- Add filename transition also for servicelog.db-journal
    - Add files_dontaudit_access_check_root()
    - Add lvm_dontaudit_access_check_lock() interface
    - Allow mount to manage mount_var_run_t files/dirs
    - Allow updapwd_t to ignore mls levels for writign shadow_t at a lower level
    - Make sure boot.log is created with the correct label
    - call logging_relabel_all_log_dirs() in systemd.te
    - Allow systemd_tmpfiles to relabel log directories
    - Allow staff_t to run frequency command
    - Allow staff_t to read xserver_log file
    - This reverts commit c0f9f125291f189271cbbca033f87131dab1e22f.
    - Label hsperfdata_root as tmp_t
    - Add plymouthd_create_log()
    - Dontaudit leaks from openshift domains into mail domains, needs back port to RHEL6
    - Allow sssd to request the kernel loads modules
    - Allow gpg_agent to use ssh-add
    - Allow gpg_agent to use ssh-add
    - Dontaudit access check on /root for myslqd_safe_t
    - Add glusterd_brick_t files type
    - Allow ctdb to getattr on al filesystems
    - Allow abrt to stream connect to syslog
    - Allow dnsmasq to list dnsmasq.d directory
    - Watchdog opens the raw socket
    - Allow watchdog to read network state info
    - Dontaudit access check on lvm lock dir
    - Allow sosreport to send signull to setroubleshootd
    - Add setroubleshoot_signull() interface
    - Fix ldap_read_certs() interface
    - Allow sosreport all signal perms
    - Allow sosreport to run systemctl
    - Allow sosreport to dbus chat with rpm
    - Allow zabbix_agentd to read all domain state
    - Allow sblim_sfcbd_t to read from /dev/random and /dev/urandom
    - Allow smoltclient to execute ldconfig
    - Allow sosreport to request the kernel to load a module
    - Clean up rtas.if
    - Clean up docker.if
    - drop /var/lib/glpi/files labeling in cron.fc
    - Added new policy for rasdaemon