* Mon Jun 17 2024 Zdenek Pytela <zpytela@redhat.com> - 41.4-1
    - Allow login_userdomain execute systemd-tmpfiles in the caller domain
    - Allow virt_driver_domain read files labeled unconfined_t
    - Allow virt_driver_domain dbus chat with policykit
    - Allow virtqemud manage nfs files when virt_use_nfs boolean is on
    - Add rules for interactions between generators
    - Label memory.pressure files with cgroup_memory_pressure_t
    - Revert "Allow some systemd services write to cgroup files"
    - Update policy for systemd-nsresourced
    - Label /usr/bin/ntfsck with fsadm_exec_t
    - Allow systemd_fstab_generator_t read tmpfs files
    - Update policy for systemd-nsresourced
    - Alias /usr/sbin to /usr/bin and change all /usr/sbin paths to /usr/bin
    - Remove a few lines duplicated between {dkim,milter}.fc
    - Alias /bin → /usr/bin and remove redundant paths
    - Drop duplicate line for /usr/sbin/unix_chkpwd
    - Drop duplicate paths for /usr/sbin