- Allow systemd to read tmp_t link files
    - Backport ABRT policy from F17
    - Allow nagios domains to execute bin_t
    - Allow pads to read kernel network state
    - Allow sudo domains to manage kerberos rcache files
    - Allow polipo to manage polipo_cache dirs
    - Allow nsswitch domains to read sssd public files
    - Dontaudit net_admin capability for collectd
    - Allow thumb_t to create gstreamer dirs
    - user_tcp_server boolean should be also for sysadm_t
    - Add labeling for /var/lib/lighttpd
    - Fix files_lib_filetrans_shared_lib() interface