Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package selinux-policy for openSUSE:Factory
checked in at 2024-01-12 23:44:13
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/selinux-policy (Old)
and /work/SRC/openSUSE:Factory/.selinux-policy.new.21961 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "selinux-policy"
Fri Jan 12 23:44:13 2024 rev:55 rq:1138076 version:20240104
Changes:
--------
--- /work/SRC/openSUSE:Factory/selinux-policy/selinux-policy.changes
2023-12-11 21:49:46.137789618 +0100
+++ /work/SRC/openSUSE:Factory/.selinux-policy.new.21961/selinux-policy.changes
2024-01-12 23:44:29.744553300 +0100
@@ -1,0 +2,7 @@
+Tue Jan 09 09:14:44 UTC 2024 - cathy...@suse.com
+
+- Update to version 20240104:
+ * Allow keepalived_t read+write kernel_t pipes (bsc#1216060)
+ * allow rebootmgr to read the system state (bsc#1205931)
+
+-------------------------------------------------------------------
Old:
----
selinux-policy-20231124.tar.xz
New:
----
selinux-policy-20240104.tar.xz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ selinux-policy.spec ++++++
--- /var/tmp/diff_new_pack.rR2TAK/_old 2024-01-12 23:44:30.980598540 +0100
+++ /var/tmp/diff_new_pack.rR2TAK/_new 2024-01-12 23:44:30.984598686 +0100
@@ -1,7 +1,7 @@
#
# spec file for package selinux-policy
#
-# Copyright (c) 2023 SUSE LLC
+# Copyright (c) 2024 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -33,7 +33,7 @@
License: GPL-2.0-or-later
Group: System/Management
Name: selinux-policy
-Version: 20231124
+Version: 20240104
Release: 0
Source0: %{name}-%{version}.tar.xz
Source1: container.fc
++++++ _servicedata ++++++
--- /var/tmp/diff_new_pack.rR2TAK/_old 2024-01-12 23:44:31.048601028 +0100
+++ /var/tmp/diff_new_pack.rR2TAK/_new 2024-01-12 23:44:31.052601175 +0100
@@ -1,7 +1,7 @@
<servicedata>
<service name="tar_scm">
<param
name="url">https://gitlab.suse.de/selinux/selinux-policy.git</param>
- <param
name="changesrevision">486dc4d44adebecde9d3f15c0dbf3590cfad90ae</param></service><service
name="tar_scm">
+ <param
name="changesrevision">220c22ef16fe73603a32bc9f99ffe6bc085e858e</param></service><service
name="tar_scm">
<param
name="url">https://github.com/containers/container-selinux.git</param>
<param
name="changesrevision">07b3034f6d9625ab84508a2f46515d8ff79b4204</param></service><service
name="tar_scm">
<param
name="url">https://gitlab.suse.de/jsegitz/selinux-policy.git</param>
++++++ selinux-policy-20231124.tar.xz -> selinux-policy-20240104.tar.xz ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/selinux-policy-20231124/policy/modules/contrib/keepalived.te
new/selinux-policy-20240104/policy/modules/contrib/keepalived.te
--- old/selinux-policy-20231124/policy/modules/contrib/keepalived.te
2023-11-24 08:15:35.000000000 +0100
+++ new/selinux-policy-20240104/policy/modules/contrib/keepalived.te
2024-01-04 15:28:00.000000000 +0100
@@ -67,6 +67,7 @@
kernel_rw_usermodehelper_state(keepalived_t)
kernel_search_network_sysctl(keepalived_t)
kernel_rw_net_sysctls(keepalived_t)
+kernel_rw_pipes(keepalived_t)
auth_use_nsswitch(keepalived_t)
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/selinux-policy-20231124/policy/modules/contrib/rebootmgr.te
new/selinux-policy-20240104/policy/modules/contrib/rebootmgr.te
--- old/selinux-policy-20231124/policy/modules/contrib/rebootmgr.te
2023-11-24 08:15:35.000000000 +0100
+++ new/selinux-policy-20240104/policy/modules/contrib/rebootmgr.te
2024-01-04 15:28:00.000000000 +0100
@@ -29,6 +29,8 @@
systemd_dbus_chat_logind(rebootmgr_t)
+kernel_read_system_state(rebootmgr_t)
+
unconfined_dbus_chat(rebootmgr_t)
optional_policy(`
