On what schedule is selinux-policy updated?

[Scott Salley]

I'm excitedly awaiting a set of patches I submitted to the selinux reference policy to
be picked up by Fedora. I've noticed that the selinux-policy* has frequent updates
available and expect to see these updates soon (fingers crossed).

Is there a published schedule for pushing out new selinux-policy* rpms and picking up
changes from the reference policy?

[Bruno Wolff III]

On Mon, Mar 22, 2010 at 13:52:18 -0400,
  Scott Salley <ssalley(a)likewise.com&gt; wrote:
>  I'm excitedly awaiting a set of patches I submitted to the
> selinux reference policy to be picked up by Fedora. I've noticed that the
> selinux-policy* has frequent updates available and expect to see these updates soon
> (fingers crossed).
>  
>  Is there a published schedule for pushing out new selinux-policy* rpms and picking up
> changes from the reference policy? 
At one time Dan was trying to group fixes on a weekly basis for rawhide. That's
about the only schedule I have seen.

To give you some idea of what has happened recently, here is a list of
builds in koji, so far this month:
 	
selinux-policy-3.6.32-105.fc12 	mgrepl 	2010-03-19 17:19:27 	complete
selinux-policy-3.7.15-1.fc13 	dwalsh 	2010-03-18 16:03:23 	complete
selinux-policy-3.7.14-5.fc13 	dwalsh 	2010-03-17 14:24:04 	complete
selinux-policy-3.6.32-103.fc12 	mgrepl 	2010-03-15 22:10:49 	complete
selinux-policy-3.7.14-4.fc13 	dwalsh 	2010-03-15 21:31:45 	complete
selinux-policy-3.6.32-102.fc12 	mgrepl 	2010-03-15 21:22:46 	complete
selinux-policy-3.7.14-3.fc13 	dwalsh 	2010-03-13 15:47:44 	complete
selinux-policy-3.7.14-1.fc13 	dwalsh 	2010-03-12 19:38:35 	complete
selinux-policy-3.7.13-4.fc13 	dwalsh 	2010-03-12 14:42:29 	complete
selinux-policy-3.6.32-101.fc12 	mgrepl 	2010-03-12 14:25:39 	complete
selinux-policy-3.7.13-3.fc13 	dwalsh 	2010-03-11 22:06:32 	complete
selinux-policy-3.7.13-2.fc13 	dwalsh 	2010-03-11 20:21:56 	complete
selinux-policy-3.7.13-1.fc13 	dwalsh 	2010-03-10 15:32:57 	failed
selinux-policy-3.6.32-100.fc12 	mgrepl 	2010-03-09 17:13:29 	complete
selinux-policy-3.7.12-1.fc13 	dwalsh 	2010-03-07 15:29:46 	complete
selinux-policy-3.6.32-99.fc12 	mgrepl 	2010-03-05 16:11:31 	complete
selinux-policy-3.6.32-98.fc12 	mgrepl 	2010-03-05 15:51:44 	complete
selinux-policy-3.7.11-1.fc13 	dwalsh 	2010-03-04 18:40:09 	complete
selinux-policy-3.6.32-97.fc12 	mgrepl 	2010-03-03 15:00:23 	complete
selinux-policy-3.6.32-96.fc12 	mgrepl 	2010-03-01 18:15:40 	complete
selinux-policy-3.7.10-5.fc13 	dwalsh 	2010-03-01 17:46:38 	complete

[Dominick Grift]

On Mon, Mar 22, 2010 at 01:52:18PM -0400, Scott Salley wrote:
>  I'm excitedly awaiting a set of patches I submitted to the
> selinux reference policy to be picked up by Fedora. I've noticed that the
> selinux-policy* has frequent updates available and expect to see these updates soon
> (fingers crossed). 
Its already available for Fedora 13 here:

http://koji.fedoraproject.org/koji/buildinfo?buildID=162534

I am not sure if and when it will be pushed to F12/11.

Hopefully your policy will be included with el6

You can, if you want install f13 policy on f12 if you also update its dependencies.
>  
>  Is there a published schedule for pushing out new selinux-policy* rpms and picking up
> changes from the reference policy?
>  --
>  selinux mailing list
>  selinux(a)lists.fedoraproject.org
>  https://admin.fedoraproject.org/mailman/listinfo/selinux

[Daniel J Walsh]

On 03/22/2010 01:52 PM, Scott Salley wrote:
>  I'm excitedly awaiting a set of patches I submitted to the
> selinux reference policy to be picked up by Fedora. I've noticed that the
> selinux-policy* has frequent updates available and expect to see these updates soon
> (fingers crossed).
>
>  Is there a published schedule for pushing out new selinux-policy* rpms and picking up
> changes from the reference policy?
>  --
>  selinux mailing list
>  selinux(a)lists.fedoraproject.org
>  https://admin.fedoraproject.org/mailman/listinfo/selinux
>      
We like to update once per week or less.

Your policy is in F13 and this is the same policy that is going into RHEL6.

I do not usually add new confinement to older versions of Fedora.  But 
if you want I can ask Miroslav to back port it.

[Scott Salley]

>  On 03/22/2010 01:52 PM, Scott Salley wrote:
>  > I'm excitedly awaiting a set of patches I submitted to the selinux
>  reference policy to be picked up by Fedora. I've noticed that the
>  selinux-policy* has frequent updates available and expect to see these
>  updates soon (fingers crossed).
>  >
>  > Is there a published schedule for pushing out new selinux-policy*
>  rpms and picking up changes from the reference policy?
>  > --
>  > selinux mailing list
>  > selinux(a)lists.fedoraproject.org
>  > https://admin.fedoraproject.org/mailman/listinfo/selinux
>  >
>  We like to update once per week or less.
>  
>  Your policy is in F13 and this is the same policy that is going into
>  RHEL6.
>  
>  I do not usually add new confinement to older versions of Fedora.  But
>  if you want I can ask Miroslav to back port it. 
I would like to see it back ported to F12. Does adding new confinement to older versions
cause problems?

[Daniel J Walsh]

On 03/22/2010 03:16 PM, Scott Salley wrote:
> > On 03/22/2010 01:52 PM, Scott Salley wrote:
> >      
> >> I'm excitedly awaiting a set of patches I submitted to the selinux
> >>        
> > reference policy to be picked up by Fedora. I've noticed that the
> > selinux-policy* has frequent updates available and expect to see these
> > updates soon (fingers crossed).
> >      
> >> Is there a published schedule for pushing out new selinux-policy*
> >>        
> > rpms and picking up changes from the reference policy?
> >      
> >> --
> >> selinux mailing list
> >> selinux(a)lists.fedoraproject.org
> >> https://admin.fedoraproject.org/mailman/listinfo/selinux
> >>
> >>        
> > We like to update once per week or less.
> >
> > Your policy is in F13 and this is the same policy that is going into
> > RHEL6.
> >
> > I do not usually add new confinement to older versions of Fedora.  But
> > if you want I can ask Miroslav to back port it.
> >      
>  I would like to see it back ported to F12. Does adding new confinement to older versions
> cause problems?
>  --
>  selinux mailing list
>  selinux(a)lists.fedoraproject.org
>  https://admin.fedoraproject.org/mailman/listinfo/selinux
>      
Well if the policy has bugs yes.  If a program goes from running 
unconfined to confined and there are bugs in the confined policy, It 
would be considered a regression.

[Miroslav Grepl]

On 03/22/2010 08:16 PM, Scott Salley wrote:
> > On 03/22/2010 01:52 PM, Scott Salley wrote:
> >      
> >> I'm excitedly awaiting a set of patches I submitted to the selinux
> >>        
> > reference policy to be picked up by Fedora. I've noticed that the
> > selinux-policy* has frequent updates available and expect to see these
> > updates soon (fingers crossed).
> >      
> >> Is there a published schedule for pushing out new selinux-policy*
> >>        
> > rpms and picking up changes from the reference policy?
> >      
> >> --
> >> selinux mailing list
> >> selinux(a)lists.fedoraproject.org
> >> https://admin.fedoraproject.org/mailman/listinfo/selinux
> >>
> >>        
> > We like to update once per week or less.
> >
> > Your policy is in F13 and this is the same policy that is going into
> > RHEL6.
> >
> > I do not usually add new confinement to older versions of Fedora.  But
> > if you want I can ask Miroslav to back port it.
> >      
>  I would like to see it back ported to F12. Does adding new confinement to older versions
> cause problems?
>      
I have added likewise policy to selinux-policy-3.6.32-106.fc12.

Regards,
Miroslav
>  --
>  selinux mailing list
>  selinux(a)lists.fedoraproject.org
>  https://admin.fedoraproject.org/mailman/listinfo/selinux
>