Update SELinux

packages/l/libselinux/abi_symbols

@@ -1,4 +1,6 @@
 libselinux.so.1:LIBSELINUX_1.0
+libselinux.so.1:LIBSELINUX_3.4
+libselinux.so.1:LIBSELINUX_3.5
 libselinux.so.1:avc_add_callback
 libselinux.so.1:avc_audit
 libselinux.so.1:avc_av_stats
@@ -64,6 +66,8 @@ libselinux.so.1:getpeercon
 libselinux.so.1:getpeercon_raw
 libselinux.so.1:getpidcon
 libselinux.so.1:getpidcon_raw
+libselinux.so.1:getpidprevcon
+libselinux.so.1:getpidprevcon_raw
 libselinux.so.1:getprevcon
 libselinux.so.1:getprevcon_raw
 libselinux.so.1:getseuser
@@ -188,6 +192,8 @@ libselinux.so.1:selinux_removable_context_path
 libselinux.so.1:selinux_reset_config
 libselinux.so.1:selinux_restorecon
 libselinux.so.1:selinux_restorecon_default_handle
+libselinux.so.1:selinux_restorecon_get_skipped_errors
+libselinux.so.1:selinux_restorecon_parallel
 libselinux.so.1:selinux_restorecon_set_alt_rootpath
 libselinux.so.1:selinux_restorecon_set_exclude_list
 libselinux.so.1:selinux_restorecon_set_sehandle
@@ -236,6 +242,7 @@ libselinux.so.1:sidget
 libselinux.so.1:sidput
 libselinux.so.1:string_to_av_perm
 libselinux.so.1:string_to_security_class
+sefcontext_compile:fini_selinuxmnt
 sefcontext_compile:matchpathcon
 sefcontext_compile:matchpathcon_checkmatches
 sefcontext_compile:matchpathcon_filespec_add
@@ -262,8 +269,11 @@ sefcontext_compile:selinux_file_context_cmp
 sefcontext_compile:selinux_file_context_verify
 sefcontext_compile:selinux_get_callback
 sefcontext_compile:selinux_lsetfilecon_default
+sefcontext_compile:selinux_mnt
 sefcontext_compile:selinux_set_callback
+sefcontext_compile:selinuxfs_exists
 sefcontext_compile:set_matchpathcon_canoncon
 sefcontext_compile:set_matchpathcon_flags
 sefcontext_compile:set_matchpathcon_invalidcon
 sefcontext_compile:set_matchpathcon_printf
+sefcontext_compile:set_selinuxmnt

packages/l/libselinux/abi_used_libs

@@ -1,4 +1,4 @@
 ld-linux-x86-64.so.2
 libc.so.6
-libpcre.so.1
+libpcre2-8.so.0
 libsepol.so.2

packages/l/libselinux/abi_used_symbols

@@ -50,6 +50,7 @@ libc.so.6:fopen
 libc.so.6:fputc
 libc.so.6:fread
 libc.so.6:free
+libc.so.6:fseek
 libc.so.6:fsetxattr
 libc.so.6:fstat
 libc.so.6:fts_close
@@ -88,17 +89,18 @@ libc.so.6:pclose
 libc.so.6:perror
 libc.so.6:poll
 libc.so.6:popen
+libc.so.6:pthread_self
 libc.so.6:putchar
 libc.so.6:puts
 libc.so.6:read
 libc.so.6:readdir
 libc.so.6:readv
 libc.so.6:realloc
+libc.so.6:reallocarray
 libc.so.6:realpath
 libc.so.6:recvfrom
 libc.so.6:removexattr
 libc.so.6:rename
-libc.so.6:rewind
 libc.so.6:scandir
 libc.so.6:sched_yield
 libc.so.6:sendmsg
@@ -121,6 +123,7 @@ libc.so.6:strcmp
 libc.so.6:strcpy
 libc.so.6:strdup
 libc.so.6:strerror
+libc.so.6:strlcpy
 libc.so.6:strlen
 libc.so.6:strncasecmp
 libc.so.6:strncmp
@@ -129,19 +132,25 @@ libc.so.6:strndup
 libc.so.6:strrchr
 libc.so.6:strstr
 libc.so.6:strtok
+libc.so.6:strtok_r
 libc.so.6:strverscmp
 libc.so.6:sysconf
 libc.so.6:umount
 libc.so.6:umount2
 libc.so.6:uname
 libc.so.6:unlink
 libc.so.6:write
-libpcre.so.1:pcre_compile
-libpcre.so.1:pcre_exec
-libpcre.so.1:pcre_free
-libpcre.so.1:pcre_free_study
-libpcre.so.1:pcre_fullinfo
-libpcre.so.1:pcre_study
-libpcre.so.1:pcre_version
+libpcre2-8.so.0:pcre2_code_free_8
+libpcre2-8.so.0:pcre2_compile_8
+libpcre2-8.so.0:pcre2_config_8
+libpcre2-8.so.0:pcre2_get_error_message_8
+libpcre2-8.so.0:pcre2_match_8
+libpcre2-8.so.0:pcre2_match_data_create_from_pattern_8
+libpcre2-8.so.0:pcre2_match_data_free_8
+libpcre2-8.so.0:pcre2_pattern_info_8
+libpcre2-8.so.0:pcre2_serialize_decode_8
+libpcre2-8.so.0:pcre2_serialize_encode_8
+libpcre2-8.so.0:pcre2_serialize_free_8
+libpcre2-8.so.0:pcre2_serialize_get_number_of_codes_8
 libsepol.so.2:sepol_check_context
 libsepol.so.2:sepol_set_policydb_from_file

packages/l/libselinux/package.yml

@@ -1,8 +1,8 @@
 name       : libselinux
-version    : '3.3'
-release    : 4
+version    : '3.7'
+release    : 5
 source     :
-    - https://github.com/SELinuxProject/selinux/archive/refs/tags/3.3.tar.gz : 1434900229858103bd50570083fa9a99a6a6a694d0100dff81d5a5914f6b8e6b
+    - https://github.com/SELinuxProject/selinux/releases/download/3.7/libselinux-3.7.tar.gz : ea03f42d13a4f95757997dba8cf0b26321fac5d2f164418b4cc856a92d2b17bd
 homepage   : https://github.com/SELinuxProject/selinux
 license    : Public-Domain
 component  :
@@ -19,9 +19,8 @@
         - /usr/share/man
     - devel : /usr/share/man/man3
 builddeps  :
-    - pkgconfig(libpcre)
     - pkgconfig(libsepol)
 build      : |
-    %make -C libselinux SHLIBDIR=%libdir% LIBDIR=%libdir%
+    %make SHLIBDIR=%libdir% LIBDIR=%libdir%
 install    : |
-    %make_install -C libselinux SHLIBDIR=%libdir% LIBDIR=%libdir%
+    %make_install SHLIBDIR=%libdir% LIBDIR=%libdir%

packages/l/libselinux/pspec_x86_64.xml

@@ -3,8 +3,8 @@
         <Name>libselinux</Name>
         <Homepage>https://github.com/SELinuxProject/selinux</Homepage>
         <Packager>
-            <Name>Evan Maddock</Name>
-            <Email>[email protected]</Email>
+            <Name>Jakob Gezelius</Name>
+            <Email>[email protected]</Email>
         </Packager>
         <License>Public-Domain</License>
         <PartOf>security.library</PartOf>
@@ -30,7 +30,7 @@
 </Description>
         <PartOf>programming.devel</PartOf>
         <RuntimeDependencies>
-            <Dependency release="4">libselinux</Dependency>
+            <Dependency release="5">libselinux</Dependency>
         </RuntimeDependencies>
         <Files>
             <Path fileType="header">/usr/include/selinux/avc.h</Path>
@@ -75,6 +75,7 @@
             <Path fileType="man">/usr/share/man/man3/context_range_set.3</Path>
             <Path fileType="man">/usr/share/man/man3/context_role_get.3</Path>
             <Path fileType="man">/usr/share/man/man3/context_role_set.3</Path>
+            <Path fileType="man">/usr/share/man/man3/context_str.3</Path>
             <Path fileType="man">/usr/share/man/man3/context_type_get.3</Path>
             <Path fileType="man">/usr/share/man/man3/context_type_set.3</Path>
             <Path fileType="man">/usr/share/man/man3/context_user_get.3</Path>
@@ -107,6 +108,8 @@
             <Path fileType="man">/usr/share/man/man3/getpeercon_raw.3</Path>
             <Path fileType="man">/usr/share/man/man3/getpidcon.3</Path>
             <Path fileType="man">/usr/share/man/man3/getpidcon_raw.3</Path>
+            <Path fileType="man">/usr/share/man/man3/getpidprevcon.3</Path>
+            <Path fileType="man">/usr/share/man/man3/getpidprevcon_raw.3</Path>
             <Path fileType="man">/usr/share/man/man3/getprevcon.3</Path>
             <Path fileType="man">/usr/share/man/man3/getprevcon_raw.3</Path>
             <Path fileType="man">/usr/share/man/man3/getseuserbyname.3</Path>
@@ -159,6 +162,7 @@
             <Path fileType="man">/usr/share/man/man3/security_get_boolean_active.3</Path>
             <Path fileType="man">/usr/share/man/man3/security_get_boolean_names.3</Path>
             <Path fileType="man">/usr/share/man/man3/security_get_boolean_pending.3</Path>
+            <Path fileType="man">/usr/share/man/man3/security_get_checkreqprot.3</Path>
             <Path fileType="man">/usr/share/man/man3/security_get_initial_context.3</Path>
             <Path fileType="man">/usr/share/man/man3/security_get_initial_context_raw.3</Path>
             <Path fileType="man">/usr/share/man/man3/security_getenforce.3</Path>
@@ -168,7 +172,10 @@
             <Path fileType="man">/usr/share/man/man3/security_policyvers.3</Path>
             <Path fileType="man">/usr/share/man/man3/security_reject_unknown.3</Path>
             <Path fileType="man">/usr/share/man/man3/security_set_boolean.3</Path>
+            <Path fileType="man">/usr/share/man/man3/security_set_boolean_list.3</Path>
             <Path fileType="man">/usr/share/man/man3/security_setenforce.3</Path>
+            <Path fileType="man">/usr/share/man/man3/security_validatetrans.3</Path>
+            <Path fileType="man">/usr/share/man/man3/security_validatetrans_raw.3</Path>
             <Path fileType="man">/usr/share/man/man3/selabel_close.3</Path>
             <Path fileType="man">/usr/share/man/man3/selabel_digest.3</Path>
             <Path fileType="man">/usr/share/man/man3/selabel_get_digests_all_partial_matches.3</Path>
@@ -209,11 +216,14 @@
             <Path fileType="man">/usr/share/man/man3/selinux_removable_context_path.3</Path>
             <Path fileType="man">/usr/share/man/man3/selinux_restorecon.3</Path>
             <Path fileType="man">/usr/share/man/man3/selinux_restorecon_default_handle.3</Path>
+            <Path fileType="man">/usr/share/man/man3/selinux_restorecon_get_skipped_errors.3</Path>
+            <Path fileType="man">/usr/share/man/man3/selinux_restorecon_parallel.3</Path>
             <Path fileType="man">/usr/share/man/man3/selinux_restorecon_set_alt_rootpath.3</Path>
             <Path fileType="man">/usr/share/man/man3/selinux_restorecon_set_exclude_list.3</Path>
             <Path fileType="man">/usr/share/man/man3/selinux_restorecon_set_sehandle.3</Path>
             <Path fileType="man">/usr/share/man/man3/selinux_restorecon_xattr.3</Path>
             <Path fileType="man">/usr/share/man/man3/selinux_securetty_types_path.3</Path>
+            <Path fileType="man">/usr/share/man/man3/selinux_sepgsql_context_path.3</Path>
             <Path fileType="man">/usr/share/man/man3/selinux_set_callback.3</Path>
             <Path fileType="man">/usr/share/man/man3/selinux_set_mapping.3</Path>
             <Path fileType="man">/usr/share/man/man3/selinux_set_policy_root.3</Path>
@@ -234,6 +244,7 @@
             <Path fileType="man">/usr/share/man/man3/setcon_raw.3</Path>
             <Path fileType="man">/usr/share/man/man3/setexeccon.3</Path>
             <Path fileType="man">/usr/share/man/man3/setexeccon_raw.3</Path>
+            <Path fileType="man">/usr/share/man/man3/setexecfilecon.3</Path>
             <Path fileType="man">/usr/share/man/man3/setfilecon.3</Path>
             <Path fileType="man">/usr/share/man/man3/setfilecon_raw.3</Path>
             <Path fileType="man">/usr/share/man/man3/setfscreatecon.3</Path>
@@ -255,7 +266,7 @@
 </Description>
         <PartOf>security.library</PartOf>
         <RuntimeDependencies>
-            <Dependency release="4">libselinux</Dependency>
+            <Dependency release="5">libselinux</Dependency>
         </RuntimeDependencies>
         <Files>
             <Path fileType="executable">/usr/sbin/avcstat</Path>
@@ -268,6 +279,8 @@
             <Path fileType="executable">/usr/sbin/getenforce</Path>
             <Path fileType="executable">/usr/sbin/getfilecon</Path>
             <Path fileType="executable">/usr/sbin/getpidcon</Path>
+            <Path fileType="executable">/usr/sbin/getpidprevcon</Path>
+            <Path fileType="executable">/usr/sbin/getpolicyload</Path>
             <Path fileType="executable">/usr/sbin/getsebool</Path>
             <Path fileType="executable">/usr/sbin/getseuser</Path>
             <Path fileType="executable">/usr/sbin/matchpathcon</Path>
@@ -321,50 +334,15 @@
             <Path fileType="man">/usr/share/man/man8/selinuxexeccon.8</Path>
             <Path fileType="man">/usr/share/man/man8/setenforce.8</Path>
             <Path fileType="man">/usr/share/man/man8/togglesebool.8</Path>
-            <Path fileType="man">/usr/share/man/ru/man5/customizable_types.5</Path>
-            <Path fileType="man">/usr/share/man/ru/man5/default_contexts.5</Path>
-            <Path fileType="man">/usr/share/man/ru/man5/default_type.5</Path>
-            <Path fileType="man">/usr/share/man/ru/man5/failsafe_context.5</Path>
-            <Path fileType="man">/usr/share/man/ru/man5/file_contexts.5</Path>
-            <Path fileType="man">/usr/share/man/ru/man5/file_contexts.homedirs.5</Path>
-            <Path fileType="man">/usr/share/man/ru/man5/file_contexts.local.5</Path>
-            <Path fileType="man">/usr/share/man/ru/man5/file_contexts.subs.5</Path>
-            <Path fileType="man">/usr/share/man/ru/man5/file_contexts.subs_dist.5</Path>
-            <Path fileType="man">/usr/share/man/ru/man5/media.5</Path>
-            <Path fileType="man">/usr/share/man/ru/man5/removable_context.5</Path>
-            <Path fileType="man">/usr/share/man/ru/man5/secolor.conf.5</Path>
-            <Path fileType="man">/usr/share/man/ru/man5/securetty_types.5</Path>
-            <Path fileType="man">/usr/share/man/ru/man5/selabel_db.5</Path>
-            <Path fileType="man">/usr/share/man/ru/man5/selabel_file.5</Path>
-            <Path fileType="man">/usr/share/man/ru/man5/selabel_media.5</Path>
-            <Path fileType="man">/usr/share/man/ru/man5/selabel_x.5</Path>
-            <Path fileType="man">/usr/share/man/ru/man5/sepgsql_contexts.5</Path>
-            <Path fileType="man">/usr/share/man/ru/man5/service_seusers.5</Path>
-            <Path fileType="man">/usr/share/man/ru/man5/seusers.5</Path>
-            <Path fileType="man">/usr/share/man/ru/man5/user_contexts.5</Path>
-            <Path fileType="man">/usr/share/man/ru/man5/virtual_domain_context.5</Path>
-            <Path fileType="man">/usr/share/man/ru/man5/virtual_image_context.5</Path>
-            <Path fileType="man">/usr/share/man/ru/man5/x_contexts.5</Path>
-            <Path fileType="man">/usr/share/man/ru/man8/avcstat.8</Path>
-            <Path fileType="man">/usr/share/man/ru/man8/booleans.8</Path>
-            <Path fileType="man">/usr/share/man/ru/man8/getenforce.8</Path>
-            <Path fileType="man">/usr/share/man/ru/man8/getsebool.8</Path>
-            <Path fileType="man">/usr/share/man/ru/man8/matchpathcon.8</Path>
-            <Path fileType="man">/usr/share/man/ru/man8/sefcontext_compile.8</Path>
-            <Path fileType="man">/usr/share/man/ru/man8/selinux.8</Path>
-            <Path fileType="man">/usr/share/man/ru/man8/selinuxenabled.8</Path>
-            <Path fileType="man">/usr/share/man/ru/man8/selinuxexeccon.8</Path>
-            <Path fileType="man">/usr/share/man/ru/man8/setenforce.8</Path>
-            <Path fileType="man">/usr/share/man/ru/man8/togglesebool.8</Path>
         </Files>
     </Package>
     <History>
-        <Update release="4">
-            <Date>2024-08-12</Date>
-            <Version>3.3</Version>
+        <Update release="5">
+            <Date>2024-09-21</Date>
+            <Version>3.7</Version>
             <Comment>Packaging update</Comment>
-            <Name>Evan Maddock</Name>
-            <Email>[email protected]</Email>
+            <Name>Jakob Gezelius</Name>
+            <Email>[email protected]</Email>
         </Update>
     </History>
 </PISI>

packages/l/libsepol/abi_symbols

@@ -1,6 +1,8 @@
 libsepol.so.2:LIBSEPOL_1.0
 libsepol.so.2:LIBSEPOL_1.1
 libsepol.so.2:LIBSEPOL_3.0
+libsepol.so.2:LIBSEPOL_3.4
+libsepol.so.2:LIBSEPOL_3.6
 libsepol.so.2:cil_add_file
 libsepol.so.2:cil_build_policydb
 libsepol.so.2:cil_compile
@@ -25,8 +27,10 @@ libsepol.so.2:cil_userprefixes_to_string
 libsepol.so.2:cil_write_build_ast
 libsepol.so.2:cil_write_parse_ast
 libsepol.so.2:cil_write_policy_conf
+libsepol.so.2:cil_write_post_ast
 libsepol.so.2:cil_write_resolve_ast
 libsepol.so.2:expand_module_avrules
+libsepol.so.2:sepol_av_perm_to_string
 libsepol.so.2:sepol_bool_clone
 libsepol.so.2:sepol_bool_compare
 libsepol.so.2:sepol_bool_compare2
@@ -45,7 +49,11 @@ libsepol.so.2:sepol_bool_query
 libsepol.so.2:sepol_bool_set
 libsepol.so.2:sepol_bool_set_name
 libsepol.so.2:sepol_bool_set_value
+libsepol.so.2:sepol_change_sid
 libsepol.so.2:sepol_check_context
+libsepol.so.2:sepol_compute_av
+libsepol.so.2:sepol_compute_av_reason
+libsepol.so.2:sepol_compute_av_reason_buffer
 libsepol.so.2:sepol_context_check
 libsepol.so.2:sepol_context_clone
 libsepol.so.2:sepol_context_create
@@ -59,6 +67,7 @@ libsepol.so.2:sepol_context_set_mls
 libsepol.so.2:sepol_context_set_role
 libsepol.so.2:sepol_context_set_type
 libsepol.so.2:sepol_context_set_user
+libsepol.so.2:sepol_context_to_sid
 libsepol.so.2:sepol_context_to_string
 libsepol.so.2:sepol_debug
 libsepol.so.2:sepol_expand_module
@@ -135,6 +144,7 @@ libsepol.so.2:sepol_kernel_policydb_to_cil
 libsepol.so.2:sepol_kernel_policydb_to_conf
 libsepol.so.2:sepol_link_modules
 libsepol.so.2:sepol_link_packages
+libsepol.so.2:sepol_member_sid
 libsepol.so.2:sepol_mls_check
 libsepol.so.2:sepol_mls_contains
 libsepol.so.2:sepol_module_package_create
@@ -239,6 +249,9 @@ libsepol.so.2:sepol_set_disable_dontaudit
 libsepol.so.2:sepol_set_expand_consume_base
 libsepol.so.2:sepol_set_policydb_from_file
 libsepol.so.2:sepol_set_preserve_tunables
+libsepol.so.2:sepol_sid_to_context
+libsepol.so.2:sepol_string_to_av_perm
+libsepol.so.2:sepol_string_to_security_class
 libsepol.so.2:sepol_user_add_role
 libsepol.so.2:sepol_user_clone
 libsepol.so.2:sepol_user_compare
@@ -265,3 +278,4 @@ libsepol.so.2:sepol_user_set_mlslevel
 libsepol.so.2:sepol_user_set_mlsrange
 libsepol.so.2:sepol_user_set_name
 libsepol.so.2:sepol_user_set_roles
+libsepol.so.2:sepol_validate_transition_reason_buffer

packages/l/libsepol/abi_used_symbols

@@ -42,9 +42,11 @@ libc.so.6:memcpy
 libc.so.6:memset
 libc.so.6:pthread_mutex_lock
 libc.so.6:pthread_mutex_unlock
+libc.so.6:putchar
 libc.so.6:puts
 libc.so.6:qsort
 libc.so.6:realloc
+libc.so.6:reallocarray
 libc.so.6:snprintf
 libc.so.6:sprintf
 libc.so.6:stderr

packages/l/libsepol/package.yml

@@ -1,17 +1,17 @@
 name       : libsepol
-version    : '3.3'
-release    : 2
+version    : '3.7'
+release    : 3
 source     :
-    - https://github.com/SELinuxProject/selinux/releases/download/3.3/libsepol-3.3.tar.gz : 2d97df3eb8466169b389c3660acbb90c54200ac96e452eca9f41a9639f4f238b
-homepage   : https://github.com/SELinuxProject/selinux
-license    : LGPL-2.1-or-later
+    - https://github.com/SELinuxProject/selinux/releases/download/3.7/libsepol-3.7.tar.gz : cd741e25244e7ef6cd934d633614131a266c3eaeab33d8bfa45e8a93b45cc901
+homepage   : https://selinuxproject.org/
+license    : LGPL-2.1
 component  : security.library
 summary    : SELinux Policy Library
+patterns   :
+    - devel : /usr/bin
 description: |
     libsepol from SELinux project
 build      : |
     %make SHLIBDIR=%libdir% LIBDIR=%libdir%
 install    : |
     %make_install SHLIBDIR=%libdir% LIBDIR=%libdir%
-patterns   :
-    - devel : /usr/bin