import selinux-policy-38.1.8-1.el9

.gitignore

@@ -1,2 +1,2 @@
 SOURCES/container-selinux.tgz
-SOURCES/selinux-policy-63e80c0.tar.gz
+SOURCES/selinux-policy-c918655.tar.gz

.selinux-policy.metadata

@@ -1,2 +1,2 @@
-f41207ff670544c6b3c0bb578c47ed5f1977a173 SOURCES/container-selinux.tgz
-beca74c63ac29151f2b2dc1a3861cd7bafaefe63 SOURCES/selinux-policy-63e80c0.tar.gz
+f8c84201555bcfb72477285b591f65fa9afc97eb SOURCES/container-selinux.tgz
+63939f054fb0b450d87ce3de2cd349e54b51be54 SOURCES/selinux-policy-c918655.tar.gz

SOURCES/modules-targeted-contrib.conf

@@ -342,13 +342,6 @@ cmirrord = module
 # 
 cobbler = module
 
-# Layer: contrib
-# Module: cockpit
-#
-# cockpit - Cockpit runs in a browser and can manage your network of GNU/Linux machines.
-# 
-cockpit = module
-
 # Layer: services
 # Module: collectd
 #
@@ -2691,3 +2684,17 @@ rhcd = module
 # wireguard
 #
 wireguard = module
+
+# Layer: contrib
+# Module: mptcpd
+#
+# mptcpd
+#
+mptcpd = module
+	
+# Layer: contrib
+# Module: rshim
+#
+# rshim
+#
+rshim = module

SOURCES/selinux-check-proper-disable.service

@@ -0,0 +1,15 @@
+[Unit]
+Description=Check that SELinux is not disabled the unsafe way
+ConditionKernelCommandLine=!selinux=0
+After=sysinit.target
+
+[Service]
+Type=oneshot
+EnvironmentFile=/etc/selinux/config
+ExecCondition=test "$SELINUX" = disabled
+ExecStart=/usr/bin/echo 'SELINUX=disabled in /etc/selinux/config, but no selinux=0 on kernel command line - SELinux may not be fully disabled. Please update bootloader configuration to pass selinux=0 to kernel at boot.'
+StandardOutput=journal+console
+SyslogLevel=warning
+
+[Install]
+WantedBy=multi-user.target