Accepting request 1157662 from security:SELinux

- Update to version 20240313:
  * Assign alts_exec_t to files_type
- Update to version 20240308:
  * Support /bin/alts in the policy (bsc#1217530)
  * Revert "Allow virtnetworkd_t to execute bin_t (bsc#1216903)"
- Update to version 20240306:
  * Replace init domtrans rule for confined users to allow exec init
  * Update dbus_role_template() to allow user service status
  * Allow polkit status all systemd services
  * Allow setroubleshootd create and use inherited io_uring
  * Allow load_policy read and write generic ptys
- Update to version 20240304:
  * Allow ssh-keygen to use the libica crypto module (bsc#1220373)

OBS-URL: https://build.opensuse.org/request/show/1157662
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/selinux-policy?expand=0&rev=58

_servicedata

@@ -1,7 +1,7 @@
 <servicedata>
 <service name="tar_scm">
                 <param name="url">https://gitlab.suse.de/selinux/selinux-policy.git</param>
-              <param name="changesrevision">e17843ad685ede6b0ba9a2571bf3199e56408f83</param></service><service name="tar_scm">
+              <param name="changesrevision">45f14b8b76e738bbd167b44362388814a95c498e</param></service><service name="tar_scm">
                 <param name="url">https://github.com/containers/container-selinux.git</param>
               <param name="changesrevision">07b3034f6d9625ab84508a2f46515d8ff79b4204</param></service><service name="tar_scm">
                 <param name="url">https://gitlab.suse.de/jsegitz/selinux-policy.git</param>

modules-targeted-contrib.conf

@@ -2761,3 +2761,10 @@ nvme_stas = module
 # coreos_installer
 #
 coreos_installer = module
+
+## Layer: contrib
+## Module: libalternatives
+##
+## libalternatives
+##
+libalternatives = module

selinux-policy-20240205.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:4352abee42d51bd6d340b155e0363c101fed4cce8fa6b8799aa6786e570fd3d5
-size 794716

selinux-policy-20240313.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:1802736a244af3491e2ae68f65e96a01e7276a396f0889b6ce264c8a098984e8
+size 767076

selinux-policy.changes

@@ -1,3 +1,32 @@
+-------------------------------------------------------------------
+Wed Mar 13 11:02:43 UTC 2024 - cathy.hu@suse.com
+
+- Update to version 20240313:
+  * Assign alts_exec_t to files_type
+
+-------------------------------------------------------------------
+Fri Mar 08 09:05:08 UTC 2024 - cathy.hu@suse.com
+
+- Update to version 20240308:
+  * Support /bin/alts in the policy (bsc#1217530)
+  * Revert "Allow virtnetworkd_t to execute bin_t (bsc#1216903)"
+
+-------------------------------------------------------------------
+Wed Mar 06 15:41:20 UTC 2024 - cathy.hu@suse.com
+
+- Update to version 20240306:
+  * Replace init domtrans rule for confined users to allow exec init
+  * Update dbus_role_template() to allow user service status
+  * Allow polkit status all systemd services
+  * Allow setroubleshootd create and use inherited io_uring
+  * Allow load_policy read and write generic ptys
+
+-------------------------------------------------------------------
+Mon Mar 04 16:19:28 UTC 2024 - cathy.hu@suse.com
+
+- Update to version 20240304:
+  * Allow ssh-keygen to use the libica crypto module (bsc#1220373)
+
 -------------------------------------------------------------------
 Mon Feb 05 15:48:02 UTC 2024 - cathy.hu@suse.com
 

selinux-policy.spec

@@ -33,7 +33,7 @@ Summary:        SELinux policy configuration
 License:        GPL-2.0-or-later
 Group:          System/Management
 Name:           selinux-policy
-Version:        20240205
+Version:        20240313
 Release:        0
 Source0:        %{name}-%{version}.tar.xz
 Source1:        container.fc