* Sun Jun 06 2021 Zdenek Pytela <zpytela@redhat.com> - 34.10-1
    - Allow using opencryptoki for ipsec
    - Allow using opencryptoki for certmonger
    - Label var.lib.opencryptoki.* files and create pkcs_tmpfs_filetrans()
    - Label /dev/dma_heap with dma_device_dir_t
    - Allow syslogd watch non security dirs conditionally
    - Introduce logging_syslogd_list_non_security_dirs tunable
    - Remove openhpi module
    - Allow udev to watch fixed disk devices
    - Allow httpd_sys_script_t read, write, and map hugetlbfs files
    - Allow apcupsd get attributes of cgroup filesystems