Resolves: RHEL-176258 - AVC when reading user's site-packages

0019-set-pythonnouser-env-var.patch

@@ -0,0 +1,12 @@
+diff --git a/tools/frr.service.in b/tools/frr.service.in
+index 1e958dd93..4c3d3ae28 100644
+--- a/tools/frr.service.in
++++ b/tools/frr.service.in
+@@ -21,6 +21,7 @@ PIDFile=@CFG_STATE@/watchfrr.pid
+ ExecStart=@CFG_SBIN@/frrinit.sh start
+ ExecStop=@CFG_SBIN@/frrinit.sh stop
+ ExecReload=@CFG_SBIN@/frrinit.sh reload
++Environment=PYTHONNOUSERSITE=1
+ 
+ [Install]
+ WantedBy=multi-user.target

frr.spec

@@ -7,7 +7,7 @@
 
 Name: frr
 Version: 8.5.3
-Release: 14%{?checkout}%{?dist}
+Release: 15%{?checkout}%{?dist}
 Summary: Routing daemon
 License: GPLv2+
 URL: http://www.frrouting.org
@@ -82,6 +82,7 @@ Patch0015: 0015-ipv6-wrong-hash.patch
 Patch0016: 0016-dont-ignore-kernel-route.patch
 Patch0017: 0017-fix-CVE-2026-37457.patch
 Patch0018: 0018-ignored-int-after-flapping.patch
+Patch0019: 0019-set-pythonnouser-env-var.patch
 
 %description
 FRRouting is free software that manages TCP/IP based routing protocols. It takes
@@ -289,6 +290,9 @@ make check PYTHON=%{__python3}
 %endif
 
 %changelog
+* Fri Jul 03 2026 Michal Ruprich <mruprich@redhat.com> - 8.5.3-15
+- Resolves: RHEL-176258 - AVC when reading user's site-packages
+
 * Fri Jun 12 2026 Michal Ruprich <mruprich@redhat.com> - 8.5.3-14
 - Resolves: RHEL-152300 - ignored route in the kernel after flapping interface