Many fixes for initrc required by turning off unlimitedRC Fixes for ipsec Fixes for ifdefs of targeted policy Added new booleans to replace tunables allow_user_mysql_connect & allow_user_postgresql_connect & pppd_for_user Fixed some can_network_* calls. Added support for winbindd Added a portmap_helper domain for pmap_dump and pmap_set. Not sure if I like this? Looking for comments. Remove user_can_mount tunable