Allow certmonger add new entries in a generic certificates directory
Allow slapd add new entries in ldap certificates directory
Add miscfiles_add_entry_generic_cert_dirs() interface

Allow ssh-keygen create file in /var/lib/glusterd

Allow rhsmd read process state of all domains and kernel threads
Allow ipa-adtrust-install restart sssd and dirsrv services
Allow nagios_plugin_domain execute programs in bin directories
selinux policy: add the right context for org.freeipa.server.trust-enable-agent

Allow chronyd_t domain to exec shell
Allow pmie daemon to send signal pcmd daemon
Allow auditd poweroff or switch to single mode

Dontaudit tmpreaper_t getting attributes from sysctl_type files

Allow tmpreaper_t domain to getattr files labeled as mtrr_device_t

Allow tmpwatch process labeled as tmpreaper_t domain to execute fuser command

Update tmpreaper_t policy due to fuser command

Allow tmpreaper_t domain to read all domains state

Update sudo_role_template() to allow caller domain to read syslog pid files

Allow sbd_t domain to check presence of processes labeled as cluster_t

Allow ganesha_t domain to read system network state and connect to cyphesis_port_t
Label /var/log/collectd.log as collectd_log_t
Update gnome_role_template() interface to make working sysadm_u SELinux able to login to X sessions
Update collectd policy to allow daemon create /var/log/collectd with collectd_log_t label
Update sbd policy to allow manage cgroups
Allow sudo userdomain to run rpm related commands
Update rpm_run() interface to avoid duplicate role transition in sudo_role_template

Update gnome_role_template() interface to make working sysadm_u SELinux able to login to X sessions
Update collectd policy to allow daemon create /var/log/collectd with collectd_log_t label

Update sbd policy to allow manage cgroups

Allow cupsd_t domain to manage cupsd_tmp_t temp link files
Allow svnserve_t domain to read /dev/random
Update sudodomains to make working confined users run sudo/su

Allow virtlockd process read virtlockd.conf file