Allow svirt_lxc_domain to chr_file and blk_file devices if they are in the domain
    Allow init process to setrlimit on itself
    Take away transition rules for users executing ssh-keygen
    Allow setroubleshoot_fixit_t to read /dev/urand
    Allow sshd to relbale tunnel sockets
    Allow fail2ban domtrans to shorewall in the same way as with iptables
    Add support for lnk files in the /var/lib/sssd directory
    Allow system mail to connect to courier-authdaemon over an unix stream socket