June 2024 - openSUSE Commits - openSUSE Mailing Lists

commit podman for openSUSE:Factory
by Source-Sync 06 Jun '24

06 Jun '24

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package podman for openSUSE:Factory checked in at 2024-06-06 12:31:02 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/podman (Old) and /work/SRC/openSUSE:Factory/.podman.new.24587 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "podman" Thu Jun 6 12:31:02 2024 rev:135 rq:1178770 version:5.1.1 Changes: -------- --- /work/SRC/openSUSE:Factory/podman/podman.changes 2024-05-31 22:15:49.553854994 +0200 +++ /work/SRC/openSUSE:Factory/.podman.new.24587/podman.changes 2024-06-06 12:31:13.881439300 +0200 @@ -1,0 +2,15 @@ +Wed Jun 05 05:24:29 UTC 2024 - danish.prakash(a)suse.com + +- Update to version 5.1.1: + * Bump to v5.1.1 + * Update release notes for v5.1.1 + * libpod: do not leak systemd hc startup unit timer + * Check AppleHypervisor before accessing it + * [v5.1] Bump c/common to v0.59.1 + * [v5.1] pkg/rootless: set _CONTAINERS_USERNS_CONFIGURED ... correctly + * test/e2e: use local skopeo not image + * [v5.1] Mac PM test: Require pre-installed rosetta + * Fix typo in release notes + * Bump to v5.1.1-dev + +------------------------------------------------------------------- Old: ---- podman-5.1.0.obscpio New: ---- podman-5.1.1.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ podman.spec ++++++ --- /var/tmp/diff_new_pack.xyxk17/_old 2024-06-06 12:31:14.745470857 +0200 +++ /var/tmp/diff_new_pack.xyxk17/_new 2024-06-06 12:31:14.749471002 +0200 @@ -22,7 +22,7 @@ %bcond_without apparmor Name: podman -Version: 5.1.0 +Version: 5.1.1 Release: 0 Summary: Daemon-less container engine for managing containers, pods and images License: Apache-2.0 ++++++ _service ++++++ --- /var/tmp/diff_new_pack.xyxk17/_old 2024-06-06 12:31:14.781472171 +0200 +++ /var/tmp/diff_new_pack.xyxk17/_new 2024-06-06 12:31:14.785472317 +0200 @@ -2,7 +2,7 @@ <service name="obs_scm" mode="manual"> <param name="url">https://github.com/containers/podman.git</param> <param name="scm">git</param> - <param name="revision">v5.1.0</param> + <param name="revision">v5.1.1</param> <param name="versionformat">@PARENT_TAG@</param> <param name="changesgenerate">enable</param> <param name="versionrewrite-pattern">v(.*)</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.xyxk17/_old 2024-06-06 12:31:14.805473048 +0200 +++ /var/tmp/diff_new_pack.xyxk17/_new 2024-06-06 12:31:14.809473194 +0200 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/containers/podman.git</param> - <param name="changesrevision">4e9486dbc63c24bfe109066abbb54d5d8dc2489e</param></service></servicedata> + <param name="changesrevision">bda6eb03dcbcf12a5b7ae004c1240e38dd056d24</param></service></servicedata> (No newline at EOF) ++++++ podman-5.1.0.obscpio -> podman-5.1.1.obscpio ++++++ /work/SRC/openSUSE:Factory/podman/podman-5.1.0.obscpio /work/SRC/openSUSE:Factory/.podman.new.24587/podman-5.1.1.obscpio differ: char 50, line 1 ++++++ podman.obsinfo ++++++ --- /var/tmp/diff_new_pack.xyxk17/_old 2024-06-06 12:31:14.865475239 +0200 +++ /var/tmp/diff_new_pack.xyxk17/_new 2024-06-06 12:31:14.869475385 +0200 @@ -1,5 +1,5 @@ name: podman -version: 5.1.0 -mtime: 1717008725 -commit: 4e9486dbc63c24bfe109066abbb54d5d8dc2489e +version: 5.1.1 +mtime: 1717530847 +commit: bda6eb03dcbcf12a5b7ae004c1240e38dd056d24

1 0

commit libkrun for openSUSE:Factory
by Source-Sync 06 Jun '24

06 Jun '24

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package libkrun for openSUSE:Factory checked in at 2024-06-06 12:30:57 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libkrun (Old) and /work/SRC/openSUSE:Factory/.libkrun.new.24587 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "libkrun" Thu Jun 6 12:30:57 2024 rev:11 rq:1178754 version:1.9.0 Changes: -------- --- /work/SRC/openSUSE:Factory/libkrun/libkrun.changes 2023-01-19 16:44:41.445920992 +0100 +++ /work/SRC/openSUSE:Factory/.libkrun.new.24587/libkrun.changes 2024-06-06 12:31:06.581172677 +0200 @@ -1,0 +2,84 @@ +Mon Jun 03 08:46:39 UTC 2024 - dfaggioli(a)suse.com + +- Update to version 1.9.0: + * console: send a resize event on PORT_READY by @slp in #179 + * Fix another batch of new clippy warnings by @slp in #182 + * Fix constness when taking an array of string pointers by @teohhanhui in #181 + * Fix new lints in Rust 1.78 by @teohhanhui in #184 + * Use the correct documentation comment style recognized by clang by @teohhanhui in #183 + * virtio/snd: import virtio-snd from vhost-user-sound by @slp in #186 + +- Changes from 1.8.1: + * VirtIO optimizations + +- Changes from 1.8.0: + * Implement stdin/stdout/stderr redirection support using multiport virtio-console + * devices/legacy: import PL011 for aarch64 + * init: accept arguments from the "args" Field + * Fix various minor issues on macOS and add a CI workflow for this OS + * Add Matej Hrica (mtjhrc) to CODEOWNERS + * Implement an EFI flavor + * Implement krun_add_vsock_port() and UnixProxy for guest communication with host UNIX sockets. + * Implement the infrastructure to support sending shut down signals to the guest + * lib: allow having multiple virtio-fs devices + * devices/net: allow configuring a custom MAC + * Import SECURITY_CTX support from virtiofsd + * Makefile: fix EFI library naming + * virtio/net: implement gvproxy backend + * macos/eventfd: ignore EAGAIN on write + * Import rutabaga_gfx+virtio_gpu from crosvm + * devices/vsock/unix: implement update_peer_credit + * devices/console: implement an empty port input + * Extend virtio-gpu to support Venus on macOS + * libkrun: Extend API to redirect console to file + * virtio/fs/macos: overhaul to use macos inodes + +------------------------------------------------------------------- +Thu May 30 14:14:56 UTC 2024 - dfaggioli(a)suse.com + +- Update to version 1.7.2: + * Fix aarch64 build by adapting to changes in kvm-ioctl + +- Changes from 1.7.1 + * Update kbs-types version to 0.5 and release 1.7.1 + +------------------------------------------------------------------- +Thu May 30 13:38:30 UTC 2024 - dfaggioli(a)suse.com + +- Update to version 1.7.0: + * SNP Attestation + * Read TEE config from the end of the block device + * De-vendorize kbs-types + * Remove libfdt dependency + * init: place SEV behind build-time conditional + * devices/fs: fix reading the end of init.krun + * init: don't build init.c on SEV flavor + * Prepare to support libkrunfw 4.x + * init: Report an error when execution of the user binary fails + * virtio-net implementation using passt + * Make krun_set_vm_config use the same argument type for num_vcpus as ... + * Update sev crate to 1.2.0 + * virtio net bugfixes and performance improvement + * Makefile: De-couple KBS init sources from SEV-SNP + * Update rust-vmm deps and bump version for upcoming release + +- Changes from 1.5.1 + * Fix CI clippy + * Add a pkgconf file + * examples: Fix error handling of krun_create_ctx + * VSOCK: fix reaper timeout + * Fix typo in README.md + * macos: implement host->guest time sync + * Bump version to v1.5.1 + +- Changes from 1.5.0 + * devices: update lru dep to 0.9 + * Introduce the krun_set_data_disk API. + +------------------------------------------------------------------- +Thu May 30 13:30:22 UTC 2024 - Dario Faggioli <dfaggioli(a)suse.com> + +- The vendored tarball already contains the config these days, so + don't mess with that in the spec file + +------------------------------------------------------------------- Old: ---- cargo_config libkrun-1.4.10.obscpio vendor.tar.xz New: ---- libkrun-1.9.0.obscpio vendor.tar.zst ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libkrun.spec ++++++ --- /var/tmp/diff_new_pack.GsJKgm/_old 2024-06-06 12:31:08.341236959 +0200 +++ /var/tmp/diff_new_pack.GsJKgm/_new 2024-06-06 12:31:08.345237105 +0200 @@ -1,7 +1,7 @@ # # spec file for package libkrun # -# Copyright (c) 2023 SUSE LLC +# Copyright (c) 2024 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -32,14 +32,13 @@ %global rustflags '-Clink-arg=-Wl,-z,relro,-z,now' Name: libkrun -Version: 1.4.10 +Version: 1.9.0 Release: 0 Summary: A dynamic library providing KVM-based process isolation capabilities License: Apache-2.0 URL: https://github.com/containers/libkrun Source0: libkrun-%{version}.tar.gz -Source1: vendor.tar.xz -Source2: cargo_config +Source1: vendor.tar.zst ExclusiveArch: x86_64 aarch64 BuildRequires: cargo >= 1.43.0 BuildRequires: gcc @@ -105,8 +104,6 @@ %prep %autosetup -a1 -mkdir .cargo -cp %{SOURCE2} .cargo/config %build export RUSTFLAGS=%{rustflags} @@ -134,6 +131,7 @@ %files devel %{_libdir}/libkrun.so +%{_libdir}/pkgconfig/libkrun.pc %{_includedir}/libkrun.h %post -n %{name}1 -p /sbin/ldconfig ++++++ _service ++++++ --- /var/tmp/diff_new_pack.GsJKgm/_old 2024-06-06 12:31:08.381238419 +0200 +++ /var/tmp/diff_new_pack.GsJKgm/_new 2024-06-06 12:31:08.385238566 +0200 @@ -1,18 +1,18 @@ <services> - <service name="obs_scm" mode="disabled"> + <service name="obs_scm" mode="manual"> <param name="scm">git</param> - <param name="revision">v1.4.10</param> + <param name="revision">v1.9.0</param> <param name="url">https://github.com/containers/libkrun.git</param> <param name="versionformat">@PARENT_TAG@</param> <param name="changesgenerate">enable</param> <param name="versionrewrite-pattern">v(.*)</param> </service> - <service name="cargo_vendor" mode="disabled"> + <service name="cargo_vendor" mode="manual"> <param name="srcdir">libkrun</param> - <param name="update">true</param> + <param name="update">false</param> </service> - <service name="cargo_audit" mode="disabled"> + <service name="cargo_audit" mode="manual"> <param name="srcdir">libkrun</param> </service> <service mode="buildtime" name="tar" /> @@ -20,7 +20,7 @@ <param name="file">*.tar</param> <param name="compression">gz</param> </service> - <service name="set_version" mode="disabled"> + <service name="set_version" mode="manual"> </service> </services> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.GsJKgm/_old 2024-06-06 12:31:08.409239442 +0200 +++ /var/tmp/diff_new_pack.GsJKgm/_new 2024-06-06 12:31:08.413239589 +0200 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/containers/libkrun.git</param> - <param name="changesrevision">74bda657239c1c8a1834e66c10672cc7d46587c6</param></service></servicedata> + <param name="changesrevision">0bea04816f4dc414a947aa7675e169cbbfbd45dc</param></service></servicedata> (No newline at EOF) ++++++ libkrun-1.4.10.obscpio -> libkrun-1.9.0.obscpio ++++++ /work/SRC/openSUSE:Factory/libkrun/libkrun-1.4.10.obscpio /work/SRC/openSUSE:Factory/.libkrun.new.24587/libkrun-1.9.0.obscpio differ: char 48, line 1 ++++++ libkrun.obsinfo ++++++ --- /var/tmp/diff_new_pack.GsJKgm/_old 2024-06-06 12:31:08.453241049 +0200 +++ /var/tmp/diff_new_pack.GsJKgm/_new 2024-06-06 12:31:08.457241196 +0200 @@ -1,5 +1,5 @@ name: libkrun -version: 1.4.10 -mtime: 1674077930 -commit: 74bda657239c1c8a1834e66c10672cc7d46587c6 +version: 1.9.0 +mtime: 1715982245 +commit: 0bea04816f4dc414a947aa7675e169cbbfbd45dc

1 0

commit selinux-policy for openSUSE:Factory
by Source-Sync 06 Jun '24

06 Jun '24

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package selinux-policy for openSUSE:Factory checked in at 2024-06-06 12:30:52 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/selinux-policy (Old) and /work/SRC/openSUSE:Factory/.selinux-policy.new.24587 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "selinux-policy" Thu Jun 6 12:30:52 2024 rev:60 rq:1178674 version:20240411 Changes: -------- --- /work/SRC/openSUSE:Factory/selinux-policy/selinux-policy.changes 2024-03-22 15:28:25.598159722 +0100 +++ /work/SRC/openSUSE:Factory/.selinux-policy.new.24587/selinux-policy.changes 2024-06-06 12:30:58.876891299 +0200 @@ -1,0 +2,104 @@ +Mon Jun 3 13:42:13 UTC 2024 - Johannes Segitz <jsegitz(a)suse.com> + +- Remove "Reference" from the package description. It's not the + reference policy, but the Fedora branch of the policy + +------------------------------------------------------------------- +Tue May 28 11:12:57 UTC 2024 - Cathy Hu <cathy.hu(a)suse.com> + +- Use python311 tools in 15.4 and 15.5 when building selinux-policy to deprecate + python36 tooling + +------------------------------------------------------------------- +Wed May 8 11:06:43 UTC 2024 - Johannes Segitz <jsegitz(a)suse.com> + +- Fixed varrun-convert.sh script to not break because of duplicate + entries + +------------------------------------------------------------------- +Mon May 6 07:44:20 UTC 2024 - Johannes Segitz <jsegitz(a)suse.com> + +- Move to %posttrans to ensure selinux-policy got updated before + the commands run (bsc#1221720) + +------------------------------------------------------------------- +Mon Apr 15 13:23:40 UTC 2024 - Cathy Hu <cathy.hu(a)suse.com> + +- Add file contexts "forwarding" to file_contexts.sub_dist + to fix systemd-gpt-auto-generator and systemd-fstab-generator + (bsc#1222736): + * /run/systemd/generator.early /usr/lib/systemd/system + * /run/systemd/generator.late /usr/lib/systemd/system + +------------------------------------------------------------------- +Thu Apr 11 15:13:31 UTC 2024 - cathy.hu(a)suse.com + +- Update to version 20240411: + * Remove duplicate in sysnetwork.fc + * Rename /var/run/wicked* to /run/wicked* + * Remove /var/run/rsyslog/additional-log-sockets.conf from logging.fc + * policy: support pidfs + * Confine selinux-autorelabel-generator.sh + * Allow logwatch_mail_t read/write to init over a unix stream socket + * Allow logwatch read logind sessions files + * files_dontaudit_getattr_tmpfs_files allowed the access and didn't dontaudit it + * files_dontaudit_mounton_modules_object allowed the access and didn't dontaudit it + * Allow NetworkManager the sys_ptrace capability in user namespace + * dontaudit execmem for modemmanager + * Allow dhcpcd use unix_stream_socket + * Allow dhcpc read /run/netns files + * Update mmap_rw_file_perms to include the lock permission + * Allow plymouthd log during shutdown + * Add logging_watch_all_log_dirs() and logging_watch_all_log_files() + * Allow journalctl_t read filesystem sysctls + * Allow cgred_t to get attributes of cgroup filesystems + * Allow wdmd read hardware state information + * Allow wdmd list the contents of the sysfs directories + * Allow linuxptp configure phc2sys and chronyd over a unix domain socket + * Allow sulogin relabel tty1 + * Dontaudit sulogin the checkpoint_restore capability + * Modify sudo_role_template() to allow getpgid + * Allow userdomain get attributes of files on an nsfs filesystem + * Allow opafm create NFS files and directories + * Allow virtqemud create and unlink files in /etc/libvirt/ + * Allow virtqemud domain transition on swtpm execution + * Add the swtpm.if interface file for interactions with other domains + * Allow samba to have dac_override capability + * systemd: allow sys_admin capability for systemd_notify_t + * systemd: allow systemd_notify_t to send data to kernel_t datagram sockets + * Allow thumb_t to watch and watch_reads mount_var_run_t + * Allow krb5kdc_t map krb5kdc_principal_t files + * Allow unprivileged confined user dbus chat with setroubleshoot + * Allow login_userdomain map files in /var + * Allow wireguard work with firewall-cmd + * Differentiate between staff and sysadm when executing crontab with sudo + * Add crontab_admin_domtrans interface + * Allow abrt_t nnp domain transition to abrt_handle_event_t + * Allow xdm_t to watch and watch_reads mount_var_run_t + * Dontaudit subscription manager setfscreate and read file contexts + * Don't audit crontab_domain write attempts to user home + * Transition from sudodomains to crontab_t when executing crontab_exec_t + * Add crontab_domtrans interface + * Fix label of pseudoterminals created from sudodomain + * Allow utempter_t use ptmx + * Dontaudit rpmdb attempts to connect to sssd over a unix stream socket + * Allow admin user read/write on fixed_disk_device_t + * Only allow confined user domains to login locally without unconfined_login + * Add userdom_spec_domtrans_confined_admin_users interface + * Only allow admindomain to execute shell via ssh with ssh_sysadm_login + * Add userdom_spec_domtrans_admin_users interface + * Move ssh dyntrans to unconfined inside unconfined_login tunable policy + * Update ssh_role_template() for user ssh-agent type + * Allow init to inherit system DBus file descriptors + * Allow init to inherit fds from syslogd + * Allow any domain to inherit fds from rpm-ostree + * Update afterburn policy + * Allow init_t nnp domain transition to abrtd_t + * Rename all /var/lock file context entries to /run/lock + * Rename all /var/run file context entries to /run +- Add script varrun-convert.sh for locally existing modules + to be able to cope with the /var/run -> /run change +- Update embedded container-selinux to commit + a8e389dbcd3f9b6ed0a7e495c6f559c0383dc49e + +------------------------------------------------------------------- Old: ---- selinux-policy-20240321.tar.xz New: ---- selinux-policy-20240411.tar.xz varrun-convert.sh ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ selinux-policy.spec ++++++ --- /var/tmp/diff_new_pack.BkNF2X/_old 2024-06-06 12:31:00.072934981 +0200 +++ /var/tmp/diff_new_pack.BkNF2X/_new 2024-06-06 12:31:00.076935127 +0200 @@ -33,7 +33,7 @@ License: GPL-2.0-or-later Group: System/Management Name: selinux-policy -Version: 20240321 +Version: 20240411 Release: 0 Source0: %{name}-%{version}.tar.xz Source1: container.fc @@ -61,6 +61,9 @@ Source31: setrans-mls.conf Source32: setrans-minimum.conf +# Script to convert /var/run file context entries to /run +Source37: varrun-convert.sh + Source40: securetty_types-targeted Source41: securetty_types-mls Source42: securetty_types-minimum @@ -80,20 +83,26 @@ URL: https://github.com/fedora-selinux/selinux-policy.git BuildRoot: %{_tmppath}/%{name}-%{version}-build BuildArch: noarch +%if 0%{?suse_version} < 1600 +%define python_for_executables python311 +BuildRequires: %{python_for_executables} +BuildRequires: %{python_for_executables}-policycoreutils +%else +BuildRequires: %primary_python +BuildRequires: %{python_module policycoreutils} +%endif BuildRequires: checkpolicy BuildRequires: gawk BuildRequires: libxml2-tools BuildRequires: m4 BuildRequires: policycoreutils BuildRequires: policycoreutils-devel -BuildRequires: python3 -BuildRequires: python3-policycoreutils # we need selinuxenabled Requires(pre): policycoreutils >= %{POLICYCOREUTILSVER} Requires(pre): pam-config -Requires(post): pam-config -Requires(post): selinux-tools -Requires(post): /usr/bin/sha512sum +Requires(posttrans): pam-config +Requires(posttrans): selinux-tools +Requires(posttrans): /usr/bin/sha512sum Recommends: audit Recommends: selinux-tools # for audit2allow @@ -212,6 +221,7 @@ %ghost %{_sharedstatedir}/selinux/%1/active/policy.linked \ %ghost %{_sharedstatedir}/selinux/%1/active/seusers.linked \ %ghost %{_sharedstatedir}/selinux/%1/active/users_extra.linked \ +%ghost %{_sharedstatedir}/selinux/%1/active/modules/400/extra_varrun \ %verify(not md5 size mtime) %{_sharedstatedir}/selinux/%1/active/file_contexts.homedirs \ %nil @@ -248,6 +258,7 @@ %define postInstall() \ . %{_sysconfdir}/selinux/config; \ +%{_libexecdir}/selinux/varrun-convert.sh %2; \ if [ -e %{_sysconfdir}/selinux/%2/.rebuild ]; then \ rm %{_sysconfdir}/selinux/%2/.rebuild; \ /usr/sbin/semodule -B -n -s %2; \ @@ -292,9 +303,8 @@ done; %description -SELinux Reference Policy. A complete SELinux policy that can be used -as the system policy for a variety of systems and used as the basis for -creating other policies. +A complete SELinux policy that can be used as the system policy for a variety +of systems and used as the basis for creating other policies. %files %defattr(-,root,root,-) @@ -305,6 +315,7 @@ %ghost %config(noreplace) %{_sysconfdir}/selinux/config %{_tmpfilesdir}/selinux-policy.conf %{_rpmconfigdir}/macros.d/macros.selinux-policy +%{_libexecdir}/selinux/varrun-convert.sh %package sandbox Summary: SELinux policy sandbox @@ -372,6 +383,9 @@ cp $i selinux_config done +mkdir -p %{buildroot}%{_libexecdir}/selinux +install -m 755 %{SOURCE37} %{buildroot}%{_libexecdir}/selinux + make clean %if %{BUILD_TARGETED} %makeCmds targeted mcs allow @@ -527,12 +541,12 @@ Requires: selinux-policy = %{version}-%{release} %description targeted -SELinux Reference policy targeted base module. +SELinux policy targeted base module. %pre targeted %preInstall targeted -%post targeted +%posttrans targeted %postInstall $1 targeted exit 0 @@ -562,7 +576,7 @@ Requires: selinux-policy = %{version}-%{release} %description minimum -SELinux Reference policy minimum base module. +SELinux policy minimum base module. %pre minimum %preInstall minimum @@ -623,12 +637,12 @@ Requires: selinux-policy = %{version}-%{release} %description mls -SELinux Reference policy mls base module. +SELinux policy mls base module. %pre mls %preInstall mls -%post mls +%posttrans mls %postInstall $1 mls %postun mls ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.BkNF2X/_old 2024-06-06 12:31:00.144937610 +0200 +++ /var/tmp/diff_new_pack.BkNF2X/_new 2024-06-06 12:31:00.148937757 +0200 @@ -1,10 +1,12 @@ <servicedata> <service name="tar_scm"> <param name="url">https://gitlab.suse.de/selinux/selinux-policy.git</param> - <param name="changesrevision">98a8f37af8bfa88f85287f21a38c10abb925c7f3</param></service><service name="tar_scm"> + <param name="changesrevision">7eb64de2191880e9d2207fa60c9605268d6fc8ce</param></service><service name="tar_scm"> <param name="url">https://github.com/containers/container-selinux.git</param> <param name="changesrevision">07b3034f6d9625ab84508a2f46515d8ff79b4204</param></service><service name="tar_scm"> <param name="url">https://gitlab.suse.de/jsegitz/selinux-policy.git</param> - <param name="changesrevision">3e2ff590e3c22e0782b38b938a367440431bae13</param></service></servicedata> + <param name="changesrevision">3e2ff590e3c22e0782b38b938a367440431bae13</param></service><service name="tar_scm"> + <param name="url">https://gitlab.suse.de/cahu/selinux-policy.git</param> + <param name="changesrevision">dd1ff3c6a1e2c1f22ddd13039191ea458d7fcc8d</param></service></servicedata> (No newline at EOF) ++++++ container.fc ++++++ --- /var/tmp/diff_new_pack.BkNF2X/_old 2024-06-06 12:31:00.228940678 +0200 +++ /var/tmp/diff_new_pack.BkNF2X/_new 2024-06-06 12:31:00.232940825 +0200 @@ -9,14 +9,19 @@ /usr/local/s?bin/kubelet.* -- gen_context(system_u:object_r:kubelet_exec_t,s0) /usr/s?bin/hyperkube.* -- gen_context(system_u:object_r:kubelet_exec_t,s0) /usr/local/s?bin/hyperkube.* -- gen_context(system_u:object_r:kubelet_exec_t,s0) -/usr/local/s?bin/docker.* -- gen_context(system_u:object_r:container_runtime_exec_t,s0) +/usr/s?bin/kubenswrapper.* -- gen_context(system_u:object_r:kubelet_exec_t,s0) +/usr/local/s?bin/kubenswrapper.* -- gen_context(system_u:object_r:kubelet_exec_t,s0) +/usr/s?bin/kubensenter.* -- gen_context(system_u:object_r:kubelet_exec_t,s0) +/usr/local/s?bin/kubensenter.* -- gen_context(system_u:object_r:kubelet_exec_t,s0) +/usr/local/s?bin/docker.* -- gen_context(system_u:object_r:container_runtime_exec_t,s0) /usr/s?bin/containerd.* -- gen_context(system_u:object_r:container_runtime_exec_t,s0) -/usr/local/s?bin/containerd.* -- gen_context(system_u:object_r:container_runtime_exec_t,s0) +/usr/local/s?bin/containerd.* -- gen_context(system_u:object_r:container_runtime_exec_t,s0) +/usr/s?bin/buildah -- gen_context(system_u:object_r:container_runtime_exec_t,s0) /usr/s?bin/buildkitd.* -- gen_context(system_u:object_r:container_runtime_exec_t,s0) -/usr/local/s?bin/buildkitd.* -- gen_context(system_u:object_r:container_runtime_exec_t,s0) +/usr/local/s?bin/buildkitd.* -- gen_context(system_u:object_r:container_runtime_exec_t,s0) -/usr/s?bin/lxc-.* -- gen_context(system_u:object_r:container_runtime_exec_t,s0) -/usr/s?bin/lxd-.* -- gen_context(system_u:object_r:container_runtime_exec_t,s0) +/usr/s?bin/lxc-.* -- gen_context(system_u:object_r:container_runtime_exec_t,s0) +/usr/s?bin/lxd-.* -- gen_context(system_u:object_r:container_runtime_exec_t,s0) /usr/s?bin/lxc -- gen_context(system_u:object_r:container_runtime_exec_t,s0) /usr/s?bin/lxd -- gen_context(system_u:object_r:container_runtime_exec_t,s0) /usr/s?bin/fuidshift -- gen_context(system_u:object_r:container_runtime_exec_t,s0) @@ -117,7 +122,7 @@ /var/cache/kata-containers(/.*)? gen_context(system_u:object_r:container_ro_file_t,s0) /var/lib/kata-containers(/.*)? gen_context(system_u:object_r:container_ro_file_t,s0) -/var/run/kata-containers(/.*)? gen_context(system_u:object_r:container_kvm_var_run_t,s0) +/run/kata-containers(/.*)? gen_context(system_u:object_r:container_kvm_var_run_t,s0) /var/local-path-provisioner(/.*)? gen_context(system_u:object_r:container_file_t,s0) /opt/local-path-provisioner(/.*)? gen_context(system_u:object_r:container_file_t,s0) @@ -126,6 +131,7 @@ /var/lib/kubernetes/pods(/.*)? gen_context(system_u:object_r:container_file_t,s0) /var/lib/kubelet(/.*)? gen_context(system_u:object_r:container_var_lib_t,s0) +/var/lib/kubelet/pod-resources/kubelet.sock gen_context(system_u:object_r:container_file_t,s0) /var/lib/docker-latest(/.*)? gen_context(system_u:object_r:container_var_lib_t,s0) /var/lib/docker-latest/.*/config\.env gen_context(system_u:object_r:container_ro_file_t,s0) /var/lib/docker-latest/containers/.*/.*\.log gen_context(system_u:object_r:container_log_t,s0) @@ -136,26 +142,25 @@ /var/lib/docker-latest/overlay2(/.*)? gen_context(system_u:object_r:container_ro_file_t,s0) /var/lib/cni(/.*)? gen_context(system_u:object_r:container_var_lib_t,s0) -/var/run/flannel(/.*)? gen_context(system_u:object_r:container_var_run_t,s0) -/var/lib/kubelet/pods(/.*)? gen_context(system_u:object_r:container_file_t,s0) +/run/flannel(/.*)? gen_context(system_u:object_r:container_var_run_t,s0) /var/log/containers(/.*)? gen_context(system_u:object_r:container_log_t,s0) /var/log/pods(/.*)? gen_context(system_u:object_r:container_log_t,s0) -/var/run/containers(/.*)? gen_context(system_u:object_r:container_var_run_t,s0) -/var/run/crio(/.*)? gen_context(system_u:object_r:container_var_run_t,s0) -/var/run/docker(/.*)? gen_context(system_u:object_r:container_var_run_t,s0) -/var/run/containerd(/.*)? gen_context(system_u:object_r:container_var_run_t,s0) -/var/run/containerd/[^/]*/sandboxes/[^/]*/shm(/.*)? gen_context(system_u:object_r:container_runtime_tmpfs_t,s0) -/var/run/buildkit(/.*)? gen_context(system_u:object_r:container_var_run_t,s0) -/var/run/docker\.pid -- gen_context(system_u:object_r:container_var_run_t,s0) -/var/run/docker\.sock -s gen_context(system_u:object_r:container_var_run_t,s0) -/var/run/docker-client(/.*)? gen_context(system_u:object_r:container_var_run_t,s0) -/var/run/docker/plugins(/.*)? gen_context(system_u:object_r:container_plugin_var_run_t,s0) +/run/containers(/.*)? gen_context(system_u:object_r:container_var_run_t,s0) +/run/crio(/.*)? gen_context(system_u:object_r:container_var_run_t,s0) +/run/docker(/.*)? gen_context(system_u:object_r:container_var_run_t,s0) +/run/containerd(/.*)? gen_context(system_u:object_r:container_var_run_t,s0) +/run/containerd/[^/]*/sandboxes/[^/]*/shm(/.*)? gen_context(system_u:object_r:container_runtime_tmpfs_t,s0) +/run/buildkit(/.*)? gen_context(system_u:object_r:container_var_run_t,s0) +/run/docker\.pid -- gen_context(system_u:object_r:container_var_run_t,s0) +/run/docker\.sock -s gen_context(system_u:object_r:container_var_run_t,s0) +/run/docker-client(/.*)? gen_context(system_u:object_r:container_var_run_t,s0) +/run/docker/plugins(/.*)? gen_context(system_u:object_r:container_plugin_var_run_t,s0) /srv/containers(/.*)? gen_context(system_u:object_r:container_file_t,s0) /var/srv/containers(/.*)? gen_context(system_u:object_r:container_file_t,s0) -/var/lock/lxc(/.*)? gen_context(system_u:object_r:container_lock_t,s0) +/run/lock/lxc(/.*)? gen_context(system_u:object_r:container_lock_t,s0) /var/log/lxc(/.*)? gen_context(system_u:object_r:container_log_t,s0) /var/log/lxd(/.*)? gen_context(system_u:object_r:container_log_t,s0) ++++++ container.if ++++++ --- /var/tmp/diff_new_pack.BkNF2X/_old 2024-06-06 12:31:00.248941409 +0200 +++ /var/tmp/diff_new_pack.BkNF2X/_new 2024-06-06 12:31:00.252941555 +0200 @@ -573,7 +573,7 @@ filetrans_pattern($1, container_var_lib_t, container_ro_file_t, dir, "kata-containers") filetrans_pattern($1, data_home_t, container_ro_file_t, dir, "kata-containers") filetrans_pattern($1, container_var_run_t, container_runtime_tmpfs_t, dir, "shm") - files_pid_filetrans($1, kubernetes_file_t, dir, "kubernetes") + files_etc_filetrans($1, kubernetes_file_t, dir, "kubernetes") ') ######################################## ++++++ container.te ++++++ --- /var/tmp/diff_new_pack.BkNF2X/_old 2024-06-06 12:31:00.284942724 +0200 +++ /var/tmp/diff_new_pack.BkNF2X/_new 2024-06-06 12:31:00.288942870 +0200 @@ -1,4 +1,4 @@ -policy_module(container, 2.219.0) +policy_module(container, 2.230.0) gen_require(` class passwd rootok; @@ -39,6 +39,13 @@ gen_tunable(container_use_devices, false) ## <desc> +## <p> +## Allow containers to use any dri device volume mounted into container +## </p> +## </desc> +gen_tunable(container_use_dri_devices, true) + +## <desc> ## <p> ## Allow sandbox containers to manage cgroup (systemd) ## </p> @@ -136,6 +143,7 @@ term_pty(container_devpts_t) typealias container_ro_file_t alias { container_share_t docker_share_t }; +typeattribute container_ro_file_t container_file_type, user_home_type; files_mountpoint(container_ro_file_t) userdom_user_home_content(container_ro_file_t) @@ -568,7 +576,6 @@ fs_manage_nfs_symlinks(container_runtime_domain) fs_remount_nfs(container_runtime_domain) fs_mount_nfs(container_runtime_domain) - fs_unmount_nfs(container_runtime_domain) fs_exec_nfs_files(container_runtime_domain) kernel_rw_fs_sysctls(container_runtime_domain) allow container_runtime_domain nfs_t:file execmod; @@ -634,21 +641,16 @@ fs_manage_fusefs_files(container_runtime_domain) fs_manage_fusefs_symlinks(container_runtime_domain) fs_mount_fusefs(container_runtime_domain) -fs_unmount_fusefs(container_runtime_domain) fs_exec_fusefs_files(container_runtime_domain) storage_rw_fuse(container_runtime_domain) -optional_policy(` - files_search_all(container_domain) - container_read_share_files(container_domain) - container_exec_share_files(container_domain) - allow container_domain container_ro_file_t:file execmod; - container_lib_filetrans(container_domain,container_file_t, sock_file) - container_use_ptys(container_domain) - container_spc_stream_connect(container_domain) - fs_dontaudit_remount_tmpfs(container_domain) - dev_dontaudit_mounton_sysfs(container_domain) -') +files_search_all(container_domain) +container_read_share_files(container_domain) +container_exec_share_files(container_domain) +allow container_domain container_ro_file_t:file execmod; +container_lib_filetrans(container_domain,container_file_t, sock_file) +container_use_ptys(container_domain) +container_spc_stream_connect(container_domain) optional_policy(` apache_exec_modules(container_runtime_domain) @@ -746,7 +748,7 @@ # # spc local policy # -allow spc_t { container_file_t container_var_lib_t container_ro_file_t }:file entrypoint; +allow spc_t { container_file_t container_var_lib_t container_ro_file_t container_runtime_tmpfs_t}:file entrypoint; role system_r types spc_t; domtrans_pattern(container_runtime_domain, container_ro_file_t, spc_t) @@ -755,6 +757,7 @@ fs_tmpfs_filetrans(spc_t, container_file_t, { dir file lnk_file }) allow container_runtime_domain spc_t:process2 { nnp_transition nosuid_transition }; +allow spc_t container_file_type:file execmod; admin_pattern(spc_t, kubernetes_file_t) @@ -776,6 +779,10 @@ systemd_dbus_chat_logind(spc_t) ') +domain_transition_all(spc_t) + +anaconda_domtrans_install(spc_t) + optional_policy(` dbus_chat_system_bus(spc_t) dbus_chat_session_bus(spc_t) @@ -878,7 +885,7 @@ typeattribute container_file_t container_file_type, user_home_type; typeattribute container_t container_domain, container_net_domain, container_user_domain; allow container_user_domain self:process getattr; -allow container_domain { container_var_lib_t container_ro_file_t container_file_t }:file entrypoint; +allow container_domain { container_var_lib_t container_ro_file_t container_file_t container_runtime_tmpfs_t}:file entrypoint; allow container_runtime_domain container_domain:fifo_file rw_fifo_file_perms; allow container_domain container_runtime_domain:fifo_file { rw_fifo_file_perms map }; allow container_domain container_runtime_t:unix_dgram_socket sendto; @@ -897,6 +904,7 @@ allow container_domain self:file rw_file_perms; allow container_domain self:lnk_file read_file_perms; allow container_domain self:fifo_file create_fifo_file_perms; +allow container_domain self:fifo_file watch; allow container_domain self:filesystem associate; allow container_domain self:key manage_key_perms; allow container_domain self:netlink_route_socket r_netlink_socket_perms; @@ -916,28 +924,33 @@ allow container_domain self:unix_stream_socket create_stream_socket_perms; dontaudit container_domain self:capability2 block_suspend ; allow container_domain self:unix_stream_socket { sendto create_stream_socket_perms }; -fs_rw_onload_sockets(container_domain) -fs_fusefs_entrypoint(container_domain) fs_fusefs_entrypoint(spc_t) container_read_share_files(container_domain) container_exec_share_files(container_domain) container_use_ptys(container_domain) container_spc_stream_connect(container_domain) -fs_dontaudit_remount_tmpfs(container_domain) + +dev_dontaudit_mounton_sysfs(container_domain) dev_dontaudit_mounton_sysfs(container_domain) dev_dontaudit_mounton_sysfs(container_domain) -fs_mount_tmpfs(container_domain) - -dontaudit container_domain container_runtime_tmpfs_t:dir read; -allow container_domain container_runtime_tmpfs_t:dir mounton; - dev_getattr_mtrr_dev(container_domain) dev_list_sysfs(container_domain) -allow container_domain sysfs_t:dir watch; - +dev_mounton_sysfs(container_t) +dev_read_mtrr(container_domain) +dev_read_rand(container_domain) +dev_read_sysfs(container_domain) +dev_read_urand(container_domain) +dev_rw_inherited_dri(container_domain) dev_rw_kvm(container_domain) dev_rwx_zero(container_domain) +dev_write_rand(container_domain) +dev_write_urand(container_domain) +allow container_domain sysfs_t:dir watch; + +dontaudit container_domain container_runtime_tmpfs_t:dir read; +allow container_domain container_runtime_tmpfs_t:dir mounton; +can_exec(container_domain, container_runtime_tmpfs_t) allow container_domain self:key manage_key_perms; dontaudit container_domain container_domain:key search; @@ -953,7 +966,7 @@ allow container_domain self:passwd rootok; allow container_domain self:filesystem associate; allow container_domain self:netlink_kobject_uevent_socket create_socket_perms; -allow container_domain container_runtime_domain:socket_class_set { accept ioctl read getattr lock write append getopt setopt }; +allow container_domain container_runtime_domain:socket_class_set { accept append getattr getopt ioctl lock map read recv_msg recvfrom send_msg sendto setopt shutdown write }; kernel_getattr_proc(container_domain) kernel_list_all_proc(container_domain) @@ -970,16 +983,42 @@ kernel_read_irq_sysctls(container_domain) kernel_get_sysvipc_info(container_domain) +fs_dontaudit_getattr_all_dirs(container_domain) +fs_dontaudit_getattr_all_files(container_domain) +fs_dontaudit_remount_tmpfs(container_domain) +fs_dontaudit_remount_tmpfs(container_domain) +fs_exec_fusefs_files(container_domain) +fs_exec_hugetlbfs_files(container_domain) +fs_fusefs_entrypoint(container_domain) fs_getattr_all_fs(container_domain) -fs_rw_inherited_tmpfs_files(container_domain) -fs_read_tmpfs_symlinks(container_domain) -fs_search_tmpfs(container_domain) +fs_list_cgroup_dirs(container_domain) fs_list_hugetlbfs(container_domain) +fs_manage_bpf_files(container_domain) +fs_manage_fusefs_dirs(container_domain) +fs_manage_fusefs_files(container_domain) +fs_manage_fusefs_named_pipes(container_domain) +fs_manage_fusefs_named_sockets(container_domain) +fs_manage_fusefs_symlinks(container_domain) fs_manage_hugetlbfs_files(container_domain) -fs_exec_hugetlbfs_files(container_domain) -fs_dontaudit_getattr_all_dirs(container_domain) -fs_dontaudit_getattr_all_files(container_domain) +fs_mount_fusefs(container_domain) +fs_unmount_fusefs(container_domain) +fs_mount_tmpfs(container_domain) +fs_unmount_tmpfs(container_domain) +fs_mount_xattr_fs(container_domain) +fs_unmount_xattr_fs(container_domain) +fs_mounton_cgroup(container_domain) +fs_mounton_fusefs(container_domain) +fs_read_cgroup_files(container_domain) fs_read_nsfs_files(container_domain) +fs_read_tmpfs_symlinks(container_domain) +fs_remount_xattr_fs(container_domain) +fs_rw_inherited_tmpfs_files(container_domain) +fs_rw_onload_sockets(container_domain) +fs_search_tmpfs(container_domain) +fs_unmount_cgroup(container_domain) +fs_unmount_fusefs(container_domain) +fs_unmount_nsfs(container_domain) +fs_unmount_xattr_fs(container_domain) term_use_all_inherited_terms(container_domain) @@ -1003,18 +1042,6 @@ type cgroup_t; ') -dev_read_sysfs(container_domain) -dev_read_mtrr(container_domain) -dev_mounton_sysfs(container_t) - -fs_mounton_cgroup(container_t) -fs_unmount_cgroup(container_t) - -dev_read_rand(container_domain) -dev_write_rand(container_domain) -dev_read_urand(container_domain) -dev_write_urand(container_domain) - files_read_kernel_modules(container_domain) allow container_file_t cgroup_t:filesystem associate; @@ -1069,9 +1096,6 @@ ') dontaudit container_domain usermodehelper_t:file write; -fs_read_cgroup_files(container_domain) -fs_list_cgroup_dirs(container_domain) - sysnet_read_config(container_domain) allow container_domain self:cap_userns { chown dac_override fowner kill setgid setuid setpcap net_bind_service net_raw sys_chroot mknod audit_write setfcap }; @@ -1099,20 +1123,6 @@ fs_manage_cgroup_files(container_domain) ') -fs_manage_fusefs_named_sockets(container_domain) -fs_manage_fusefs_named_pipes(container_domain) -fs_manage_fusefs_dirs(container_domain) -fs_manage_fusefs_files(container_domain) -fs_manage_fusefs_symlinks(container_domain) -fs_manage_fusefs_named_sockets(container_domain) -fs_manage_fusefs_named_pipes(container_domain) -fs_exec_fusefs_files(container_domain) -fs_mount_xattr_fs(container_domain) -fs_unmount_xattr_fs(container_domain) -fs_remount_xattr_fs(container_domain) -fs_mount_fusefs(container_domain) -fs_unmount_fusefs(container_domain) -fs_mounton_fusefs(container_domain) storage_rw_fuse(container_domain) allow container_domain fusefs_t:file { mounton execmod }; allow container_domain fusefs_t:filesystem remount; @@ -1187,6 +1197,7 @@ dev_mounton_sysfs(container_userns_t) fs_mount_tmpfs(container_userns_t) +fs_unmount_tmpfs(container_userns_t) fs_relabelfrom_tmpfs(container_userns_t) fs_remount_cgroup(container_userns_t) @@ -1383,6 +1394,10 @@ allow container_domain device_node:blk_file {rw_blk_file_perms map}; ') +tunable_policy(`container_use_dri_devices',` + dev_rw_dri(container_domain) +') + tunable_policy(`virt_sandbox_use_sys_admin',` allow container_init_t self:capability sys_admin; allow container_init_t self:cap_userns sys_admin; @@ -1399,19 +1414,24 @@ fs_unmount_cgroup(container_engine_t) fs_manage_cgroup_dirs(container_engine_t) fs_manage_cgroup_files(container_engine_t) -fs_mount_tmpfs(container_engine_t) fs_write_cgroup_files(container_engine_t) - -allow container_engine_t proc_t:file mounton; -allow container_engine_t sysctl_t:file mounton; -allow container_engine_t sysfs_t:filesystem remount; - +fs_remount_cgroup(container_engine_t) +fs_mount_all_fs(container_engine_t) +fs_remount_all_fs(container_engine_t) +fs_unmount_all_fs(container_engine_t) +kernel_mounton_all_sysctls(container_engine_t) kernel_mount_proc(container_engine_t) -kernel_mounton_core_if(container_engine_t) kernel_mounton_proc(container_engine_t) +kernel_mounton_core_if(container_engine_t) kernel_mounton_systemd_ProtectKernelTunables(container_engine_t) - term_mount_pty_fs(container_engine_t) +term_use_generic_ptys(container_engine_t) + +allow container_engine_t container_file_t:chr_file mounton; +allow container_engine_t filesystem_type:{dir file} mounton; +allow container_engine_t proc_kcore_t:file mounton; +allow container_engine_t proc_t:filesystem remount; +allow container_engine_t sysctl_t:{dir file} mounton; type kubelet_t, container_runtime_domain; domain_type(kubelet_t) @@ -1516,6 +1536,9 @@ role container_user_r types container_net_domain; role container_user_r types container_file_type; container_runtime_run(container_user_t, container_user_r) +unconfined_role_change_to(container_user_r) + +container_use_ptys(container_user_t) fs_manage_cgroup_dirs(container_user_t) fs_manage_cgroup_files(container_user_t) @@ -1524,6 +1547,12 @@ systemd_dbus_chat_hostnamed(container_user_t) systemd_start_systemd_services(container_user_t) +allow container_runtime_t container_user_t:process transition; +allow container_runtime_t container_user_t:process2 nnp_transition; +allow container_user_t container_runtime_t:fifo_file rw_fifo_file_perms; + +allow container_user_t container_file_t:chr_file manage_chr_file_perms; +allow container_user_t container_file_t:file entrypoint; allow container_domain container_file_t:file entrypoint; allow container_domain container_ro_file_t:file { entrypoint execmod execute execute_no_trans getattr ioctl lock map open read }; @@ -1534,3 +1563,8 @@ allow svirt_sandbox_domain exec_type:file { entrypoint execute execute_no_trans getattr ioctl lock map open read }; allow svirt_sandbox_domain mountpoint:file entrypoint; +tunable_policy(`deny_ptrace',`',` + allow container_domain self:process ptrace; + allow spc_t self:process ptrace; +') + ++++++ file_contexts.subs_dist ++++++ --- /var/tmp/diff_new_pack.BkNF2X/_old 2024-06-06 12:31:00.328944331 +0200 +++ /var/tmp/diff_new_pack.BkNF2X/_new 2024-06-06 12:31:00.332944477 +0200 @@ -1,5 +1,5 @@ -/run /var/run -/run/lock /var/lock +/var/run /run +/var/lock /run/lock /var/run/lock /var/lock /lib /usr/lib /lib64 /usr/lib @@ -10,6 +10,8 @@ /etc/systemd/system /usr/lib/systemd/system /run/systemd/system /usr/lib/systemd/system /run/systemd/generator /usr/lib/systemd/system +/run/systemd/generator.early /usr/lib/systemd/system +/run/systemd/generator.late /usr/lib/systemd/system /var/lib/xguest/home /home /var/run/netconfig /etc /var/adm/netconfig/md5/etc /etc ++++++ selinux-policy-20240321.tar.xz -> selinux-policy-20240411.tar.xz ++++++ ++++ 5562 lines of diff (skipped) ++++++ varrun-convert.sh ++++++ #!/bin/bash ### varrun-convert.sh ### convert legacy filecontext entries containing /var/run to /run ### and load an extra selinux module with the new content ### the script takes a policy name as an argument # Set DEBUG=yes before running the script to get more verbose output # on the terminal and to the $LOG file if [ "${DEBUG}" = "yes" ]; then set -x fi # Auxiliary and log files will be created in OUTPUTDIR OUTPUTDIR="/run/selinux-policy" LOG="$OUTPUTDIR/log" mkdir -p ${OUTPUTDIR} if [ -z ${1} ]; then [ "${DEBUG}" = "yes" ] && echo "Error: Policy name required as an argument (e.g. targeted)" >> $LOG exit fi SEMODULEOPT="-s ${1}" [ "${DEBUG}" = "yes" ] && SEMODULEOPT="-v ${SEMODULEOPT}" # Take current file_contexts and unify whitespace separators FILE_CONTEXTS="/etc/selinux/${1}/contexts/files/file_contexts" FILE_CONTEXTS_UNIFIED="$OUTPUTDIR/file_contexts_unified" if [ ! -f ${FILE_CONTEXTS} ]; then [ "${DEBUG}" = "yes" ] && echo "Error: File context database file does not exist" >> $LOG exit fi if ! grep -q ^/var/run ${FILE_CONTEXTS}; then [ "${DEBUG}" = "yes" ] && echo "Info: No entries containing /var/run" >> $LOG exit 0 fi EXTRA_VARRUN_ENTRIES_WITHDUP="$OUTPUTDIR/extra_varrun_entries_dup.txt" EXTRA_VARRUN_ENTRIES_WITHDUP_TMP="$OUTPUTDIR/extra_varrun_entries_dup.tmp" EXTRA_VARRUN_ENTRIES="$OUTPUTDIR/extra_varrun_entries.txt" EXTRA_VARRUN_CIL="$OUTPUTDIR/extra_varrun.cil" # Print only /var/run entries grep ^/var/run ${FILE_CONTEXTS} > ${EXTRA_VARRUN_ENTRIES_WITHDUP} # Unify whitespace separators sed -i 's/[ \t]\+/ /g' ${EXTRA_VARRUN_ENTRIES_WITHDUP} sed 's/[ \t]\+/ /g' ${FILE_CONTEXTS} > ${FILE_CONTEXTS_UNIFIED} rm -f $EXTRA_VARRUN_ENTRIES_WITHDUP_TMP touch $EXTRA_VARRUN_ENTRIES_WITHDUP_TMP # Deduplicate already existing /var/run=/run entries while read line do subline="${line#/var}" if ! grep -q "^${subline}" ${FILE_CONTEXTS_UNIFIED}; then # check for overal duplicate entries subline2=$(echo $line | sed -E -e 's/ \S+$//') if ! grep -q "^${subline2}" ${EXTRA_VARRUN_ENTRIES_WITHDUP_TMP}; then echo "$line" echo "$line" >> $EXTRA_VARRUN_ENTRIES_WITHDUP_TMP else >&2 echo "DUP: $line" fi fi done < ${EXTRA_VARRUN_ENTRIES_WITHDUP} > ${EXTRA_VARRUN_ENTRIES} # Change /var/run to /run sed -i 's|^/var/run|/run|' ${EXTRA_VARRUN_ENTRIES} # Exception handling: packages with already duplicate entries sed -i '/^\/run\/snapd/d' ${EXTRA_VARRUN_ENTRIES} sed -i '/^\/run\/vfrnav/d' ${EXTRA_VARRUN_ENTRIES} sed -i '/^\/run\/waydroid/d' ${EXTRA_VARRUN_ENTRIES} # Change format to cil sed -i 's/^$[^ ]\+$ $[^-]$/\1 any \2/' ${EXTRA_VARRUN_ENTRIES} sed -i 's/^$[^ ]\+$ -- /\1 file /' ${EXTRA_VARRUN_ENTRIES} sed -i 's/^$[^ ]\+$ -b /\1 block /' ${EXTRA_VARRUN_ENTRIES} sed -i 's/^$[^ ]\+$ -c /\1 char /' ${EXTRA_VARRUN_ENTRIES} sed -i 's/^$[^ ]\+$ -d /\1 dir /' ${EXTRA_VARRUN_ENTRIES} sed -i 's/^$[^ ]\+$ -l /\1 symlink /' ${EXTRA_VARRUN_ENTRIES} sed -i 's/^$[^ ]\+$ -p /\1 pipe /' ${EXTRA_VARRUN_ENTRIES} sed -i 's/^$[^ ]\+$ -s /\1 socket /' ${EXTRA_VARRUN_ENTRIES} sed -i 's/^$[^ ]\+$ /(filecon "\1" /' ${EXTRA_VARRUN_ENTRIES} sed -i 's/system_u:object_r:$[^:]*$:$.*$$/(system_u object_r \1 ((\2) (\2))))/' ${EXTRA_VARRUN_ENTRIES} # Handle entries with <<none>> which do not match previous regexps sed -i s'/ <<none>>$/ ())/' ${EXTRA_VARRUN_ENTRIES} # Wrap each line with an optional block i=1 while read line do echo "(optional extra_var_run_${i}" echo " $line" echo ")" ((i++)) done < ${EXTRA_VARRUN_ENTRIES} > ${EXTRA_VARRUN_CIL} # Load module [ -s ${EXTRA_VARRUN_CIL} ] && /usr/sbin/semodule ${SEMODULEOPT} -i ${EXTRA_VARRUN_CIL}

1 0

commit xwayland for openSUSE:Factory
by Source-Sync 06 Jun '24

06 Jun '24

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package xwayland for openSUSE:Factory checked in at 2024-06-06 12:30:37 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/xwayland (Old) and /work/SRC/openSUSE:Factory/.xwayland.new.24587 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "xwayland" Thu Jun 6 12:30:37 2024 rev:33 rq:1178726 version:24.1.0 Changes: -------- --- /work/SRC/openSUSE:Factory/xwayland/xwayland.changes 2024-05-16 17:15:03.143654944 +0200 +++ /work/SRC/openSUSE:Factory/.xwayland.new.24587/xwayland.changes 2024-06-06 12:30:47.384471569 +0200 @@ -1,0 +2,5 @@ +Wed Jun 5 11:27:13 UTC 2024 - Stefan Dirsch <sndirsch(a)suse.com> + +- disable DPMS on sle15 due to missing proto package + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ xwayland.spec ++++++ --- /var/tmp/diff_new_pack.etPuVs/_old 2024-06-06 12:30:47.940491876 +0200 +++ /var/tmp/diff_new_pack.etPuVs/_new 2024-06-06 12:30:47.940491876 +0200 @@ -139,7 +139,9 @@ -Dlisten_tcp=false \ -Dlisten_unix=true \ -Dlisten_local=true \ - -Ddpms=true \ +%if 0%{?suse_version} < 1550 + -Ddpms=false \ +%endif -Dxf86bigfont=true \ -Dscreensaver=true \ -Dxres=true \

1 0

commit samba for openSUSE:Factory
by Source-Sync 06 Jun '24

06 Jun '24

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package samba for openSUSE:Factory checked in at 2024-06-06 12:30:37 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/samba (Old) and /work/SRC/openSUSE:Factory/.samba.new.24587 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "samba" Thu Jun 6 12:30:37 2024 rev:306 rq:1178709 version:4.20.1+git.339.cf6e153bb2 Changes: -------- --- /work/SRC/openSUSE:Factory/samba/samba.changes 2024-05-30 15:32:45.500902550 +0200 +++ /work/SRC/openSUSE:Factory/.samba.new.24587/samba.changes 2024-06-06 12:30:45.532403927 +0200 @@ -1,0 +2,5 @@ +Mon Jun 3 07:09:54 UTC 2024 - Samuel Cabrero <scabrero(a)suse.de> + +- Fix non deterministic builds; (bsc#1225754); (bso#13213); + +------------------------------------------------------------------- Old: ---- samba-4.20.1+git.335.0a46cdafe2.tar.bz2 New: ---- samba-4.20.1+git.339.cf6e153bb2.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ samba.spec ++++++ --- /var/tmp/diff_new_pack.9azGRW/_old 2024-06-06 12:30:47.116461780 +0200 +++ /var/tmp/diff_new_pack.9azGRW/_new 2024-06-06 12:30:47.120461926 +0200 @@ -38,10 +38,10 @@ %define build_ceph 1 %endif -%define talloc_version 2.4.1 -%define tevent_version 0.15.0 -%define tdb_version 1.4.9 -%define ldb_version 2.8.0 +%define talloc_version 2.4.2 +%define tevent_version 0.16.1 +%define tdb_version 1.4.10 +%define ldb_version 2.9.0 # This table represents the possible combinations of build macros. # They are defined only if not already defined in the build service @@ -160,7 +160,7 @@ %endif BuildRequires: sysuser-tools -Version: 4.20.1+git.335.0a46cdafe2 +Version: 4.20.1+git.339.cf6e153bb2 Release: 0 URL: https://www.samba.org/ Obsoletes: samba-32bit < %{version} ++++++ samba-4.20.1+git.335.0a46cdafe2.tar.bz2 -> samba-4.20.1+git.339.cf6e153bb2.tar.bz2 ++++++ /work/SRC/openSUSE:Factory/samba/samba-4.20.1+git.335.0a46cdafe2.tar.bz2 /work/SRC/openSUSE:Factory/.samba.new.24587/samba-4.20.1+git.339.cf6e153bb2.tar.bz2 differ: char 11, line 1

1 0

commit rubygem-ruby-augeas for openSUSE:Factory
by Source-Sync 06 Jun '24

06 Jun '24

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package rubygem-ruby-augeas for openSUSE:Factory checked in at 2024-06-06 12:30:36 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/rubygem-ruby-augeas (Old) and /work/SRC/openSUSE:Factory/.rubygem-ruby-augeas.new.24587 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "rubygem-ruby-augeas" Thu Jun 6 12:30:36 2024 rev:4 rq:1178699 version:0.5.0 Changes: -------- --- /work/SRC/openSUSE:Factory/rubygem-ruby-augeas/rubygem-ruby-augeas.changes 2017-06-28 10:37:03.740790545 +0200 +++ /work/SRC/openSUSE:Factory/.rubygem-ruby-augeas.new.24587/rubygem-ruby-augeas.changes 2024-06-06 12:30:43.892344028 +0200 @@ -1,0 +2,5 @@ +Tue May 21 10:27:14 UTC 2024 - Dominique Leuenberger <dimstar(a)opensuse.org> + +- Replace %patchN with %patch -P N: %patchN is deprecated. + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ rubygem-ruby-augeas.spec ++++++ --- /var/tmp/diff_new_pack.QFb7j5/_old 2024-06-06 12:30:44.428363605 +0200 +++ /var/tmp/diff_new_pack.QFb7j5/_new 2024-06-06 12:30:44.428363605 +0200 @@ -54,7 +54,7 @@ %prep %gem_unpack -%patch0 -p0 +%patch -P 0 -p0 find -type f -print0 | xargs -0 touch -r %{S:0} %gem_build

1 0

commit rubygem-diff-lcs for openSUSE:Factory
by Source-Sync 06 Jun '24

06 Jun '24

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package rubygem-diff-lcs for openSUSE:Factory checked in at 2024-06-06 12:30:35 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/rubygem-diff-lcs (Old) and /work/SRC/openSUSE:Factory/.rubygem-diff-lcs.new.24587 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "rubygem-diff-lcs" Thu Jun 6 12:30:35 2024 rev:10 rq:1178697 version:1.5.0 Changes: -------- --- /work/SRC/openSUSE:Factory/rubygem-diff-lcs/rubygem-diff-lcs.changes 2021-12-26 13:30:26.926956981 +0100 +++ /work/SRC/openSUSE:Factory/.rubygem-diff-lcs.new.24587/rubygem-diff-lcs.changes 2024-06-06 12:30:43.128316124 +0200 @@ -1,0 +2,5 @@ +Tue May 21 10:25:06 UTC 2024 - Dominique Leuenberger <dimstar(a)opensuse.org> + +- Replace %patchN with %patch -P N: %patchN is deprecated. + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ rubygem-diff-lcs.spec ++++++ --- /var/tmp/diff_new_pack.MrhQED/_old 2024-06-06 12:30:43.668335846 +0200 +++ /var/tmp/diff_new_pack.MrhQED/_new 2024-06-06 12:30:43.672335993 +0200 @@ -1,7 +1,7 @@ # # spec file for package rubygem-diff-lcs # -# Copyright (c) 2021 SUSE LLC +# Copyright (c) 2024 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -41,7 +41,7 @@ Patch0: fix-interpreter.patch # /MANUAL Summary: Diff::LCS computes the difference between two Enumerable sequences -License: MIT AND Artistic-2.0 AND GPL-2.0-only +License: Artistic-2.0 AND MIT AND GPL-2.0-only Group: Development/Languages/Ruby PreReq: update-alternatives @@ -60,7 +60,7 @@ %prep %gem_unpack -%patch0 -p1 +%patch -P 0 -p1 find -type f -print0 | xargs -0 touch -r %{S:0} %gem_build

1 0

commit chrony for openSUSE:Factory
by Source-Sync 06 Jun '24

06 Jun '24

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package chrony for openSUSE:Factory checked in at 2024-06-06 12:30:32 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/chrony (Old) and /work/SRC/openSUSE:Factory/.chrony.new.24587 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "chrony" Thu Jun 6 12:30:32 2024 rev:42 rq:1178691 version:4.5 Changes: -------- --- /work/SRC/openSUSE:Factory/chrony/chrony.changes 2024-02-27 22:44:29.446145723 +0100 +++ /work/SRC/openSUSE:Factory/.chrony.new.24587/chrony.changes 2024-06-06 12:30:40.856233142 +0200 @@ -1,0 +2,10 @@ +Tue Jun 4 14:57:09 UTC 2024 - Reinhard Max <max(a)suse.com> + +- bsc#1225362, chrony-124-tai.patch: make 124-tai more reliable + +------------------------------------------------------------------- +Mon May 27 15:34:40 UTC 2024 - Reinhard Max <max(a)suse.com> + +- Update clknetsim to snapshot 0a11a35. + +------------------------------------------------------------------- Old: ---- clknetsim-5d1dc05.tar.gz New: ---- chrony-124-tai.patch clknetsim-0a11a35.tar.gz BETA DEBUG BEGIN: New: - bsc#1225362, chrony-124-tai.patch: make 124-tai more reliable BETA DEBUG END: ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ chrony.spec ++++++ --- /var/tmp/diff_new_pack.Hyhsm7/_old 2024-06-06 12:30:41.636261631 +0200 +++ /var/tmp/diff_new_pack.Hyhsm7/_new 2024-06-06 12:30:41.636261631 +0200 @@ -33,7 +33,7 @@ %bcond_without testsuite %define _systemdutildir %(pkg-config --variable systemdutildir systemd) -%global clknetsim_ver 5d1dc05 +%global clknetsim_ver 0a11a35 #Compat macro for new _fillupdir macro introduced in Nov 2017 %if ! %{defined _fillupdir} %define _fillupdir %{_localstatedir}/adm/fillup-templates @@ -70,6 +70,7 @@ Patch3: chrony-service-ordering.patch Patch7: chrony-htonl.patch Patch8: chrony.nm-dispatcher.dhcp.patch +Patch9: chrony-124-tai.patch BuildRequires: NetworkManager-devel BuildRequires: bison BuildRequires: findutils @@ -181,6 +182,7 @@ %patch -P 3 %patch -P 7 %patch -P 8 +%patch -P 9 # Remove pool statements from the default /etc/chrony.conf. They will # be provided by branding packages in /etc/chrony.d/pool.conf . ++++++ chrony-124-tai.patch ++++++ From 8f5b3084144967b313cfb51285bf6517e06e1b9e Mon Sep 17 00:00:00 2001 From: Miroslav Lichvar <mlichvar(a)redhat.com> Date: Tue, 4 Jun 2024 16:23:41 +0200 Subject: [PATCH] test: make 124-tai more reliable Reported-by: Reinhard Max <max(a)suse.de> --- test/simulation/124-tai | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) --- test/simulation/124-tai.orig +++ test/simulation/124-tai @@ -20,7 +20,7 @@ client_conf=" refclock SHM 0 dpoll 0 poll 0 tai leapsectz right/UTC leapsecmode ignore -maxchange 1e-3 1 0" +maxchange 1e-3 10 0" run_test || test_fail check_chronyd_exit || test_fail @@ -35,7 +35,7 @@ client_conf=" refclock SHM 0 dpoll 0 poll 0 tai leapsectz right/UTC makestep 1 1 -maxchange 1e-3 1 0" +maxchange 1e-3 10 0" run_test || test_fail check_chronyd_exit || test_fail ++++++ clknetsim-5d1dc05.tar.gz -> clknetsim-0a11a35.tar.gz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/clknetsim-5d1dc05806155924d7f0a004f7e0643b866c7807/client.c new/clknetsim-0a11a356186bcbef412ea0282ed9d5e96e716a73/client.c --- old/clknetsim-5d1dc05806155924d7f0a004f7e0643b866c7807/client.c 2023-10-05 10:42:12.000000000 +0200 +++ new/clknetsim-0a11a356186bcbef412ea0282ed9d5e96e716a73/client.c 2024-04-24 11:58:38.000000000 +0200 @@ -255,8 +255,13 @@ _fclose = (int (*)(FILE *fp))dlsym(RTLD_NEXT, "fclose"); _fcntl = (int (*)(int fd, int cmd, ...))dlsym(RTLD_NEXT, "fcntl"); #ifdef HAVE_STAT +#if defined(__USE_TIME_BITS64) && __USE_TIME_BITS64 + _fstat = (int (*)(int fd, struct stat *statbuf))dlsym(RTLD_NEXT, "__fstat64_time64"); + _stat = (int (*)(const char *pathname, struct stat *statbuf))dlsym(RTLD_NEXT, "__stat64_time64"); +#else _fstat = (int (*)(int fd, struct stat *statbuf))dlsym(RTLD_NEXT, "fstat"); _stat = (int (*)(const char *pathname, struct stat *statbuf))dlsym(RTLD_NEXT, "stat"); +#endif #else _fxstat = (int (*)(int ver, int fd, struct stat *statbuf))dlsym(RTLD_NEXT, "__fxstat"); _xstat = (int (*)(int ver, const char *pathname, struct stat *statbuf))dlsym(RTLD_NEXT, "__xstat"); @@ -296,7 +301,7 @@ env = getenv("CLKNETSIM_START_DATE"); if (env) - system_time_offset = atol(env); + system_time_offset = atoll(env); env = getenv("CLKNETSIM_RANDOM_SEED"); if (env) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/clknetsim-5d1dc05806155924d7f0a004f7e0643b866c7807/clknetsim.bash new/clknetsim-0a11a356186bcbef412ea0282ed9d5e96e716a73/clknetsim.bash --- old/clknetsim-5d1dc05806155924d7f0a004f7e0643b866c7807/clknetsim.bash 2023-10-05 10:42:12.000000000 +0200 +++ new/clknetsim-0a11a356186bcbef412ea0282ed9d5e96e716a73/clknetsim.bash 2024-04-24 11:58:38.000000000 +0200 @@ -135,6 +135,7 @@ echo " valgrind error" 1>&2 ret=1 fi + sed -i '/^ERROR: ld.so: object.*from LD_PRELOAD cannot/d' tmp/log.[0-9]* fi return $ret diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/clknetsim-5d1dc05806155924d7f0a004f7e0643b866c7807/network.cc new/clknetsim-0a11a356186bcbef412ea0282ed9d5e96e716a73/network.cc --- old/clknetsim-5d1dc05806155924d7f0a004f7e0643b866c7807/network.cc 2023-10-05 10:42:12.000000000 +0200 +++ new/clknetsim-0a11a356186bcbef412ea0282ed9d5e96e716a73/network.cc 2024-04-24 11:58:38.000000000 +0200 @@ -309,10 +309,11 @@ void Network::write_correction(struct Packet *packet, double correction) { uint64_t c; - /* one-step transparent edge-to-edge PTP clock */ + /* one-step transparent end-to-end PTP clock */ if (packet->src_port != 319 || packet->dst_port != 319 || packet->len < 34 || - (packet->data[0] != 0 && packet->data[0] != 1) || (packet->data[1] & 0xf) != 2) + ((packet->data[0] & 0xf) != 0 && (packet->data[0] & 0xf) != 1) || + (packet->data[1] & 0xf) != 2) return; c = ((uint64_t)ntohl(*(uint32_t *)(packet->data + 8)) << 32) |

1 0

commit zypp-boot-plugin for openSUSE:Factory
by Source-Sync 06 Jun '24

06 Jun '24

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package zypp-boot-plugin for openSUSE:Factory checked in at 2024-06-06 12:30:31 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/zypp-boot-plugin (Old) and /work/SRC/openSUSE:Factory/.zypp-boot-plugin.new.24587 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "zypp-boot-plugin" Thu Jun 6 12:30:31 2024 rev:4 rq:1178681 version:0.0.9 Changes: -------- --- /work/SRC/openSUSE:Factory/zypp-boot-plugin/zypp-boot-plugin.changes 2024-02-22 21:02:55.180819344 +0100 +++ /work/SRC/openSUSE:Factory/.zypp-boot-plugin.new.24587/zypp-boot-plugin.changes 2024-06-06 12:30:39.436181278 +0200 @@ -1,0 +2,6 @@ +Wed Jun 5 07:49:32 UTC 2024 - Stefan Schubert <schubi(a)suse.com> + +- Update to version 0.0.9: +* Set reboot flag for multiversion packages ( type "M" ). + +------------------------------------------------------------------- Old: ---- zypp-boot-plugin-0.0.8.tar.xz New: ---- zypp-boot-plugin-0.0.9.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ zypp-boot-plugin.spec ++++++ --- /var/tmp/diff_new_pack.e57UQf/_old 2024-06-06 12:30:40.472219116 +0200 +++ /var/tmp/diff_new_pack.e57UQf/_new 2024-06-06 12:30:40.476219263 +0200 @@ -17,7 +17,7 @@ Name: zypp-boot-plugin -Version: 0.0.8 +Version: 0.0.9 Release: 0 Summary: Zypp plugin for checking if a reboot is needed License: AGPL-3.0-or-later ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.e57UQf/_old 2024-06-06 12:30:40.532221308 +0200 +++ /var/tmp/diff_new_pack.e57UQf/_new 2024-06-06 12:30:40.536221454 +0200 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/openSUSE/zypp-boot-plugin.git</param> - <param name="changesrevision">0ae8eced41d858355130eaaa2b28c1c399644c86</param></service></servicedata> + <param name="changesrevision">a1aaf793964246f4324a90d62063f929224e371f</param></service></servicedata> (No newline at EOF) ++++++ zypp-boot-plugin-0.0.8.tar.xz -> zypp-boot-plugin-0.0.9.tar.xz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/zypp-boot-plugin-0.0.8/NEWS new/zypp-boot-plugin-0.0.9/NEWS --- old/zypp-boot-plugin-0.0.8/NEWS 2024-02-22 16:45:46.000000000 +0100 +++ new/zypp-boot-plugin-0.0.9/NEWS 2024-06-05 09:46:28.000000000 +0200 @@ -1,3 +1,6 @@ +Version 0.0.9 +* Set reboot flag for multiversion packages ( type "M" ). + Version 0.0.8 * Do not overwrite higher bootlevel in already existing reboot-needed. diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/zypp-boot-plugin-0.0.8/meson.build new/zypp-boot-plugin-0.0.9/meson.build --- old/zypp-boot-plugin-0.0.8/meson.build 2024-02-22 16:45:46.000000000 +0100 +++ new/zypp-boot-plugin-0.0.9/meson.build 2024-06-05 09:46:28.000000000 +0200 @@ -1,5 +1,5 @@ project('zypp-boot_plugin', 'cpp', - version : '0.0.8', + version : '0.0.9', license : 'LGPLv3', default_options : [ 'buildtype=debugoptimized', diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/zypp-boot-plugin-0.0.8/src/zypp-boot-plugin.cc new/zypp-boot-plugin-0.0.9/src/zypp-boot-plugin.cc --- old/zypp-boot-plugin-0.0.8/src/zypp-boot-plugin.cc 2024-02-22 16:45:46.000000000 +0100 +++ new/zypp-boot-plugin-0.0.9/src/zypp-boot-plugin.cc 2024-06-05 09:46:28.000000000 +0200 @@ -200,7 +200,7 @@ continue; } const char * type_c = json_object_get_string(type); - if (strcmp(type_c, "+") != 0) { + if (strcmp(type_c, "+") != 0 && strcmp(type_c, "M") != 0) { cerr << "DEBUG:(boot-plugin):" << "ignoring type: " << type_c <<" in item #" << i << endl; continue; } diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/zypp-boot-plugin-0.0.8/tests/kernel.protocol new/zypp-boot-plugin-0.0.9/tests/kernel.protocol --- old/zypp-boot-plugin-0.0.8/tests/kernel.protocol 1970-01-01 01:00:00.000000000 +0100 +++ new/zypp-boot-plugin-0.0.9/tests/kernel.protocol 2024-06-05 09:46:28.000000000 +0200 @@ -0,0 +1,16 @@ +COMMITEND + +{ +"TransactionStepList":[ +{ + "solvable":{ + "a":"x86_64", + "n":"aaa_base", + "r":"150400.163.1", + "v": "4.8.30" + }, + "stage":"ok", + "type":"M" +} +] +} diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/zypp-boot-plugin-0.0.8/tests/meson.build new/zypp-boot-plugin-0.0.9/tests/meson.build --- old/zypp-boot-plugin-0.0.8/tests/meson.build 2024-02-22 16:45:46.000000000 +0100 +++ new/zypp-boot-plugin-0.0.9/tests/meson.build 2024-06-05 09:46:28.000000000 +0200 @@ -9,6 +9,9 @@ test('tst-provides', find_program(meson.current_source_dir() +'/tst_provides.sh'), env : ['ZYPP_BOOT_PLUGIN_CONFIG=../tests/zypp-boot-plugin.conf', 'ZYPP_BOOT_PLUGIN_REBOOT_FILE=./tst_provides.out']) +test('tst-kernel', find_program(meson.current_source_dir() +'/tst_kernel.sh'), + env : ['ZYPP_BOOT_PLUGIN_CONFIG=../tests/zypp-boot-plugin.conf', 'ZYPP_BOOT_PLUGIN_REBOOT_FILE=./tst_kernel.out']) + test('tst-multi', find_program(meson.current_source_dir() +'/tst_multi.sh'), env : ['ZYPP_BOOT_PLUGIN_CONFIG=../tests/zypp-boot-plugin.conf', 'ZYPP_BOOT_PLUGIN_REBOOT_FILE=./tst_multi.out']) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/zypp-boot-plugin-0.0.8/tests/tst_kernel.sh new/zypp-boot-plugin-0.0.9/tests/tst_kernel.sh --- old/zypp-boot-plugin-0.0.8/tests/tst_kernel.sh 1970-01-01 01:00:00.000000000 +0100 +++ new/zypp-boot-plugin-0.0.9/tests/tst_kernel.sh 2024-06-05 09:46:28.000000000 +0200 @@ -0,0 +1,9 @@ +#!/bin/bash + +if test -f "$ZYPP_BOOT_PLUGIN_REBOOT_FILE"; then + rm $ZYPP_BOOT_PLUGIN_REBOOT_FILE +fi + +# Installed kernel package with type M found by provides in configuration file +./boot-plugin <../tests/kernel.protocol +grep kexec $ZYPP_BOOT_PLUGIN_REBOOT_FILE

1 0

commit telepathy-glib for openSUSE:Factory
by Source-Sync 06 Jun '24

06 Jun '24

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package telepathy-glib for openSUSE:Factory checked in at 2024-06-06 12:30:28 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/telepathy-glib (Old) and /work/SRC/openSUSE:Factory/.telepathy-glib.new.24587 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "telepathy-glib" Thu Jun 6 12:30:28 2024 rev:87 rq:1178667 version:0.24.2 Changes: -------- --- /work/SRC/openSUSE:Factory/telepathy-glib/telepathy-glib.changes 2024-03-06 23:04:07.632433387 +0100 +++ /work/SRC/openSUSE:Factory/.telepathy-glib.new.24587/telepathy-glib.changes 2024-06-06 12:30:36.184062503 +0200 @@ -1,0 +2,6 @@ +Tue Jun 4 21:43:45 UTC 2024 - Michael Gorse <mgorse(a)suse.com> + +- Add telepathy-glib-function-type-cast.patch: fix an invalid cast + (glfdo#telepathy/telepathy-glib!4). + +------------------------------------------------------------------- New: ---- telepathy-glib-function-type-cast.patch BETA DEBUG BEGIN: New: - Add telepathy-glib-function-type-cast.patch: fix an invalid cast (glfdo#telepathy/telepathy-glib!4). BETA DEBUG END: ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ telepathy-glib.spec ++++++ --- /var/tmp/diff_new_pack.fjbRH4/_old 2024-06-06 12:30:36.936089969 +0200 +++ /var/tmp/diff_new_pack.fjbRH4/_new 2024-06-06 12:30:36.936089969 +0200 @@ -24,6 +24,8 @@ Group: Development/Languages/C and C++ URL: http://telepathy.freedesktop.org/ Source: http://telepathy.freedesktop.org/releases/telepathy-glib/%{name}-%{version}… +# PATCH-FIX-UPSTREAM telepathy-glib-function-type-cast.patch boo#1221707 mgorse(a)suse.com -- fix an invalid cast. +Patch0: telepathy-glib-function-type-cast.patch BuildRequires: gtk-doc >= 1.17 BuildRequires: libxslt-devel ++++++ telepathy-glib-function-type-cast.patch ++++++ From 72412c944b771f3214ddc40fa9dea82cea3a5651 Mon Sep 17 00:00:00 2001 From: Mamoru TASAKA <mtasaka(a)fedoraproject.org> Date: Fri, 2 Feb 2024 12:17:44 +0900 Subject: [PATCH] fix: build fix with -Werror=incompatible-pointer-types gcc14 defaults to -Werror=incompatible-pointer-types . Fix build error with this option. --- telepathy-glib/protocol.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/telepathy-glib/protocol.c b/telepathy-glib/protocol.c index 88fdff382..25b36620b 100644 --- a/telepathy-glib/protocol.c +++ b/telepathy-glib/protocol.c @@ -1791,7 +1791,7 @@ _tp_protocol_parse_manager_file (GKeyFile *file, i++; } - param_specs = g_ptr_array_new_full (i, tp_value_array_free); + param_specs = g_ptr_array_new_full (i, (GDestroyNotify) tp_value_array_free); for (key = keys; key != NULL && *key != NULL; key++) { -- GitLab

1 0