$ git clone -n https://src.fedoraproject.org/rpms/selinux-policy.git /var/lib/mock/f40-build-1943403-25169/root/chroot_tmpdir/scmroot/selinux-policy
Cloning into '/var/lib/mock/f40-build-1943403-25169/root/chroot_tmpdir/scmroot/selinux-policy'...
$ git fetch origin f1f5cffef79416831c910843bc82fa2f4cffaf8c:KOJI_FETCH_HEAD
From https://src.fedoraproject.org/rpms/selinux-policy
 * [new ref]             f1f5cffef79416831c910843bc82fa2f4cffaf8c -> KOJI_FETCH_HEAD
$ git reset --hard KOJI_FETCH_HEAD
HEAD is now at f1f5cffef * Tue Aug 06 2024 Zdenek Pytela <zpytela@redhat.com> - 40.27-1 - Allow NetworkManager_dispatcher_t send SIGKILL to plugins - Allow setroubleshootd execute sendmail with a domain transition - Allow key.dns_resolve set attributes on the kernel key ring - Update fstab and cryptsetup generators policy - Allow cryptsetup-generator read and write fstab-generator unit file - Allow postfix_domain map postfix_etc_t files - Update qatlib policy for v24.02 with new features - Label /var/lib/systemd/sleep with systemd_sleep_var_lib_t - Allow tlp status power services - Allow login_userdomain read aliases file - Allow login_userdomain read ipsec config files - Allow login_userdomain read all pid files - Allow xdm_t read and write the dma device - Allow rsyslog read systemd-logind session files