unclemez<p><span class="h-card" translate="no"><a href="https://fosstodon.org/@opensuse" class="u-url mention">@<span>opensuse</span></a></span> <a href="https://social.vivaldi.net/tags/Tumbleweed" class="mention hashtag" rel="tag">#<span>Tumbleweed</span></a> <br />Review of the week 2025/07</p><p>Dear Tumbleweed users and hackers,</p><p>From an engineering point of view, this week was exciting. Hopefully,<br />you have seen on news.openssue.org that the default LSM has been<br />switched from AppArmor to SELinux for new installations. This has been<br />a long ongoing effort. It took quite some time as we did not just want<br />to release it onto users (as default) before we trusted it to work,<br />with policies that make sense out of the box. There might still be<br />rough edges, and there are almost certainly some policy issues to be<br />uncovered in the next weeks with more workloads running on it.<br />Considering MicroOS and Aeon have been configured with SELinux as their<br />LSM for quite some time, there is also high confidence in this. And<br />bringing MicroOS, Aeon and Tumbleweed closer together makes for easier<br />administrative switching for those distributions, as they all behave<br />equally.</p><p>Of course, that’s not all that changed this week though – we have<br />published 4 snapshots (0206, 0207, 0209, and 0211), bringing you these<br />changes:</p><p> * sssd 2.10.2<br /> * pam_pkcs11 0.6.13: smartcard auth for PAM, CVE fix<br /> * KDE Gear 24.12.2<br /> * KDE Plasma 6.3.0<br /> * SELinux is the default LSM for new installs; AppArmor can still be<br />selected during the installation process...<br />Cheers,<br />---<br /><a href="https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/message/Z4GBJPYANFF4KQ2FL4NKPHNRNMLOCPMG/" target="_blank" rel="nofollow noopener noreferrer" translate="no"><span class="invisible">https://</span><span class="ellipsis">lists.opensuse.org/archives/li</span><span class="invisible">st/factory@lists.opensuse.org/message/Z4GBJPYANFF4KQ2FL4NKPHNRNMLOCPMG/</span></a></p>