[rpms/selinux-policy] f44: * Mon Sep 14 2026 Zdenek Pytela <zpytela@redhat.com> - 44.9-1

[rpms/selinux-policy] f44: * Mon Sep 14 2026 Zdenek Pytela <zpytela@redhat.com> - 44.9-1

[Zdenek Pytela]

            A new commit has been pushed.

            Repo   : rpms/selinux-policy
            Branch : f44
            Commit : 4d7af88bd15eae65604b0803792b6051219abb2f
            Author : Zdenek Pytela <zpytela@redhat.com>
            Date   : 2026-09-14T14:44:21+02:00
            Stats  : +23/-4 in 3 file(s)
            URL    : https://src.fedoraproject.org/rpms/selinux-policy/c/4d7af88bd15eae65604b0803792b6051219abb2f?branch=f44

            Log:
            * Mon Sep 14 2026 Zdenek Pytela <zpytela@redhat.com> - 44.9-1

- Use udev_manage_pid_lnk_files() instead of direct reference
- Allow nsswitch_domain connect to read xdm pid socket files
- Allow sshd-session connect to gnome remote desktop port
- Allow sshd-session to connect to all generic ports
- Allow sshd-session connect to port 443/tcp (http_port_t)
- Allow sshd-session connect to tcp/22 (ssh_port_t)
- Update udev_manage_pid_files() to include symlinks read
- Allow kmscon read cocpit's pid files
- Allow systemd-sysctl to create /run/sysctl.d
- Allow systemd to create /run/udev/control
- Allow systemd-coredumpd to create /run/systemd/coredumpd/kernel
- Allow bootupcl nnp transition to mount_t
- Allow login_userdomain read/write kmscon devpts chr_files
- Support console version of initial-setup
- ssh-session accesses gitolite ssh config files (bsc#1277259)
- Allow kmscon use netlink permissions (#3368)
- Allow qatlib manage hugetlbfs directories

---
diff --git a/changelog b/changelog
index 01c7c52..031c039 100644
--- a/changelog
+++ b/changelog
@@ -1,3 +1,22 @@
+* Mon Sep 14 2026 Zdenek Pytela <zpytela@redhat.com> - 44.9-1
+- Use udev_manage_pid_lnk_files() instead of direct reference
+- Allow nsswitch_domain connect to read xdm pid socket files
+- Allow sshd-session connect to gnome remote desktop port
+- Allow sshd-session to connect to all generic ports
+- Allow sshd-session connect to port 443/tcp (http_port_t)
+- Allow sshd-session connect to tcp/22 (ssh_port_t)
+- Update udev_manage_pid_files() to include symlinks read
+- Allow kmscon read cocpit's pid files
+- Allow systemd-sysctl to create /run/sysctl.d
+- Allow systemd to create /run/udev/control
+- Allow systemd-coredumpd to create /run/systemd/coredumpd/kernel
+- Allow bootupcl nnp transition to mount_t
+- Allow login_userdomain read/write kmscon devpts chr_files
+- Support console version of initial-setup
+- ssh-session accesses gitolite ssh config files (bsc#1277259)
+- Allow kmscon use netlink permissions (#3368)
+- Allow qatlib manage hugetlbfs directories
+
 * Thu Aug 27 2026 Zdenek Pytela <zpytela@redhat.com> - 44.8-1
 - Allow ssh_agent_type manage ssh_home_t files and sock_files
 - Allow sshd-session manage ssh_home_t socke files

diff --git a/selinux-policy.spec b/selinux-policy.spec
index c3bda33..fce44a3 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -5,7 +5,7 @@
 
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit 890df55eae6df1456266c3efeae4f230df978300
+%global commit 7caad43e1426242f1593d343c0893bc4f080ab5f
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -19,7 +19,7 @@
 %define STABLEVER 42.10
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 44.8
+Version: 44.9
 Release: 1%{?dist}
 License: GPL-2.0-or-later
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz

diff --git a/sources b/sources
index 167162b..50eca36 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-890df55.tar.gz) = d7c064139bdd9fb08583339f2c127d2aa39ba3a4a82a1821274c38d78d14a6f93107bcf72b441736694beaa04130d0cb79143189b8f178deb37a4325a3f17290
+SHA512 (selinux-policy-7caad43.tar.gz) = d89c06293e130ea2ab506278215468fd55c1cdc77993ea9e37d9a77b19944395b67cc6b71043879e0e5363358c353737ac7580e45b42e02ec5b2b44a99ae291c
+SHA512 (container-selinux.tgz) = f50f6854140f788ede7eed09501b631e2df47a2e2f666f440d7360ab1204df012d5505c86fc089cf39c72ea4853b37e10fecdd3e6a2cd0985064314317d508ab
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
-SHA512 (container-selinux.tgz) = c2199e4300829b187d0438317d868b32209bc2cf2c0d7beeaafc495626aed72a1c9be849a8f1420f3a50136d69e13518dee5c0fe49e4aa061744bdd9def7e6e1