- Fixed destined form libvirt-sandbox
    - Allow apps that list sysfs to also read sympolicy links in this filesystem
    - Add ubac_constrained rules for chrome_sandbox
    - Need interface to allow domains to use tmpfs_t files created by the kernel, used by libra
    - Allow postgresql to be executed by the caller
    - Standardize interfaces of daemons
    - Add new labeling for mm-handler
    - Allow all matahari domains to read network state and etc_runtime_t files