Accepting request 1331577 from security:SELinux

- Update to version 3.10
  https://github.com/SELinuxProject/selinux/releases/tag/3.10
  * libsepol: fix TARGET and LIBSO on Darwin
  * libsepol: add bpf_token_perms polcap
  * libsepol: Fix erroneous genfscon asterisks
  * libsepol: Fix sid handling when writing out policy from binary
  * libsepol: Fix an error in the policyd validation of user datums
  * libsepol: Fix processing of levels for user rule in an optional block
  * libsepol: Fix problem with handling type attributes in role-types rule
  * libsepol: Expand role attributes when expanding instead of when linking
  * libsepol: Fix expand_role_attributes_in_attributes()
  * libsepol: Allow type attributes to be associated with other type attributes
  * libsepol: Tighten checks on MLS range and level when validating
  * libsepol: Check for an unset sensitivity in module_to_cil
  * libsepol: Handled required users in module_to_cil
  * libsepol: Fix potential NULL dereference in policydb_read()
  * libsepol: Fix potential use of an uninitialized value in link.c
  * libsepol: Fix possible use-after-free when expanding attributes
  * libsepol: Support functionfs_seclabel policycap
  * libsepol: add memfd_class capability
- keyring: Add key of Jason Zaman <jasonzaman@gmail.com> 
  * added 63191CE94183098689CAB8DB7EF137EC935B0EAF [expires: 2026-02-08]

OBS-URL: https://build.opensuse.org/request/show/1331577
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libsepol?expand=0&rev=62

libsepol-3.10.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:d555586797fa9f38344496d2a7ec1147b6caaf3fcc44c42d8d5173edd7a79a71
+size 514545

libsepol-3.10.tar.gz.asc

@@ -0,0 +1,19 @@
+-----BEGIN PGP SIGNATURE-----
+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+=64rI
+-----END PGP SIGNATURE-----

libsepol-3.8.1.tar.gz.asc

@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCgAdFiEEcgDrLD9eSIRjwM6ezcroySfGvjEFAmfIn6cACgkQzcroySfG
-vjHl9A/+K9OVqrdn9BhJobCOvD2YqW1DUkexPQMAAzHCVoUc6B1oLOc+dHfIh/s9
-1hiuezTl/LX1KeJWQHBT6wp1zbhVkfdV5TAdDocHy8KbCY+UE4ASXHQuFkBJkk96
-S5Bez0sc5wlQPm+PAmDM2QxEbpbKXSuCQJU+KvvLJfp2P2//nj0REks2FFnp6ds9
-+Rj/0ki9wnw+fQv1aboXUlA3fpCLArZJ5D03yjJz1zzlWgWOZ6b6gQHiE4WvIMOM
-C6D/WiI1AoguOyjpl5aWKyxoKm09e4goswvw4DM+zcxpzb1vCRGzSmRopquNvJzc
-JyOvMOOige86/ZJ+CeXE00MhXiFZ1UXak9znjZax9mSUlIGHRQARq7WtW/CoQ6CI
-5Bpq4q8bhs01IHurwZTlGynW4YrF0TR66cAmfxjM0irBNNYZyD364myrupf4DIoO
-3SN4XfVDqnFQEEft0HRW9xB3zLheyVcWFCWWS+bgzNelCAc1fPsje2W000E8QBH4
-lQFxM4UTRt2uboFI5P6yJG+/v5y57XXp/M/1PgRZ6M/vUi2kwaN486wbQWAt4eO4
-GLFPXmb1EiNeAq1UBwMHRqzEHvcLan6n0z7l4gpe0TNetFqh2erunuyAVQBVo6zT
-DuAZvc1sXGJpVt0kjYEv9Api8b0gj7djoUWZQKp6C16RaHki8AA=
-=XPdp
------END PGP SIGNATURE-----

libsepol.changes

@@ -1,3 +1,38 @@
+-------------------------------------------------------------------
+Thu Feb  5 16:28:22 UTC 2026 - Cathy Hu <cathy.hu@suse.com>
+
+- Update to version 3.10
+  https://github.com/SELinuxProject/selinux/releases/tag/3.10
+  * libsepol: fix TARGET and LIBSO on Darwin
+  * libsepol: add bpf_token_perms polcap
+  * libsepol: Fix erroneous genfscon asterisks
+  * libsepol: Fix sid handling when writing out policy from binary
+  * libsepol: Fix an error in the policyd validation of user datums
+  * libsepol: Fix processing of levels for user rule in an optional block
+  * libsepol: Fix problem with handling type attributes in role-types rule
+  * libsepol: Expand role attributes when expanding instead of when linking
+  * libsepol: Fix expand_role_attributes_in_attributes()
+  * libsepol: Allow type attributes to be associated with other type attributes
+  * libsepol: Tighten checks on MLS range and level when validating
+  * libsepol: Check for an unset sensitivity in module_to_cil
+  * libsepol: Handled required users in module_to_cil
+  * libsepol: Fix potential NULL dereference in policydb_read()
+  * libsepol: Fix potential use of an uninitialized value in link.c
+  * libsepol: Fix possible use-after-free when expanding attributes
+  * libsepol: Support functionfs_seclabel policycap
+  * libsepol: add memfd_class capability
+- keyring: Add key of Jason Zaman <jasonzaman@gmail.com> 
+  * added 63191CE94183098689CAB8DB7EF137EC935B0EAF [expires: 2026-02-08]
+
+-------------------------------------------------------------------
+Thu Jul 17 15:49:27 UTC 2025 - Johannes Segitz <jsegitz@suse.com>
+
+- Update to version 3.9
+  * Add new 'netif_wildcard' policy capability
+  * Allow multiple policycap statements
+  * Support genfs_seclabel_wildcard
+  * Introduce neveraudit types
+
 -------------------------------------------------------------------
 Fri Mar  7 14:12:08 UTC 2025 - Cathy Hu <cathy.hu@suse.com>
 

libsepol.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package libsepol
 #
-# Copyright (c) 2025 SUSE LLC
+# Copyright (c) 2026 SUSE LLC and contributors
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -19,7 +19,7 @@
 %define libname libsepol2
 
 Name:           libsepol
-Version:        3.8.1
+Version:        3.10
 Release:        0
 Summary:        SELinux binary policy manipulation library
 License:        LGPL-2.1-or-later