Dear Maintainer,

attached are three patches to be more rigorous about policy building.

Patch 1: Drop duplicate declaration of file context for /var/log/rspamd(/.*)?
Patch 2: Build policy and verify file contexts within autopkgtest
Patch 3: Validate the policy at build time

Best regards,
       Christian Göttsche

control: severity -1 serious
control: affects -1 src:libsepol

The duplicate declaration of the filecontext

    /var/log/rspamd(/.*)?

became a hard error with libsepol 3.5 and thus is preventing libsepol
from migrating to testing.

Please apply patch 0001-d-patches-drop-addition-of-existent-file-context.patch.

We believe that the bug you reported is fixed in the latest version of
refpolicy, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1030804@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Laurent Bigonville <bigon@debian.org> (supplier of updated refpolicy package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Sat, 15 Jul 2023 09:47:27 +0200
Source: refpolicy
Architecture: source
Version: 2:2.20221101-10
Distribution: unstable
Urgency: medium
Maintainer: Debian SELinux maintainers <selinux-devel@lists.alioth.debian.org>
Changed-By: Laurent Bigonville <bigon@debian.org>
Closes: 1030057 1030804 1038968
Changes:
 refpolicy (2:2.20221101-10) unstable; urgency=medium
 .
   * Team upload.
   [ Christian Göttsche ]
   * d/patches: drop addition of existent file context (Closes: #1038968)
   * d/tests: simulate policy building
   * d/rules: validate build policy (Closes: #1030804)
 .
   [ Vagrant Cascadian ]
   * debian/rules: Pass arguments to tar to use a consistent uid and gid.
     (Closes: #1030057)
 .
   [ Laurent Bigonville ]
   * debian/control: Bump Standards-Version to 4.6.2 (no further changes)
Checksums-Sha1:
 4d9d6e9e41367f4bc9832123ec880baff184ee17 2125 refpolicy_2.20221101-10.dsc
 7e95a3256a35d8616f96f2491f583a7df9857fde 108228 refpolicy_2.20221101-10.debian.tar.xz
 c23ae9d69bbcca394748817fe7edd1639d9b2a91 5478 refpolicy_2.20221101-10_source.buildinfo
Checksums-Sha256:
 1901132d28d1cdd4e9ad8b7c593e17947097a17b7538a9748703cd213ff6ae41 2125 refpolicy_2.20221101-10.dsc
 2a60dbfcde72bac43178090d0d927290f95b715f4fd1baa4778534c2084210e7 108228 refpolicy_2.20221101-10.debian.tar.xz
 4ff999b058117451771c16d28409a6f223ca0c0d1bd9341147ab1024a351284d 5478 refpolicy_2.20221101-10_source.buildinfo
Files:
 2bc01b1d62d7b37275fd725865e0500b 2125 admin optional refpolicy_2.20221101-10.dsc
 41d42edb404b2f5f6964d8c1cf7f49ee 108228 admin optional refpolicy_2.20221101-10.debian.tar.xz
 12731bbec7c46a0697f28ce237ec8391 5478 admin optional refpolicy_2.20221101-10_source.buildinfo
-----BEGIN PGP SIGNATURE-----

iQFFBAEBCAAvFiEEmRrdqQAhuF2x31DwH8WJHrqwQ9UFAmSyUmYRHGJpZ29uQGRl
Ymlhbi5vcmcACgkQH8WJHrqwQ9VxNwgAk+jquAo2yz/4P/d5A01vp5xxX+DIPZ0j
O+YKtRC63rhMp5ryIQdIEmRf+BqdDZf9+4ZfmSLXux/KpYawpTmS4nQcCieal7ZH
qEVHmt/di36FIK2aw0OZxUvvJ0ue6Y4aWh3sjvuz4tCgFDuwuvnfhOH9ulxuym4Y
BOBlXvJufdfpDclrljlzvGo0esbiLX7Gky0c+FStVzOBywTowDfFbGOFhlCxe3ka
Y7We2f6ZChW25EENt1FeCXJbbdSSeilMoENIEz0homsZzX0zOjZoW95NlLH01YEw
Q3ZsOCSRb1RyLzbe0V2whO5J52KBJJ2pKs0AzuLu/lH2D5ASEuNWLQ==
=5TSQ
-----END PGP SIGNATURE-----