fix context of /usr/bin/rpmdb

fix-context-of-usr-bin-rpmdb.patch

@@ -0,0 +1,25 @@
+From 52211f802fa1a34f22fca6acbc5a6dd5119d0f8e Mon Sep 17 00:00:00 2001
+From: lujie42 <lujie42@huawei.com>
+Date: Mon, 28 Feb 2022 11:59:33 +0800
+Subject: [PATCH] fix context of /usr/bin/rpmdb
+
+Signed-off-by: lujie42 <lujie42@huawei.com>
+---
+ policy/modules/contrib/rpm.fc | 1 -
+ 1 file changed, 1 deletion(-)
+
+diff --git a/policy/modules/contrib/rpm.fc b/policy/modules/contrib/rpm.fc
+index 8a5a4ad..2db8826 100644
+--- a/policy/modules/contrib/rpm.fc
++++ b/policy/modules/contrib/rpm.fc
+@@ -8,7 +8,6 @@
+ /usr/bin/dnf-automatic  --  gen_context(system_u:object_r:rpm_exec_t,s0)
+ /usr/bin/dnf-[0-9]+		--	gen_context(system_u:object_r:rpm_exec_t,s0)
+ /usr/bin/rpm 			--	gen_context(system_u:object_r:rpm_exec_t,s0)
+-/usr/bin/rpmdb 			--	gen_context(system_u:object_r:rpmdb_exec_t,s0)
+ /usr/bin/smart 			--	gen_context(system_u:object_r:rpm_exec_t,s0)
+ 
+ /bin/yum-builddep		--	gen_context(system_u:object_r:rpm_exec_t,s0)
+-- 
+1.8.3.1
+

selinux-policy.spec

@@ -12,7 +12,7 @@
 Summary: SELinux policy configuration
 Name:    selinux-policy
 Version: 35.5
-Release: 2
+Release: 3
 License: GPLv2+
 URL:     https://github.com/fedora-selinux/selinux-policy/
 
@@ -67,6 +67,7 @@ Patch10: add-avc-for-systemd.patch
 #Patch6000: backport-Allow-kdump_t-net_admin-capability.patch
 
 Patch9000: add-qemu_exec_t-for-stratovirt.patch
+Patch9001: fix-context-of-usr-bin-rpmdb.patch
 
 BuildArch: noarch
 BuildRequires:  python3 gawk checkpolicy >= %{CHECKPOLICYVER} m4 policycoreutils-devel >= %{POLICYCOREUTILSVER} bzip2 gcc
@@ -732,6 +733,9 @@ exit 0
 %endif
 
 %changelog
+* Mon Feb 28 2022 lujie42 <lujie42@huawei.com> - 35.5-3
+- fix context of /usr/bin/rpmdb
+
 * Mon Feb 21 2022 lujie42 <lujie42@huawei.com> - 35.5-2
 - selinux-requires macro shouldn't depend on policycoreutils-python