Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package selinux-policy for openSUSE:Factory
checked in at 2024-07-15 19:46:30
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/selinux-policy (Old)
and /work/SRC/openSUSE:Factory/.selinux-policy.new.17339 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "selinux-policy"
Mon Jul 15 19:46:30 2024 rev:65 rq:1187549 version:20240715
Changes:
--------
--- /work/SRC/openSUSE:Factory/selinux-policy/selinux-policy.changes
2024-07-14 08:49:37.966537312 +0200
+++ /work/SRC/openSUSE:Factory/.selinux-policy.new.17339/selinux-policy.changes
2024-07-15 19:46:36.473792324 +0200
@@ -1,0 +2,7 @@
+Mon Jul 15 11:55:43 UTC 2024 - cathy...@suse.com
+
+- Update to version 20240715:
+ * Allow systemd_getty_generator_t read /proc/1/environ
+ * Allow systemd_getty_generator_t to read and write to tty_device_t
(bsc#1226888)
+
+-------------------------------------------------------------------
Old:
----
selinux-policy-20240710.tar.xz
New:
----
selinux-policy-20240715.tar.xz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ selinux-policy.spec ++++++
--- /var/tmp/diff_new_pack.SExs4V/_old 2024-07-15 19:46:37.377825448 +0200
+++ /var/tmp/diff_new_pack.SExs4V/_new 2024-07-15 19:46:37.381825595 +0200
@@ -33,7 +33,7 @@
License: GPL-2.0-or-later
Group: System/Management
Name: selinux-policy
-Version: 20240710
+Version: 20240715
Release: 0
Source0: %{name}-%{version}.tar.xz
Source1: container.fc
++++++ _servicedata ++++++
--- /var/tmp/diff_new_pack.SExs4V/_old 2024-07-15 19:46:37.453828233 +0200
+++ /var/tmp/diff_new_pack.SExs4V/_new 2024-07-15 19:46:37.457828380 +0200
@@ -1,7 +1,7 @@
<servicedata>
<service name="tar_scm">
<param
name="url">https://gitlab.suse.de/selinux/selinux-policy.git</param>
- <param
name="changesrevision">aa9c35290108fc65d5bf3d39813b1ce19e24ae4a</param></service><service
name="tar_scm">
+ <param
name="changesrevision">a43a23eeaaacb1d90707bb00384efb94dc268b9e</param></service><service
name="tar_scm">
<param
name="url">https://github.com/containers/container-selinux.git</param>
<param
name="changesrevision">07b3034f6d9625ab84508a2f46515d8ff79b4204</param></service><service
name="tar_scm">
<param
name="url">https://gitlab.suse.de/jsegitz/selinux-policy.git</param>
++++++ selinux-policy-20240710.tar.xz -> selinux-policy-20240715.tar.xz ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/selinux-policy-20240710/policy/modules/system/systemd.te
new/selinux-policy-20240715/policy/modules/system/systemd.te
--- old/selinux-policy-20240710/policy/modules/system/systemd.te
2024-07-10 09:39:35.000000000 +0200
+++ new/selinux-policy-20240715/policy/modules/system/systemd.te
2024-07-15 13:55:08.000000000 +0200
@@ -1313,7 +1313,8 @@
### getty generator
dev_read_sysfs(systemd_getty_generator_t)
-term_open_unallocated_ttys(systemd_getty_generator_t)
+init_read_state(systemd_getty_generator_t)
+term_use_unallocated_ttys(systemd_getty_generator_t)
### gpt generator
allow systemd_gpt_generator_t self:capability sys_rawio;
