+- Allow spamd to send mail
    +- Add ssh_home_t label for /var/lib/nocpulse/.ssh
    +- Allow puppetmaster to read network state
    +- Add colord_can_network_connect boolean
    +- Allow colord to execute shell
    +- Add bin_t label for "/usr/lib/iscan/network"
    +- Allow chrome-sandbox ptrace
    +- winbind needs to be able to talk to ldap directly, not through sssd
    +- saslauthd_t needs to connect to zarafa_port_t
    +- dnsmasq wants to read proc_net_t
    +- Add full DNS support for FreeIPA