Allow postfix_domain read dovecot certificates 1/2
Dontaudit dirsrv search filesystem sysctl directories 1/2
Allow chage domtrans to sssd
Allow postfix_domain read dovecot certificates 2/2
Allow ctdb create cluster logs
Allow alsa bind mixer controls to led triggers
Allow alsactl set group Process ID of a process
Dontaudit mdadm list dirsrv tmpfs dirs
Dontaudit dirsrv search filesystem sysctl directories 2/2
Revert "Label NetworkManager-dispatcher service with separate context"
Revert "Allow NetworkManager-dispatcher dbus chat with NetworkManager"

Allow NetworkManager-dispatcher dbus chat with NetworkManager

Fix badly indented used interfaces
Allow domain transition to sssd_t 1/2
Allow confined users to use kinit,klist and etc.
Allow login_userdomain open/read/map system journal
Allow init read stratis data symlinks 2/2
Label new utility of NetworkManager nm-priv-helper
Label NetworkManager-dispatcher service with separate context
Allow domtrans to sssd_t and role access to sssd
Creating interface sssd_run_sssd()
Allow domain transition to sssd_t 2/2
Allow timedatex dbus chat with xdm
Associate stratisd_data_t with device filesystem
Allow init read stratis data symlinks 1/2
Allow rhsmcertd create rpm hawkey logs with correct label

Allow NetworkManager talk with unconfined user over unix domain dgram socket
Allow system_mail_t read inherited apache system content rw files
Add apache_read_inherited_sys_content_rw_files() interface
Allow rhsm-service execute its private memfd: objects
Allow dirsrv read configfs files and directories
Label /run/stratisd with stratisd_var_run_t
Fix path for excluding container.if from selinux-policy-devel

Revert "Label /etc/cockpit/ws-certs.d with cert_t"

Set default file context for /sys/firmware/efi/efivars
Allow sysadm_t start and stop transient services
Label /etc/cockpit/ws-certs.d with cert_t
Allow smbcontrol read the network state information
Allow rhsm-service read/write its private memfd: objects
Allow fcoemon request the kernel to load a module
Allow radiusd connect to the radacct port
Label /var/lib/shorewall6-lite with shorewall_var_lib_t
Exclude container.if from selinux-policy-devel

Allow sysadm execute sysadmctl in sysadm_t domain using sudo
Allow local_login_t get attributes of tmpfs filesystems
Allow local_login_t get attributes of filesystems with ext attributes
Allow local_login_t domain to getattr cgroup filesystem
Allow systemd read unlabeled symbolic links
Allow userdomains use pam_ssh_agent_auth for passwordless sudo
Allow sudodomains execute passwd in the passwd domain
Label authcompat.py with authconfig_exec_t
Dontaudit pkcsslotd sys_admin capability
Allow lldpd connect to snmpd with a unix domain stream socket

Allow unconfined_t to node_bind icmp_sockets in node_t domain
Allow rhsmcertd get attributes of tmpfs_t filesystems
The nfsdcld service is now confined by SELinux
Allow smbcontrol use additional socket types
Allow lldpd use an snmp subagent over a tcp socket

Allow sysadm_t read/write pkcs shared memory segments
Allow sysadm_t connect to sanlock over a unix stream socket
Allow sysadm_t dbus chat with sssd
Allow sysadm_t set attributes on character device nodes
Allow sysadm_t read and write watchdog devices
Allow sysadm_t connect to cluster domains over a unix stream socket
Allow sysadm_t dbus chat with tuned 2/2
Update userdom_exec_user_tmp_files() with an entrypoint rule
Allow sudodomain send a null signal to sshd processes
Allow sysadm_t dbus chat with tuned 1/2
Allow cloud-init dbus chat with systemd-logind
Allow svnserve send mail from the system
Allow svnserve_t domain to read system state

VQP: Include IANA-assigned TCP/1589
Label port 3785/udp with bfd_echo
Allow sysadm_t dbus chat with realmd_t
Support sanlock VG automated recovery on storage access loss 1/2
Revert "Support sanlock VG automated recovery on storage access loss"
Support sanlock VG automated recovery on storage access loss
radius: Lexical sort of service-specific corenet rules by service name
radius: Allow binding to the BDF Control and Echo ports
radius: Allow binding to the DHCP client port
radius: Allow net_raw; allow binding to the DHCP server ports
Support hitless reloads feature in haproxy
Allow redis get attributes of filesystems with extended attributes
Support sanlock VG automated recovery on storage access loss 2/2
Revert "Support sanlock VG automated recovery on storage access loss"

Support sanlock VG automated recovery on storage access loss
Allow proper function sosreport in sysadmin role
Allow systemd execute user bin files
Label /dev/crypto/nx-gzip with accelerator_device_t
Allow ipsec_t and login_userdomain named file transition in tmpfs
Support sanlock VG automated recovery on storage access loss
Allow proper function sosreport via iotop
Call pkcs_tmpfs_named_filetrans for certmonger
Allow ibacm the net_raw and sys_rawio capabilities
Support new PING_CHECK health checker in keepalived
Update spamassasin policy to make working /usr/share/spamassassin/sa-update.cron script

Allow unconfined domains to bpf all other domains
Allow vmtools_unconfined_t domain transition to rpm_script_t
Allow unbound connectto unix_stream_socket
Label /usr/sbin/virtproxyd as virtd_exec_t
Allow postfix_domain to sendto unix dgram sockets.

Allow rhsmcertd_t dbus chat with anaconda install_t

Introduce xdm_manage_bootloader booelan
Rename samba_exec() to samba_exec_net()
Allow sssd to set samba setting
Allow dirsrv read slapd tmpfs files
Allow rhsmcertd to create cache file in /var/cache/cloud-what

Label /usr/bin/Xwayland with xserver_exec_t
Label /usr/libexec/gdm-runtime-config with xdm_exec_t
Allow D-bus communication between avahi and sosreport
Allow lldpad send to kdumpctl over a unix dgram socket
Revert "Allow lldpad send to kdump over a unix dgram socket"
Allow chronyc respond to a user chronyd instance
Allow ptp4l respond to pmc
Allow lldpad send to unconfined_t over a unix dgram socket

Revert "update libs_filetrans_named_content() to have support for /usr/lib/debug directory"
Allow sysadm to read/write scsi files and manage shadow
Allow rhsmcertd execute gpg
Allow lldpad send to kdump over a unix dgram socket
Remove glusterd SELinux module from distribution policy