- Add decl for cockip port
    - Allow sysadm_t to read all kernel proc
    - Allow logrotate to execute all executables
    - Allow lircd_t to use tty_device_t for use withmythtv
    - Make sure all zabbix files direcories in /var/log have the correct label
    - Allow bittlebee to create directories and files in /var/log with the correct label
    - Label /var/log/horizon as an apache log
    - Add squid directory in /var/run
    - Add transition rules to allow rabbitmq to create log files and var_lib files with the correct label
    - Wronly labeled avahi_var_lib_t as a pid file
    - Fix labels on rabbitmq_var_run_t on file/dir creation
    - Allow neutron to create sock files
    - Allow postfix domains to getattr on all file systems
    - Label swift-proxy-server as swift_exec_t
    - Tighten SELinux capabilities to match docker capabilities
    - Add fixes for squid which is configured to run with more than one worker.
    - Allow cockpit to bind to its port