[rpms/selinux-policy] f44: * Thu Aug 27 2026 Zdenek Pytela <zpytela@redhat.com> - 44.8-1

[rpms/selinux-policy] f44: * Thu Aug 27 2026 Zdenek Pytela <zpytela@redhat.com> - 44.8-1

[Zdenek Pytela]

            A new commit has been pushed.

            Repo   : rpms/selinux-policy
            Branch : f44
            Commit : dfe96106c83b40dd24b3b97d2edcbc7550311a82
            Author : Zdenek Pytela <zpytela@redhat.com>
            Date   : 2026-08-27T21:33:32+02:00
            Stats  : +15/-19 in 3 file(s)
            URL    : https://src.fedoraproject.org/rpms/selinux-policy/c/dfe96106c83b40dd24b3b97d2edcbc7550311a82?branch=f44

            Log:
            * Thu Aug 27 2026 Zdenek Pytela <zpytela@redhat.com> - 44.8-1

- Allow ssh_agent_type manage ssh_home_t files and sock_files
- Allow sshd-session manage ssh_home_t socke files
- Allow sshd-session X11 forwarding
- Update the ssh_server_template() template
- Add rules for sshd vsock socket read/write
- Allow local login and sshd-session signull cockpit-session
- Allow staff user ioctl cockpit-session stream sockets
- Allow sshd_session_t dyntransition to sftpd_t

---
diff --git a/changelog b/changelog
index 9f2f947..01c7c52 100644
--- a/changelog
+++ b/changelog
@@ -1,3 +1,13 @@
+* Thu Aug 27 2026 Zdenek Pytela <zpytela@redhat.com> - 44.8-1
+- Allow ssh_agent_type manage ssh_home_t files and sock_files
+- Allow sshd-session manage ssh_home_t socke files
+- Allow sshd-session X11 forwarding
+- Update the ssh_server_template() template
+- Add rules for sshd vsock socket read/write
+- Allow local login and sshd-session signull cockpit-session
+- Allow staff user ioctl cockpit-session stream sockets
+- Allow sshd_session_t dyntransition to sftpd_t
+
 * Sat Aug 22 2026 Zdenek Pytela <zpytela@redhat.com> - 44.7-1
 - Update qatlib policy
 - Allow rhsmcertd read the file_contexts files
@@ -16,21 +26,7 @@
 - Dontaudit tlp_t dac_override (bsc#1272935)
 
 * Fri Aug 14 2026 Zdenek Pytela <zpytela@redhat.com> - 44.6-1
-- Update qatlib policy
-- Allow rhsmcertd read the file_contexts files
-- rhsmcertd: allow bootc/ostree transient package persistence detection
-- Allow virtproxyd connect to systemd-homed over a unix stream socket
-- Allow haveged (entropyd_t)  create and use its private tmpfs files
-- Remove permissive setting for sshd_auth_t and sshd_session_t
-- Allow system_mail_t read procmail home content
-- Add bcachefs as a SELinux capable filesystem
-- Allow unconfined_service_t nnp_transition to container_runtime_t
-- Allow bootupd read all passwd sources
-- Allow mpd dbus chat with avahi
-- Allow init_t nnp domain transition to mpd_t
-- Update tuned-ppd policy
-- Allow all domains to use inherited sshd-session pipes
-- Dontaudit tlp_t dac_override (bsc#1272935)
+- Rebuild
 
 * Fri Jul 24 2026 Zdenek Pytela <zpytela@redhat.com> - 44.5-1
 - Allow wireguard read cgroup files

diff --git a/selinux-policy.spec b/selinux-policy.spec
index 991d03e..c3bda33 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -5,7 +5,7 @@
 
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit 5daa6a3745d3c56e6a46f51dca98784281b1381c
+%global commit 890df55eae6df1456266c3efeae4f230df978300
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -19,7 +19,7 @@
 %define STABLEVER 42.10
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 44.7
+Version: 44.8
 Release: 1%{?dist}
 License: GPL-2.0-or-later
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz

diff --git a/sources b/sources
index aff3f91..167162b 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-5daa6a3.tar.gz) = 8e4d3b9513fe401ac72f756f0010fbd6ccb05da5023873b33854143917dad6419d7cd4a2ded31cfffcfb926c0747b0db55271b02c4f3797afc3305ca056bcbcb
+SHA512 (selinux-policy-890df55.tar.gz) = d7c064139bdd9fb08583339f2c127d2aa39ba3a4a82a1821274c38d78d14a6f93107bcf72b441736694beaa04130d0cb79143189b8f178deb37a4325a3f17290
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
-SHA512 (container-selinux.tgz) = 4a37b387e86c0941cc71024bddd3700524a685bd8efd59e736a51e58d4d475c3f314f50e22d731ba0c62b05dda5117e33993e3dc496c549c1712c1072a3b560b
+SHA512 (container-selinux.tgz) = c2199e4300829b187d0438317d868b32209bc2cf2c0d7beeaafc495626aed72a1c9be849a8f1420f3a50136d69e13518dee5c0fe49e4aa061744bdd9def7e6e1