* Fri Dec 10 2021 Zdenek Pytela <zpytela@redhat.com> - 35.7-1
    - Allow systemd read unlabeled symbolic links
    - Label abrt-action-generate-backtrace with abrt_handle_event_exec_t
    - Allow dnsmasq watch /etc/dnsmasq.d directories
    - Allow rhsmcertd get attributes of tmpfs_t filesystems
    - Allow lldpd use an snmp subagent over a tcp socket
    - Allow xdm watch generic directories in /var/lib
    - Allow login_userdomain open/read/map system journal
    - Allow sysadm_t connect to cluster domains over a unix stream socket
    - Allow sysadm_t read/write pkcs shared memory segments
    - Allow sysadm_t connect to sanlock over a unix stream socket
    - Allow sysadm_t dbus chat with sssd
    - Allow sysadm_t set attributes on character device nodes
    - Allow sysadm_t read and write watchdog devices
    - Allow smbcontrol use additional socket types
    - Allow cloud-init dbus chat with systemd-logind
    - Allow svnserve send mail from the system
    - Update userdom_exec_user_tmp_files() with an entrypoint rule
    - Allow sudodomain send a null signal to sshd processes