From bb9eaf5b4e8d046e338320d85c85972edb461ccd Mon Sep 17 00:00:00 2001
From: CentOS Sources <bugs@centos.org>
Date: Feb 11 2022 05:32:48 +0000
Subject: import selinux-policy-3.14.3-91.el8


---

diff --git a/.gitignore b/.gitignore
index 308110c..45b2101 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,3 +1,3 @@
 SOURCES/container-selinux.tgz
-SOURCES/selinux-policy-4411b2b.tar.gz
-SOURCES/selinux-policy-contrib-b63613a.tar.gz
+SOURCES/selinux-policy-7b59b17.tar.gz
+SOURCES/selinux-policy-contrib-20742bb.tar.gz
diff --git a/.selinux-policy.metadata b/.selinux-policy.metadata
index cc09f88..2bc4004 100644
--- a/.selinux-policy.metadata
+++ b/.selinux-policy.metadata
@@ -1,3 +1,3 @@
-adcd65ca56a1a96bb6ecdcb99125d6de667496e0 SOURCES/container-selinux.tgz
-023b94bf24221d16d192f49d13cc9fa656eed60a SOURCES/selinux-policy-4411b2b.tar.gz
-6a00e1e086470d5b9ac291a6f3e97cc9b7bdd5c6 SOURCES/selinux-policy-contrib-b63613a.tar.gz
+4c634250b09d45ac6b3635968a96433d81745f0c SOURCES/container-selinux.tgz
+2b5baf09f28c58f356fbfc7e0141f0e824840874 SOURCES/selinux-policy-7b59b17.tar.gz
+6fe8207404705f9d2fb1413f884515bf14d45dee SOURCES/selinux-policy-contrib-20742bb.tar.gz
diff --git a/SPECS/selinux-policy.spec b/SPECS/selinux-policy.spec
index ab02dae..17ace29 100644
--- a/SPECS/selinux-policy.spec
+++ b/SPECS/selinux-policy.spec
@@ -1,11 +1,11 @@
 # github repo with selinux-policy base sources
 %global git0 https://github.com/fedora-selinux/selinux-policy
-%global commit0 4411b2b18c4ab2fa9da59ff1a982e08b96d179cb
+%global commit0 7b59b17d712873fda65ab6ec0af6d0a50a73bfb3
 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7})
 
 # github repo with selinux-policy contrib sources
 %global git1 https://github.com/fedora-selinux/selinux-policy-contrib
-%global commit1 b63613a565d84edf3d70d093df15a98a832219fa
+%global commit1 20742bba8863f0b35225d13dfee86639eb3ffbbd
 %global shortcommit1 %(c=%{commit1}; echo ${c:0:7})
 
 %define distro redhat
@@ -29,7 +29,7 @@
 Summary: SELinux policy configuration
 Name: selinux-policy
 Version: 3.14.3
-Release: 89%{?dist}
+Release: 91%{?dist}
 License: GPLv2+
 Source: %{git0}/archive/%{commit0}/%{name}-%{shortcommit0}.tar.gz
 Source29: %{git1}/archive/%{commit1}/%{name}-contrib-%{shortcommit1}.tar.gz
@@ -716,6 +716,40 @@ exit 0
 %endif
 
 %changelog
+* Wed Feb 09 2022 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-91
+- Allow NetworkManager-dispatcher dbus chat with NetworkManager
+Resolves: rhbz#1989070
+
+* Fri Feb 04 2022 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-90
+- Fix badly indented used interfaces
+Resolves: rhbz#2030156
+- Allow domain transition to sssd_t 1/2
+Resolves: rhbz#2022690
+- Allow confined users to use kinit,klist and etc.
+Resolves: rhbz#2026598
+- Allow login_userdomain open/read/map system journal
+Resolves: rhbz#2046481
+- Allow init read stratis data symlinks 2/2
+Resolves: rhbz#2048514
+- Label new utility of NetworkManager nm-priv-helper
+Resolves: rhbz#1986076
+- Label NetworkManager-dispatcher service with separate context
+Resolves: rhbz#1989070
+- Allow domtrans to sssd_t and role access to sssd
+Resolves: rhbz#2030156
+- Creating interface sssd_run_sssd()
+Resolves: rhbz#2030156
+- Allow domain transition to sssd_t 2/2
+Resolves: rhbz#2022690
+- Allow timedatex dbus chat with xdm
+Resolves: rhbz#2040214
+- Associate stratisd_data_t with device filesystem
+Resolves: rhbz#2048514
+- Allow init read stratis data symlinks 1/2
+Resolves: rhbz#2048514
+- Allow rhsmcertd create rpm hawkey logs with correct label
+Resolves: rhbz#1949871
+
 * Wed Jan 26 2022 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-89
 - Allow NetworkManager talk with unconfined user over unix domain dgram socket
 Resolves: rhbz#2044048