[rpms/selinux-policy] f44: Advertise ownership of DPS-related file paths

[rpms/selinux-policy] f44: Advertise ownership of DPS-related file paths

[Vit Mojzis]

            A new commit has been pushed.

            Repo   : rpms/selinux-policy
            Branch : f44
            Commit : ba39de594be3f4cd81b5a2e6b5a79b259c111d82
            Author : Vit Mojzis <vmojzis@redhat.com>
            Date   : 2026-06-05T21:27:48+02:00
            Stats  : +17/-1 in 2 file(s)
            URL    : https://src.fedoraproject.org/rpms/selinux-policy/c/ba39de594be3f4cd81b5a2e6b5a79b259c111d82?branch=f44

            Log:
            Advertise ownership of DPS-related file paths

No package owned %{_datadir}/selinux/devel/include/distributed/,
or /usr/share/selinux/packages/{targeted,minimum,mls}
which are the recommended paths to place interface files and binary
module files of DSP packages as per:
https://fedoraproject.org/wiki/SELinux/IndependentPolicy#The_%files_Section

Fixes: rhbz#2283755

---
diff --git a/changelog b/changelog
index ec119af..ca08434 100644
--- a/changelog
+++ b/changelog
@@ -1,3 +1,11 @@
+* Wed Apr 08 2026 Vit Mojzis <vmojzis@redhat.com> - 44.2-2
+- Advertise ownership of DPS-related file paths
+- Remove trigger{in|preun} triggers for binsbin and varrun
+- Rebuild policy before running {binsbin|varrun}-convert.sh
+- Use docdir for documentation data directory
+- Move the awk post-requires to the minimum subpackage
+- Fix disabling modules in "%post minimum"
+
 * Fri Jun 05 2026 Zdenek Pytela <zpytela@redhat.com> - 44.2-1
 - Update dbus_role_template() with communication over unix dgram socket
 - Allow staff user read nsfs files

diff --git a/selinux-policy.spec b/selinux-policy.spec
index a13f221..d4b7890 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -20,7 +20,7 @@
 Summary: SELinux policy configuration
 Name: selinux-policy
 Version: 44.2
-Release: 1%{?dist}
+Release: 2%{?dist}
 License: GPL-2.0-or-later
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
 Source1: Makefile.devel
@@ -73,7 +73,13 @@ the policy has been adjusted to provide support for Fedora.
 %{!?_licensedir:%global license %%doc}
 %license COPYING
 %dir %{_datadir}/selinux
+%dir %{_datadir}/selinux/devel
+%dir %{_datadir}/selinux/devel/include
+%dir %{_datadir}/selinux/devel/include/distributed
 %dir %{_datadir}/selinux/packages
+%dir %{_datadir}/selinux/packages/minimum
+%dir %{_datadir}/selinux/packages/mls
+%dir %{_datadir}/selinux/packages/targeted
 %dir %{_sysconfdir}/selinux
 %ghost %config(noreplace) %{_sysconfdir}/selinux/config
 %ghost %{_sysconfdir}/sysconfig/selinux
@@ -429,6 +435,7 @@ mkdir -p %{buildroot}%{_datadir}/selinux/{targeted,mls,minimum,modules}/
 mkdir -p %{buildroot}%{_sharedstatedir}/selinux/{targeted,mls,minimum,modules}/
 
 mkdir -p %{buildroot}%{_datadir}/selinux/packages
+mkdir -p %{buildroot}%{_datadir}/selinux/packages/{targeted,mls,minimum}/
 
 mkdir -p %{buildroot}%{_sysconfdir}/dnf/protected.d/
 
@@ -479,6 +486,7 @@ make %common_params UNK_PERMS=allow NAME=targeted TYPE=mcs DESTDIR=%{buildroot} 
 make %common_params UNK_PERMS=allow NAME=targeted TYPE=mcs DESTDIR=%{buildroot} PKGNAME=%{name} install-headers
 mkdir %{buildroot}%{_datadir}/selinux/devel/
 mv %{buildroot}%{_datadir}/selinux/targeted/include %{buildroot}%{_datadir}/selinux/devel/include
+mkdir %{buildroot}%{_datadir}/selinux/devel/include/distributed/
 install -p -m 644 %{SOURCE1} %{buildroot}%{_datadir}/selinux/devel/Makefile
 install -p -m 644 doc/example.* %{buildroot}%{_datadir}/selinux/devel/
 install -p -m 644 doc/policy.* %{buildroot}%{_datadir}/selinux/devel/