From 97e566ad13060ed120c954691940ac1a8d1f0c78 Mon Sep 17 00:00:00 2001
From: Zdenek Pytela <zpytela@redhat.com>
Date: Sep 15 2023 13:24:06 +0000
Subject: * Fri Sep 15 2023 Zdenek Pytela <zpytela@redhat.com> - 38.28-1

- Allow sssd domain transition on passkey_child execution conditionally
- Allow login_userdomain watch lnk_files in /usr
- Allow login_userdomain watch video4linux devices
- Change systemd-network-generator transition to include class file
- Revert "Change file transition for systemd-network-generator"
- Allow nm-dispatcher winbind plugin read/write samba var files
- Allow systemd-networkd write to cgroup files
- Allow kdump create and use its memfd: objects

---

diff --git a/selinux-policy.spec b/selinux-policy.spec
index 9971caf..dba2e32 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,6 +1,6 @@
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit ded2cf077576e3a3ab20263ff3b07b2a5b397ca1
+%global commit 2eb41b7bd9949fae4421e2590e4dda01c5b43fc5
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -23,7 +23,7 @@
 %define CHECKPOLICYVER 3.2
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 38.27
+Version: 38.28
 Release: 1%{?dist}
 License: GPL-2.0-or-later
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
@@ -814,6 +814,16 @@ exit 0
 %endif
 
 %changelog
+* Fri Sep 15 2023 Zdenek Pytela <zpytela@redhat.com> - 38.28-1
+- Allow sssd domain transition on passkey_child execution conditionally
+- Allow login_userdomain watch lnk_files in /usr
+- Allow login_userdomain watch video4linux devices
+- Change systemd-network-generator transition to include class file
+- Revert "Change file transition for systemd-network-generator"
+- Allow nm-dispatcher winbind plugin read/write samba var files
+- Allow systemd-networkd write to cgroup files
+- Allow kdump create and use its memfd: objects
+
 * Fri Sep 01 2023 Zdenek Pytela <zpytela@redhat.com> - 38.27-1
 - Allow fedora-third-party get generic filesystem attributes
 - Allow sssd use usb devices conditionally
diff --git a/sources b/sources
index a77c185..9e8e4ac 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-ded2cf0.tar.gz) = dcaeefca9f57a7751a02d6952adeb4d9a4112076b0a8b7200988e636ca0ed86782f3213d2e964796b5ea56e23fd7c2d86209fae1eb3c109fbcd54298418dc439
-SHA512 (container-selinux.tgz) = ee056290bd2011d83478b87eb16bf1b38a3a0b038648747ac6bed88e370aea71c8201842633de87027866d9b59e09a00612eae4c5045765bd741914103fd301d
+SHA512 (selinux-policy-2eb41b7.tar.gz) = ff51f7794093670e0883e88f8464fe2915a2b44650a3d5443bdc2c124a95fd1406472b932adc685eafa688cc7aa5784fde6b568d05095a1741188e12725f11a1
+SHA512 (container-selinux.tgz) = cd804231ab0d27b1b2f481db32dabba44be4d0a5e7e89c7fbec0a5850d02154807c8bb3b2fa76de43a5cd4b902f626b3ab16f6cb5ae0a20e4d19e76d371666d2
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4