- Add transition rules for sandbox domains
- Fix cobbler module
- Allow system_dbusd to list sandbox dirs
- Sandbox printing of pdf wants to talk to colord
- Add dbus_stream_connect_system_dbusd() interface.
- Dontaudit leaked file descriptors for thumb. BZ(1383071)
- Allow cockpit_ws_t to manage cockpit_lib_t dirs and files. BZ(1375156)
- Allow cobblerd_t to delete dirs labeled as tftpdir_rw_t
- Make unconfined domains create resolv.conf with correct label
- Fix typo in filesystem module
- Add systemd_mount_dir to deal with service using ReadOnlyDirectory
- These allow rules are requiered to allow chrome to setup user namespace
- When running as staff_t sudo getpgid on init
- Allow nss_plugin to resolve host names via the systemd-resolved. BZ(1383473)