- Allow boinc to connect to  @/tmp/.X11-unix/X0
    - Allow beam.smp to connect to tcp/5984
    - Allow named to manage own log files
    - Add label for /usr/libexec/dcc/start-dccifd  and domtrans to dccifd_t
    - Add virt_transition_userdomain boolean decl
    - Allow httpd_t to sendto unix_dgram sockets on its children
    - Allow nova domains to execute ifconfig
    - bluetooth wants to create fifo_files in /tmp
    - exim needs to be able to manage mailman data
    - Allow sysstat to getattr on all file systems
    - Looks like bluetoothd has moved
    - Allow collectd to send ping packets
    - Allow svirt_lxc domains to getpgid
    - Remove virt-sandbox-service labeling as virsh_exec_t, since it no longer does virsh_
    - Allow frpintd_t to read /dev/urandom
    - Allow asterisk_t to create sock_file in /var/run
    - Allow usbmuxd to use netlink_kobject
    - sosreport needs to getattr on lots of devices, and needs access to netlink_kobject_u
    - More cleanup of svirt_lxc policy
    - virtd_lxc_t now talks to dbus
    - Dontaudit leaked ptmx_t
    - Allow processes to use inherited fifo files
    - Allow openvpn_t to connect to squid ports
    - Allow prelink_cron_system_t to ask systemd to reloaddd miscfiles_dontaudit_access_ch
    - Allow ssh_t to use /dev/ptmx
    - Make sure /run/pluto dir is created with correct labeling
    - Allow syslog to run shell and bin_t commands
    - Allow ip to relabel tun_sockets
    - Allow mount to create directories in files under /run
    - Allow processes to use inherited fifo files
    - Allow user roles to connect to the journal socket