import selinux-policy-3.14.3-81.el8

.gitignore

@@ -1,3 +1,3 @@
 SOURCES/container-selinux.tgz
-SOURCES/selinux-policy-8f56f63.tar.gz
-SOURCES/selinux-policy-contrib-e231b3e.tar.gz
+SOURCES/selinux-policy-6e0d34e.tar.gz
+SOURCES/selinux-policy-contrib-ace9ad5.tar.gz

.selinux-policy.metadata

@@ -1,3 +1,3 @@
-1e65dcb828792d3eba6cf15383ab9da3132e8b8b SOURCES/container-selinux.tgz
-672cfe526149ad56c857a79856e769548d9ead8e SOURCES/selinux-policy-8f56f63.tar.gz
-f386b378f3a398fc17dfbaa3acfacbeaeaf5e0b4 SOURCES/selinux-policy-contrib-e231b3e.tar.gz
+41318a338b3da94dc66956083f96432b5034460a SOURCES/container-selinux.tgz
+59412a36808077381bf02f336194b4717d1ad18b SOURCES/selinux-policy-6e0d34e.tar.gz
+0988e5766dcdc691221379775563a812e60b6247 SOURCES/selinux-policy-contrib-ace9ad5.tar.gz

SPECS/selinux-policy.spec

@@ -1,11 +1,11 @@
 # github repo with selinux-policy base sources
 %global git0 https://github.com/fedora-selinux/selinux-policy
-%global commit0 8f56f631a921d043bc8176f7c64a38cd77b48f66
+%global commit0 6e0d34e9aaf5d69426eb5252ced3be24368cc186
 %global shortcommit0 %(c=%{commit0}; echo ${c:0:7})
 
 # github repo with selinux-policy contrib sources
 %global git1 https://github.com/fedora-selinux/selinux-policy-contrib
-%global commit1 e231b3e6ede7acd60339cc7264bbdba1da6014d2
+%global commit1 ace9ad57089bd19b42a7d9c8c6c67244b99be436
 %global shortcommit1 %(c=%{commit1}; echo ${c:0:7})
 
 %define distro redhat
@@ -29,7 +29,7 @@
 Summary: SELinux policy configuration
 Name: selinux-policy
 Version: 3.14.3
-Release: 80%{?dist}
+Release: 81%{?dist}
 License: GPLv2+
 Source: %{git0}/archive/%{commit0}/%{name}-%{shortcommit0}.tar.gz
 Source29: %{git1}/archive/%{commit1}/%{name}-contrib-%{shortcommit1}.tar.gz
@@ -715,9 +715,21 @@ exit 0
 %endif
 
 %changelog
+* Mon Oct 04 2021 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-81
+- Allow unconfined domains to bpf all other domains
+Resolves: rhbz#1991443
+- Allow vmtools_unconfined_t domain transition to rpm_script_t
+Resolves: rhbz#1872245
+- Allow unbound connectto unix_stream_socket
+Resolves: rhbz#1905441
+- Label /usr/sbin/virtproxyd as virtd_exec_t
+Resolves: rhbz#1854332
+- Allow postfix_domain to sendto unix dgram sockets.
+Resolves: rhbz#1920521
+
 * Thu Sep 16 2021 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-80
 - Allow rhsmcertd_t dbus chat with anaconda install_t
-Resolves: rhbz#2002666
+Resolves: rhbz#2004990
 
 * Fri Aug 27 2021 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-79
 - Introduce xdm_manage_bootloader booelan