[rpms/selinux-policy] rawhide: * Wed Aug 05 2026 Zdenek Pytela <zpytela@redhat.com> - 45.11-1

[Zdenek Pytela <zpytela@redhat.com>]

            A new commit has been pushed.

            Repo   : rpms/selinux-policy
            Branch : rawhide
            Commit : 35bd0082928df8ad047d9bfdb6d38bfe7803074e
            Author : Zdenek Pytela <zpytela@redhat.com>
            Date   : 2026-08-05T13:46:27+02:00
            Stats  : +22/-4 in 3 file(s)
            URL    : https://src.fedoraproject.org/rpms/selinux-policy/c/35bd0082928df8ad047d9bfdb6d38bfe7803074e?branch=rawhide

            Log:
            * Wed Aug 05 2026 Zdenek Pytela <zpytela@redhat.com> - 45.11-1

- Allow ctdbd manage access to Samba PID directories
- Allow rhsmcertd read selinux config and default file contexts
- Allow staff_t and user_t execute udev without a domain transition
- Allow mpd dbus chat with avahi
- Allow init_t nnp domain transition to mpd_t
- Update tuned-ppd policy
- Update policy for virsh_ssh_t to help with live migration
- Update sysadm policy for encrypted volumes usage
- Allow bootupd read all passwd sources
- Allow local login and sshd-session signull cockpit-session
- Allow sysadm_t read/write kvm devices
- Allow sysadm user run fail2ban-client
- Add 2 interfaces helping to handle cloud-what cache files
- Allow all domains to use inherited sshd-session pipes
- Dontaudit tlp_t dac_override (bsc#1272935)
- Use NetworkManager_t instead of networkmanager_t

---
diff --git a/changelog b/changelog
index b54c6bb..682c79e 100644
--- a/changelog
+++ b/changelog
@@ -1,3 +1,21 @@
+* Wed Aug 05 2026 Zdenek Pytela <zpytela@redhat.com>
+- Allow ctdbd manage access to Samba PID directories
+- Allow rhsmcertd read selinux config and default file contexts
+- Allow staff_t and user_t execute udev without a domain transition
+- Allow mpd dbus chat with avahi
+- Allow init_t nnp domain transition to mpd_t
+- Update tuned-ppd policy
+- Update policy for virsh_ssh_t to help with live migration
+- Update sysadm policy for encrypted volumes usage
+- Allow bootupd read all passwd sources
+- Allow local login and sshd-session signull cockpit-session
+- Allow sysadm_t read/write kvm devices
+- Allow sysadm user run fail2ban-client
+- Add 2 interfaces helping to handle cloud-what cache files
+- Allow all domains to use inherited sshd-session pipes
+- Dontaudit tlp_t dac_override (bsc#1272935)
+- Use NetworkManager_t instead of networkmanager_t
+
 * Fri Jul 24 2026 Zdenek Pytela <zpytela@redhat.com> - 45.10-1
 - Changes adapting to bind packages with suffixes
 - Dontaudit unconfined_t map its private directories

diff --git a/selinux-policy.spec b/selinux-policy.spec
index e101793..3ebce55 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -5,7 +5,7 @@
 
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit a6cb5e7368c729688512249c9d6ca77f2ca28a89
+%global commit 1251f736a15ec7dc48df69dc404f6dc1656a80aa
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -19,7 +19,7 @@
 %define STABLEVER 42.10
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 45.10
+Version: 45.11
 Release: 1%{?dist}
 License: GPL-2.0-or-later
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz

diff --git a/sources b/sources
index b5a9f05..18bdac5 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-a6cb5e7.tar.gz) = 5617b97155c44a39d911975259e8561c12d91649b407f6d916a73d329562436a95ce5feb737e7f337d453555f7f4f0502cbf6ba2d9cf8b67a94a8e9eab083126
-SHA512 (container-selinux.tgz) = a9994040d1a74d1cf2bce07204f19685ba6d9c8f48b805aca7bb89ccffaeb1dc089c459fc0f8b7303c7501b481076dd85a16e94786b9fdca70424c83c331f304
+SHA512 (selinux-policy-1251f73.tar.gz) = f53334d855ac67cbfa79cfdb42b2d394903b52e8597080a9de8f1aa33ff0689cfb8d6a832e9c93fb1c3697b86180ac595fd74692fda633e03da70d23c51a477d
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
+SHA512 (container-selinux.tgz) = 7846cca520dc04afd3e2ef29130cb9d4efefb8e2555566f13411803ee8ea6672bfaf4133d06d48d8bdae8bbce28be390f927763317430977e2bf10324474bf5b