Amanda changes, not sure why you didn't take them last time

Fixing some labels to march what actually ends up on disk  see /boot/grub

Change firstboot to create etc_runtime_t instead of firstboot_rw_t.

Please change /opt java line to match what IBM ships

mono apps want to create files in homedirs so they need to transition 
(beagle)

In corecommands prelink also creates lnk_file, when it recreates 
executables.

/dev/adsp can have numbers

/etc/reader.conf gets created in install with etc_runtime_t

gfs supports xattr

/dev/xvc is a new kind of tty for xen

Lots of domains need term_dontaudit_use_unallocated_ttys for startup 
from a tty.

Apache uses ldap

bluetooth_helper started for startx needs some more privs

crontab changes for setting MLS values.

dovecot wants to read some files labeled var_t.

ldap uses a socket to communicate

NetworkManager wants to ptrace itself

setroubleshootd should be added.

spamassasin neess to be able to create a directory in the users homedir


Need a transition for keygen for anaconda to create keys with the 
correct context.

stunnel reads route table
and connects to smtp

X No longer needs execstack, execheap, execmem

hotplug needs setpgid

auditd_sock changed names to audit_events

Added loopback_t to allow you to define loopback devices and have mount 
read them

Changes to semanage

/usr/lib/ia32el/ia32x_loader needs to run unconfined_execmem_t if we 
have any hope of turning off allow_execmem