If I can create a socket I need to be able to set the attributes
Merge branch 'f20-base' of github.com:selinux-policy/selinux-policy into f20-base
Add logging_dontaudit_search_audit_logs()
label /usr/libexec/cockpit-agent as shell_exec_t
sysadm_t should be allowed to communicate with networkmanager
Allow sysadm_t to create netlink_tcpdiag socket
Allow docker lots more access.  Docker should be an unconfined domain in RHEL6 and still be permissive in Fedora releases
Add kernel_signull() interface.
Fix typo
Added interface kernel_dontaudit_setsched
Added kernel_signull
Label ~/tmp and ~/.tmp directories in user tmp dirs as user_tmp_t
Fix labeling for HOME_DIR/tmp and HOME_DIR/.tmp directories.
Allow domains to are allowed to mounton proc to mount on files as well as dirs
Allow programs to use pam to search through user_tmp_t dires (/tmp/.X11-unix)
Allow init to read all config files
Merge branch 'f20-base' of github.com:selinux-policy/selinux-policy into f20-base
Add new interface to allow creation of file with lib_t type
Add init_dontaudit_read_state() interface.
Allow udev_t mounton udev_var_run_t dirs #(1128618)