- Add interfaces to read kernel_t proc info
    - Missed this version of exec_all
    - Allow anyone who can load a kernel module to compromise kernel
    - Add oddjob_dbus_chat to openshift apache policy
    - Allow chrome_sandbox_nacl_t to send signals to itself
    - Add unit file support to usbmuxd_t
    - Allow all openshift domains to read sysfs info
    - Allow openshift domains to getattr on all domains