* Tue Mar 06 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-4

- Allow l2tpd_t domain to create pppox sockets
- Update dbus_system_bus_client() so calling domain could read also system_dbusd_var_lib_t link files BZ(1544251)
- Add interface abrt_map_cache()
- Update gnome_manage_home_config() to allow also map permission BZ(1544270)
- Allow oddjob_mkhomedir_t domain to be dbus system client BZ(1551770)
- Dontaudit kernel bug when several services requesting load kernel module
- Allow traceroute and unconfined domains creating sctp sockets
- Add interface corenet_sctp_bind_generic_node()
- Allow ping_t domain to create icmp sockets
- Allow staff_t to mmap abrt_var_cache_t BZ(1544273)
- Fix typo bug in dev_map_framebuffer() interface BZ(1551842)
- Dontaudit kernel bug when several services requesting load kernel module

.gitignore

@@ -254,3 +254,5 @@ serefpolicy*
 /selinux-policy-2c13be1.tar.gz
 /selinux-policy-e16d205.tar.gz
 /selinux-policy-contrib-9facb1c.tar.gz
+/selinux-policy-contrib-f564072.tar.gz
+/selinux-policy-bd7ad92.tar.gz

selinux-policy.spec

@@ -1,11 +1,11 @@
 # github repo with selinux-policy base sources
 %global git0 https://github.com/fedora-selinux/selinux-policy
-%global commit0 e16d205404edadd93214b9622c8c795ea53abe77
+%global commit0 bd7ad92fc722388928f9441892a078018914cb7b
 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7})
 
 # github repo with selinux-policy contrib sources
 %global git1 https://github.com/fedora-selinux/selinux-policy-contrib
-%global commit1 9facb1c4761877d6461472a98b8a0bc29229c83e
+%global commit1 f5640723a5d5982bde2a85b6003c12d2fbf976b6
 %global shortcommit1 %(c=%{commit1}; echo ${c:0:7})
 
 %define distro redhat
@@ -29,7 +29,7 @@
 Summary: SELinux policy configuration
 Name: selinux-policy
 Version: 3.14.2
-Release: 3%{?dist}
+Release: 4%{?dist}
 License: GPLv2+
 Group: System Environment/Base
 Source: %{git0}/archive/%{commit0}/%{name}-%{shortcommit0}.tar.gz
@@ -714,6 +714,20 @@ exit 0
 %endif
 
 %changelog
+* Tue Mar 06 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-4
+- Allow l2tpd_t domain to create pppox sockets
+- Update dbus_system_bus_client() so calling domain could read also system_dbusd_var_lib_t link files BZ(1544251)
+- Add interface abrt_map_cache()
+- Update gnome_manage_home_config() to allow also map permission BZ(1544270)
+- Allow oddjob_mkhomedir_t domain to be dbus system client BZ(1551770)
+- Dontaudit kernel bug when several services requesting load kernel module
+- Allow traceroute and unconfined domains creating sctp sockets
+- Add interface corenet_sctp_bind_generic_node()
+- Allow ping_t domain to create icmp sockets
+- Allow staff_t to mmap abrt_var_cache_t BZ(1544273)
+- Fix typo bug in dev_map_framebuffer() interface BZ(1551842)
+- Dontaudit kernel bug when several services requesting load kernel module
+
 * Mon Mar 05 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-3
 - Allow vdagent_t domain search cgroup dirs BZ(1541564)
 - Allow bluetooth_t domain listen on bluetooth sockets BZ(1549247)

sources

@@ -1,3 +1,3 @@
-SHA512 (container-selinux.tgz) = 4a209e4adc97422ce25f867096024409261ba73aaf4c2926a336e9c1dc48fc2024498667a18a19c85e926f3f87f090422e54e0774f83c98ce75bb81a9040f0d9
-SHA512 (selinux-policy-e16d205.tar.gz) = 721ead4f225e9071724ee9a2b1c521de6289e90b4b5da3fd6458421b1cf611d48928eb41fc7d852cf6ff7cd5bfa4047bf64b292896dce0281953bb46b8bd6b2a
-SHA512 (selinux-policy-contrib-9facb1c.tar.gz) = 5f23eb8a311134c8b773a2b66f0761c07409b5645158b2a92f156eb4ce8bd25dfddd7f902bb37f75b97d91559e74ce6f25c21d7af7564b4e2d0d3b9d2d262664
+SHA512 (container-selinux.tgz) = 034b1fe897360274159e54b0f872919a275522abf8017bf5d2fae4c43e5475367b850e1448edbeee0281ac8a1f208a21da0ee96bf86cba995008c597f8e06c58
+SHA512 (selinux-policy-contrib-f564072.tar.gz) = 35587369042238f95d80f8591fc6159fecb4b08c1a72f4ea09dc4cb14198353f2cfb20db11b51cf20244656e408fd119abcaf02c1784455dd33b31c35f11f809
+SHA512 (selinux-policy-bd7ad92.tar.gz) = 36239c76258f147d432de05a75cf26111671953f60a124cfab01bc8eb66be45e34c52357c0e0e864f30db045e8a7da75a75c16a2c0116716c26bedfb52485d6b