Resolves: RHEL-65502

Resolves: RHEL-54268

Resolves: RHEL-53189

Resolves: RHEL-52638

Resolves: RHEL-44837

Resolves: RHEL-37647

Resolves: RHEL-19590

Switch to copies instead of links for pasta: previous workaround unreliable
Resolves: RHELPLAN-155811

Explicit restorecon in scriptlet as rpm(8) mix up contexts with hard links
Resolves: RHELPLAN-155811

Drop user_namespace create allow rule, incompatible with current el9 kernel
Resolves: RHELPLAN-155811

Rebase from Fedora 39
Resolves: RHELPLAN-155811

Drop (pointless) patches 20, 21, 22, actually apply changes to the spec file!
Refresh SELinux labels in scriptlets, require -selinux package (rhbz#2183089)
Don't install useless SELinux interface file for pasta (rhbz#2183106)

Refresh SELinux labels in scriptlets, require -selinux package (rhbz#2183089)
Don't install useless SELinux interface file for pasta (rhbz#2183106)

udp: Actually use host resolver to forward DNS queries (rhbz#2177075)
conf: Split add_dns{4,6}() out of get_dns() (rhbz#2177075)
conf, udp: Allow any loopback address to be used as resolver (rhbz#2177075)
tcp, tcp_splice: Get rid of false positive CWE-394 Coverity warning from fls() (rhbz#2177084)
tcp: Avoid false (but convoluted) positive Coverity CWE-476 warning (rhbz#2177084)
tcp: Avoid (theoretical) resource leak (CWE-772) Coverity warning (rhbz#2177084)
Fix definitions of SOCKET_MAX, TCP_MAX_CONNS (rhbz#2177084)
doc/demo: Fix and suppress ShellCheck warnings (rhbz#2177084)
contrib/selinux: Drop duplicate init_daemon_domain() rule (rhbz#2176813)
contrib/selinux: Let passt write to stdout and stderr when it starts (rhbz#2176813)
contrib/selinux: Allow binding and connecting to all UDP and TCP ports (rhbz#2176813)
contrib/selinux: Let interface users set paths for log, PID, socket files (rhbz#2176813)
contrib/selinux: Drop "example" from headers: this is the actual policy (rhbz#2176813)
contrib/selinux: Drop unused passt_read_data() interface (rhbz#2176813)
contrib/selinux: Split interfaces into smaller bits (rhbz#2176813)
fedora: Install SELinux interface files to shared include directory (rhbz#2176813)
tcp, udp, util: Pass socket creation errors all the way up (rhbz#2177080)
tcp, udp: Fix partial success return codes in {tcp,udp}_sock_init() (rhbz#2177080)
conf: Terminate on EMFILE or ENFILE on sockets for port mapping (rhbz#2177080)
tcp: Clamp MSS value when queueing data to tap, also for pasta (rhbz#2177083)
Fix up SELinux labels on install/uninstall, require matching -selinux package (rhbz#2176813)
Resolves: rhbz#2177075 rhbz#2177084 rhbz#2177080 rhbz#2177083 rhbz#2176813

Import from fedora to CentOS/RHEL
Resolves: rhbz#2172244