Update logging_create_generic_logs() to use create_files_pattern()
Add the auth_read_passwd_file() interface
Allow auditd_t noatsecure for a transition to audisp_remote_t
Add support for samba-dcerpcd
Allow rhsmcertd create generic log files
Allow ctdbd nlmsg_read on netlink_tcpdiag_socket

Allow ifconfig_t domain to manage vmware logs
Allow insights-client manage gpg admin home content
Add the gpg_manage_admin_home_content() interface
Label /var/cache/insights with insights_client_cache_t
Allow insights-client search gconf homedir
Allow insights-client create and use unix_dgram_socket
Label more vdsm utils with virtd_exec_t
Label /usr/libexec/vdsm/supervdsmd and vdsmd with virtd_exec_t
Allow sblim-gatherd the kill capability
Allow privoxy execmem

Allow sysadm user execute init scripts with a transition
Change invalid type redisd_t to redis_t in redis_stream_connect()
Allow php-fpm write access to /var/run/redis/redis.sock
Allow sssd read systemd-resolved runtime directory
Allow postfix stream connect to cyrus through runtime socket
Allow insights-client create_socket_perms for tcp/udp sockets
Allow insights-client read rhnsd config files
Allow sblim-sfcbd connect to sblim-reposd stream
Allow rngd drop privileges via setuid/setgid/setcap
Allow rngd_t domain to use nsswitch

Create macro corenet_icmp_bind_generic_node()
Allow traceroute_t and ping_t to bind generic nodes.
Allow administrative users the bpf capability
Allow insights-client search rhnsd configuration directory
Allow ntlm_auth read the network state information
Allow keepalived setsched and sys_nice
Revert "Allow administrative users the bpf capability"

Add interface rpc_manage_exports
Allow sshd read filesystem sysctl files
Update targetd nfs & lvm
Allow dhcpd_t domain to read network sysctls.
Allow chronyd talk with unconfined user over unix domain dgram socket
Allow fenced read kerberos key tables

Allow hostapd talk with unconfined user over unix domain dgram socket

Allow chronyd send a message to sosreport over datagram socket
Allow systemd-logind dbus chat with sosreport

Allow systemd-networkd dbus chat with sosreport
Allow sysadm_passwd_t to relabel passwd and group files
Allow confined sysadmin to use tool vipw
Allow sosreport dbus chat with abrt and timedatex
Remove unnecessary /etc file transitions for insights-client
Label all content in /var/lib/insights with insights_client_var_lib_t
Update insights-client policy
Update insights-client: fc pattern, motd, writing to etc
Remove permissive domain for insights_client_t
New policy for insight-client
Add the insights_client module
Update specfile to buildrequire policycoreutils-devel >= 2.9-19
Add modules_checksum to %files

Allow postfix_domain read dovecot certificates 1/2
Dontaudit dirsrv search filesystem sysctl directories 1/2
Allow chage domtrans to sssd
Allow postfix_domain read dovecot certificates 2/2
Allow ctdb create cluster logs
Allow alsa bind mixer controls to led triggers
Allow alsactl set group Process ID of a process
Dontaudit mdadm list dirsrv tmpfs dirs
Dontaudit dirsrv search filesystem sysctl directories 2/2
Revert "Label NetworkManager-dispatcher service with separate context"
Revert "Allow NetworkManager-dispatcher dbus chat with NetworkManager"

Allow NetworkManager-dispatcher dbus chat with NetworkManager

Fix badly indented used interfaces
Allow domain transition to sssd_t 1/2
Allow confined users to use kinit,klist and etc.
Allow login_userdomain open/read/map system journal
Allow init read stratis data symlinks 2/2
Label new utility of NetworkManager nm-priv-helper
Label NetworkManager-dispatcher service with separate context
Allow domtrans to sssd_t and role access to sssd
Creating interface sssd_run_sssd()
Allow domain transition to sssd_t 2/2
Allow timedatex dbus chat with xdm
Associate stratisd_data_t with device filesystem
Allow init read stratis data symlinks 1/2
Allow rhsmcertd create rpm hawkey logs with correct label

Allow NetworkManager talk with unconfined user over unix domain dgram socket
Allow system_mail_t read inherited apache system content rw files
Add apache_read_inherited_sys_content_rw_files() interface
Allow rhsm-service execute its private memfd: objects
Allow dirsrv read configfs files and directories
Label /run/stratisd with stratisd_var_run_t
Fix path for excluding container.if from selinux-policy-devel

Revert "Label /etc/cockpit/ws-certs.d with cert_t"

Set default file context for /sys/firmware/efi/efivars
Allow sysadm_t start and stop transient services
Label /etc/cockpit/ws-certs.d with cert_t
Allow smbcontrol read the network state information
Allow rhsm-service read/write its private memfd: objects
Allow fcoemon request the kernel to load a module
Allow radiusd connect to the radacct port
Label /var/lib/shorewall6-lite with shorewall_var_lib_t
Exclude container.if from selinux-policy-devel

Allow sysadm execute sysadmctl in sysadm_t domain using sudo
Allow local_login_t get attributes of tmpfs filesystems
Allow local_login_t get attributes of filesystems with ext attributes
Allow local_login_t domain to getattr cgroup filesystem
Allow systemd read unlabeled symbolic links
Allow userdomains use pam_ssh_agent_auth for passwordless sudo
Allow sudodomains execute passwd in the passwd domain
Label authcompat.py with authconfig_exec_t
Dontaudit pkcsslotd sys_admin capability
Allow lldpd connect to snmpd with a unix domain stream socket

Allow unconfined_t to node_bind icmp_sockets in node_t domain
Allow rhsmcertd get attributes of tmpfs_t filesystems
The nfsdcld service is now confined by SELinux
Allow smbcontrol use additional socket types
Allow lldpd use an snmp subagent over a tcp socket