From 29d572116d94216e16333a1666c166500d2d359f Mon Sep 17 00:00:00 2001
From: Zdenek Pytela <zpytela@redhat.com>
Date: Fri, 11 Aug 2023 20:39:42 +0200
Subject: [PATCH] * Fri Aug 11 2023 Zdenek Pytela <zpytela@redhat.com> -
 3.14.3-126 - Allow cloud_init create dhclient var files and init_t manage
 net_conf_t 1/2 Resolves: rhbz#2229726 - Label
 /usr/libexec/openssh/ssh-pkcs11-helper with ssh_agent_exec_t Resolves:
 rhbz#2177704 - Allow cloud_init create dhclient var files and init_t manage
 net_conf_t 2/2 Resolves: rhbz#2229726 - Make insights_client_t an unconfined
 domain Resolves: rhbz#2225527 - Allow insights-client create all rpm logs
 with a correct label Resolves: rhbz#2229559 - Allow insights-client manage
 generic logs Resolves: rhbz#2229559

---
 .gitignore          |  2 ++
 selinux-policy.spec | 20 +++++++++++++++++---
 sources             |  6 +++---
 3 files changed, 22 insertions(+), 6 deletions(-)

diff --git a/.gitignore b/.gitignore
index dbe65737..499f1206 100644
--- a/.gitignore
+++ b/.gitignore
@@ -19,3 +19,5 @@ SOURCES/selinux-policy-contrib-c6da44c.tar.gz
 /selinux-policy-contrib-8dc6e4c.tar.gz
 /selinux-policy-e552306.tar.gz
 /selinux-policy-contrib-b02d4cb.tar.gz
+/selinux-policy-3778a9d.tar.gz
+/selinux-policy-contrib-e1cc232.tar.gz
diff --git a/selinux-policy.spec b/selinux-policy.spec
index 2a44e567..b8ef7b7e 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,11 +1,11 @@
 # github repo with selinux-policy base sources
 %global git0 https://github.com/fedora-selinux/selinux-policy
-%global commit0 e5523064d8d7cd26f641091edbc37b4747396175
+%global commit0 3778a9d3bdeec2edce79753979fc6e29b3fb1659
 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7})
 
 # github repo with selinux-policy contrib sources
 %global git1 https://github.com/fedora-selinux/selinux-policy-contrib
-%global commit1 b02d4cb3b716adeb862550e41757e1ee6c40beaa
+%global commit1 e1cc232e7012453a6befe5216bae41c44322f01a
 %global shortcommit1 %(c=%{commit1}; echo ${c:0:7})
 
 %define distro redhat
@@ -29,7 +29,7 @@
 Summary: SELinux policy configuration
 Name: selinux-policy
 Version: 3.14.3
-Release: 125%{?dist}
+Release: 126%{?dist}
 License: GPLv2+
 Source: %{git0}/archive/%{commit0}/%{name}-%{shortcommit0}.tar.gz
 Source29: %{git1}/archive/%{commit1}/%{name}-contrib-%{shortcommit1}.tar.gz
@@ -718,6 +718,20 @@ exit 0
 %endif
 
 %changelog
+* Fri Aug 11 2023 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-126
+- Allow cloud_init create dhclient var files and init_t manage net_conf_t 1/2
+Resolves: rhbz#2229726
+- Label /usr/libexec/openssh/ssh-pkcs11-helper with ssh_agent_exec_t
+Resolves: rhbz#2177704
+- Allow cloud_init create dhclient var files and init_t manage net_conf_t 2/2
+Resolves: rhbz#2229726
+- Make insights_client_t an unconfined domain
+Resolves: rhbz#2225527
+- Allow insights-client create all rpm logs with a correct label
+Resolves: rhbz#2229559
+- Allow insights-client manage generic logs
+Resolves: rhbz#2229559
+
 * Fri Aug 04 2023 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-125
 - Allow user_u and staff_u get attributes of non-security dirs
 Resolves: rhbz#2216151
diff --git a/sources b/sources
index 72e9b62d..6b4cfabc 100644
--- a/sources
+++ b/sources
@@ -1,4 +1,4 @@
-SHA512 (selinux-policy-e552306.tar.gz) = 5370529c67dfb0a7518b8bc7f56ea73914b521564801be67f099d1feff064e92c1f2975896770ec034fcd1f2f3d3762eca6beb5c93bbf2ef7a1a4a01000c065c
-SHA512 (selinux-policy-contrib-b02d4cb.tar.gz) = 82245c994557cf66542c76a9ea9c7545965f32948f46fd031bbd19b9c9e5f593bf47bc877d7e20e011265ded1be5f8fa3fcca650c4514573e7536ea59a9b8de1
+SHA512 (selinux-policy-3778a9d.tar.gz) = 1f129e3e9cd1432c24982e6073cde9d27f86bcc8e1171fae0b745eda381861781df36cb297b885bc9f2358bef79ca1ec8565c08d3d5e85598e28c2d8384e598d
+SHA512 (selinux-policy-contrib-e1cc232.tar.gz) = 8039d1333ff6bad0d86f8311e1d8571213a838bacbb08f143493c6a2f29bc892ec8c8c734241df3848e55c7533d474eb5abc9846d626bacba169b9edda6f8d0f
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
-SHA512 (container-selinux.tgz) = f662eb2eca9f48598984a8a2d60b13102116752ed51591b097536d5e65fc432c604d056e38fba487036c1e7e8cf65a31ac0756dca7a663b08b0e53b1fb6f61d6
+SHA512 (container-selinux.tgz) = d62cab7a86f277f11bfd0bbedcd4d76ca05b69b6d810337c8c41caf61ab304029d5c85164578a1635b21d09bece7da475e467633bda5fafa34cebc5bab3de297