- virsh now does a setexeccon call
    - Additional rules required by openshift domains
    - Allow svirt_lxc_domains to use inherited terminals, needed to make virt-sandbox-serv
    - Allow spamd_update_t to search spamc_home_t
    - Avcs discovered by mounting an isci device under /mnt
    - Allow lspci running as logrotate to read pci.ids
    - Additional fix for networkmanager_read_pid_files()
    - Fix networkmanager_read_pid_files() interface
    - Allow all svirt domains to connect to svirt_socket_t
    - Allow virsh to set SELinux context for a process.
    - Allow tuned to create netlink_kobject_uevent_socket
    - Allow systemd-timestamp to set SELinux context
    - Add support for /var/lib/systemd/linger
    - Fix ssh_sysadm_login to be working on MLS as expected