- varnishd wants chown capability
    - update ntp_filetrans_named_content() interface
    - Add additional fixes for neutron_t. #1083335
    - Dontaudit getattr on proc_kcore_t
    - Allow pki_tomcat_t to read ipa lib files
    - Allow named_filetrans_domain to create /var/cache/ibus with correct labelign
    - Allow init_t run /sbin/augenrules
    - Add dev_unmount_sysfs_fs and sysnet_manage_ifconfig_run interfaces
    - Allow unpriv SELinux user to use sandbox
    - Add default label for /tmp/hsperfdata_root