[rpms/selinux-policy] rawhide: * Fri Aug 14 2026 Zdenek Pytela <zpytela@redhat.com>

[rpms/selinux-policy] rawhide: * Fri Aug 14 2026 Zdenek Pytela <zpytela@redhat.com>

[Zdenek Pytela]

            A new commit has been pushed.

            Repo   : rpms/selinux-policy
            Branch : rawhide
            Commit : fac6f236a1195b7ec01761afc2f746a9908cb347
            Author : Zdenek Pytela <zpytela@redhat.com>
            Date   : 2026-08-14T20:19:50+02:00
            Stats  : +16/-4 in 3 file(s)
            URL    : https://src.fedoraproject.org/rpms/selinux-policy/c/fac6f236a1195b7ec01761afc2f746a9908cb347?branch=rawhide

            Log:
            * Fri Aug 14 2026 Zdenek Pytela <zpytela@redhat.com>

- Update qatlib policy
- Allow rhsmcertd read the file_contexts files
- rhsmcertd: allow bootc/ostree transient package persistence detection
- Allow virtproxyd connect to systemd-homed over a unix stream socket
- Allow system_mail_t read procmail home content
- Label malware-detection-config.yml with insights_client_etc_rw_t
- Add bcachefs as a SELinux capable filesystem
- Allow unconfined_service_t nnp_transition to container_runtime_t
- Add the files_write_system_conf_files() interface
- Allow haveged (entropyd_t)  create and use its private tmpfs files

---
diff --git a/changelog b/changelog
index 682c79e..8680786 100644
--- a/changelog
+++ b/changelog
@@ -1,3 +1,15 @@
+* Fri Aug 14 2026 Zdenek Pytela <zpytela@redhat.com>
+- Update qatlib policy
+- Allow rhsmcertd read the file_contexts files
+- rhsmcertd: allow bootc/ostree transient package persistence detection
+- Allow virtproxyd connect to systemd-homed over a unix stream socket
+- Allow system_mail_t read procmail home content
+- Label malware-detection-config.yml with insights_client_etc_rw_t
+- Add bcachefs as a SELinux capable filesystem
+- Allow unconfined_service_t nnp_transition to container_runtime_t
+- Add the files_write_system_conf_files() interface
+- Allow haveged (entropyd_t)  create and use its private tmpfs files
+
 * Wed Aug 05 2026 Zdenek Pytela <zpytela@redhat.com>
 - Allow ctdbd manage access to Samba PID directories
 - Allow rhsmcertd read selinux config and default file contexts

diff --git a/selinux-policy.spec b/selinux-policy.spec
index 3ebce55..a806136 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -5,7 +5,7 @@
 
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit 1251f736a15ec7dc48df69dc404f6dc1656a80aa
+%global commit cc4133c4b4fc1a52675bdc292652aec8fd4bec53
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -19,7 +19,7 @@
 %define STABLEVER 42.10
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 45.11
+Version: 45.12
 Release: 1%{?dist}
 License: GPL-2.0-or-later
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz

diff --git a/sources b/sources
index 18bdac5..ff67882 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-1251f73.tar.gz) = f53334d855ac67cbfa79cfdb42b2d394903b52e8597080a9de8f1aa33ff0689cfb8d6a832e9c93fb1c3697b86180ac595fd74692fda633e03da70d23c51a477d
+SHA512 (selinux-policy-cc4133c.tar.gz) = e34f039697e7d1e343eccff1b2423a91c7a89326c691a21681ed393b996ee7dc31bd0534e7dfa7a6bf9b5d2453b3bbb1532153f406ed2a575807993093ad480b
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
-SHA512 (container-selinux.tgz) = 7846cca520dc04afd3e2ef29130cb9d4efefb8e2555566f13411803ee8ea6672bfaf4133d06d48d8bdae8bbce28be390f927763317430977e2bf10324474bf5b
+SHA512 (container-selinux.tgz) = b96333286a8ccd82e6bd69e2a3361de2be238389eb7c222bda09e02779025109d1c5f121d75ec6c9f4d22fe2ee9e81e55d74c2db670117ab9fa25e2d73b3ef00