[DSE-Dev] Bug#689264: unblock: refpolicy/2:2.20110726-11

[Mika Pflüger]

Package: release.debian.org
Severity: normal
User: release.debian.org at packages.debian.org
Usertags: unblock

Dear Release Team,

Please unblock package refpolicy version 2:2.20110726-11, changes since
version -9 (which is in testing atm) are:

* Fix #683756 (selinux in permissive mode breaks gdm and X)
 The problem arouse due to debian specific gdm3 locations.  In version
 2:2.20110726-10 a patch to fix this was introduced, but it was
 incomplete (fixed only some contexts, not all) and therefore in
 version -11 it was replaced by a correct patch, which is also already
 accepted upstream. The bug is only severity: normal in the BTS, but as
 installing and enabling selinux in permissive mode completely breaks
 the ability to log in via gdm I'd consider it important, at least.
 Regressions are very unlikely as this patch only touches file context
 definitions, no code.

* Update the Vcs-* fields
 The Vcs-* fields in d/control were pointing to an old location,  which
 doesn't work anymore.

* Fix #686670 (Cannot load alsa.pp module)
 debian/patches/0048-Alsa-debian-locations.patch had been merged
 upstream but weren't dropped, leading to duplication and breaking the
 alsa module loading. Dropping the patch fixes this.

* Drop debian/patches/0079-Allow-iptables_t-to-do-module_request.patch
 As in the previous fix, the code present in this one-line patch had
 already been introduced upstream. Dropping the patch removes
 duplicates and thereby avoids problems.

* Fix watch file uversionmangle in debian/watch.


Diffstat of the sources (patches applied) ignoring d/changelog:
 debian/control                        |    4 ++--
 debian/patches/series                 |    3 +--
 debian/watch                          |    5 +----
 policy/modules/admin/alsa.fc          |   14 ++++----------
 policy/modules/kernel/corecommands.fc |    1 +
 policy/modules/services/xserver.fc    |   20 +++++++++++---------
 policy/modules/system/iptables.te     |    1 -
 7 files changed, 20 insertions(+), 28 deletions(-)


The debdiff is attached.

unblock refpolicy/2.20110726-11

Thanks for your work + cheers,

Mika

-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: refpolicy_2.20110726-9,11.debdiff
URL: <http://lists.alioth.debian.org/pipermail/selinux-devel/attachments/20121001/35aad90d/attachment-0001.ksh>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/selinux-devel/attachments/20121001/35aad90d/attachment-0001.pgp>