From e881d79dbc9bb3f9fd55826677ef8e4743b4c7bf Mon Sep 17 00:00:00 2001
From: Lukas Vrabec <lvrabec@redhat.com>
Date: May 21 2018 20:23:41 +0000
Subject: * Mon May 21 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-18

- Disable secure mode environment cleansing for dirsrv_t
- Allow udev execute /usr/libexec/gdm-disable-wayland in xdm_t domain which allows create /run/gdm/custom.conf with proper xdm_var_run_t label.

---

diff --git a/.gitignore b/.gitignore
index 22efeca..4ca19df 100644
--- a/.gitignore
+++ b/.gitignore
@@ -281,3 +281,5 @@ serefpolicy*
 /selinux-policy-718d75d.tar.gz
 /selinux-policy-cab8dc9.tar.gz
 /selinux-policy-contrib-19624b4.tar.gz
+/selinux-policy-contrib-5ae0301.tar.gz
+/selinux-policy-ba72e52.tar.gz
diff --git a/selinux-policy.spec b/selinux-policy.spec
index 6f0d610..3ddcf8d 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,11 +1,11 @@
 # github repo with selinux-policy base sources
 %global git0 https://github.com/fedora-selinux/selinux-policy
-%global commit0 cab8dc9056f382289b0559b3bdf336aa09ef8105
+%global commit0 ba72e52d6e782b6c0bc4da292da81065d5b5c8b3
 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7})
 
 # github repo with selinux-policy contrib sources
 %global git1 https://github.com/fedora-selinux/selinux-policy-contrib
-%global commit1 19624b4009a0a252a57e7192dea7d3d322fcd0da
+%global commit1 5ae0301be43d26dead51a7ec36f1c07b80dca638
 %global shortcommit1 %(c=%{commit1}; echo ${c:0:7})
 
 %define distro redhat
@@ -29,7 +29,7 @@
 Summary: SELinux policy configuration
 Name: selinux-policy
 Version: 3.14.2
-Release: 17%{?dist}
+Release: 18%{?dist}
 License: GPLv2+
 Group: System Environment/Base
 Source: %{git0}/archive/%{commit0}/%{name}-%{shortcommit0}.tar.gz
@@ -718,6 +718,10 @@ exit 0
 %endif
 
 %changelog
+* Mon May 21 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-18
+- Disable secure mode environment cleansing for dirsrv_t
+- Allow udev execute /usr/libexec/gdm-disable-wayland in xdm_t domain which allows create /run/gdm/custom.conf with proper xdm_var_run_t label.
+
 * Mon May 21 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-17
 - Add dac_override capability to remote_login_t domain
 - Allow chrome_sandbox_t to mmap tmp files
diff --git a/sources b/sources
index fcc9dc1..82cc60d 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-cab8dc9.tar.gz) = d922ec08de3f8a47b312b00d9a64a73466e230b3e8344768f95d762b5e1f52f3d99b77ee5d5901ff76d3ecfa315daecbec428ef6f1a4b9322588ff8fc721f4ae
-SHA512 (selinux-policy-contrib-19624b4.tar.gz) = 25a8fb5a856dc8cb5f2ab42bb9a16371488172393ba8fbcb4aa35f021b00dd9ccd5e40f3fd249799e38bdb6a3461da6ef7b8794ce0250209cad789258959d8fe
-SHA512 (container-selinux.tgz) = 04f324dcf9ecc426157686679201eac943cc535a6d33dec9d7da221585170bc2af89a076a00fc35a10fa0d8be6acce877f19e427bcea5598d72b47f698534ff8
+SHA512 (selinux-policy-contrib-5ae0301.tar.gz) = 14d6a14c3f3227114f1539070a9b998b3875888a0a0e669f52cac86696ee55f2411d727f96d4763569171a7232f6a16b63cdfe0ae768df0b52b3c032f19d5d53
+SHA512 (selinux-policy-ba72e52.tar.gz) = edae928ecbcadd6ff0313a5414c88f8aaad609b7b7fbcbaa4a89574fdbe77fd73f3424c7671b4152a14fd49ec1559c73297779bcd2c727e438bb42a50f420d19
+SHA512 (container-selinux.tgz) = 719e82f66868cc356f79ada820e88d15334e9616b1090e5c944af357fe0edf7dcbeaad66223e00ffcaa921aa88c46a5b33f43ace28de844693bbfb290bd130a4