{"bugs":[{"bugid":922517,"firstseen":"2025-07-11T02:48:40.189262","severity":"normal","status":"CONFIRMED","summary":"sec-policy\/selinux-zfs: missing allow rule on zfs compatibility file"}],"categories":[{"categoryid":441,"name":"sec-policy","summary":"The sec-policy category contains security policies for access control systems such as SELinux."},{"categoryid":343,"name":"sys-apps","summary":"The sys-apps category contains various core system applications, and some non-core system applications which have not yet been moved out into other sys- categories."},{"categoryid":394,"name":"sys-fs","summary":"The sys-fs category contains filesystem tools and utilities."}],"changelog":[{"authoremail":"repomirrorci@gentoo.org","authorname":"Repository mirror & CI","commitid":"cdf4b26553e16a6fa4edd9d1d9b5fef0d38cd143","committime":"2025-12-22T13:46:24","packageid":75586,"repoid":1,"summary":"Merge updates from master"},{"authoremail":"sam@gentoo.org","authorname":"Sam James","body":"Quoting the linked PR:\n> SELinux base policy seems to hard depend on both the dbus and policykit\n> modules at present.\n> In the future, we can consider removing this once the older releases of\n> refpolicy have been dropped from the tree[1].\n>\n> [1] SELinuxProject\/refpolicy#906\n\nWe can stable newer now.\n\nBug: https:\/\/bugs.gentoo.org\/891963\nCloses: https:\/\/github.com\/gentoo\/gentoo\/pull\/45124\nSigned-off-by: Sam James ","commitid":"0868350882899927dd40131021bfcf8bd117e77c","committime":"2025-12-22T13:24:15","packageid":75586,"repoid":1,"summary":"sec-policy\/*: stabilise 2.20250618 for SELinux"},{"authoremail":"repomirrorci@gentoo.org","authorname":"Repository mirror & CI","commitid":"6205c78701f6b6ecab2c98afbd9a5d2558da107f","committime":"2025-09-08T00:34:33","packageid":75586,"repoid":1,"summary":"Merge updates from master"},{"authoremail":"perfinion@gentoo.org","authorname":"Jason Zaman","body":"Signed-off-by: Jason Zaman ","commitid":"4d7080a9766d886cd15cdf4fa75890677c6266b1","committime":"2025-09-07T22:20:58","packageid":75586,"repoid":1,"summary":"sec-policy: Release of SELinux policies 2.20250618-r1"},{"authoremail":"repomirrorci@gentoo.org","authorname":"Repository mirror & CI","commitid":"3b5335637704c2392f9214da0c5261e59bbcfd3d","committime":"2025-09-06T20:05:01","packageid":75586,"repoid":1,"summary":"Merge updates from master"},{"authoremail":"arthurzam@gentoo.org","authorname":"Arthur Zamarin","body":"Signed-off-by: Arthur Zamarin ","commitid":"6f5fd9fe2067aace2ee61f19d049585d9a8f0aea","committime":"2025-09-06T19:52:04","packageid":75586,"repoid":1,"summary":"sec-policy\/*: drop redundent versions, EAPI=7--"},{"authoremail":"repomirrorci@gentoo.org","authorname":"Repository mirror & CI","commitid":"d12c5d9dc1e9b2c6340fb412ce213b69d61a399a","committime":"2025-09-01T00:04:10","packageid":75586,"repoid":1,"summary":"Merge updates from master"},{"authoremail":"sam@gentoo.org","authorname":"Sam James","body":"This fixes some serious issues and has been in ~arch for ages.\n\nI did attempt to use the new stable group from 759e2225ae9d69cded09fb38d125cf1d85b5c5df\nbut hit two pkgdev bugs.\n\nBug: https:\/\/github.com\/pkgcore\/pkgdev\/issues\/213\nBug: https:\/\/github.com\/pkgcore\/pkgdev\/issues\/214\nSigned-off-by: Sam James ","commitid":"492e3e8db6ce41b0461dafd2dcd57b40603a1bdc","committime":"2025-08-31T23:38:24","packageid":75586,"repoid":1,"summary":"sec-policy\/*: stabilize 2.20250213-r1 SELinux policies"},{"authoremail":"repomirrorci@gentoo.org","authorname":"Repository mirror & CI","commitid":"83f2cb3b31b062c005efc9794f734e8c292fc494","committime":"2025-03-09T01:18:51","packageid":75586,"repoid":1,"summary":"Merge updates from master"},{"authoremail":"perfinion@gentoo.org","authorname":"Jason Zaman","body":"Signed-off-by: Jason Zaman ","commitid":"1d834aa9c6f8d981b720a18aa74907f84e9e27bf","committime":"2025-03-09T00:22:16","packageid":75586,"repoid":1,"summary":"sec-policy: Release of SELinux policies 2.20250213-r1"},{"authoremail":"repomirrorci@gentoo.org","authorname":"Repository mirror & CI","commitid":"91094de5ff6f599d86a244fa28e5bfc99b656e4d","committime":"2024-10-16T14:03:18","packageid":75586,"repoid":1,"summary":"Merge updates from master"},{"authoremail":"concord@gentoo.org","authorname":"Kenton Groombridge","body":"Signed-off-by: Kenton Groombridge ","commitid":"4fbb88d67b1f9ff273726cb8439fc1ee350d837d","committime":"2024-10-16T13:38:13","packageid":75586,"repoid":1,"summary":"sec-policy\/*: drop SELinux policies 2.20240226-r1"},{"authoremail":"concord@gentoo.org","authorname":"Kenton Groombridge","body":"Closes: https:\/\/bugs.gentoo.org\/941234\nSigned-off-by: Kenton Groombridge ","commitid":"da9bc156b8c8394643546f4c13451b916ccbe8d2","committime":"2024-10-16T13:36:42","packageid":75586,"repoid":1,"summary":"sec-policy\/*: stabilize SELinux policies 2.20240916-r1"},{"authoremail":"repomirrorci@gentoo.org","authorname":"Repository mirror & CI","commitid":"9a03dd2b31746801720e52495d759f43ed397b01","committime":"2024-09-26T02:34:30","packageid":75586,"repoid":1,"summary":"Merge updates from master"},{"authoremail":"perfinion@gentoo.org","authorname":"Jason Zaman","body":"Signed-off-by: Jason Zaman ","commitid":"93eb44523dd73a13e45dd9095692783d236f1c78","committime":"2024-09-26T02:09:04","packageid":75586,"repoid":1,"summary":"sec-policy\/*: Release of SELinux policies 2.20240916-r1"},{"authoremail":"repomirrorci@gentoo.org","authorname":"Repository mirror & CI","commitid":"01006b370ff42daec08734bd0fca6a43feb0c70a","committime":"2024-09-06T16:48:49","packageid":75586,"repoid":1,"summary":"Merge updates from master"},{"authoremail":"arthurzam@gentoo.org","authorname":"Arthur Zamarin","body":"Most likely not useful, and requires a huge dep tree\n\nSigned-off-by: Arthur Zamarin ","commitid":"22e8a836a25059f3cff589f0e10ff06a7154fed5","committime":"2024-09-06T16:30:04","packageid":75586,"repoid":1,"summary":"sec-policy\/*: drop ~mips keywords"},{"authoremail":"repomirrorci@gentoo.org","authorname":"Repository mirror & CI","commitid":"a3ed5fb22f492fabeb3fd56082ce3b4c8faddbce","committime":"2024-06-06T14:51:05","packageid":75586,"repoid":1,"summary":"Merge updates from master"},{"authoremail":"concord@gentoo.org","authorname":"Kenton Groombridge","body":"Signed-off-by: Kenton Groombridge ","commitid":"392de9ffa7baea81593770d1d127929652ccca27","committime":"2024-06-06T14:39:15","packageid":75586,"repoid":1,"summary":"sec-policy\/*: drop old SELinux policies"},{"authoremail":"concord@gentoo.org","authorname":"Kenton Groombridge","body":"Closes: https:\/\/bugs.gentoo.org\/928060\nSigned-off-by: Kenton Groombridge ","commitid":"07c319412b6ada778545d3415f749a047ebde565","committime":"2024-06-06T14:35:58","packageid":75586,"repoid":1,"summary":"sec-policy\/*: stabilize SELinux policies 2.20240226-r2"},{"authoremail":"repomirrorci@gentoo.org","authorname":"Repository mirror & CI","commitid":"5cc09e4ba9b15748f8296867ad91e67d5a6e5128","committime":"2024-05-14T20:03:36","packageid":75586,"repoid":1,"summary":"Merge updates from master"},{"authoremail":"concord@gentoo.org","authorname":"Kenton Groombridge","body":"Closes: https:\/\/bugs.gentoo.org\/928060\nSigned-off-by: Kenton Groombridge ","commitid":"aa11df06796676d0d98aa3b51093e639cb264635","committime":"2024-05-14T19:24:40","packageid":75586,"repoid":1,"summary":"sec-policy\/*: Release of SELinux policies 2.20240226-r2"},{"authoremail":"concord@gentoo.org","authorname":"Kenton Groombridge","body":"Signed-off-by: Kenton Groombridge ","commitid":"4b64d5027baebee2cba2a563697b4f3c4bc98061","committime":"2024-05-14T19:12:44","packageid":75586,"repoid":1,"summary":"sec-policy\/*: fix some QA issues"},{"authoremail":"repomirrorci@gentoo.org","authorname":"Repository mirror & CI","commitid":"fe3e50d62d1a30e12b79adee98d56f9ae400ac29","committime":"2024-03-19T20:49:06","packageid":75586,"repoid":1,"summary":"Merge updates from master"},{"authoremail":"concord@gentoo.org","authorname":"Kenton Groombridge","body":"Signed-off-by: Kenton Groombridge ","commitid":"255c666e7b3a2048c960bd8428142e35996c7fa8","committime":"2024-03-19T20:27:53","packageid":75586,"repoid":1,"summary":"sec-policy: stabilize selinux policies 2.20240226-r1"},{"authoremail":"repomirrorci@gentoo.org","authorname":"Repository mirror & CI","commitid":"36cc70c2569e9f592eeb2401a3eae22071758c97","committime":"2024-03-01T20:03:54","packageid":75586,"repoid":1,"summary":"Merge updates from master"},{"authoremail":"concord@gentoo.org","authorname":"Kenton Groombridge","body":"Signed-off-by: Kenton Groombridge ","commitid":"9a78c8130c665e43426fcb735ad69bd838984a81","committime":"2024-03-01T18:10:00","packageid":75586,"repoid":1,"summary":"sec-policy: Release of SELinux policies 2.20240226-r1"},{"authoremail":"repomirrorci@gentoo.org","authorname":"Repository mirror & CI","commitid":"55f46dedde54e5b19d8f2d85966659620c0e09df","committime":"2023-11-14T22:01:56","packageid":75586,"repoid":1,"summary":"Merge updates from master"},{"authoremail":"concord@gentoo.org","authorname":"Kenton Groombridge","body":"Signed-off-by: Kenton Groombridge ","commitid":"6dcb139c3b35409146d3f67a1be6329270035cd6","committime":"2023-11-06T15:24:27","packageid":75586,"repoid":1,"summary":"sec-policy\/*: Drop old SELinux policies"},{"authoremail":"concord@gentoo.org","authorname":"Kenton Groombridge","body":"Closes: https:\/\/bugs.gentoo.org\/917239\nSigned-off-by: Kenton Groombridge ","commitid":"228a80e3737212a744122d72179a3e8a7716e3f3","committime":"2023-11-06T15:22:51","packageid":75586,"repoid":1,"summary":"sec-policy\/*: stabilize SELinux policies 2.20231002-r2"},{"authoremail":"repomirrorci@gentoo.org","authorname":"Repository mirror & CI","commitid":"11c3bcacffb2735ce6945cd58cedeb6b590c9047","committime":"2023-10-20T22:16:53","packageid":75586,"repoid":1,"summary":"Merge updates from master"},{"authoremail":"concord@gentoo.org","authorname":"Kenton Groombridge","body":"Signed-off-by: Kenton Groombridge ","commitid":"7781707567ad53c712301ab2e6e6f75ca013c3f3","committime":"2023-10-20T22:02:00","packageid":75586,"repoid":1,"summary":"sec-policy: Release of SELinux policies 2.20231002-r2"},{"authoremail":"repomirrorci@gentoo.org","authorname":"Repository mirror & CI","commitid":"0877e42008dfab1a00d6f325425d67790bcbecd0","committime":"2023-10-06T16:46:52","packageid":75586,"repoid":1,"summary":"Merge updates from master"},{"authoremail":"concord@gentoo.org","authorname":"Kenton Groombridge","body":"Signed-off-by: Kenton Groombridge ","commitid":"699016c9b86c4154bb66e0657d3f3c264208141d","committime":"2023-10-06T16:36:12","packageid":75586,"repoid":1,"summary":"sec-policy: Release of SELinux policies 2.20231002-r1"},{"authoremail":"repomirrorci@gentoo.org","authorname":"Repository mirror & CI","commitid":"d3b67d9e17a11af0cd8039d950eb783864d8da98","committime":"2023-04-15T15:16:51","packageid":75586,"repoid":1,"summary":"Merge updates from master"},{"authoremail":"concord@gentoo.org","authorname":"Kenton Groombridge","body":"Signed-off-by: Kenton Groombridge ","commitid":"0449d8911b51db76bd58008b76709fdfc1f331db","committime":"2023-04-15T15:08:34","packageid":75586,"repoid":1,"summary":"sec-policy\/*: drop old SELinux policies"},{"authoremail":"repomirrorci@gentoo.org","authorname":"Repository mirror & CI","commitid":"e668045d5da833000d0eac667fd86b9778b8f0f2","committime":"2023-04-09T15:16:49","packageid":75586,"repoid":1,"summary":"Merge updates from master"},{"authoremail":"concord@gentoo.org","authorname":"Kenton Groombridge","body":"Closes: https:\/\/bugs.gentoo.org\/891771\nCloses: https:\/\/bugs.gentoo.org\/902083\nSigned-off-by: Kenton Groombridge ","commitid":"3dc00bbfff3c833f21aaf7cfd9e5407ccaf04352","committime":"2023-04-09T15:06:02","packageid":75586,"repoid":1,"summary":"sec-policy\/: Stabilize SELinux policies 2.20221101-r4"},{"authoremail":"repomirrorci@gentoo.org","authorname":"Repository mirror & CI","commitid":"ff0c7cff5a7680115345eedf0e8d60f2fd50ed49","committime":"2023-03-31T18:31:52","packageid":75586,"repoid":1,"summary":"Merge updates from master"},{"authoremail":"concord@gentoo.org","authorname":"Kenton Groombridge","body":"Bug: https:\/\/bugs.gentoo.org\/891771\nSigned-off-by: Kenton Groombridge ","commitid":"38bb244797b6f12077cbce589947a7acc5b4c338","committime":"2023-03-31T17:55:21","packageid":75586,"repoid":1,"summary":"sec-policy: Release of SELinux policies 2.20221101-r4"},{"authoremail":"repomirrorci@gentoo.org","authorname":"Repository mirror & CI","commitid":"0bff90dd427ed57aac49f5dfd311273b3724c2cd","committime":"2022-12-23T20:17:03","packageid":75586,"repoid":1,"summary":"Merge updates from master"},{"authoremail":"concord@gentoo.org","authorname":"Kenton Groombridge","body":"Signed-off-by: Kenton Groombridge ","commitid":"3715a38651655bbb3252504aacd0c8b3a2c43e20","committime":"2022-12-23T18:24:35","packageid":75586,"repoid":1,"summary":"sec-policy: stabilize SELinux policies 2.20221101-r3"},{"authoremail":"repomirrorci@gentoo.org","authorname":"Repository mirror & CI","commitid":"c14a27068664e205de5f7d49280dc9f019546bdd","committime":"2022-12-13T21:01:48","packageid":75586,"repoid":1,"summary":"Merge updates from master"},{"authoremail":"concord@gentoo.org","authorname":"Kenton Groombridge","body":"Signed-off-by: Kenton Groombridge ","commitid":"d8d13be1ed61143121ec065d6fa51bd1f2039b48","committime":"2022-12-13T20:42:55","packageid":75586,"repoid":1,"summary":"sec-policy: Release of SELinux policies 2.20221101-r3"},{"authoremail":"repomirrorci@gentoo.org","authorname":"Repository mirror & CI","commitid":"9c0371e75bfbf628acc6d77f9b385893acab0fd0","committime":"2022-11-15T20:16:46","packageid":75586,"repoid":1,"summary":"Merge updates from master"},{"authoremail":"concord@gentoo.org","authorname":"Kenton Groombridge","body":"Signed-off-by: Kenton Groombridge ","commitid":"54116553a7c7cd678d0b35296bbf3bae5bb0a392","committime":"2022-11-15T20:06:16","packageid":75586,"repoid":1,"summary":"sec-policy: stabilize SELinux policies 2.20221101-r2"},{"authoremail":"repomirrorci@gentoo.org","authorname":"Repository mirror & CI","commitid":"6573794fe644969bae68a2b8dbca1477c934e9f6","committime":"2022-11-02T17:31:45","packageid":75586,"repoid":1,"summary":"Merge updates from master"},{"authoremail":"concord@gentoo.org","authorname":"Kenton Groombridge","body":"Signed-off-by: Kenton Groombridge ","commitid":"39aedd104380e4e71081493b3f2e2ecb48fbf616","committime":"2022-11-02T17:16:19","packageid":75586,"repoid":1,"summary":"sec-policy: drop SELinux policies 2.20221101-r1"},{"authoremail":"repomirrorci@gentoo.org","authorname":"Repository mirror & CI","commitid":"6c89126a179663b784232d3a1611f191a8a0db1d","committime":"2022-11-02T14:46:50","packageid":75586,"repoid":1,"summary":"Merge updates from master"},{"authoremail":"concord@gentoo.org","authorname":"Kenton Groombridge","body":"Signed-off-by: Kenton Groombridge ","commitid":"35b8dd3e65ab3fbc247c8d1141477f444bf4a86b","committime":"2022-11-02T14:22:41","packageid":75586,"repoid":1,"summary":"sec-policy: Release of SELinux policies 2.20221101-r2"},{"authoremail":"repomirrorci@gentoo.org","authorname":"Repository mirror & CI","commitid":"ed3615ddd962c944772bfc34aca816a5110d57d1","committime":"2022-11-02T14:01:59","packageid":75586,"repoid":1,"summary":"Merge updates from master"},{"authoremail":"concord@gentoo.org","authorname":"Kenton Groombridge","body":"Signed-off-by: Kenton Groombridge ","commitid":"7a8a3a30deee8d3aa5692633def14f6adff8cf6c","committime":"2022-11-02T13:56:24","packageid":75586,"repoid":1,"summary":"sec-policy: Release of SELinux policies 2.20221101-r1"},{"authoremail":"concord@gentoo.org","authorname":"Kenton Groombridge","body":"Signed-off-by: Kenton Groombridge ","commitid":"a30d9ebe590f84c7c1e86bd9925ec621ef6834b2","committime":"2022-11-02T13:15:19","packageid":75586,"repoid":1,"summary":"sec-policy\/selinux-zfs: new package, add 9999"}],"dependencies":[{"block":false,"categoryid":343,"description":"SELinux core utilities","ebuildids":[767162,856719,875188],"firstseen":"2010-05-04T00:54:45.661860","maintainer":"selinux@gentoo.org","maintainername":"SELinux Team","name":"policycoreutils","packageid":49699,"summary":"Policycoreutils contains the policy core utilities that are required for basic operation of a SELinux system. These utilities include load_policy to load policies, setfiles to label filesystems, newrole to switch roles, and run_init to run \/etc\/init.d scripts in the proper context. Gentoo-specific tools include rlpkg for relabeling packages by name, avc_toggle to toggle between enforcing and permissive modes, and avc_enforcing to query the current mode of the system, enforcing or permissive."},{"block":false,"categoryid":441,"description":"SELinux policy for core modules","ebuildids":[767162,856719,875188],"firstseen":"2010-05-04T00:54:45.661860","maintainer":"selinux@gentoo.org","maintainername":"SELinux Team","name":"selinux-base-policy","packageid":51556,"summary":"Gentoo SELinux base policy. This contains policy for a system at the end of system installation. There is no extra policy in this package."}],"depending":[{"block":false,"categoryid":394,"description":"Linux kernel module and userland utilities for ZFS","ebuildids":[445938,846861,867875,867876,874069,882520,882795,885051,891133,891134],"firstseen":"2012-01-28T14:36:12.667844","maintainer":"ryao@gentoo.org","maintainername":"Richard Yao","name":"zfs","packageid":58767,"summary":"OpenZFS is an advanced file system and volume manager which was originally developed for Solaris and is now maintained by the OpenZFS community It includes the functionality of both traditional file systems and volume manager. It has many advanced features including: * Protection against data corruption. Integrity checking for both data and metadata. * Continuous integrity verification and automatic “self-healing” repair * Data redundancy with mirroring, RAID-Z1\/2\/3 [and DRAID] * Support for high storage capacities — up to 256 trillion yobibytes (2^128 bytes) * Space-saving with transparent compression using LZ4, GZIP or ZSTD * Hardware-accelerated native encryption * Efficient storage with snapshots and copy-on-write clones * Efficient local or remote replication — send only changed blocks with ZFS send and receive The OpenZFS project brings together developers from the Linux, FreeBSD, illumos, MacOS, and Windows platforms. OpenZFS is supported by a wide range of companies."}],"ebuilds":[{"archs":[],"ebuildid":767162,"firstseen":"2022-11-02T14:15:29.094330","license":"GPL-2","moddate":"2026-03-13T16:18:48","packageid":75586,"repoid":1,"slot":"0","uses":[],"version":"9999"},{"archs":["amd64","arm","arm64","x86"],"ebuildid":875188,"firstseen":"2025-09-08T01:39:18.529239","license":"GPL-2","moddate":"2026-01-08T03:20:07","packageid":75586,"repoid":1,"slot":"0","uses":[],"version":"2.20250618-r1"},{"archs":["amd64","arm","arm64","x86"],"ebuildid":856719,"firstseen":"2025-03-09T01:37:09.863282","license":"GPL-2","moddate":"2026-01-08T03:20:07","packageid":75586,"repoid":1,"slot":"0","uses":[],"version":"2.20250213-r1"}],"masks":[],"package":{"categoryid":441,"description":"SELinux policy for zfs","firstseen":"2022-11-02T14:15:29.094330","name":"selinux-zfs","packageid":75586},"rdependencies":[{"block":false,"categoryid":343,"description":"SELinux core utilities","ebuildids":[767162,856719,875188],"firstseen":"2010-05-04T00:54:45.661860","maintainer":"selinux@gentoo.org","maintainername":"SELinux Team","name":"policycoreutils","packageid":49699,"summary":"Policycoreutils contains the policy core utilities that are required for basic operation of a SELinux system. These utilities include load_policy to load policies, setfiles to label filesystems, newrole to switch roles, and run_init to run \/etc\/init.d scripts in the proper context. Gentoo-specific tools include rlpkg for relabeling packages by name, avc_toggle to toggle between enforcing and permissive modes, and avc_enforcing to query the current mode of the system, enforcing or permissive."},{"block":false,"categoryid":441,"description":"SELinux policy for core modules","ebuildids":[767162,856719,875188],"firstseen":"2010-05-04T00:54:45.661860","maintainer":"selinux@gentoo.org","maintainername":"SELinux Team","name":"selinux-base-policy","packageid":51556,"summary":"Gentoo SELinux base policy. This contains policy for a system at the end of system installation. There is no extra policy in this package."}],"repos":[{"branch":"master","lastcommit":"f87ce2b74421571078063820dc1065e7089c9fa7","name":"gentoo","path":"\/usr\/portage","repoid":1,"upstream":"origin"}],"tracked":false,"urls":["https:\/\/wiki.gentoo.org\/wiki\/Project:SELinux"],"uses":[]}