| Git Clone URL: | https://aur.archlinux.org/libselinux.git (read-only, click to copy) |
|---|---|
| Package Base: | libselinux |
| Description: | SELinux library and simple utilities |
| Upstream URL: | https://github.com/SELinuxProject/selinux |
| Keywords: | selinux |
| Licenses: | custom |
| Groups: | selinux |
| Conflicts: | selinux-usr-libselinux |
| Provides: | libselinux.so, selinux-usr-libselinux |
| Submitter: | Siosm |
| Maintainer: | matricaldefunkt (IooNag) |
| Last Packager: | matricaldefunkt |
| Votes: | 134 |
| Popularity: | 0.78 |
| First Submitted: | 2013-11-03 20:05 (UTC) |
| Last Updated: | 2025-09-24 09:01 (UTC) |
The license identifier needs to be made SPDX compliant:
libselinux E: custom is not a valid SPDX license identifier. See https://spdx.org/licenses/ for valid identifiers, or prefix the identifier with 'LicenseRef-', if it is custom.
Regards and thanks for the package!
ggnoredo: yes, there was a recent issue with libselinux, which I am currently fixing. I have just updated libsepol to version 3.9. If you encounter any issue, please report it on https://github.com/archlinuxhardened/selinux . Thanks!
maintainer broke something
-> could not find all required packages: libsepol >=3.9
aur/libsepol 3.8-1 (+113 0.27) (Out-of-date: 2025-04-15) (Installed)
One call pull Petr's keys from GH using the following URL, which has the new key.
Here is what I see when I look at the downloaded key:
% gpg --show-keys ./bachradsusi.gpg
pub rsa4096 2012-04-03 [SC]
E853C1848B0185CF42864DF363A8AD4B982C4373
uid Petr Lautrbach <plautrba@redhat.com>
sub rsa4096 2017-12-05 [A]
sub rsa4096 2017-12-05 [S]
sub rsa4096 2012-04-03 [E]
pub rsa4096 2022-10-26 [SC] [expired: 2024-10-25]
B8682847764DF60DF52D992CBC3905F235179CF1
uid Petr Lautrbach <lautrbach@redhat.com>
sub rsa4096 2022-10-26 [E] [expired: 2024-10-25]
sub rsa4096 2022-10-26 [A] [expired: 2024-10-25]
sub rsa4096 2022-10-26 [S] [expired: 2024-10-25]
gpg: WARNING: No valid encryption subkey left over.
pub rsa4096 2024-11-04 [SC] [expires: 2026-11-04]
68D21823342A13683AEB3E4EFB4C685B5DC1C13E
uid Petr Lautrbach <lautrbach@redhat.com>
sub rsa4096 2024-11-04 [E] [expires: 2026-11-04]
sub rsa4096 2024-11-04 [S] [expires: 2026-11-04]
sub rsa4096 2024-11-04 [AR] [expires: 2026-11-04]
So what can we do now? Is this package orphaned?
$ sudo gpg --verify --auto-key-retrieve /var/cache/private/pamac/libselinux/libselinux-3.8.tar.gz.asc /var/cache/private/pamac/libselinux/libselinux-3.8.tar.gz
gpg: Signature made Mi 29 Jan 2025 18:57:17 CET
gpg: using RSA key 7200EB2C3F5E488463C0CE9ECDCAE8C927C6BE31
gpg: Good signature from "Petr Lautrbach <lautrbach@redhat.com>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
Primary key fingerprint: 68D2 1823 342A 1368 3AEB 3E4E FB4C 685B 5DC1 C13E
Subkey fingerprint: 7200 EB2C 3F5E 4884 63C0 CE9E CDCA E8C9 27C6 BE31
Hello,
Petr Lautrbach's gpg key is no longer valid
'68D21823342A13683AEB3E4EFB4C685B5DC1C13E' # Petr Lautrbach lautrbach@redhat.com
This may just be a case of Petr forgetting to refresh his keys to the keyserver. For now I'm going to ignore the package.
Trying to upgrade from 3.7-1 to 3.7-2 using pikaur, I get the error:
Verifying source file signatures with gpg... libselinux-3.7.tar.gz ... FAILED (unknown public key 4695881C254508D1)
Indeed the .tar.gz is signed with key 1BE2C0FF08949623102FD2564695881C254508D1 in .tar.gz.asc. PKGBUILD lists validpgpkeys = 63191CE94183098689CAB8DB7EF137EC935B0EAF (Jason Zaman perfinion@gentoo.org) and B8682847764DF60DF52D992CBC3905F235179CF1 (Petr Lautrbach plautrba@redhat.com).
I am very hesistant to install a package with an unknown public key. Any ideas how to fix this?
Hello, I am currently on holidays with limited Internet connectivity. I saw your message but will probably only be able to work on it from Monday January, 6th.
By the way, I successfully built libselinux in the GitHub Actions CI 2 weeks ago (https://github.com/archlinuxhardened/selinux/actions/runs/12337081682/job/34430332766) and swig has recently been updated to 4.3.0-1 since then (https://archlinux.org/packages/extra/x86_64/swig/). The build issue could probably also be fixed by (temporarily) downgrading swig.
The problem is fixed by adding this patch: https://github.com/SELinuxProject/selinux/commit/8e0e718bae53fff30831b92cd784151d475a20da
Pinned Comments
IooNag commented on 2025-09-29 08:31 (UTC)
ggnoredo: yes, there was a recent issue with libselinux, which I am currently fixing. I have just updated libsepol to version 3.9. If you encounter any issue, please report it on https://github.com/archlinuxhardened/selinux . Thanks!