- Add label for /var/crash
    - Allow fenced to domtrans to sanclok_t
    - Allow nagios to manage nagios spool files
    - Make tfptd as home_manager
    - Allow kdump to read kcore on MLS system
    - Allow mysqld-safe sys_nice/sys_resource caps
    - Allow apache to search automount tmp dirs if http_use_nfs is enabled
    - Allow crond to transition to named_t, for use with unbound
    - Allow crond to look at named_conf_t, for unbound
    - Allow mozilla_plugin_t to transition its home content
    - Allow dovecot_domain to read all system and network state
    - Allow semanage to read pid files
    - Dontaudit leaked file descriptors from user domain into thumb
    - Add fixes for rabbit to fix ##992920,#99293
    - Make NFS home, NIS authentication and dbus-daemon working
    - Fix thumb_run()
    - winbind wants block_suspend
    - Fix typo in smokeping.te
    - Fix rabbit.te
    - Remove dup rule for dovecot.te
    - Fix abrt.te
    - Allow afs domains to read afs_config files
    - Allow login programs to read afs config
    - Allow virt_domain to read virt_var_run_t symlinks
    - Allow smokeping to send its process signals
    - Allow fetchmail to setuid
    - Add kdump_manage_crash() interface
    - Allow abrt domain to write abrt.socket
    - Add append to the dontaudit for unix_stream_socket of xdm_t leak
    - Allow xdm_t to create symlinks in log direcotries
    - Allow login programs to read afs config
    - Fix rules for creating pluto pid files
    - Fix userdom_relabel_user_tmp_files()
    - Label 10933 as a pop port, for dovecot