* Wed Dec 13 2023 Zdenek Pytela <zpytela@redhat.com> - 40.7-1
    - Make named_zone_t and named_var_run_t a part of the mountpoint attribute
    - Allow sysadm execute traceroute in sysadm_t domain using sudo
    - Allow sysadm execute tcpdump in sysadm_t domain using sudo
    - Allow opafm search nfs directories
    - Add support for syslogd unconfined scripts
    - Allow gpsd use /dev/gnss devices
    - Allow gpg read rpm cache
    - Allow virtqemud additional permissions
    - Allow virtqemud manage its private lock files
    - Allow virtqemud use the io_uring api
    - Allow ddclient send e-mail notifications
    - Allow postfix_master_t map postfix data files
    - Allow init create and use vsock sockets
    - Allow thumb_t append to init unix domain stream sockets
    - Label /dev/vas with vas_device_t
    - Change domain_kernel_load_modules boolean to true
    - Create interface selinux_watch_config and add it to SELinux users