[rpms/selinux-policy] rawhide: * Tue Jun 30 2026 Zdenek Pytela <zpytela@redhat.com> - 45.8-1

[rpms/selinux-policy] rawhide: * Tue Jun 30 2026 Zdenek Pytela <zpytela@redhat.com> - 45.8-1

[Zdenek Pytela]

            A new commit has been pushed.

            Repo   : rpms/selinux-policy
            Branch : rawhide
            Commit : e99e1605c206e890f7f50ccdaa93e6380f677422
            Author : Zdenek Pytela <zpytela@redhat.com>
            Date   : 2026-06-30T16:38:38+02:00
            Stats  : +10/-4 in 3 file(s)
            URL    : https://src.fedoraproject.org/rpms/selinux-policy/c/e99e1605c206e890f7f50ccdaa93e6380f677422?branch=rawhide

            Log:
            * Tue Jun 30 2026 Zdenek Pytela <zpytela@redhat.com> - 45.8-1

- Include key_socket in socket_class_set
- Remove 14 permissive domains
- ci: Run cockpit-machines tests in PRs
- Remove the lockdown class from the policy

---
diff --git a/changelog b/changelog
index fe7e921..0c5a311 100644
--- a/changelog
+++ b/changelog
@@ -1,3 +1,9 @@
+* Tue Jun 30 2026 Zdenek Pytela <zpytela@redhat.com> - 45.8-1
+- Include key_socket in socket_class_set
+- Remove 14 permissive domains
+- ci: Run cockpit-machines tests in PRs
+- Remove the lockdown class from the policy
+
 * Fri Jun 26 2026 Zdenek Pytela <zpytela@redhat.com> - 45.7-1
 - Allow systemd-logind the sys_ptrace capability in the user namespace
 - Allow systemd-sleep the perfmon capability

diff --git a/selinux-policy.spec b/selinux-policy.spec
index 3d96e9b..4757c75 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -5,7 +5,7 @@
 
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit c7eaaf20b122eaf7241419c8071f499d42346fce
+%global commit 3cf2aa66a844ba5e87fb2a8f04be08c62cf5538a
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -19,7 +19,7 @@
 %define STABLEVER 42.10
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 45.7
+Version: 45.8
 Release: 1%{?dist}
 License: GPL-2.0-or-later
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz

diff --git a/sources b/sources
index 6d9127e..33ebc70 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-c7eaaf2.tar.gz) = cd551f57d4b2c300f34b30f57369f997f7b1bb4cebb0b1a0b4d1e1440c5a52ea7928bf0e4ceb1674b64cad804484f893624621a82366e4e653cb5da566364079
+SHA512 (selinux-policy-3cf2aa6.tar.gz) = 5670fdbdfcd6a0cfef2f5c39e9c365c46a74533b1d3c50d2259633a9be79762a13e35d7ec7ff5989bb2bcdad15bc94a8f6f364963c8923e6a81cbb9214dddb85
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
-SHA512 (container-selinux.tgz) = f6398382e70f290a3be84c0804245236a297e1865fd596d4cb19ccd06c6a2be8755b4ffb8e9aa2002a7c0c3a7a171d0e286a3613efe0f43efb6b89609b01ec02
+SHA512 (container-selinux.tgz) = 9e5b229fa87c2cb106bc87095ee286b49fa956baf3ff5b6296baaeb9e98ddaa2d0c65a68dc79b305964dcd580f885a76fdeb24aa0c2542fafa262753be9129b1