Sync from SUSE:SLFO:1.1 container-selinux revision 1cfb94ef335332a01baa9cba276b2049

_service

@@ -1,21 +0,0 @@
-<services>
-  <service name="tar_scm" mode="manual">
-    <param name="version">_auto_</param>
-    <param name="versionformat">@PARENT_TAG@</param>
-    <param name="url">https://github.com/containers/container-selinux.git</param>
-    <param name="scm">git</param>
-    <param name="changesgenerate">enable</param>
-    <param name="match-tag">v*</param>
-    <param name="revision">@PARENT_TAG@</param>
-    <param name="versionrewrite-pattern">v(.*)</param>
-    <param name="versionrewrite-replacement">\1</param>
-  </service>
-  <service name="recompress" mode="manual">
-    <param name="compression">xz</param>
-    <param name="file">*.tar</param>
-  </service>
-  <service name="set_version" mode="manual" >
-    <param name="file">container-selinux.spec</param>
-  </service>
-</services>
-

_servicedata

@@ -1,4 +0,0 @@
-<servicedata>
-<service name="tar_scm">
-                <param name="url">https://github.com/containers/container-selinux.git</param>
-              <param name="changesrevision">c9b3eca0e1a878a1fe79408cb6c2e89b38b10829</param></service></servicedata>

container-selinux.changes

@@ -1,3 +1,10 @@
+-------------------------------------------------------------------
+Mon Mar 31 12:35:29 UTC 2025 - jsegitz@suse.com
+
+- Update to version 2.236.0:
+  * Allow super privileged containers to use RealtimeKit for scheduling
+  * Add container_ro_file_t to the podman artifact store
+
 -------------------------------------------------------------------
 Wed Mar 05 17:15:45 UTC 2025 - cathy.hu@suse.com
 

container-selinux.spec

@@ -25,8 +25,9 @@
 %global _format() export %{1}=""; for x in %{modulenames}; do %{1}+=%{2}; %{1}+=" "; done;
 # Version of SELinux we were using
 %define selinux_policyver %(rpm -q selinux-policy --qf '%%{version}')
+%define no_user_namespace 0
 Name:           container-selinux
-Version:        2.235.0
+Version:        2.236.0
 Release:        0
 Summary:        SELinux policies for container runtimes
 License:        GPL-2.0-only
@@ -36,11 +37,11 @@ BuildRequires:  selinux-policy
 BuildRequires:  selinux-policy-devel
 BuildRequires:  selinux-policy-%{selinuxtype}
 Requires:       selinux-policy >= %(rpm -q selinux-policy --qf '%%{version}-%%{release}')
-Requires(posttrans): policycoreutils
+Requires(post): policycoreutils
-Requires(posttrans): /usr/bin/sed
+Requires(post): /usr/bin/sed
-Requires(posttrans): selinux-policy-base >= %{selinux_policyver}
+Requires(post): selinux-policy-base >= %{selinux_policyver}
-Requires(posttrans): selinux-policy-targeted >= %{selinux_policyver}
+Requires(post): selinux-policy-targeted >= %{selinux_policyver}
-Requires(posttrans): selinux-tools
+Requires(post): selinux-tools
 BuildArch:      noarch
 
 %description
@@ -48,6 +49,9 @@ SELinux policy modules for use with container runtimes.
 
 %prep
 %setup -q
+%if %{defined no_user_namespace}
+sed -i '/user_namespace/d' container.te
+%endif
 
 %build
 %make_build
@@ -71,12 +75,7 @@ install -pm 0644 container_selinux.8 %{buildroot}%{_mandir}/man8/
 %pre
 %selinux_relabel_pre -s %{selinuxtype}
 
-%postun
+%post
-if [ $1 -eq 0 ]; then
-   %selinux_modules_uninstall -s %{selinuxtype} %{modulenames} docker
-fi
-
-%posttrans
 # Install all modules in a single transaction
 if [ $1 -eq 1 ]; then
    %{_sbindir}/setsebool -P -N virt_use_nfs=1 virt_sandbox_use_all_caps=1
@@ -89,6 +88,13 @@ fi
 . %{_sysconfdir}/selinux/config
 sed -e "\|container_file_t|h; \${x;s|container_file_t||;{g;t};a\\" -e "container_file_t" -e "}" -i %{_sysconfdir}/selinux/${SELINUXTYPE}/contexts/customizable_types
 matchpathcon -qV %{_sharedstatedir}/containers || restorecon -R %{_sharedstatedir}/containers &> /dev/null || :
+
+%postun
+if [ $1 -eq 0 ]; then
+   %selinux_modules_uninstall -s %{selinuxtype} %{modulenames} docker
+fi
+
+%posttrans
 %selinux_relabel_post -s %{selinuxtype}
 
 %files