_servicedata

@@ -1,7 +1,7 @@
 <servicedata>
 <service name="tar_scm">
                 <param name="url">https://gitlab.suse.de/selinux/selinux-policy.git</param>
-              <param name="changesrevision">6e8cf2b0a771eddc3ae1bee3be0042bd3d9d8ba1</param></service><service name="tar_scm">
+              <param name="changesrevision">f8d70ad2b8a5d2628cd1ee881ccedbcebf189d3d</param></service><service name="tar_scm">
                 <param name="url">https://github.com/containers/container-selinux.git</param>
               <param name="changesrevision">07b3034f6d9625ab84508a2f46515d8ff79b4204</param></service><service name="tar_scm">
                 <param name="url">https://gitlab.suse.de/jsegitz/selinux-policy.git</param>

macros.selinux-policy

@@ -117,7 +117,7 @@ if [ -z "${_policytype}" ]; then \
   _policytype="targeted" \
 fi \
 if %{_sbindir}/selinuxenabled && [ "${SELINUXTYPE}" = "${_policytype}" ]; then \
-   if [ -f %{_file_context_file_pre} ] && [ -z "${TRANSACTIONAL_UPDATE}" ]; then \
+   if [ -f %{_file_context_file_pre} ]; then \
      %{_sbindir}/fixfiles -C %{_file_context_file_pre} restore &> /dev/null \
      rm -f %{_file_context_file_pre} \
    fi \

selinux-policy-20240912.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:2e46dccf26669df2e4cb81b47ade54d28892113ad73308f60bb4300f216cb39c
+size 774376

selinux-policy-20241105.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:e5ea1d19388cfee6c2d8b7c95a17bf541872cec56ca3d761f501ef1487ecc5b9
-size 775060

selinux-policy.changes

@@ -1,69 +1,3 @@
--------------------------------------------------------------------
-Tue Nov 05 16:21:44 UTC 2024 - cathy.hu@suse.com
-
-- Update to version 20241105:
-  * Allow virt_dbus_t to connect to virtd_t over unix_stream_socket (bsc#1232655)
-
--------------------------------------------------------------------
-Thu Oct 31 07:35:49 UTC 2024 - cathy.hu@suse.com
-
-- Update to version 20241031:
-  * Label /var/livepatches as lib_t for ULP on micro (bsc#1228879)
-
--------------------------------------------------------------------
-Mon Oct 21 07:23:25 UTC 2024 - cathy.hu@suse.com
-
-- Update to version 20241021:
-  * rsync: add rsync_exec_commands boolean and enable it by default (bsc#1231494)
-  * Allow snapperd to execute systemctl (bsc#1231489)
-
--------------------------------------------------------------------
-Fri Oct 18 12:34:06 UTC 2024 - cathy.hu@suse.com
-
-- Update to version 20241018:
-  * Allow slpd to create TCPDIAG netlink socket (bsc#1231491)
-  * Allow slpd to use sys_chroot (bsc#1231491)
-  * Allow openvswitch-ipsec use strongswan (bsc#1231493)
-
--------------------------------------------------------------------
-Mon Sep 30 07:15:18 UTC 2024 - cathy.hu@suse.com
-
-- Update to version 20240930:
-  * Label yast binaries correctly
-
--------------------------------------------------------------------
-Wed Sep 25 08:23:22 UTC 2024 - cathy.hu@suse.com
-
-- Update to version 20240925:
-  * Allow snapperd to manage unlabeled_t files (bsc#1230966)
-
--------------------------------------------------------------------
-Tue Sep 24 09:37:13 UTC 2024 - cathy.hu@suse.com
-
-- Update to version 20240924:
-  * Revert "Allow virtstoraged to manage images (bsc#1228742)"
-  * Label /etc/mdevctl.d with mdevctl_conf_t
-  * Sync users with Fedora targeted users
-  * Update policy for rpc-virtstorage
-  * Allow virtstoraged get attributes of configfs dirs
-  * Fix SELinux policy for sandbox X server to fix 'sandbox -X' command
-  * Update bootupd policy when ESP is not mounted
-  * Allow thumb_t map dri devices
-  * Allow samba use the io_uring API
-  * Allow the sysadm user use the secretmem API
-  * Allow nut-upsmon read systemd-logind session files
-  * Allow sysadm_t to create PF_KEY sockets
-  * Update bootupd policy for the removing-state-file test
-
--------------------------------------------------------------------
-Tue Sep 24 08:50:16 UTC 2024 - Cathy Hu <cathy.hu@suse.com>
-
-- Fix macros.selinux-policy (bsc#1230897)
-  - %selinux_relabel_post should not relabel files in
-    transactional systems in %post as the policy is not loaded
-    into the kernel directly after install, instead the relabelling
-    will happen on the next boot
-
 -------------------------------------------------------------------
 Thu Sep 12 07:34:20 UTC 2024 - cathy.hu@suse.com
 

selinux-policy.spec

@@ -36,7 +36,7 @@ Summary:        SELinux policy configuration
 License:        GPL-2.0-or-later
 Group:          System/Management
 Name:           selinux-policy
-Version:        20241105
+Version:        20240912
 Release:        0
 Source0:        %{name}-%{version}.tar.xz
 Source1:        container.fc