import selinux-policy-40.13.13-1.el10

.gitignore

@@ -1,2 +1,2 @@
 SOURCES/container-selinux.tgz
-SOURCES/selinux-policy-e0e55ec.tar.gz
+SOURCES/selinux-policy-e464c3b.tar.gz

.selinux-policy.metadata

@@ -1,2 +1,2 @@
-af636ad9e5dcfa4a0086e0bc91aa01749bba8493 SOURCES/container-selinux.tgz
-5e463dff1b417b36730f44922c51ff95a509e565 SOURCES/selinux-policy-e0e55ec.tar.gz
+a7770e3ebc8e88c6c514ec4a8fe532526e3798ae SOURCES/container-selinux.tgz
+26ce88444772beacbefbd1647e4b89eca510518c SOURCES/selinux-policy-e464c3b.tar.gz

SPECS/selinux-policy.spec

@@ -1,6 +1,6 @@
 # github repo with selinux-policy sources
 %global giturl https://github.com/fedora-selinux/selinux-policy
-%global commit e0e55ecfdebae28221324ff62a7784fe509617df
+%global commit e464c3bb967763b8bfac50769b72159d040088b9
 %global shortcommit %(c=%{commit}; echo ${c:0:7})
 
 %define distro redhat
@@ -23,8 +23,8 @@
 %define CHECKPOLICYVER 3.2
 Summary: SELinux policy configuration
 Name: selinux-policy
-Version: 40.13.12
-Release: 2%{?dist}
+Version: 40.13.13
+Release: 1%{?dist}
 License: GPL-2.0-or-later
 Source: %{giturl}/archive/%{commit}/%{name}-%{shortcommit}.tar.gz
 Source1: modules-targeted-base.conf
@@ -860,6 +860,20 @@ exit 0
 %endif
 
 %changelog
+* Tue Nov 12 2024 Zdenek Pytela <zpytela@redhat.com> - 40.13.13-1
+- Revert "Allow unconfined_t execute kmod in the kmod domain"
+Resolves: RHEL-65190
+- Add policy for /usr/libexec/samba/samba-bgqd
+Resolves: RHEL-64908
+- Label samba certificates with samba_cert_t
+Resolves: RHEL-64908
+- Label /usr/bin/samba-gpupdate with samba_gpupdate_exec_t
+Resolves: RHEL-64908
+- Allow rpcd read network sysctls
+Resolves: RHEL-64737
+- Label all semanage store files in /etc as semanage_store_t
+Resolves: RHEL-65864
+
 * Tue Oct 29 2024 Troy Dawson <tdawson@redhat.com> - 40.13.12-2
 - Bump release for October 2024 mass rebuild:
   Resolves: RHEL-64018