Accepting request 687202 from security:SELinux

please stage checkpolicy libselinux libsemanage libsepol mcstrans policycoreutils restorecond together

OBS-URL: https://build.opensuse.org/request/show/687202
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libselinux?expand=0&rev=53

libselinux-2.8.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:31db96ec7643ce10912b3c3f98506a08a9116dcfe151855fd349c3fda96187e1
-size 187759

libselinux-2.9.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:1bccc8873e449587d9a2b2cf253de9b89a8291b9fbc7c59393ca9e5f5f4d2693
+size 211546

libselinux-bindings.changes

@@ -1,3 +1,21 @@
+-------------------------------------------------------------------
+Wed Mar 20 15:05:35 UTC 2019 - jsegitz@suse.com
+
+- Update to version 2.9
+  * Add security_reject_unknown(3) man page
+  * Change matchpathcon usage to match with matchpathcon manpage
+  * Do not define gettid() if glibc >= 2.30 is used
+  * Fix RESOURCE_LEAK defects reported by coverity scan
+  * Fix line wrapping in selabel_file.5
+  * Do not dereference symlink with statfs in selinux_restorecon
+  * Fix overly strict validation of file_contexts.bin
+  * Fix selinux_restorecon() on non-SELinux hosts
+  * Fix the whatis line for the selinux_boolean_sub.3 manpage
+  * Fix printf format string specifier for uint64_t
+  * Fix handling of unknown classes/perms
+  * Set an appropriate errno in booleans.c
+- Dropped python3.patch, is now upstream
+
 -------------------------------------------------------------------
 Wed Oct 17 11:48:30 UTC 2018 - jsegitz@suse.com
 

libselinux-bindings.spec

@@ -17,9 +17,9 @@
 
 
 %{?!python_module:%define python_module() python-%{**} python3-%{**}}
-%define libsepol_ver 2.8
+%define libsepol_ver 2.9
 Name:           libselinux-bindings
-Version:        2.8
+Version:        2.9
 Release:        0
 Summary:        SELinux runtime library and simple utilities
 License:        GPL-2.0-only AND SUSE-Public-Domain
@@ -29,7 +29,6 @@ URL:            https://github.com/SELinuxProject/selinux/wiki/Releases
 Source:         libselinux-%{version}.tar.gz
 Source1:        selinux-ready
 Source2:        baselibs.conf
-Patch3:         python3.patch
 # PATCH-FIX-UPSTREAM Include <sys/uio.h> for readv prototype
 Patch4:         readv-proto.patch
 BuildRequires:  libsepol-devel-static >= %{libsepol_ver}
@@ -78,7 +77,6 @@ language.
 
 %prep
 %setup -q -n libselinux-%{version}
-%patch3 -p1
 %patch4 -p1
 
 %build

libselinux.changes

@@ -1,3 +1,21 @@
+-------------------------------------------------------------------
+Wed Mar 20 15:05:35 UTC 2019 - jsegitz@suse.com
+
+- Update to version 2.9
+  * Add security_reject_unknown(3) man page
+  * Change matchpathcon usage to match with matchpathcon manpage
+  * Do not define gettid() if glibc >= 2.30 is used
+  * Fix RESOURCE_LEAK defects reported by coverity scan
+  * Fix line wrapping in selabel_file.5
+  * Do not dereference symlink with statfs in selinux_restorecon
+  * Fix overly strict validation of file_contexts.bin
+  * Fix selinux_restorecon() on non-SELinux hosts
+  * Fix the whatis line for the selinux_boolean_sub.3 manpage
+  * Fix printf format string specifier for uint64_t
+  * Fix handling of unknown classes/perms
+  * Set an appropriate errno in booleans.c
+- Dropped python3.patch, is now upstream
+
 -------------------------------------------------------------------
 Fri Jan  4 14:18:42 UTC 2019 - jsegitz@suse.com
 

libselinux.spec

@@ -16,18 +16,17 @@
 #
 
 
-%define libsepol_ver 2.8
+%define libsepol_ver 2.9
 Name:           libselinux
-Version:        2.8
+Version:        2.9
 Release:        0
 Summary:        SELinux runtime library and utilities
 License:        GPL-2.0-only AND SUSE-Public-Domain
 Group:          Development/Libraries/C and C++
 URL:            https://github.com/SELinuxProject/selinux/wiki/Releases
-Source:         libselinux-%{version}.tar.gz
+Source:         https://github.com/SELinuxProject/selinux/releases/download/20190315/%{name}-%{version}.tar.gz
 Source1:        selinux-ready
 Source2:        baselibs.conf
-Patch3:         python3.patch
 # PATCH-FIX-UPSTREAM Include <sys/uio.h> for readv prototype
 Patch4:         readv-proto.patch
 BuildRequires:  fdupes
@@ -95,7 +94,6 @@ necessary to develop your own software using libselinux.
 
 %prep
 %setup -q
-%patch3 -p1
 %patch4 -p1
 
 %build
@@ -149,7 +147,9 @@ install -m 0755 %{SOURCE1} %{buildroot}%{_sbindir}/selinux-ready
 %{_sbindir}/selinuxexeccon
 %{_sbindir}/sefcontext_compile
 %{_mandir}/man5/*
+%{_mandir}/ru/man5/*
 %{_mandir}/man8/*
+%{_mandir}/ru/man8/*
 
 %files -n libselinux1
 /%{_lib}/libselinux.so.*

python3.patch

@@ -1,13 +0,0 @@
-Index: libselinux-2.7/src/Makefile
-===================================================================
---- libselinux-2.7.orig/src/Makefile
-+++ libselinux-2.7/src/Makefile
-@@ -1,7 +1,7 @@
- # Support building the Python bindings multiple times, against various Python
- # runtimes (e.g. Python 2 vs Python 3) by optionally prefixing the build
- # targets with "PYPREFIX":
--PYTHON ?= python
-+PYTHON ?= python3
- PYPREFIX ?= $(shell $(PYTHON) -c 'import sys;print("python-%d.%d" % sys.version_info[:2])')
- RUBY ?= ruby
- RUBYPREFIX ?= $(notdir $(RUBY))