From 2933078dea883642bed40231cdd6c2ee2aef98b7 Mon Sep 17 00:00:00 2001
From: CentOS Sources <bugs@centos.org>
Date: Oct 15 2021 16:38:21 +0000
Subject: import selinux-policy-3.14.3-81.el8


---

diff --git a/.gitignore b/.gitignore
index 271aee1..7cc9e2f 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,3 +1,3 @@
 SOURCES/container-selinux.tgz
-SOURCES/selinux-policy-8f56f63.tar.gz
-SOURCES/selinux-policy-contrib-e231b3e.tar.gz
+SOURCES/selinux-policy-6e0d34e.tar.gz
+SOURCES/selinux-policy-contrib-ace9ad5.tar.gz
diff --git a/.selinux-policy.metadata b/.selinux-policy.metadata
index 8ba77ee..abf1bd4 100644
--- a/.selinux-policy.metadata
+++ b/.selinux-policy.metadata
@@ -1,3 +1,3 @@
-1e65dcb828792d3eba6cf15383ab9da3132e8b8b SOURCES/container-selinux.tgz
-672cfe526149ad56c857a79856e769548d9ead8e SOURCES/selinux-policy-8f56f63.tar.gz
-f386b378f3a398fc17dfbaa3acfacbeaeaf5e0b4 SOURCES/selinux-policy-contrib-e231b3e.tar.gz
+41318a338b3da94dc66956083f96432b5034460a SOURCES/container-selinux.tgz
+59412a36808077381bf02f336194b4717d1ad18b SOURCES/selinux-policy-6e0d34e.tar.gz
+0988e5766dcdc691221379775563a812e60b6247 SOURCES/selinux-policy-contrib-ace9ad5.tar.gz
diff --git a/SPECS/selinux-policy.spec b/SPECS/selinux-policy.spec
index fae0cc8..e377f78 100644
--- a/SPECS/selinux-policy.spec
+++ b/SPECS/selinux-policy.spec
@@ -1,11 +1,11 @@
 # github repo with selinux-policy base sources
 %global git0 https://github.com/fedora-selinux/selinux-policy
-%global commit0 8f56f631a921d043bc8176f7c64a38cd77b48f66
+%global commit0 6e0d34e9aaf5d69426eb5252ced3be24368cc186
 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7})
 
 # github repo with selinux-policy contrib sources
 %global git1 https://github.com/fedora-selinux/selinux-policy-contrib
-%global commit1 e231b3e6ede7acd60339cc7264bbdba1da6014d2
+%global commit1 ace9ad57089bd19b42a7d9c8c6c67244b99be436
 %global shortcommit1 %(c=%{commit1}; echo ${c:0:7})
 
 %define distro redhat
@@ -29,7 +29,7 @@
 Summary: SELinux policy configuration
 Name: selinux-policy
 Version: 3.14.3
-Release: 80%{?dist}
+Release: 81%{?dist}
 License: GPLv2+
 Source: %{git0}/archive/%{commit0}/%{name}-%{shortcommit0}.tar.gz
 Source29: %{git1}/archive/%{commit1}/%{name}-contrib-%{shortcommit1}.tar.gz
@@ -715,9 +715,21 @@ exit 0
 %endif
 
 %changelog
+* Mon Oct 04 2021 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-81
+- Allow unconfined domains to bpf all other domains
+Resolves: rhbz#1991443
+- Allow vmtools_unconfined_t domain transition to rpm_script_t
+Resolves: rhbz#1872245
+- Allow unbound connectto unix_stream_socket
+Resolves: rhbz#1905441
+- Label /usr/sbin/virtproxyd as virtd_exec_t
+Resolves: rhbz#1854332
+- Allow postfix_domain to sendto unix dgram sockets.
+Resolves: rhbz#1920521
+
 * Thu Sep 16 2021 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-80
 - Allow rhsmcertd_t dbus chat with anaconda install_t
-Resolves: rhbz#2002666
+Resolves: rhbz#2004990
 
 * Fri Aug 27 2021 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-79
 - Introduce xdm_manage_bootloader booelan