mbox series

[v2,00/13] Selinux: bump to 3.5

Message ID 20230425171454.48802-1-aduskett@gmail.com
Headers show
Series Selinux: bump to 3.5 | expand

Message

Adam Duskett April 25, 2023, 5:14 p.m. UTC 
It's been quite some time since anyone updated the SELinux packages (mainly me!)

Most of the changes are straight forward:
  - Update the package to 3.5
  - Change the license file from COPYING to LICENSE.
    (The COPYING file has been renamed to LICENSE.)

Some notes for specific packages:
  - Audit now installs ausearch to /usr/sbin (or we do?) As such, a small patch
    for selinux-python is necessary to change the patch for ausearch from /sbin
    to /usr/sbin

  - libselinux now requires host-pip to install the python modules.
    Surprisingly, host-pip3 cross-compiles the modules without issue and just
    worked. I should buy a lottery ticket!

  - I found out that if you have rst2html5 on the host, the glib meson package
    tries to use it to generate documents, which causes a failure on installing
    to the target. Luckily we don't want the documents so the fix is to simply
    remove the docs/ subdirectroy from meson.build. This patch is tiny and won't
    be a headache to maintain.
    
  - A small upstream patch needs to be added to refpolicy to ensure refpolicy
    builds without dbus selected.

Tested on Fedora 38. Both with pc_efi and aarch-virt configs.

Other tests ran and passed:

tests.init.test_systemd_selinux.TestSELinuxSystemdExt4
tests.init.test_systemd_selinux.TestSELinuxSystemdSquashfs
tests.core.test_selinux.TestSELinuxCustomGit
tests.core.test_selinux.TestSELinuxExtraModules
tests.core.test_selinux.TestSELinuxExtraModulesDirs
tests.core.test_selinux.TestSELinuxPackage

Changes v1 -> v2:
  - Added refpolicy/2.20221101/0001-mount-dbus-interface-must-be-optional.patch
  
Adam Duskett (13):
  package/libglib2/0003-disable-building-docs.patch: new patch
  package/python-pip: add host variant
  package/libsepol: bump to version 3.5
  package/libsemanage: bump to version 3.5
  package/libselinux: bump to version 3.5
  package/policycoreutils: bump to version 3.5
  package/checkpolicy: bump to version 3.5
  package/restorecond: bump to version 3.5
  package/semodule-utils: bump to version 3.5
  package/audit: bump to version 3.1
  package/selinux-python: bump to version 3.5
  package/setools: bump to version 4.4.2
  package/refpolicy: bump to version 2.20221101

 package/audit/audit.hash                      |  2 +-
 package/audit/audit.mk                        |  2 +-
 package/checkpolicy/checkpolicy.hash          |  4 +-
 package/checkpolicy/checkpolicy.mk            |  4 +-
 .../libglib2/0003-disable-building-docs.patch | 38 ++++++++++++++
 package/libselinux/0001-fix-musl-build.patch  |  4 +-
 ...T-and-rely-on-the-installed-file-nam.patch |  8 +--
 package/libselinux/Config.in                  |  1 +
 package/libselinux/libselinux.hash            |  2 +-
 package/libselinux/libselinux.mk              | 16 ++++--
 package/libsemanage/libsemanage.hash          |  4 +-
 package/libsemanage/libsemanage.mk            |  4 +-
 package/libsepol/libsepol.hash                |  4 +-
 package/libsepol/libsepol.mk                  |  4 +-
 ...-all-paths-that-use-an-absolute-path.patch |  2 +-
 package/policycoreutils/policycoreutils.hash  |  4 +-
 package/policycoreutils/policycoreutils.mk    |  4 +-
 package/python-pip/python-pip.mk              |  1 +
 ...ount-dbus-interface-must-be-optional.patch | 33 ++++++++++++
 package/refpolicy/refpolicy.hash              |  2 +-
 package/refpolicy/refpolicy.mk                |  2 +-
 package/restorecond/restorecond.hash          |  4 +-
 package/restorecond/restorecond.mk            |  4 +-
 .../0001-fix-ausearch-path.patch              | 37 ++++++++++++++
 package/selinux-python/selinux-python.hash    |  4 +-
 package/selinux-python/selinux-python.mk      |  4 +-
 package/semodule-utils/semodule-utils.hash    |  4 +-
 package/semodule-utils/semodule-utils.mk      |  4 +-
 ...e-setools.InfoFlowAnalysis-and-setoo.patch | 50 +++++++++----------
 package/setools/setools.hash                  |  4 +-
 package/setools/setools.mk                    |  2 +-
 31 files changed, 191 insertions(+), 71 deletions(-)
 create mode 100644 package/libglib2/0003-disable-building-docs.patch
 create mode 100644 package/refpolicy/2.20221101/0001-mount-dbus-interface-must-be-optional.patch
 create mode 100644 package/selinux-python/0001-fix-ausearch-path.patch

Comments

Yann E. MORIN May 9, 2023, 9 p.m. UTC | #1 
Adam, All,

On 2023-04-25 10:14 -0700, Adam Duskett spake thusly:
> It's been quite some time since anyone updated the SELinux packages (mainly me!)
[--SNIP--]
> Adam Duskett (13):
>   package/libglib2/0003-disable-building-docs.patch: new patch
>   package/python-pip: add host variant
>   package/libsepol: bump to version 3.5
>   package/libsemanage: bump to version 3.5
>   package/libselinux: bump to version 3.5
>   package/policycoreutils: bump to version 3.5
>   package/checkpolicy: bump to version 3.5
>   package/restorecond: bump to version 3.5
>   package/semodule-utils: bump to version 3.5
>   package/audit: bump to version 3.1
>   package/selinux-python: bump to version 3.5
>   package/setools: bump to version 4.4.2
>   package/refpolicy: bump to version 2.20221101

Entire series applied to master, thanls!

I had to do some fixups on some patches, I'll reply to them individually.

Regards,
Yann E. MORIN.