Allow logrotate setuid and setgid since logrotate is supposed to do it
    Fixes for thumb policy by grift
    Add new nfsd ports
    Added fix to allow confined apps to execmod on chrome
    Add labeling for additional vdsm directories
    Allow Exim and Dovecot SASL
    Add label for /var/run/nmbd
    Add fixes to make virsh and xen working together
    Colord executes ls
    /var/spool/cron  is now labeled as user_cron_spool_t