- Allow logrotate setuid and setgid since logrotate is supposed to do it
    - Fixes for thumb policy by grift
    - Add new nfsd ports
    - Added fix to allow confined apps to execmod on chrome
    - Add labeling for additional vdsm directories
    - Allow Exim and Dovecot SASL
    - Add label for /var/run/nmbd
    - Add fixes to make virsh and xen working together
    - Colord executes ls
    - /var/spool/cron  is now labeled as user_cron_spool_t