Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package selinux-policy for openSUSE:Factory checked in at 2026-09-12 21:15:35 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/selinux-policy (Old) and /work/SRC/openSUSE:Factory/.selinux-policy.new.1265 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "selinux-policy" Sat Sep 12 21:15:35 2026 rev:175 rq:1377377 version:20260910 Changes: -------- --- /work/SRC/openSUSE:Factory/selinux-policy/selinux-policy.changes 2026-09-09 16:21:18.250408431 +0200 +++ /work/SRC/openSUSE:Factory/.selinux-policy.new.1265/selinux-policy.changes 2026-09-12 21:16:12.215604011 +0200 @@ -1,0 +2,7 @@ +Fri Sep 11 10:23:48 UTC 2026 - Cathy Hu <[email protected]> + +- Update to version 20260910: + * Allow polkit_auth_t dac_read_search/dac_override (bsc#1255503) + * Allow pam_ssh_agent configure custom key location (bsc#1255503) + +------------------------------------------------------------------- Old: ---- selinux-policy-20260908.tar.xz New: ---- selinux-policy-20260910.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ selinux-policy.spec ++++++ --- /var/tmp/diff_new_pack.Yh1k5Z/_old 2026-09-12 21:16:13.067639446 +0200 +++ /var/tmp/diff_new_pack.Yh1k5Z/_new 2026-09-12 21:16:13.069639529 +0200 @@ -37,7 +37,7 @@ License: GPL-2.0-or-later Group: System/Management Name: selinux-policy -Version: 20260908 +Version: 20260910 Release: 0 Source0: %{name}-%{version}.tar.xz Source1: container.fc ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.Yh1k5Z/_old 2026-09-12 21:16:13.130642066 +0200 +++ /var/tmp/diff_new_pack.Yh1k5Z/_new 2026-09-12 21:16:13.132642149 +0200 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://gitlab.suse.de/selinux/selinux-policy.git</param> - <param name="changesrevision">d841048ce599134f71e62dea3682c0bc8b767f1b</param></service></servicedata> + <param name="changesrevision">5899922f7ab64a630e62ba8b7bc241b7240762c4</param></service></servicedata> (No newline at EOF) ++++++ selinux-policy-20260908.tar.xz -> selinux-policy-20260910.tar.xz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/selinux-policy-20260908/policy/modules/contrib/policykit.te new/selinux-policy-20260910/policy/modules/contrib/policykit.te --- old/selinux-policy-20260908/policy/modules/contrib/policykit.te 2026-09-08 09:36:01.000000000 +0200 +++ new/selinux-policy-20260910/policy/modules/contrib/policykit.te 2026-09-10 13:04:41.000000000 +0200 @@ -168,6 +168,9 @@ # allow policykit_auth_t self:capability { sys_nice ipc_lock setgid setuid }; +tunable_policy(`authlogin_pam_ssh_agent',` + allow policykit_auth_t self:capability { dac_read_search dac_override }; +') dontaudit policykit_auth_t self:capability sys_tty_config; allow policykit_auth_t self:process { setsched getsched signal }; @@ -247,6 +250,12 @@ ') optional_policy(` + tunable_policy(`authlogin_pam_ssh_agent',` + ssh_read_user_home_files(policykit_auth_t) + ') +') + +optional_policy(` udev_read_db(policykit_auth_t) ') diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/selinux-policy-20260908/policy/modules/system/authlogin.te new/selinux-policy-20260910/policy/modules/system/authlogin.te --- old/selinux-policy-20260908/policy/modules/system/authlogin.te 2026-09-08 09:36:01.000000000 +0200 +++ new/selinux-policy-20260910/policy/modules/system/authlogin.te 2026-09-10 13:04:41.000000000 +0200 @@ -7,6 +7,13 @@ ## <desc> ## <p> +## Allow pam_ssh_agent configure custom key location +## </p> +## </desc> +gen_tunable(authlogin_pam_ssh_agent, false) + +## <desc> +## <p> ## Allow users to login using a radius server ## </p> ## </desc>
