- Correct labeling on /var/run/dmevent.*
- Allow pam_t to read wtmp file
- Allow squid to run chkpwd
- Allow postfix_local to exec clamscan
- Allow munin to listen on munin_port
- Label /var/lib/cups-pdf correctly
- Allow fail2ban to read etc_runtime files and to connectto itself
- Label lustrefs and panfs as nfs_t
- Allow kismet to talk to the terminal