From 84175430500def30722e3cd8e954aabb711d3358 Mon Sep 17 00:00:00 2001
From: Zdenek Pytela <zpytela@redhat.com>
Date: Tue, 22 Jun 2021 11:50:15 +0200
Subject: [PATCH] * Tue Jun 22 2021 Zdenek Pytela <zpytela@redhat.com> -
 34.12-2 - Add a systemd service to check that SELinux is disabled properly -
 specfile: Add unowned dir to the macro - Relabel /dev/dma_heap explicitly

---
 selinux-policy.spec | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/selinux-policy.spec b/selinux-policy.spec
index 7278c1ba..240d6ee5 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -24,7 +24,7 @@
 Summary: SELinux policy configuration
 Name: selinux-policy
 Version: 34.12
-Release: 1%{?dist}
+Release: 2
 License: GPLv2+
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
 Source1: modules-targeted-base.conf
@@ -285,6 +285,10 @@ if %{_sbindir}/selinuxenabled && [ "${SELINUXTYPE}" = %1 -a -f ${FILE_CONTEXT}.p
      %{_sbindir}/fixfiles -C ${FILE_CONTEXT}.pre restore &> /dev/null > /dev/null; \
      rm -f ${FILE_CONTEXT}.pre; \
 fi; \
+# the type of the /dev/dma_heap directory has changed, therefore explicit relabeling \
+# is needed as fixfiles excludes /dev \
+# this is a temporary workaround till July 2021 \
+[ -f /dev/dma_heap ] && %{_sbindir}/restorecon -R /dev/dma_heap \
 if %{_sbindir}/restorecon -e /run/media -R /root /var/log /var/run /etc/passwd* /etc/group* /etc/*shadow* 2> /dev/null;then \
     continue; \
 fi;
@@ -806,6 +810,11 @@ exit 0
 %endif
 
 %changelog
+* Tue Jun 22 2021 Zdenek Pytela <zpytela@redhat.com> - 34.12-2
+- Add a systemd service to check that SELinux is disabled properly
+- specfile: Add unowned dir to the macro
+- Relabel /dev/dma_heap explicitly
+
 * Mon Jun 21 2021 Zdenek Pytela <zpytela@redhat.com> - 34.12-1
 - Label /dev/dma_heap/* char devices with dma_device_t
 - Revert "Label /dev/dma_heap/* char devices with dma_device_t"