Hi,
in order to prevent backward compatibility libsepol and libsemanage used had few
symbols defined twice and used symbol versioning for them. But when LTO was
enabled these symbols were completely dropped during compilation, see
https://github.com/SELinuxProject/selinux/issues/245
In order to fix it, it was decided to drop these duplicate symbols and also long
time deprecated symbols and therefore sonames of libsepol and libsemanage were
bumped.
The following SELinux userspace components are built and prepared to be merged in
"f34-build-side-33413" side tag:
selinux-policy-3.14.7-7.fc34
setools-4.4.0-0.1.20201102git05e90ee.fc34
checkpolicy-3.1-4.fc34
policycoreutils-3.1-5.fc34
libsemanage-3.1-4.fc34
libselinux-3.1-4.fc34
libsepol-3.1-4.fc34
There are few other components which needs to be rebuild:
parted - for some reason it links to libsepol even though I haven't found a code
which would use it. I've proposed patch upstream
https://alioth-lists.debian.net/pipermail/parted-devel/2020-November/0055...
shadow-utils -
https://src.fedoraproject.org/rpms/shadow-utils/pull-request/6
sssd -
https://src.fedoraproject.org/rpms/sssd/pull-request/7
As none of packages which require either libsepol or libsemanage use dropped
symbols and in order not to break build root during soname bumps I've added temporary
subpackages with original library versions - libsepol-compat with libsepol.so.1
and libsemanage-compat with libsemanage.so.1. These subpackage will be dropped
as soon as everything is rebuilt in Rawhide.
I've sucessfuly built all packages also in my COPR repository
https://copr.fedorainfracloud.org/coprs/plautrba/selinux-fedora/builds/
If there's no objection I'd like to merge the side tag to rawhide as soon as
possible.
Petr