[rpms/selinux-policy] rawhide: * Thu Aug 20 2026 Zdenek Pytela <zpytela@redhat.com> - 45.13-1

[rpms/selinux-policy] rawhide: * Thu Aug 20 2026 Zdenek Pytela <zpytela@redhat.com> - 45.13-1

[Zdenek Pytela]

            A new commit has been pushed.

            Repo   : rpms/selinux-policy
            Branch : rawhide
            Commit : 4fc127f2a413d56fa20f13f90fba5bbf30ead335
            Author : Zdenek Pytela <zpytela@redhat.com>
            Date   : 2026-08-20T09:32:20+02:00
            Stats  : +18/-6 in 3 file(s)
            URL    : https://src.fedoraproject.org/rpms/selinux-policy/c/4fc127f2a413d56fa20f13f90fba5bbf30ead335?branch=rawhide

            Log:
            * Thu Aug 20 2026 Zdenek Pytela <zpytela@redhat.com> - 45.13-1

- Allow namespace_init_t execute generic programs in bin directories
- Update the ssh_server_template() template
- Add rules for sshd vsock socket read/write
- Allow dhcpc hook query the chronyd service
- Allow insights-client read gconf home files
- Allow login_userdomain mount, remount, unmount all mount points
- Allow login_userdomain mount on all mount points
- Revert "Allow userdomain get attributes of files on an nsfs filesystem"
- Allow accountsd create and use its private tmpfs files
- Add the anaconda_read_state_install() interface

---
diff --git a/changelog b/changelog
index 8680786..5fa7df5 100644
--- a/changelog
+++ b/changelog
@@ -1,4 +1,16 @@
-* Fri Aug 14 2026 Zdenek Pytela <zpytela@redhat.com>
+* Thu Aug 20 2026 Zdenek Pytela <zpytela@redhat.com> - 45.13-1
+- Allow namespace_init_t execute generic programs in bin directories
+- Update the ssh_server_template() template
+- Add rules for sshd vsock socket read/write
+- Allow dhcpc hook query the chronyd service
+- Allow insights-client read gconf home files
+- Allow login_userdomain mount, remount, unmount all mount points
+- Allow login_userdomain mount on all mount points
+- Revert "Allow userdomain get attributes of files on an nsfs filesystem"
+- Allow accountsd create and use its private tmpfs files
+- Add the anaconda_read_state_install() interface
+
+* Fri Aug 14 2026 Zdenek Pytela <zpytela@redhat.com> - 45.12-1
 - Update qatlib policy
 - Allow rhsmcertd read the file_contexts files
 - rhsmcertd: allow bootc/ostree transient package persistence detection
@@ -10,7 +22,7 @@
 - Add the files_write_system_conf_files() interface
 - Allow haveged (entropyd_t)  create and use its private tmpfs files
 
-* Wed Aug 05 2026 Zdenek Pytela <zpytela@redhat.com>
+* Wed Aug 05 2026 Zdenek Pytela <zpytela@redhat.com> - 45.11-1
 - Allow ctdbd manage access to Samba PID directories
 - Allow rhsmcertd read selinux config and default file contexts
 - Allow staff_t and user_t execute udev without a domain transition

diff --git a/selinux-policy.spec b/selinux-policy.spec
index a806136..1a77fa8 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -5,7 +5,7 @@
 
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit cc4133c4b4fc1a52675bdc292652aec8fd4bec53
+%global commit 40c9f201af88f744f3246cd613a5cd6a01aad800
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -19,7 +19,7 @@
 %define STABLEVER 42.10
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 45.12
+Version: 45.13
 Release: 1%{?dist}
 License: GPL-2.0-or-later
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz

diff --git a/sources b/sources
index ff67882..196bc6d 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-cc4133c.tar.gz) = e34f039697e7d1e343eccff1b2423a91c7a89326c691a21681ed393b996ee7dc31bd0534e7dfa7a6bf9b5d2453b3bbb1532153f406ed2a575807993093ad480b
+SHA512 (selinux-policy-40c9f20.tar.gz) = 218b3e737abf8ba4a11ac07fad2e713cbf5cea80274370221be9061ad70e3acd981d99c65efa984425ebb53b7b1f210b5acdf7160c1df9b8ee3e1e0b03980820
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
-SHA512 (container-selinux.tgz) = b96333286a8ccd82e6bd69e2a3361de2be238389eb7c222bda09e02779025109d1c5f121d75ec6c9f4d22fe2ee9e81e55d74c2db670117ab9fa25e2d73b3ef00
+SHA512 (container-selinux.tgz) = 9c41d4d2e3b93a97fd615e4f1df5046a09cd1c282e0874c892c48267679b00b4284fe24d14e7870639e7dfe2e962630cff316fdbdaed1868aeb1e84245ffd87e