From c53bdced40081888c80f94822d4f5c455cff5ba3 Mon Sep 17 00:00:00 2001
From: Zdenek Pytela <zpytela@redhat.com>
Date: Aug 27 2021 09:39:38 +0000
Subject: * Fri Aug 27 2021 Zdenek Pytela <zpytela@redhat.com> - 3.14.3-79

- Introduce xdm_manage_bootloader booelan
Resolves: rhbz#1994096
- Rename samba_exec() to samba_exec_net()
Resolves: rhbz#1855215
- Allow sssd to set samba setting
Resolves: rhbz#1855215
- Allow dirsrv read slapd tmpfs files
Resolves: rhbz#1843238
- Allow rhsmcertd to create cache file in /var/cache/cloud-what
Resolves: rhbz#1994718

---

diff --git a/selinux-policy.spec b/selinux-policy.spec
index c8e966c..dd4ac53 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -1,6 +1,6 @@
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit 14f55fbbd083aa0bee8dd76f8084221e9b813e79
+%global commit e85301a7dd56d0a1e06332cc3255649ad26efbe3
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -23,7 +23,7 @@
 %define CHECKPOLICYVER 3.2
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 34.16
+Version: 34.17
 Release: 1%{?dist}
 License: GPLv2+
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
@@ -810,6 +810,30 @@ exit 0
 %endif
 
 %changelog
+* Fri Aug 27 2021 Zdenek Pytela <zpytela@redhat.com> - 34.17-1
+- Add support for at-spi
+- Add permissions for system dbus processes
+- Allow various domains work with ICA crypto accelerator
+- Add ica module
+- Revert "Support using ICA crypto accelerator on s390x arch"
+- Allow systemd to delete fwupd var cache files
+- Allow vmtools_unconfined_t domain transition to rpm_script_t
+- Allow dirsrv read slapd tmpfs files
+- Revert "Label /dev/shm/dirsrv/ with dirsrv_tmpfs_t label"
+- Rename samba_exec() to samba_exec_net()
+- Support using ICA crypto accelerator on s390x arch
+- Allow systemd delete /run/systemd/default-hostname
+- Allow tcpdump read system state information in /proc
+- Allow rhsmcertd to create cache file in /var/cache/cloud-what
+- Allow D-bus communication between avahi and sosreport
+- Label /usr/libexec/gdm-runtime-config with xdm_exec_t
+- Allow lldpad send to kdumpctl over a unix dgram socket
+- Revert "Allow lldpad send to kdump over a unix dgram socket"
+- Allow chronyc respond to a user chronyd instance
+- Allow ptp4l respond to pmc
+- Allow lldpad send to unconfined_t over a unix dgram socket
+- Allow sssd to set samba setting
+
 * Thu Aug 12 2021 Zdenek Pytela <zpytela@redhat.com> - 34.16-1
 - Allow systemd-timesyncd watch system dbus pid socket files
 - Allow firewalld drop capabilities
diff --git a/sources b/sources
index fc0a6ac..81ca62c 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (selinux-policy-14f55fb.tar.gz) = 5b489a5758fc3c673facd4f1742e62901cd86992882f4ef84222cb96ed0af5bd8d1351b5c16602675c68a6068eb44cb17f0f124f8572cd39afc05cb31ed8a8eb
-SHA512 (container-selinux.tgz) = 73fe355b37ec70f66e08c02e03c5f25e30a57f8506277af025e6e51c12bb670d929c915d22467e47c66b782d7275c7dac7d3d28c43342dc9dbfe0ee92be9359e
+SHA512 (selinux-policy-e85301a.tar.gz) = 53ad8cd38fab242a44cc43d7d88445f2ed74a04363bc1803cd4e1c46577938a4d4b9a9ae40e04d05415ce0f185b66f10e7f7276cb4c2731355839dddc666e6fd
+SHA512 (container-selinux.tgz) = 126c5c2a85c37a1d5e5e6424d824ee47fe45ef4853b0d164ec18596b96c6f9a2031fcd24ea11c2a56ba797b3d3863e308e06903b40f5b480f4a95e726040682a
 SHA512 (macro-expander) = 243ee49f1185b78ac47e56ca9a3f3592f8975fab1a2401c0fcc7f88217be614fe31805bacec602b728e7fcfc21dcc17d90e9a54ce87f3a0c97624d9ad885aea4