* Mon Jan 17 2022 Zdenek Pytela <zpytela@redhat.com> - 35.10-1
    - Allow login_userdomain watch systemd-machined PID directories
    - Allow login_userdomain watch systemd-logind PID directories
    - Allow login_userdomain watch accountsd lib directories
    - Allow login_userdomain watch localization directories
    - Allow login_userdomain watch various files and dirs
    - Allow login_userdomain watch generic directories in /tmp
    - Allow rhsm-service read/write its private memfd: objects
    - Allow radiusd connect to the radacct port
    - Allow systemd-io-bridge ioctl rpm_script_t
    - Allow systemd-coredump userns capabilities and root mounton
    - Allow systemd-coredump read and write usermodehelper state
    - Allow login_userdomain create session_dbusd tmp socket files
    - Allow gkeyringd_domain write to session_dbusd tmp socket files
    - Allow systemd-logind delete session_dbusd tmp socket files
    - Allow gdm-x-session write to session dbus tmp sock files
    - Label /etc/cockpit/ws-certs.d with cert_t
    - Allow kpropd get attributes of cgroup filesystems
    - Allow administrative users the bpf capability
    - Allow sysadm_t start and stop transient services
    - Connect triggerin to pcre2 instead of pcre