Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package selinux-policy for openSUSE:Factory
checked in at 2026-09-30 16:21:54
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/selinux-policy (Old)
and /work/SRC/openSUSE:Factory/.selinux-policy.new.1465845 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "selinux-policy"
Wed Sep 30 16:21:54 2026 rev:178 rq:1381597 version:20260928
Changes:
--------
--- /work/SRC/openSUSE:Factory/selinux-policy/selinux-policy.changes
2026-09-23 14:34:24.640982785 +0200
+++
/work/SRC/openSUSE:Factory/.selinux-policy.new.1465845/selinux-policy.changes
2026-09-30 16:22:43.043510466 +0200
@@ -1,0 +2,6 @@
+Wed Sep 30 07:13:32 UTC 2026 - Cathy Hu <[email protected]>
+
+- Update to version 20260928:
+ * Allow sdbootutil_t write access to /var/lib/sdbootutil (bsc#1281087)
+
+-------------------------------------------------------------------
Old:
----
selinux-policy-20260923.tar.xz
New:
----
selinux-policy-20260928.tar.xz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ selinux-policy.spec ++++++
--- /var/tmp/diff_new_pack.UmbzD4/_old 2026-09-30 16:22:43.916546974 +0200
+++ /var/tmp/diff_new_pack.UmbzD4/_new 2026-09-30 16:22:43.917547016 +0200
@@ -37,7 +37,7 @@
License: GPL-2.0-or-later
Group: System/Management
Name: selinux-policy
-Version: 20260923
+Version: 20260928
Release: 0
Source0: %{name}-%{version}.tar.xz
Source1: container.fc
++++++ _servicedata ++++++
--- /var/tmp/diff_new_pack.UmbzD4/_old 2026-09-30 16:22:43.988549985 +0200
+++ /var/tmp/diff_new_pack.UmbzD4/_new 2026-09-30 16:22:43.991550111 +0200
@@ -1,6 +1,6 @@
<servicedata>
<service name="tar_scm">
<param
name="url">https://gitlab.suse.de/selinux/selinux-policy.git</param>
- <param
name="changesrevision">8f46d2387ebb2f2f1b9eda3b2f9c02f36b61f357</param></service></servicedata>
+ <param
name="changesrevision">fcd74b4766d7ceed5bd30b9ae2e9c81448301713</param></service></servicedata>
(No newline at EOF)
++++++ selinux-policy-20260923.tar.xz -> selinux-policy-20260928.tar.xz ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/selinux-policy-20260923/policy/modules/contrib/sdbootutil.fc
new/selinux-policy-20260928/policy/modules/contrib/sdbootutil.fc
--- old/selinux-policy-20260923/policy/modules/contrib/sdbootutil.fc
2026-09-23 10:27:53.000000000 +0200
+++ new/selinux-policy-20260928/policy/modules/contrib/sdbootutil.fc
2026-09-28 09:52:04.000000000 +0200
@@ -1,2 +1,3 @@
/usr/bin/sdbootutil --
gen_context(system_u:object_r:sdbootutil_exec_t,s0)
/run/sdbootutil(/.*)?
gen_context(system_u:object_r:sdbootutil_var_run_t,s0)
+/var/lib/sdbootutil(/.*)?
gen_context(system_u:object_r:systemd_pcrlock_var_lib_t,s0)
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/selinux-policy-20260923/policy/modules/contrib/sdbootutil.te
new/selinux-policy-20260928/policy/modules/contrib/sdbootutil.te
--- old/selinux-policy-20260923/policy/modules/contrib/sdbootutil.te
2026-09-23 10:27:53.000000000 +0200
+++ new/selinux-policy-20260928/policy/modules/contrib/sdbootutil.te
2026-09-28 09:52:04.000000000 +0200
@@ -108,6 +108,7 @@
optional_policy(`
systemd_domtrans_pcrlock(sdbootutil_t)
systemd_manage_pcrlock_files(sdbootutil_t)
+ filetrans_pattern(sdbootutil_t, systemd_pcrlock_var_lib_t,
systemd_pcrlock_var_lib_t, file)
')
optional_policy(`
