import selinux-policy-38.1.11-2.el9_2

.gitignore

@@ -1,2 +1,2 @@
 SOURCES/container-selinux.tgz
-SOURCES/selinux-policy-58474dd.tar.gz
+SOURCES/selinux-policy-1f00e99.tar.gz

.selinux-policy.metadata

@@ -1,2 +1,2 @@
-ac01fd6272f1e24bd626d3990519275360c078cc SOURCES/container-selinux.tgz
+368f36667704ff6a973907b58587b162d73ff713 SOURCES/container-selinux.tgz
-6c48fcbc0c141e0f5a840fe7e8040d794ad48cac SOURCES/selinux-policy-58474dd.tar.gz
+89abf7c3517c16b3d7ad3b54b1ddcca331180be7 SOURCES/selinux-policy-1f00e99.tar.gz

SOURCES/modules-targeted-contrib.conf

@@ -342,13 +342,6 @@ cmirrord = module
 # 
 cobbler = module
 
-# Layer: contrib
-# Module: cockpit
-#
-# cockpit - Cockpit runs in a browser and can manage your network of GNU/Linux machines.
-# 
-cockpit = module
-
 # Layer: services
 # Module: collectd
 #
@@ -2691,3 +2684,17 @@ rhcd = module
 # wireguard
 #
 wireguard = module
+
+# Layer: contrib
+# Module: mptcpd
+#
+# mptcpd
+#
+mptcpd = module
+	
+# Layer: contrib
+# Module: rshim
+#
+# rshim
+#
+rshim = module

SOURCES/selinux-check-proper-disable.service

@@ -0,0 +1,15 @@
+[Unit]
+Description=Check that SELinux is not disabled the unsafe way
+ConditionKernelCommandLine=!selinux=0
+After=sysinit.target
+
+[Service]
+Type=oneshot
+EnvironmentFile=/etc/selinux/config
+ExecCondition=test "$SELINUX" = disabled
+ExecStart=/usr/bin/echo 'SELINUX=disabled in /etc/selinux/config, but no selinux=0 on kernel command line - SELinux may not be fully disabled. Please update bootloader configuration to pass selinux=0 to kernel at boot.'
+StandardOutput=journal+console
+SyslogLevel=warning
+
+[Install]
+WantedBy=multi-user.target