From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Tue, 20 Oct 2026 13:49:34 +0200 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1xJ8LW-0010wy-0j for lore@lore.pengutronix.de; Tue, 20 Oct 2026 13:49:34 +0200 Received: from [127.0.0.1] (helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1xJ8LV-0000rJ-0S; Tue, 20 Oct 2026 13:49:33 +0200 Received: from mx1.white.stw.pengutronix.de ([185.203.200.13]) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1xJ8LC-0000RP-2v for ptxdist@pengutronix.de; Tue, 20 Oct 2026 13:49:14 +0200 Received: from h4.cmg2.smtp.forpsi.com (h4.cmg2.smtp.forpsi.com [185.129.138.189]) by mx1.white.stw.pengutronix.de (Postfix) with ESMTPS id 76CB3201EA4 for ; Tue, 20 Oct 2026 13:49:13 +0200 (CEST) ARC-Seal: i=1; s=20260414; d=pengutronix.de; t=1792496953; a=rsa-sha256; cv=none; b=dy8ywjuVr9On8JnW7MQmJ9YY08gfmt0AZ/kq2rlt1C4uF0EG/MVPiAchRcYaDBYXYvUJnr U+zmJ0B4vD7CSdhpRktwsA6/5MwAPyERzAfU+T3yBkhIoqb2PrTu6ZS9pY+O/uTL0tCmk0 4aZ2AWyksbgnjzYoqysvDhwFzdIjZUbdf+RgD8FG53ZOTCG4zhZdta7ejDELSRiZCtx/yT WfnIaR1+Q2yjJ1te7yDsdl5QCEgIHm6ZZuaD4BvXM1JzNjCjWMGcx3iA+QSeErh4MEiwgu dmP4/hFZVEVJcuJYJlb0J1sZ2cjvyMp4v5WY9q1TiQnT33vU5IMNVXGndxwgNA== ARC-Authentication-Results: i=1; mx1.white.stw.pengutronix.de; dkim=pass header.d=triops.cz header.s=f2019 header.b=l7euA6En; spf=none (mx1.white.stw.pengutronix.de: domain of oss-lists@triops.cz has no SPF policy when checking 185.129.138.189) smtp.mailfrom=oss-lists@triops.cz; dmarc=none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=pengutronix.de; s=20260414; t=1792496953; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding:dkim-signature; bh=4fQv6vAr4ofpcpED+GFehlJ9Afe0zNNpsmC6n9xTxWA=; b=SziM/1i5F0v4TyKlHgxooX2KamIVgQ2aVZKJ+CsUi08DMVfCtLKJcX+R1vbOT3MxVFvAEI p+gMgbN4JZZvToBAGf60TwLiAWz5dCL0AtqSmCD5d07iDtOP3R6+sbjTFTto8ZgZTXXxVC RHeKl7uNhHwljbvQpM6TkZ472naIJenVFtsLXxsciJeEq/QgNziSMGATRpOz6zUzSw6mE9 DUkLlgLxXDHv+OkEYlW4DkRaAXgU0VUm+ThXHbbEBpKgelRV4qgbvFiLHszBxgdzM16xxg JwYjXPbNkmJl0LhJo9tF4PKvXC84YkYMmNW/4sSI9rTWqaYfs02svFriKwJX1A== Received: from localhost.localdomain ([91.218.190.200]) by cmgsmtp with ESMTPSA id J8LAx5Bd8NbEUJ8LAxFQ9O; Tue, 20 Oct 2026 13:49:12 +0200 From: Ladislav Michl To: ptxdist@pengutronix.de Date: Tue, 20 Oct 2026 13:48:53 +0200 Message-ID: X-Mailer: git-send-email 2.47.3 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-CMAE-Envelope: MS4xfCkCpYbGJf2VUgeBS6hrk/FxaY2NoNd7d9ueLkmymtyO9R1ygMfoiIUA1Ioho1mMGouR7GTeKPnFtof773rkXXd7PdMkZ+VHt6P/hRvxaIXje5AlAo1N bpU0GEcuyYyV0qd0cSRswRsc1fVFzAFjws+rMJCsreV+ClfbNxLWWVl4ckYZCr9jzIU5YWLYLDFir7IRJ0rauzo6QgPlTDbEY4g= X-Rspamd-Server: mx1 X-Rspamd-Queue-Id: 76CB3201EA4 X-Spamd-Result: default: False [-2.60 / 15.00]; BAYES_HAM(-3.00)[100.00%]; R_MISSING_CHARSET(0.50)[]; ONCE_RECEIVED(0.20)[]; R_DKIM_ALLOW(-0.20)[triops.cz:s=f2019]; MIME_GOOD(-0.10)[text/plain]; TO_MATCH_ENVRCPT_ALL(0.00)[]; DMARC_NA(0.00)[triops.cz]; RCPT_COUNT_ONE(0.00)[1]; RCVD_TLS_ALL(0.00)[]; MIME_TRACE(0.00)[0:+]; ARC_NA(0.00)[]; DKIM_TRACE(0.00)[triops.cz:+]; RCVD_COUNT_ONE(0.00)[1]; ASN(0.00)[asn:24806, ipnet:185.129.136.0/22, country:CZ]; FROM_EQ_ENVFROM(0.00)[]; FROM_HAS_DN(0.00)[]; ARC_SIGNED(0.00)[pengutronix.de:s=20260414:i=1]; TO_DN_NONE(0.00)[]; MID_RHS_MATCH_FROM(0.00)[]; NEURAL_HAM(-0.00)[-0.995]; RCVD_VIA_SMTP_AUTH(0.00)[]; R_SPF_NA(0.00)[no SPF record] X-Rspamd-Action: no action X-Stat-Signature: 6k1m4td5zp834auhkf9t7ryrd17wu9c7 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on metis.whiteo.stw.pengutronix.de X-Spam-Level: X-Spam-Status: No, score=-2.3 required=5.0 tests=AWL,BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,SPF_HELO_PASS autolearn=ham autolearn_force=no version=3.4.2 Subject: [ptxdist] [PATCH v1 00/17] selinux: back at version 3.11 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false From: Ladislav Michl This serie was originally written for selinux-3.0 in 2019 when all the patches were just version bumps with fixes. Now, once PTXdist dropped most of them after quite some time in staging, every package is first restored by a partial revert of its removal commit, followed by a version bump that does the actual changes. Only the still needed files are restored by each revert. This will hopefully make the serie easier to review and keep a history in tree. Tested on an ARMv7 target with glibc and python 3.13. Comments and suggestions welcome. Ladislav Michl (17): selinux: add common version and URL Revert "python: remove after more than one year in staging" host-swig: version bump 4.0.1 -> 4.5.1 Revert "*libsepol: remove" libsepol: version bump 2.1.8 -> 3.11 Revert "libselinux: remove after more than one year in staging" libselinux: version bump 2.1.12 -> 3.11 audit: new package Revert "libsemanage: remove after more than one year in staging" libsemanage: version bump 2.1.9 -> 3.11 Revert "checkpolicy: remove after more than one year in staging" checkpolicy: version bump 2.1.11 -> 3.11 Revert "policycoreutils: remove after more than one year in staging" policycoreutils: version bump 2.1.13 -> 3.11 Revert "sepolgen: remove after one year in staging" sepolgen: version bump 1.1.8 -> 3.11 selinux: restore the global option patches/audit-userspace-4.2.1/autogen.sh | 1 + ...PyString_FromString-with-PyUnicode_F.patch | 48 ++++++ patches/libselinux-3.11/series | 4 + rules/at.in | 1 + rules/audit.in | 19 +++ rules/audit.make | 102 +++++++++++++ rules/busybox.in | 1 + rules/casync.in | 1 + rules/checkpolicy.in | 25 ++++ rules/checkpolicy.make | 59 ++++++++ rules/connman.in | 1 + rules/core-selinux.in | 1 - rules/coreutils.in | 1 + rules/f2fs-tools.in | 1 + rules/gnupg.in | 1 + rules/host-libsepol.in | 6 + rules/host-libsepol.make | 27 ++++ rules/host-swig.in | 6 + rules/host-swig.make | 48 ++++++ rules/libselinux.in | 65 +++++++++ rules/libselinux.make | 126 ++++++++++++++++ rules/libsemanage.in | 24 +++ rules/libsemanage.make | 91 ++++++++++++ rules/libsepol.in | 11 ++ rules/libsepol.make | 60 ++++++++ rules/logrotate.in | 1 + rules/lxc.in | 1 + rules/mtd-utils.in | 1 + rules/openssh.in | 1 + rules/policycoreutils.in | 84 +++++++++++ rules/policycoreutils.make | 138 ++++++++++++++++++ rules/pre/Rules.make | 6 - rules/pre/selinux.make | 10 ++ rules/selinux-python.in | 12 ++ rules/selinux-python.make | 68 +++++++++ rules/shadow.in | 1 + rules/strongswan.in | 1 + rules/systemd.in | 1 + 38 files changed, 1048 insertions(+), 7 deletions(-) create mode 120000 patches/audit-userspace-4.2.1/autogen.sh create mode 100644 patches/libselinux-3.11/0001-libselinux-Replace-PyString_FromString-with-PyUnicode_F.patch create mode 100644 patches/libselinux-3.11/series create mode 100644 rules/audit.in create mode 100644 rules/audit.make create mode 100644 rules/checkpolicy.in create mode 100644 rules/checkpolicy.make create mode 100644 rules/host-libsepol.in create mode 100644 rules/host-libsepol.make create mode 100644 rules/host-swig.in create mode 100644 rules/host-swig.make create mode 100644 rules/libselinux.in create mode 100644 rules/libselinux.make create mode 100644 rules/libsemanage.in create mode 100644 rules/libsemanage.make create mode 100644 rules/libsepol.in create mode 100644 rules/libsepol.make create mode 100644 rules/policycoreutils.in create mode 100644 rules/policycoreutils.make create mode 100644 rules/pre/selinux.make create mode 100644 rules/selinux-python.in create mode 100644 rules/selinux-python.make base-commit: 25578c25031573977db826d12d05156574cc2898 -- 2.47.3