* Mon Nov 21 2022 Zdenek Pytela <zpytela@redhat.com> - 38.1-1
    - Revert "Allow sysadm_t read raw memory devices"
    - Allow systemd-socket-proxyd get attributes of cgroup filesystems
    - Allow rpc.gssd read network sysctls
    - Allow winbind-rpcd get attributes of device and pty filesystems
    - Allow insights-client domain transition on semanage execution
    - Allow insights-client create gluster log dir with a transition
    - Allow insights-client manage generic locks
    - Allow insights-client unix_read all domain semaphores
    - Add domain_unix_read_all_semaphores() interface
    - Allow winbind-rpcd use the terminal multiplexor
    - Allow mrtg send mails
    - Allow systemd-hostnamed dbus chat with init scripts
    - Allow sssd dbus chat with system cronjobs
    - Add interface to watch all filesystems
    - Add watch_sb interfaces
    - Add watch interfaces
    - Allow dhcpd bpf capability to run bpf programs
    - Allow netutils and traceroute bpf capability to run bpf programs
    - Allow pkcs_slotd_t bpf capability to run bpf programs
    - Allow xdm bpf capability to run bpf programs
    - Allow pcscd bpf capability to run bpf programs
    - Allow lldpad bpf capability to run bpf programs
    - Allow keepalived bpf capability to run bpf programs
    - Allow ipsec bpf capability to run bpf programs
    - Allow fprintd bpf capability to run bpf programs
    - Allow systemd-socket-proxyd get filesystems attributes
    - Allow dirsrv_snmp_t to manage dirsrv_config_t & dirsrv_var_run_t files