[rpms/selinux-policy] f45: * Sat Aug 22 2026 Zdenek Pytela <zpytela@redhat.com> - 45.14-1

[Zdenek Pytela <zpytela@redhat.com>]

            A new commit has been pushed.

            Repo   : rpms/selinux-policy
            Branch : f45
            Commit : a77bb045f3e1a5b7b8cfd9fc3da5aa90bb14a76d
            Author : Zdenek Pytela <zpytela@redhat.com>
            Date   : 2026-08-22T10:50:46+02:00
            Stats  : +30/-4 in 3 file(s)
            URL    : https://src.fedoraproject.org/rpms/selinux-policy/c/a77bb045f3e1a5b7b8cfd9fc3da5aa90bb14a76d?branch=f45

            Log:
            * Sat Aug 22 2026 Zdenek Pytela <zpytela@redhat.com> - 45.14-1

- Label malware-detection-config.yml with insights_client_etc_rw_t
- Add the files_write_system_conf_files() interface
- Allow bluez dbus api pass sockets over dbus
- Support sandboxing features for sysadm_t
- Update dhcpc-hook policy
- Allow dhcpc hook query the chronyd service
- Support gnome-remote-desktop's smartcard redirection support
- Allow gnome-remote-desktop read sssd public files
- Allow gnome-remote-desktop connect to unreserved ports
- Allow gnome-remote-desktop speak with tabrmd over dbus (bsc#1244573)
- Label /run/audit with auditd_var_run_t
- Allow auditd manage its private run dirs
- Allow virtqemud relabelfrom its private fifo files
- Update the ssh_server_template() template
- Add rules for sshd vsock socket read/write
- Allow sshd-auth/sshd-session get attributes of their sshd parent
- Allow qatlib manage hugetlbfs directories
- Allow sanlock the sys_admin capability
- Allow lsmd-plugin use libStorageMgmt to provision storage
- Allow insights-client read gconf home files
- rhsmcertd: allow bootc/ostree transient package persistence detection
- Allow rhsmcertd read the file_contexts files
- Allow rhsmcertd read selinux config and default file contexts
- Use NetworkManager_t instead of networkmanager_t

---
diff --git a/changelog b/changelog
index 5fa7df5..93728a6 100644
--- a/changelog
+++ b/changelog
@@ -1,3 +1,29 @@
+* Sat Aug 22 2026 Zdenek Pytela <zpytela@redhat.com> - 45.14-1
+- Label malware-detection-config.yml with insights_client_etc_rw_t
+- Add the files_write_system_conf_files() interface
+- Allow bluez dbus api pass sockets over dbus
+- Support sandboxing features for sysadm_t
+- Update dhcpc-hook policy
+- Allow dhcpc hook query the chronyd service
+- Support gnome-remote-desktop's smartcard redirection support
+- Allow gnome-remote-desktop read sssd public files
+- Allow gnome-remote-desktop connect to unreserved ports
+- Allow gnome-remote-desktop speak with tabrmd over dbus (bsc#1244573)
+- Label /run/audit with auditd_var_run_t
+- Allow auditd manage its private run dirs
+- Allow virtqemud relabelfrom its private fifo files
+- Update the ssh_server_template() template
+- Add rules for sshd vsock socket read/write
+- Allow sshd-auth/sshd-session get attributes of their sshd parent
+- Allow qatlib manage hugetlbfs directories
+- Allow sanlock the sys_admin capability
+- Allow lsmd-plugin use libStorageMgmt to provision storage
+- Allow insights-client read gconf home files
+- rhsmcertd: allow bootc/ostree transient package persistence detection
+- Allow rhsmcertd read the file_contexts files
+- Allow rhsmcertd read selinux config and default file contexts
+- Use NetworkManager_t instead of networkmanager_t
+
 * Thu Aug 20 2026 Zdenek Pytela <zpytela@redhat.com> - 45.13-1
 - Allow namespace_init_t execute generic programs in bin directories
 - Update the ssh_server_template() template

diff --git a/selinux-policy.spec b/selinux-policy.spec
index 1a77fa8..d9625a7 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -5,7 +5,7 @@
 
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit 40c9f201af88f744f3246cd613a5cd6a01aad800
+%global commit 17513e8ff71235253b45f5ac2eee88538d1834b6
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -19,7 +19,7 @@
 %define STABLEVER 42.10
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 45.13
+Version: 45.14
 Release: 1%{?dist}
 License: GPL-2.0-or-later
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz

diff --git a/sources b/sources
index 196bc6d..47f9e47 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-40c9f20.tar.gz) = 218b3e737abf8ba4a11ac07fad2e713cbf5cea80274370221be9061ad70e3acd981d99c65efa984425ebb53b7b1f210b5acdf7160c1df9b8ee3e1e0b03980820
+SHA512 (selinux-policy-17513e8.tar.gz) = 28abc1cd0c083b0996bf1f03d00ad5e00341dda1f4e23c0dc3323b3cb4ec3bb074599020328c8a9e94a1e469b280e1e25d9c28e8b0b88d208a1d2bdb7ead5b91
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
-SHA512 (container-selinux.tgz) = 9c41d4d2e3b93a97fd615e4f1df5046a09cd1c282e0874c892c48267679b00b4284fe24d14e7870639e7dfe2e962630cff316fdbdaed1868aeb1e84245ffd87e
+SHA512 (container-selinux.tgz) = abd64c06f4e2852dc60e71220a98a1e5b909fba597c975e3f26c3382bd51697ad6444ba8903b753c0b2fcebb1ad6c5d7ee1ea43953c52b1fb47945ce64d5ee91