* Tue Apr 09 2024 Zdenek Pytela <zpytela@redhat.com> - 40.16-1
    - Allow keyutils-dns-resolver connect to the system log service
    - Allow qemu-ga read vm sysctls
    - postfix: allow qmgr to delete mails in bounce/ directory
    - policy: support pidfs
    - Confine selinux-autorelabel-generator.sh
    - Allow logwatch_mail_t read/write to init over a unix stream socket
    - Allow logwatch read logind sessions files
    - files_dontaudit_getattr_tmpfs_files allowed the access and didn't dontaudit it
    - files_dontaudit_mounton_modules_object allowed the access and didn't dontaudit it
    - Allow NetworkManager the sys_ptrace capability in user namespace
    - dontaudit execmem for modemmanager
    - Allow dhcpcd use unix_stream_socket
    - Allow dhcpc read /run/netns files