Fix typo in chrome.if
Allow ndc to read random and urandom device BZ #1110397
Allow zabbix to read system network state
Allow fprintd to execute usr_t/bin_t
Allow mailserver_domain domains to append dead.letter labeled as mail_home_t
Merge branch 'rawhide-contrib' of github.com:selinux-policy/selinux-policy into rawhide-contrib
Add glance_use_execmem boolean to have glance configured to use Ceph/rbd working.
Dontaudit search audit logs for fail2ban
Allow mailserver_domain domains to create mail home content with right labeling.
Dontaudit svirt_sandbox_domain doing access checks on /proc
Fix AVCs related to bug BZ #985331, Allow osad to read sysnet config, osad can connect to http port, allow osad create tcp socket, allow osad create netlink_route socket
Fix  files_pid_filetrans() calling in nut.te to reflect allow rules.
Merge branch 'rawhide-contrib' of github.com:selinux-policy/selinux-policy into rawhide-contrib
Use nut_domain attribute for files_pid_filetrans() for nut domains.
Add auth_use_nsswitch instead of sysnet_read_config
Allow sandbox domains read all mountpoint symlinks to make symlinked homedirs working with sandbox.
Merge branch 'rawhide-contrib' of github.com:selinux-policy/selinux-policy into rawhide-contrib
Fix nut domains only have type transition on dirs in /run/nut directory.
Fix osad policy, remove rule related to socket
Allow net_admin/net_raw capabilities for haproxy_t. haproxy uses setsockopt() to manipulate options for the sockect referred to by the file descriptor sockfd.