+- Allow svirt_lxc_domain to chr_file and blk_file devices if they are in the dom
    +- Allow init process to setrlimit on itself
    +- Take away transition rules for users executing ssh-keygen
    +- Allow setroubleshoot_fixit_t to read /dev/urand
    +- Allow sshd to relbale tunnel sockets
    +- Allow fail2ban domtrans to shorewall in the same way as with iptables
    +- Add support for lnk files in the /var/lib/sssd directory
    +- Allow system mail to connect to courier-authdaemon over an unix stream socket