Accepting request 1365938 from security

- Drop tunable in require to avoid policy loading issues
  with toolchain 3.11 (bsc#1271417).
  Can be dropped, once this is accepted upstream: 
  https://github.com/stefanberger/swtpm/pull/1139
  - Add patch: 1271417-drop-tunable-requires.patch (forwarded request 1365931 from cahu)

OBS-URL: https://build.opensuse.org/request/show/1365938
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/swtpm?expand=0&rev=26

swtpm.changes

@@ -1,3 +1,12 @@
+-------------------------------------------------------------------
+Wed Jul 15 10:12:51 UTC 2026 - Cathy Hu <cathy.hu@suse.com>
+
+- Drop tunable in require to avoid policy loading issues
+  with toolchain 3.11 (bsc#1271417).
+  Can be dropped, once this is accepted upstream: 
+  https://github.com/stefanberger/swtpm/pull/1139
+  - Add patch: 1271417-drop-tunable-requires.patch
+
 -------------------------------------------------------------------
 Thu Nov 19 08:05:47 UTC 2025 - Zdenek Kubala <zkubala@suse.com>
 

swtpm.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package swtpm
 #
-# Copyright (c) 2025 SUSE LLC and contributors
+# Copyright (c) 2026 SUSE LLC and contributors
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -42,6 +42,8 @@ Source100:      swtpm-rpmlintrc
 Patch0:         swtpm-fix-build.patch
 # PATCH-FIX-UPSTREAM
 Patch1:         https://patch-diff.githubusercontent.com/raw/stefanberger/swtpm/pull/1027.patch
+# PATCH-FIX-UPSTREAM - cahu@suse.de bsc#1271417 drop tunable requires as it overrides booleanif
+Patch2:         1271417-drop-tunable-requires.patch
 BuildRequires:  autoconf
 BuildRequires:  automake
 BuildRequires:  expect

1271417-drop-tunable-requires.patch

@@ -0,0 +1,12 @@
+Index: swtpm-0.10.1/src/selinux/swtpm.te
+===================================================================
+--- swtpm-0.10.1.orig/src/selinux/swtpm.te
++++ swtpm-0.10.1/src/selinux/swtpm.te
+@@ -14,7 +14,6 @@ require {
+ 	type virtqemud_t;
+ 	type virtqemud_tmp_t;
+ 	class file map;
+-	tunable virt_use_nfs;
+ }
+ 
+ attribute_role swtpm_roles;