* Thu Feb 17 2022 Zdenek Pytela <zpytela@redhat.com> - 36.3-1
    - Update NetworkManager-dispatcher policy to use scripts
    - Allow init mounton kernel messages device
    - Revert "Make dbus-broker service working on s390x arch"
    - Remove permissive domain for insights_client_t
    - Allow userdomain read symlinks in /var/lib
    - Allow iptables list cgroup directories
    - Dontaudit mdadm list dirsrv tmpfs dirs
    - Dontaudit dirsrv search filesystem sysctl directories
    - Allow chage domtrans to sssd
    - Allow postfix_domain read dovecot certificates
    - Allow systemd-networkd create and use netlink netfilter socket
    - Allow nm-dispatcher read nm-dispatcher-script symlinks
    - filesystem.te: add genfscon rule for ntfs3 filesystem
    - Allow rhsmcertd get attributes of cgroup filesystems
    - Allow sandbox_web_client_t watch various dirs
    - Exclude container.if from policy devel files
    - Run restorecon on /usr/lib/sysimage/rpm instead of /var/lib/rpm