- Add labels for /var/named/chroot_sdb/dev devices
    - Add support for strongimcv
    - Add additional fixes for yubikeys based on william@firstyear.id.au
    - Allow init_t run /sbin/augenrules
    - Remove dup decl for dev_unmount_sysfs_fs
    - Allow unpriv SELinux user to use sandbox
    - Fix ntp_filetrans_named_content for sntp-kod file
    - Add httpd_dbus_sssd boolean
    - Dontaudit exec insmod in boinc policy
    - Add dbus_filetrans_named_content_system()
    - We want to label only /usr/bin/start-puppet-master to avoid puppet agent running in puppet_t
    - varnishd wants chown capability
    - update ntp_filetrans_named_content() interface
    - Add additional fixes for neutron_t. #1083335
    - Dontaudit sandbox_t getattr on proc_kcore_t
    - Allow pki_tomcat_t to read ipa lib files