Accepting request 832092 from security:SELinux

please stage with updated gcc to prevent build failures

OBS-URL: https://build.opensuse.org/request/show/832092
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libsemanage?expand=0&rev=49

libsemanage-3.0.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:a497b0720d54eac427f1f3f618eed417e50ed8f4e47ed0f7a1d391bd416e84cf
-size 180745

libsemanage-3.1.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:22d6c75526e40d1781c30bcf29abf97171bdfe6780923f11c8e1c76a75a21ff8
+size 179601

libsemanage.changes

@@ -1,3 +1,36 @@
+-------------------------------------------------------------------
+Wed Jul 29 14:37:19 UTC 2020 - Thorsten Kukuk <kukuk@suse.com>
+
+- Add /var/lib/selinux
+
+-------------------------------------------------------------------
+Wed Jul 15 08:17:18 UTC 2020 - Johannes Segitz <jsegitz@suse.com>
+
+- Remove libsemanage-update-map-file.patch to prevent checkers from declining
+  the submission. Keeping the snippet in the spec file in case we try to 
+  enable LTO again
+
+-------------------------------------------------------------------
+Tue Jul 14 08:36:19 UTC 2020 - Johannes Segitz <jsegitz@suse.com>
+
+- Update to version 3.1
+  * Improved manpage
+  * fsync final files before rename
+
+-------------------------------------------------------------------
+Tue Jun 16 07:08:59 UTC 2020 - Johannes Segitz <jsegitz@suse.com>
+
+- Disabled LTO again. This breaks e.g. shadow and also other packages
+  in security:SELinux
+
+-------------------------------------------------------------------
+Fri Jun 12 09:07:31 UTC 2020 - Pedro Monreal Gonzalez <pmonrealgonzalez@suse.com>
+
+- Fix build with LTO: [bsc#1133102]
+  * Enable LTO (Link Time Optimization) and build with -ffat-lto-objects
+  * Update map file to include new symbols and remove wildcards
+- Add libsemanage-update-map-file.patch
+
 -------------------------------------------------------------------
 Thu Jun  4 09:57:51 UTC 2020 - Dominique Leuenberger <dimstar@opensuse.org>
 

libsemanage.spec

@@ -17,15 +17,18 @@
 
 
 Name:           libsemanage
-Version:        3.0
+Version:        3.1
 Release:        0
 Summary:        SELinux policy management library
 License:        LGPL-2.1-or-later
 Group:          Development/Libraries/C and C++
 URL:            https://github.com/SELinuxProject/selinux/wiki/Releases
-Source:         https://github.com/SELinuxProject/selinux/releases/download/20191204/%{name}-%{version}.tar.gz
+Source:         https://github.com/SELinuxProject/selinux/releases/download/20200710/%{name}-%{version}.tar.gz
 Source1:        baselibs.conf
 Source2:        semanage.conf
+# PATCH-FIX-UPSTREAM bsc#1133102 LTO: Update map file to include new symbols and remove wildcards
+# For now we need to disable this. This breaks e.g. shadow and also other packages in security:SELinux
+#Patch0:         libsemanage-update-map-file.patch
 BuildRequires:  audit-devel
 BuildRequires:  bison
 BuildRequires:  fdupes
@@ -96,13 +99,14 @@ grep /usr/libexec . -rl | xargs sed -i "s|/usr/libexec|%{_libexecdir}|g"
 %build
 %define _lto_cflags %{nil}
 make %{?_smp_mflags} clean
-make -j1 CFLAGS="%{optflags}" CC="gcc"
+make -j1 CFLAGS="%{optflags} -fno-semantic-interposition" CC="gcc"
-make -j1 CFLAGS="%{optflags}" LIBDIR="%{_libdir}" LIBEXECDIR="%{_libexecdir}" SHLIBDIR="%{_lib}" CC="gcc" all
+make -j1 CFLAGS="%{optflags} -fno-semantic-interposition" LIBDIR="%{_libdir}" LIBEXECDIR="%{_libexecdir}" SHLIBDIR="%{_lib}" CC="gcc" all
 
 %install
 mkdir -p %{buildroot}/%{_lib}
 mkdir -p %{buildroot}%{_libdir}
 mkdir -p %{buildroot}%{_includedir}
+mkdir -p %{buildroot}%{_localstatedir}/lib/selinux
 %make_install LIBDIR="%{_libdir}" LIBEXECDIR="%{_libexecdir}" SHLIBDIR="%{_libdir}"
 ln -sf  %{_libdir}/libsemanage.so.1 %{buildroot}/%{_libdir}/libsemanage.so
 cp %{SOURCE2} %{buildroot}%{_sysconfdir}/selinux/semanage.conf
@@ -116,6 +120,7 @@ cp %{SOURCE2} %{buildroot}%{_sysconfdir}/selinux/semanage.conf
 %dir %{_sysconfdir}/selinux
 %config(noreplace) %{_sysconfdir}/selinux/semanage.conf
 %{_libdir}/libsemanage.so.*
+%dir %{_localstatedir}/lib/selinux
 
 %files devel
 %{_libdir}/libsemanage.so

python-semanage.changes

@@ -1,3 +1,24 @@
+-------------------------------------------------------------------
+Tue Jul 14 08:36:19 UTC 2020 - Johannes Segitz <jsegitz@suse.com>
+
+- Update to version 3.1
+  * Improved manpage
+  * fsync final files before rename
+
+-------------------------------------------------------------------
+Tue Jun 16 07:08:59 UTC 2020 - Johannes Segitz <jsegitz@suse.com>
+
+- Disabled LTO again. This breaks e.g. shadow and also other packages
+  in security:SELinux
+
+-------------------------------------------------------------------
+Fri Jun 12 09:07:31 UTC 2020 - Pedro Monreal Gonzalez <pmonrealgonzalez@suse.com>
+
+- Fix build with LTO: [bsc#1133102]
+  * Enable LTO (Link Time Optimization)
+  * Update map file to include new symbols and remove wildcards
+- Add libsemanage-update-map-file.patch
+
 -------------------------------------------------------------------
 Thu Jun  4 09:57:51 UTC 2020 - Dominique Leuenberger <dimstar@opensuse.org>
 

python-semanage.spec

@@ -18,14 +18,17 @@
 
 %{?!python_module:%define python_module() python-%{**} python3-%{**}}
 Name:           python-semanage
-Version:        3.0
+Version:        3.1
 Release:        0
 Summary:        Python bindings for SELinux's policy management library
 License:        LGPL-2.1-only
 Group:          Development/Languages/Python
 URL:            https://github.com/SELinuxProject/selinux
-Source:         https://github.com/SELinuxProject/selinux/releases/download/20191204/libsemanage-%{version}.tar.gz
+Source:         https://github.com/SELinuxProject/selinux/releases/download/20200710/libsemanage-%{version}.tar.gz
 Source1:        baselibs.conf
+# PATCH-FIX-UPSTREAM bsc#1133102 LTO: Update map file to include new symbols and remove wildcards
+# For now we need to disable this. This breaks e.g. shadow and also other packages in security:SELinux
+# Patch0:         libsemanage-update-map-file.patch
 BuildRequires:  %{python_module devel}
 BuildRequires:  audit-devel
 BuildRequires:  bison
@@ -53,8 +56,8 @@ grep /usr/libexec . -rl | xargs sed -i "s|/usr/libexec|%{_libexecdir}|g"
 %define _lto_cflags %{nil}
 make %{?_smp_mflags} clean
 %{python_expand # loop over possible pythons
-make -j1 PYTHON=$python CFLAGS="%{optflags}" swigify
+make -j1 PYTHON=$python CFLAGS="%{optflags} -fno-semantic-interposition" swigify
-make -j1 PYTHON=$python CFLAGS="%{optflags}" \
+make -j1 PYTHON=$python CFLAGS="%{optflags} -fno-semantic-interposition" \
          LIBDIR="%{_libdir}" \
          LIBEXECDIR="%{_libexecdir}" \
          SHLIBDIR="%{_lib}" \