- Allow certmonger add new entries in a generic certificates directory
Resolves: rhbz#1879496
- Allow slapd add new entries in ldap certificates directory
Resolves: rhbz#1879496
- Add miscfiles_add_entry_generic_cert_dirs() interface
Resolves: rhbz#1879496

- Allow rhsmd read process state of all domains and kernel threads
Resolves: rhbz#1837461
- Allow ipa-adtrust-install restart sssd and dirsrv services
Resolves: rhbz#1820298
- Allow nagios_plugin_domain execute programs in bin directories
Resolves: rhbz#1824625
- selinux policy: add the right context for org.freeipa.server.trust-enable-agent
Related: rhbz#1820298

- Allow nagios_plugin_domain execute programs in bin directories
Resolves: rhbz#1832219

- Dontaudit tmpreaper_t getting attributes from sysctl_type files
Resolves: rhbz#1766095

- Allow sbd_t domain to use nsswitch
Resolves: rhbz#1728593

- Allow nova_t domain to use pam
Resolves: rhbz:#1645270
- sysstat: grant sysstat_t the search_dir_perms set
Resolves: rhbz#1645271

- Remove disabling ganesha module in pre install phase of installation new selinux-policy package where ganesha is again standalone module
Resolves: rhbz#1638257

- Allow neutron domain to read/write /var/run/utmp
Resolves: rhbz#1630318

- Allow snapperd_t domain to unmount fs_t filesystems
Resolves: rhbz#1561424

- Update openvswitch policy from Fedora
Resolves: rhbz#1538936

- Allow cluster_t domain creating bundles directory with label var_log_t instead of cluster_var_log_t
Resolves: rhbz:#1513075

- Allow certmonger using systemctl on pki_tomcat unit files
Resolves: rhbz#1486552

- Add new boolean gluster_use_execmem
Resolves: rhbz#1469027
- Allow cluster_t and glusterd_t domains to dbus chat with ganesha service
Resolves: rhbz#1468581

- Allow openvswitch read script state.
- Allow openvswitch exec hostname and readinitrc_t files
Resolves: rhbz#1430751

- Allow sssd_t domain setpgid
Resolves:rhbz#1419836

- Allow GlusterFS with RDMA transport to be started correctly. It requires ipc_lock capability together with rw permission on rdma_cm device.
Resolves:#1386620
- Allow glusterd to get attributes on /sys/kernel/config directory.
Resolves:#1386621

Allow hypervvssd to list all mountpoints to have VSS live backup working correctly.
Resolves:#1247880

- Update seutil_manage_config() interface.
Resolves:#1185962
- Allow pki-tomcat relabel pki_tomcat_etc_rw_t.
- Turn on docker_transition_unconfined by default