* Wed Jan 24 2024 Zdenek Pytela <zpytela@redhat.com> - 40.10-1
    - Allow chronyd-restricted read chronyd key files
    - Allow conntrackd_t to use bpf capability2
    - Allow systemd-networkd manage its runtime socket files
    - Allow init_t nnp domain transition to colord_t
    - Allow polkit status systemd services
    - nova: Fix duplicate declarations
    - Allow httpd work with PrivateTmp
    - Add interfaces for watching and reading ifconfig_var_run_t
    - Allow collectd read raw fixed disk device
    - Allow collectd read udev pid files
    - Set correct label on /etc/pki/pki-tomcat/kra
    - Allow systemd domains watch system dbus pid socket files
    - Allow certmonger read network sysctls
    - Allow mdadm list stratisd data directories
    - Allow syslog to run unconfined scripts conditionally
    - Allow syslogd_t nnp_transition to syslogd_unconfined_script_t
    - Allow qatlib set attributes of vfio device files