Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package selinux-policy for openSUSE:Factory checked in at 2025-07-09 17:26:02 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/selinux-policy (Old) and /work/SRC/openSUSE:Factory/.selinux-policy.new.7373 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "selinux-policy" Wed Jul 9 17:26:02 2025 rev:119 rq:1291206 version:20250703 Changes: -------- --- /work/SRC/openSUSE:Factory/selinux-policy/selinux-policy.changes 2025-07-06 17:00:10.139717415 +0200 +++ /work/SRC/openSUSE:Factory/.selinux-policy.new.7373/selinux-policy.changes 2025-07-09 17:26:03.605685190 +0200 @@ -1,0 +2,7 @@ +Tue Jul 8 09:08:34 UTC 2025 - Cathy Hu <cathy...@suse.com> + +- Update macros.selinux-policy to trigger a full relabel on transactional + systems upon module installation. This is rather expensive and will + hopefully be replaced by a more fine grained solution later on (bsc#1232753) + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ macros.selinux-policy ++++++ --- /var/tmp/diff_new_pack.NNYQkZ/_old 2025-07-09 17:26:04.457720642 +0200 +++ /var/tmp/diff_new_pack.NNYQkZ/_new 2025-07-09 17:26:04.461720809 +0200 @@ -117,9 +117,13 @@ _policytype="targeted" \ fi \ if %{_sbindir}/selinuxenabled && [ "${SELINUXTYPE}" = "${_policytype}" ]; then \ - if [ -f %{_file_context_file_pre} ] && [ -z "${TRANSACTIONAL_UPDATE}" ]; then \ - %{_sbindir}/fixfiles -C %{_file_context_file_pre} restore &> /dev/null \ - rm -f %{_file_context_file_pre} \ + if [ -f %{_file_context_file_pre} ]; then \ + if [ -z "${TRANSACTIONAL_UPDATE}" ]; then \ + %{_sbindir}/fixfiles -C %{_file_context_file_pre} restore &> /dev/null \ + rm -f %{_file_context_file_pre} \ + else \ + touch /etc/selinux/.autorelabel \ + fi \ fi \ fi \ %{nil}