- gnomeclock executes a shell
    - Update for screen policy to handle pipe in homedir
    - Fixes for polyinstatiated homedir
    - Fixes for namespace policy and other fixes related to polyinstantiation
    - Add namespace policy
    - Allow dovecot-deliver transition to sendmail which is needed by sieve scri
    - Fixes for init, psad policy which relate with confined users
    - Do not audit bootloader attempts to read devicekit pid files
    - Allow nagios service plugins to read /proc