[rpms/selinux-policy] rawhide: * Fri Sep 11 2026 Zdenek Pytela <zpytela@redhat.com> - 45.17-1

[rpms/selinux-policy] rawhide: * Fri Sep 11 2026 Zdenek Pytela <zpytela@redhat.com> - 45.17-1

[Zdenek Pytela]

            A new commit has been pushed.

            Repo   : rpms/selinux-policy
            Branch : rawhide
            Commit : ea7860f9986507d713004c14d65d8698a579a9c5
            Author : Zdenek Pytela <zpytela@redhat.com>
            Date   : 2026-09-11T14:23:28+02:00
            Stats  : +24/-4 in 3 file(s)
            URL    : https://src.fedoraproject.org/rpms/selinux-policy/c/ea7860f9986507d713004c14d65d8698a579a9c5?branch=rawhide

            Log:
            * Fri Sep 11 2026 Zdenek Pytela <zpytela@redhat.com> - 45.17-1

- Fix corrupted formatting in files.if
- Allow nsswitch_domain connect to read xdm pid socket files
- nsresourced fixes for mkosi (bsc#1279902)
- Allow sshd-session connect to gnome remote desktop port
- Allow sshd-session to connect to all generic ports
- Allow sshd-session connect to port 443/tcp (http_port_t)
- Allow sshd-session connect to tcp/22 (ssh_port_t)
- Allow rsync to getattr pipes and sockes if rsync_export_all_ro is set (bsc#1279051)
- Introduce files_getattr_non_auth_sockets
- Introduce files_getattr_non_auth_pipes interface
- Allow rsync to read var_t (bsc#1279565)
- Update udev_manage_pid_files() to include symlinks read
- Support vfs_snapper to work with samba_share_t (bsc#1265400)
- vfs_samba uses dbus to communicate with snapper (bsc#1265400)
- fix NetworkManager dnsmasq-forwarders.conf labeling (bsc#1260038)
- Allow cupsd_t to communicate with fprintd via dbus (bsc#1268366)
- Allow kmscon read cocpit's pid files
- fix vpnc_t setpgid permission for openconnect (bsc#1272934)

---
diff --git a/changelog b/changelog
index 7d84c35..441fe02 100644
--- a/changelog
+++ b/changelog
@@ -1,3 +1,23 @@
+* Fri Sep 11 2026 Zdenek Pytela <zpytela@redhat.com> - 45.17-1
+- Fix corrupted formatting in files.if
+- Allow nsswitch_domain connect to read xdm pid socket files
+- nsresourced fixes for mkosi (bsc#1279902)
+- Allow sshd-session connect to gnome remote desktop port
+- Allow sshd-session to connect to all generic ports
+- Allow sshd-session connect to port 443/tcp (http_port_t)
+- Allow sshd-session connect to tcp/22 (ssh_port_t)
+- Allow rsync to getattr pipes and sockes if rsync_export_all_ro is set (bsc#1279051)
+- Introduce files_getattr_non_auth_sockets
+- Introduce files_getattr_non_auth_pipes interface
+- Allow rsync to read var_t (bsc#1279565)
+- Update udev_manage_pid_files() to include symlinks read
+- Support vfs_snapper to work with samba_share_t (bsc#1265400)
+- vfs_samba uses dbus to communicate with snapper (bsc#1265400)
+- fix NetworkManager dnsmasq-forwarders.conf labeling (bsc#1260038)
+- Allow cupsd_t to communicate with fprintd via dbus (bsc#1268366)
+- Allow kmscon read cocpit's pid files
+- fix vpnc_t setpgid permission for openconnect (bsc#1272934)
+
 * Mon Sep 07 2026 Zdenek Pytela <zpytela@redhat.com> - 45.16-1
 - Allow systemd-sysctl to create /run/sysctl.d
 - Allow systemd to create /run/udev/control

diff --git a/selinux-policy.spec b/selinux-policy.spec
index be751cd..5af44b6 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -5,7 +5,7 @@
 
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit 3047fd170af8423b39897491ee952e9ae428936f
+%global commit e6e4b568a5407212f99e8d517455c71023f6763e
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -19,7 +19,7 @@
 %define STABLEVER 42.10
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 45.16
+Version: 45.17
 Release: 1%{?dist}
 License: GPL-2.0-or-later
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz

diff --git a/sources b/sources
index 9f42d7b..b6fe959 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-3047fd1.tar.gz) = 71a811072ac9cef128648347a601a8a90d630b557874ede6ef653a241949c89e41af4f58ba5a50b7fdaaa42a2ed769044f87821e0dc9afbbbc7895651db13082
-SHA512 (container-selinux.tgz) = 88eace0028405c5bd418e4b3413bfb6a421886dd0a19ad7cb5acf5994995f4b607bf8d157e49be774355dd410d830478ebf8090e7c991ba874fb16ea57fd7d77
+SHA512 (selinux-policy-e6e4b56.tar.gz) = 2e57f5925a0272bd9ee0be782f9e233cbf46473a6f85a3852ac22d4a25fb468d158f95f14ef43916d3eb4c64a8ea2494ea591834c92686092d3b3c1f50807aee
+SHA512 (container-selinux.tgz) = 93307ff0b6b7342a083c3495c96e6bb27d4ea9dbe0ebe643c5772213602cefa5a7d310c0b5eae0ac978f96a25d6d95c6575dce4705fa388f3bd0b686048a5b19
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4