- Add additional fixes for  abrt-dump-journal-oops which is now labeled as abrt_dump_oops_exec_t.
    - Allow denyhosts to enable synchronization which needs to connect to tcp/9911 port.
    - Allow nacl_helper_boo running in :chrome_sandbox_t to send SIGCHLD to chrome_sandbox_nacl_t.
    - Dontaudit write access on generic cert files. We don't audit also access check.
    - Add support for arptables.
    - Add labels and filenametrans rules for ostree repo directories which needs to be writable by subscription-manager.