From 66e607f19e53407d16d6fe3faa2409e0cf2e0337 Mon Sep 17 00:00:00 2001
From: Zdenek Pytela <zpytela@redhat.com>
Date: Thu, 22 Feb 2024 17:27:43 +0100
Subject: [PATCH] * Thu Feb 22 2024 Zdenek Pytela <zpytela@redhat.com> -
 3.14.3-137 - Differentiate between staff and sysadm when executing crontab
 with sudo Resolves: RHEL-1388 - Allow su domains write login records
 Resolves: RHEL-2606 - Revert "Allow su domains write login records" Resolves:
 RHEL-2606 - Add crontab_admin_domtrans interface Resolves: RHEL-1388 - Allow
 gpg manage rpm cache Resolves: RHEL-11249

---
 .gitignore          |  2 ++
 selinux-policy.spec | 18 +++++++++++++++---
 sources             |  6 +++---
 3 files changed, 20 insertions(+), 6 deletions(-)

diff --git a/.gitignore b/.gitignore
index 0b6a094e..7a0bb68e 100644
--- a/.gitignore
+++ b/.gitignore
@@ -36,3 +36,5 @@ SOURCES/selinux-policy-contrib-c6da44c.tar.gz
 /selinux-policy-contrib-de23cff.tar.gz
 /selinux-policy-82ab8ed.tar.gz
 /selinux-policy-contrib-6292557.tar.gz
+/selinux-policy-552905c.tar.gz
+/selinux-policy-contrib-91c6683.tar.gz
diff --git a/selinux-policy.spec b/selinux-policy.spec
index f103bba8..12d1ebec 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,11 +1,11 @@
 # github repo with selinux-policy base sources
 %global git0 https://github.com/fedora-selinux/selinux-policy
-%global commit0 82ab8ed59e218529e7d4ed54c3d9a41fdf92a223
+%global commit0 552905cb94a7790fb51586b7778d303be21692a4
 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7})
 
 # github repo with selinux-policy contrib sources
 %global git1 https://github.com/fedora-selinux/selinux-policy-contrib
-%global commit1 6292557be1c849ca97bb2d6da2393e7ab02a6f0d
+%global commit1 91c6683da692e18fea6e20aa37a34ba988746d6c
 %global shortcommit1 %(c=%{commit1}; echo ${c:0:7})
 
 %define distro redhat
@@ -29,7 +29,7 @@
 Summary: SELinux policy configuration
 Name: selinux-policy
 Version: 3.14.3
-Release: 136%{?dist}
+Release: 137%{?dist}
 License: GPLv2+
 Source: %{git0}/archive/%{commit0}/%{name}-%{shortcommit0}.tar.gz
 Source29: %{git1}/archive/%{commit1}/%{name}-contrib-%{shortcommit1}.tar.gz
@@ -718,6 +718,18 @@ exit 0
 %endif
 
 %changelog
+* Thu Feb 22 2024 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-137
+- Differentiate between staff and sysadm when executing crontab with sudo
+Resolves: RHEL-1388
+- Allow su domains write login records
+Resolves: RHEL-2606
+- Revert "Allow su domains write login records"
+Resolves: RHEL-2606
+- Add crontab_admin_domtrans interface
+Resolves: RHEL-1388
+- Allow gpg manage rpm cache
+Resolves: RHEL-11249
+
 * Thu Feb 15 2024 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-136
 - Transition from sudodomains to crontab_t when executing crontab_exec_t
 Resolves: RHEL-1388
diff --git a/sources b/sources
index 444b6d7e..d4f16e13 100644
--- a/sources
+++ b/sources
@@ -1,4 +1,4 @@
-SHA512 (selinux-policy-82ab8ed.tar.gz) = 3ddb370e9c1d6c832368c26761987b073477ce1ae6d012d45a13ed8efede4ccbb9ce2de5b0ac4a0eae3c1d1d00161001de0803e57fe6e730532f1531879fe9c9
-SHA512 (selinux-policy-contrib-6292557.tar.gz) = 38a4104b01b151859fb85c91705647462fd6bda89d4055911c689a6cf30a4a01e4e3dd7e2d40ffe1813e5aae41c495ecec8bb7711f473bc35ce6095028887b73
+SHA512 (selinux-policy-552905c.tar.gz) = 9ace6b1b142bd3ddeda75f06b1eb31735443502cd1371d4a14c48dc7a72e1fb430ebe61eca6c221f622c9518ebbbc668aa6d4ce90db9b520d64cec570a312189
+SHA512 (selinux-policy-contrib-91c6683.tar.gz) = 3fecdca099e06acfd02c684e5b74422c9379964648c378228078407ec4e3fed588e883156c872ba8c510ef28536710db62e17eef43ea7e501ed012b8dfe37bfc
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
-SHA512 (container-selinux.tgz) = 4df29305bf3fb3c89a673547e8265461881b5bd764d2b34855ca2b1b64aa4acd842908ff4c8e35dd3d27dc935645c16b26872b29258cc48a606dbe3dcd7da3fe
+SHA512 (container-selinux.tgz) = a469932519bcd5891b1be4ec36550583c4233773047d081d44bb4b5e2351d36c1f313f3a73cab6d5a80b7c837046a663f32f99ccfbf7f2d3f439ca3c08b95e6f