Allow cpuplug rw virtual memory sysctl. BZ (1077831)
Allow smbd to create HOMEDIRS is pam_oddjob_mkhomedir in MLS.
Merge branch 'f21-contrib' of github.com:selinux-policy/selinux-policy into f21-contrib
Docker needs to write to sysfs, needs back port to F20,F21, RHEL7
Allow openvpn to stream connect to networkmanager. BZ(1164182)
Allow bumblebee to use nsswitch. BZ(1155339)
Allow access checks on setfiles/load_policy/semanage_lock for selinux_child running as sssd_t.
Allow selinux_child running as sssd access check on /etc/selinux/targeted/modules/active.
Merge branch 'f21-contrib' of github.com:selinux-policy/selinux-policy into f21-contrib
Make all glance domain as nsswitch domains.
Make kpropdas nsswitch domain.
Allow openvpn to create uuid connections in /var/run/NetworkManager with NM labeling.
Allow rpm scripts to enable/disable transient systemd units.
Add support for /usr/bin/start-puppet-ca helper script.
Allow sendmail to create dead.letter. BZ(1165443)
Allow systemd_dbus_t to execute bin_t in the caller domain if unconfined.pp is disabled to have unconfined dbus service running as system_dbusd_t.
Revert "Allow selinux_child running as sssd access check on /etc/selinux/targeted/modules/active."

This reverts commit 22f832108695133aa1fc8d48a85c1d38aba23086.
Revert "Allow access checks on setfiles/load_policy/semanage_lock for selinux_child running as sssd_t."

This reverts commit 2b16782dab1353ba58cadd1e157d1e1ee3fdd355.
Allow networkmanager manage also openvpn sock pid files.
Allow NetworkManager stream connect on openvpn. BZ(1165110)