* Fri Mar 03 2023 Zdenek Pytela <zpytela@redhat.com> - 38.8-1
    - Confine gnome-initial-setup
    - Allow qemu-guest-agent create and use vsock socket
    - Allow login_pgm setcap permission
    - Allow chronyc read network sysctls
    - Enhancement of the /usr/sbin/request-key helper policy
    - Fix opencryptoki file names in /dev/shm
    - Allow system_cronjob_t transition to rpm_script_t
    - Revert "Allow system_cronjob_t domtrans to rpm_script_t"
    - Add tunable to allow squid bind snmp port
    - Allow staff_t getattr init pid chr & blk files and read krb5
    - Allow firewalld to rw z90crypt device
    - Allow httpd work with tokens in /dev/shm
    - Allow svirt to map svirt_image_t char files
    - Allow sysadm_t run initrc_t script and sysadm_r role access
    - Allow insights-client manage fsadm pid files