Allow chronyd-restricted read chronyd key files
18219
Allow conntrackd_t to use bpf capability2
22277
Allow smbd_t to watch user_home_dir_t if samba_enable_home_dirs is on
14735
Allow hypervkvp_t write access to NetworkManager_etc_rw_t
14505
Add interface for write-only access to NetworkManager rw conf
14505
Allow unconfined_domain_type use IORING_OP_URING_CMD on all device nodes
11792

Allow sysadm execute traceroute in sysadm_t domain using sudo
14077
Allow qatlib set attributes of vfio device files
19051
Allow qatlib load kernel modules
19051
Allow qatlib run lspci
19051
Allow qatlib manage its private runtime socket files
19051
Allow qatlib read/write vfio devices
19051
Allow syslog to run unconfined scripts conditionally
11174
Allow syslogd_t nnp_transition to syslogd_unconfined_script_t
11174
Allow sendmail MTA connect to sendmail LDA
15175
Allow sysadm execute tcpdump in sysadm_t domain using sudo
15432
Allow opafm search nfs directories
17820
Allow mdadm list stratisd data directories
19276
Update cyrus_stream_connect() to use sockets in /run
19282
Allow collectd connect to statsd port
21044
Allow insights-client transition to sap unconfined domain
21452
Create the sap module
21452

Add init_explicit_domain() interface
18219
Allow dovecot_auth_t connect to postgresql using UNIX socket
16850
Allow keepalived_t to use sys_ptrace of cap_userns
17156
Make `bootc` be `install_exec_t`
19199
Add support for chronyd-restricted
18219
Label /dev/vas with vas_device_t
17336
Allow gpsd use /dev/gnss devices
16676
Allow sendmail manage its runtime files
15175
Add support for syslogd unconfined scripts
11174

Create interface selinux_watch_config and add it to SELinux users
1555
16273
Allow samba-dcerpcd connect to systemd_machined over a unix socket
16273
Allow winbind-rpcd make a TCP connection to the ldap port
16273
Allow sudodomain read var auth files
16708
Allow auditd read all domains process state
14285
Allow rsync read network sysctls
14638
Add dhcpcd bpf capability to run bpf programs
15326
Allow systemd-localed create Xserver config dirs
16716
Label /var/run/tmpfiles.d/static-nodes.conf with kmod_var_run_t
1553
Update sendmail policy module for opensmtpd
15175

Remove glusterd module
1548
Improve default file context(None) of /var/lib/authselect/backups
15220
Set default file context of /var/lib/authselect/backups to <<none>>
15220
Create policy for afterburn
12591
Allow unconfined_domain_type use io_uring cmd on domain
11792
Add policy for coreos installer
5164
Add policy for nvme-stas
1557
Label /var/run/auditd.state as auditd_var_run_t
14374
Allow ntp to bind and connect to ntske port.
15085
Allow ip an explicit domain transition to other domains
14246
Label /usr/libexec/selinux/selinux-autorelabel with semanage_exec_t
14289
Allow sssd domain transition on passkey_child execution conditionally
14014
Allow sssd use usb devices conditionally
14014
Allow kdump create and use its memfd: objects
14413

Allow kdump create and use its memfd: objects
14413

Add map_read map_write to kernel_prog_run_bpf
2653
Allow sysadm_t read nsfs files
5146
Dontaudit keepalived setattr on keepalived_unconfined_script_exec_t
14029
Allow system_mail_t manage exim spool files and dirs
14110
Label /run/pcsd.socket with cluster_var_run_t
1664

Allow cupsd_t to use bpf capability
3633
Label /dev/gnss[0-9] with gnss_device_t
9936
Dontaudit rhsmcertd write memory device
1547

Allow cups-pdf connect to the system log service
Update policy for qatlib

Allow qatlib to modify hardware state information.
Update policy for fdo
Allow gpsd, oddjob and oddjob_mkhomedir_t write user_tty_device_t chr_file
Allow svirt to rw /dev/udmabuf
Allow keepalived watch var_run dirs

Allow logrotate_t to map generic files in /etc
Allow insights-client manage user temporary files
Make insights_client_t an unconfined domain

Allow user_u and staff_u get attributes of non-security dirs
Allow cloud_init create dhclient var files and init_t manage net_conf_t
Allow samba-dcerpc service manage samba tmp files
Update samba-dcerpc policy for printing
Allow sysadm_t run kernel bpf programs
allow mon_procd_t self:cap_userns sys_ptrace
Remove nsplugin_role from mozilla.if
Allow unconfined user filetrans chrome_sandbox_home_t
Allow pdns name_bind and name_connect all ports
Allow insights-client read and write cluster tmpfs files
Allow ipsec read nsfs files
Allow upsmon execute upsmon via a helper script
Fix labeling for no-stub-resolv.conf
Add use_nfs_home_dirs boolean for mozilla_plugin
Change wording in /etc/selinux/config

Allow qatlib to read sssd public files
Fix location for /run/nsd
Allow samba-rpcd work with passwords
Allow rpcd_lsad setcap and use generic ptys
Allow gpsd,oddjob,oddjob_mkhomedir rw user domain pty
Allow keepalived to manage its tmp files
Allow nscd watch system db dirs

Boolean: Allow virt_qemu_ga create ssh directory
Allow virt_qemu_ga_t create .ssh dir with correct label
Set default ports for keylime policy
594
Allow unconfined service inherit signal state from init
Allow sa-update connect to systemlog services
Allow sa-update manage spamc home files
Label only /usr/sbin/ripd and ripngd with zebra_exec_t
Add the files_getattr_non_auth_dirs() interface
Update policy for the sblim-sfcb service
Define equivalency for /run/systemd/generator.early

Add the qatlib module
Add the fdo module
Add the booth module to modules.conf

Remove permissive from fdo
Add the qatlib module
Add the fdo module
Add the booth module to modules.conf
Add policy for FIDO Device Onboard
Create policy for qatlib
Add policy for boothd
Add list_dir_perms to kerberos_read_keytab
Allow nsd_crond_t write nsd_var_run_t & connectto nsd_t
Allow collectd_t read network state symlinks
Revert "Allow collectd_t read proc_net link files"
Allow insights-client execmem
Label udf tools with fsadm_exec_t