+- Allow spamd to send mail
+- Add ssh_home_t label for /var/lib/nocpulse/.ssh
+- Allow puppetmaster to read network state
+- Add colord_can_network_connect boolean
+- Allow colord to execute shell
+- Add bin_t label for "/usr/lib/iscan/network"
+- Allow chrome-sandbox ptrace
+- winbind needs to be able to talk to ldap directly, not through sssd
+- saslauthd_t needs to connect to zarafa_port_t
+- dnsmasq wants to read proc_net_t
+- Add full DNS support for FreeIPA