- Add kernel_read_system_state to sandbox_client_t
    - Add some of the missing access to kdumpgui
    - Allow systemd_dbusd_t to status the init system
    - Allow vmnet-natd to request the kernel to load a module
    - Allow gsf-office-thum to append .cache/gdm/session.log
    - realmd wants to read .config/dconf/user
    - Firewalld wants sys_nice/setsched
    - Allow tmpreaper to delete mandb cache files
    - Firewalld wants sys_nice/setsched
    - Allow firewalld to perform  a DNS name resolution
    - Allown winbind to read /usr/share/samba/codepages/lowcase.dat
    - Add support for HTTPProxy* in /etc/freshclam.conf
    - Fix authlogin_yubike boolean
    - Extend smbd_selinux man page to include samba booleans
    - Allow dhcpc to execute consoletype
    - Allow ping to use inherited tmp files created in init scripts
    - On full relabel with unconfined domain disabled, initrc was runni
    - Allow people who delete man pages to delete mandb cache files