From 5e78b003939663ea460c2b0ff7e3ccd1a1171cf3 Mon Sep 17 00:00:00 2001
From: Lukas Vrabec <lvrabec@redhat.com>
Date: Mon, 16 May 2016 17:29:54 +0200
Subject: [PATCH] * Mon May 16 2016 Lukas Vrabec <lvrabec@redhat.com>
 3.13.1-190 - Label /var/log/ganesha.log as gluster_log_t Allow glusterd_t
 domain to create glusterd_log_t files. Label /var/run/ganesha.pid as
 gluster_var_run_t. - Allow zabbix to connect to postgresql port - Label
 /usr/libexec/openssh/sshd-keygen as sshd_keygen_exec_t. BZ(1335149) - Allow
 systemd to read efivarfs. Resolve: #121

---
 docker-selinux.tgz           | Bin 4317 -> 4316 bytes
 policy-rawhide-base.patch    | 104 +++++++++++++++++++----------------
 policy-rawhide-contrib.patch |  66 +++++++++++++++-------
 selinux-policy.spec          |   8 ++-
 4 files changed, 108 insertions(+), 70 deletions(-)

diff --git a/docker-selinux.tgz b/docker-selinux.tgz
index 43d010fd0ac6e47027deb46aa1360fc32ca36a32..6d06b4ca3a42bd5288caf764ccd498e361d3376b 100644
GIT binary patch
delta 4032
zcmV;x4?pnTA>1KBABzY8IOjQ600Zq@-H+Qg63?ssR|rXg>>iTcY&K1RP20nvy@z`^
zpt$z2fGSJ0t**XKq}J;T^1t5<zeG`_K9N8iE8f8M{{1`ry!!C%8}k#cx8Gi0Uq8Eg
z`{C;S_5160AK?Dg+i%~zdltNTk%-p;tCL^>S$}#2H!!_GBE#3PB6UuIYn^6<sxBop
z7yU6c^+}1BtIwAau1kA0(}5!X7l{&6zI-9Su4HQ%5}z9%%Y6BIb#cLwMYF@qYM@6I
zGTlZsc`{<=qnRjZK|4XrSxOlyuv5ws#r{3IIwO2par*$?>8sjX)4%bj7<W!ukvLta
zB!7{cC+>QrYq@xbiCA@HK5)-{EOT~%Hn?om1H|kQ^gp8_+K?w^qjEl|$FWip`(buU
zaSuKZk7w!ni}hqSY-7pLHa)_M`Apv9iTg*eePCtE)gK^ZimrU5WDi|*<iAJyUCOpW
z1XK+Jk+L)n_>5a09c&lUMTSwU>humfL4V3GxPlh497TwuaNuLa%BNDUxn&g+K}#HS
z5zXmJ@P=^~QR?Z6xAps45!qcbr$7AvImFv2|0w(ZIjbAr6p_^Gc16-+GpSq0GokF)
zw3ycUM0lfCL+ihJ3;(X+-@79^Qa}IWr>C$JaPOl^lNtL!-4q_H0yuQ4tIAROcYlr>
za#2#>9iERF6nig6Fe}L2Q%3TbW#b8%kJgQ*NEw%KyA}d1k<O5U77LOhc}=nsy=IU~
z3d+J;0(mKBxpM1LfLCBCb_uSHz_Fu0V;DF15$KiI@!t@O97-U!Ao)|VE*BN(PhFy7
zyY%QNflX8-!LCkw-fm8E*ml11(|@@Gk>rz<!x@{Sfb&40D51`fm@Tj%uq0+YRTbOM
z-D3j_+$*wRPTsAdpg(NSZ5b+dS8z(*P4Ok<u3{9Wh%G1|{Iq4MsBYqI9ST+7h0ytN
z1dEr5$=WDP?21ajn7Jken<HMl`rQnOnKMimb-RIL=Se7sh?1WudSg#^HGk_U4I4Tt
zpOqV~_AWrVLAe08WlrpcmfMuv1NnSBn-#Xd3Z9FG3*dNuJ`;h$ov;gow`SvjTdWaY
z$5{$emlz<J4Y*WXKu#1cIfanj$DO{_dU*R+fq>D!0WigzvXdH88lXGtbaO$9yW`+(
zOUmf+ptzTN6ttSqGP}FL`F|b=C>8;Cb_oQguLc7UMoFF)Lf0`7>s(CnBq)#zy_AOq
zbY)S<U_x5068*0zfIa^{pbQLJ&YuCozVhh;9|{^Q9Pf<du&EAkw}Y8Z@X;I`V?BQP
z`N#I~lRnvXsp83NgS2Q;;bZEmh}+zE31Ohz)QV|S%f02`Hz*!89)Cd>$YHT^)`ss)
zz^YKVZeUb_oF9)U_ye3m$FTqNghrvBC$NucT^9K)Pv8+2ijQ!9)Z)%1sihkTaIDQA
zc2UROP5-9YR)#!e8D9jSz=f@0iUCbGMU)AzF8KU$LJ$J5+~PV~RsX{oI4`@AY4a-e
zAhQgrEoKzp7`G5IvVSU<LNjm1dF7PtICq54So4usQw5Ir6!)S=m5d6jGE3t<S4$P&
z%77N4&4Q_v|GCjV692wDYJwt+8n%^3`Q0o9Z+S}P41A=M>qj_s`;Z&cJfxDufa%^l
z>@3W&CWn@lJch+plb<I1hgX&u?8nHjpcs{nrHtqM*SNhJ-haqfcR9piG7fIU-B9xM
zYzds^*gmvS$S3Nsab=n5O<TsH${N^Sj_6t2fa4AGjfi96I_YJeby$^6kx*_#@RZ{?
z)?6IaX!yByydBr{w4yN=)dbt};SMnD?oqK<m~tBw^8=3;Ht2d^l`sY2D5q3P@XIMY
ze6P!l#8GwWsee1rW1Lm$*K=(|qsXAQm|VhNyR`OCamid7Bahg}Nd5PRw~qSns}HC8
z?=Nu)M?cKV1Y+qkp$)HstBW@mZ)Vx3<%{4a5@+!EqmK-Z$&wp^gwR-?SXA<?f?(<&
zyq93NCE()JI!zyO`=s&&Jer44|JNUX4yv+d`aGkOrhi62qv2pp5v}y-^#%tP@>Q^o
zGD=`3mU(vB7k<*0L?kbZP?$o6Xcu*#FGYJuo7Ep-nuPH-DmDaLa~?ryMoo#<aENSa
zx=NA<Z=Ffc2>InvV_5S|j4JA7-$nS?zc)Thf9PQj&+s<7S@*L}t0i*dxI%F8xjABW
z*O`OL&VS;kxGB#|&N_q^cbmWvJ<8vFsQny+D@!8yGIjEB)@knX@UHAbgfp|*R>Qn9
z<N-fS2Hx0bSkn#*{Ir;mz#)70iaF99CS%{fbo1ME7EC7}rLqP3=2@T0;%`qG#i1eF
zpII#ygFgJ~tC}uNoM+mkiGr1nvOt(jxF5-5M}O(qQIf51z~hNlX_m5m@F|G5<*o>B
zQ!ry|_y!1TN?4i%`E5}qK|z>E2l8(aTIvb|exr_dfXUVXiP<z)Z(#XUdbK7Q>`xh{
zS6!5CvTj2lTw`@NTL=BrS(>Me_ekXds;5_-<iUenBjY2oNG=XnI+%CSy*UKI;_9KS
zO@Gp39p!1)@oli;PdsgCMT!LMtv`Y@4Z5?Ov$vt>)1<B?b5$13<n332P6Ze}4f6w8
zXJXUlq0F!&_d8990|0`Puy|<r27mW>cG~#GhS1CZP8++2+1h(N16RzSaNztnH2AC!
zr>72nWB-~ybU*6^?Q^obPvL#M#=KRB!GGs-`++ujZj>gAI!`dT3{a%;T-RmZ8d5ZW
z(`3ju>+Y|qG8|%^AVVj6*Q4-AP;z=CIC<XaZ`i+Q%zco3+WbdGAa|z&FjU#n0T8R~
z;WKe7vux(Cjv3nfaj6s2z8*k7OyAM39%4AAX&D=gF7V3BreI|;_4)C>r!!5D#(&r+
z=#dw~Jz?2A*O>U%M)&tZ-tbh2IUI~((GI?YFkQi?z)Vo`DKJNXn6Ti3Fz!X~ystT9
z*?k3KLt{F~EDu(RPnYr-gf7WD5NG0Qd0|||e?tf^+3LA)DZAIdU&m@K`c6MdZB&J!
zmVNuPjAUgnVg$79c#Y5&eikH?M}KW11H@0<3|nB5K<KzD>)SyZe)zwqG0UifVuu+1
zc9<27w<H<B#%R+tRWhN46~_E1Ac|Rf2TGWj@RBIO)6FK~RreB3w9wv^mg;ntr>Ry(
z!tT7=M7Jc%Y(|_UMwLA9-oVc~jYEjbiG`x*C`5mNd8cX9^;F6^sF>{Z(0}rga`|FH
z)I+4wpIgSNAuvT3mw8@g<UZum_b~7fdeZ!zl%Dx_Xou#7gj1GD)49N;q2O9&Bm+$n
zLD6cU%#{cw1e-gN)P_ZmOLV)b%ckmgE1QKMMfZ7@7Pl6GJkE_edJOkF{dPK~tgO+#
z*3mBHiJE)xBa)QfnnXN_fq&0sLFq1K@z!XRl`HlP!B<Jjoe3h}kx``pMiXzrn@wkE
zZDACy6-UqM#w6)bfGNV@4M;lvPfBBBNqKTE{ZC{k*10dL3vfCDA`MHW)k?@ZYBDDL
ztox4Mm}Ek4Iv{(BnwLmVEfiJCrVJznH$>^WkKib}s;j)~D4vUZVt=SB`?f{;(ha%>
zg(x%X5`~8&tr#Ax%wfSlA9N=)$)6kJ$KT5rL3SUD8csYe8qKCAQ5<41N1Y}Fx7JOX
z;75h|QTS}|=bp-pDt=p)CF5UU|5aaQsUmvgqiIqJEI&}lyg%75-vfI!k4{urete=s
zc=&blF%a7<zu!qmx_|SLic~x--E5{4#-E2xHg%hZ{p3oC2Kdwo=XGK>_tQX9wypei
z3CQJKxAEf`aX;ep$5`eulXO^G<K}m2Ho_OWODlMMi*@O8d;Z-J%0m8*VCN*&Ad&+N
zb5Jj^$_~FuQ8*kZ2Zh%?YYOg?g01KE5S>%R9!c-P)}>fW@P9zf&Bb)oj20LMCK9OC
z%nelo$cd{VyW>`Y)uj!KZ`>hb|8`cEm7mFtC^u;})|5hwfZ}lP<uV+ZOXc<<dStF$
z-A$>(@o`cea`#BZZbQ}k$$coPN=V{uEZ`p{aZ{&8h~h%%4&3s5#0K2+PoSkK{B1Sy
zwGED63rV_K_J11M?M_!r$8_O6SDgOXS_<y7&GhB?AIjM_pqJUI>$CB=5Zy5y4Y0jQ
zpxY~!-`n?<o&!&J$h=h!+S97!*%WAUWBj86A?x<NMAHVIQ0oqWJ*05ca)<c&uJHNz
z>gki+j#Jgr)hyJ%)C<-IqB@Q8dJ~#Jc*x!=0fSUWmVbDoA6K?yLS!wZJq;(N%Dhh^
zv=r3kQ*EktZQ(n<4KV75C98(2Yyo~1uR5BJqbLO7ZQH2dA{IuJy<^2cuA({4!FL5T
zEFQX~olU?+lt=M4EjpX8sGoH8u}*8UgSAWCgMaB2Nu&3ljtA|dF1V*&h)pu;<QB}v
zw#0KB^M5X_nJ11AZMM(PZ+aEq)f`gTb64fP6IwO)v{R6%yxt&@Qs531Us03vMX)Yw
z^zS8C`}#yk#i*@ezS6}_dNk4^nH?Ejybx6IP(&DNNFpqVNO_^DF&Nv2H3uLU*HK9!
zj#CyL;<m!H#b5B%mNjU4v1PMSi>6+ycjaJQ>3<57wwol0V*cKpo3xWta^cRaJ%%U^
zUpa7AzHm<w12fCNwhlFd&;9b;p>np~i!41)UZ2)TUv-?rNUcjATPgT!i*5Ml4e%T<
zF!X$9C$<cU97hHa7@2uwd1NqsMz&N$5d((GS+sxdHbnzQ*mxJix3O@Bc6S+J>6ub+
zEPr{_HNrP+In-OM+HA~LY$-SXmdH?Pmne*!UHfFR%`AY@aj6T-NQ&qRvbHM8y<4dF
zG=>h4M&2&*HVmIB9gONfW;z(!d-C*f<blJeQPA;&squ3Zz0kMaBOyCqpy|8`U`=7<
zSXCWWA7(-_R@088OcmYNE{*@cxP;6v)_;%rV#DzJA8)STUca~B|9JP|^!NY2$aRUC
z@yp+2$tHgfOCEuo$(^;ik$)JmzL5{8toEe%hR9_@>&sPITuOk&;`QrkDDrh=M6p0#
z7v)`<H92`LY~*xI^F3z`3|^81_TfJizQvdBl>C(aT*!3B^zj=-@ZIq{@$Gr&{(m0Y
z-SQF)yaYeHy!gxcUl-GWbOEhEfj!NT`Yfc@t>yDqNVg3HSL_%_QWNghRH6-ob%Vu@
ztPl})?uX7&Z2Ed^Ez)oJ2ePK?%m@}b5CBGx04D!l*70U~DfE`kLhSiXhRy-SWp*FW
z!jm=BCd%dkAU^HC#BACuEEUJO)Iqj=^&b!~`Jd`~6jb!fjsOg3!ZiGbf1hkV-q+q8
mPuJ->U8n1Govzb$x=z>WI$fvhbe*pMjqAUO{mQ-ocmM!lwEDRK

delta 4033
zcmV;y4?ghRA>AQBABzY82JbLe00Zq@>yO(u63<uruMm;~**zrtO40yH+ry!~5BK4K
z;@Xb|R9T{Jb@e)tTCXq2|9&%kiK0k7kwF|RuHgFi+qd|6{r=sR`3cv}yEkv%JiESm
zfBp9Q+xKs;-aWgzzIk_b^DMY}k%-p;>yuysS$}&3A7FZcM24?nMe3Xa*E-DzRb5JI
zF8X6?>XQ;LSD!B<T$lE0rUOO%FA^oDeEC9tUCGukBtADjmihAa>f(YUi)M$J)j*Fb
zWV(%N@?^x!M>A2-f_8$Kvy?JaV5gKNiv4?Zbw>EI;`RZ&(^s{(rhns4G47nSB5}G-
zNq-_YPu%rL*K+X=6S3;ZeBhq@Smx{iZE)GB2Z-4r=zm5<v>{K-M&*1^k7K1I_QULy
z;vRe+9?#PC7wgGv*v68fZF+<i^O?NI6Zel``@qVSt3N=-6kYj9$sW4s$bXOYyOeE%
z2&ftcB4ueD@ENy0I@m6xiwvVy)#)8}f`61>a0M-7If@WR;lRg;l~1KybIU3uf|fYu
zBAU~c;0@y}qSVtBZ|nE9BC@+=PJj6SbBMQ5{!#Y*b5=LLDI%%W?TVzuW>U9~XF}Pp
zX)&$yiSS0PhSq;`1OMK@zqdzpq<;R#PfuYd;NC}-CNuVdx+y$X1#sw8SCymm?|&RO
z<f5d$J3JpVDE3~CU{;X3r;Ow=%f=HjAFUfrkuomfb}a;2BAp=xEfyq2@|t8Ndd(n}
z6qJRx1oBeMa^=>g0I$GO>=IlXfn!I1#xOqMN1#_;$A3dCawvh^g5*!dx?EJCKXr+U
z?b4&81U6BT1iL!zdAm8uVcYr2Pk-kQM3PTZ4rgqR0?q@0qJ%m_Vz$77z>=8pR8?$0
zcaIG$aIeUMIeE8+g8r~Qw`Hi<UBM}JH^rBbyNXeiBDSD>@Y9y1qWTbT>rklrE`-jH
zBUrpdOx8wWVpmiG#>_P-*c|cV)$e9N%$#AmsM`$`J5NG6M3nqQ(HncRtAANXY1q(F
z`K;V<wRZu^4ax<$EpuWowA`lT9?0k8*{rbrRq$LiTmZ-O^O*<~?u1<!yfqsK++vOJ
zI?hs%y2Jp%Y`~@B0&=2o$ti^FKJN6b*2CMs3IvS)4S*@$l%3R&(g59Ar<)5>+#LsR
zTT(`k2gSYIqoCD<mf76}&VTnnK(Pq8vr8Z_eKi<>FiP^Y5W0?uSm$DjCqaQ+=%qX?
zpeu_)1{2b1mFRy(0qptr0cBv&a{deu_LWZ;_)ySb;do~phfQ^WyB*AQf{*6l80+!N
z&p)<@pY+MDOBGLE8>B^(3LjHfMcn4TO9%tyrdCXwTJ9|e|A69A<9`u!fgBbqXKnb-
z1gr{$>jp*@$ocVzf<M41bPW4HPiPeCc>?>G)@6~;@&q1Xq4)^rM=kDLl3Kcf0LR+=
zVHb7W-SlsYZDq(qmhnaK30&A3rWnw4Q$(5Y>VnT7Cj=n?%Pp>>RrNodf%CE(nKrLd
z4>HT3+G0ilj&TbiBY&%MDKztDoL5fSj&n!&j5QyLHC5n<PjN45RLQ8YDzh}+bG20Q
ztqf=(+ANq#`JWr@Bk}Lcqb4ZAs9{@ql;6!#@Rp}k&cH`HxqgIGw-327%|j|l44Ce{
z!_LASYjS8=$zxbtHTh}6e|Tky!G4VV3W`zLSju?5e~sI#;eU;Mb(cdNCgb2n+zlm9
z&z8Vxj_pGWg?yq88&{T@-n3;Ls;q(S<%piO4LIH~--tLCu9IHoS%+2G6ba=<1W!4R
zW6i}ujfS6V$J=pDPb(U8QBANdAMOCd?j99;g(<f|F+cElVS}#sRS8oNj&e$+1izfZ
z!}q$(NE}s{o`1RnJ;qt3em&PlG>Qy*i^(PYwM%RN6qn4UG4hCgjMRU>zj4%mU%xxm
ze}9QfIQn5;CJ;-X32k^4Twh#WT+Omk%NM~<B+lURM;{p+lO;C-38Aq(v8d!(1;Nxm
zcrU?jOTfjcb(%in_DSUlcr*{8{;xm&98_h^^m#@lO@EDmM#I6HB3kLu>kSSp<f~vE
zWt6~7Ec5KLFZ`r0iAY`+p)iFC(JtyfUyAmSHmg6vGzsHvRBQ;g<~)MZjG7Xy;Skx<
zbd@9z-a3<>5%SBU#<1p_7**8EzKig&e{X!2{?Nl5p5bkDv+ie|R!ii@afRUGb92P%
zt}_RfoqxqoaZ{d`oOK8-?lyrTdX&HUQ2RLsSC&NZW$NVNtkc}%;a%B>2xn%qt%iAJ
z$OC?u47{<=u%;ar_-QdAfkXE06?3FJOvb){>E^fTESOF{N@WZ5&9gq0#owMXibF%T
zKeJja27UO|S2bOlIM1|669p?DWq~l6a6gjAj(^gzqa<5@0FNhHrCG}M!KWbJmb)Uj
zO~H(<;Ts^VDPd_6<hMnc1O;It9mu~yXsIg<_>DT+0VZ1mBxciGy@BOZ>D8KKus>y(
zUUgBn$+``JaE;a7Y#sDdXK9`?-XoO<sGeSRk_QiRjf{`TBDpwR>0sVP_vR1;i>rsS
zHh)Qvb(E)F$D3fqpLp8PiWCXhTYm&+8gyqlXKzE%r%7E)=Bg~5$=k04oeD5|8s-PG
z&cvq8Lz!Vm?su9H2LJ>oVe!!L4gT)&?6mQV4WXC+oi=t4v$gkl2CkSt;lTNEXz*Dd
zPEQ^D#{M;Z=zi7-+UI0<pThfijd`mMgMZKG_5*G5d{CM!>O8^VGC+~Wb6uBtYe>=j
zO_L$tth>La%5aEvf()JPU5~;eLCNWn;N*FuzhVELG510CY4aZ$f!v)Az))pN2SBW{
zhtI^V%(9ukI%a6^$E8k8`+5NVFnveAdWhkere$m}y1*+hn}U_a)aS?hp3XEq8h>M-
zphsQ^_k?BhTw~&28{OXvdBam7=5R2EMLYNo!gK|n0y9C$r@$NmV#0zC!nhZ`^S<Vc
zW%m_`4UOp_vpiTOK3&RV5V|DqK%9xI<%Mw-{|zCyWUJ@GrR-k+ejTf|=sW!+wNVv@
zTK4VFGLn_Sh!N1X<26EC_*sxl9)Goo3=ltYGi-rL0-@ustZxTt_~HMa#w?=_iXCG3
z+hJBT-jZYh8>3CrRLO)ERv7c6fGB3^9VlU9!b_qAPdA%{SKUiE(L#GuTB_4oo~BwE
z3A^)d6Wx+5vl(%c7*+DXdjmh~G!7vyCl-pLqY(W8=AEWZ*HbCypklJqLx0Oh%H@j*
zQ4f(ye{LD8hQJhET;_R|k^7KK-^0K|=t=W;QhMg!p&gnR5>8nrP3HoWhJtIAkqk6R
z1VyWXGFKv$5Nz&5QX3XMF466#E}N>~t!x&46y4`pTHIO$@;Eo@=rP>y^xNr_va&||
zT1UH(Cu;7&k4RE_YZCD!27f-61*N-`#ap9MR<77H1Yad7cP5B@M@E$b7)`tdZ#JEw
zwS`f*RvbO28<V6%0j3CpHz4WwKPiokCFRMv^gofESm(Z|F2Lysh%_vfRx2UvsL7b{
zv+g^3W0DEI>45AhYF;8ewNO+kn=+6T+z_SfK7ym@s;=^`qj)aviGQK4?AsRUOE>5m
z6r#+iOB5cCv|@O$GKU5Ke9)cHB!6y<AAc`j1lfHoYB=$@Xf&IeL~)449Cexy+*&tj
zf*%#;N8z)<pL;4Zs`zbHmW+Ra{a1aJrHbf{kETf_u>3$F^ZsPNd=Ko^JUUTf`SFPk
z;o;ZG$3See{C+1L>3_~gDpK*VbhDXG7=Io%+0<<s_LD0m8sJkWoY#rj+)o2Z*|zf6
zB_Nk`-Nuh&#QliVA7h!vOwwU#jho-8*$7|gF0J74E!L&W?fG{@C=2;Jf}N98gGdfA
z%t5`tDm(ltMd5Iu928#ntSPul3bvltLv&6NdnCOFTbE)j!G8laHy6`UGg@F6m`I>j
zGdENXASbSd?2cOnR+ly`zHx_${o7etR(>WoqTHm_SW^ly0*b@Em&<TuE|uGd=#ja0
zbvLCB$Hz%^$lW6qyA4(EC-<SGDj|utv4DS+#7&(VA&Lv3J8;YM5gTyNKY^B}@VC{(
z*ETqQEhOn`*?((jw>w=i9n*#PTygqiYbm(THq)2me<)|$fL>;+uFuBfLUhM;G{E*I
zfo`u@esAAbdJa6@A@f!_Xiuw>XH%fbjq#5Pgsj{55=|R;LajRh_K?C&%N^q9yTa$=
ztEW$PJ5E(gSF=$6QZHB=i0U-T>rH3^;URmg1PoFgS%2b<eq7m-36Zss_B5Q7D)T;x
z&{9yBPqnGqwT18aHo&MKmaH18vIY26yy|E=j-n8Rw{4?-i&z*@_Kp?*xQgaD2j3OY
zuz2W_b~XVQQ69zHwCHTUqJGlV$2zUa4%RMl5B{ZBB#qvGIv%u-y5OFAAvVdVlUpzw
z+Y--l%zwMIW}Y}gwAnsCzv)$cS93^V&s~-GPH5HG(@sI6@_K_rN`X66d__&t7s0x$
z(Z82m?duaE6{EI>`AQcz>Cs4wWOih9@j_6+LlI%9A&IacBISjq#$aq8)*OIbTt_8^
zI8Iq~h}#O&7JtE4Th^fI#g@%REt-0*-j#!KrGG0-+HR60iurqYZqiOp$%Q+w_86ix
zeC5Dd`NBO#49qP5+B(z-KKILWhsxP{FS7JJd3{<VebsReBegDhY^C6@Ew<sGH^6he
zz|ixZo!BxYavT{zU}WZz<&nYk8QD@1MGP1!XVLz-+Y}8LVdGs4-^Rij+TCS@rDsaP
zv47-I*9hOR<xp?2YO^t0v8CMjTOvcHU7|2@cI}hNHnRXq$E7YTBPpUQ$l9tT_imxy
z(-=BH8hN|K+c12lbTF#_nCW0>@5$4{kp~W=MnT69rpC`v^g`cukA&=efu{2&fHj4Y
zV^wujeV7T!SWP>UGF5b6yEOj);u12ySbsm}iw(o?e_Xw}dGoFP{>R(*r@#OIMXpQC
zj9>mHOE&p?Sn>$uOzy1B2l<B)>ksk)mDQdU-w?TMXnna#i%SWxSiF8c4Mo0=j3^e!
z>!Q3XvnD66g^iq!X};&Ifx%0Xz&`wk!ngR+osyrjp9`7Jm_B}^2);XhC%!!o-GARh
zyIWp@ftTQCmluCI|LbBJkS?GVD6pp)QlEv?y0v`%3hB0i;EEjsNovB~no6``ux_x}
zkrg7s&i&9?icMdStws6`|3KDsof*MG2Liz85y0f%%R1gnFNNOHS%^Kq$<R5VxXkY3
zS$MLB+C<qr0K}*LmzYhPg{9&+mqOaMul@t#CI3@hkAjMR*%5#NO_+w?@b8n&$NSp5
n<LNqGr|Wc`uG4k8PS@!=U8n1GovzdMzj6H+TFX;V0C)fZc_{n2

diff --git a/policy-rawhide-base.patch b/policy-rawhide-base.patch
index aaade969..35a266a4 100644
--- a/policy-rawhide-base.patch
+++ b/policy-rawhide-base.patch
@@ -27728,10 +27728,10 @@ index 0306134..bb5f3dd 100644
 +	')
 +')
 diff --git a/policy/modules/services/ssh.fc b/policy/modules/services/ssh.fc
-index 76d9f66..5c271ce 100644
+index 76d9f66..7528851 100644
 --- a/policy/modules/services/ssh.fc
 +++ b/policy/modules/services/ssh.fc
-@@ -1,16 +1,41 @@
+@@ -1,16 +1,42 @@
  HOME_DIR/\.ssh(/.*)?			gen_context(system_u:object_r:ssh_home_t,s0)
 +HOME_DIR/\.ansible/cp/.*	-s	gen_context(system_u:object_r:ssh_home_t,s0)
 +HOME_DIR/\.shosts			gen_context(system_u:object_r:ssh_home_t,s0)
@@ -27765,6 +27765,7 @@ index 76d9f66..5c271ce 100644
  
 +/usr/libexec/nm-ssh-service     --  gen_context(system_u:object_r:ssh_exec_t,s0)
  /usr/libexec/openssh/ssh-keysign --	gen_context(system_u:object_r:ssh_keysign_exec_t,s0)
++/usr/libexec/openssh/sshd-keygen   --	gen_context(system_u:object_r:sshd_keygen_exec_t,s0)
  
  /usr/sbin/sshd			--	gen_context(system_u:object_r:sshd_exec_t,s0)
 +/usr/sbin/sshd-keygen   --	gen_context(system_u:object_r:sshd_keygen_exec_t,s0)
@@ -36657,7 +36658,7 @@ index 79a45f6..e69fa39 100644
 +    allow $1 init_var_lib_t:dir search_dir_perms;
 +')
 diff --git a/policy/modules/system/init.te b/policy/modules/system/init.te
-index 17eda24..1522b3c 100644
+index 17eda24..09abd53 100644
 --- a/policy/modules/system/init.te
 +++ b/policy/modules/system/init.te
 @@ -11,10 +11,31 @@ gen_require(`
@@ -36882,9 +36883,12 @@ index 17eda24..1522b3c 100644
  # file descriptors inherited from the rootfs:
  files_dontaudit_rw_root_files(init_t)
  files_dontaudit_rw_root_chr_files(init_t)
-@@ -156,28 +257,64 @@ fs_list_inotifyfs(init_t)
+@@ -155,29 +256,67 @@ fs_list_inotifyfs(init_t)
+ # cjp: this may be related to /dev/log
  fs_write_ramfs_sockets(init_t)
  
++fs_read_efivarfs_files(init_t)
++
  mcs_process_set_categories(init_t)
 -mcs_killall(init_t)
  
@@ -36952,7 +36956,7 @@ index 17eda24..1522b3c 100644
  
  ifdef(`distro_gentoo',`
  	allow init_t self:process { getcap setcap };
-@@ -186,29 +323,252 @@ ifdef(`distro_gentoo',`
+@@ -186,29 +325,252 @@ ifdef(`distro_gentoo',`
  ')
  
  ifdef(`distro_redhat',`
@@ -37214,7 +37218,7 @@ index 17eda24..1522b3c 100644
  ')
  
  optional_policy(`
-@@ -216,7 +576,30 @@ optional_policy(`
+@@ -216,7 +578,30 @@ optional_policy(`
  ')
  
  optional_policy(`
@@ -37246,7 +37250,7 @@ index 17eda24..1522b3c 100644
  ')
  
  ########################################
-@@ -225,9 +608,9 @@ optional_policy(`
+@@ -225,9 +610,9 @@ optional_policy(`
  #
  
  allow initrc_t self:process { getpgid setsched setpgid setrlimit getsched };
@@ -37258,7 +37262,7 @@ index 17eda24..1522b3c 100644
  allow initrc_t self:passwd rootok;
  allow initrc_t self:key manage_key_perms;
  
-@@ -258,12 +641,16 @@ manage_fifo_files_pattern(initrc_t, initrc_state_t, initrc_state_t)
+@@ -258,12 +643,16 @@ manage_fifo_files_pattern(initrc_t, initrc_state_t, initrc_state_t)
  
  allow initrc_t initrc_var_run_t:file manage_file_perms;
  files_pid_filetrans(initrc_t, initrc_var_run_t, file)
@@ -37275,7 +37279,7 @@ index 17eda24..1522b3c 100644
  
  manage_dirs_pattern(initrc_t, initrc_var_log_t, initrc_var_log_t)
  manage_files_pattern(initrc_t, initrc_var_log_t, initrc_var_log_t)
-@@ -279,23 +666,36 @@ kernel_change_ring_buffer_level(initrc_t)
+@@ -279,23 +668,36 @@ kernel_change_ring_buffer_level(initrc_t)
  kernel_clear_ring_buffer(initrc_t)
  kernel_get_sysvipc_info(initrc_t)
  kernel_read_all_sysctls(initrc_t)
@@ -37318,7 +37322,7 @@ index 17eda24..1522b3c 100644
  corenet_tcp_sendrecv_all_ports(initrc_t)
  corenet_udp_sendrecv_all_ports(initrc_t)
  corenet_tcp_connect_all_ports(initrc_t)
-@@ -303,9 +703,11 @@ corenet_sendrecv_all_client_packets(initrc_t)
+@@ -303,9 +705,11 @@ corenet_sendrecv_all_client_packets(initrc_t)
  
  dev_read_rand(initrc_t)
  dev_read_urand(initrc_t)
@@ -37330,7 +37334,7 @@ index 17eda24..1522b3c 100644
  dev_rw_sysfs(initrc_t)
  dev_list_usbfs(initrc_t)
  dev_read_framebuffer(initrc_t)
-@@ -313,8 +715,10 @@ dev_write_framebuffer(initrc_t)
+@@ -313,8 +717,10 @@ dev_write_framebuffer(initrc_t)
  dev_read_realtime_clock(initrc_t)
  dev_read_sound_mixer(initrc_t)
  dev_write_sound_mixer(initrc_t)
@@ -37341,7 +37345,7 @@ index 17eda24..1522b3c 100644
  dev_delete_lvm_control_dev(initrc_t)
  dev_manage_generic_symlinks(initrc_t)
  dev_manage_generic_files(initrc_t)
-@@ -322,8 +726,7 @@ dev_manage_generic_files(initrc_t)
+@@ -322,8 +728,7 @@ dev_manage_generic_files(initrc_t)
  dev_delete_generic_symlinks(initrc_t)
  dev_getattr_all_blk_files(initrc_t)
  dev_getattr_all_chr_files(initrc_t)
@@ -37351,7 +37355,7 @@ index 17eda24..1522b3c 100644
  
  domain_kill_all_domains(initrc_t)
  domain_signal_all_domains(initrc_t)
-@@ -332,7 +735,6 @@ domain_sigstop_all_domains(initrc_t)
+@@ -332,7 +737,6 @@ domain_sigstop_all_domains(initrc_t)
  domain_sigchld_all_domains(initrc_t)
  domain_read_all_domains_state(initrc_t)
  domain_getattr_all_domains(initrc_t)
@@ -37359,7 +37363,7 @@ index 17eda24..1522b3c 100644
  domain_getsession_all_domains(initrc_t)
  domain_use_interactive_fds(initrc_t)
  # for lsof which is used by alsa shutdown:
-@@ -340,6 +742,7 @@ domain_dontaudit_getattr_all_udp_sockets(initrc_t)
+@@ -340,6 +744,7 @@ domain_dontaudit_getattr_all_udp_sockets(initrc_t)
  domain_dontaudit_getattr_all_tcp_sockets(initrc_t)
  domain_dontaudit_getattr_all_dgram_sockets(initrc_t)
  domain_dontaudit_getattr_all_pipes(initrc_t)
@@ -37367,7 +37371,7 @@ index 17eda24..1522b3c 100644
  
  files_getattr_all_dirs(initrc_t)
  files_getattr_all_files(initrc_t)
-@@ -347,14 +750,15 @@ files_getattr_all_symlinks(initrc_t)
+@@ -347,14 +752,15 @@ files_getattr_all_symlinks(initrc_t)
  files_getattr_all_pipes(initrc_t)
  files_getattr_all_sockets(initrc_t)
  files_purge_tmp(initrc_t)
@@ -37385,7 +37389,7 @@ index 17eda24..1522b3c 100644
  files_read_usr_files(initrc_t)
  files_manage_urandom_seed(initrc_t)
  files_manage_generic_spool(initrc_t)
-@@ -364,8 +768,12 @@ files_list_isid_type_dirs(initrc_t)
+@@ -364,8 +770,12 @@ files_list_isid_type_dirs(initrc_t)
  files_mounton_isid_type_dirs(initrc_t)
  files_list_default(initrc_t)
  files_mounton_default(initrc_t)
@@ -37399,7 +37403,7 @@ index 17eda24..1522b3c 100644
  fs_list_inotifyfs(initrc_t)
  fs_register_binary_executable_type(initrc_t)
  # rhgb-console writes to ramfs
-@@ -375,10 +783,11 @@ fs_mount_all_fs(initrc_t)
+@@ -375,10 +785,11 @@ fs_mount_all_fs(initrc_t)
  fs_unmount_all_fs(initrc_t)
  fs_remount_all_fs(initrc_t)
  fs_getattr_all_fs(initrc_t)
@@ -37413,7 +37417,7 @@ index 17eda24..1522b3c 100644
  mcs_process_set_categories(initrc_t)
  
  mls_file_read_all_levels(initrc_t)
-@@ -387,8 +796,10 @@ mls_process_read_up(initrc_t)
+@@ -387,8 +798,10 @@ mls_process_read_up(initrc_t)
  mls_process_write_down(initrc_t)
  mls_rangetrans_source(initrc_t)
  mls_fd_share_all_levels(initrc_t)
@@ -37424,7 +37428,7 @@ index 17eda24..1522b3c 100644
  
  storage_getattr_fixed_disk_dev(initrc_t)
  storage_setattr_fixed_disk_dev(initrc_t)
-@@ -398,6 +809,7 @@ term_use_all_terms(initrc_t)
+@@ -398,6 +811,7 @@ term_use_all_terms(initrc_t)
  term_reset_tty_labels(initrc_t)
  
  auth_rw_login_records(initrc_t)
@@ -37432,7 +37436,7 @@ index 17eda24..1522b3c 100644
  auth_setattr_login_records(initrc_t)
  auth_rw_lastlog(initrc_t)
  auth_read_pam_pid(initrc_t)
-@@ -416,20 +828,18 @@ logging_read_all_logs(initrc_t)
+@@ -416,20 +830,18 @@ logging_read_all_logs(initrc_t)
  logging_append_all_logs(initrc_t)
  logging_read_audit_config(initrc_t)
  
@@ -37456,7 +37460,7 @@ index 17eda24..1522b3c 100644
  
  ifdef(`distro_debian',`
  	dev_setattr_generic_dirs(initrc_t)
-@@ -451,7 +861,6 @@ ifdef(`distro_gentoo',`
+@@ -451,7 +863,6 @@ ifdef(`distro_gentoo',`
  	allow initrc_t self:process setfscreate;
  	dev_create_null_dev(initrc_t)
  	dev_create_zero_dev(initrc_t)
@@ -37464,7 +37468,7 @@ index 17eda24..1522b3c 100644
  	term_create_console_dev(initrc_t)
  
  	# unfortunately /sbin/rc does stupid tricks
-@@ -486,6 +895,10 @@ ifdef(`distro_gentoo',`
+@@ -486,6 +897,10 @@ ifdef(`distro_gentoo',`
  	sysnet_setattr_config(initrc_t)
  
  	optional_policy(`
@@ -37475,7 +37479,7 @@ index 17eda24..1522b3c 100644
  		alsa_read_lib(initrc_t)
  	')
  
-@@ -506,7 +919,7 @@ ifdef(`distro_redhat',`
+@@ -506,7 +921,7 @@ ifdef(`distro_redhat',`
  
  	# Red Hat systems seem to have a stray
  	# fd open from the initrd
@@ -37484,7 +37488,7 @@ index 17eda24..1522b3c 100644
  	files_dontaudit_read_root_files(initrc_t)
  
  	# These seem to be from the initrd
-@@ -521,6 +934,7 @@ ifdef(`distro_redhat',`
+@@ -521,6 +936,7 @@ ifdef(`distro_redhat',`
  	files_create_boot_dirs(initrc_t)
  	files_create_boot_flag(initrc_t)
  	files_rw_boot_symlinks(initrc_t)
@@ -37492,7 +37496,7 @@ index 17eda24..1522b3c 100644
  	# wants to read /.fonts directory
  	files_read_default_files(initrc_t)
  	files_mountpoint(initrc_tmp_t)
-@@ -541,6 +955,7 @@ ifdef(`distro_redhat',`
+@@ -541,6 +957,7 @@ ifdef(`distro_redhat',`
  	miscfiles_rw_localization(initrc_t)
  	miscfiles_setattr_localization(initrc_t)
  	miscfiles_relabel_localization(initrc_t)
@@ -37500,7 +37504,7 @@ index 17eda24..1522b3c 100644
  
  	miscfiles_read_fonts(initrc_t)
  	miscfiles_read_hwdata(initrc_t)
-@@ -550,8 +965,44 @@ ifdef(`distro_redhat',`
+@@ -550,8 +967,44 @@ ifdef(`distro_redhat',`
  	')
  
  	optional_policy(`
@@ -37545,7 +37549,7 @@ index 17eda24..1522b3c 100644
  	')
  
  	optional_policy(`
-@@ -559,14 +1010,31 @@ ifdef(`distro_redhat',`
+@@ -559,14 +1012,31 @@ ifdef(`distro_redhat',`
  		rpc_write_exports(initrc_t)
  		rpc_manage_nfs_state_data(initrc_t)
  	')
@@ -37577,7 +37581,7 @@ index 17eda24..1522b3c 100644
  	')
  ')
  
-@@ -577,6 +1045,39 @@ ifdef(`distro_suse',`
+@@ -577,6 +1047,39 @@ ifdef(`distro_suse',`
  	')
  ')
  
@@ -37617,7 +37621,7 @@ index 17eda24..1522b3c 100644
  optional_policy(`
  	amavis_search_lib(initrc_t)
  	amavis_setattr_pid_files(initrc_t)
-@@ -589,6 +1090,8 @@ optional_policy(`
+@@ -589,6 +1092,8 @@ optional_policy(`
  optional_policy(`
  	apache_read_config(initrc_t)
  	apache_list_modules(initrc_t)
@@ -37626,7 +37630,7 @@ index 17eda24..1522b3c 100644
  ')
  
  optional_policy(`
-@@ -610,6 +1113,7 @@ optional_policy(`
+@@ -610,6 +1115,7 @@ optional_policy(`
  
  optional_policy(`
  	cgroup_stream_connect_cgred(initrc_t)
@@ -37634,7 +37638,7 @@ index 17eda24..1522b3c 100644
  ')
  
  optional_policy(`
-@@ -626,6 +1130,17 @@ optional_policy(`
+@@ -626,6 +1132,17 @@ optional_policy(`
  ')
  
  optional_policy(`
@@ -37652,7 +37656,7 @@ index 17eda24..1522b3c 100644
  	dev_getattr_printer_dev(initrc_t)
  
  	cups_read_log(initrc_t)
-@@ -642,9 +1157,13 @@ optional_policy(`
+@@ -642,9 +1159,13 @@ optional_policy(`
  	dbus_connect_system_bus(initrc_t)
  	dbus_system_bus_client(initrc_t)
  	dbus_read_config(initrc_t)
@@ -37666,7 +37670,7 @@ index 17eda24..1522b3c 100644
  	')
  
  	optional_policy(`
-@@ -657,15 +1176,11 @@ optional_policy(`
+@@ -657,15 +1178,11 @@ optional_policy(`
  ')
  
  optional_policy(`
@@ -37684,7 +37688,7 @@ index 17eda24..1522b3c 100644
  ')
  
  optional_policy(`
-@@ -686,6 +1201,15 @@ optional_policy(`
+@@ -686,6 +1203,15 @@ optional_policy(`
  ')
  
  optional_policy(`
@@ -37700,7 +37704,7 @@ index 17eda24..1522b3c 100644
  	inn_exec_config(initrc_t)
  ')
  
-@@ -726,6 +1250,7 @@ optional_policy(`
+@@ -726,6 +1252,7 @@ optional_policy(`
  	lpd_list_spool(initrc_t)
  
  	lpd_read_config(initrc_t)
@@ -37708,7 +37712,7 @@ index 17eda24..1522b3c 100644
  ')
  
  optional_policy(`
-@@ -743,7 +1268,13 @@ optional_policy(`
+@@ -743,7 +1270,13 @@ optional_policy(`
  ')
  
  optional_policy(`
@@ -37723,7 +37727,7 @@ index 17eda24..1522b3c 100644
  	mta_dontaudit_read_spool_symlinks(initrc_t)
  ')
  
-@@ -766,6 +1297,10 @@ optional_policy(`
+@@ -766,6 +1299,10 @@ optional_policy(`
  ')
  
  optional_policy(`
@@ -37734,7 +37738,7 @@ index 17eda24..1522b3c 100644
  	postgresql_manage_db(initrc_t)
  	postgresql_read_config(initrc_t)
  ')
-@@ -775,10 +1310,20 @@ optional_policy(`
+@@ -775,10 +1312,20 @@ optional_policy(`
  ')
  
  optional_policy(`
@@ -37755,7 +37759,7 @@ index 17eda24..1522b3c 100644
  	quota_manage_flags(initrc_t)
  ')
  
-@@ -787,6 +1332,10 @@ optional_policy(`
+@@ -787,6 +1334,10 @@ optional_policy(`
  ')
  
  optional_policy(`
@@ -37766,7 +37770,7 @@ index 17eda24..1522b3c 100644
  	fs_write_ramfs_sockets(initrc_t)
  	fs_search_ramfs(initrc_t)
  
-@@ -808,8 +1357,6 @@ optional_policy(`
+@@ -808,8 +1359,6 @@ optional_policy(`
  	# bash tries ioctl for some reason
  	files_dontaudit_ioctl_all_pids(initrc_t)
  
@@ -37775,7 +37779,7 @@ index 17eda24..1522b3c 100644
  ')
  
  optional_policy(`
-@@ -818,6 +1365,10 @@ optional_policy(`
+@@ -818,6 +1367,10 @@ optional_policy(`
  ')
  
  optional_policy(`
@@ -37786,7 +37790,7 @@ index 17eda24..1522b3c 100644
  	# shorewall-init script run /var/lib/shorewall/firewall
  	shorewall_lib_domtrans(initrc_t)
  ')
-@@ -827,10 +1378,12 @@ optional_policy(`
+@@ -827,10 +1380,12 @@ optional_policy(`
  	squid_manage_logs(initrc_t)
  ')
  
@@ -37799,7 +37803,7 @@ index 17eda24..1522b3c 100644
  
  optional_policy(`
  	ssh_dontaudit_read_server_keys(initrc_t)
-@@ -857,21 +1410,62 @@ optional_policy(`
+@@ -857,21 +1412,62 @@ optional_policy(`
  ')
  
  optional_policy(`
@@ -37863,7 +37867,7 @@ index 17eda24..1522b3c 100644
  ')
  
  optional_policy(`
-@@ -887,6 +1481,10 @@ optional_policy(`
+@@ -887,6 +1483,10 @@ optional_policy(`
  ')
  
  optional_policy(`
@@ -37874,7 +37878,7 @@ index 17eda24..1522b3c 100644
  	# Set device ownerships/modes.
  	xserver_setattr_console_pipes(initrc_t)
  
-@@ -897,3 +1495,218 @@ optional_policy(`
+@@ -897,3 +1497,218 @@ optional_policy(`
  optional_policy(`
  	zebra_read_config(initrc_t)
  ')
@@ -39558,7 +39562,7 @@ index 808ba93..57a68da 100644
 +	files_etc_filetrans($1, ld_so_cache_t, file, "ld.so.preload~")
 +')
 diff --git a/policy/modules/system/libraries.te b/policy/modules/system/libraries.te
-index 54f8fa5..1584203 100644
+index 54f8fa5..544b8e3 100644
 --- a/policy/modules/system/libraries.te
 +++ b/policy/modules/system/libraries.te
 @@ -32,14 +32,14 @@ files_tmp_file(ldconfig_tmp_t)
@@ -39652,10 +39656,14 @@ index 54f8fa5..1584203 100644
  	optional_policy(`
  		unconfined_dontaudit_rw_tcp_sockets(ldconfig_t)
  	')
-@@ -131,6 +150,14 @@ optional_policy(`
+@@ -131,6 +150,18 @@ optional_policy(`
  ')
  
  optional_policy(`
++	glusterd_dontaudit_read_lib_dirs(ldconfig_t)
++')
++
++optional_policy(`
 +	gnome_append_generic_cache_files(ldconfig_t)
 +')
 +
@@ -39667,7 +39675,7 @@ index 54f8fa5..1584203 100644
  	puppet_rw_tmp(ldconfig_t)
  ')
  
-@@ -141,6 +168,3 @@ optional_policy(`
+@@ -141,6 +172,3 @@ optional_policy(`
  	rpm_manage_script_tmp_files(ldconfig_t)
  ')
  
diff --git a/policy-rawhide-contrib.patch b/policy-rawhide-contrib.patch
index 58b2d15e..fc313f0b 100644
--- a/policy-rawhide-contrib.patch
+++ b/policy-rawhide-contrib.patch
@@ -31640,10 +31640,10 @@ index 5cd0909..bd3c3d2 100644
 +corenet_tcp_connect_glance_registry_port(glance_scrubber_t)
 diff --git a/glusterd.fc b/glusterd.fc
 new file mode 100644
-index 0000000..cbd6aa4
+index 0000000..52b4110
 --- /dev/null
 +++ b/glusterd.fc
-@@ -0,0 +1,20 @@
+@@ -0,0 +1,22 @@
 +/etc/rc\.d/init\.d/gluster.*	--	gen_context(system_u:object_r:glusterd_initrc_exec_t,s0)
 +
 +/etc/glusterfs(/.*)?	gen_context(system_u:object_r:glusterd_conf_t,s0)
@@ -31659,17 +31659,19 @@ index 0000000..cbd6aa4
 +/var/lib/glusterd(/.*)?		gen_context(system_u:object_r:glusterd_var_lib_t,s0)
 +
 +/var/log/glusterfs(/.*)?	gen_context(system_u:object_r:glusterd_log_t,s0)
++/var/log/ganesha.log	--	gen_context(system_u:object_r:glusterd_log_t,s0)
 +
 +/var/run/gluster(/.*)?	gen_context(system_u:object_r:glusterd_var_run_t,s0)
 +/var/run/glusterd(/.*)?	gen_context(system_u:object_r:glusterd_var_run_t,s0)
 +/var/run/glusterd.*	--	gen_context(system_u:object_r:glusterd_var_run_t,s0)
 +/var/run/glusterd.*	-s	gen_context(system_u:object_r:glusterd_var_run_t,s0)
++/var/run/ganesha.*	--	gen_context(system_u:object_r:glusterd_var_run_t,s0)
 diff --git a/glusterd.if b/glusterd.if
 new file mode 100644
-index 0000000..fc9bf19
+index 0000000..764ae00
 --- /dev/null
 +++ b/glusterd.if
-@@ -0,0 +1,243 @@
+@@ -0,0 +1,261 @@
 +
 +## <summary>policy for glusterd</summary>
 +
@@ -31830,6 +31832,24 @@ index 0000000..fc9bf19
 +
 +######################################
 +## <summary>
++##  Dontaudit Read  /var/lib/glusterd files.
++## </summary>
++## <param name="domain">
++##  <summary>
++##  Domain allowed access.
++##  </summary>
++## </param>
++#
++interface(`glusterd_dontaudit_read_lib_dirs',`
++       gen_require(`
++               type glusterd_var_lib_t;
++       ')
++
++    dontaudit $1 glusterd_var_lib_t:dir list_dir_perms;
++')
++
++######################################
++## <summary>
 +##  Read and write /var/lib/glusterd files.
 +## </summary>
 +## <param name="domain">
@@ -31915,10 +31935,10 @@ index 0000000..fc9bf19
 +
 diff --git a/glusterd.te b/glusterd.te
 new file mode 100644
-index 0000000..afabf8c
+index 0000000..59e84ca
 --- /dev/null
 +++ b/glusterd.te
-@@ -0,0 +1,297 @@
+@@ -0,0 +1,295 @@
 +policy_module(glusterd, 1.1.3)
 +
 +## <desc>
@@ -32002,10 +32022,8 @@ index 0000000..afabf8c
 +allow glusterd_t glusterd_tmp_t:dir mounton;
 +
 +manage_dirs_pattern(glusterd_t, glusterd_log_t, glusterd_log_t)
-+append_files_pattern(glusterd_t, glusterd_log_t, glusterd_log_t)
-+create_files_pattern(glusterd_t, glusterd_log_t, glusterd_log_t)
-+setattr_files_pattern(glusterd_t, glusterd_log_t, glusterd_log_t)
-+logging_log_filetrans(glusterd_t, glusterd_log_t, dir)
++manage_files_pattern(glusterd_t, glusterd_log_t, glusterd_log_t)
++logging_log_filetrans(glusterd_t, glusterd_log_t, { file dir })
 +
 +manage_dirs_pattern(glusterd_t, glusterd_var_run_t, glusterd_var_run_t)
 +manage_files_pattern(glusterd_t, glusterd_var_run_t, glusterd_var_run_t)
@@ -45368,7 +45386,7 @@ index dd8e01a..9cd6b0b 100644
  ## <param name="domain">
  ##	<summary>
 diff --git a/logrotate.te b/logrotate.te
-index be0ab84..3c99496 100644
+index be0ab84..688605e 100644
 --- a/logrotate.te
 +++ b/logrotate.te
 @@ -5,16 +5,22 @@ policy_module(logrotate, 1.15.0)
@@ -45493,7 +45511,7 @@ index be0ab84..3c99496 100644
  files_manage_generic_spool(logrotate_t)
  files_manage_generic_spool_dirs(logrotate_t)
  files_getattr_generic_locks(logrotate_t)
-@@ -95,32 +126,52 @@ mls_process_write_to_clearance(logrotate_t)
+@@ -95,32 +126,54 @@ mls_process_write_to_clearance(logrotate_t)
  selinux_get_fs_mount(logrotate_t)
  selinux_get_enforce_mode(logrotate_t)
  
@@ -45524,6 +45542,8 @@ index be0ab84..3c99496 100644
 +miscfiles_read_hwdata(logrotate_t)
  
 -userdom_use_user_terminals(logrotate_t)
++term_dontaudit_use_unallocated_ttys(logrotate_t)
++
 +userdom_use_inherited_user_terminals(logrotate_t)
  userdom_list_user_home_dirs(logrotate_t)
  userdom_use_unpriv_users_fds(logrotate_t)
@@ -45552,7 +45572,7 @@ index be0ab84..3c99496 100644
  ')
  
  optional_policy(`
-@@ -135,16 +186,17 @@ optional_policy(`
+@@ -135,16 +188,17 @@ optional_policy(`
  
  optional_policy(`
  	apache_read_config(logrotate_t)
@@ -45572,7 +45592,7 @@ index be0ab84..3c99496 100644
  ')
  
  optional_policy(`
-@@ -170,6 +222,11 @@ optional_policy(`
+@@ -170,6 +224,11 @@ optional_policy(`
  ')
  
  optional_policy(`
@@ -45584,7 +45604,7 @@ index be0ab84..3c99496 100644
  	fail2ban_stream_connect(logrotate_t)
  ')
  
-@@ -178,7 +235,7 @@ optional_policy(`
+@@ -178,7 +237,7 @@ optional_policy(`
  ')
  
  optional_policy(`
@@ -45593,7 +45613,7 @@ index be0ab84..3c99496 100644
  ')
  
  optional_policy(`
-@@ -198,17 +255,18 @@ optional_policy(`
+@@ -198,17 +257,18 @@ optional_policy(`
  ')
  
  optional_policy(`
@@ -45615,7 +45635,7 @@ index be0ab84..3c99496 100644
  ')
  
  optional_policy(`
-@@ -216,6 +274,14 @@ optional_policy(`
+@@ -216,6 +276,14 @@ optional_policy(`
  ')
  
  optional_policy(`
@@ -45630,7 +45650,7 @@ index be0ab84..3c99496 100644
  	samba_exec_log(logrotate_t)
  ')
  
-@@ -228,26 +294,43 @@ optional_policy(`
+@@ -228,26 +296,43 @@ optional_policy(`
  ')
  
  optional_policy(`
@@ -117642,7 +117662,7 @@ index dd63de0..38ce620 100644
 -	admin_pattern($1, zabbix_tmpfs_t)
  ')
 diff --git a/zabbix.te b/zabbix.te
-index 7f496c6..b23f29d 100644
+index 7f496c6..fccb7b1 100644
 --- a/zabbix.te
 +++ b/zabbix.te
 @@ -6,27 +6,32 @@ policy_module(zabbix, 1.6.0)
@@ -117860,7 +117880,7 @@ index 7f496c6..b23f29d 100644
  
  corenet_sendrecv_zabbix_agent_server_packets(zabbix_agent_t)
  corenet_tcp_bind_zabbix_agent_port(zabbix_agent_t)
-@@ -170,6 +185,26 @@ corenet_sendrecv_ssh_client_packets(zabbix_agent_t)
+@@ -170,6 +185,30 @@ corenet_sendrecv_ssh_client_packets(zabbix_agent_t)
  corenet_tcp_connect_ssh_port(zabbix_agent_t)
  corenet_tcp_sendrecv_ssh_port(zabbix_agent_t)
  
@@ -117880,6 +117900,10 @@ index 7f496c6..b23f29d 100644
 +corenet_tcp_connect_pop_port(zabbix_agent_t)
 +corenet_tcp_sendrecv_pop_port(zabbix_agent_t)
 +
++corenet_sendrecv_postgresql_client_packets(zabbix_agent_t)
++corenet_tcp_connect_postgresql_port(zabbix_agent_t)
++corenet_tcp_sendrecv_postgresql_port(zabbix_agent_t)
++
 +corenet_sendrecv_smtp_client_packets(zabbix_agent_t)
 +corenet_tcp_connect_smtp_port(zabbix_agent_t)
 +corenet_tcp_sendrecv_smtp_port(zabbix_agent_t)
@@ -117887,7 +117911,7 @@ index 7f496c6..b23f29d 100644
  corenet_sendrecv_zabbix_client_packets(zabbix_agent_t)
  corenet_tcp_connect_zabbix_port(zabbix_agent_t)
  corenet_tcp_sendrecv_zabbix_port(zabbix_agent_t)
-@@ -177,21 +212,49 @@ corenet_tcp_sendrecv_zabbix_port(zabbix_agent_t)
+@@ -177,21 +216,49 @@ corenet_tcp_sendrecv_zabbix_port(zabbix_agent_t)
  dev_getattr_all_blk_files(zabbix_agent_t)
  dev_getattr_all_chr_files(zabbix_agent_t)
  
diff --git a/selinux-policy.spec b/selinux-policy.spec
index 6adb1539..bdb1cabf 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -19,7 +19,7 @@
 Summary: SELinux policy configuration
 Name: selinux-policy
 Version: 3.13.1
-Release: 189%{?dist}
+Release: 190%{?dist}
 License: GPLv2+
 Group: System Environment/Base
 Source: serefpolicy-%{version}.tgz
@@ -647,6 +647,12 @@ exit 0
 %endif
 
 %changelog
+* Mon May 16 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-190
+- Label /var/log/ganesha.log as gluster_log_t Allow glusterd_t domain to create glusterd_log_t files. Label /var/run/ganesha.pid as gluster_var_run_t.
+- Allow zabbix to connect to postgresql port
+- Label /usr/libexec/openssh/sshd-keygen as sshd_keygen_exec_t. BZ(1335149)
+- Allow systemd to read efivarfs. Resolve: #121
+
 * Tue May 10 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-189
 - Revert temporary fix: Replace generating man/html pages with pages from actual build. This is due to broken userspace with python3 in F23/Rawhide. Please Revert when userspace will be fixed