From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Sat, 31 Oct 2026 21:39:05 +0100 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1xNFqz-005gRt-0p for lore@lore.pengutronix.de; Sat, 31 Oct 2026 21:39:05 +0100 Received: from [127.0.0.1] (helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1xNFqx-0003dn-KK; Sat, 31 Oct 2026 21:39:03 +0100 Received: from mx1.white.stw.pengutronix.de ([185.203.200.13]) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1xNFqM-0001wa-L6 for ptxdist@pengutronix.de; Sat, 31 Oct 2026 21:38:28 +0100 Received: from h4.cmg2.smtp.forpsi.com (h4.cmg2.smtp.forpsi.com [185.129.138.189]) by mx1.white.stw.pengutronix.de (Postfix) with ESMTPS id 07B7D202298 for ; Sat, 31 Oct 2026 21:38:25 +0100 (CET) ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=pengutronix.de; s=20260414; t=1793479106; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding:dkim-signature; bh=n04VduYAYRQKQFzR9qEtI+opru61ewejo6OPuNQYWfA=; b=gL4len2s7K0jGgHCf7sxX3iPP6SM/3CSiX1RUI78FJ1pSL+ICsnBA/a8w7BPte9joT5Hxq NXdvcXJC8Gn0srSZ3W3CjQ4f7LIMpSrUoUKA+GLm+lOQHQ4hxMLsJ2d/SAsKE6lwHdnd7X 8zVrxLst0w9QpzP/F8AugRF7EEhFHAaUKWU5lj+27Px7d0RCg4kSgTTrA+SVC9lNALOfET upHJxGQYhmZxFs+FfmenIgahZ/0dtDAJSpSxRkq3N4UJoFMfvzeR5QBQ1G8VQy3exu39X1 fwGXRPz2F3FEOopK5jfdrFY2Ska1Lu+EJh09+DAMHfUnIEEi5Ev2CP9Bv2yuCg== ARC-Authentication-Results: i=1; mx1.white.stw.pengutronix.de; dkim=pass header.d=triops.cz header.s=f2019 header.b=VarbZxz0; spf=none (mx1.white.stw.pengutronix.de: domain of oss-lists@triops.cz has no SPF policy when checking 185.129.138.189) smtp.mailfrom=oss-lists@triops.cz; dmarc=none ARC-Seal: i=1; s=20260414; d=pengutronix.de; t=1793479106; a=rsa-sha256; cv=none; b=C3hHLIogXABSxj/ik+yI4bRNvHp+3+qpSwy4PvxCoy7h5WNY57Xr4n8ivVIClScG1gkxV/ 0oFpJbKKkTcF0ahREtHPdpSkFxJ7WWC0O1r9cu3ATZ/MZ4AjR+0YBSDaupiyZ24s7Od31N DIf5Mipn7lpGbwa3/J/0cJaahqPkOGnEsssY6IeZJjSfnqlwliSu7zgVxVlFbsINCRLoQV StGn+pifH4nYSEZI3Vo9Si1qK1T70WbniNzEMHitm0vPifY8iS6aowpHH5VGnyLpocdhRo kw31iETUcXgmnUAmfB+PiI9IOOgCb8Y8WZLb0GapOWy9p7EWhAqHzpNgiKcQsA== Received: from localhost.localdomain ([91.218.190.200]) by cmgsmtp with ESMTPSA id NFqKxUpN38HlqNFqLxK73I; Sat, 31 Oct 2026 21:38:25 +0100 From: Ladislav Michl To: ptxdist@pengutronix.de Date: Sat, 31 Oct 2026 21:38:01 +0100 Message-ID: <20261031203823.357406-1-oss-lists@triops.cz> X-Mailer: git-send-email 2.47.3 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-CMAE-Envelope: MS4xfCd1Lf8A8d48XtKd0+TmBIbMzU5JMgUP/da66CSGM/zo0RpKJ7y8kWnpubc4GXNWGhgmMqIoMtLu9jb5omGw+CkJhG4nCwLK9yhEsun6f/88MI7BNx90 Dt9V/eY6B3CQ8Yllux0Jwn7pZ0NkPmb43hjiHhvMTcBDwXeUsl0rDEV9ZkK2iMPI2jvpaqBR6wD3OzujBYIg5JRxwMbuhAgJP/k= X-Spamd-Result: default: False [-1.60 / 15.00]; BAYES_HAM(-3.00)[100.00%]; MID_CONTAINS_FROM(1.00)[]; R_MISSING_CHARSET(0.50)[]; ONCE_RECEIVED(0.20)[]; R_DKIM_ALLOW(-0.20)[triops.cz:s=f2019]; MIME_GOOD(-0.10)[text/plain]; RCVD_COUNT_ONE(0.00)[1]; ASN(0.00)[asn:24806, ipnet:185.129.136.0/22, country:CZ]; RCPT_COUNT_ONE(0.00)[1]; TO_DN_NONE(0.00)[]; ARC_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; ARC_SIGNED(0.00)[pengutronix.de:s=20260414:i=1]; R_SPF_NA(0.00)[no SPF record]; RCVD_VIA_SMTP_AUTH(0.00)[]; DMARC_NA(0.00)[triops.cz]; TO_MATCH_ENVRCPT_ALL(0.00)[]; FROM_HAS_DN(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; NEURAL_SPAM(0.00)[0.518]; DKIM_TRACE(0.00)[triops.cz:+]; RCVD_TLS_ALL(0.00)[] X-Rspamd-Action: no action X-Rspamd-Server: mx1 X-Stat-Signature: zx7guebgpg5aydtzb8o8ewkz7e131m6y X-Rspamd-Queue-Id: 07B7D202298 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on metis.whiteo.stw.pengutronix.de X-Spam-Level: X-Spam-Status: No, score=-2.3 required=5.0 tests=AWL,BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,SPF_HELO_PASS autolearn=ham autolearn_force=no version=3.4.2 Subject: [ptxdist] [PATCH v2 00/17] selinux: back at version 3.11 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false From: Ladislav Michl This serie was originally written for selinux-3.0 in 2019 when all the patches were just version bumps with fixes. Now, once PTXdist dropped most of them after quite some time in staging, every package is first restored by a partial revert of its removal commit, followed by a version bump that does the actual changes. Only the still needed files are restored by each revert. This will hopefully make the serie easier to review and keep a history in tree. Tested on an ARMv7 target with glibc and python 3.13. This is a second attempt, see changelog appended to patches. Link to v1: https://lore.ptxdist.org/ptxdist/cover.1792491301.git.ladis@triops.cz/ Ladislav Michl (17): selinux: add common version and URL Revert "python: remove after more than one year in staging" host-swig: version bump 4.0.1 -> 4.5.1 Revert "*libsepol: remove" libsepol: version bump 2.1.8 -> 3.11 Revert "libselinux: remove after more than one year in staging" libselinux: version bump 2.1.12 -> 3.11 audit: new package Revert "libsemanage: remove after more than one year in staging" libsemanage: version bump 2.1.9 -> 3.11 Revert "checkpolicy: remove after more than one year in staging" checkpolicy: version bump 2.1.11 -> 3.11 Revert "policycoreutils: remove after more than one year in staging" policycoreutils: version bump 2.1.13 -> 3.11 Revert "sepolgen: remove after one year in staging" sepolgen: version bump 1.1.8 -> 3.11 selinux: restore the global option patches/audit-userspace-4.2.1/autogen.sh | 1 + ...PyString_FromString-with-PyUnicode_F.patch | 48 ++++++ patches/libselinux-3.11/series | 4 + rules/at.in | 1 + rules/audit.in | 19 +++ rules/audit.make | 102 +++++++++++++ rules/busybox.in | 1 + rules/casync.in | 1 + rules/checkpolicy.in | 25 ++++ rules/checkpolicy.make | 59 ++++++++ rules/connman.in | 1 + rules/core-selinux.in | 1 - rules/coreutils.in | 1 + rules/dbus.in | 6 +- rules/dbus.make | 2 +- rules/f2fs-tools.in | 1 + rules/gnupg.in | 1 + rules/host-swig.in | 6 + rules/host-swig.make | 48 ++++++ rules/iproute2.in | 1 + rules/iproute2.make | 3 + rules/libselinux.in | 66 +++++++++ rules/libselinux.make | 126 ++++++++++++++++ rules/libsemanage.in | 24 +++ rules/libsemanage.make | 91 ++++++++++++ rules/libsepol.in | 11 ++ rules/libsepol.make | 60 ++++++++ rules/logrotate.in | 1 + rules/lxc.in | 1 + rules/mtd-utils.in | 1 + rules/openssh.in | 1 + rules/policycoreutils.in | 90 ++++++++++++ rules/policycoreutils.make | 138 ++++++++++++++++++ rules/pre/Rules.make | 6 - rules/pre/selinux.make | 10 ++ rules/selinux-python.in | 12 ++ rules/selinux-python.make | 68 +++++++++ rules/shadow.in | 1 + rules/strongswan.in | 1 + rules/systemd.in | 1 + 40 files changed, 1028 insertions(+), 13 deletions(-) create mode 120000 patches/audit-userspace-4.2.1/autogen.sh create mode 100644 patches/libselinux-3.11/0001-libselinux-Replace-PyString_FromString-with-PyUnicode_F.patch create mode 100644 patches/libselinux-3.11/series create mode 100644 rules/audit.in create mode 100644 rules/audit.make create mode 100644 rules/checkpolicy.in create mode 100644 rules/checkpolicy.make create mode 100644 rules/host-swig.in create mode 100644 rules/host-swig.make create mode 100644 rules/libselinux.in create mode 100644 rules/libselinux.make create mode 100644 rules/libsemanage.in create mode 100644 rules/libsemanage.make create mode 100644 rules/libsepol.in create mode 100644 rules/libsepol.make create mode 100644 rules/policycoreutils.in create mode 100644 rules/policycoreutils.make create mode 100644 rules/pre/selinux.make create mode 100644 rules/selinux-python.in create mode 100644 rules/selinux-python.make -- 2.47.3