linux/meta-selinux.git, branch whinlatter

refpolicy: locallogin - allow local_login_t lastlog_t create,delete

2026-03-25T13:05:24+00:00

Signed-off-by: Clayton Casciato Signed-off-by: Yi Zhao

refpolicy: add auth_create_lastlog, auth_delete_lastlog

2026-03-20T15:26:10+00:00

Signed-off-by: Clayton Casciato Signed-off-by: Yi Zhao

refpolicy: authlogin - label /var/lib/lastlog (lastlog2)

2026-03-18T15:19:40+00:00

Signed-off-by: Clayton Casciato Signed-off-by: Yi Zhao

refpolicy: logging - allow miscfiles_read_generic_certs(syslogd_t)

2026-03-17T02:06:18+00:00

Signed-off-by: Clayton Casciato Signed-off-by: Yi Zhao

refpolicy: logging - allow syslogd_t syslog_tls_port_t name_connect

2026-02-28T01:38:35+00:00

Signed-off-by: Clayton Casciato Signed-off-by: Yi Zhao

selinux-image: Preserve SELinux contexts in tarballs

2025-11-28T03:47:08+00:00

Tarball images were created without SELinux context information, causing loss of security labels during extraction while working with features like:ostree. This breaks SELinux policy enforcement and requires relabeling after deployment, adding runtime overhead. Append "--selinux" to IMAGE_CMD_TAR to include SELinux file contexts when generating tarball images. This ensures security labels are preserved across image creation and deployment. Signed-off-by: Sasi Kumar Maddineni Signed-off-by: Yi Zhao

libselinux-python: support reproducible builds

2025-11-21T03:21:20+00:00

Originally, direct_url.json contains build path and it was removed to fix buildpaths issue, but the hash of direct_url.json in RECORD was not updated. In order to support reproducible builds [1], this commit manually updates hash of direct_url.json in RECORD after build path was removed [1] https://reproducible-builds.org/ Signed-off-by: Hongxu Jia Signed-off-by: Yi Zhao

policycoreutils: remove reference to obsolete code

2025-11-19T07:13:24+00:00

The code referenced no longer exists [1]. It was refactored later to change the way modules are loaded [2]. Remove reference to the code, comment and creation of directory as it can be set to something else as well. [1] https://github.com/SELinuxProject/selinux/commit/565ea9832e841075e362db4d188cc7ebb0d4c35e [2] https://github.com/SELinuxProject/selinux/commit/2ff279e21e4715ac49e094b5fae8bc8e84b9e417 Signed-off-by: Anuj Mittal Signed-off-by: Yi Zhao

selinux-python: make semanage RDEPENDS on sepolgen

2025-11-19T07:12:44+00:00

Make the dependency explicit, otherwise when it leads to errors when it is not included. | ~ # semanage permissive | Traceback (most recent call last): | File "/sbin/semanage", line 29, in | import seobject | File "/usr/lib/python3.13/site-packages/seobject.py", line 33, in | import sepolicy | File "/usr/lib/python3.13/site-packages/sepolicy/__init__.py", line 8, in | import sepolgen.defaults as defaults | ModuleNotFoundError: No module named 'sepolgen' Signed-off-by: Anuj Mittal Signed-off-by: Yi Zhao

refpolicy: update to latest git rev

2025-11-06T02:24:56+00:00

* 739ee699b portage: grant compile domains getattr on chr_files in /dev * 7de9ae015 ssh: set file context for default locations of split binaries * 4af789c43 check_fc_files.py: Add a version suffix match * e93b0cf5e devices: Add iio write and rw interfaces Signed-off-by: Yi Zhao