- Add transition rules for sandbox domains
    - Fix cobbler module
    - Allow system_dbusd to list sandbox dirs
    - Sandbox printing of pdf wants to talk to colord
    - Add dbus_stream_connect_system_dbusd() interface.
    - Dontaudit leaked file descriptors for thumb. BZ(1383071)
    - Allow cockpit_ws_t to manage cockpit_lib_t dirs and files. BZ(1375156)
    - Allow cobblerd_t to delete dirs labeled as tftpdir_rw_t
    - Make unconfined domains create resolv.conf with correct label
    - Fix typo in filesystem module
    - Add systemd_mount_dir to deal with service using ReadOnlyDirectory
    - These allow rules are requiered to allow chrome to setup user namespace
    - When running as staff_t sudo getpgid on init
    - Allow nss_plugin to resolve host names via the systemd-resolved. BZ(1383473)