From 82d905a0d8aee7089ab7c871fbc1cbaa16f7c5db Mon Sep 17 00:00:00 2001
From: AlmaLinux RelEng Bot <eabdullin@almalinux.org>
Date: Tue, 17 Mar 2026 09:24:31 -0400
Subject: [PATCH] import UBI selinux-policy-42.1.7-1.el10_1.2

---
 selinux-policy.spec | 70 ++++++++++++++++++++++++++++++++++++---------
 1 file changed, 57 insertions(+), 13 deletions(-)

diff --git a/selinux-policy.spec b/selinux-policy.spec
index 0fad4958..2d9ac100 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -24,7 +24,7 @@
 Summary: SELinux policy configuration
 Name: selinux-policy
 Version: 42.1.7
-Release: 1%{?dist}.1
+Release: 1%{?dist}.2
 License: GPL-2.0-or-later
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
 Source1: Makefile.devel
@@ -626,11 +626,11 @@ exit 0
 
 %posttrans targeted
 %checkConfigConsistency targeted
+%postInstall $1 targeted
 %{_libexecdir}/selinux/varrun-convert.sh targeted
 %{_libexecdir}/selinux/binsbin-convert.sh targeted
-%postInstall $1 targeted
 %{_sbindir}/restorecon -Ri /usr/lib/sysimage/rpm /var/lib/rpm /etc/mdevctl.d
-%{_sbindir}/restorecon -i /usr/sbin/fapolicyd* /usr/sbin/usbguard*
+%{_sbindir}/restorecon -Ri /usr/sbin /var/run
 
 %postun targeted
 if [ $1 = 0 ]; then
@@ -653,13 +653,25 @@ exit 0
 %{_sbindir}/selinuxenabled && %{_sbindir}/semodule -nB 2> /dev/null
 exit 0
 
-%triggerin -- fapolicyd-selinux
+%triggerin -- grafana
 %{_libexecdir}/selinux/binsbin-convert.sh targeted
-%{_sbindir}/restorecon /usr/sbin/fapolicyd*
+%{_sbindir}/restorecon -Ri /usr/sbin
 
-%triggerin -- usbguard-selinux
+%triggerin -- linuxptp
 %{_libexecdir}/selinux/binsbin-convert.sh targeted
-%{_sbindir}/restorecon /usr/sbin/usbguard*
+%{_sbindir}/restorecon -Ri /usr/sbin
+
+%triggerin -- openwsman-server
+%{_libexecdir}/selinux/binsbin-convert.sh targeted
+%{_sbindir}/restorecon -Ri /usr/sbin
+
+%triggerin -- smartmontools
+%{_libexecdir}/selinux/binsbin-convert.sh targeted
+%{_sbindir}/restorecon -Ri /usr/sbin
+
+%triggerin -- usbguard
+%{_libexecdir}/selinux/binsbin-convert.sh targeted
+%{_sbindir}/restorecon -Ri /usr/sbin
 
 %triggerprein -p <lua> -- container-selinux
 %removeVarrunModuleLua targeted
@@ -670,6 +682,18 @@ exit 0
 %triggerprein -p <lua> -- fapolicyd-selinux
 %removeBinsbinModuleLua targeted
 
+%triggerprein -p <lua> -- grafana-selinux
+%removeBinsbinModuleLua targeted
+
+%triggerprein -p <lua> -- linuxptp-selinux
+%removeBinsbinModuleLua targeted
+
+%triggerprein -p <lua> -- openwsman-selinux
+%removeBinsbinModuleLua targeted
+
+%triggerprein -p <lua> -- smartmontools-selinux
+%removeBinsbinModuleLua targeted
+
 %triggerprein -p <lua> -- usbguard-selinux
 %removeBinsbinModuleLua targeted
 
@@ -677,18 +701,30 @@ exit 0
 rm -f %{_sysconfdir}/selinux/*/modules/active/modules/sandbox.pp.disabled 2>/dev/null
 exit 0
 
-%triggerpostun -- pcp-selinux
-%{_libexecdir}/selinux/varrun-convert.sh targeted
-exit 0
-
 %triggerpostun -- container-selinux
 %{_libexecdir}/selinux/varrun-convert.sh targeted
 exit 0
 
-%triggerpostun -- fapolicyd-selinux
+%triggerpostun -- grafana-selinux
 %{_libexecdir}/selinux/binsbin-convert.sh targeted
 exit 0
 
+%triggerpostun -- linuxptp-selinux
+%{_libexecdir}/selinux/binsbin-convert.sh targeted
+exit 0
+
+%triggerpostun -- openwsman-selinux
+%{_libexecdir}/selinux/binsbin-convert.sh targeted
+exit 0
+
+%triggerpostun -- smartmontools-selinux
+%{_libexecdir}/selinux/binsbin-convert.sh targeted
+exit 0
+
+%triggerpostun -- pcp-selinux
+%{_libexecdir}/selinux/varrun-convert.sh targeted
+exit 0
+
 %triggerpostun -- usbguard-selinux
 %{_libexecdir}/selinux/binsbin-convert.sh targeted
 exit 0
@@ -908,10 +944,11 @@ exit 0
 
 %posttrans mls
 %checkConfigConsistency mls
+%postInstall $1 mls
 %{_libexecdir}/selinux/varrun-convert.sh mls
 %{_libexecdir}/selinux/binsbin-convert.sh mls
-%postInstall $1 mls
 %{_sbindir}/restorecon -Ri /usr/lib/sysimage/rpm /var/lib/rpm
+%{_sbindir}/restorecon -Ri /usr/sbin /var/run
 
 %postun mls
 if [ $1 = 0 ]; then
@@ -949,6 +986,13 @@ SELinux mls policy package - extra modules
 
 %changelog
 ## START: Generated by rpmautospec
+* Thu Feb 19 2026 Vit Mojzis <vmojzis@redhat.com> - 42.1.7-1.2
+- Update specfile triggers for DSP modules (RHEL-132492)
+- Update specfile trigger for smartmontools
+- Update specfile trigger for openwsman
+- Move triggerin scriptlets to the parent packages (RHEL-150914)
+- Rebuild policy before running {binsbin|varrun}-convert.sh (RHEL-128498)
+
 * Fri Feb 13 2026 Zdenek Pytela <zpytela@redhat.com> - 42.1.7-1.1
 - Allow nfsd_t domain setuid and setgid capability for rpc.mountd
 Resolves: RHEL-148248