[rpms/selinux-policy] rawhide: * Thu Aug 27 2026 Zdenek Pytela <zpytela@redhat.com> - 45.15-1

[rpms/selinux-policy] rawhide: * Thu Aug 27 2026 Zdenek Pytela <zpytela@redhat.com> - 45.15-1

[Zdenek Pytela]

            A new commit has been pushed.

            Repo   : rpms/selinux-policy
            Branch : rawhide
            Commit : 2f4bb9f0d4bcaef19fade9802743a3e30b2b58d4
            Author : Zdenek Pytela <zpytela@redhat.com>
            Date   : 2026-08-27T21:47:26+02:00
            Stats  : +16/-4 in 3 file(s)
            URL    : https://src.fedoraproject.org/rpms/selinux-policy/c/2f4bb9f0d4bcaef19fade9802743a3e30b2b58d4?branch=rawhide

            Log:
            * Thu Aug 27 2026 Zdenek Pytela <zpytela@redhat.com> - 45.15-1

- Fix NFS mount with xprtsec=tls / xprtsec=mtls (bsc#1275783)
- Allow ssh_agent_type manage ssh_home_t files and sock_files
- Allow sshd-session manage ssh_home_t socke files
- Allow sshd-session X11 forwarding
- Allow lsmd-plugin read udev pid files
- Allow virtstoraged domain transition on iscsiadm execution
- Revert "Allow virtqemud domain transition on iscsiadm execution"
- Allow rhsmcertd search gconf home data dirs
- Allow rhsmcertd read gconf home files
- Revert "Allow rhsmcertd read gconf home files"

---
diff --git a/changelog b/changelog
index 93728a6..5b76321 100644
--- a/changelog
+++ b/changelog
@@ -1,3 +1,15 @@
+* Thu Aug 27 2026 Zdenek Pytela <zpytela@redhat.com> - 45.15-1
+- Fix NFS mount with xprtsec=tls / xprtsec=mtls (bsc#1275783)
+- Allow ssh_agent_type manage ssh_home_t files and sock_files
+- Allow sshd-session manage ssh_home_t socke files
+- Allow sshd-session X11 forwarding
+- Allow lsmd-plugin read udev pid files
+- Allow virtstoraged domain transition on iscsiadm execution
+- Revert "Allow virtqemud domain transition on iscsiadm execution"
+- Allow rhsmcertd search gconf home data dirs
+- Allow rhsmcertd read gconf home files
+- Revert "Allow rhsmcertd read gconf home files"
+
 * Sat Aug 22 2026 Zdenek Pytela <zpytela@redhat.com> - 45.14-1
 - Label malware-detection-config.yml with insights_client_etc_rw_t
 - Add the files_write_system_conf_files() interface

diff --git a/selinux-policy.spec b/selinux-policy.spec
index d9625a7..d4ca6cf 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -5,7 +5,7 @@
 
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit 17513e8ff71235253b45f5ac2eee88538d1834b6
+%global commit 20502349848410c85d23159a7997ce9c6ec71687
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -19,7 +19,7 @@
 %define STABLEVER 42.10
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 45.14
+Version: 45.15
 Release: 1%{?dist}
 License: GPL-2.0-or-later
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz

diff --git a/sources b/sources
index 47f9e47..d7e2366 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-17513e8.tar.gz) = 28abc1cd0c083b0996bf1f03d00ad5e00341dda1f4e23c0dc3323b3cb4ec3bb074599020328c8a9e94a1e469b280e1e25d9c28e8b0b88d208a1d2bdb7ead5b91
+SHA512 (selinux-policy-2050234.tar.gz) = 2b247d992a9fef2d2d703b236533d665b6cf8a178f902fc406e1cb2a1a029dd43812180ce3927b3932275f01a23a0d6abf3aa59cb699a56f5bee7dfcbd1fadc0
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
-SHA512 (container-selinux.tgz) = abd64c06f4e2852dc60e71220a98a1e5b909fba597c975e3f26c3382bd51697ad6444ba8903b753c0b2fcebb1ad6c5d7ee1ea43953c52b1fb47945ce64d5ee91
+SHA512 (container-selinux.tgz) = 8803c6f93dc59dff35caf640c10eb95cc8bcae809cda9ffdc5940c4778d0390f5fa3929d9ab166a8ca02034046ad2e118a4a0ea38a85486fa0d81dcdcf9dc98a