Intent to release 3.1-rc1

Intent to release 3.1-rc1

[Petr Lautrbach]

[-- Attachment #1: Type: text/plain, Size: 1533 bytes --]

Hello,

I'd like to release 3.1-rc1 until end of this week.

Looking at https://patchwork.kernel.org/project/selinux/list/ I see:

- 3 acked patches which are ready to be merged (and I'll merge
them tomorrow if there's no other comment):

https://patchwork.kernel.org/patch/11525435/ libselinux: Add missing errno setup
https://patchwork.kernel.org/patch/11527311/ tree-wide: introduce PYTHON_SETUP_ARGS to customize setup.py calls on Debian
https://patchwork.kernel.org/patch/11527463/ Travis-CI: upgrade to Ubuntu 18.04 and latest releases of Python and Ruby 

- 1 patchset which should be postpone for the next release as it breaks setools
https://lore.kernel.org/selinux/20200502190828.3555858-1-omosnace@redhat.com/T/#t

- 1 patch without response:
https://patchwork.kernel.org/patch/11392367/ libselinux/getconlist: add verbose switch to print more information

- 1 RFC related to other kernel RFC
https://patchwork.kernel.org/patch/11436953/ [RFC] selinux: add unprivileged sandboxing capability
https://patchwork.kernel.org/patch/11436955/ [RFC] libsepol,secilc,policycoreutils: add unprivileged sandboxing capability 


There are 2 opened github PRs without Signed-of: and matching patch on the
mailing list:
https://github.com/SELinuxProject/selinux/pull/174  Use quote include for files located in the local directory 
https://github.com/SELinuxProject/selinux/pull/135  More robust ausearch time input


Have I missed something? Do you have any comments, objections to release?

Petr



[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

Re: Intent to release 3.1-rc1

[Christian Göttsche]

Am Di., 5. Mai 2020 um 15:57 Uhr schrieb Petr Lautrbach <plautrba@redhat.com>:
>
> Hello,
>
> I'd like to release 3.1-rc1 until end of this week.

sounds good

> https://patchwork.kernel.org/patch/11392367/ libselinux/getconlist: add verbose switch to print more information

This patch can be ignored.

Quoting Stephen Smalley:
> More generally, the libselinux utils could stand an overhaul:
> - a number of them are really just examples or tests of using the
> libselinux APIs and not really suitable for end users in their current
> form,
> - some of them should be prefixed with some kind of namespacing (e.g.
> se or selinux) to avoid potential conflicts,
> - there is overlap among getdefaultcon, getconlist, and getseuser;
> probably should be coalesced or some dropped

Maybe we can discuss the libselinux utils in general during the next
release cycle.

> https://github.com/SELinuxProject/selinux/pull/174  Use quote include for files located in the local directory

I think this pull request is obsolete now as the dso headers are gone.

Re: Intent to release 3.1-rc1

[Stephen Smalley]

On Tue, May 5, 2020 at 10:00 AM Petr Lautrbach <plautrba@redhat.com> wrote:
>
> Hello,
>
> I'd like to release 3.1-rc1 until end of this week.
>
> Looking at https://patchwork.kernel.org/project/selinux/list/ I see:
>
> - 3 acked patches which are ready to be merged (and I'll merge
> them tomorrow if there's no other comment):
>
> https://patchwork.kernel.org/patch/11525435/ libselinux: Add missing errno setup
> https://patchwork.kernel.org/patch/11527311/ tree-wide: introduce PYTHON_SETUP_ARGS to customize setup.py calls on Debian
> https://patchwork.kernel.org/patch/11527463/ Travis-CI: upgrade to Ubuntu 18.04 and latest releases of Python and Ruby
>
> - 1 patchset which should be postpone for the next release as it breaks setools
> https://lore.kernel.org/selinux/20200502190828.3555858-1-omosnace@redhat.com/T/#t
>
> - 1 patch without response:
> https://patchwork.kernel.org/patch/11392367/ libselinux/getconlist: add verbose switch to print more information

I had asked about the motivation for the patch and didn't see any
reply.  I had also noted that we have several overlapping utilities
there that ought to be coalesced or dropped.  Anyway absent some
compelling motivation for this patch I don't think it warrants merging
right now.

>
> - 1 RFC related to other kernel RFC
> https://patchwork.kernel.org/patch/11436953/ [RFC] selinux: add unprivileged sandboxing capability
> https://patchwork.kernel.org/patch/11436955/ [RFC] libsepol,secilc,policycoreutils: add unprivileged sandboxing capability
>
>
> There are 2 opened github PRs without Signed-of: and matching patch on the
> mailing list:
> https://github.com/SELinuxProject/selinux/pull/174  Use quote include for files located in the local directory
> https://github.com/SELinuxProject/selinux/pull/135  More robust ausearch time input
>
>
> Have I missed something? Do you have any comments, objections to release?

There was also this one that I deferred to the distro maintainers to decide on:
https://patchwork.kernel.org/patch/11284945/

Otherwise, looks good to me.  I agree that we don't want to include
the setools-breaking change until after this release.

Re: Intent to release 3.1-rc1

[Petr Lautrbach]

[-- Attachment #1: Type: text/plain, Size: 1257 bytes --]

On Tue, May 05, 2020 at 04:21:37PM +0200, Christian Göttsche wrote:
> Am Di., 5. Mai 2020 um 15:57 Uhr schrieb Petr Lautrbach <plautrba@redhat.com>:
> >
> > Hello,
> >
> > I'd like to release 3.1-rc1 until end of this week.
> 
> sounds good
> 
> > https://patchwork.kernel.org/patch/11392367/ libselinux/getconlist: add verbose switch to print more information
> 
> This patch can be ignored.
>

Marked as Deferred.

> Quoting Stephen Smalley:
> > More generally, the libselinux utils could stand an overhaul:
> > - a number of them are really just examples or tests of using the
> > libselinux APIs and not really suitable for end users in their current
> > form,
> > - some of them should be prefixed with some kind of namespacing (e.g.
> > se or selinux) to avoid potential conflicts,
> > - there is overlap among getdefaultcon, getconlist, and getseuser;
> > probably should be coalesced or some dropped
> 
> Maybe we can discuss the libselinux utils in general during the next
> release cycle.
> 
> > https://github.com/SELinuxProject/selinux/pull/174  Use quote include for files located in the local directory
> 
> I think this pull request is obsolete now as the dso headers are gone.
> 

Closed.

Thanks!

Petr

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]