refpolicy: update to latest git revHEADmaster

* 739ee699b portage: grant compile domains getattr on chr_files in /dev
* 7de9ae015 ssh: set file context for default locations of split binaries
* 4af789c43 check_fc_files.py: Add a version suffix match
* e93b0cf5e devices: Add iio write and rw interfaces

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>

2 files changed, 8 insertions, 7 deletions

diff --git a/recipes-security/refpolicy/refpolicy/0013-fc-fstools-fix-real-path-for-fstools.patch b/recipes-security/refpolicy/refpolicy/0013-fc-fstools-fix-real-path-for-fstools.patch
index 3463350..5cde88d 100644
--- a/recipes-security/refpolicy/refpolicy/0013-fc-fstools-fix-real-path-for-fstools.patch
+++ b/recipes-security/refpolicy/refpolicy/0013-fc-fstools-fix-real-path-for-fstools.patch
@@ -1,4 +1,4 @@
-From 1249ee744695066f00978af709e637dcf450efa9 Mon Sep 17 00:00:00 2001
+From 284638aff460da4730009afe994175ce2f4d184f Mon Sep 17 00:00:00 2001
 From: Wenzong Fan <wenzong.fan@windriver.com>
 Date: Mon, 27 Jan 2014 03:54:01 -0500
 Subject: [PATCH] fc/fstools: fix real path for fstools
@@ -10,11 +10,11 @@ Signed-off-by: Shrikant Bobade <shrikant_bobade@mentor.com>
 Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
 Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
 ---
- policy/modules/system/fstools.fc | 10 ++++++++++
- 1 file changed, 10 insertions(+)
+ policy/modules/system/fstools.fc | 11 +++++++++++
+ 1 file changed, 11 insertions(+)
 
 diff --git a/policy/modules/system/fstools.fc b/policy/modules/system/fstools.fc
-index f12c3515b..e719d7a04 100644
+index f12c3515b..500acfb23 100644
 --- a/policy/modules/system/fstools.fc
 +++ b/policy/modules/system/fstools.fc
 @@ -55,7 +55,9 @@
@@ -27,7 +27,7 @@ index f12c3515b..e719d7a04 100644
  /usr/sbin/cfdisk               --      gen_context(system_u:object_r:fsadm_exec_t,s0)
  /usr/sbin/clubufflush          --      gen_context(system_u:object_r:fsadm_exec_t,s0)
  /usr/sbin/delpart              --      gen_context(system_u:object_r:fsadm_exec_t,s0)
-@@ -68,23 +70,29 @@
+@@ -68,23 +70,30 @@
  /usr/sbin/e2mmpstatus          --      gen_context(system_u:object_r:fsadm_exec_t,s0)
  /usr/sbin/fatsort              --      gen_context(system_u:object_r:fsadm_exec_t,s0)
  /usr/sbin/fdisk                        --      gen_context(system_u:object_r:fsadm_exec_t,s0)
@@ -35,6 +35,7 @@ index f12c3515b..e719d7a04 100644
  /usr/sbin/findfs               --      gen_context(system_u:object_r:fsadm_exec_t,s0)
 +/usr/sbin/findfs\.util-linux           --      gen_context(system_u:object_r:fsadm_exec_t,s0)
  /usr/sbin/fstrim               --      gen_context(system_u:object_r:fsadm_exec_t,s0)
++/usr/sbin/fstrim\.util-linux           --      gen_context(system_u:object_r:fsadm_exec_t,s0)
  /usr/sbin/fsck.*               --      gen_context(system_u:object_r:fsadm_exec_t,s0)
  /usr/sbin/gdisk                        --      gen_context(system_u:object_r:fsadm_exec_t,s0)
  /usr/sbin/hdparm               --      gen_context(system_u:object_r:fsadm_exec_t,s0)
@@ -57,7 +58,7 @@ index f12c3515b..e719d7a04 100644
  /usr/sbin/partx                        --      gen_context(system_u:object_r:fsadm_exec_t,s0)
  /usr/sbin/raidautorun          --      gen_context(system_u:object_r:fsadm_exec_t,s0)
  /usr/sbin/raidstart            --      gen_context(system_u:object_r:fsadm_exec_t,s0)
-@@ -93,8 +101,10 @@
+@@ -93,8 +102,10 @@
  /usr/sbin/sfdisk               --      gen_context(system_u:object_r:fsadm_exec_t,s0)
  /usr/sbin/smartctl             --      gen_context(system_u:object_r:fsadm_exec_t,s0)
  /usr/sbin/swapoff              --      gen_context(system_u:object_r:fsadm_exec_t,s0)
diff --git a/recipes-security/refpolicy/refpolicy_git.inc b/recipes-security/refpolicy/refpolicy_git.inc
index 40fca83..c5f9ae1 100644
--- a/recipes-security/refpolicy/refpolicy_git.inc
+++ b/recipes-security/refpolicy/refpolicy_git.inc
@@ -2,7 +2,7 @@ PV = "2.20250923+git"
 
 SRC_URI = "git://github.com/SELinuxProject/refpolicy.git;protocol=https;branch=main;name=refpolicy;destsuffix=refpolicy"
 
-SRCREV_refpolicy = "004ca3252282b52f525c24f3c874bf7ecf724be1"
+SRCREV_refpolicy = "0deb7170f8e5466a39c95468959321c2c28a5f33"
 
 UPSTREAM_CHECK_GITTAGREGEX = "RELEASE_(?P<pver>\d+_\d+)"