[rpms/selinux-policy] f44: * Sat Aug 22 2026 Zdenek Pytela <zpytela@redhat.com> - 44.7-1

[Zdenek Pytela <zpytela@redhat.com>]

            A new commit has been pushed.

            Repo   : rpms/selinux-policy
            Branch : f44
            Commit : 081efef5171b32a218e93807b67a505aaf08de79
            Author : Zdenek Pytela <zpytela@redhat.com>
            Date   : 2026-08-22T21:55:01+02:00
            Stats  : +21/-4 in 3 file(s)
            URL    : https://src.fedoraproject.org/rpms/selinux-policy/c/081efef5171b32a218e93807b67a505aaf08de79?branch=f44

            Log:
            * Sat Aug 22 2026 Zdenek Pytela <zpytela@redhat.com> - 44.7-1

- Update qatlib policy
- Allow rhsmcertd read the file_contexts files
- rhsmcertd: allow bootc/ostree transient package persistence detection
- Allow virtproxyd connect to systemd-homed over a unix stream socket
- Allow haveged (entropyd_t)  create and use its private tmpfs files
- Remove permissive setting for sshd_auth_t and sshd_session_t
- Allow system_mail_t read procmail home content
- Add bcachefs as a SELinux capable filesystem
- Allow unconfined_service_t nnp_transition to container_runtime_t
- Allow bootupd read all passwd sources
- Allow mpd dbus chat with avahi
- Allow init_t nnp domain transition to mpd_t
- Update tuned-ppd policy
- Allow all domains to use inherited sshd-session pipes
- Dontaudit tlp_t dac_override (bsc#1272935)

---
diff --git a/changelog b/changelog
index d34249f..9f2f947 100644
--- a/changelog
+++ b/changelog
@@ -1,3 +1,20 @@
+* Sat Aug 22 2026 Zdenek Pytela <zpytela@redhat.com> - 44.7-1
+- Update qatlib policy
+- Allow rhsmcertd read the file_contexts files
+- rhsmcertd: allow bootc/ostree transient package persistence detection
+- Allow virtproxyd connect to systemd-homed over a unix stream socket
+- Allow haveged (entropyd_t)  create and use its private tmpfs files
+- Remove permissive setting for sshd_auth_t and sshd_session_t
+- Allow system_mail_t read procmail home content
+- Add bcachefs as a SELinux capable filesystem
+- Allow unconfined_service_t nnp_transition to container_runtime_t
+- Allow bootupd read all passwd sources
+- Allow mpd dbus chat with avahi
+- Allow init_t nnp domain transition to mpd_t
+- Update tuned-ppd policy
+- Allow all domains to use inherited sshd-session pipes
+- Dontaudit tlp_t dac_override (bsc#1272935)
+
 * Fri Aug 14 2026 Zdenek Pytela <zpytela@redhat.com> - 44.6-1
 - Update qatlib policy
 - Allow rhsmcertd read the file_contexts files

diff --git a/selinux-policy.spec b/selinux-policy.spec
index 7f50e88..991d03e 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -5,7 +5,7 @@
 
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit 204e13ca93cc8cee9c66c279022c29ce14571c51
+%global commit 5daa6a3745d3c56e6a46f51dca98784281b1381c
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -19,7 +19,7 @@
 %define STABLEVER 42.10
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 44.6
+Version: 44.7
 Release: 1%{?dist}
 License: GPL-2.0-or-later
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz

diff --git a/sources b/sources
index b0f6053..aff3f91 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-204e13c.tar.gz) = ddec55f27ad8b80d441a535b8d84f8f3174be706642579a78f5669ef8ccd3cb4855d586048a2869edd48021aa1829ac536021cc6678833e3e04a76f44cd062a0
+SHA512 (selinux-policy-5daa6a3.tar.gz) = 8e4d3b9513fe401ac72f756f0010fbd6ccb05da5023873b33854143917dad6419d7cd4a2ded31cfffcfb926c0747b0db55271b02c4f3797afc3305ca056bcbcb
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
-SHA512 (container-selinux.tgz) = e605994fca5ac59125981ad59ba76a322a646a87304f69d094d701cee3a311a23863a4bdf1fd3e5a55edfbae8977460774a06e8b8c1930879b1a349d15529f96
+SHA512 (container-selinux.tgz) = 4a37b387e86c0941cc71024bddd3700524a685bd8efd59e736a51e58d4d475c3f314f50e22d731ba0c62b05dda5117e33993e3dc496c549c1712c1072a3b560b