- Allow xdm to search all file systems
    - Add interface to allow the config of all files
    - Add rngd policy
    - Remove kgpg as a gpg_exec_t type
    - Allow plymouthd to block suspend
    - Allow systemd_dbus to config any file
    - Allow system_dbus_t to configure all services
    - Allow freshclam_t to read usr_files
    - varnishd requires execmem to load modules