- systemd_logind_t is looking at all files under /run/user/apache
    - Allow systemd to manage all user tmp files
    - Add labeling for /var/named/chroot/etc/localtime
    - Allow netlabel_peer_t type to flow over netif_t and node_t, and on
    - Keystone is now using a differnt port
    - Allow xdm_t to use usbmuxd daemon to control sound
    - Allow passwd daemon to execute gnome_exec_keyringd
    - Fix chrome_sandbox policy
    - Add labeling for /var/run/checkquorum-timer
    - More fixes for the dspam domain, needs back port to RHEL6
    - More fixes for the dspam domain, needs back port to RHEL6
    - sssd needs to connect to kerberos password port if a user changes
    - Lots of fixes from RHEL testing of dspam web
    - Allow chrome and mozilla_plugin to create msgq and semaphores
    - Fixes for dspam cgi scripts
    - Fixes for dspam cgi scripts
    - Allow confine users to ptrace screen
    - Backport virt_qemu_ga_t changes from RHEL
    - Fix labeling for dspam.cgi needed for RHEL6
    - We need to back port this policy to RHEL6, for lxc domains
    - Dontaudit attempts to set sys_resource of logrotate
    - Allow corosync to read/write wdmd's tmpfs files
    - I see a ptrace of mozilla_plugin_t by staff_t, will allow without
    - Allow cron jobs to read bind config for unbound
    - libvirt needs to inhibit systemd
    - kdumpctl needs to delete boot_t files
    - Fix duplicate gnome_config_filetrans
    - virtd_lxc_t is using /dev/fuse
    - Passenger needs to create a directory in /var/log, needs a backpor
    - apcupsd can be setup to listen to snmp trafic
    - Allow transition from kdumpgui to kdumpctl
    - Add fixes for munin CGI scripts
    - Allow deltacloud to connect to openstack at the keystone port
    - Allow domains that transition to svirt domains to be able to signa
    - Fix file context of gstreamer in .cache directory
    - libvirt is communicating with logind