- Allow sysadm_t to run puppet_exec_t binaries as puppet_t
Resolves: rhbz#1522765

- Allow glusterd_t send signals to userdomain. Label new glusterd binaries as glusterd_exec_t
Resolves: rhbz#1404152
- Label /usr/bin/puppet* binaries as puppet_exec_t
Resolves: rhbz#1386181

- Allow glusterd_t send signals to userdomain. Label new glusterd binaries as glusterd_exec_t
Resolves: rhbz#1409482

- Allow smbcontrol to create a socket in /var/samba which uses for a communication with smbd, nmbd and winbind.
Related: #1322688

- Allow ipsec_mgmt_t to access netlink route socket and set attributes for /var/run/pluto directories.
Resolves:#1289019

- Backport ipsec-mgmt fixes to have libreswan working correctly on RHEL-6.7.
Resolves:#1272437

- Allow nsswitch domain to search samba pid dirs to allow to connect to nmbd_t
Resolves:#1248520

- Allow logrotate get attributes of all unallocated tty device nodes.
- Add logging_syslogd_run_nagios_plugins boolean for rsyslog to allow transition to nagios unconfined plugins.
- Allow glusterd to connect to init.
Resolves:#1230371
- Allow gluster do dbus chat with domain running as initrc_t.

- Allow passenger to accept connection.
- Update passenger rules from RHEL7.
Resolves:#1211706
- Allow mysqld_t to use pam
- Allow mysqld_t to send audit messages
Resolves:#1214023
- Back port labeling for /etc/my.cnf.d dir.
Resolves:#1212976
- Add labeling for mariadb log/pid files/dirs.
Resolves:#1212846
- Add support for mogos service.
Resolves:#1212972

- Allow snmpd to getattr on removeable and fixed disks
Resolves:#1078275