* Mon May 22 2023 Zdenek Pytela <zpytela@redhat.com> - 38.13-1
    - Add initial policy for cifs-helper
    - Label key.dns_resolver with keyutils_dns_resolver_exec_t
    - Allow unconfined_service_t to create .gnupg labeled as gpg_secret_t
    - Allow some systemd services write to cgroup files
    - Allow NetworkManager_dispatcher_dhclient_t to read the DHCP configuration files
    - Allow systemd resolved to bind to arbitrary nodes
    - Allow plymouthd_t bpf capability to run bpf programs
    - Allow cupsd to create samba_var_t files
    - Allow rhsmcert request the kernel to load a module
    - Allow virsh name_connect virt_port_t
    - Allow certmonger manage cluster library files
    - Allow plymouthd read init process state
    - Add chromium_sandbox_t setcap capability
    - Allow snmpd read raw disk data
    - Allow samba-rpcd work with passwords
    - Allow unconfined service inherit signal state from init
    - Allow cloud-init manage gpg admin home content
    - Allow cluster_t dbus chat with various services
    - Allow nfsidmapd work with systemd-userdbd and sssd
    - Allow unconfined_domain_type use IORING_OP_URING_CMD on all device nodes
    - Allow plymouthd map dri and framebuffer devices
    - Allow rpmdb_migrate execute rpmdb
    - Allow logrotate dbus chat with systemd-hostnamed
    - Allow icecast connect to kernel using a unix stream socket
    - Allow lldpad connect to systemd-userdbd over a unix socket
    - Allow journalctl open user domain ptys and ttys
    - Allow keepalived to manage its tmp files
    - Allow ftpd read network sysctls
    - Label /run/bgpd with zebra_var_run_t
    - Allow gssproxy read network sysctls
    - Add the cifsutils module