[rpms/selinux-policy] rawhide: * Fri Jun 12 2026 Zdenek Pytela <zpytela@redhat.com> - 45.5-1

[rpms/selinux-policy] rawhide: * Fri Jun 12 2026 Zdenek Pytela <zpytela@redhat.com> - 45.5-1

[Zdenek Pytela]

            A new commit has been pushed.

            Repo   : rpms/selinux-policy
            Branch : rawhide
            Commit : a01a7b333e5ba804dd083eee039603621e0759f5
            Author : Zdenek Pytela <zpytela@redhat.com>
            Date   : 2026-06-12T09:17:08+02:00
            Stats  : +19/-4 in 3 file(s)
            URL    : https://src.fedoraproject.org/rpms/selinux-policy/c/a01a7b333e5ba804dd083eee039603621e0759f5?branch=rawhide

            Log:
            * Fri Jun 12 2026 Zdenek Pytela <zpytela@redhat.com> - 45.5-1

- Add anaconda_ioctl_fifo_files_install() and anaconda_write_fifo_files_install()
- Allow install_t domain transition to insights_client_t
- Allow staff user mounton /var/lib dirs
- Allow systemd-coredump signull container runtime
- Allow blueman get the attributes of a tmpfs filesystem
- portage_compile_domain: Require xdm_xserver_tmp_t type
- Add missing interface requirements
- Dontaudit virt_driver_domain execmem
- fixed file after comment from zpytela.
- added caddy related paths.
- Remove extra parameters from interface headers
- Update bootupd policy for running lsblk
- Allow pcscd_t to search cgroup

---
diff --git a/changelog b/changelog
index 5cfdb79..44be58a 100644
--- a/changelog
+++ b/changelog
@@ -1,3 +1,18 @@
+* Fri Jun 12 2026 Zdenek Pytela <zpytela@redhat.com> - 45.5-1
+- Add anaconda_ioctl_fifo_files_install() and anaconda_write_fifo_files_install()
+- Allow install_t domain transition to insights_client_t
+- Allow staff user mounton /var/lib dirs
+- Allow systemd-coredump signull container runtime
+- Allow blueman get the attributes of a tmpfs filesystem
+- portage_compile_domain: Require xdm_xserver_tmp_t type
+- Add missing interface requirements
+- Dontaudit virt_driver_domain execmem
+- fixed file after comment from zpytela.
+- added caddy related paths.
+- Remove extra parameters from interface headers
+- Update bootupd policy for running lsblk
+- Allow pcscd_t to search cgroup
+
 * Thu Jun 04 2026 Zdenek Pytela <zpytela@redhat.com> - 45.4-1
 - Update dbus_role_template() with communication over unix dgram socket
 - Allow staff user read nsfs files

diff --git a/selinux-policy.spec b/selinux-policy.spec
index 0c8cab1..7ba1f19 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -5,7 +5,7 @@
 
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit 443befa43872b63a5c1d7773fca159fda2abf772
+%global commit 37de57d5f0c26ca7b078cca206ac109395be0c08
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -19,7 +19,7 @@
 %define STABLEVER 42.10
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 45.4
+Version: 45.5
 Release: 1%{?dist}
 License: GPL-2.0-or-later
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz

diff --git a/sources b/sources
index 8f478a1..eec85f2 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-443befa.tar.gz) = 05055ad82161331580fd68b6010cea286d3f154d856b6741495581ae7d3b66d9bdfe1e861296c60b197993dc24eff56be9262c55eb536c656c9f74855ac36169
+SHA512 (selinux-policy-37de57d.tar.gz) = f78a9c30b31db0ab541e3c11392271dc5615e7183546849be07f4a9283c4bc2ab29bcbc8e0fa046383f5c88b535fd09f5b40e9c053c8fedac456909477ebed0f
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
-SHA512 (container-selinux.tgz) = f0c9e2de28702cf7e1367b8b2cc5f7512a0aebf3464a50e9fad3e584b1db2320c531d4002aa7ba270ca4ecf7e26ad066195835d987994efedd1fd01c109fa7e7
+SHA512 (container-selinux.tgz) = 83c0cd84149e9b53d3b7ae254ece432c8648dceb734eb865ba43db7e59cd8a8e58a098aad44147e5d536eefd8cd3dda9a1ffeb8cde035fc93d7d005fe6fa2ce8