Allow systemd-socket-proxyd get attributes of cgroup filesystems
Allow systemd-socket-proxyd get filesystems attributes
Allow sysadm read ipmi devices
Allow system mail service read inherited certmonger runtime files
Add lpr_roles to system_r roles
Allow insights-client tcp connect to various ports
Allow insights-client work with pcp and manage user config files
Allow insights-client dbus chat with various services
Allow insights-client dbus chat with abrt
Allow redis get user names
Add winbind-rpcd to samba_enable_home_dirs boolean

Allow ipsec_t only read tpm devices
Allow ipsec_t read/write tpm devices
Label udf tools with fsadm_exec_t
Allow the spamd_update_t domain get generic filesystem attributes
Allow cdcc mmap dcc-client-map files
Allow insights client communicate with cupsd, mysqld, openvswitch, redis
Allow insights client read raw memory devices
Allow winbind-rpcd get attributes of device and pty filesystems
Allow postfix/smtpd read kerberos key table

Add domain_unix_read_all_semaphores() interface
Allow iptables list cgroup directories
Allow systemd-hostnamed dbus chat with init scripts
Allow systemd to read symlinks in /var/lib
Allow insights-client domain transition on semanage execution
Allow insights-client create gluster log dir with a transition
Allow insights-client manage generic locks
Allow insights-client unix_read all domain semaphores
Allow winbind-rpcd use the terminal multiplexor
Allow mrtg send mails
Allow sssd dbus chat with system cronjobs
Allow postfix/smtp and postfix/virtual read kerberos key table

Add the systemd_connectto_socket_proxyd_unix_sockets() interface
Add the dev_map_vhost() interface
Allow init remount all file_type filesystems
added policy for systemd-socket-proxyd
Allow virt_domain map vhost devices
Allow virt domains to access xserver devices
Allow rotatelogs read httpd_log_t symlinks
Allow vlock search the contents of the /dev/pts directory
Allow system cronjobs dbus chat with setroubleshoot
Allow ptp4l_t name_bind ptp_event_port_t
Allow pcp_domain execute its private memfd: objects
Allow samba-dcerpcd use NSCD services over a unix stream socket
Allow insights-client manage samba var dirs

Add the files_map_read_etc_files() interface
Allow insights-client manage samba var dirs
Allow insights-client send null signal to rpm and system cronjob
Update rhcd policy for executing additional commands 4
Allow insights-client connect to postgresql with a unix socket
Allow insights-client domtrans on unix_chkpwd execution
Add file context entries for insights-client and rhc
Allow snmpd_t domain to trace processes in user namespace
Allow sbd the sys_ptrace capability
Allow pulseaudio create gnome content (~/.config)

Allow unconfined_service_t insights client content filetrans
Allow nsswitch_domain to connect to systemd-machined using a unix socket
Add init_status_all_script_files() interface
Add dev_dontaudit_write_raw_memory() and dev_read_vsock() interfaces
Update insights-client policy for additional commands execution 5
Confine insights-client systemd unit
Update insights-client policy for additional commands execution 4
Change rhsmcertd_t to insights_client_t in insights-client policy
Allow insights-client send signull to unconfined_service_t
Update insights-client policy for additional commands execution 3
Allow journalctl read init state
Update insights-client policy for additional commands execution 2

Label 319/udp port with ptp_event_port_t
Allow unconfined and sysadm users transition for /root/.gnupg
Add the kernel_read_proc_files() interface
Add userdom_view_all_users_keys() interface
Allow system_cronjob_t domtrans to rpm_script_t
Allow smbd_t process noatsecure permission for winbind_rpcd_t
Allow chronyd bind UDP sockets to ptp_event ports
Allow samba-bgqd to read a printer list
Add gpg_filetrans_admin_home_content() interface
Update insights-client policy for additional commands execution
Allow gpg read and write generic pty type
Allow chronyc read and write generic pty type
Disable rpm verification on interface_info

Allow networkmanager to signal unconfined process
Allow sa-update to get init status and start systemd files
Allow samba-bgqd get a printer list
Allow insights-client rpm named file transitions
Add /var/tmp/insights-archive to insights_client_filetrans_named_content
Use insights_client_filetrans_named_content
Make default file context match with named transitions
Allow rhsmcertd to read insights config files
Label /etc/insights-client/machine-id

Do not call systemd_userdbd_stream_connect() for winbind-rpcd
Update winbind_rpcd_t
Allow irqbalance file transition for pid sock_files and directories
Update irqbalance runtime directory file context

Update samba-dcerpcd policy for kerberos usage 2

Allow domain read usermodehelper state information
Remove all kernel_read_usermodehelper_state() interface calls
Allow samba-dcerpcd work with sssd
Allow winbind_rpcd_t connect to self over a unix_stream_socket
Update samba-dcerpcd policy for kerberos usage
Allow keepalived read the contents of the sysfs filesystem
Update policy for samba-dcerpcd
Remove all kernel_read_usermodehelper_state() interface calls 2/2
Update insights_client_filetrans_named_content()

Allow transition to insights_client named content
Add the insights_client_filetrans_named_content() interface
Update policy for insights-client to run additional commands 3

Add the init_status_config_transient_files() interface
Allow init_t to rw insights_client unnamed pipe
Update kernel_read_unix_sysctls() for sysctl_net_unix_t handling
Allow insights-client get status of the systemd transient scripts
Allow insights-client execute its private memfd: objects
Update policy for insights-client to run additional commands 2
Do not call systemd_userdbd_stream_connect() for insights-client
Use insights_client_tmp_t instead of insights_client_var_tmp_t
Change space indentation to tab in insights-client
Use socket permissions sets in insights-client
Update policy for insights-client to run additional commands
Change rpm_setattr_db_files() to use a pattern
Add rpm setattr db files macro
Fix insights client
Do not let system_cronjob_t create redhat-access-insights.log with var_log_t

Update logging_create_generic_logs() to use create_files_pattern()
Add the auth_read_passwd_file() interface
Allow auditd_t noatsecure for a transition to audisp_remote_t
Add support for samba-dcerpcd
Allow rhsmcertd create generic log files
Allow ctdbd nlmsg_read on netlink_tcpdiag_socket

Allow ifconfig_t domain to manage vmware logs
Allow insights-client manage gpg admin home content
Add the gpg_manage_admin_home_content() interface
Label /var/cache/insights with insights_client_cache_t
Allow insights-client search gconf homedir
Allow insights-client create and use unix_dgram_socket
Label more vdsm utils with virtd_exec_t
Label /usr/libexec/vdsm/supervdsmd and vdsmd with virtd_exec_t
Allow sblim-gatherd the kill capability
Allow privoxy execmem

Allow sysadm user execute init scripts with a transition
Change invalid type redisd_t to redis_t in redis_stream_connect()
Allow php-fpm write access to /var/run/redis/redis.sock
Allow sssd read systemd-resolved runtime directory
Allow postfix stream connect to cyrus through runtime socket
Allow insights-client create_socket_perms for tcp/udp sockets
Allow insights-client read rhnsd config files
Allow sblim-sfcbd connect to sblim-reposd stream
Allow rngd drop privileges via setuid/setgid/setcap
Allow rngd_t domain to use nsswitch