* Thu Oct 19 2023 Zdenek Pytela <zpytela@redhat.com> - 40.4-1
    - Add map_read map_write to kernel_prog_run_bpf
    - Allow systemd-fstab-generator read all symlinks
    - Allow systemd-fstab-generator the dac_override capability
    - Allow rpcbind read network sysctls
    - Support using systemd containers
    - Allow sysadm_t to connect to iscsid using a unix domain stream socket
    - Add policy for coreos installer
    - Add coreos_installer to modules-targeted-contrib.conf