From ddedf0d0b5444d15a05dc411b01b880cfb015634 Mon Sep 17 00:00:00 2001
From: Zdenek Pytela <zpytela@redhat.com>
Date: Mon, 30 Aug 2021 16:11:20 +0200
Subject: [PATCH] * Mon Aug 30 2021 Zdenek Pytela <zpytela@redhat.com> -
 34.1.15-1 - Update ica_filetrans_named_content() with create_file_perms
 Resolves: rhbz#1976180 - Allow various domains work with ICA crypto
 accelerator Resolves: rhbz#1976180 - Add ica module Resolves: rhbz#1976180 -
 Revert "Support using ICA crypto accelerator on s390x arch" Resolves:
 rhbz#1976180 - Fix the gnome_atspi_domtrans() interface summary Resolves:
 rhbz#1972655 - Add support for at-spi Resolves: rhbz#1972655 - Add
 permissions for system dbus processes Resolves: rhbz#1972655 - Allow /tmp
 file transition for dbus-daemon also for sock_file Resolves: rhbz#1972655

---
 modules-targeted-contrib.conf |  7 +++++++
 selinux-policy.spec           | 22 ++++++++++++++++++++--
 sources                       |  4 ++--
 3 files changed, 29 insertions(+), 4 deletions(-)

diff --git a/modules-targeted-contrib.conf b/modules-targeted-contrib.conf
index 9568fe60..abdba8ef 100644
--- a/modules-targeted-contrib.conf
+++ b/modules-targeted-contrib.conf
@@ -2663,3 +2663,10 @@ rrdcached = module
 # stratisd
 #
 stratisd = module
+
+# Layer: contrib
+# Module: ica
+#
+# ica
+#
+ica = module
diff --git a/selinux-policy.spec b/selinux-policy.spec
index cad6089f..70412788 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,6 +1,6 @@
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit 7883ee3b639252f87fb8c839eac707631a81adab
+%global commit 2ec72a07f432737e21bbc78d6ef1cbf6ed360224
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -23,7 +23,7 @@
 %define CHECKPOLICYVER 3.2
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 34.1.14
+Version: 34.1.15
 Release: 1%{?dist}
 License: GPLv2+
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
@@ -792,6 +792,24 @@ exit 0
 %endif
 
 %changelog
+* Mon Aug 30 2021 Zdenek Pytela <zpytela@redhat.com> - 34.1.15-1
+- Update ica_filetrans_named_content() with create_file_perms
+Resolves: rhbz#1976180
+- Allow various domains work with ICA crypto accelerator
+Resolves: rhbz#1976180
+- Add ica module
+Resolves: rhbz#1976180
+- Revert "Support using ICA crypto accelerator on s390x arch"
+Resolves: rhbz#1976180
+- Fix the gnome_atspi_domtrans() interface summary
+Resolves: rhbz#1972655
+- Add support for at-spi
+Resolves: rhbz#1972655
+- Add permissions for system dbus processes
+Resolves: rhbz#1972655
+- Allow /tmp file transition for dbus-daemon also for sock_file
+Resolves: rhbz#1972655
+
 * Wed Aug 25 2021 Zdenek Pytela <zpytela@redhat.com> - 34.1.14-1
 - Support using ICA crypto accelerator on s390x arch
 Resolves: rhbz#1976180
diff --git a/sources b/sources
index dc3ae609..6df6fe4a 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-7883ee3.tar.gz) = 2bffb7d76ee161de126ec3a934d4206dd9dd2b843f82b77db3c6ddd8e45dbd6e52f18a2386539a30fb4acfb8d6da6ede455ea9cd7ab69845b9959d3de3c557c9
+SHA512 (selinux-policy-2ec72a0.tar.gz) = c77e80ddcb0de9bef01e875f9695aac0f9fdb88b9d68eb554fc30c5470b9b87c8bbf35dd6244014bbffd684da3d452c4e69e4500bb1477114c18c42bbea0c827
+SHA512 (container-selinux.tgz) = 91caaa8f5fbaa14875bbaa5bc959df86d1eeb9d6ab82c5829ac6e954b2a86676546d0a6034b16503efcce1b64679f433fd7e35dea12d282001b279ea7a340fc9
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4
-SHA512 (container-selinux.tgz) = 59285f94de5feca9fd22eb9ab5d3e2360010c6b29111ce5e69de49f4745a4d27a7a4816287a8bc6d646e76b02f93896d4114f631f1bfa3922c461253f233d1fb