[rpms/selinux-policy] rawhide: * Fri Sep 18 2026 Zdenek Pytela <zpytela@redhat.com> - 45.18-1

[Zdenek Pytela <zpytela@redhat.com>]

            A new commit has been pushed.

            Repo   : rpms/selinux-policy
            Branch : rawhide
            Commit : 3a885dde140ae933e92fee9ee6d0cfe628c307d9
            Author : Zdenek Pytela <zpytela@redhat.com>
            Date   : 2026-09-19T20:49:40+02:00
            Stats  : +19/-4 in 3 file(s)
            URL    : https://src.fedoraproject.org/rpms/selinux-policy/c/3a885dde140ae933e92fee9ee6d0cfe628c307d9?branch=rawhide

            Log:
            * Fri Sep 18 2026 Zdenek Pytela <zpytela@redhat.com> - 45.18-1

- Allow sshd-session tcp connect to all reserved ports
- Allow sshd-session connect to vnc port
- Allow sshd-session transition on passwd execution
- Allow dhcpc-hook get init status
- Allow kmscon read systemd_ssh_issue PID files
- Rearrange kmscon policy to comply with formatting rules
- Allow kmscon signal init
- Allow systemd-timedated read network sysctls
- Add CI check for whitespace on pull requests
- Remove commented-out interface calls
- Fix whitespace across all policy modules
- Move systemd_read_userdbd_runtime_sock_files() to another optional block
- Use udev_manage_pid_lnk_files() instead of direct reference

---
diff --git a/changelog b/changelog
index 441fe02..a20377b 100644
--- a/changelog
+++ b/changelog
@@ -1,3 +1,18 @@
+* Fri Sep 18 2026 Zdenek Pytela <zpytela@redhat.com> - 45.18-1
+- Allow sshd-session tcp connect to all reserved ports
+- Allow sshd-session connect to vnc port
+- Allow sshd-session transition on passwd execution
+- Allow dhcpc-hook get init status
+- Allow kmscon read systemd_ssh_issue PID files
+- Rearrange kmscon policy to comply with formatting rules
+- Allow kmscon signal init
+- Allow systemd-timedated read network sysctls
+- Add CI check for whitespace on pull requests
+- Remove commented-out interface calls
+- Fix whitespace across all policy modules
+- Move systemd_read_userdbd_runtime_sock_files() to another optional block
+- Use udev_manage_pid_lnk_files() instead of direct reference
+
 * Fri Sep 11 2026 Zdenek Pytela <zpytela@redhat.com> - 45.17-1
 - Fix corrupted formatting in files.if
 - Allow nsswitch_domain connect to read xdm pid socket files

diff --git a/selinux-policy.spec b/selinux-policy.spec
index 5af44b6..c000aad 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -5,7 +5,7 @@
 
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit e6e4b568a5407212f99e8d517455c71023f6763e
+%global commit ed4568a090438e7d40495da56481d889b8eb9949
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -19,7 +19,7 @@
 %define STABLEVER 42.10
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 45.17
+Version: 45.18
 Release: 1%{?dist}
 License: GPL-2.0-or-later
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz

diff --git a/sources b/sources
index b6fe959..a97ffe8 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-e6e4b56.tar.gz) = 2e57f5925a0272bd9ee0be782f9e233cbf46473a6f85a3852ac22d4a25fb468d158f95f14ef43916d3eb4c64a8ea2494ea591834c92686092d3b3c1f50807aee
-SHA512 (container-selinux.tgz) = 93307ff0b6b7342a083c3495c96e6bb27d4ea9dbe0ebe643c5772213602cefa5a7d310c0b5eae0ac978f96a25d6d95c6575dce4705fa388f3bd0b686048a5b19
+SHA512 (selinux-policy-ed4568a.tar.gz) = c37466bac22dcd97728ccfcb45faf3246f1a9d14507e0971669da0a42c8e96ddf0f03002a6198cde347baeaddd3dcdc7a642b2b1f9b8b98768f44f615f1b1420
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
+SHA512 (container-selinux.tgz) = bc4819336cf88d91f9f1aa50f479e59b526fcadc9c2e6b2b281cd5fb4203cc18c59aea372f58a944d62a75996620660c357be8095f1a4bfd3092b6f5cc08acd4