Add interfaces in domain, files, and unconfined modules
Allow sysadm_t read/write ipmi devices
Allow sudodomain use sudo.log as a logfile
Add insights additional capabilities
Allow insights client work with gluster and pcp
Allow prosody manage its runtime socket files
Allow system mail service read inherited certmonger runtime files
Add lpr_roles to system_r roles

Allow systemd-socket-proxyd get attributes of cgroup filesystems
Allow systemd-socket-proxyd get filesystems attributes
Allow sysadm read ipmi devices
Allow system mail service read inherited certmonger runtime files
Add lpr_roles to system_r roles
Allow insights-client tcp connect to various ports
Allow insights-client work with pcp and manage user config files
Allow insights-client dbus chat with various services
Allow insights-client dbus chat with abrt
Allow redis get user names
Add winbind-rpcd to samba_enable_home_dirs boolean

Allow ipsec_t only read tpm devices
Allow ipsec_t read/write tpm devices
Label udf tools with fsadm_exec_t
Allow the spamd_update_t domain get generic filesystem attributes
Allow cdcc mmap dcc-client-map files
Allow insights client communicate with cupsd, mysqld, openvswitch, redis
Allow insights client read raw memory devices
Allow winbind-rpcd get attributes of device and pty filesystems
Allow postfix/smtpd read kerberos key table

Add domain_unix_read_all_semaphores() interface
Allow iptables list cgroup directories
Allow systemd-hostnamed dbus chat with init scripts
Allow systemd to read symlinks in /var/lib
Allow insights-client domain transition on semanage execution
Allow insights-client create gluster log dir with a transition
Allow insights-client manage generic locks
Allow insights-client unix_read all domain semaphores
Allow winbind-rpcd use the terminal multiplexor
Allow mrtg send mails
Allow sssd dbus chat with system cronjobs
Allow postfix/smtp and postfix/virtual read kerberos key table

Add the systemd_connectto_socket_proxyd_unix_sockets() interface
Add the dev_map_vhost() interface
Allow init remount all file_type filesystems
added policy for systemd-socket-proxyd
Allow virt_domain map vhost devices
Allow virt domains to access xserver devices
Allow rotatelogs read httpd_log_t symlinks
Allow vlock search the contents of the /dev/pts directory
Allow system cronjobs dbus chat with setroubleshoot
Allow ptp4l_t name_bind ptp_event_port_t
Allow pcp_domain execute its private memfd: objects
Allow samba-dcerpcd use NSCD services over a unix stream socket
Allow insights-client manage samba var dirs

Add the files_map_read_etc_files() interface
Allow insights-client manage samba var dirs
Allow insights-client send null signal to rpm and system cronjob
Update rhcd policy for executing additional commands 4
Allow insights-client connect to postgresql with a unix socket
Allow insights-client domtrans on unix_chkpwd execution
Add file context entries for insights-client and rhc
Allow snmpd_t domain to trace processes in user namespace
Allow sbd the sys_ptrace capability
Allow pulseaudio create gnome content (~/.config)

Allow unconfined_service_t insights client content filetrans
Allow nsswitch_domain to connect to systemd-machined using a unix socket
Add init_status_all_script_files() interface
Add dev_dontaudit_write_raw_memory() and dev_read_vsock() interfaces
Update insights-client policy for additional commands execution 5
Confine insights-client systemd unit
Update insights-client policy for additional commands execution 4
Change rhsmcertd_t to insights_client_t in insights-client policy
Allow insights-client send signull to unconfined_service_t
Update insights-client policy for additional commands execution 3
Allow journalctl read init state
Update insights-client policy for additional commands execution 2

Label 319/udp port with ptp_event_port_t
Allow unconfined and sysadm users transition for /root/.gnupg
Add the kernel_read_proc_files() interface
Add userdom_view_all_users_keys() interface
Allow system_cronjob_t domtrans to rpm_script_t
Allow smbd_t process noatsecure permission for winbind_rpcd_t
Allow chronyd bind UDP sockets to ptp_event ports
Allow samba-bgqd to read a printer list
Add gpg_filetrans_admin_home_content() interface
Update insights-client policy for additional commands execution
Allow gpg read and write generic pty type
Allow chronyc read and write generic pty type
Disable rpm verification on interface_info

Allow networkmanager to signal unconfined process
Allow sa-update to get init status and start systemd files
Allow samba-bgqd get a printer list
Allow insights-client rpm named file transitions
Add /var/tmp/insights-archive to insights_client_filetrans_named_content
Use insights_client_filetrans_named_content
Make default file context match with named transitions
Allow rhsmcertd to read insights config files
Label /etc/insights-client/machine-id

Do not call systemd_userdbd_stream_connect() for winbind-rpcd
Update winbind_rpcd_t
Allow irqbalance file transition for pid sock_files and directories
Update irqbalance runtime directory file context

Update samba-dcerpcd policy for kerberos usage 2

Allow domain read usermodehelper state information
Remove all kernel_read_usermodehelper_state() interface calls
Allow samba-dcerpcd work with sssd
Allow winbind_rpcd_t connect to self over a unix_stream_socket
Update samba-dcerpcd policy for kerberos usage
Allow keepalived read the contents of the sysfs filesystem
Update policy for samba-dcerpcd
Remove all kernel_read_usermodehelper_state() interface calls 2/2
Update insights_client_filetrans_named_content()

Allow transition to insights_client named content
Add the insights_client_filetrans_named_content() interface
Update policy for insights-client to run additional commands 3

Add the init_status_config_transient_files() interface
Allow init_t to rw insights_client unnamed pipe
Update kernel_read_unix_sysctls() for sysctl_net_unix_t handling
Allow insights-client get status of the systemd transient scripts
Allow insights-client execute its private memfd: objects
Update policy for insights-client to run additional commands 2
Do not call systemd_userdbd_stream_connect() for insights-client
Use insights_client_tmp_t instead of insights_client_var_tmp_t
Change space indentation to tab in insights-client
Use socket permissions sets in insights-client
Update policy for insights-client to run additional commands
Change rpm_setattr_db_files() to use a pattern
Add rpm setattr db files macro
Fix insights client
Do not let system_cronjob_t create redhat-access-insights.log with var_log_t

Update logging_create_generic_logs() to use create_files_pattern()
Add the auth_read_passwd_file() interface
Allow auditd_t noatsecure for a transition to audisp_remote_t
Add support for samba-dcerpcd
Allow rhsmcertd create generic log files
Allow ctdbd nlmsg_read on netlink_tcpdiag_socket

Allow ifconfig_t domain to manage vmware logs
Allow insights-client manage gpg admin home content
Add the gpg_manage_admin_home_content() interface
Label /var/cache/insights with insights_client_cache_t
Allow insights-client search gconf homedir
Allow insights-client create and use unix_dgram_socket
Label more vdsm utils with virtd_exec_t
Label /usr/libexec/vdsm/supervdsmd and vdsmd with virtd_exec_t
Allow sblim-gatherd the kill capability
Allow privoxy execmem