- Allow systemd to read tmp_t link files
- Backport ABRT policy from F17
- Allow nagios domains to execute bin_t
- Allow pads to read kernel network state
- Allow sudo domains to manage kerberos rcache files
- Allow polipo to manage polipo_cache dirs
- Allow nsswitch domains to read sssd public files
- Dontaudit net_admin capability for collectd
- Allow thumb_t to create gstreamer dirs
- user_tcp_server boolean should be also for sysadm_t
- Add labeling for /var/lib/lighttpd
- Fix files_lib_filetrans_shared_lib() interface