* Wed Oct 17 2012 Miroslav Grepl <mgrepl@redhat.com> 3.11.1-40
    - Additional requirements for disable unconfined module when booting
    - Fix label of systemd script files
    - semanage can use -F /dev/stdin to get input
    - syslog now uses kerberos keytabs
    - Allow xserver to compromise_kernel access
    -  Allow nfsd to write to mount_var_run_t when running the mount command
    - Add filename transition rule for bin_t directories
    - Allow files to read usr_t lnk_files
    - dhcpc wants chown
    - Add support for new openshift labeling
    - Clean up for tunable+optional statements
    - Add labeling for /usr/sbin/mkhomedir_helper
    - Allow antivirus domain to managa amavis spool files
    - Allow rpcbind_t to read passwd
    - Allow pyzor running as spamc to manage amavis spool