[rpms/selinux-policy] f43: * Fri Jun 05 2026 Zdenek Pytela <zpytela@redhat.com> - 43.8-1

[rpms/selinux-policy] f43: * Fri Jun 05 2026 Zdenek Pytela <zpytela@redhat.com> - 43.8-1

[Zdenek Pytela]

            A new commit has been pushed.

            Repo   : rpms/selinux-policy
            Branch : f43
            Commit : a2857101b7cb44c5d67f0db896f26c28548ab287
            Author : Zdenek Pytela <zpytela@redhat.com>
            Date   : 2026-06-05T18:33:50+02:00
            Stats  : +13/-5 in 3 file(s)
            URL    : https://src.fedoraproject.org/rpms/selinux-policy/c/a2857101b7cb44c5d67f0db896f26c28548ab287?branch=f43

            Log:
            * Fri Jun 05 2026 Zdenek Pytela <zpytela@redhat.com> - 43.8-1

- Update dbus_role_template() with communication over unix dgram socket
- Allow staff user read nsfs files
- Allow staff user additional sandboxing permissions
- Do not audit iptables attempts to read other process state
- Allow setroubleshoot_fixit_t to touch /.autorelabel and reboot
- Allow systemd-tmpfiles to adjust resource limits

---
diff --git a/changelog b/changelog
index a08a2eb..083b691 100644
--- a/changelog
+++ b/changelog
@@ -1,3 +1,11 @@
+* Fri Jun 05 2026 Zdenek Pytela <zpytela@redhat.com> - 43.8-1
+- Update dbus_role_template() with communication over unix dgram socket
+- Allow staff user read nsfs files
+- Allow staff user additional sandboxing permissions
+- Do not audit iptables attempts to read other process state
+- Allow setroubleshoot_fixit_t to touch /.autorelabel and reboot
+- Allow systemd-tmpfiles to adjust resource limits
+
 * Wed May 20 2026 Rachel Menge <rlmenge@gmail.com> - 43.7-2
 - Remove deprecated checkreqprot tmpfiles write in selinux-policy.conf
 

diff --git a/selinux-policy.spec b/selinux-policy.spec
index 8287d17..0adc926 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -5,7 +5,7 @@
 
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit d150d4f16a30412af5263f596eb0a3db53f91125
+%global commit dd93b381310939d9a9331c7a5388178cd591d8be
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -19,8 +19,8 @@
 %define STABLEVER 42.10
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 43.7
-Release: 2%{?dist}
+Version: 43.8
+Release: 1%{?dist}
 License: GPL-2.0-or-later
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
 Source1: Makefile.devel

diff --git a/sources b/sources
index 892991b..1cc595f 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-d150d4f.tar.gz) = 810b049ea7f1b001c2816f9e95661dc2f4a5c5dac714be9a659c1273ca5089a30e9e90326bbfea0741491ec2a9a018d54cdcb66788159dabb9cdb5e50fe7e60e
+SHA512 (selinux-policy-dd93b38.tar.gz) = 82c921e26301f16c3fd401487b9365f560b440eb9bf9672e4dd48efc45edef4db0b418605e0080dba938873baa256e48b32515996669fec088bd6305430cbb46
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
-SHA512 (container-selinux.tgz) = 16c1380c0ac01179f6228e804caa94649109ea21e327bcf04f0c7a56f39569579b34b267afcf4477c246f1d3580fb7ca61d6ece5c6c4e96b7f2e5c2be3e0d7ac
+SHA512 (container-selinux.tgz) = d11721b0927b0b1c90d9d985b4355341ef791b8a20dbe9c4de6e8d47c143d2ab4168383b67a6fc809fa322c48742110d915fb0cecb8a520b99c529c590105799