- Allow tcpd to execute leafnode
    - Allow samba-net to read realmd cache files
    - Dontaudit sys_tty_config for alsactl
    - Fix allow rules for postfix_var_run
    - Allow cobblerd to read /etc/passwd
    - Allow pegasus to read exports
    - Allow systemd-timedate to read xdm state
    - Allow mout to stream connect to rpcbind
    - Add labeling just for /usr/share/pki/ca-trust-source instead of /usr/share/pki