWROOT/var/lib/overlay" ]; then
-           warn "ERROR: /var/lib/overlay doesn't exist - /var not mounted 
(yet)?"
-            return 1
-       fi
+    info "SELinux: relabeling root filesystem"
+
+    # If this doesn't exist because e.g. it's not mounted yet due to a bug
+    # (boo#1197309), the exclusion is ignored. If it gets mounted during
+    # the relabel, it gets wrong labels assigned.
+    if ! [ -d "$NEWROOT/var/lib/overlay" ]; then
+       warn "ERROR: /var/lib/overlay doesn't exist - /var not mounted (yet)?"
+       return 1
+    fi
 
-       for sysdir in /proc /sys /dev; do
-           if ! mount --rbind "${sysdir}" "${NEWROOT}${sysdir}" ; then
-               warn "ERROR: mounting ${sysdir} failed!"
-               ret=1
-           fi
-            # Don't let recursive umounts propagate into the bind source
-            mount --make-rslave "${NEWROOT}${sysdir}"
-       done
-       if [ $ret -eq 0 ]; then
-            # load_policy does mount /proc and /sys/fs/selinux in
-            # libselinux,selinux_init_load_policy()
-            info "SELinux: loading policy"
-           out=$(LANG=C chroot "$NEWROOT" /usr/sbin/load_policy -i 2>&1)
-           ret=$?
-           info "$out"
-
-            if [ $ret -eq 0 ]; then
-               #LANG=C /usr/sbin/setenforce 0
-                info "SELinux: mount root read-write and relabel"
-               # Use alternate mount point to prevent overwriting subvolume 
options (bsc#1186563)
-               ROOT_SELINUX="${NEWROOT}-selinux"
-               mkdir -p "${ROOT_SELINUX}"
-               mount --rbind --make-rslave "${NEWROOT}" "${ROOT_SELINUX}"
-               mount -o remount,rw "${ROOT_SELINUX}"
-                oldrovalue="$(btrfs prop get "${ROOT_SELINUX}" ro | cut -d= 
-f2)"
-                btrfs prop set "${ROOT_SELINUX}" ro false
-                FORCE=
-               [ -e "${ROOT_SELINUX}"/etc/selinux/.autorelabel ] && 
FORCE="$(cat "${ROOT_SELINUX}"/etc/selinux/.autorelabel)"
-               LANG=C chroot "${ROOT_SELINUX}" /sbin/restorecon $FORCE -R -e 
/var/lib/overlay -e /sys -e /dev -e /run /
-                btrfs prop set "${ROOT_SELINUX}" ro "${oldrovalue}"
-               umount -R "${ROOT_SELINUX}"
-            fi
+    ret=0
+    for sysdir in /proc /sys /dev; do
+       if ! mount --rbind "${sysdir}" "${NEWROOT}${sysdir}" ; then
+           warn "ERROR: mounting ${sysdir} failed!"
+           ret=1
        fi
-       for sysdir in /proc /sys /dev; do
-           if ! umount -R "${NEWROOT}${sysdir}" ; then
-               warn "ERROR: unmounting ${sysdir} failed!"
-               ret=1
-           fi
-       done
+       # Don't let recursive umounts propagate into the bind source
+       mount --make-rslave "${NEWROOT}${sysdir}"
+    done
+    if [ $ret -eq 0 ]; then
+       #LANG=C /usr/sbin/setenforce 0
+       info "SELinux: mount root read-write and relabel"
+       # Use alternate mount point to prevent overwriting subvolume options 
(bsc#1186563)
+       ROOT_SELINUX="${NEWROOT}-selinux"
+       mkdir -p "${ROOT_SELINUX}"
+       mount --rbind --make-rslave "${NEWROOT}" "${ROOT_SELINUX}"
+       mount -o remount,rw "${ROOT_SELINUX}"
+       oldrovalue="$(btrfs prop get "${ROOT_SELINUX}" ro | cut -d= -f2)"
+       btrfs prop set "${ROOT_SELINUX}" ro false
+       FORCE=
+       [ -e "${ROOT_SELINUX}"/etc/selinux/.autorelabel ] && FORCE="$(cat 
"${ROOT_SELINUX}"/etc/selinux/.autorelabel)"
+       . "${ROOT_SELINUX}"/etc/selinux/config
+       LANG=C chroot "$ROOT_SELINUX" /sbin/setfiles $FORCE -e /var/lib/overlay 
-e /proc -e /sys -e /dev -e /etc 
"/etc/selinux/${SELINUXTYPE}/contexts/files/file_contexts" $(chroot 
"$ROOT_SELINUX" cut -d" " -f2 /proc/mounts)
+        # On overlayfs, st_dev isn't consistent so setfiles thinks it's a 
different mountpoint, ignoring it.
+        LANG=C chroot "$ROOT_SELINUX" find /etc -exec /sbin/setfiles $FORCE 
"/etc/selinux/${SELINUXTYPE}/contexts/files/file_contexts" \{\} +
+       btrfs prop set "${ROOT_SELINUX}" ro "${oldrovalue}"
+       umount -R "${ROOT_SELINUX}"
+    fi
+    for sysdir in /proc /sys /dev; do
+       if ! umount -R "${NEWROOT}${sysdir}" ; then
+           warn "ERROR: unmounting ${sysdir} failed!"
+           ret=1
+       fi
+    done
 
-       # Marker when we had relabelled the filesystem
-       > "$NEWROOT"/etc/selinux/.relabelled
+    # Marker when we had relabelled the filesystem
+    > "$NEWROOT"/etc/selinux/.relabelled
 
-       return $ret
-    fi
+    return $ret
 }
 
 if test -e "$NEWROOT"/.autorelabel -a "$NEWROOT"/.autorelabel -nt 
"$NEWROOT"/etc/selinux/.relabelled ; then
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/microos-tools-2.19/selinux/Makefile.in 
new/microos-tools-2.20/selinux/Makefile.in
--- old/microos-tools-2.19/selinux/Makefile.in  2023-03-14 11:02:02.000000000 
+0100
+++ new/microos-tools-2.20/selinux/Makefile.in  2023-03-16 13:02:54.000000000 
+0100
@@ -268,9 +268,9 @@
              exit 1;; \
          esac; \
        done; \
-       echo ' cd $(top_srcdir) && $(AUTOMAKE) --gnu selinux/Makefile'; \
+       echo ' cd $(top_srcdir) && $(AUTOMAKE) --foreign selinux/Makefile'; \
        $(am__cd) $(top_srcdir) && \
-         $(AUTOMAKE) --gnu selinux/Makefile
+         $(AUTOMAKE) --foreign selinux/Makefile
 Makefile: $(srcdir)/Makefile.in $(top_builddir)/config.status
        @case '$?' in \
          *config.status*) \
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/microos-tools-2.19/sysctl/Makefile.in 
new/microos-tools-2.20/sysctl/Makefile.in
--- old/microos-tools-2.19/sysctl/Makefile.in   2023-03-14 11:02:02.000000000 
+0100
+++ new/microos-tools-2.20/sysctl/Makefile.in   2023-03-16 13:02:54.000000000 
+0100
@@ -260,9 +260,9 @@
              exit 1;; \
          esac; \
        done; \
-       echo ' cd $(top_srcdir) && $(AUTOMAKE) --gnu sysctl/Makefile'; \
+       echo ' cd $(top_srcdir) && $(AUTOMAKE) --foreign sysctl/Makefile'; \
        $(am__cd) $(top_srcdir) && \
-         $(AUTOMAKE) --gnu sysctl/Makefile
+         $(AUTOMAKE) --foreign sysctl/Makefile
 Makefile: $(srcdir)/Makefile.in $(top_builddir)/config.status
        @case '$?' in \
          *config.status*) \
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/microos-tools-2.19/systemd-printenv/Makefile.in 
new/microos-tools-2.20/systemd-printenv/Makefile.in
--- old/microos-tools-2.19/systemd-printenv/Makefile.in 2023-03-14 
11:02:02.000000000 +0100
+++ new/microos-tools-2.20/systemd-printenv/Makefile.in 2023-03-16 
13:02:54.000000000 +0100
@@ -260,9 +260,9 @@
              exit 1;; \
          esac; \
        done; \
-       echo ' cd $(top_srcdir) && $(AUTOMAKE) --gnu 
systemd-printenv/Makefile'; \
+       echo ' cd $(top_srcdir) && $(AUTOMAKE) --foreign 
systemd-printenv/Makefile'; \
        $(am__cd) $(top_srcdir) && \
-         $(AUTOMAKE) --gnu systemd-printenv/Makefile
+         $(AUTOMAKE) --foreign systemd-printenv/Makefile
 Makefile: $(srcdir)/Makefile.in $(top_builddir)/config.status
        @case '$?' in \
          *config.status*) \
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/microos-tools-2.19/systemd-proxy-env/Makefile.in 
new/microos-tools-2.20/systemd-proxy-env/Makefile.in
--- old/microos-tools-2.19/systemd-proxy-env/Makefile.in        2023-03-14 
11:02:02.000000000 +0100
+++ new/microos-tools-2.20/systemd-proxy-env/Makefile.in        2023-03-16 
13:02:54.000000000 +0100
@@ -263,9 +263,9 @@
              exit 1;; \
          esac; \
        done; \
-       echo ' cd $(top_srcdir) && $(AUTOMAKE) --gnu 
systemd-proxy-env/Makefile'; \
+       echo ' cd $(top_srcdir) && $(AUTOMAKE) --foreign 
systemd-proxy-env/Makefile'; \
        $(am__cd) $(top_srcdir) && \
-         $(AUTOMAKE) --gnu systemd-proxy-env/Makefile
+         $(AUTOMAKE) --foreign systemd-proxy-env/Makefile
 Makefile: $(srcdir)/Makefile.in $(top_builddir)/config.status
        @case '$?' in \
          *config.status*) \
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/microos-tools-2.19/tmpfs/Makefile.in 
new/microos-tools-2.20/tmpfs/Makefile.in
--- old/microos-tools-2.19/tmpfs/Makefile.in    2023-03-14 11:02:02.000000000 
+0100
+++ new/microos-tools-2.20/tmpfs/Makefile.in    2023-03-16 13:02:54.000000000 
+0100
@@ -264,9 +264,9 @@
              exit 1;; \
          esac; \
        done; \
-       echo ' cd $(top_srcdir) && $(AUTOMAKE) --gnu tmpfs/Makefile'; \
+       echo ' cd $(top_srcdir) && $(AUTOMAKE) --foreign tmpfs/Makefile'; \
        $(am__cd) $(top_srcdir) && \
-         $(AUTOMAKE) --gnu tmpfs/Makefile
+         $(AUTOMAKE) --foreign tmpfs/Makefile
 Makefile: $(srcdir)/Makefile.in $(top_builddir)/config.status
        @case '$?' in \
          *config.status*) \

Reply via email to