import libffi-3.1-24.el8

SOURCES/libffi-3.1-rh2014228.patch

@@ -0,0 +1,13 @@
+diff -rup a/src/closures.c b/src/closures.c
+--- a/src/closures.c	2022-11-16 15:27:45.632725415 -0500
++++ b/src/closures.c	2022-11-18 13:56:17.948172306 -0500
+@@ -140,6 +140,9 @@ selinux_enabled_check (void)
+   char *buf = NULL;
+   size_t len = 0;
+ 
++  if (access ("/etc/sysconfig/libffi-force-shared-memory-check-first", F_OK) >= 0)
++    return 0;
++
+   if (statfs ("/selinux", &sfs) >= 0
+       && (unsigned int) sfs.f_type == 0xf97cff8cU)
+     return 1;

SPECS/libffi.spec

@@ -2,7 +2,7 @@
 
 Name:		libffi
 Version:	3.1
-Release:	23%{?dist}
+Release:	24%{?dist}
 Summary:	A portable foreign function interface library
 
 Group:		System Environment/Libraries
@@ -18,6 +18,7 @@ Patch3:		libffi-3.1-aarch64-fix-exec-stack.patch
 Patch5:		libffi-3.1-closures-Create-temporary-file-with-O_TMPFILE-and-O_.patch
 Patch6:		libffi-3.1-libffi_tmpdir.patch
 Patch7:		libffi-3.1-memfd.patch
+Patch8:		libffi-3.1-rh2014228.patch
 
 %description
 Compilers for high level languages generate code that follow certain
@@ -69,6 +70,7 @@ developing applications that use %{name}.
 %patch5 -p1
 %patch6 -p1
 %patch7 -p1
+%patch8 -p1
 
 
 %build
@@ -129,6 +131,10 @@ fi
 %{_infodir}/libffi.info.gz
 
 %changelog
+* Wed Nov 16 2022 DJ Delorie <dj@redhat.com> - 3.1-24
+- Use /etc/sysconfig/libffi-force-shared-memory-check-first to
+  override selinux permissions check for shared memory access (#2014228)
+
 * Fri Nov 19 2021 DJ Delorie <dj@redhat.com> - 3.1-23
 - Use memfd_create() to allocate closures (#1875340)