Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package selinux-policy for openSUSE:Factory checked in at 2026-07-23 23:09:04 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/selinux-policy (Old) and /work/SRC/openSUSE:Factory/.selinux-policy.new.2004 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "selinux-policy" Thu Jul 23 23:09:04 2026 rev:168 rq:1366982 version:20260715 Changes: -------- --- /work/SRC/openSUSE:Factory/selinux-policy/selinux-policy.changes 2026-07-13 14:25:55.787032794 +0200 +++ /work/SRC/openSUSE:Factory/.selinux-policy.new.2004/selinux-policy.changes 2026-07-23 23:09:47.423123763 +0200 @@ -1,0 +2,19 @@ +Mon Jul 20 12:34:12 UTC 2026 - Zdenek Kubala <[email protected]> + +- fix cleanoldsepoldir.sh to properly handle migration markers + when /var/lib/selinux doesn't exists (backported from SLFO_Main codebase) + +------------------------------------------------------------------- +Wed Jul 15 14:39:30 UTC 2026 - Cathy Hu <[email protected]> + +- Update to version 20260715: + * Allow snapper_sdbootutil_plugin_t status and stop unit files(bsc#1271391) + * Allow sdbootutil_t read and write snapperd_t pipes (bsc#1271391) + +------------------------------------------------------------------- +Mon Jul 13 09:13:57 UTC 2026 - Cathy Hu <[email protected]> + +- Update to version 20260713: + * Fix wrong gen_requires in snapper_read_data_files (bsc#1271282) + +------------------------------------------------------------------- Old: ---- selinux-policy-20260702.tar.xz New: ---- selinux-policy-20260715.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ selinux-policy.spec ++++++ --- /var/tmp/diff_new_pack.j3FJwH/_old 2026-07-23 23:09:48.519162249 +0200 +++ /var/tmp/diff_new_pack.j3FJwH/_new 2026-07-23 23:09:48.523162390 +0200 @@ -37,7 +37,7 @@ License: GPL-2.0-or-later Group: System/Management Name: selinux-policy -Version: 20260702 +Version: 20260715 Release: 0 Source0: %{name}-%{version}.tar.xz Source1: container.fc ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.j3FJwH/_old 2026-07-23 23:09:48.603165199 +0200 +++ /var/tmp/diff_new_pack.j3FJwH/_new 2026-07-23 23:09:48.615165621 +0200 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://gitlab.suse.de/selinux/selinux-policy.git</param> - <param name="changesrevision">6a1f6d5c2888c270101ee891b104b0004d2efce6</param></service></servicedata> + <param name="changesrevision">2ad83e90ae484ee791fe586787273f52deb5dd4c</param></service></servicedata> (No newline at EOF) ++++++ cleanoldsepoldir.sh ++++++ --- /var/tmp/diff_new_pack.j3FJwH/_old 2026-07-23 23:09:48.663167306 +0200 +++ /var/tmp/diff_new_pack.j3FJwH/_new 2026-07-23 23:09:48.671167587 +0200 @@ -108,21 +108,23 @@ echo } + # Deletes the old /var/lib/selinux directory and updates marker files. delete_var_lib_selinux () { - if [ ! -d "/var/lib/selinux" ]; then - echo "INFO: Directory \`/var/lib/selinux\` does not exist. Nothing to do." - return - fi - echo "INFO: Deleting /var/lib/selinux..." - if find /var/lib/selinux -depth -print -delete; then + if [ -d "/var/lib/selinux" ]; then + echo "INFO: Deleting /var/lib/selinux..." + if ! find /var/lib/selinux -depth -print -delete; then + echo "ERROR: Failed to delete /var/lib/selinux." >&2 + exit 1 + fi echo "INFO: Successfully deleted /var/lib/selinux." - rm --preserve-root=all -f "${target_dir}/selinux_modules_migrated-"{minimum,mls,targeted} && \ - echo "DO NOT DELETE THIS FILE - Part of SELinux policy root path migration on transactional or snapshoted systems." > "${target_dir}/${target_file_deletion}" else - echo "ERROR: Failed to delete /var/lib/selinux." >&2 - exit 1 + echo "INFO: Directory \`/var/lib/selinux\` does not exist. Nothing to do." fi + + # Remove migration marker files in both cases (/var/lib/selinux exists or does not - e.g. after clean os installation) + rm --preserve-root=all -f "${target_dir}/selinux_modules_migrated-"{minimum,mls,targeted} && \ + echo "DO NOT DELETE THIS FILE - Part of SELinux policy root path migration on transactional or snapshoted systems." > "${target_dir}/${target_file_deletion}" } # Checks a specific location (snapshot or overlay) for the migration marker file. ++++++ selinux-policy-20260702.tar.xz -> selinux-policy-20260715.tar.xz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/selinux-policy-20260702/policy/modules/contrib/sdbootutil.te new/selinux-policy-20260715/policy/modules/contrib/sdbootutil.te --- old/selinux-policy-20260702/policy/modules/contrib/sdbootutil.te 2026-07-02 13:24:21.000000000 +0200 +++ new/selinux-policy-20260715/policy/modules/contrib/sdbootutil.te 2026-07-15 16:38:00.000000000 +0200 @@ -100,6 +100,8 @@ optional_policy(` snapper_read_config_files(sdbootutil_t) snapper_read_data_files(sdbootutil_t) + snapper_read_inherited_pipe(sdbootutil_t) + snapper_write_inherited_pipe(sdbootutil_t) snapper_select_boot_snapshot(sdbootutil_t) ') diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/selinux-policy-20260702/policy/modules/contrib/snapper.if new/selinux-policy-20260715/policy/modules/contrib/snapper.if --- old/selinux-policy-20260702/policy/modules/contrib/snapper.if 2026-07-02 13:24:21.000000000 +0200 +++ new/selinux-policy-20260715/policy/modules/contrib/snapper.if 2026-07-15 16:38:00.000000000 +0200 @@ -229,7 +229,7 @@ # interface(`snapper_read_data_files',` gen_require(` - type snapperd_conf_t; + type snapperd_data_t; ') read_files_pattern($1, snapperd_data_t, snapperd_data_t) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/selinux-policy-20260702/policy/modules/contrib/snapper.te new/selinux-policy-20260715/policy/modules/contrib/snapper.te --- old/selinux-policy-20260702/policy/modules/contrib/snapper.te 2026-07-02 13:24:21.000000000 +0200 +++ new/selinux-policy-20260715/policy/modules/contrib/snapper.te 2026-07-15 16:38:00.000000000 +0200 @@ -219,4 +219,6 @@ optional_policy(` systemd_exec_systemctl(snapper_sdbootutil_plugin_t) + systemd_status_systemd_services(snapper_sdbootutil_plugin_t) + systemd_stop_systemd_services(snapper_sdbootutil_plugin_t) ')
