[rpms/selinux-policy] rawhide: * Thu Jun 04 2026 Zdenek Pytela <zpytela@redhat.com> - 45.4-1

[rpms/selinux-policy] rawhide: * Thu Jun 04 2026 Zdenek Pytela <zpytela@redhat.com> - 45.4-1

[Zdenek Pytela]

            A new commit has been pushed.

            Repo   : rpms/selinux-policy
            Branch : rawhide
            Commit : b3907c16c815ebc3edd184f857484fe23ee1e526
            Author : Zdenek Pytela <zpytela@redhat.com>
            Date   : 2026-06-04T18:00:59+02:00
            Stats  : +24/-5 in 3 file(s)
            URL    : https://src.fedoraproject.org/rpms/selinux-policy/c/b3907c16c815ebc3edd184f857484fe23ee1e526?branch=rawhide

            Log:
            * Thu Jun 04 2026 Zdenek Pytela <zpytela@redhat.com> - 45.4-1

- Update dbus_role_template() with communication over unix dgram socket
- Allow staff user read nsfs files
- Allow staff user additional sandboxing permissions
- Dontaudit sa-update perfmon and sys_admin capabilities
- packit: Stop notifying martinpitt for Cockpit test failures
- Allow the kernel to execute also special files
- Bring back execmem permission for svirt_tcg_t
- Dontaudit tlp_t requesting dac_read_search (bsc#1265386)
- Leave content of virtqemud_use_execmem empty
- Dontaudit libvirt-daemons execmem
- Allow virtstoraged to setattr fixed disk devices
- Dontaudit ksmtuned dac_read_search and dac_override capabilities
- Remove unused hypervkvp_unit_file_t
- Allow mock create and use its private tmpfs files
- Allow samba-bgqd send to nmbd over a unix datagram socket
- Dontaudit apcupsd dac_override (bsc#1261232)
- Allow virtqemud_t to call and transition into udev

---
diff --git a/changelog b/changelog
index dac8aa1..5cfdb79 100644
--- a/changelog
+++ b/changelog
@@ -1,3 +1,22 @@
+* Thu Jun 04 2026 Zdenek Pytela <zpytela@redhat.com> - 45.4-1
+- Update dbus_role_template() with communication over unix dgram socket
+- Allow staff user read nsfs files
+- Allow staff user additional sandboxing permissions
+- Dontaudit sa-update perfmon and sys_admin capabilities
+- packit: Stop notifying martinpitt for Cockpit test failures
+- Allow the kernel to execute also special files
+- Bring back execmem permission for svirt_tcg_t
+- Dontaudit tlp_t requesting dac_read_search (bsc#1265386)
+- Leave content of virtqemud_use_execmem empty
+- Dontaudit libvirt-daemons execmem
+- Allow virtstoraged to setattr fixed disk devices
+- Dontaudit ksmtuned dac_read_search and dac_override capabilities
+- Remove unused hypervkvp_unit_file_t
+- Allow mock create and use its private tmpfs files
+- Allow samba-bgqd send to nmbd over a unix datagram socket
+- Dontaudit apcupsd dac_override (bsc#1261232)
+- Allow virtqemud_t to call and transition into udev
+
 * Wed May 20 2026 Rachel Menge <rlmenge@gmail.com> - 45.3-2
 - Remove deprecated checkreqprot tmpfiles write in selinux-policy.conf
 

diff --git a/selinux-policy.spec b/selinux-policy.spec
index ddba5e4..0c8cab1 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -5,7 +5,7 @@
 
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit 07f0cb4f38ece8ba3a8cdaab6acf8b469680df99
+%global commit 443befa43872b63a5c1d7773fca159fda2abf772
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -19,8 +19,8 @@
 %define STABLEVER 42.10
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 45.3
-Release: 2%{?dist}
+Version: 45.4
+Release: 1%{?dist}
 License: GPL-2.0-or-later
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
 Source1: Makefile.devel

diff --git a/sources b/sources
index ecb91b4..8f478a1 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-07f0cb4.tar.gz) = a4050229ca9a4e180e8fb61de6b2a4453cb32a86fa5343c7d41c79b101072ee51f21f4665ab37c40e22378d718a75c18462bd30ba8cef749c0a7fdfebd4390bc
+SHA512 (selinux-policy-443befa.tar.gz) = 05055ad82161331580fd68b6010cea286d3f154d856b6741495581ae7d3b66d9bdfe1e861296c60b197993dc24eff56be9262c55eb536c656c9f74855ac36169
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
-SHA512 (container-selinux.tgz) = afaeb70dad8b8e3c145d016489c86ea41905b505c120cd78f75e84024dad661109794b60dca3636ab7c1290fa3bd168c1ace26da8740f808f7fbcfa9625e0958
+SHA512 (container-selinux.tgz) = f0c9e2de28702cf7e1367b8b2cc5f7512a0aebf3464a50e9fad3e584b1db2320c531d4002aa7ba270ca4ecf7e26ad066195835d987994efedd1fd01c109fa7e7