1116 files changed, 2210 insertions, 2212 deletions

diff --git a/Changelog.contrib b/Changelog.contrib
index 452cbbb1..1596ba77 120000..100644
--- a/Changelog.contrib
+++ b/Changelog.contrib
@@ -1 +1,2210 @@
-policy/modules/contrib/Changelog
\ No newline at end of file
+* Sun Jan 14 2018 Chris PeBenito <pebenito@ieee.org> - 2.20180114
+Chad Hanson (1):
+      Allow rpm to relabel files at all levels
+
+Chris PeBenito (46):
+      Remove deprecated interfaces more than one year old.
+      Remove complement and wildcard in allow rules.
+      Merge branch 'master' of git://github.com/teg/refpolicy-contrib
+      dbus: Module version bump for dbus-broker patch from Tom Gundersen.
+      Module version bump for patches from Guido Trentalancia.
+      Module version bumps for patches from David Sugar.
+      dhcp, logrotate: Module version bump.
+      Module version bumps for chkrootkit, dkim, dmidecode, portage, and
+         rkhunter.
+      Module version bumps.
+      spamassassin: Move lines.
+      mandb, spamassassin: Module version bumps.
+      spamassassin: Fix build error.
+      spamassassin: Add missing requirement in spamassassin_admin().
+      dphysswapfile: Module version bump.
+      gpg, pulseaudio, rpc: Module version bump.
+      dnsmasq, gnome, mon, mta, openoffice, pulseaudio, wm: Version bumps.
+      Revert "postfix: Some table drivers (notably cdb) need to mmap() their
+         databases"
+      java, mozilla, mta, postfix: Module version bump.
+      portage: Fix usr_t map interface usage.
+      apache, portage: Module version bump.
+      dbus, policykit, wm: Module version bump.
+      dbus: Add comment.
+      Merge branch 'nm_audit' of git://github.com/bigon/refpolicy-contrib
+      networkmanager: Module version bump.
+      virt: Move a line.
+      alsa, mon, virt: Module version bump.
+      gpg, mozilla, rpc: Module version bump.
+      Several module version bumps.
+      blueman, evolution, gpg, mozilla, openoffice, thunderbird, wireshark, wm:
+         Module version bump.
+      wm: Module version bump.
+      networkmanager: Move line.
+      networkmanager: Module version bump.
+      Merge branch 'pkcs' of https://github.com/dodys/refpolicy-contrib
+      pkcs: Rename pkcs_slotd_unit_file_t.
+      pkcs: Module version bump.
+      accountsd, policykit: Module version bump.
+      dbus, devicekit, modemmanager, networkmanager, virt: Module version bump.
+      modemmanager: Move lines.
+      rpm: Module version bump.
+      cachefilesd, dbus, dirmngr, gnome, gpg, pulseaudio: Module version bump.
+      Replace deprecated mmap perm sets and pattern usage.
+      gssproxy: Module version bump.
+      monit: Module version bump.
+      apache, dkim, monit: Module version bump.
+      spamassassin: Module version bump.
+      Bump module versions for release.
+
+Christian Göttsche (20):
+      dkim: align filecontexts
+      dkim: update
+      milter: align filecontexts
+      apache: align filecontexts
+      dmidecode: use userdom_use_inherited_user_terminals
+      spamassassin: align filecontexts
+      chkrootkit: update
+      rkhunter: add several missing permission
+      fakehwclock: update
+      milter: update
+      mandb: fixes for systemd timer and /usr/local/man label
+      spamassassin: update
+      dphysswapfile: fix swapfile creation
+      apache: update
+      monit: update
+      dkim: align file contexts
+      dkim: update
+      apache: update
+      monit: read /usr/share/ca-certificates for cert verification
+      spamassassin: fix missing perms
+
+Daniel Jurgens (1):
+      networkmanager: Grant access to unlabeled PKeys
+
+David Sugar (5):
+      mon: move rpc_* into optional
+      wm: consolidate networkmanger interface calls into single optional
+      cron: optional_policy for mta_* interfaces
+      Label /usr/bin/mutter
+      Allow to read /proc/sys/crypto/fips_enabled
+
+Eduardo Barretto (2):
+      Update pkcs policy to include pkccsslotd.service
+      Update missing permissions for pkcs
+
+Guido Trentalancia (13):
+      libmtp: read symlinks in user home directories
+      spamassassin: update rules for the Bayesian classifier trainer
+      wm: let gnome-shell start properly
+      gnome: keyring daemon dbus policy update
+      gnome: keyring daemon read SELinux config
+      openoffice: improve temporary directories' operations
+      pulseaudio: general update
+      wm: gnome-shell SELinux integration
+      mozilla: run Java Web Start applications
+      wm: run PolicyKit
+      dbus: read user home content files
+      mozilla: read generic SSL certificates
+      contrib: use the new SSL private keys type (was: "let the mozilla and
+         other domains read generic SSL certificates")
+
+Jason Zaman (12):
+      cgmanager: Apply auth_use_nsswitch interface
+      alsa: needs to map its tmpfs files
+      virt: add policy for virtlogd
+      virt: updated perms for starting guests
+      gssproxy: add policy
+      rpc: Allow stream connect to gssproxy
+      gpg: search dir when connecting to agent socket
+      dirmngr: allow filetrans in gpg_runtime_t
+      gpg: Add gpg_agent_use_card boolean for OpenPGP cards
+      cachefilesd: make cachefilesd_cache_t a mountpoint
+      Set user_runtime_content_type for all remaining types in /run/user/%{UID}/
+      gssproxy: allow writing kerberos rcache
+
+Jason Zaman via refpolicy (3):
+      pulseaudio: Add neccessary map permissions
+      gpg: add fcontexts for user runtime sockets
+      rpc: add sm-notify pid fcontext
+
+Laurent Bigonville (2):
+      Allow NetworkManager to write to audit
+      Call systemd_write_inherited_logind_inhibit_pipes() where needed
+
+Luis Ressel (12):
+      portage: Allow portage_t and portage_sandbox_t to access locale_t
+      postfix: Some table drivers (notably cdb) need to mmap() their databases
+      portage: Grant the map permissions neccessary for git and install
+      alsa: alsactl needs to map its configuration
+      mozilla: Add neccessary map permissions
+      mandb: man-db needs to map its 'index.db' cache
+      portage: Remove nonsensical dontaudit of an allowed permission
+      portage: Transition to ldconfig_t when calling ldconfig
+      postfix: Some table drivers (notably cdb) need to mmap() their databases
+      postfix: Silence cap_dac_read_search denials
+      portage: Grant portage the map permission on usr_t
+      Allow gtk apps to map usr_t files
+
+Nicolas Iooss (2):
+      dbus: move comments out of the file context definitions
+      logrotate: allow systemd to start logrotate
+
+Russell Coker (3):
+      udev and dhcpd
+      minor nspawn, dnsmasq, and mon patches
+      refpolicy and certs
+
+Tom Gundersen (1):
+      dbus: add policy for dbus-broker
+
+* Sat Aug 05 2017 Chris PeBenito <pebenito@ieee.org> - 2.20170805
+Chris PeBenito (82):
+      Create / to /usr equivalence for bin, sbin, and lib, from Russell Coker.
+      Module version bump for usrmerge FC fixes from Jason Zaman.
+      mon policy from Russell Coker.
+      Module version bump for cups patches from Guido Trentalancia.
+      Module version bump for tbird and mozilla printing from Guido
+         Trentalancia.
+      Revert "cups/lpd: read permission for cupsd_var_run_t socket files"
+      Module version bump for cups revert.
+      Sort capabilities permissions from Russell Coker.
+      Little misc patch from Russell Coker.
+      mon: Fix deprecated interface usage.
+      dpkg: Updates from Russell Coker.
+      Monit policy from Russell Coker and cgzones.
+      monit: Fix build error.
+      fetchmail, mysql, tor: Misc fixes from Russell Coker.
+      Merge branch 'alsa_module' of git://github.com/cgzones/refpolicy-contrib
+      Merge branch 'vnstat_module' of git://github.com/cgzones/refpolicy-contrib
+      Module version bump for alsa and vnstatd fixes from cgzones.
+      Merge branch 'ntp_module' of git://github.com/cgzones/refpolicy-contrib
+      Module version bump for ntp fixes from cgzones.
+      samba: A few line moves.
+      Module version bump for samba patch from Russell Coker.
+      Systemd fixes from Russell Coker.
+      Xen fixes from Russell Coker.
+      mailman: Fixes from Russell Coker.
+      MTA fixes from Russell Coker.
+      Network daemon patches from Russell Coker.
+      apache: Fix CI error.
+      Merge branch 'modutils_adapt_interfaces' of
+         git://github.com/cgzones/refpolicy-contrib
+      Merge branch 'corecmd_read_bin_symlinks' of
+         git://github.com/cgzones/refpolicy-contrib
+      Module version bumps for fixes from cgzones.
+      Merge branch 'mandb' of git://github.com/cgzones/refpolicy-contrib
+      Merge branch 'dphysswapfile' of git://github.com/cgzones/refpolicy-contrib
+      Module version bump for dphysswapfile and mandb fixes from cgzones.
+      Merge branch 'var_run_filecontext' of
+         git://github.com/cgzones/refpolicy-contrib
+      Merge branch 'vnstatd' of git://github.com/cgzones/refpolicy-contrib
+      Module version bump for fixes from cgzones.
+      dontaudit net_admin for SO_SNDBUFFORCE
+      /var/run -> /run again
+      Merge branch 'monit' of git://github.com/cgzones/refpolicy-contrib
+      Module version bump for monit patch from cgzones.
+      systemd-resolvd, sessions, and tmpfiles take2
+      Misc fc changes from Russell Coker.
+      Systemd-related changes from Russell Coker.
+      networkmanager: adjust interface docs format.
+      wm: interface docs adjustment.
+      Module version bump for misc fixes from Guido Trentalancia.
+      systemd init from Russell Coker
+      misc daemons from Russell Coker.
+      logging patches from Russell Coker
+      kmod, lvm, brctl patches from Russell Coker
+      devicekit, mount, xserver, and selinuxutil from Russell Coker
+      some userdomain patches from Russell Coker
+      Module version bump for gnome fix from Guido Trentalancia.
+      apache: Move blocks.  No rule changes.
+      Module version bump for changes from Sven Vermeulen and Guido
+         Trentalancia.
+      login take 4 from Russell Coker.
+      Rename apm to acpi from Russell Coker.
+      Module version bump for patches from Russell Coker.
+      some little misc things from Russell Coker.
+      apt/dpkg strict patches from Russell Coker.
+      Module version bump for minor fixes from Guido Trentalancia.
+      Merge branch 'usr_bin_fc' of
+         git://github.com/fishilico/selinux-refpolicy-contrib
+      Module version bump for /usr/bin fc fixes from Nicolas Iooss.
+      Module version bump for chronyd changes from Luis Ressel.
+      openoffice: Move ooffice_rw_tmp_files() implementation.
+      Module version bump for openoffice fix from Guido Trentalancia.
+      libmtp: move lines
+      Module version bump for fixes from Guido Trentalancia.
+      Module version bump for mmap fixes from Stephen Smalley.
+      Module version bump for misc patches from Guido Trentalancia.
+      gpg: Fix overspecified dependencies in gpg_agent_tmp_filetrans.
+      dirmngr: Whitespace fixes.
+      Module version bumps for patches from Jason Zaman.
+      cgmanager: Move lines
+      Module version bumps for patches from Jason Zaman.
+      gpg: Module version bump for patch from Guido Trentalancia.
+      mozilla: Module version bump for patch from Luis Ressel.
+      rkhunter: Fix module version and move lines.
+      Module version bump for patches from cgzones.
+      chkrootkit: Fix module version.
+      Module version bump for patches from cgzones.
+      Bump module versions for release.
+
+Guido Trentalancia (28):
+      cups: read permission for cupsd_var_run_t socket files in
+         cups_stream_connect()
+      cups/lpd: read permission for cupsd_var_run_t socket files
+      thunderbird: allow stream connections to cups so that it can print
+      mozilla: allow stream connections to cups so that it can print
+      java: enable interactive use
+      evolution: add dbus acquire service permission
+      evolution: do not audit kernel read state
+      evolution: add some critical permissions
+      mozilla: read hardware state information
+      mozilla: add a permission
+      wm: load the NetworkManager applet
+      wm: interactive start
+      Gnome and Evolution dbus chat permissions
+      openoffice: support starting it from the window manager
+      evolution: minor fixes and updates
+      java: error messages terminal printout
+      loadkeys: use init fds (system bootup)
+      plymouth: pid interface usability
+      shutdown: send msg to syslog
+      openoffice: open files retrieved using mozilla
+      contrib: new libmtp module
+      openoffice: minor update
+      gnome: improved integration with openoffice
+      cups: let hplip read udev pid files
+      dbus: let session bus daemon manage user runtime dirs
+      zabbix: Grant zabbix_agent_t to call setrlimit on self
+      ntp: fix the drift file context and transition
+      gpg: manage user runtime socket files and directories
+
+Jason Zaman (12):
+      usrmerge: Add missed /usr fcontexts
+      java: update fcontexts for new versions of icedtea
+      dirmngr: add to roles and allow gpg to domtrans
+      gpg dirmngr: create and connect to socket
+      dirmngr: fcontext for ~/.gnupg/crls.d/
+      dirmngr: Network rules to connect to keyserver
+      cgmanager: add policy from gentoo
+      consolekit: Add support for consolekit2
+      consolekit: allow purging tmp
+      consolekit: introduce consolekit_use_inhibit_lock interface
+      dbus: use consolekit inhibit locks
+      networkmanager: use consolekit inhibit locks
+
+Luis Ressel (3):
+      chronyd: Re-align fc file
+      chronyd: Allow init scripts to create /run/chrony
+      mozilla: Add fc for the files used by the firefox addon "vimperator"
+
+Nicolas Iooss (1):
+      Support systems with a single /usr/bin directory
+
+Russell Coker (1):
+      patch for samba
+
+Stephen Smalley (1):
+      contrib: allow map permission where needed
+
+Sven Vermeulen (1):
+      rpc_* interfaces should be wrapped by optional_policy()
+
+cgzones (16):
+      update ntp module
+      update alsa module
+      vnstatd: update module
+      corecmd_read_bin_symlinks(): remove deprecated and redundant calls
+      modutils: adopt calls to new interfaces
+      vnstatd: update
+      dphysswapfile: update
+      monit: update
+      mandb: update
+      logrotate: reload monit after log rotation
+      remove /var/run file context lefovers, add dbus exception
+      monit: add syslog access and support for monit systemd service
+      rkhunter: add policy module
+      arpwatch: align file contexts
+      chkrootkit: add policy module
+      arpwatch: update
+
+* Sat Feb 04 2017 Chris PeBenito <pebenito@ieee.org> - 2.20170204
+Chris PeBenito (41):
+      Module version bump for patches from Jason Zaman.
+      authbind: Remove dead policy.
+      Module version bump for cups patch from Guido Trentalancia.
+      Merge pull request #29 from cgzones/deprecated_macros
+      Module version bump for Debian fprintd fc entry from Laurent Bigonville.
+      Module version bumps for openoffice patches from Guido Trentalancia.
+      Module version bumps for patches from Guido Trentalancia.
+      Merge pull request #30 from cgzones/trailing_whitespaces
+      Module version bumps for mozilla and gpg patches from Luis Ressel.
+      Module version bump for patches from Guido Trentalancia.
+      Module version bump for patches from Guido Trentalancia.
+      rtkit, wm: Remove calls to nonexistant interfaces.
+      Module version bumps for patches from Guido Trentalancia.
+      rtkit: enable dbus chat with xdm
+      Module version bump for patches from Guido Trentalancia.
+      Module version bump for xscreensaver patch from Guido Trentalancia.
+      Merge branch 'run_transition' of
+         git://github.com/cgzones/refpolicy-contrib
+      Module version bumps for /run fc changes from cgzones.
+      Module version bump for openoffice and wm patches from Guido Trentalancia.
+      Module version bump for patches from Guido Trentalancia.
+      Module version bump for wm patch from Guido Trentalancia.
+      Merge branch 'usr-fc' of
+         git://github.com/fishilico/selinux-refpolicy-contrib
+      Module version bump for fc updates from Nicolas Iooss.
+      Module version bump for patches from Guido Trentalancia.
+      Module version bump for capability2 fixes from Guido Trentalancia.
+      Module version bump for plymouth fix from Guido Trentalancia.
+      boinc: Update from Russell Coker.
+      Module version bump for mozilla update from Guido Trentalancia.
+      Merge pull request #47 from cgzones/dphysswap_module
+      Merge pull request #40 from cgzones/fakehwclock_module
+      Merge branch 'gpg_module' of git://github.com/cgzones/refpolicy-contrib
+      Merge branch 'irqbalance_module' of
+         git://github.com/cgzones/refpolicy-contrib
+      Merge branch 'loadkeys_module' of
+         git://github.com/cgzones/refpolicy-contrib
+      Module version bumps for patches from cgzones.
+      Merge branch 'exim_module' of git://github.com/cgzones/refpolicy-contrib
+      Merge branch 'screen_module' of git://github.com/cgzones/refpolicy-contrib
+      Module version bump for screen and exim changes from cgzones.
+      screen: Revert broken interface call.
+      cups: Move hplip_domtrans interface.
+      Module version bump for cups patch from Guido Trentalancia.
+      Bump module versions for release.
+
+Dominick Grift (1):
+      Re-add raid fc spec that must have been removed earlier by mistake
+
+Guido Trentalancia (29):
+      cups: descend "rw" directories when reading configuration files
+      Apache OpenOffice module (contrib policy part)
+      openoffice: rename two interfaces in openoffice and evolution
+      mozilla: extend dbus connection permissions
+      openoffice: permission to read user temporary files
+      xguest: restrict ability to execute files on noxattr filesystems
+      pulseaudio: update server and client permissions
+      mozilla: remove redundant pulseaudio interface calls
+      networkmanager: read user certs not user content (was enable
+         userdom_read_user_certs() throughout the policy)
+      Make several calls to mta interfaces optional
+      wm: update the window manager (wm) module and enable its role template
+         (v7)
+      rtkit: enable dbus chat with xdm
+      networkmanager: enable dbus chat with xdm
+      policykit: enable dbus chat with xdm
+      games: general update and improved pulseaudio integration
+      wm: improved integration with games
+      xscreensaver: update the module so that it can be effectively used
+      wm: properly set domain entrypoint in wm_application_domain()
+      openoffice: add writer support for sending email directly to multiple
+         recipients
+      contrib: use new genhomedircon template for username
+      contrib: extend wm ability to launch confined graphical applications
+      contrib: support the new interface to manage X session logs
+      networkmanager: dbus chat with cups
+      cups: add cups-browsed executable fc
+      devicekit: add new wake_alarm permission (capability2)
+      networkmanager: add new wake_alarm permission (capability2)
+      plymouth: use the correct running domain for the client
+      mozilla: execute evolution to send emails
+      cups: new interface to execute HPLIP applications in their own domain
+
+Jason Zaman (4):
+      pcscd: dbus and domain lookup
+      devicekit: fcontext for udisks2
+      gnome: add gkeyring rules and fcontext
+      gpg: add new socket paths
+
+Laurent Bigonville (1):
+      Add debian path for fprintd daemon
+
+Luis Ressel (3):
+      gpg: Add filetrans for scdaemon socket and gpg-agent extra sockets
+      gpg.fc: Adjust whitespace
+      mozilla: Add miscfiles_dontaudit_setattr_fonts_cache_dirs()
+
+Nicolas Iooss (1):
+      Add file contexts for files in /usr/{lib,sbin}
+
+cgzones (10):
+      use domain_auto_transition_pattern instead of domain_auto_trans
+      remove trailing whitespaces
+      transition file contexts to /run
+      update loadkeys module
+      add fakehwclock module
+      add dphysswapfile module
+      update gpg module
+      update screen module
+      update irqbalance module
+      update exim module
+
+* Sun Oct 23 2016 Chris PeBenito <pebenito@ieee.org> - 2.20161023
+Adam Tkac (2):
+      varnishncsa (varnishlog_t) reads localization files
+      Grant certmonger "chown" capability
+
+Chris PeBenito (42):
+      Merge branch 'bigon-geoclue'
+      Add additional comments in geoclue.
+      Merge branch 'bigon-virt-1'
+      Merge branch 'nm-1' of git://github.com/bigon/refpolicy-contrib into
+         bigon-nm-1
+      Merge branch 'bigon-nm-1'
+      Module version bump for virt and networkmanager patches from Laurent
+         Bigonville.
+      Merge branch 'master' of git://github.com/bigon/refpolicy-contrib
+      Module version bump for firewalld updates from Laurent Bigonville.
+      Module version bump for collectd update from Jason Zaman.
+      Module version bumps for user runtime fixes from Jason Zaman.
+      Boinc updates from Russell Coker.
+      rpcbind: Read /sys/devices/system/cpu/online from Russell Coker.
+      watchdog: Move line.
+      Module version bump for watchdog pidfile option from Russell Coker.
+      Systemd units from Russell Coker.
+      Module version bump for pulseaudio fc fix from Jason Zaman.
+      cpucontrol: revise cpucontrol_conf_t labeling, from Guido Trentalancia.
+      Module version bumps for patches from Guido Trentalancia.
+      Update the telepathy module:
+      Update the alsa module so that the alsa_etc_t file context (previously
+         alsa_etc_rw_t) is widened to the whole alsa share directory, instead of
+         just a couple of files.
+      alsa: Add compatibility alias for alsa_etc_rw_t.
+      Update the sysnetwork module to add some permissions needed by the dhcp
+         client (another separate patch makes changes to the ifconfig part).
+      Module version bump for various patches from Guido Trentalancia.
+      pulseaudio: Fix compile errors.
+      Merge branch 'master' of
+         https://github.com/SeanPlacchetti/refpolicy-contrib
+      Module version bump for webalizer dead type removal from Sean Placchetti.
+      Module version bump for Evolution SSL fix from Guido Trentalancia.
+      evolution: Read user certs from Guido Trentalancia.
+      cups: Move can_exec() line.
+      cups: Module version bump for hplip patch from Guido Trentalancia
+      pulseaudio: Move interface definitions.
+      Module version bump for mozilla patch from Guido Trentalancia.
+      Module version bump for gnome patch from Guido Trentalancia.
+      Module version bump for evolution patch from Guido Trentalancia.
+      gpg: Whitespace fix.
+      Merge branch 'feature/fix-networkmanager-varrun-macro' of
+         https://github.com/rfkrocktk/refpolicy-contrib
+      Module version bump for networkmanager fix from Naftuli Tzvi Kay.
+      Merge branch 'rfkrocktk-feature/syncthing'
+      Rearrange lines in syncthing.
+      webalizer: Rearrange a couple lines.
+      Module version bump for webalizer patch from Russell Coker.
+      Bump module versions for release.
+
+Dominick Grift (18):
+      Module version bump for changes to the geoclue module by Laurent
+         Bigonville.
+      Module version bump for changes to various modules from Laurent
+         Bigonville.
+      geoclue: move kernel interface call to the appropriate position
+      Actually associate mailmain_domain attribute with mailman domains
+      Module version bumps for changes to various modules by Nicolas Iooss
+      Module version bump for changes to the cron module by Jason Zaman
+      Module version bump for changes to the redis module by Grant Ridder
+      Module version bump for changes to the raid module by Laurent Bigonville
+      Module version bump for changes to the networkmanager module by Laurent
+         Bigonville.
+      Module version bump for changes to the redis module by Grant Ridder.
+      Module version bump for changes to the mozilla module by Laurent
+         Bigonville.
+      Module version bump for changes to the geoclue module by Nicolas Iooss.
+      Add hwloc-dump-hwdata SELinux policy
+      Module version bump for changes to the varnishd module by Robert Moucha
+      Module version bump for changes to the puppet module by Thomas Mueller
+      Module version bump for changes to the varnishd module by Adam Tkac
+      Module version bump for changes to the certmonger module by Adam Tkac
+      Revert "dbus: allow system, and session bus clients to answer to dbus
+         unconfined domains"
+
+Grant Ridder (2):
+      Add read/write perms for redis-sentinel
+      Allow tcp_connect to redis_port_t for redis_t
+
+Guido Trentalancia (7):
+      Policykit module: add fs_getattr_xattr_fs()
+      Update the policy for module apm
+      Let gpg disable core dumps
+      Update the rtkit module
+      Update the pulseaudio module for usability and ORC support
+      cups: update permissions for HP printers (load firmware)
+      gpg: public key signature verification in evolution
+
+Guido Trentalancia via refpolicy (3):
+      evolution: read SSL certificates
+      mozilla: let mozilla play audio
+      gnome: add support for the OIL Runtime Compiler (ORC) optimized code
+         execution
+
+Jason Zaman (10):
+      cron: Allow locks to be lnk_files
+      collectd: update policy for 5.5
+      consolekit: allow managing user runtime
+      pulseaudio: fcontext and filetrans for runtime
+      ftp: Add filetrans from user_runtime
+      gnome: Add filetrans from user_runtime
+      mplayer: Add filetrans from user_runtime
+      userhelper: Add filetrans from user_runtime
+      wm: Add filetrans from user_runtime
+      pulseaudio: fix user runtime fcontext
+
+Laurent Bigonville (13):
+      Add initial geoclue 2 module
+      Properly escape dot in the path to the geoclue daemon
+      Use auth_use_nsswitch() as we need DNS resolving and access nsswitch.conf
+      virt.fc: Add some debian contexts
+      networkmanager.fc: nm-dispatcher.action has been renamed to nm-dispatcher
+      Allow some domain to read sysctl_vm_overcommit_t
+      Allow mdadm read efivarfs files
+      Allow /var/run/firewalld/ directory to transition to firewalld_var_run_t
+      Add an interface to allow a domain to read firewalld_var_run_t files
+      Allow firewalld to create firewalld_var_run_t directory.
+      dontaudit firewalld attempt to relabel its own config files
+      Allow NM to execute arping
+      Debian now ships firefox-esr, properly label the executable
+
+Luis Ressel (1):
+      New policy for tboot utilities
+
+Naftuli Tzvi Kay (2):
+      Fix NetworkManager Read Pid Files Macro
+      Syncthing Policy
+
+Nicolas Iooss (3):
+      Describe _initrc_domtrans interfaces differently from the _domtrans ones
+      Fix typos in several interfaces
+      Add Arch Linux path for geoclue module
+
+Robert Moucha (1):
+      Fix trivial typo in varnishncsa name
+
+Russell Coker (2):
+      watchdog reads pid files
+      named reads vm sysctls
+
+Russell Coker via refpolicy (1):
+      webalizer patch for inclusion
+
+Sean Placchetti (1):
+      -Remove unused declarations from webalizer type enforcement file
+
+Thomas Mueller (1):
+      Allow puppet_t transtition to shorewall_t
+
+doverride (3):
+      Merge pull request #8 from bigon/geoclue
+      Merge pull request #11 from bigon/overcommit-1
+      Merge pull request #12 from fishilico/typos
+
+* Tue Dec 08 2015 Chris PeBenito <selinux@tresys.com> - 2.20151208
+Alexander Wetzel (1):
+      add vfio support for libvirt
+
+Chas Williams - CONTRACTOR (1):
+      afs: update labels, file contexts and allow access to urandom
+
+Chris PeBenito (14):
+      Module version bump for hadoop_admin() fix from Jazon Zaman.
+      Module version bump for fc typo in radius from Sven Vermeulen.
+      Module version bump for patches from Jason Zaman.
+      Module version bump for init_startstop_service from Jason Zaman.
+      Module version bump for cron_admin interface from Jason Zaman.
+      Comment/whitespace fix in virt.te.
+      Module version bump for vfio support for libvirt from Alexander Wetzel.
+      Add systemd unit types.
+      Add systemd socket activations.
+      Merge branch 'pebenito-master'
+      Module version bump for systemd additions.
+      Merge branch 'bigon-systemd'
+      Module version bump for dbus systemd patch from Laurent Bigonville.
+      Bump module versions for release.
+
+Dominick Grift (16):
+      Module version bump for courier fixes from Sven Vermeulen.
+      Module version bump for afs fixes from Chas Williams.
+      Redundant rules and afs_files_t is not a filesystem type
+      Various samhain fixes
+      Cachefilesd module updates
+      Module version bump for changes to the dnsmasq policy module by Jason
+         Zaman
+      Module version bump for changes to the snmp policy module by Jason Zaman
+      Module version bump for changes to the pulseaudio policy module by Jason
+         Zaman
+      cachefiles: It is cachefilesd_cache_t
+      Module version bump for update to the networkmanager policy module by
+         Stephen Smalley.
+      Module version bumps for "Remove run interface calls from admin
+         interfaces" changes by Jason Zaman.
+      Module version bump for changes to the pulseaudio module by Niklas Haas.
+      Changes to the git, hadoop and rsync modules by Jason Zaman.
+      Module version bump for changes to the virt module by Jason Zaman
+      Module version bump for changes to the mozilla module from Laurent
+         Bigonville.
+      Module version bump for changes to the wine module by Nicolas Iooss
+
+Jason Zaman (19):
+      hadoop: remove _role from _admin interface
+      rpcbind: typo fix
+      git: make inetd interface optional
+      rpc: introduce allow_gssd_write_tmp boolean
+      rpc: allow setgid capability
+      virt: add virt_tmpfs_t type and permissions
+      introduce virt_leaseshelper_t
+      dnsmasq: allow exec shell for scripts
+      snmp: missing fcontext for snmpd
+      pulseaudio: filetrans for autospawn.lock
+      Use init_startstop_service in admin interfaces A-M
+      Use init_startstop_service in admin interfaces N-Z
+      Remove _run() interfaces from _admin()
+      Introduce cron_admin interface
+      rsync: remove rsync_run from admin interface
+      git: allow git_system_t to listen on tcp_sockets
+      hadoop: init_startstop_service() can not take attributes
+      virt: Allow creating qemu guest agent socket
+      virt: Add policy for virtlockd the Virtual machine lock manager
+
+Laurent Bigonville (2):
+      Transition D-Bus system service out of the init_t domain when PID1 is
+         systemd
+      Label iceweasel plugin-container executable as mozilla_plugin_exec_t
+
+Nicolas Iooss (1):
+      wine: remove use of nonexisting interface
+
+Niklas Haas (1):
+      pulse: don't give pulseaudio_client full access to user_home_t
+
+Stephen Smalley (1):
+      contrib: networkmanager: allow netlink_generic_socket access
+
+Sven Vermeulen (6):
+      Locate authdaemon socket and communicate with authdaemon
+      Allow authdaemon to access selinux fs to check SELinux state
+      Grant setuid/setgid to courier_pop_t
+      Execute courier helper script after authentication
+      Courier IMAP needs to manage the users' maildir
+      Fix typo for radiusd /var/lib location
+
+doverride (2):
+      Merge pull request #3 from haasn/pulse-nohome
+      Merge pull request #6 from bigon/mozilla-1
+
+* Wed Dec 03 2014 Chris PeBenito <selinux@tresys.com> - 2.20141203
+Chris PeBenito (26):
+      Whitespace fix in ntp.fc.
+      Module version bump for ntp fc entries from Laurent Bigonville.
+      Whitespace fix in shibboleth.te.
+      Module version bump for new shibboleth module from Martin Lang.
+      Module version bump for apt fix from Nicolas Iooss.
+      Module version bump for dnsmasq MTU fix from Sven Vermeulen.
+      Module version bump for apache content interfaces from Sven Vermeulen.
+      Module version bump for gitweb fc entry on Debian and ArchLinux from
+         Nicolas Iooss.
+      Module version bump for fc regex fixes from Nicolas Iooss.
+      Module version bump for various fixes from Laurent Bigonville.
+      Module version bump for ModemManager fc entry from Laurent Bigonville.
+      Add missing cron_admin_role() dependency.
+      Move sock_file filetrans to fcron_crond conditional.
+      Module version bump for cron and snort updates from Sven Vermeulen.
+      Module version bump for java icedtea fc entries from Sven Vermeulen.
+      Module version bump for apache/mlogc patch from Elia Pinto.
+      Remove name from ntp-kod ntp_drift_t filetrans.
+      Module version bump for ntp-kod file support from Jason Zaman.
+      Module version bump for init_daemon_pid_file use from Sven Vermeulen.
+      Module version bump for alsa and hiawatha fixes from Sven Vermeulen.
+      Module version bump for ftp and tftp fixes from Nicolas Iooss.
+      Move irc exec lines.
+      Module version bump for irc re-exec itself patch from Luis Ressel.
+      Module version bump for NetworkManager fc fix for ArchLinux from Nicolas
+         Iooss.
+      Module version bump for _admin fixes from Jason Zaman.
+      Bump module versions for release.
+
+Dominick Grift (3):
+      Module version bump for changes to the loadkeys module by Nicolas Iooss
+      cron: that boolean identifier does not exist         also require it
+      Module version bump for changes to the networkmanager modules by Lubomir
+         Rintel
+
+Elia Pinto (1):
+      apache.te: Add labelling support for /var/log/mlogc
+
+Jason Zaman (20):
+      Add filetrans for ntp-kod file
+      ccs: syntax errors in ccs_admin interface
+      condor: syntax error in condor_admin
+      distcc: syntax error in distcc_admin
+      ftp: syntax error in ftp_admin
+      kerberos: syntax error in kerberos_admin
+      kismet: syntax error in kismet_admin
+      nut: syntax error in nut_admin
+      prelude: syntax error in prelude_admin
+      psad: syntax error in psad_admin
+      quota: syntax error in quota_admin
+      rpcbind: syntax error in rpcbind_admin
+      rpm: syntax error in rpm_admin
+      systemtap: syntax error in stapserver_admin
+      svnserve: syntax error in svnserve_admin
+      uptime: syntax error in uptime_admin
+      zabbix: syntax error in zabbix_admin
+      remove pyzor_role() from pyzor_admin()
+      remove spamassassin_role() from spamassassin_admin()
+      rsync: syntax error in rsync_admin
+
+Laurent Bigonville (7):
+      Add several fcontext for debian specific paths for ntp
+      Fix dbus_all_session_domain(), session_bus_type is an attribute
+      Allow gconfd to be started by the session bus
+      Fix the usage of dbus_spec_session_domain() interface
+      Properly label exim4 initscript under Debian
+      Add new gnome_spec_domtrans_all_gkeyringd() interface
+      Label /usr/sbin/ModemManager as modemmanager_exec_t
+
+Lubomir Rintel (1):
+      Allow NetworkManager to create Bluetooth SDP sockets
+
+Luis Ressel (1):
+      irc.te: Allow irssi to re-execute itself
+
+Martin Lang (1):
+      Add a policy module for shibboleth authentication
+
+Nicolas Iooss (7):
+      apt: remove non-existing permission set write_dir_perms
+      Label /usr/share/gitweb/static as httpd_git_content_t
+      Fix strange file patterns
+      ftp: fix labels in /var/lock/subsys/
+      Label /usr/bin/tftpd as tftpd_exec_t
+      Label /usr/lib/networkmanager/ like /usr/lib/NetworkManager/
+      Allow loadkeys to read usr_t files
+
+Sven Vermeulen (17):
+      dnsmasq reads MTU sysctl
+      Support read/append/manage functions for various httpd content
+      Snort policy updates
+      fcron socket support
+      Fix typo in dnsmasq.if
+      Mark icedtea binaries as java_exec_t
+      Use init_daemon_pid_file for contrib modules
+      Enable asound.state.lock support
+      Add support for Hiawatha web server
+      Use logging_search_logs, not logging_search_log
+      Use logging_search_logs, not logging_search_log
+      Use files_search_etc, not logging_search_etc
+      Use files_search_etc, not logging_search_etc
+      Use files_search_etc, not files_search_config
+      Use corecmd_search_bin, not corecmd_searh_bin
+      Use fs_search_tmpfs, not files_search_tmpfs
+      Use domain_auto_trans, not auto_trans
+
+* Tue Mar 11 2014 Chris PeBenito <selinux@tresys.com> - 2.20140311
+Chris PeBenito (17):
+      Minor rearrangement of minidlna lines.
+      Module version bump for openvpn tmp files from Sven Vermeulen.
+      Update modules for file_t merge into unlabeled_t.
+      Module version bump for postfix showq fc from Laurent Bigonville.
+      Rename gpg_agent_connect to gpg_stream_connect_agent.
+      Module version bump for gpg agent interface from Luis Ressel.
+      Whitespace fixes in git.fc.
+      Module version bump for debian git fc entries from Laurent Bigonville.
+      Move bin_t fc to corecommands.
+      Move exec/transition lines in couchdb.
+      Add comment about couchdb_js policy.
+      Module version bump for couchdb updates from Luis Ressel.
+      Module version bump for pcscd fix from Luis Ressel.
+      Move screen dontaudit rule.
+      Module version bump for screen fix from Luis Ressel.
+      Module version bump for git fc fix from Nicolas Iooss.
+      Bump module versions for release.
+
+Dan Walsh (28):
+      Allow irc_t to use tcp sockets
+      Add labels for apache logs under miq package
+      Allow smbcontrol to create content in /var/lib/samba
+      Allow ktalkd to bind to the ktalkd_port
+      Allow memcache to read sysfs data
+      Allow mdadm to getattr any file system
+      Allow cupsd_lpd_t to bind to the printer port
+      Allow rlogind to bind to the rlogin_port
+      Allow cvs to bind to the cvs_port
+      svirt domains neeed to create kobject_uevint_sockets
+      Lots of new access required for sosreport
+      Allow tgtd_t to connect to isns ports
+      openct needs to be able to create netlink_object_uevent_sockets
+      Allow glusterd to create sock_file in /run
+      Add support for tmp directories to openvswitch
+      Allow virt_domain with USB devices to look at dos file systems
+      Additional access for MLS
+      Additional access for MLS window manager
+      Additional access for MLS window manager
+      Additional access for MLS window manager
+      Allow rpcbind to use nsswitch
+      Allow gpg_agent to use ssh-add
+      Add apache labeling for glpi
+      Allow pegasus to transition to dmidecode
+      Allow mcelog to use the /dev/cpu device
+      Allow apmd to request the kernel load modules
+      Allow postfix programs to getattr on all executables
+      label mate-keyring-daemon with gkeyringd_exec_t
+
+Dominick Grift (126):
+      Typo fix in ksmtuned_admin() by Shintaro Fujiwara
+      Fix monolithic built
+      Change file context spec for aide log files to catch suffixes
+      Module version bumps for changes in various policy modules by Sven    
+         Vermeulen
+      Squid: Use a single pattern for brevity
+      Irc was already allowed to create tcp sockets, it only needed an    
+         additional accept, and listen to be able to act as a proxy
+      Its probably a better idea to use the httpd_sys_ra_content_t type sid    
+         for logs in these locations
+      Module version bump for changes to the tcsd policy module by Lukas    
+         Vrabec
+      Module version bump for changes to various policy modules by Miroslav    
+         Grepl
+      Module version bump for changes to the samba policy module by Dan Walsh
+      Module version bump for changes to the telepathy policy module by    
+         Miroslav Grepl
+      We do not have a boinc domain type attribute     Change boolean
+         description a bit
+      Additional rabbitmq couchdb support
+      Module version bumps for changes to various policy modules by Miroslav    
+         Grepl
+      Additional git tcp networking rules
+      Additional ktalkd udp networking rules
+      Module version bump for changes to various policy modules by Dan Walsh
+      Addtional cups ldp tcp networking rules
+      Should be server packets because it is binding, and not connecting
+      Clean up telnet, and rlogin networking rules
+      Additional cvs tcp networking rules
+      Module version bump for changes to various policy modules by Dan     Walsh
+      Addtional tgtd tcp networking rules
+      Additional polipo tcp networking rules
+      Fix asterisk files_spool_filetrans()
+      Module version bump for changes to the networkmanager policy module by    
+         Lukas Vrabec
+      Additional fs_tmpfs_filetrans() for munin service plugin content on    
+         tmpfs
+      Module version bump for changes to various policy modules by Miroslav    
+         Grepl
+      Support rlogind, and telnetd as init daemon domains ( i think fedora is   
+          campaigning to get rid of (x)?inetd )
+      Support mariadb logging, file context specification for mariadb specific  
+           config location
+      Change logwatch boolean identifier to something more self-documenting.    
+         Additional tcp networking rules
+      Module version bump for changes to various policy modules by Miroslav    
+         Grepl
+      Fix inconsistencies in the pkcs policy module
+      Fix fetchmail inconsistencies
+      Module version bump for changes in various policy modules by Dan Walsh
+      Support for window managers to stream socket connect to pulseaudio
+      Logwatch does not need to be able to bind tcp sockets to generic nodes    
+         since its only connecting
+      Adds userhelper_exec_consolehelper for window managers
+      Remove duplicate rules due to addition of auth_use_nsswitch()
+      We dont use the arbt domain types template.     Use a more uniform boolean
+         discription
+      Clean up libstoragemngmt policy module     We do not yet support systemd
+      Change type from etc_rw to conf for readability     admin access to
+         condor_conf_t
+      Hit by a nasty optional policy nesting issue
+      We will find another way to run pa as a system server
+      Module version bump for changes to various policy modules by Miroslav    
+         Grepl
+      Clean up hypervkvp policy module (seems incomplete)
+      Clean up initial redis policy module
+      Additional openvpn tcp networking rules
+      redis: allow redis to bind tcp sockets to redis_port_t type ports
+      bluetooth: bluetooth_t acquires org.bluez service on dbus system bus
+      wm: associate wm_exec_t to core command executable files so that initrc_t
+         (/sbin/start-stop-daemon) can access it (metacity)
+      logrotate restarts syslogd via init script in Debian
+      This file is called just man-db in Debian.
+      exim: exim owns directory /var/lib/exim4
+      accountsd: accounts-daemon lists /var/log
+      alsa: alsactl listing /dev/shm alsa: alsactl reading /dev/urandom alsa:
+         alsactl getting attributes of devtmpfs / (/dev) alsa: alsactl maintains
+         a pulseaudio tmpfs file
+      Cron: /sbin/runlevel reads /run/utmp cron: anacron (system_cronjob_t)
+         reading, writing inherited random crond tmp files (/tmp/tmpfk1VT2O)
+      dbus: allow system, and session bus clients to answer to dbus unconfined
+         domains
+      apt: Run apt system cronjobs in the apt_t domain apt: apt system cronjob
+         creates dpkg.status.* files in /var/backup
+      devicekit: upowerd reads own unix stream socket devicekit:
+         devicekit_power_t (runlevel) read /run/utmp
+      mandb: Make the man-db cronjob work on Debian
+      rtkit: traverse /proc to get to process state files
+      networkmanager: NetworkManager reads /run/udev/data/n2 file
+      avahi: create a avahi_initrc_domtrans for udev_t: udev runs a avahi dns
+         check script which does, i guess, a dns check. If needed it starts, or
+         stops avahi via its init script. I also created a
+         avahi_manage_pid_files() for udev_t because the script manages a file
+         called "checked_nameservers.*" in /run/avahi-daemon
+      Cleanups of various modules with regard to regular expressions and white  
+           space
+      apt: As it turns out the /var/backups directory is labeled in the backup  
+           module (which i incidentally did not have installed earlier). Instead
+         of     creating this file with a file type transition to
+         apt_var_cache_t, allow     apt_t to manage backup_store files
+      mta: this needs to be verified again, it should just have been running    
+         in exim_t. I might have taken this from old logs
+      mandb: /etc/cron.daily/man-db executes dpkg, reads dpkg db on Debian
+      slocate: catch /usr/bin/updatedb.mlocate, and /etc/cron.daily/mlocate on  
+           Debian
+      dpkg: catch /etc/cron.daily/dpkg on Debian     dpkg: allow
+         /etc/cron.daily/dpkg to manage backup store files on Debian
+      cron: consistent usage of regular expressions     cron: prelink no longer
+         runs in the system cronjob domain
+      alsa: alsactl wants to associate pulse-shm-.* to device_t type    
+         filesystems. This happens early on but i do not understand how that    
+         (/dev) relates to /dev/shm in this regard
+      devicekit: reads udev pid files     modemmanager: reads udev pid files
+      vdagent: spice-vdagentd uses /dev/vport1p1 virtio console
+      tmpreaper: mountall-bootcl in the tmpreaper_t domain reads, writes    
+         /dev/pts/0 inherited from init script
+      revert regular expressions
+      wm: allow $1_wm_t to stream connect to $1_gkeyringd_t
+      mta: allow system_mail_t (user_mail_domains) to read kernel sysctls and   
+          to read exim var lib files.
+      mta: These are duplicates because system_mail_t is a user_mail_domain,    
+         as it is based off of the mta_base_mail_template() which assigns that  
+           type attribute
+      locate: extra rules needed by debian /etc/cron.daily/locate script
+      backup: in Debian /etc/cron.daily/passwd backs-up shadow, passwd etc to   
+          /var/backups
+      avahi: create interfaces that will allow calles to create avahi pid dirs  
+           and create specifc avahi pid objects with a type transition (for
+         udev,     which runs: /usr/lib/avahi/avahi-daemon-check-dns.sh in
+         Debian
+      Initial gdomap policy module
+      Initial minissdpd policy module
+      alsa: due to a bug in gnome 3.4, in debian, alsactl does all kinds of    
+         weird things related to pulseaudio
+      various: revert regex fixes: fcsort does not want this now
+      gdomap: gdomap_port_t is now available, gdomap binds tcp, and udp socket
+         to it
+      alsa: make alsa_t and pulseaudio_client so that pulseaudio_client rules
+         apply to it. alsactl does not actually run pulseaudio it seems though.
+      pulseaudio: allow all pulseaudio_client to send null signals to
+         unconfined_t, since unconfined_t is not actually a pulseaudio_client (
+         unconfined_t runs pulseaudio without a domain transition)
+      avahi: create avahi_setattr_pid_dirs() for udev (avahi dns check script
+         run by udev in Debian)
+      These { read write } tty_device_t chr files on boot up in Debian
+      colord: colord executable file locations in Debian
+      colord: reads /proc/1, reads /run/udev files
+      vdagent: read/write mtrr file
+      mandb: dpkg running in the mandb_t domain in Debian (mandb cronjob)
+         traverses /root
+      exim: traverses sysfs, uses system cronjob file descriptors (/dev/null) in
+         Debian (/etc/cron.daily/exim)
+      minissdpd fixes
+      devicekit: disk reads /proc/sys/vm/overcommit_memory
+      devicekit: edit devicekit_append_inherited_log_files to include get
+         attribute permission so that it can be also used for fsadm
+      devicekit: 95hdparm-apm (devicekit_power_t) gets attributes of /dev/sda
+         (fixed_disk_device_t)
+      networkmanager: added interfaces that fedora calls for dhcpc. In Debian it
+         was confirmed that at least dhclient manages
+         /var/lib/NetworkManager/dhclient-eth0.conf
+      firewalld: various fixes that i borrowed from Fedora but that also apply
+         to Debian (confirmed)
+      firewalld: interfaces created for iptables
+      irqbalance: getsched from Debian
+      colord: colord reads /proc/3412/cmdline (cupsd state files)
+      virt: libvirtd reads /run/udev/data/+input:input3
+      firewalld: traverses / on sysfs
+      rngd: needs ipc_lock capability, maintains /run/rngd.pid
+      tmpreaper: mountall-bootcl executes /bin/plymouth on Debian
+      minissdpd: deal with assertion violation (sys_module)
+      gdomap: missing networking rules, it traverses /tmp for some reason
+      ntp: create ntp_read_drift_files() for dhclient
+      dpkg: allow dpkg, and dpkg script to domain transition to initrc_t on any
+         init script file type rather than only the generic initrc_exec_t init
+         script file type
+      exim: exim4 reads online
+      apt: apt runs /usr/bin/apt-get apt: on_ac_power (apt_t) lists
+         /sys/class/power_supply
+      exim: exim_manage_var_lib_files created for init: init script runs helper
+         apps that create/manage /var/lib/exim4/config.autogenerated.tmp
+      gdomap/minissdpd: create read_config interfaces for initrc_t
+      exim: make exim init script create /var/run/exim4 with a proper context
+      pulseaudio: pulsaudio_t needs to be able to read user_tmpfs_files
+         (/run/shm/pulse-shm-.*)
+      dnsmasq: add support for /etc/dnsmasq.d/
+      Module version bumps for various policy modules
+      Module version bump for changes to the logrotate module by Luis Ressel
+      Git: git daemons can list and read git personal repositories
+      Module version bumps for changes to various policy modules by Fedora
+      redis, lsm: typo fixes
+      userhelper: append newline
+
+James Carter (8):
+      - Fixed typo in contrib/avahi.if
+      - Fixed typo in contrib/glusterfs.te
+      - Fixed typo in contrib/jabber.if
+      - Fixed typo in contrib/keystone.if
+      - Fixed typo in contrib/mailscanner.if
+      - Fixed typo in contrib/qpid.if
+      - Fixed typo in contrib/readahead.fc.
+      - Fixed typo in contrib/rpm.if.
+
+Laurent Bigonville (2):
+      Label /usr/lib/postfix/showq as postfix_showq_exec_t
+      Properly label git-daemon and gitweb.cgi on Debian
+
+Luis Ressel (10):
+      Allow initrc_t to create /var/run/opendkim
+      Label /etc/cron.daily/logrotate correctly.
+      gpg: Create gpg_agent_connect interface
+      Minor updates to couchdb policy
+      couchdb: Add separate domain for couchjs
+      couchdb: Dontaudit denials caused by Erlang's disksup
+      Reformat couchdb.fc
+      pcscd.if: Permit access to pid files inside /var/run/pcscd/.
+      Allow gpg-agent's scdaemon to connect to pcscd.
+      Dontaudit screen asking for the sys_tty_config capability
+
+Lukas Vrabec (8):
+      Allow tcsd to read utmp file
+      fix boinc policy
+      Add support for couchdb in rabbitmq policy
+      Fix transition rules in asterisk policy
+      Add fowner capability to networkmanager policy
+      Add policy for lsmd
+      Add policy for hypervkvpd
+      Add policy for redis-server
+
+Mika Pflüger (1):
+      Correct typo in passenger module name
+
+Miroslav Grepl (40):
+      Allow passenger to execute ifconfig
+      Allow mpd setcap which is needed by pulseaudio
+      Allow block_suspend cap for samba-net
+      Allow t-mission-control to manage gabble cache files
+      Allow nslcd to read /sys/devices/system/cpu
+      Add labeling for ~/.cache/telepathy/avatars/gabble
+      Allow firewalld to read NM state
+      Allow systemd running as git_systemd to bind git port
+      Fix labeling for fetchmail pid files/dirs
+      Fix polipo.te
+      Fix cupsd.te
+      Allow munin service plugins to manage own tmpfs files/dirs
+      Make ktalk as init domain
+      Allow mysqld_safe_t to handle also symlinks in /var/log/mariadb
+      Add logwatch_can_sendmail boolean
+      Allow rhsmcertd to read init state
+      Allow fsetid for pkcsslotd
+      Allow fetchmail to create own pid with correct labeling
+      Fix rhcs_domain_template()
+      Add support for abrt-upload-watch
+      Allow virtd to relabel unix stream socket
+      Fix lsm.fc for pid files
+      Also sock_file trans rule is needed in lsm
+      Update condor_master rules to allow read system state info and allow
+         logging
+      Add labeling for /etc/condor and allow condor domain to write it (bug)
+      Allow condor domains to manage own logs
+      Allow glusterd to read domains state
+      Add openvpn_can_network_connect() boolean
+      Fix minissdpd_admin()
+      Allow ctdb to getattr on al filesystems
+      Watchdog opens the raw socket
+      Allow watchdog to read network state info
+      Add setroubleshoot_signull() interface
+      Allow sosreport to send signull to setroubleshootd
+      Allow sosreport all signal perms
+      Allow sosreport to dbus chat with rpm
+      Allow zabbix_agentd to read all domain state
+      Allow smoltclient to execute ldconfig
+      Allow sosreport to request the kernel to load a module
+      Allow setpgid for sosreport
+
+Nicolas Iooss (1):
+      git: fix file pattern after whitespace fixes
+
+Sven Vermeulen (6):
+      Add minidlna policy
+      Allow openvpn temporary files
+      Add aide bin /usr/bin and mark /var/lib/aide
+      Provide alsa_write_lib interface
+      Run dmidecode after newrole or on terminals
+      Grant write privileges to squid on its log files
+
+* Wed Apr 24 2013 Chris PeBenito <selinux@tresys.com> - 2.20130424
+Chris PeBenito (18):
+      Rewrite of mcelog module from Guido Trentalancia
+      Remove unnecessary lines in mcelog.te.
+      Slight rearrangement in mcelog.te.
+      Module version bump for mcelog update from Guido Trentalancia.
+      Module version bump for ntp module fixes from Dominick Grift.
+      Module version bump for fc substitutions optimizations from Sven
+         Vermeulen.
+      Module version bump for postfix/mta misc fixes from Sven Vermeulen.
+      Module version bump for init_daemon_run_dirs usage from Sven Vermeulen.
+      Turn off all tunables by default, from Guido Trentalancia.
+      Module version bump for tunable default change.
+      Module version bump for saslauthd tcp mysql connections from Mika Flueger.
+      Move kernel request line in quota.
+      Module version bump for quota kernel module request from Mika Pflueger.
+      Module version bump for djbdns ports fixes from Russell Coker.
+      Remove stray + in keystone.te.
+      Whitespace fixes in cron.fc.
+      Module version bump for pulseaudio type_transition conflict fix from Sven
+         Vermeulen.
+      Bump module versions for release.
+
+Dominick Grift (889):
+      Initial BIRD Internet Routing Daemon policy
+      oident daemon fixes
+      Introduce ntp_conf_t
+      Allow ntp_admin() to manage ntp_drift_t content.
+      List etc_t directories
+      Use "Role allowed access." for consistency
+      Use permissions sets for compatibility.
+      Remove getattr permision from ntp_admin()
+      Initial Sensord policy module
+      Various block_suspend capability2 support from Fedora
+      Gitolite3 support from Fedora
+      /var/lib/sqlgrey is greylist milter data from Fedora
+      Terminal related fixes for plymouthd from Fedora     Support block_suspend
+         capability2 for plymouth
+      Support minimal polkit in new location
+      Support ldap for user authentication from Fedora
+      Sanlock sends kill signals to non-root processes from Fedora     Various
+         other capabilities for sanlock from Fedora
+      Initial support for sqlgrey from Fedora
+      Tor reads network sysctls from Fedora
+      GPG agent reads /dev/random from Fedora
+      Freshclam reads system and network state from Fedora
+      Execute wpa_cli in the NetworkManager_t domain for wicd from Fedora
+      lpstat.cups reads fips_enabled from Fedora
+      Initial system tap compile server policy module
+      Systemtap server admin manages stapserver_var_lib_t content
+      Telepathy Idle reads gschemas.compiled from Fedora
+      Initial slpd policy module
+      Initial lightsquid policy module
+      Initial wdmd policy module
+      Initial mailscanner policy module and some depencies.
+      Support slpd log rotation
+      Initial numad policy module
+      Open log files for append only
+      CGClear reads CGConfig files from Fedora     Cosmetic changes to cgroup
+         policy module     File contexts of cgroup app executables files in
+         /sbin also apply to     /usr/sbin     Make cgroup_admin() a bit more
+         compact
+      Initial svnserve policy module
+      Various small changes to ucspitcp
+      Initial fcoe policy module
+      Initial lldpad policy module
+      fcoemon sends to lldpad with a dgram socket
+      Initial quantum policy module
+      Initial dspam policy module
+      Module version bump for Telepathy file context spec fixes from Laurent    
+         Bigonville.
+      Initial isns policy module
+      Various changes to tcs policy module
+      Initial ctdb policy module
+      Various changes to the sblim policy module and its dependencies
+      Initial polipo policy module
+      Module version bump for networkmanager fixes
+      Fixes to the polipo policy module
+      Module version bump for smartmon fixes from Laurent Bigonville.
+      Module version bump for accountsd file context spec fix from     Laurent
+         Bigonville.
+      Various changes to the raid module
+      Module version bump for rtkit file context spec fix from     Laurent
+         Bigonville
+      Initial couchdb policy module
+      Changes to the bind policy module
+      Initial dnssectrigger policy module
+      Initial man2html policy module
+      Initial openhpi policy module
+      Bind sends/receives http server instead of client packets conditionally
+      Two file context regular expression fixes by Eric Paris
+      Type mdadm_t is no longer a unconfined type
+      Initial pkcs policy module
+      Initial cfengine policy module
+      Initial keystone policy module
+      Initial l2tp policy module
+      Initial mongodb policy module
+      cfengine whitespace cleanup
+      Changes to the accountsservice policy module
+      Changes to the acct policy module
+      Changes to the ada policy module
+      changes to the afs policy module
+      Changes to the accountsservice policy module
+      Changes to the aiccu policy module
+      Changes to the aide policy module
+      Syntax error in afs_admin()
+      Changes to the aisexec policy module
+      Changes to the alsa policy module
+      Changes to the amanda policy module
+      Changes to the amavisd policy module and relevant dependencies
+      Changes to the amtu policy module
+      Changes to the anaconda policy module
+      Changes to the abrt policy module and relevant dependencies
+      numad sends/receives msgs from Fedora
+      Amtu executable file in installed in /usr/sbin in Fedora
+      The (usr/)? expression does not work consistently so better not use it    
+         at all
+      Changes to the httpd policy module
+      Merge branch 'master' of
+         ssh://dgrift@oss.tresys.com/home/git/refpolicy-contrib
+      Fixes to the apache policy module and dependencies
+      Changes to the apcupsd policy module
+      Role attributes for lightsquid application domain
+      Changes to the mailscanner module
+      Changes to the svnserve policy module
+      Changes to the quantum policy module
+      Changes to the dspam module
+      Changes to the ctdb policy module
+      Changes to the couchdb policy module
+      Changes to the openhpid policy module
+      Changes to the keystone policy module
+      Changes to the l2tp policy module
+      Changes to the apm module and relevant dependencies
+      Changes to the arpwatch policy module
+      Changes to the apcupsd policy module
+      Changes to the abrt policy module
+      Changes to the apache policy module
+      Changes to the asterisk policy module and dependencies
+      Changes to the authbind policy module
+      Changes to the automount policy module
+      Change acpid lock file context spec
+      Changes to the avahi policy module and dependencies
+      Changes to the awstats policy module
+      Changes to the bacula policy module
+      Changes to the bcfg2 policy module
+      Changes to the apt policy module
+      Changes to the apache policy module
+      Changes to the backup module
+      Changes to the bind policy module
+      Bird module clean up
+      Fix arpwatch connected_stream_socket_perms
+      Changes to the bitlbee policy module
+      Changes to the blueman policy module
+      Changes to the bluetooth policy module
+      Changes to the brctl policy module
+      Changes to the apache policy module
+      Changes to the bugzilla policy module
+      Changes to the calamaris policy module
+      Implement lightsquid_admin()
+      Changes to the apache policy module and dependencies
+      Initial boinc policy module
+      Initial callweaver policy module
+      Changes to the canna policy module
+      Changes to the ccs policy module
+      Changes to the cdrecord policy module
+      Changes to the certmaster policy module and various role attribute fixes
+      cdrecord needs to read and write callers unix domain stream socket not    
+         create it
+      Changes to the certmonger policy module and its dependencies
+      Initial cachefilesd policy module
+      Changes to the certwatch policy module
+      Changes to the chronyd policy module
+      Changes to the cipe policy module
+      Changes to the clamav policy module
+      Various network clean up
+      Add dev_rw_cachefiles() to cachefilesd policy module
+      Changes to the clockspeed policy module
+      Changes to the clogd policy module
+      Changes to the cmirrord policy module
+      Changes to the cobbler policy module
+      Changes to the colord policy module
+      Changes to the comsat policy module
+      Initial collectd policy module
+      Initial condor policy module and relevant dependencies
+      Changes to the consolekit policy module and relevant dependencies
+      Changes to the corosync policy module and relevant dependencies
+      Clean up couchdb network rules
+      Changes to the courier policy module
+      Changes to the cpucontrol policy module
+      Changes to the cpufreqselector policy module
+      Changes to the cron policy module and relevant dependencies
+      Changes to the cups policy module and relevant dependencies
+      Changes to the cvs policy module
+      Remove redundant connect avperms
+      Changes to the cyphesis policy module
+      Remove redundant rules from apache_admin()
+      Changes to the cyrus policy module
+      Changes to the daemontools policy module
+      Changes to the dante policy module
+      Modify dbadm boolean descriptions
+      Changes to the dbus policy module and its dependencies
+      Changes to the dcc policy module
+      Changes to the ddclient policy module
+      Changes to the ddcprobe policy module
+      Changes to the denyhosts policy module
+      Changes to the devicekit policy module and relevant dependencies
+      Changes to the dhcpd policy module
+      Changes tothe dictd policy module
+      Changes to the discc policy module
+      Changes to the djbdns policy module
+      Changes to the dkim policy module
+      Changes to the dmidecode policy module
+      Module bump for Laurent Bigonville trousers init script file context    
+         specification fix
+      Module bump for Laurent Bigonville libvirt init script file context    
+         specification fix
+      Changes to the dnsmasq policy module and relevant dependencies
+      Changes to the dovecot policy module
+      Changes to the dpkg policy module
+      Changes to the entropyd policy module
+      Changes to the evolution policy module
+      Changes to the exim policy module and relevant dependencies
+      Changes to the cron policy module
+      Changes to the fail2ban policy module
+      fcoemon XML clean up
+      Changes to the fetchmail policy module
+      Changes to the fingerd policy module
+      Initial firewalld policy module
+      Changes to the firstboot policy module
+      Changes to the fprint policy module and relevant dependencies
+      Changes to the ftp module
+      Changes to the games policy module
+      Clean up evolution and cdrecord XML
+      Changes to the gatekeeper policy module
+      Changes to the gift policy module
+      Changes to the git policy module
+      Changes to the gitosis policy module
+      Changes to the glance policy module
+      Initial glusterfs policy module
+      Add gatekeeper newline
+      Deprecate glusterd_admin() use glusterfs_admin() instead
+      Portage module version bump for autofs support by Matthew Thode and    
+         clean up
+      cfengine: This location is now labeled with a cfengine private type
+      Changes to the slpd policy module
+      Changes to the gnomeclock policy module and relevant dependencies
+      Changes to the gpg policy module
+      Changes to the gpm policy module
+      Changes to the gpsd policy module and relevant dependencies
+      changes to the guest policy module
+      Changes to the gnomeclock policy module
+      Deprecate various DBUS interfaces and relevant dependencies
+      Changes to the cachefilesd policy module
+      Remove file context specification for kgpg which is a GUI frontend to    
+         GPG. Domain transition to gpg_t will happen when kgpg runs gpg.    
+         (rhbz#862229)
+      Initial mandb policy module
+      Changes to the hadoop policy module
+      Changes to the hald policy module
+      Changes to the hddtemp policy module
+      Changes to the howl policy module
+      changes to the mandb policy module
+      Changes to the dbus policy module
+      Changes to the rpm policy module
+      Changes to the i18n_input policy module
+      Changes to the icecast policy module
+      Changes to the ifplugd policy module
+      Changes to the imaze policy module
+      Changes to the inetd policy module and relevant dependencies
+      Changes to the innd policy module
+      Changes to the irc policy module
+      Changes to the ircd policy module
+      Changes to the irc policy module
+      Changes to the dbus policy module
+      Changes to the avahi policy module
+      Changes to the bluetooth policy module
+      Changes to the aiccu policy module
+      Changes to the bacula policy module
+      Changes to the boinc policy module
+      Changes to the bugzilla policy module
+      Changes to the ccs policy module
+      Changes to the clamav policy module
+      Changes to the cobbler policy module
+      Changes to the cyphesis policy module
+      Changes to the dante policy module
+      Changes to the dbskk policy module
+      Changes to the ddclient policy module
+      Changes to the denyhosts policy module
+      Changes to the dnssectrigger policy module
+      Changes to the dovecot policy module
+      Changes to the drbd policy module
+      Changes to the evolution policy module
+      Changes to the fail2ban policy module
+      Changes to the firewalld policy module
+      Changes to the firstboot policy module
+      Changes to the games policy module
+      Changes to the gift policy module
+      Changes to the glance policy module
+      Changes to the hald policy module
+      Changes to the dbus policy module
+      Changes to the git policy module
+      Changes to the polipo policy module
+      Changes to the firewalld policy module
+      Changes to the gpg policy module
+      Tab clean up in ircbalance file context file
+      Changes to the irqbalance policy module
+      Tab clean up in iscsi file context file
+      Changes to the iscsi policy module
+      Tab clean up in jabber file context file
+      Changes to the jabberd policy module
+      Changes to the pyicqt policy module
+      Tab clean up in java file context file
+      Changes to the java policy module
+      Changes to the dbus policy module
+      Changes to the gnome policy module
+      Changes to the apache policy module
+      Changes to the accountsd policy module
+      Changes to the alsa policy module
+      Changes to the evolution policy module
+      Changes to the bluetooth policy module
+      Changes to the games policy module
+      Changes to the gift policy module
+      Changes to the gpg policy module
+      Changes to the hadoop policy module
+      Tab clean up in kdump file context file
+      Changes to the kdump policy module
+      Changes to the gpg policy module
+      Changes to the dbus policy module
+      Changes to the evolution policy module
+      Changes to the gpm policy module
+      Version bump for evolution file context fixes by Laurent Bigonville
+      Version bump for nut file context fixes by Laurent Bigonville
+      Changes to the kdumpgui policy module
+      Tab clean up in kerberos file context file
+      Changes to the kerberos policy module and relevant dependencies
+      Changes to the kerneloops policy module
+      Tab clean up in kerberos file context file
+      Changes to the kismet policy module
+      Clean up amavis XML header
+      Initial keyboardd policy module
+      Tab clean up in ksmtuned file context file
+      Changes to the ksmtuned policy module
+      Tab clean up in ktalk file context file
+      Changes to the ktalk policy module
+      Changes to the kudzu policy module
+      Initial iodine policy module
+      Initial dirmngr policy module
+      Changes to the iodine policy module
+      Changes to the kerberos policy module
+      Changes to the kdumpgui policy module
+      Update deprecated interface calls ( gnome_read_config ->    
+         gnome_read_generic_home_content )
+      Changes to the mozilla policy module
+      Changes to the thunderbird policy module
+      Changes to the l2tp policy module
+      Tab clean up in ldap file context file
+      Changes to the ldap policy module
+      Tab clean up in likewise file context file
+      Changes to the likewise policy module
+      Tab clean up in lircd file context file
+      Changes to the lircd policy module
+      Changes to the livecd policy module
+      Tab clean up in loadkeys file context file
+      Changes to the loadkeys policy module and relevant dependencies
+      Tab clean up in lockdev file context file
+      Changes to the lockdev policy module
+      Tab clean up in logrotate file context file
+      Changes to the logrotate policy module and relevant dependencies
+      Tab clean up in logwatch file context file
+      Changes to the logrotate policy module
+      Changes to the logwatch policy module
+      Tab clean up in lpd file context file
+      Changes to the lpd policy module
+      Tab clean up in cron policy module
+      Changes to the lpd policy module
+      Changes to the consolekit policy module
+      Tab fix in cron policy module
+      Tab clean up in mailman file context file
+      Changes to the mailman policy module and relevant dependencies
+      Tab clean up in mcelog file context file
+      Changes to the mcelog policy module
+      Tab clean up in mediawiki file context file
+      Mediawiki XML clean up
+      Tab clean up in memcached file context file
+      Changes to the memcached policy module
+      Changes to the apache policy module
+      Tab clean up in milter file context file
+      Changes to the milter policy module and relevant dependencies
+      Changes to the modemmanager policy module
+      Tab clean up in mojomojo file context file
+      Changes to the mojomojo policy module and relevant dependencies
+      Changes to the gpg policy module
+      Changes to the mongodb policy module
+      Changes to the mono policy module
+      Changes to the monop policy module
+      Tab clean up in mozilla file context file
+      Changes to the mozilla policy module and relevant dependencies
+      Changes to the mozilla policy module
+      Changes to the apache policy module
+      Tab clean up in mpd file context file
+      Changes to the mpd policy module
+      Tab clean up in mplayer file context file
+      Changes to the evolution policy module
+      Changes to the mplayer policy module
+      Changes to the irc policy module
+      Tab clean up in mrtg file context file
+      Changes to the mrtg policy module
+      Tab clean up in mta file context file
+      Changes to the mta policy module and relevant dependencies
+      Changes to the mta policy module and relevant dependencies
+      Get rid of mozilla_conf_t as it is unused
+      Changes to the logrotate policy module
+      Changes to the logwatch policy module
+      Changes to the java policy module
+      Changes to the apache module and relevant dependencies
+      Tab clean up in munin file context file
+      Changes to the munin policy module and relevant dependencies
+      Tab clean up in mysql file context file
+      Changes to mysqld policy module
+      Changes to various policy modules
+      Changes to the munin policy module
+      Changes to the dovecot policy module
+      Changes to various policy modules
+      Changes to the mta policy module
+      Changes to the certmonger policy module and relavant dependencies
+      Tab clean up in nagios file context file
+      Changes to the nagios policy module and relevant dependencies
+      Changes to the modutils policy module
+      Tab cleanup in the nessus file context file
+      Changes to the nessus policy module
+      Tab clean up in the network manager file context file
+      Changes to the networkmanager policy module and relevant dependencies
+      Changes to the mozilla policy module
+      Changes to the cobbler policy module
+      Initial rngd policy module
+      Tab clean up in the nis file context file
+      Changes to the nis policy module
+      Tab clean up in the nscd file context file
+      Changes to the nscd policy module
+      Tab clean up in the nsd file context file
+      Changes to the nsd policy module
+      Tab clean up in the nslcd file context file
+      Changes to the nslcd policy module
+      Tab clean up in the ntop file context file
+      Changes to the ntop policy module
+      Tab clean up in the ntp file context file
+      Changes to the ntp policy module
+      Changes to the numad policy module
+      Tab clean up in the nut file context file
+      Changes to the nut policy module
+      Tab clean up in the nx file context file
+      Changes to the nx policy module
+      Changes to the oav policy module
+      Initial obex policy module
+      Tab clean up in the oddjob file context file
+      Tab clean up in gpg policy module
+      Changes to the oddjob policy module
+      Changes to the mozilla policy module
+      Initial pacemaker policy module
+      Tab clean up in the oidentd file context file
+      Changes to the oident policy module
+      Tab clean up in the openca file context file
+      Changes to the openca policy module
+      Tab clean up in the openct file context file
+      Changes to the openct policy module
+      Tab clean up in the openvpn file context file
+      Changes to the openvpn policy module
+      Tab clean up in the pads file context file
+      Changes to the pads policy module
+      Tab clean up in the passenger file context file
+      Changes to the passenger policy module and relevant dependencies
+      Tab clean up in the pcmcia file context file
+      Changes to the pcmcia policy module
+      Tab clean up in the pcscd file context file
+      Changes to the pcscd policy module and relevant dependencies
+      Tab clean up in the pegasus file context file
+      Changes to the pegasus policy module
+      Tab clean up in the perdition file context file
+      Changes to the perdition policy module
+      Tab clean up in the pingd file context file
+      Changes to the pingd policy module
+      Changes to the plymouthd policy module
+      Changes to the mozilla policy module
+      Changes to the plymouth policy module
+      Tab clean up in the podsleuth file context file
+      Changes to the podsleuth policy module
+      Tab clean up in the policykit file context file
+      Changes to the policykit policy module and relevant dependencies
+      Tab clean up in the portage file context file
+      Changes to the portage policy module
+      Tab clean up in the portmap file context file
+      Changes to the portmap policy module
+      Tab clean up in the portreserve file context file
+      Changes to the portreserve policy module
+      Tab clean up in the portslave file context file
+      Changes to the portslave policy module and relevant dependencies
+      Tab clean up in the postfix file context file
+      Changes to the postfix policy module and relevant dependencies
+      Fixes to various policy modules
+      Tab clean up in the postfixpolicyd file context file
+      Changes to the postfixpolicyd policy module
+      Tab clean up in the postgrey file context file
+      Changes to the postgrey policy module
+      Tab clean up in the ppp file context file
+      Changes to the ppp policy module and relevant dependencies
+      Tab clean up in the prelink file context file
+      Changes to the prelink policy module and relevant dependencies
+      Tab clean up in the prelude file context file
+      Changes to the prelude policy module
+      Tab clean up in the privoxy file context file
+      Changes to the privoxy policy module
+      Tab clean up in the procmail file context file
+      Changes to the procmail policy module
+      Tab clean up in the psad file context file
+      Changes to the psad policy module
+      Changes to the ptchown policy module
+      Tab clean up in the publicfile file context file
+      Changes to the publicfile policy module
+      Fix a fatal syntax error in mozilla_plugin_role()
+      Changes to the plymouth policy module
+      Changes to the policykit policy module
+      Module version bump for fixes in shorewall, fail2ban and portage policy   
+          modules by Sven Vermeulen
+      Tab clean up in the puppet file context file
+      Changes to ther puppet policy module and relevant dependencies
+      Initial pwauth policy module
+      Tab clean up in the pxe file context file
+      Changes to the pxe policy module
+      Tab clean up in the pyzor file context file
+      Changes to the pyzor policy module
+      Tab clean up in the qemu file context file
+      Changes to the qemu policy module
+      Tab clean up in the virt file context file
+      Changes to the virt policy module and relevant depedencies
+      Changes to the virt policy module
+      Changes to the cron policy module
+      Changes to the qemu policy module
+      Changes to the virt policy module
+      Epylog wants sys_nice and setsched
+      Tab clean up in the qmail file context file
+      Changes to the qmail policy module
+      Tab clean up in the qpid file context file
+      Changes to the qpid policy module
+      Tab clean up in the quota file context file
+      Changes to the quota policy module and relevant dependencies
+      Initial rabbitmq policy module
+      Tab clean up in the radius file context file
+      Changes to the radius policy module
+      Tab clean up in the radvd file context file
+      Changes to the radvd policy module
+      Changes to the raid policy module
+      Tab clean up in the razor file context file
+      Changes to the razor policy module and relevant dependencies
+      Smokeping cgi needs to run ping with a domain transition     Remove
+         redundant socket create already provided by    
+         sysnet_dns_name_resolve()
+      Changes to the virt policy module
+      Changes to the apache policy module
+      Changes to the gnome policy module
+      Changes to the rdisc policy mpdule
+      Changes to the readahead policy module
+      Changes to the remotelogin policy module
+      Tab clean up in the resmgr file context file
+      Changes to the resmgr policy module
+      Tab clean up in the rgmanager file context file
+      Changes to the rgmanager policy module
+      Initial Realmd policy module and relevant dependencies
+      Fix resmgrd init script file context specification
+      Changes to the cups policy module
+      automount reads overcommit_memory
+      Changes to the networkmanager policy module
+      Freshclam manages amavis spool content
+      Changes to the tftp policy module
+      Changes to the cobbler policy module
+      Tab clean up in the rhcs file context file
+      Changes to the rhcs policy module and relevant dependencies
+      Tab clean up in the rhgb file context file
+      Changes to the rhgb policy module
+      Tab clean up in the rhsmcertd file context file
+      Changes to the rhsmcertd policy module
+      Tab clean up in the ricci file context file
+      Changes to the ricci policy module
+      Tab clean up in the rlogin file context file
+      Changes to the rlogin policy module
+      Tab clean up in the roundup file context file
+      Changes to the roundup policy module
+      Changes to the remotelogin policy module
+      Changes to the apache policy module
+      Changes to the awstats policy module
+      fix puppet_admin() need to require types that it uses
+      Replace wrong type in puppet_admin()
+      Fix a syntax error in ricci_domtrans()
+      Catch all rpcbind content in /var/run
+      Changes to the cups policy module
+      Tab clean up in the rpc file context file
+      Changes to the rpc policy module
+      Tab clean up in the rpcbind file context file
+      Changes to the rpcbind policy module
+      Tab clean up in the rpm file context file
+      Changes to the rpm policy module and depedencies
+      Changes to the rshd policy module
+      Changes to the virt policy module
+      Changes to the rssh policy module
+      Tab clean up in the rsync file context file
+      Fix a typo in apache XML
+      Changes to the rsync policy module
+      Changes to the rtkit policy module
+      Tab clean up in the rwho file context file
+      Changes to the rwho policy module
+      Reads /proc/sys/kernel/random/poolsize
+      Tab clean up in the samba file context file
+      Changes to the samba policy module and relevant dependencies
+      Tab clean up in the sambagui file context file
+      Changes to the sambagui policy module
+      Initial firewallgui policy module
+      Tab clean up in the samhain file context file
+      Changes to the samhain policy module
+      Tab clean up in the sanlock file context file
+      Changes to the sanlock policy module and relevant dependencies
+      Tab clean up in the sasl file context file
+      Changes to the sasl policy module
+      Chnages to the sblim policy module
+      Tab clean up in the screen file context file
+      Changes to the screen policy module
+      Tab clean up in the sectoolm file context file
+      Changes to firewallgui policy module
+      Changes to the sectoolm policy module
+      Tab clean up in the sendmail file context file
+      Changes to the sendmail policy module and relevant dependencies
+      Tab clean up in the setroubleshoot file context file
+      Changes to the setroubleshoot policy module
+      Tab clean up in the shorewall file context file
+      Changes to the shorewall policy module
+      Tab clean up in the shutdown file context file
+      Changes to the shutdown policy module and relevant dependencies
+      Tab clean up in the slocate file context file
+      Changes to the slocate policy module and relevant dependencies
+      These domains transition to shutdown domain now so they no longer need    
+         direct access
+      Re-add missing network rule in screen policy module
+      fail2ban server sets scheduler
+      shutdown XML clean up
+      libvirtd sets kernel scheduler
+      mongod reads cpuinfo_max_freq
+      Changes to the slrnpull policy module
+      Tab clean up in the smartmon file context file
+      Changes to the smartmon policy module
+      Tab clean up in the smokeping file context file
+      Changes to the smokeping policy module
+      Tab clean up in the smoltclient file context file
+      Changes to the smoltclient policy module
+      Tab clean up in the snmp file context file
+      Changes to the snmp policy module
+      Tab clean up in the snort file context file
+      Changes to the snort policy module
+      Changes to the sosreport policy module and relevant dependencies
+      Tab clean up in the soundserver file context file
+      Changes to the soundserver policy module
+      Tab clean up in the spamassassin file context file
+      Changes to the spamassassin policy module and relevant dependendies
+      spamassassin_role callers create ~/.spamd with the spamd_home_t user    
+         home type instead
+      Re-add sys_admin capability that was lost with porting from Fedora
+      Move mailscanner content to mailscanner module
+      Changes to the speedtouch policy module
+      Tab clean up in the squid file context file
+      Changes to the squid policy module
+      Changes to the sssd policy module
+      Tab clean up in the stunnel file context file
+      Changes to the stunnel policy module
+      Tab clean up in the sxid file context file
+      Changes to the sxid policy module
+      Tab clean up in the sysstat file context file
+      Changes to the sysstat policy module
+      Tab clean up in the tcpd file context file
+      Changes to the tcpd policy module
+      Changes to the tcsd policy module
+      Tab clean up in the telepathy file context file
+      Changes to the telepathy policy module
+      Tab clean up in the telnet file context file
+      Changes to the telnet policy module
+      Tab clean up in the tftp file context file
+      Changes to the tftp policy module
+      Tab clean up in the tgtd file context file
+      Changes to the tgtd policy module
+      Tab clean up in the thunderbird file context file
+      Changes to the thunderbird policy module
+      Catch /var/log/cron directory as well
+      Dovecot module version bump for fixes by Sven Vermeulen
+      Portage module version bump for fixes by Sven Vermeulen
+      Cron module version bump for fixes by Sven Vermeulen
+      Changes to the exim policy module
+      Entropyd reads /proc/meminfo
+      Blueman reads tmp_t directories
+      Do not audit attempts by cups config to read tmp_t directories
+      Do not audit attempts by fail2ban to read tmp_t directories
+      Do not audit attempts by firewalld to read tmp_t directories
+      Gnomeclock reads urandom and realtime clock
+      Kdumpctl needs sys_chroot capability
+      Various kdumpgui fixes from Fedora
+      Do not audit attempts by logwatch to read tmp_t directories
+      Catch all alias files
+      Refine aliases file transition with names
+      Realmd dbus chat policykit and networkmanager from Fedora
+      Do not audit attempts by tuned to read tmp_t directories
+      Changes to the timidity policy module
+      Tab clean up in the tmpreaper file context file
+      Changes to the tmpreaper policy module and relevant dependencies
+      Tab clean up in the tor file context file
+      Changes to the tor policy module
+      Changes to the transproxy policy module
+      Tab clean up in the tripwire file context file
+      Changes to the tripwire policy module
+      Tab clean up in the tuned file context file
+      Changes to the tuned policy module
+      Tab clean up in the tvtime file context file
+      Changes to the tvtime policy module
+      Changes to the tzdata policy module
+      Changes to the ucspitcp policy module
+      Tab clean up in the ulogd file context file
+      Changes to the ulogd policy module
+      Tab clean up in the uml file context file
+      Changes to the uml policy module
+      Make it so that irc clients can also get attributes of cifs, nfs, fuse    
+         and other file systems
+      Changes to the updfstab policy module
+      Changes to the uptime policy module
+      Tab clean up in the usbmodules file context file
+      Changes to the usbmodule policy module
+      Changes to the usbmuxd policy module
+      Tab clean up in the userhelper file context file
+      Screen sends child terminated signals to all interactive fd domains
+      Changes to the userhelper policy module and relevant dependencies
+      Changes to the virt policy module
+      Module version bump for fail2ban changes by Sven Vermeulen
+      Changes to the rpm policy module
+      fix smartmon init script file context specification
+      Changes to the usernetctl policy module
+      Tab clean up in the uucp file context file
+      Changes to the uucp policy module
+      Changes to the virt policy module
+      Tab clean up in the uuid file context file
+      Changes to the uuidd policy module
+      Tab clean up in the uwimap file context file
+      Changes to the uwimap policy module
+      Tab clean up in the varnishd file context file
+      Changes to the varnishd policy module
+      Changes to the vbetool policy module
+      Tab clean up in the vdagent file context file
+      Changes to the vdagent policy module
+      Tab clean up in the vhostmd file context file
+      Changes to the vhostmd policy module
+      Changes to the vlock policy module
+      Tab clean up in the vmware file context file
+      Changes to the vmware policy module
+      Tab clean up in the vnstatd file context file
+      Changes to the vnstatd policy module
+      Tab clean up in the vpn file context file
+      Changes to the vpnc policy module
+      Tab clean up in the w3c file context file
+      Changes to the w3c policy module
+      Tab clean up in the watchdog file context file
+      Changes to the watchdog policy module
+      Changes to the wdmd policy module
+      Changes to the webadm policy modules
+      Changes to the webalizer policy module
+      White space fix in apache policy module
+      Changes to the wine policy module
+      Tab clean up in the wireshark file context file
+      Changes to the wireshark policy module
+      Tab clean up in the wm file context file
+      Changes to the wm policy module
+      Changes to the inn policy module
+      Move man cache file type to miscfiles
+      Changes to the inn policy module
+      More accurate dbadm boolean descriptions
+      mysql_admin() has access to ~/.my.cnf files
+      Tab clean up in the xen file context file
+      Changes to the xen policy module and relevant dependencies
+      Tab clean up in the xfs file context file
+      Changes to the xfs policy module
+      Changes to the xguest policy module and relevant dependencies
+      Changes to the xprint policy module
+      Changes to the xscreensaver policy module
+      Tab clean up in the yam file context file
+      Changes to the yam policy module
+      Tab clean up in the zabbix file context file
+      Changes to the zabbix policy module
+      Tab clean up in the zarafa file context file
+      Changes to the zarafa policy module
+      Tab clean up in the zebra file context file
+      Changes to the zebra policy module
+      Changes to the zosremote policy module
+      Changes to the mysql policy module
+      Tab clean up in the pulseaudio file context file
+      Changes to the pulseaudio policy module and relevant dependencies
+      Changes to the pulseaudio policy module
+      One chown too many
+      Changes to the mplayer policy module
+      The prelink cron script now runs in its own domain
+      Initial smstools policy module
+      Initial openvswitch policy module and relevant dependencies
+      Reads pcsd pid files
+      Reads random device
+      winbind manages smbd pid sock files from Fedora
+      Changes to the bind policy module
+      CG rules daemon reads all sysctls
+      Runs consoletype and searches nfs state data from Fedora
+      Support munin unbound plugin from Fedora
+      Zabbix sends signals from Fedora
+      Blueman sets scheduler and sends signals from Fedora
+      pcscd_read_pub_files is deprecated, use pcscd_read_pid_files instead
+      Module version bumps for fixes in portage and virt modules by Sven    
+         Vermeulen
+      Policy module version bumps for various changes by Sven Vermeulen
+      Changes to the openvpn policy module
+      Module version bumps for various fixes by Sven Vermeulen
+      Changes to the mandb policy module
+      Changes to the tmpreaper policy module
+      Changes to the munin policy module
+      Changes to the rngd policy module
+      Changes to the awstats policy module and relevant dependencies
+      Changes to the apache policy module
+      Changes to various policy modules
+      Changes to the abrt policy module
+      Changes to the passenger policy module and relevant depedencies
+      Changes to the pegagus policy module
+      Changes to the mta policy module
+      Changes to the fetchmail policy module
+      Changes to the bitlbee policy module
+      Changes to the blueman policy module and relevant dependencies
+      Changes to the amavis policy module
+      Changes to the userhelper policy module
+      Changes to the blueman policy module
+      Changes to the squid policy module
+      Changes to the sblim policy module
+      Changes to the kdumpgui policy module
+      Changes to the mailman policy module
+      Changes to the realmd policy module
+      Changes to the raid policy module
+      Changes to the samba policy module
+      Changes to the various policy modules
+      Changes to the snmp policy module
+      Changes to the spamassassin policy module
+      Changes to the sssd policy module
+      Changes to the l2tpd policy module
+      Changes to the shorewall policy module
+      Changes to the xen policy module
+      Changes to the tftp policy modules
+      Changes to the accountsd policy module
+      Changes to the tgtd policy module
+      Changes to the corosync policy module
+      Changes to the kdump policy module
+      Changes to the openvswitch policy module
+      Changes to the mpd policy module
+      Changes to the mozilla policy module
+      Changes to the zarafa policy module
+      Changes to the boinc policy module
+      Changes to the setroubleshoot policy module
+      Changes to the dspam policy module
+      Changes to the rgrmanager policy module and relevant dependencies
+      Changes to the svnserve policy module
+      Changes to the virt policy module
+      Changes to the prelink policy module
+      Changes to the apache policy module
+      Changes to the gnomeclock policy module
+      Changes to various policy modules
+      Changes to the pegagus policy module
+      Changes to the shorewall policy module
+      Changes to the kerberos policy module
+      Changes to the rhcs policy module
+      Changes to the irc policy module
+      Changes to the clamav policy module
+      Changes to the mrtg policy module
+      Changes to the munin policy module
+      Changes to the amavis policy module
+      Changes to the ppp policy module
+      Initial jockey policy module
+      Module version bumps for "several named transition for directories    
+         created in /var/run by initscripts" in various modules by Laurent    
+         Bigonville
+      Module version bumps for fixes in various modules by Laurent Bigonville
+      Module version bump for changes to the consolekit policy module by    
+         Laurent Bigonville
+      Changes to the stunnel policy module
+      Module version bumps for fixes in various modules by Sven Vermeulen
+      Changes to the virt policy module
+      Changes to the apache policy module
+      Changes to the wm policy module
+      Changes to the samba policy module
+      Changes to the certmonger policy module
+      Changes to the mozilla policy module
+      Changes to the corosync policy module
+      Changes to the pacemaker policy module
+      Changes to the tuned policy module
+      Changes to the cups module and relevant dependencies
+      Changes to the rhsmcertd policy module
+      Changes to the lpd policy module
+      Changes to the munin policy module
+      Changes to the ntp policy module
+      Changes to the tor policy module
+      Changes to the firewalld policy module
+      Changes to the dspam policy module
+      Changes to the setroubleshoot policy module
+      Changes to the condor policy module
+      Changes to the kerberos policy module
+      Changes to the passenger policy module
+      Changes to the ppp policy module
+      Changes to the the dkim policy module
+      Changes to the abrt policy module
+      Changes to the lircd policy module
+      Changes to the dkim policy module
+      Changes to the virt policy module
+      Changes to the munin policy module
+      Changes to the dovecot policy module
+      Changes to the cobbler policy module
+      Changes to the userhelper policy module
+      Changes to the logwatch policy module
+      Changes to the wdmd policy module and relevant dependencies
+      Changes to the nscd policy module and relevant dependencies
+      Changes to the dbus policy module
+      Module version bumps for fixes in various policy modules by Laurent    
+         Bigonville
+      Changes to the cups policy module
+      Changes to the dbus policy module
+      Changes to the apcupsd policy module
+      Remove redundant net_bind_service capabilities in various modules
+      Changes to the virt policy module
+      Changes to the puppet policy module
+      Module version bumps for fixes in various policy module by Sven    
+         Vermeulen
+      Module version bumps for file context fixes in various policy modules by  
+           Laurent Bigonville
+      Make httpd_manage_all_user_content() do what it advertises
+      Add more networking rules to mplayer policy module for compatibility
+      Fix fcronsighup file context. Should be crontab_exec_t as per previous    
+         spec
+      Module version bumps for changes in various modules by Sven Vermeulen
+      Move asterisk_exec() and modify XML header
+      Consolekit creates /var/run/console directories with a type transition    
+         unconditionally
+      Module version bump in consolekit policy module for changes by Sven    
+         Vermeulen
+      The imaplogin executable file should be courier_pop_exec_t according to   
+          existing file context specification
+      Module version bump for changes to the fail2ban policy module by Sven    
+         Vermeulen
+      Modules version bumps for changes in various policy modules by Sven    
+         Vermeulen
+
+Laurent Bigonville (28):
+      Add Debian locations for Telepathy connection managers
+      Label telepathy-rakia as telepathy-sofiasip
+      Allow smartd daemon to write in /var/lib/smartmontools directory
+      Add Debian location for smartd daemon initscript
+      Add Debian location for accounts-daemon daemon
+      Add Debian location for rtkit-daemon daemon
+      Add Debian location for tcsd init script
+      Add Debian location for libvirtd init script
+      Add Debian location for evolution executables
+      Add Debian locationis for nut executables and configuration files
+      Add several named transition for directories created in /var/run by
+         initscripts
+      Run packagekit under apt_t context on Debian distribution
+      Add proper label for colord daemon in debian
+      Allow the system dbus to search cgroup directories
+      Allow virtd_t context to read sysctl_crypto_t
+      Allow colord_t context to read sysctl_crypto_t
+      Add proper label for gconfd-2 daemon in Debian
+      Ensure that consolekit can create /var/run/console directory on Debian
+      Properly label nm-dispatcher.action on Debian
+      policykit.fc: Properly label polkit-agent-helper-1 on Debian
+      cups.fc: Properly label cups-pk-helper-mechanism on Debian
+      Allow pcscd the fsetid capability
+      Allow networkmanager_t to read crypto_sysctl_t
+      Allow virsh_t context to read sysctl_crypto_t
+      Allow cupsd_t to read cupsd_log_t
+      gnomeclock.fc: Properly label gsd-datetime-mechanism in Debian
+      ptchown.fc: Properly label pt_chown executable in Debian
+      Label /usr/bin/kvm as qemu_exec_t
+
+Matthew Thode (2):
+      added autofs support and nsswitch support
+      removing refrences to named_var_lib_t as it doesn't exist anymore for
+         bind.if
+
+Mika Pflüger (3):
+      Allow saslauthd_t to talk to mysqld via TCP
+      Quota policy adjustments: * Allow quota_t to load kernel modules
+      Debian locations for dovecot deliver and dovecot auth.
+
+Russell Coker (1):
+      Fix djbdns ports
+
+Sven Vermeulen (75):
+      Update with new substitutions
+      Mark the pid directory as a pid directory
+      Add in transitions for queue types when the queues are created
+      Fix typo in interface postfix_exec_postqueue
+      Allow maildelivery to use dotlock files in the mail spool
+      Allow postfix local to change ownership of mailfiles
+      Use libexec location for postfix binaries
+      Allow initrc_t to create run dirs for contrib modules
+      Update logwatch location in file context
+      Sandbox is an inherent part of the portage inner workings
+      Fix startup issue with fail2ban-client
+      Be able to get output from fail2ban-client
+      Ignore searches when ran from the user home directory
+      Shorewall admins execute shorewall too
+      Shorewall needs sys_admin capability for manipulating network stack
+      Be able to display dovecot errors
+      Remove transition to ldconfig
+      Adding interfaces for handling cron log files
+      Fail2ban client checks state of log files before telling the server
+      Support mysql init script
+      Support initial creation of mysql database files
+      Portage fetch domain needs to access certificates
+      Make samba domtrans optional in virt
+      Fix typo in tunable declaration for fcron_crond
+      Introducing cron_manage_log_files interface
+      Introduce dontaudit interfaces for leaked fd and unix stream sockets
+      Dontaudit attempts by system_mail_t to use leaked fd or stream sockets
+      Support at service
+      Additional postfix admin requirements
+      Reintroduce postfix_var_run_t for pid directory and fowner capability
+      Postfix deferred queue should not mark mails as postfix_spool_maildrop_t
+      Running qemu with SDL support requires more xserver-related privileges
+      Fix typo in clockspeed comment
+      Support openvpn status file
+      Asterisk voicemail messages are generated from tmp
+      Make rtkit calls optional
+      Gentoo installs dovecot certs in /etc/ssl/dovecot
+      Moving sandbox code to sandbox section (v2)
+      Allow sandbox to log violations
+      Use rw_fifo_file_perms
+      Apache should not depend on gpg
+      Named init script creates rundir
+      Add ~/.maildir as a valid maildir destination
+      Support stunnel_read_config for startup
+      Updates on stunnel policy
+      More .maildir fixes
+      Mark make.profile entry as portage_conf_t (v2)
+      Move mta call (coding style)
+      Changes to puppet domain
+      Allow rpc admin to run exportfs
+      Grant sys_admin capability to puppet
+      Puppet module helper scripts are puppet_var_lib_t
+      Support netlink_route_socket creation for puppet
+      Puppet initscript creates /run/puppet
+      Puppet runs statfs against selinuxfs
+      mplayer streams HTTP resources
+      fcron and fcronsighup binaries are moved
+      Asterisk needs to search through logs
+      Denial in mail log on node bind
+      Fix typo in mcelog_admin (missing bracket)
+      Add in contexts for fcron rm.systab and systab.tmp
+      Remove pulseaudio filename_trans conflict
+      Allow asterisk admins to execute asterisk binary directly
+      Support tagfiles for consolekit
+      ConsoleKit needs to read the dbus machine-id
+      File context updates for courier-imap
+      Update on file contexts for OpenLDAP
+      Update on file contexts for wpa_supplicant
+      Allow IRC clients to read certificates
+      Allow reading /proc/self for fail2ban due to FAM support
+      Update file contexts for puppet
+      Support ~/.tmux.conf as tmux configuration file
+      Add setuid/setgid capability to ulogd_t
+      Support tmux control socket
+      Postfix creates defer(red) queue locations
+
diff --git a/policy/modules/contrib/acct.fc b/policy/modules/admin/acct.fc
index 5a772ec6..5a772ec6 100644
--- a/policy/modules/contrib/acct.fc
+++ b/policy/modules/admin/acct.fc
diff --git a/policy/modules/contrib/acct.if b/policy/modules/admin/acct.if
index 59d95d04..59d95d04 100644
--- a/policy/modules/contrib/acct.if
+++ b/policy/modules/admin/acct.if
diff --git a/policy/modules/contrib/acct.te b/policy/modules/admin/acct.te
index 4f3550cf..4f3550cf 100644
--- a/policy/modules/contrib/acct.te
+++ b/policy/modules/admin/acct.te
diff --git a/policy/modules/contrib/aide.fc b/policy/modules/admin/aide.fc
index b2f47de8..b2f47de8 100644
--- a/policy/modules/contrib/aide.fc
+++ b/policy/modules/admin/aide.fc
diff --git a/policy/modules/contrib/aide.if b/policy/modules/admin/aide.if
index 01cbb67d..01cbb67d 100644
--- a/policy/modules/contrib/aide.if
+++ b/policy/modules/admin/aide.if
diff --git a/policy/modules/contrib/aide.te b/policy/modules/admin/aide.te
index 9d3c19ce..9d3c19ce 100644
--- a/policy/modules/contrib/aide.te
+++ b/policy/modules/admin/aide.te
diff --git a/policy/modules/contrib/alsa.fc b/policy/modules/admin/alsa.fc
index 75ea9ebf..75ea9ebf 100644
--- a/policy/modules/contrib/alsa.fc
+++ b/policy/modules/admin/alsa.fc
diff --git a/policy/modules/contrib/alsa.if b/policy/modules/admin/alsa.if
index 9cff9efb..9cff9efb 100644
--- a/policy/modules/contrib/alsa.if
+++ b/policy/modules/admin/alsa.if
diff --git a/policy/modules/contrib/alsa.te b/policy/modules/admin/alsa.te
index 008b6d25..008b6d25 100644
--- a/policy/modules/contrib/alsa.te
+++ b/policy/modules/admin/alsa.te
diff --git a/policy/modules/contrib/amanda.fc b/policy/modules/admin/amanda.fc
index 0d90d71e..0d90d71e 100644
--- a/policy/modules/contrib/amanda.fc
+++ b/policy/modules/admin/amanda.fc
diff --git a/policy/modules/contrib/amanda.if b/policy/modules/admin/amanda.if
index 1de17880..1de17880 100644
--- a/policy/modules/contrib/amanda.if
+++ b/policy/modules/admin/amanda.if
diff --git a/policy/modules/contrib/amanda.te b/policy/modules/admin/amanda.te
index ea74ccd7..ea74ccd7 100644
--- a/policy/modules/contrib/amanda.te
+++ b/policy/modules/admin/amanda.te
diff --git a/policy/modules/contrib/amtu.fc b/policy/modules/admin/amtu.fc
index b21a14a2..b21a14a2 100644
--- a/policy/modules/contrib/amtu.fc
+++ b/policy/modules/admin/amtu.fc
diff --git a/policy/modules/contrib/amtu.if b/policy/modules/admin/amtu.if
index 69425600..69425600 100644
--- a/policy/modules/contrib/amtu.if
+++ b/policy/modules/admin/amtu.if
diff --git a/policy/modules/contrib/amtu.te b/policy/modules/admin/amtu.te
index 9342d566..9342d566 100644
--- a/policy/modules/contrib/amtu.te
+++ b/policy/modules/admin/amtu.te
diff --git a/policy/modules/contrib/anaconda.fc b/policy/modules/admin/anaconda.fc
index b098089d..b098089d 100644
--- a/policy/modules/contrib/anaconda.fc
+++ b/policy/modules/admin/anaconda.fc
diff --git a/policy/modules/contrib/anaconda.if b/policy/modules/admin/anaconda.if
index 14a61b7e..14a61b7e 100644
--- a/policy/modules/contrib/anaconda.if
+++ b/policy/modules/admin/anaconda.if
diff --git a/policy/modules/contrib/anaconda.te b/policy/modules/admin/anaconda.te
index 307f1e8f..307f1e8f 100644
--- a/policy/modules/contrib/anaconda.te
+++ b/policy/modules/admin/anaconda.te
diff --git a/policy/modules/contrib/apt.fc b/policy/modules/admin/apt.fc
index 92db84d6..92db84d6 100644
--- a/policy/modules/contrib/apt.fc
+++ b/policy/modules/admin/apt.fc
diff --git a/policy/modules/contrib/apt.if b/policy/modules/admin/apt.if
index 568aa97d..568aa97d 100644
--- a/policy/modules/contrib/apt.if
+++ b/policy/modules/admin/apt.if
diff --git a/policy/modules/contrib/apt.te b/policy/modules/admin/apt.te
index ed05a060..ed05a060 100644
--- a/policy/modules/contrib/apt.te
+++ b/policy/modules/admin/apt.te
diff --git a/policy/modules/contrib/backup.fc b/policy/modules/admin/backup.fc
index 349c26f5..349c26f5 100644
--- a/policy/modules/contrib/backup.fc
+++ b/policy/modules/admin/backup.fc
diff --git a/policy/modules/contrib/backup.if b/policy/modules/admin/backup.if
index fe3f740d..fe3f740d 100644
--- a/policy/modules/contrib/backup.if
+++ b/policy/modules/admin/backup.if
diff --git a/policy/modules/contrib/backup.te b/policy/modules/admin/backup.te
index ca3727ca..ca3727ca 100644
--- a/policy/modules/contrib/backup.te
+++ b/policy/modules/admin/backup.te
diff --git a/policy/modules/contrib/bacula.fc b/policy/modules/admin/bacula.fc
index 27c021c3..27c021c3 100644
--- a/policy/modules/contrib/bacula.fc
+++ b/policy/modules/admin/bacula.fc
diff --git a/policy/modules/contrib/bacula.if b/policy/modules/admin/bacula.if
index eba3f1ca..eba3f1ca 100644
--- a/policy/modules/contrib/bacula.if
+++ b/policy/modules/admin/bacula.if
diff --git a/policy/modules/contrib/bacula.te b/policy/modules/admin/bacula.te
index 8def92c1..8def92c1 100644
--- a/policy/modules/contrib/bacula.te
+++ b/policy/modules/admin/bacula.te
diff --git a/policy/modules/contrib/bcfg2.fc b/policy/modules/admin/bcfg2.fc
index feb5d9d9..feb5d9d9 100644
--- a/policy/modules/contrib/bcfg2.fc
+++ b/policy/modules/admin/bcfg2.fc
diff --git a/policy/modules/contrib/bcfg2.if b/policy/modules/admin/bcfg2.if
index 0cd2d35b..0cd2d35b 100644
--- a/policy/modules/contrib/bcfg2.if
+++ b/policy/modules/admin/bcfg2.if
diff --git a/policy/modules/contrib/bcfg2.te b/policy/modules/admin/bcfg2.te
index 3897511e..3897511e 100644
--- a/policy/modules/contrib/bcfg2.te
+++ b/policy/modules/admin/bcfg2.te
diff --git a/policy/modules/contrib/blueman.fc b/policy/modules/admin/blueman.fc
index c295d2e0..c295d2e0 100644
--- a/policy/modules/contrib/blueman.fc
+++ b/policy/modules/admin/blueman.fc
diff --git a/policy/modules/contrib/blueman.if b/policy/modules/admin/blueman.if
index 16ec5252..16ec5252 100644
--- a/policy/modules/contrib/blueman.if
+++ b/policy/modules/admin/blueman.if
diff --git a/policy/modules/contrib/blueman.te b/policy/modules/admin/blueman.te
index 718e3bf3..718e3bf3 100644
--- a/policy/modules/contrib/blueman.te
+++ b/policy/modules/admin/blueman.te
diff --git a/policy/modules/contrib/brctl.fc b/policy/modules/admin/brctl.fc
index ed472f09..ed472f09 100644
--- a/policy/modules/contrib/brctl.fc
+++ b/policy/modules/admin/brctl.fc
diff --git a/policy/modules/contrib/brctl.if b/policy/modules/admin/brctl.if
index 422a5c66..422a5c66 100644
--- a/policy/modules/contrib/brctl.if
+++ b/policy/modules/admin/brctl.if
diff --git a/policy/modules/contrib/brctl.te b/policy/modules/admin/brctl.te
index fad61476..fad61476 100644
--- a/policy/modules/contrib/brctl.te
+++ b/policy/modules/admin/brctl.te
diff --git a/policy/modules/contrib/certwatch.fc b/policy/modules/admin/certwatch.fc
index 726720cc..726720cc 100644
--- a/policy/modules/contrib/certwatch.fc
+++ b/policy/modules/admin/certwatch.fc
diff --git a/policy/modules/contrib/certwatch.if b/policy/modules/admin/certwatch.if
index 54e6e661..54e6e661 100644
--- a/policy/modules/contrib/certwatch.if
+++ b/policy/modules/admin/certwatch.if
diff --git a/policy/modules/contrib/certwatch.te b/policy/modules/admin/certwatch.te
index 171fafb9..171fafb9 100644
--- a/policy/modules/contrib/certwatch.te
+++ b/policy/modules/admin/certwatch.te
diff --git a/policy/modules/contrib/cfengine.fc b/policy/modules/admin/cfengine.fc
index 807467cb..807467cb 100644
--- a/policy/modules/contrib/cfengine.fc
+++ b/policy/modules/admin/cfengine.fc
diff --git a/policy/modules/contrib/cfengine.if b/policy/modules/admin/cfengine.if
index ff0b0038..ff0b0038 100644
--- a/policy/modules/contrib/cfengine.if
+++ b/policy/modules/admin/cfengine.if
diff --git a/policy/modules/contrib/cfengine.te b/policy/modules/admin/cfengine.te
index 18ffc278..18ffc278 100644
--- a/policy/modules/contrib/cfengine.te
+++ b/policy/modules/admin/cfengine.te
diff --git a/policy/modules/contrib/chkrootkit.fc b/policy/modules/admin/chkrootkit.fc
index fa780c34..fa780c34 100644
--- a/policy/modules/contrib/chkrootkit.fc
+++ b/policy/modules/admin/chkrootkit.fc
diff --git a/policy/modules/contrib/chkrootkit.if b/policy/modules/admin/chkrootkit.if
index 12589bd9..12589bd9 100644
--- a/policy/modules/contrib/chkrootkit.if
+++ b/policy/modules/admin/chkrootkit.if
diff --git a/policy/modules/contrib/chkrootkit.te b/policy/modules/admin/chkrootkit.te
index 6d9fc5c3..6d9fc5c3 100644
--- a/policy/modules/contrib/chkrootkit.te
+++ b/policy/modules/admin/chkrootkit.te
diff --git a/policy/modules/contrib/ddcprobe.fc b/policy/modules/admin/ddcprobe.fc
index 747c416e..747c416e 100644
--- a/policy/modules/contrib/ddcprobe.fc
+++ b/policy/modules/admin/ddcprobe.fc
diff --git a/policy/modules/contrib/ddcprobe.if b/policy/modules/admin/ddcprobe.if
index aeddb697..aeddb697 100644
--- a/policy/modules/contrib/ddcprobe.if
+++ b/policy/modules/admin/ddcprobe.if
diff --git a/policy/modules/contrib/ddcprobe.te b/policy/modules/admin/ddcprobe.te
index 212316cb..212316cb 100644
--- a/policy/modules/contrib/ddcprobe.te
+++ b/policy/modules/admin/ddcprobe.te
diff --git a/policy/modules/contrib/dmidecode.fc b/policy/modules/admin/dmidecode.fc
index 0ca4c99a..0ca4c99a 100644
--- a/policy/modules/contrib/dmidecode.fc
+++ b/policy/modules/admin/dmidecode.fc
diff --git a/policy/modules/contrib/dmidecode.if b/policy/modules/admin/dmidecode.if
index 41c3f677..41c3f677 100644
--- a/policy/modules/contrib/dmidecode.if
+++ b/policy/modules/admin/dmidecode.if
diff --git a/policy/modules/contrib/dmidecode.te b/policy/modules/admin/dmidecode.te
index bda30744..bda30744 100644
--- a/policy/modules/contrib/dmidecode.te
+++ b/policy/modules/admin/dmidecode.te
diff --git a/policy/modules/contrib/dphysswapfile.fc b/policy/modules/admin/dphysswapfile.fc
index dd8ab602..dd8ab602 100644
--- a/policy/modules/contrib/dphysswapfile.fc
+++ b/policy/modules/admin/dphysswapfile.fc
diff --git a/policy/modules/contrib/dphysswapfile.if b/policy/modules/admin/dphysswapfile.if
index c39464e4..c39464e4 100644
--- a/policy/modules/contrib/dphysswapfile.if
+++ b/policy/modules/admin/dphysswapfile.if
diff --git a/policy/modules/contrib/dphysswapfile.te b/policy/modules/admin/dphysswapfile.te
index ee4ec4e2..ee4ec4e2 100644
--- a/policy/modules/contrib/dphysswapfile.te
+++ b/policy/modules/admin/dphysswapfile.te
diff --git a/policy/modules/contrib/dpkg.fc b/policy/modules/admin/dpkg.fc
index 9ba6e312..9ba6e312 100644
--- a/policy/modules/contrib/dpkg.fc
+++ b/policy/modules/admin/dpkg.fc
diff --git a/policy/modules/contrib/dpkg.if b/policy/modules/admin/dpkg.if
index a5e88d6f..a5e88d6f 100644
--- a/policy/modules/contrib/dpkg.if
+++ b/policy/modules/admin/dpkg.if
diff --git a/policy/modules/contrib/dpkg.te b/policy/modules/admin/dpkg.te
index e7747bc7..e7747bc7 100644
--- a/policy/modules/contrib/dpkg.te
+++ b/policy/modules/admin/dpkg.te
diff --git a/policy/modules/contrib/fakehwclock.fc b/policy/modules/admin/fakehwclock.fc
index 85ea9317..85ea9317 100644
--- a/policy/modules/contrib/fakehwclock.fc
+++ b/policy/modules/admin/fakehwclock.fc
diff --git a/policy/modules/contrib/fakehwclock.if b/policy/modules/admin/fakehwclock.if
index 3e5afb14..3e5afb14 100644
--- a/policy/modules/contrib/fakehwclock.if
+++ b/policy/modules/admin/fakehwclock.if
diff --git a/policy/modules/contrib/fakehwclock.te b/policy/modules/admin/fakehwclock.te
index a773824c..a773824c 100644
--- a/policy/modules/contrib/fakehwclock.te
+++ b/policy/modules/admin/fakehwclock.te
diff --git a/policy/modules/contrib/firstboot.fc b/policy/modules/admin/firstboot.fc
index 2aafeb25..2aafeb25 100644
--- a/policy/modules/contrib/firstboot.fc
+++ b/policy/modules/admin/firstboot.fc
diff --git a/policy/modules/contrib/firstboot.if b/policy/modules/admin/firstboot.if
index 280f875f..280f875f 100644
--- a/policy/modules/contrib/firstboot.if
+++ b/policy/modules/admin/firstboot.if
diff --git a/policy/modules/contrib/firstboot.te b/policy/modules/admin/firstboot.te
index 1576b498..1576b498 100644
--- a/policy/modules/contrib/firstboot.te
+++ b/policy/modules/admin/firstboot.te
diff --git a/policy/modules/contrib/hwloc.fc b/policy/modules/admin/hwloc.fc
index 136bb697..136bb697 100644
--- a/policy/modules/contrib/hwloc.fc
+++ b/policy/modules/admin/hwloc.fc
diff --git a/policy/modules/contrib/hwloc.if b/policy/modules/admin/hwloc.if
index c2349ecf..c2349ecf 100644
--- a/policy/modules/contrib/hwloc.if
+++ b/policy/modules/admin/hwloc.if
diff --git a/policy/modules/contrib/hwloc.te b/policy/modules/admin/hwloc.te
index e0e2243f..e0e2243f 100644
--- a/policy/modules/contrib/hwloc.te
+++ b/policy/modules/admin/hwloc.te
diff --git a/policy/modules/contrib/kdump.fc b/policy/modules/admin/kdump.fc
index 4e396725..4e396725 100644
--- a/policy/modules/contrib/kdump.fc
+++ b/policy/modules/admin/kdump.fc
diff --git a/policy/modules/contrib/kdump.if b/policy/modules/admin/kdump.if
index 56fb3395..56fb3395 100644
--- a/policy/modules/contrib/kdump.if
+++ b/policy/modules/admin/kdump.if
diff --git a/policy/modules/contrib/kdump.te b/policy/modules/admin/kdump.te
index 4e27a84f..4e27a84f 100644
--- a/policy/modules/contrib/kdump.te
+++ b/policy/modules/admin/kdump.te
diff --git a/policy/modules/contrib/kdumpgui.fc b/policy/modules/admin/kdumpgui.fc
index 250679cd..250679cd 100644
--- a/policy/modules/contrib/kdumpgui.fc
+++ b/policy/modules/admin/kdumpgui.fc
diff --git a/policy/modules/contrib/kdumpgui.if b/policy/modules/admin/kdumpgui.if
index 182ab8b5..182ab8b5 100644
--- a/policy/modules/contrib/kdumpgui.if
+++ b/policy/modules/admin/kdumpgui.if
diff --git a/policy/modules/contrib/kdumpgui.te b/policy/modules/admin/kdumpgui.te
index 2990962b..2990962b 100644
--- a/policy/modules/contrib/kdumpgui.te
+++ b/policy/modules/admin/kdumpgui.te
diff --git a/policy/modules/contrib/kismet.fc b/policy/modules/admin/kismet.fc
index 09ccb80d..09ccb80d 100644
--- a/policy/modules/contrib/kismet.fc
+++ b/policy/modules/admin/kismet.fc
diff --git a/policy/modules/contrib/kismet.if b/policy/modules/admin/kismet.if
index 1ba783c4..1ba783c4 100644
--- a/policy/modules/contrib/kismet.if
+++ b/policy/modules/admin/kismet.if
diff --git a/policy/modules/contrib/kismet.te b/policy/modules/admin/kismet.te
index dc07e769..dc07e769 100644
--- a/policy/modules/contrib/kismet.te
+++ b/policy/modules/admin/kismet.te
diff --git a/policy/modules/contrib/kudzu.fc b/policy/modules/admin/kudzu.fc
index a0127d49..a0127d49 100644
--- a/policy/modules/contrib/kudzu.fc
+++ b/policy/modules/admin/kudzu.fc
diff --git a/policy/modules/contrib/kudzu.if b/policy/modules/admin/kudzu.if
index 85214c5b..85214c5b 100644
--- a/policy/modules/contrib/kudzu.if
+++ b/policy/modules/admin/kudzu.if
diff --git a/policy/modules/contrib/kudzu.te b/policy/modules/admin/kudzu.te
index 1ec6b513..1ec6b513 100644
--- a/policy/modules/contrib/kudzu.te
+++ b/policy/modules/admin/kudzu.te
diff --git a/policy/modules/contrib/logrotate.fc b/policy/modules/admin/logrotate.fc
index dac1af39..dac1af39 100644
--- a/policy/modules/contrib/logrotate.fc
+++ b/policy/modules/admin/logrotate.fc
diff --git a/policy/modules/contrib/logrotate.if b/policy/modules/admin/logrotate.if
index dd8e01af..dd8e01af 100644
--- a/policy/modules/contrib/logrotate.if
+++ b/policy/modules/admin/logrotate.if
diff --git a/policy/modules/contrib/logrotate.te b/policy/modules/admin/logrotate.te
index 2490cdfa..2490cdfa 100644
--- a/policy/modules/contrib/logrotate.te
+++ b/policy/modules/admin/logrotate.te
diff --git a/policy/modules/contrib/logwatch.fc b/policy/modules/admin/logwatch.fc
index 7e83c901..7e83c901 100644
--- a/policy/modules/contrib/logwatch.fc
+++ b/policy/modules/admin/logwatch.fc
diff --git a/policy/modules/contrib/logwatch.if b/policy/modules/admin/logwatch.if
index 06c3d36c..06c3d36c 100644
--- a/policy/modules/contrib/logwatch.if
+++ b/policy/modules/admin/logwatch.if
diff --git a/policy/modules/contrib/logwatch.te b/policy/modules/admin/logwatch.te
index f20454ab..f20454ab 100644
--- a/policy/modules/contrib/logwatch.te
+++ b/policy/modules/admin/logwatch.te
diff --git a/policy/modules/contrib/mcelog.fc b/policy/modules/admin/mcelog.fc
index a91a13f9..a91a13f9 100644
--- a/policy/modules/contrib/mcelog.fc
+++ b/policy/modules/admin/mcelog.fc
diff --git a/policy/modules/contrib/mcelog.if b/policy/modules/admin/mcelog.if
index 9b731b82..9b731b82 100644
--- a/policy/modules/contrib/mcelog.if
+++ b/policy/modules/admin/mcelog.if
diff --git a/policy/modules/contrib/mcelog.te b/policy/modules/admin/mcelog.te
index 1c342132..1c342132 100644
--- a/policy/modules/contrib/mcelog.te
+++ b/policy/modules/admin/mcelog.te
diff --git a/policy/modules/contrib/mrtg.fc b/policy/modules/admin/mrtg.fc
index fad30365..fad30365 100644
--- a/policy/modules/contrib/mrtg.fc
+++ b/policy/modules/admin/mrtg.fc
diff --git a/policy/modules/contrib/mrtg.if b/policy/modules/admin/mrtg.if
index b25b0894..b25b0894 100644
--- a/policy/modules/contrib/mrtg.if
+++ b/policy/modules/admin/mrtg.if
diff --git a/policy/modules/contrib/mrtg.te b/policy/modules/admin/mrtg.te
index 953738e9..953738e9 100644
--- a/policy/modules/contrib/mrtg.te
+++ b/policy/modules/admin/mrtg.te
diff --git a/policy/modules/contrib/ncftool.fc b/policy/modules/admin/ncftool.fc
index ca1a0e28..ca1a0e28 100644
--- a/policy/modules/contrib/ncftool.fc
+++ b/policy/modules/admin/ncftool.fc
diff --git a/policy/modules/contrib/ncftool.if b/policy/modules/admin/ncftool.if
index db9578f4..db9578f4 100644
--- a/policy/modules/contrib/ncftool.if
+++ b/policy/modules/admin/ncftool.if
diff --git a/policy/modules/contrib/ncftool.te b/policy/modules/admin/ncftool.te
index 676567d8..676567d8 100644
--- a/policy/modules/contrib/ncftool.te
+++ b/policy/modules/admin/ncftool.te
diff --git a/policy/modules/contrib/passenger.fc b/policy/modules/admin/passenger.fc
index a1a30929..a1a30929 100644
--- a/policy/modules/contrib/passenger.fc
+++ b/policy/modules/admin/passenger.fc
diff --git a/policy/modules/contrib/passenger.if b/policy/modules/admin/passenger.if
index bf59ef73..bf59ef73 100644
--- a/policy/modules/contrib/passenger.if
+++ b/policy/modules/admin/passenger.if
diff --git a/policy/modules/contrib/passenger.te b/policy/modules/admin/passenger.te
index b6181456..b6181456 100644
--- a/policy/modules/contrib/passenger.te
+++ b/policy/modules/admin/passenger.te
diff --git a/policy/modules/contrib/portage.fc b/policy/modules/admin/portage.fc
index 7f6ab05b..7f6ab05b 100644
--- a/policy/modules/contrib/portage.fc
+++ b/policy/modules/admin/portage.fc
diff --git a/policy/modules/contrib/portage.if b/policy/modules/admin/portage.if
index 23c15ba7..23c15ba7 100644
--- a/policy/modules/contrib/portage.if
+++ b/policy/modules/admin/portage.if
diff --git a/policy/modules/contrib/portage.te b/policy/modules/admin/portage.te
index dbe5b760..dbe5b760 100644
--- a/policy/modules/contrib/portage.te
+++ b/policy/modules/admin/portage.te
diff --git a/policy/modules/contrib/prelink.fc b/policy/modules/admin/prelink.fc
index 8823d27a..8823d27a 100644
--- a/policy/modules/contrib/prelink.fc
+++ b/policy/modules/admin/prelink.fc
diff --git a/policy/modules/contrib/prelink.if b/policy/modules/admin/prelink.if
index 20d46979..20d46979 100644
--- a/policy/modules/contrib/prelink.if
+++ b/policy/modules/admin/prelink.if
diff --git a/policy/modules/contrib/prelink.te b/policy/modules/admin/prelink.te
index 43276472..43276472 100644
--- a/policy/modules/contrib/prelink.te
+++ b/policy/modules/admin/prelink.te
diff --git a/policy/modules/contrib/puppet.fc b/policy/modules/admin/puppet.fc
index 9bb4d9f2..9bb4d9f2 100644
--- a/policy/modules/contrib/puppet.fc
+++ b/policy/modules/admin/puppet.fc
diff --git a/policy/modules/contrib/puppet.if b/policy/modules/admin/puppet.if
index 135dafb2..135dafb2 100644
--- a/policy/modules/contrib/puppet.if
+++ b/policy/modules/admin/puppet.if
diff --git a/policy/modules/contrib/puppet.te b/policy/modules/admin/puppet.te
index 0e8161a2..0e8161a2 100644
--- a/policy/modules/contrib/puppet.te
+++ b/policy/modules/admin/puppet.te
diff --git a/policy/modules/contrib/quota.fc b/policy/modules/admin/quota.fc
index 28a21a8b..28a21a8b 100644
--- a/policy/modules/contrib/quota.fc
+++ b/policy/modules/admin/quota.fc
diff --git a/policy/modules/contrib/quota.if b/policy/modules/admin/quota.if
index 6f8a9250..6f8a9250 100644
--- a/policy/modules/contrib/quota.if
+++ b/policy/modules/admin/quota.if
diff --git a/policy/modules/contrib/quota.te b/policy/modules/admin/quota.te
index e85d6d8b..e85d6d8b 100644
--- a/policy/modules/contrib/quota.te
+++ b/policy/modules/admin/quota.te
diff --git a/policy/modules/contrib/readahead.fc b/policy/modules/admin/readahead.fc
index 823f5454..823f5454 100644
--- a/policy/modules/contrib/readahead.fc
+++ b/policy/modules/admin/readahead.fc
diff --git a/policy/modules/contrib/readahead.if b/policy/modules/admin/readahead.if
index 661bb88f..661bb88f 100644
--- a/policy/modules/contrib/readahead.if
+++ b/policy/modules/admin/readahead.if
diff --git a/policy/modules/contrib/readahead.te b/policy/modules/admin/readahead.te
index 4b40fe71..4b40fe71 100644
--- a/policy/modules/contrib/readahead.te
+++ b/policy/modules/admin/readahead.te
diff --git a/policy/modules/contrib/rkhunter.fc b/policy/modules/admin/rkhunter.fc
index d3c949c8..d3c949c8 100644
--- a/policy/modules/contrib/rkhunter.fc
+++ b/policy/modules/admin/rkhunter.fc
diff --git a/policy/modules/contrib/rkhunter.if b/policy/modules/admin/rkhunter.if
index 9537e1f5..9537e1f5 100644
--- a/policy/modules/contrib/rkhunter.if
+++ b/policy/modules/admin/rkhunter.if
diff --git a/policy/modules/contrib/rkhunter.te b/policy/modules/admin/rkhunter.te
index e87a37fe..e87a37fe 100644
--- a/policy/modules/contrib/rkhunter.te
+++ b/policy/modules/admin/rkhunter.te
diff --git a/policy/modules/contrib/rpm.fc b/policy/modules/admin/rpm.fc
index 9faf3c42..9faf3c42 100644
--- a/policy/modules/contrib/rpm.fc
+++ b/policy/modules/admin/rpm.fc
diff --git a/policy/modules/contrib/rpm.if b/policy/modules/admin/rpm.if
index d316410d..d316410d 100644
--- a/policy/modules/contrib/rpm.if
+++ b/policy/modules/admin/rpm.if
diff --git a/policy/modules/contrib/rpm.te b/policy/modules/admin/rpm.te
index aee8795b..aee8795b 100644
--- a/policy/modules/contrib/rpm.te
+++ b/policy/modules/admin/rpm.te
diff --git a/policy/modules/contrib/samhain.fc b/policy/modules/admin/samhain.fc
index 76b448c8..76b448c8 100644
--- a/policy/modules/contrib/samhain.fc
+++ b/policy/modules/admin/samhain.fc
diff --git a/policy/modules/contrib/samhain.if b/policy/modules/admin/samhain.if
index 8b6fb18b..8b6fb18b 100644
--- a/policy/modules/contrib/samhain.if
+++ b/policy/modules/admin/samhain.if
diff --git a/policy/modules/contrib/samhain.te b/policy/modules/admin/samhain.te
index 4d093b83..4d093b83 100644
--- a/policy/modules/contrib/samhain.te
+++ b/policy/modules/admin/samhain.te
diff --git a/policy/modules/contrib/sblim.fc b/policy/modules/admin/sblim.fc
index c2aed416..c2aed416 100644
--- a/policy/modules/contrib/sblim.fc
+++ b/policy/modules/admin/sblim.fc
diff --git a/policy/modules/contrib/sblim.if b/policy/modules/admin/sblim.if
index 00e2e69c..00e2e69c 100644
--- a/policy/modules/contrib/sblim.if
+++ b/policy/modules/admin/sblim.if
diff --git a/policy/modules/contrib/sblim.te b/policy/modules/admin/sblim.te
index d05bc1a6..d05bc1a6 100644
--- a/policy/modules/contrib/sblim.te
+++ b/policy/modules/admin/sblim.te
diff --git a/policy/modules/contrib/sectoolm.fc b/policy/modules/admin/sectoolm.fc
index 64a23945..64a23945 100644
--- a/policy/modules/contrib/sectoolm.fc
+++ b/policy/modules/admin/sectoolm.fc
diff --git a/policy/modules/contrib/sectoolm.if b/policy/modules/admin/sectoolm.if
index 9e9663b5..9e9663b5 100644
--- a/policy/modules/contrib/sectoolm.if
+++ b/policy/modules/admin/sectoolm.if
diff --git a/policy/modules/contrib/sectoolm.te b/policy/modules/admin/sectoolm.te
index ba3360f4..ba3360f4 100644
--- a/policy/modules/contrib/sectoolm.te
+++ b/policy/modules/admin/sectoolm.te
diff --git a/policy/modules/contrib/shorewall.fc b/policy/modules/admin/shorewall.fc
index aae46ecb..aae46ecb 100644
--- a/policy/modules/contrib/shorewall.fc
+++ b/policy/modules/admin/shorewall.fc
diff --git a/policy/modules/contrib/shorewall.if b/policy/modules/admin/shorewall.if
index 119ba279..119ba279 100644
--- a/policy/modules/contrib/shorewall.if
+++ b/policy/modules/admin/shorewall.if
diff --git a/policy/modules/contrib/shorewall.te b/policy/modules/admin/shorewall.te
index 429230e9..429230e9 100644
--- a/policy/modules/contrib/shorewall.te
+++ b/policy/modules/admin/shorewall.te
diff --git a/policy/modules/contrib/shutdown.fc b/policy/modules/admin/shutdown.fc
index 03a2230c..03a2230c 100644
--- a/policy/modules/contrib/shutdown.fc
+++ b/policy/modules/admin/shutdown.fc
diff --git a/policy/modules/contrib/shutdown.if b/policy/modules/admin/shutdown.if
index 819d19b0..819d19b0 100644
--- a/policy/modules/contrib/shutdown.if
+++ b/policy/modules/admin/shutdown.if
diff --git a/policy/modules/contrib/shutdown.te b/policy/modules/admin/shutdown.te
index 2168d03f..2168d03f 100644
--- a/policy/modules/contrib/shutdown.te
+++ b/policy/modules/admin/shutdown.te
diff --git a/policy/modules/contrib/smoltclient.fc b/policy/modules/admin/smoltclient.fc
index 1ff29582..1ff29582 100644
--- a/policy/modules/contrib/smoltclient.fc
+++ b/policy/modules/admin/smoltclient.fc
diff --git a/policy/modules/contrib/smoltclient.if b/policy/modules/admin/smoltclient.if
index 44a8ff1f..44a8ff1f 100644
--- a/policy/modules/contrib/smoltclient.if
+++ b/policy/modules/admin/smoltclient.if
diff --git a/policy/modules/contrib/smoltclient.te b/policy/modules/admin/smoltclient.te
index cc9aae0c..cc9aae0c 100644
--- a/policy/modules/contrib/smoltclient.te
+++ b/policy/modules/admin/smoltclient.te
diff --git a/policy/modules/contrib/sosreport.fc b/policy/modules/admin/sosreport.fc
index d445530f..d445530f 100644
--- a/policy/modules/contrib/sosreport.fc
+++ b/policy/modules/admin/sosreport.fc
diff --git a/policy/modules/contrib/sosreport.if b/policy/modules/admin/sosreport.if
index e1edfd96..e1edfd96 100644
--- a/policy/modules/contrib/sosreport.if
+++ b/policy/modules/admin/sosreport.if
diff --git a/policy/modules/contrib/sosreport.te b/policy/modules/admin/sosreport.te
index 0c7189ff..0c7189ff 100644
--- a/policy/modules/contrib/sosreport.te
+++ b/policy/modules/admin/sosreport.te
diff --git a/policy/modules/contrib/sxid.fc b/policy/modules/admin/sxid.fc
index 92d3ff1a..92d3ff1a 100644
--- a/policy/modules/contrib/sxid.fc
+++ b/policy/modules/admin/sxid.fc
diff --git a/policy/modules/contrib/sxid.if b/policy/modules/admin/sxid.if
index 83d2e94c..83d2e94c 100644
--- a/policy/modules/contrib/sxid.if
+++ b/policy/modules/admin/sxid.if
diff --git a/policy/modules/contrib/sxid.te b/policy/modules/admin/sxid.te
index ae7e27b3..ae7e27b3 100644
--- a/policy/modules/contrib/sxid.te
+++ b/policy/modules/admin/sxid.te
diff --git a/policy/modules/contrib/tboot.fc b/policy/modules/admin/tboot.fc
index 8c3e66c4..8c3e66c4 100644
--- a/policy/modules/contrib/tboot.fc
+++ b/policy/modules/admin/tboot.fc
diff --git a/policy/modules/contrib/tboot.if b/policy/modules/admin/tboot.if
index 0ffe6d83..0ffe6d83 100644
--- a/policy/modules/contrib/tboot.if
+++ b/policy/modules/admin/tboot.if
diff --git a/policy/modules/contrib/tboot.te b/policy/modules/admin/tboot.te
index 57b55ee9..57b55ee9 100644
--- a/policy/modules/contrib/tboot.te
+++ b/policy/modules/admin/tboot.te
diff --git a/policy/modules/contrib/tmpreaper.fc b/policy/modules/admin/tmpreaper.fc
index f4ce55e1..f4ce55e1 100644
--- a/policy/modules/contrib/tmpreaper.fc
+++ b/policy/modules/admin/tmpreaper.fc
diff --git a/policy/modules/contrib/tmpreaper.if b/policy/modules/admin/tmpreaper.if
index f621a275..f621a275 100644
--- a/policy/modules/contrib/tmpreaper.if
+++ b/policy/modules/admin/tmpreaper.if
diff --git a/policy/modules/contrib/tmpreaper.te b/policy/modules/admin/tmpreaper.te
index f4ce8dba..f4ce8dba 100644
--- a/policy/modules/contrib/tmpreaper.te
+++ b/policy/modules/admin/tmpreaper.te
diff --git a/policy/modules/contrib/tripwire.fc b/policy/modules/admin/tripwire.fc
index 77b259a4..77b259a4 100644
--- a/policy/modules/contrib/tripwire.fc
+++ b/policy/modules/admin/tripwire.fc
diff --git a/policy/modules/contrib/tripwire.if b/policy/modules/admin/tripwire.if
index a3a4d91b..a3a4d91b 100644
--- a/policy/modules/contrib/tripwire.if
+++ b/policy/modules/admin/tripwire.if
diff --git a/policy/modules/contrib/tripwire.te b/policy/modules/admin/tripwire.te
index ea532de5..ea532de5 100644
--- a/policy/modules/contrib/tripwire.te
+++ b/policy/modules/admin/tripwire.te
diff --git a/policy/modules/contrib/tzdata.fc b/policy/modules/admin/tzdata.fc
index c8448c68..c8448c68 100644
--- a/policy/modules/contrib/tzdata.fc
+++ b/policy/modules/admin/tzdata.fc
diff --git a/policy/modules/contrib/tzdata.if b/policy/modules/admin/tzdata.if
index 53ecd0de..53ecd0de 100644
--- a/policy/modules/contrib/tzdata.if
+++ b/policy/modules/admin/tzdata.if
diff --git a/policy/modules/contrib/tzdata.te b/policy/modules/admin/tzdata.te
index cbfb2299..cbfb2299 100644
--- a/policy/modules/contrib/tzdata.te
+++ b/policy/modules/admin/tzdata.te
diff --git a/policy/modules/contrib/updfstab.fc b/policy/modules/admin/updfstab.fc
index 27ac178d..27ac178d 100644
--- a/policy/modules/contrib/updfstab.fc
+++ b/policy/modules/admin/updfstab.fc
diff --git a/policy/modules/contrib/updfstab.if b/policy/modules/admin/updfstab.if
index ec0800bb..ec0800bb 100644
--- a/policy/modules/contrib/updfstab.if
+++ b/policy/modules/admin/updfstab.if
diff --git a/policy/modules/contrib/updfstab.te b/policy/modules/admin/updfstab.te
index e63ef612..e63ef612 100644
--- a/policy/modules/contrib/updfstab.te
+++ b/policy/modules/admin/updfstab.te
diff --git a/policy/modules/contrib/usbmodules.fc b/policy/modules/admin/usbmodules.fc
index 72188740..72188740 100644
--- a/policy/modules/contrib/usbmodules.fc
+++ b/policy/modules/admin/usbmodules.fc
diff --git a/policy/modules/contrib/usbmodules.if b/policy/modules/admin/usbmodules.if
index c5881ea5..c5881ea5 100644
--- a/policy/modules/contrib/usbmodules.if
+++ b/policy/modules/admin/usbmodules.if
diff --git a/policy/modules/contrib/usbmodules.te b/policy/modules/admin/usbmodules.te
index dd6bfe57..dd6bfe57 100644
--- a/policy/modules/contrib/usbmodules.te
+++ b/policy/modules/admin/usbmodules.te
diff --git a/policy/modules/contrib/vbetool.fc b/policy/modules/admin/vbetool.fc
index af6c0e38..af6c0e38 100644
--- a/policy/modules/contrib/vbetool.fc
+++ b/policy/modules/admin/vbetool.fc
diff --git a/policy/modules/contrib/vbetool.if b/policy/modules/admin/vbetool.if
index 4e648ba8..4e648ba8 100644
--- a/policy/modules/contrib/vbetool.if
+++ b/policy/modules/admin/vbetool.if
diff --git a/policy/modules/contrib/vbetool.te b/policy/modules/admin/vbetool.te
index b3757d02..b3757d02 100644
--- a/policy/modules/contrib/vbetool.te
+++ b/policy/modules/admin/vbetool.te
diff --git a/policy/modules/contrib/vpn.fc b/policy/modules/admin/vpn.fc
index 3e40c477..3e40c477 100644
--- a/policy/modules/contrib/vpn.fc
+++ b/policy/modules/admin/vpn.fc
diff --git a/policy/modules/contrib/vpn.if b/policy/modules/admin/vpn.if
index 7a7f3429..7a7f3429 100644
--- a/policy/modules/contrib/vpn.if
+++ b/policy/modules/admin/vpn.if
diff --git a/policy/modules/contrib/vpn.te b/policy/modules/admin/vpn.te
index 65de9063..65de9063 100644
--- a/policy/modules/contrib/vpn.te
+++ b/policy/modules/admin/vpn.te
diff --git a/policy/modules/contrib/ada.fc b/policy/modules/apps/ada.fc
index f1502de8..f1502de8 100644
--- a/policy/modules/contrib/ada.fc
+++ b/policy/modules/apps/ada.fc
diff --git a/policy/modules/contrib/ada.if b/policy/modules/apps/ada.if
index e514e8a9..e514e8a9 100644
--- a/policy/modules/contrib/ada.if
+++ b/policy/modules/apps/ada.if
diff --git a/policy/modules/contrib/ada.te b/policy/modules/apps/ada.te
index 8d42c97a..8d42c97a 100644
--- a/policy/modules/contrib/ada.te
+++ b/policy/modules/apps/ada.te
diff --git a/policy/modules/contrib/awstats.fc b/policy/modules/apps/awstats.fc
index 11e6d5ff..11e6d5ff 100644
--- a/policy/modules/contrib/awstats.fc
+++ b/policy/modules/apps/awstats.fc
diff --git a/policy/modules/contrib/awstats.if b/policy/modules/apps/awstats.if
index e86fe87f..e86fe87f 100644
--- a/policy/modules/contrib/awstats.if
+++ b/policy/modules/apps/awstats.if
diff --git a/policy/modules/contrib/awstats.te b/policy/modules/apps/awstats.te
index c1b16c39..c1b16c39 100644
--- a/policy/modules/contrib/awstats.te
+++ b/policy/modules/apps/awstats.te
diff --git a/policy/modules/contrib/calamaris.fc b/policy/modules/apps/calamaris.fc
index 1bf35dbb..1bf35dbb 100644
--- a/policy/modules/contrib/calamaris.fc
+++ b/policy/modules/apps/calamaris.fc
diff --git a/policy/modules/contrib/calamaris.if b/policy/modules/apps/calamaris.if
index cd9c5287..cd9c5287 100644
--- a/policy/modules/contrib/calamaris.if
+++ b/policy/modules/apps/calamaris.if
diff --git a/policy/modules/contrib/calamaris.te b/policy/modules/apps/calamaris.te
index 7e574604..7e574604 100644
--- a/policy/modules/contrib/calamaris.te
+++ b/policy/modules/apps/calamaris.te
diff --git a/policy/modules/contrib/cdrecord.fc b/policy/modules/apps/cdrecord.fc
index 819562d0..819562d0 100644
--- a/policy/modules/contrib/cdrecord.fc
+++ b/policy/modules/apps/cdrecord.fc
diff --git a/policy/modules/contrib/cdrecord.if b/policy/modules/apps/cdrecord.if
index fbc20f69..fbc20f69 100644
--- a/policy/modules/contrib/cdrecord.if
+++ b/policy/modules/apps/cdrecord.if
diff --git a/policy/modules/contrib/cdrecord.te b/policy/modules/apps/cdrecord.te
index 4af7717a..4af7717a 100644
--- a/policy/modules/contrib/cdrecord.te
+++ b/policy/modules/apps/cdrecord.te
diff --git a/policy/modules/contrib/cpufreqselector.fc b/policy/modules/apps/cpufreqselector.fc
index b187f0f7..b187f0f7 100644
--- a/policy/modules/contrib/cpufreqselector.fc
+++ b/policy/modules/apps/cpufreqselector.fc
diff --git a/policy/modules/contrib/cpufreqselector.if b/policy/modules/apps/cpufreqselector.if
index 932fa532..932fa532 100644
--- a/policy/modules/contrib/cpufreqselector.if
+++ b/policy/modules/apps/cpufreqselector.if
diff --git a/policy/modules/contrib/cpufreqselector.te b/policy/modules/apps/cpufreqselector.te
index 6cedb872..6cedb872 100644
--- a/policy/modules/contrib/cpufreqselector.te
+++ b/policy/modules/apps/cpufreqselector.te
diff --git a/policy/modules/contrib/evolution.fc b/policy/modules/apps/evolution.fc
index 7f5e8980..7f5e8980 100644
--- a/policy/modules/contrib/evolution.fc
+++ b/policy/modules/apps/evolution.fc
diff --git a/policy/modules/contrib/evolution.if b/policy/modules/apps/evolution.if
index 32cc77f2..32cc77f2 100644
--- a/policy/modules/contrib/evolution.if
+++ b/policy/modules/apps/evolution.if
diff --git a/policy/modules/contrib/evolution.te b/policy/modules/apps/evolution.te
index e8362b8a..e8362b8a 100644
--- a/policy/modules/contrib/evolution.te
+++ b/policy/modules/apps/evolution.te
diff --git a/policy/modules/contrib/firewallgui.fc b/policy/modules/apps/firewallgui.fc
index 94ab048b..94ab048b 100644
--- a/policy/modules/contrib/firewallgui.fc
+++ b/policy/modules/apps/firewallgui.fc
diff --git a/policy/modules/contrib/firewallgui.if b/policy/modules/apps/firewallgui.if
index e6866d1f..e6866d1f 100644
--- a/policy/modules/contrib/firewallgui.if
+++ b/policy/modules/apps/firewallgui.if
diff --git a/policy/modules/contrib/firewallgui.te b/policy/modules/apps/firewallgui.te
index 20945466..20945466 100644
--- a/policy/modules/contrib/firewallgui.te
+++ b/policy/modules/apps/firewallgui.te
diff --git a/policy/modules/contrib/games.fc b/policy/modules/apps/games.fc
index 5e2e4f2a..5e2e4f2a 100644
--- a/policy/modules/contrib/games.fc
+++ b/policy/modules/apps/games.fc
diff --git a/policy/modules/contrib/games.if b/policy/modules/apps/games.if
index d29977b2..d29977b2 100644
--- a/policy/modules/contrib/games.if
+++ b/policy/modules/apps/games.if
diff --git a/policy/modules/contrib/games.te b/policy/modules/apps/games.te
index 0cdebe62..0cdebe62 100644
--- a/policy/modules/contrib/games.te
+++ b/policy/modules/apps/games.te
diff --git a/policy/modules/contrib/gift.fc b/policy/modules/apps/gift.fc
index e27fa519..e27fa519 100644
--- a/policy/modules/contrib/gift.fc
+++ b/policy/modules/apps/gift.fc
diff --git a/policy/modules/contrib/gift.if b/policy/modules/apps/gift.if
index e9023e56..e9023e56 100644
--- a/policy/modules/contrib/gift.if
+++ b/policy/modules/apps/gift.if
diff --git a/policy/modules/contrib/gift.te b/policy/modules/apps/gift.te
index 21692909..21692909 100644
--- a/policy/modules/contrib/gift.te
+++ b/policy/modules/apps/gift.te
diff --git a/policy/modules/contrib/gitosis.fc b/policy/modules/apps/gitosis.fc
index b64de321..b64de321 100644
--- a/policy/modules/contrib/gitosis.fc
+++ b/policy/modules/apps/gitosis.fc
diff --git a/policy/modules/contrib/gitosis.if b/policy/modules/apps/gitosis.if
index f8ca38cb..f8ca38cb 100644
--- a/policy/modules/contrib/gitosis.if
+++ b/policy/modules/apps/gitosis.if
diff --git a/policy/modules/contrib/gitosis.te b/policy/modules/apps/gitosis.te
index 582db0a2..582db0a2 100644
--- a/policy/modules/contrib/gitosis.te
+++ b/policy/modules/apps/gitosis.te
diff --git a/policy/modules/contrib/gnome.fc b/policy/modules/apps/gnome.fc
index 81e9716a..81e9716a 100644
--- a/policy/modules/contrib/gnome.fc
+++ b/policy/modules/apps/gnome.fc
diff --git a/policy/modules/contrib/gnome.if b/policy/modules/apps/gnome.if
index 8b27d15a..8b27d15a 100644
--- a/policy/modules/contrib/gnome.if
+++ b/policy/modules/apps/gnome.if
diff --git a/policy/modules/contrib/gnome.te b/policy/modules/apps/gnome.te
index 340e394a..340e394a 100644
--- a/policy/modules/contrib/gnome.te
+++ b/policy/modules/apps/gnome.te
diff --git a/policy/modules/contrib/gpg.fc b/policy/modules/apps/gpg.fc
index c9362398..c9362398 100644
--- a/policy/modules/contrib/gpg.fc
+++ b/policy/modules/apps/gpg.fc
diff --git a/policy/modules/contrib/gpg.if b/policy/modules/apps/gpg.if
index 78efb186..78efb186 100644
--- a/policy/modules/contrib/gpg.if
+++ b/policy/modules/apps/gpg.if
diff --git a/policy/modules/contrib/gpg.te b/policy/modules/apps/gpg.te
index e763b76b..e763b76b 100644
--- a/policy/modules/contrib/gpg.te
+++ b/policy/modules/apps/gpg.te
diff --git a/policy/modules/contrib/irc.fc b/policy/modules/apps/irc.fc
index 48e7739f..48e7739f 100644
--- a/policy/modules/contrib/irc.fc
+++ b/policy/modules/apps/irc.fc
diff --git a/policy/modules/contrib/irc.if b/policy/modules/apps/irc.if
index ac00fb0f..ac00fb0f 100644
--- a/policy/modules/contrib/irc.if
+++ b/policy/modules/apps/irc.if
diff --git a/policy/modules/contrib/irc.te b/policy/modules/apps/irc.te
index 99ddaecb..99ddaecb 100644
--- a/policy/modules/contrib/irc.te
+++ b/policy/modules/apps/irc.te
diff --git a/policy/modules/contrib/java.fc b/policy/modules/apps/java.fc
index d2984281..d2984281 100644
--- a/policy/modules/contrib/java.fc
+++ b/policy/modules/apps/java.fc
diff --git a/policy/modules/contrib/java.if b/policy/modules/apps/java.if
index c981fc41..c981fc41 100644
--- a/policy/modules/contrib/java.if
+++ b/policy/modules/apps/java.if
diff --git a/policy/modules/contrib/java.te b/policy/modules/apps/java.te
index c9b2487e..c9b2487e 100644
--- a/policy/modules/contrib/java.te
+++ b/policy/modules/apps/java.te
diff --git a/policy/modules/contrib/libmtp.fc b/policy/modules/apps/libmtp.fc
index f8b91c24..f8b91c24 100644
--- a/policy/modules/contrib/libmtp.fc
+++ b/policy/modules/apps/libmtp.fc
diff --git a/policy/modules/contrib/libmtp.if b/policy/modules/apps/libmtp.if
index c010842d..c010842d 100644
--- a/policy/modules/contrib/libmtp.if
+++ b/policy/modules/apps/libmtp.if
diff --git a/policy/modules/contrib/libmtp.te b/policy/modules/apps/libmtp.te
index 7eb27c40..7eb27c40 100644
--- a/policy/modules/contrib/libmtp.te
+++ b/policy/modules/apps/libmtp.te
diff --git a/policy/modules/contrib/lightsquid.fc b/policy/modules/apps/lightsquid.fc
index 044390c6..044390c6 100644
--- a/policy/modules/contrib/lightsquid.fc
+++ b/policy/modules/apps/lightsquid.fc
diff --git a/policy/modules/contrib/lightsquid.if b/policy/modules/apps/lightsquid.if
index 33a28b9a..33a28b9a 100644
--- a/policy/modules/contrib/lightsquid.if
+++ b/policy/modules/apps/lightsquid.if
diff --git a/policy/modules/contrib/lightsquid.te b/policy/modules/apps/lightsquid.te
index 09c4f27b..09c4f27b 100644
--- a/policy/modules/contrib/lightsquid.te
+++ b/policy/modules/apps/lightsquid.te
diff --git a/policy/modules/contrib/livecd.fc b/policy/modules/apps/livecd.fc
index 34937fcf..34937fcf 100644
--- a/policy/modules/contrib/livecd.fc
+++ b/policy/modules/apps/livecd.fc
diff --git a/policy/modules/contrib/livecd.if b/policy/modules/apps/livecd.if
index e3541811..e3541811 100644
--- a/policy/modules/contrib/livecd.if
+++ b/policy/modules/apps/livecd.if
diff --git a/policy/modules/contrib/livecd.te b/policy/modules/apps/livecd.te
index 2f974bf8..2f974bf8 100644
--- a/policy/modules/contrib/livecd.te
+++ b/policy/modules/apps/livecd.te
diff --git a/policy/modules/contrib/loadkeys.fc b/policy/modules/apps/loadkeys.fc
index 38f91fed..38f91fed 100644
--- a/policy/modules/contrib/loadkeys.fc
+++ b/policy/modules/apps/loadkeys.fc
diff --git a/policy/modules/contrib/loadkeys.if b/policy/modules/apps/loadkeys.if
index 101c925d..101c925d 100644
--- a/policy/modules/contrib/loadkeys.if
+++ b/policy/modules/apps/loadkeys.if
diff --git a/policy/modules/contrib/loadkeys.te b/policy/modules/apps/loadkeys.te
index 1976e2cb..1976e2cb 100644
--- a/policy/modules/contrib/loadkeys.te
+++ b/policy/modules/apps/loadkeys.te
diff --git a/policy/modules/contrib/lockdev.fc b/policy/modules/apps/lockdev.fc
index 65ed30df..65ed30df 100644
--- a/policy/modules/contrib/lockdev.fc
+++ b/policy/modules/apps/lockdev.fc
diff --git a/policy/modules/contrib/lockdev.if b/policy/modules/apps/lockdev.if
index 4313b8bc..4313b8bc 100644
--- a/policy/modules/contrib/lockdev.if
+++ b/policy/modules/apps/lockdev.if
diff --git a/policy/modules/contrib/lockdev.te b/policy/modules/apps/lockdev.te
index b9c34625..b9c34625 100644
--- a/policy/modules/contrib/lockdev.te
+++ b/policy/modules/apps/lockdev.te
diff --git a/policy/modules/contrib/man2html.fc b/policy/modules/apps/man2html.fc
index 82f62555..82f62555 100644
--- a/policy/modules/contrib/man2html.fc
+++ b/policy/modules/apps/man2html.fc
diff --git a/policy/modules/contrib/man2html.if b/policy/modules/apps/man2html.if
index 54ec04d3..54ec04d3 100644
--- a/policy/modules/contrib/man2html.if
+++ b/policy/modules/apps/man2html.if
diff --git a/policy/modules/contrib/man2html.te b/policy/modules/apps/man2html.te
index e08c55d4..e08c55d4 100644
--- a/policy/modules/contrib/man2html.te
+++ b/policy/modules/apps/man2html.te
diff --git a/policy/modules/contrib/mandb.fc b/policy/modules/apps/mandb.fc
index d92a58fd..d92a58fd 100644
--- a/policy/modules/contrib/mandb.fc
+++ b/policy/modules/apps/mandb.fc
diff --git a/policy/modules/contrib/mandb.if b/policy/modules/apps/mandb.if
index e880655d..e880655d 100644
--- a/policy/modules/contrib/mandb.if
+++ b/policy/modules/apps/mandb.if
diff --git a/policy/modules/contrib/mandb.te b/policy/modules/apps/mandb.te
index 48c17bb8..48c17bb8 100644
--- a/policy/modules/contrib/mandb.te
+++ b/policy/modules/apps/mandb.te
diff --git a/policy/modules/contrib/mono.fc b/policy/modules/apps/mono.fc
index b01bc913..b01bc913 100644
--- a/policy/modules/contrib/mono.fc
+++ b/policy/modules/apps/mono.fc
diff --git a/policy/modules/contrib/mono.if b/policy/modules/apps/mono.if
index 70fe6457..70fe6457 100644
--- a/policy/modules/contrib/mono.if
+++ b/policy/modules/apps/mono.if
diff --git a/policy/modules/contrib/mono.te b/policy/modules/apps/mono.te
index 3bb756a5..3bb756a5 100644
--- a/policy/modules/contrib/mono.te
+++ b/policy/modules/apps/mono.te
diff --git a/policy/modules/contrib/mozilla.fc b/policy/modules/apps/mozilla.fc
index 15aa39b3..15aa39b3 100644
--- a/policy/modules/contrib/mozilla.fc
+++ b/policy/modules/apps/mozilla.fc
diff --git a/policy/modules/contrib/mozilla.if b/policy/modules/apps/mozilla.if
index 178d68d8..178d68d8 100644
--- a/policy/modules/contrib/mozilla.if
+++ b/policy/modules/apps/mozilla.if
diff --git a/policy/modules/contrib/mozilla.te b/policy/modules/apps/mozilla.te
index 807d3431..807d3431 100644
--- a/policy/modules/contrib/mozilla.te
+++ b/policy/modules/apps/mozilla.te
diff --git a/policy/modules/contrib/mplayer.fc b/policy/modules/apps/mplayer.fc
index 03ace714..03ace714 100644
--- a/policy/modules/contrib/mplayer.fc
+++ b/policy/modules/apps/mplayer.fc
diff --git a/policy/modules/contrib/mplayer.if b/policy/modules/apps/mplayer.if
index 861d5e97..861d5e97 100644
--- a/policy/modules/contrib/mplayer.if
+++ b/policy/modules/apps/mplayer.if
diff --git a/policy/modules/contrib/mplayer.te b/policy/modules/apps/mplayer.te
index 91b9569d..91b9569d 100644
--- a/policy/modules/contrib/mplayer.te
+++ b/policy/modules/apps/mplayer.te
diff --git a/policy/modules/contrib/openoffice.fc b/policy/modules/apps/openoffice.fc
index 6613bb44..6613bb44 100644
--- a/policy/modules/contrib/openoffice.fc
+++ b/policy/modules/apps/openoffice.fc
diff --git a/policy/modules/contrib/openoffice.if b/policy/modules/apps/openoffice.if
index 5580aaf7..5580aaf7 100644
--- a/policy/modules/contrib/openoffice.if
+++ b/policy/modules/apps/openoffice.if
diff --git a/policy/modules/contrib/openoffice.te b/policy/modules/apps/openoffice.te
index 2cb4d6d2..2cb4d6d2 100644
--- a/policy/modules/contrib/openoffice.te
+++ b/policy/modules/apps/openoffice.te
diff --git a/policy/modules/contrib/podsleuth.fc b/policy/modules/apps/podsleuth.fc
index c32a4f30..c32a4f30 100644
--- a/policy/modules/contrib/podsleuth.fc
+++ b/policy/modules/apps/podsleuth.fc
diff --git a/policy/modules/contrib/podsleuth.if b/policy/modules/apps/podsleuth.if
index a9427b4a..a9427b4a 100644
--- a/policy/modules/contrib/podsleuth.if
+++ b/policy/modules/apps/podsleuth.if
diff --git a/policy/modules/contrib/podsleuth.te b/policy/modules/apps/podsleuth.te
index 83dc77b5..83dc77b5 100644
--- a/policy/modules/contrib/podsleuth.te
+++ b/policy/modules/apps/podsleuth.te
diff --git a/policy/modules/contrib/ptchown.fc b/policy/modules/apps/ptchown.fc
index dd96822d..dd96822d 100644
--- a/policy/modules/contrib/ptchown.fc
+++ b/policy/modules/apps/ptchown.fc
diff --git a/policy/modules/contrib/ptchown.if b/policy/modules/apps/ptchown.if
index 97a1e7b1..97a1e7b1 100644
--- a/policy/modules/contrib/ptchown.if
+++ b/policy/modules/apps/ptchown.if
diff --git a/policy/modules/contrib/ptchown.te b/policy/modules/apps/ptchown.te
index 28d2abc0..28d2abc0 100644
--- a/policy/modules/contrib/ptchown.te
+++ b/policy/modules/apps/ptchown.te
diff --git a/policy/modules/contrib/pulseaudio.fc b/policy/modules/apps/pulseaudio.fc
index 0d9bc354..0d9bc354 100644
--- a/policy/modules/contrib/pulseaudio.fc
+++ b/policy/modules/apps/pulseaudio.fc
diff --git a/policy/modules/contrib/pulseaudio.if b/policy/modules/apps/pulseaudio.if
index ca005df0..ca005df0 100644
--- a/policy/modules/contrib/pulseaudio.if
+++ b/policy/modules/apps/pulseaudio.if
diff --git a/policy/modules/contrib/pulseaudio.te b/policy/modules/apps/pulseaudio.te
index 1a58bde5..1a58bde5 100644
--- a/policy/modules/contrib/pulseaudio.te
+++ b/policy/modules/apps/pulseaudio.te
diff --git a/policy/modules/contrib/qemu.fc b/policy/modules/apps/qemu.fc
index 1fc79800..1fc79800 100644
--- a/policy/modules/contrib/qemu.fc
+++ b/policy/modules/apps/qemu.fc
diff --git a/policy/modules/contrib/qemu.if b/policy/modules/apps/qemu.if
index b6d8e1c2..b6d8e1c2 100644
--- a/policy/modules/contrib/qemu.if
+++ b/policy/modules/apps/qemu.if
diff --git a/policy/modules/contrib/qemu.te b/policy/modules/apps/qemu.te
index a27624d8..a27624d8 100644
--- a/policy/modules/contrib/qemu.te
+++ b/policy/modules/apps/qemu.te
diff --git a/policy/modules/contrib/rssh.fc b/policy/modules/apps/rssh.fc
index c0768426..c0768426 100644
--- a/policy/modules/contrib/rssh.fc
+++ b/policy/modules/apps/rssh.fc
diff --git a/policy/modules/contrib/rssh.if b/policy/modules/apps/rssh.if
index 6ecadcbc..6ecadcbc 100644
--- a/policy/modules/contrib/rssh.if
+++ b/policy/modules/apps/rssh.if
diff --git a/policy/modules/contrib/rssh.te b/policy/modules/apps/rssh.te
index 91a89f65..91a89f65 100644
--- a/policy/modules/contrib/rssh.te
+++ b/policy/modules/apps/rssh.te
diff --git a/policy/modules/contrib/sambagui.fc b/policy/modules/apps/sambagui.fc
index 2640dcf0..2640dcf0 100644
--- a/policy/modules/contrib/sambagui.fc
+++ b/policy/modules/apps/sambagui.fc
diff --git a/policy/modules/contrib/sambagui.if b/policy/modules/apps/sambagui.if
index d9c7bb65..d9c7bb65 100644
--- a/policy/modules/contrib/sambagui.if
+++ b/policy/modules/apps/sambagui.if
diff --git a/policy/modules/contrib/sambagui.te b/policy/modules/apps/sambagui.te
index e18b0a28..e18b0a28 100644
--- a/policy/modules/contrib/sambagui.te
+++ b/policy/modules/apps/sambagui.te
diff --git a/policy/modules/contrib/screen.fc b/policy/modules/apps/screen.fc
index 7196c598..7196c598 100644
--- a/policy/modules/contrib/screen.fc
+++ b/policy/modules/apps/screen.fc
diff --git a/policy/modules/contrib/screen.if b/policy/modules/apps/screen.if
index 884e261a..884e261a 100644
--- a/policy/modules/contrib/screen.if
+++ b/policy/modules/apps/screen.if
diff --git a/policy/modules/contrib/screen.te b/policy/modules/apps/screen.te
index 845c61c8..845c61c8 100644
--- a/policy/modules/contrib/screen.te
+++ b/policy/modules/apps/screen.te
diff --git a/policy/modules/contrib/slocate.fc b/policy/modules/apps/slocate.fc
index 264e1bed..264e1bed 100644
--- a/policy/modules/contrib/slocate.fc
+++ b/policy/modules/apps/slocate.fc
diff --git a/policy/modules/contrib/slocate.if b/policy/modules/apps/slocate.if
index 82de1b68..82de1b68 100644
--- a/policy/modules/contrib/slocate.if
+++ b/policy/modules/apps/slocate.if
diff --git a/policy/modules/contrib/slocate.te b/policy/modules/apps/slocate.te
index 2bf0fed4..2bf0fed4 100644
--- a/policy/modules/contrib/slocate.te
+++ b/policy/modules/apps/slocate.te
diff --git a/policy/modules/contrib/syncthing.fc b/policy/modules/apps/syncthing.fc
index e95b451e..e95b451e 100644
--- a/policy/modules/contrib/syncthing.fc
+++ b/policy/modules/apps/syncthing.fc
diff --git a/policy/modules/contrib/syncthing.if b/policy/modules/apps/syncthing.if
index 2c0eb24c..2c0eb24c 100644
--- a/policy/modules/contrib/syncthing.if
+++ b/policy/modules/apps/syncthing.if
diff --git a/policy/modules/contrib/syncthing.te b/policy/modules/apps/syncthing.te
index 5799b8e2..5799b8e2 100644
--- a/policy/modules/contrib/syncthing.te
+++ b/policy/modules/apps/syncthing.te
diff --git a/policy/modules/contrib/telepathy.fc b/policy/modules/apps/telepathy.fc
index 4600d815..4600d815 100644
--- a/policy/modules/contrib/telepathy.fc
+++ b/policy/modules/apps/telepathy.fc
diff --git a/policy/modules/contrib/telepathy.if b/policy/modules/apps/telepathy.if
index d81dc193..d81dc193 100644
--- a/policy/modules/contrib/telepathy.if
+++ b/policy/modules/apps/telepathy.if
diff --git a/policy/modules/contrib/telepathy.te b/policy/modules/apps/telepathy.te
index 8f0997d9..8f0997d9 100644
--- a/policy/modules/contrib/telepathy.te
+++ b/policy/modules/apps/telepathy.te
diff --git a/policy/modules/contrib/thunderbird.fc b/policy/modules/apps/thunderbird.fc
index eacb7a17..eacb7a17 100644
--- a/policy/modules/contrib/thunderbird.fc
+++ b/policy/modules/apps/thunderbird.fc
diff --git a/policy/modules/contrib/thunderbird.if b/policy/modules/apps/thunderbird.if
index 9c5f0b91..9c5f0b91 100644
--- a/policy/modules/contrib/thunderbird.if
+++ b/policy/modules/apps/thunderbird.if
diff --git a/policy/modules/contrib/thunderbird.te b/policy/modules/apps/thunderbird.te
index 1f39efce..1f39efce 100644
--- a/policy/modules/contrib/thunderbird.te
+++ b/policy/modules/apps/thunderbird.te
diff --git a/policy/modules/contrib/tvtime.fc b/policy/modules/apps/tvtime.fc
index 92cb760a..92cb760a 100644
--- a/policy/modules/contrib/tvtime.fc
+++ b/policy/modules/apps/tvtime.fc
diff --git a/policy/modules/contrib/tvtime.if b/policy/modules/apps/tvtime.if
index 1bb0f7c7..1bb0f7c7 100644
--- a/policy/modules/contrib/tvtime.if
+++ b/policy/modules/apps/tvtime.if
diff --git a/policy/modules/contrib/tvtime.te b/policy/modules/apps/tvtime.te
index 1b138dd8..1b138dd8 100644
--- a/policy/modules/contrib/tvtime.te
+++ b/policy/modules/apps/tvtime.te
diff --git a/policy/modules/contrib/uml.fc b/policy/modules/apps/uml.fc
index 567966e0..567966e0 100644
--- a/policy/modules/contrib/uml.fc
+++ b/policy/modules/apps/uml.fc
diff --git a/policy/modules/contrib/uml.if b/policy/modules/apps/uml.if
index ab5c1d0d..ab5c1d0d 100644
--- a/policy/modules/contrib/uml.if
+++ b/policy/modules/apps/uml.if
diff --git a/policy/modules/contrib/uml.te b/policy/modules/apps/uml.te
index 0e2f4c99..0e2f4c99 100644
--- a/policy/modules/contrib/uml.te
+++ b/policy/modules/apps/uml.te
diff --git a/policy/modules/contrib/userhelper.fc b/policy/modules/apps/userhelper.fc
index 6a2cd2f0..6a2cd2f0 100644
--- a/policy/modules/contrib/userhelper.fc
+++ b/policy/modules/apps/userhelper.fc
diff --git a/policy/modules/contrib/userhelper.if b/policy/modules/apps/userhelper.if
index 2cdbf67e..2cdbf67e 100644
--- a/policy/modules/contrib/userhelper.if
+++ b/policy/modules/apps/userhelper.if
diff --git a/policy/modules/contrib/userhelper.te b/policy/modules/apps/userhelper.te
index bffbc94c..bffbc94c 100644
--- a/policy/modules/contrib/userhelper.te
+++ b/policy/modules/apps/userhelper.te
diff --git a/policy/modules/contrib/usernetctl.fc b/policy/modules/apps/usernetctl.fc
index 72f38b1b..72f38b1b 100644
--- a/policy/modules/contrib/usernetctl.fc
+++ b/policy/modules/apps/usernetctl.fc
diff --git a/policy/modules/contrib/usernetctl.if b/policy/modules/apps/usernetctl.if
index 7deec55c..7deec55c 100644
--- a/policy/modules/contrib/usernetctl.if
+++ b/policy/modules/apps/usernetctl.if
diff --git a/policy/modules/contrib/usernetctl.te b/policy/modules/apps/usernetctl.te
index 4ef6f9b2..4ef6f9b2 100644
--- a/policy/modules/contrib/usernetctl.te
+++ b/policy/modules/apps/usernetctl.te
diff --git a/policy/modules/contrib/vlock.fc b/policy/modules/apps/vlock.fc
index f668cde9..f668cde9 100644
--- a/policy/modules/contrib/vlock.fc
+++ b/policy/modules/apps/vlock.fc
diff --git a/policy/modules/contrib/vlock.if b/policy/modules/apps/vlock.if
index d5fc09ac..d5fc09ac 100644
--- a/policy/modules/contrib/vlock.if
+++ b/policy/modules/apps/vlock.if
diff --git a/policy/modules/contrib/vlock.te b/policy/modules/apps/vlock.te
index f025f7c1..f025f7c1 100644
--- a/policy/modules/contrib/vlock.te
+++ b/policy/modules/apps/vlock.te
diff --git a/policy/modules/contrib/vmware.fc b/policy/modules/apps/vmware.fc
index b1557721..b1557721 100644
--- a/policy/modules/contrib/vmware.fc
+++ b/policy/modules/apps/vmware.fc
diff --git a/policy/modules/contrib/vmware.if b/policy/modules/apps/vmware.if
index 20a1fb29..20a1fb29 100644
--- a/policy/modules/contrib/vmware.if
+++ b/policy/modules/apps/vmware.if
diff --git a/policy/modules/contrib/vmware.te b/policy/modules/apps/vmware.te
index 441fe9ef..441fe9ef 100644
--- a/policy/modules/contrib/vmware.te
+++ b/policy/modules/apps/vmware.te
diff --git a/policy/modules/contrib/webalizer.fc b/policy/modules/apps/webalizer.fc
index 64baf679..64baf679 100644
--- a/policy/modules/contrib/webalizer.fc
+++ b/policy/modules/apps/webalizer.fc
diff --git a/policy/modules/contrib/webalizer.if b/policy/modules/apps/webalizer.if
index cc831b6d..cc831b6d 100644
--- a/policy/modules/contrib/webalizer.if
+++ b/policy/modules/apps/webalizer.if
diff --git a/policy/modules/contrib/webalizer.te b/policy/modules/apps/webalizer.te
index da454655..da454655 100644
--- a/policy/modules/contrib/webalizer.te
+++ b/policy/modules/apps/webalizer.te
diff --git a/policy/modules/contrib/wine.fc b/policy/modules/apps/wine.fc
index 786a51e2..786a51e2 100644
--- a/policy/modules/contrib/wine.fc
+++ b/policy/modules/apps/wine.fc
diff --git a/policy/modules/contrib/wine.if b/policy/modules/apps/wine.if
index 2dba6216..2dba6216 100644
--- a/policy/modules/contrib/wine.if
+++ b/policy/modules/apps/wine.if
diff --git a/policy/modules/contrib/wine.te b/policy/modules/apps/wine.te
index 8ec8c969..8ec8c969 100644
--- a/policy/modules/contrib/wine.te
+++ b/policy/modules/apps/wine.te
diff --git a/policy/modules/contrib/wireshark.fc b/policy/modules/apps/wireshark.fc
index 7b07a705..7b07a705 100644
--- a/policy/modules/contrib/wireshark.fc
+++ b/policy/modules/apps/wireshark.fc
diff --git a/policy/modules/contrib/wireshark.if b/policy/modules/apps/wireshark.if
index 9cad4afe..9cad4afe 100644
--- a/policy/modules/contrib/wireshark.if
+++ b/policy/modules/apps/wireshark.if
diff --git a/policy/modules/contrib/wireshark.te b/policy/modules/apps/wireshark.te
index 1f2641f4..1f2641f4 100644
--- a/policy/modules/contrib/wireshark.te
+++ b/policy/modules/apps/wireshark.te
diff --git a/policy/modules/contrib/wm.fc b/policy/modules/apps/wm.fc
index 05129fea..05129fea 100644
--- a/policy/modules/contrib/wm.fc
+++ b/policy/modules/apps/wm.fc
diff --git a/policy/modules/contrib/wm.if b/policy/modules/apps/wm.if
index 260a7b01..260a7b01 100644
--- a/policy/modules/contrib/wm.if
+++ b/policy/modules/apps/wm.if
diff --git a/policy/modules/contrib/wm.te b/policy/modules/apps/wm.te
index 4b7e88ad..4b7e88ad 100644
--- a/policy/modules/contrib/wm.te
+++ b/policy/modules/apps/wm.te
diff --git a/policy/modules/contrib/xscreensaver.fc b/policy/modules/apps/xscreensaver.fc
index 70b71a5c..70b71a5c 100644
--- a/policy/modules/contrib/xscreensaver.fc
+++ b/policy/modules/apps/xscreensaver.fc
diff --git a/policy/modules/contrib/xscreensaver.if b/policy/modules/apps/xscreensaver.if
index 704c3bdd..704c3bdd 100644
--- a/policy/modules/contrib/xscreensaver.if
+++ b/policy/modules/apps/xscreensaver.if
diff --git a/policy/modules/contrib/xscreensaver.te b/policy/modules/apps/xscreensaver.te
index 4e67161c..4e67161c 100644
--- a/policy/modules/contrib/xscreensaver.te
+++ b/policy/modules/apps/xscreensaver.te
diff --git a/policy/modules/contrib/yam.fc b/policy/modules/apps/yam.fc
index 74401d54..74401d54 100644
--- a/policy/modules/contrib/yam.fc
+++ b/policy/modules/apps/yam.fc
diff --git a/policy/modules/contrib/yam.if b/policy/modules/apps/yam.if
index ba7c8c88..ba7c8c88 100644
--- a/policy/modules/contrib/yam.if
+++ b/policy/modules/apps/yam.if
diff --git a/policy/modules/contrib/yam.te b/policy/modules/apps/yam.te
index b451e6e8..b451e6e8 100644
--- a/policy/modules/contrib/yam.te
+++ b/policy/modules/apps/yam.te
diff --git a/policy/modules/contrib/Changelog b/policy/modules/contrib/Changelog
deleted file mode 100644
index 1596ba77..00000000
--- a/policy/modules/contrib/Changelog
+++ /dev/null
@@ -1,2210 +0,0 @@
-* Sun Jan 14 2018 Chris PeBenito <pebenito@ieee.org> - 2.20180114
-Chad Hanson (1):
-      Allow rpm to relabel files at all levels
-
-Chris PeBenito (46):
-      Remove deprecated interfaces more than one year old.
-      Remove complement and wildcard in allow rules.
-      Merge branch 'master' of git://github.com/teg/refpolicy-contrib
-      dbus: Module version bump for dbus-broker patch from Tom Gundersen.
-      Module version bump for patches from Guido Trentalancia.
-      Module version bumps for patches from David Sugar.
-      dhcp, logrotate: Module version bump.
-      Module version bumps for chkrootkit, dkim, dmidecode, portage, and
-         rkhunter.
-      Module version bumps.
-      spamassassin: Move lines.
-      mandb, spamassassin: Module version bumps.
-      spamassassin: Fix build error.
-      spamassassin: Add missing requirement in spamassassin_admin().
-      dphysswapfile: Module version bump.
-      gpg, pulseaudio, rpc: Module version bump.
-      dnsmasq, gnome, mon, mta, openoffice, pulseaudio, wm: Version bumps.
-      Revert "postfix: Some table drivers (notably cdb) need to mmap() their
-         databases"
-      java, mozilla, mta, postfix: Module version bump.
-      portage: Fix usr_t map interface usage.
-      apache, portage: Module version bump.
-      dbus, policykit, wm: Module version bump.
-      dbus: Add comment.
-      Merge branch 'nm_audit' of git://github.com/bigon/refpolicy-contrib
-      networkmanager: Module version bump.
-      virt: Move a line.
-      alsa, mon, virt: Module version bump.
-      gpg, mozilla, rpc: Module version bump.
-      Several module version bumps.
-      blueman, evolution, gpg, mozilla, openoffice, thunderbird, wireshark, wm:
-         Module version bump.
-      wm: Module version bump.
-      networkmanager: Move line.
-      networkmanager: Module version bump.
-      Merge branch 'pkcs' of https://github.com/dodys/refpolicy-contrib
-      pkcs: Rename pkcs_slotd_unit_file_t.
-      pkcs: Module version bump.
-      accountsd, policykit: Module version bump.
-      dbus, devicekit, modemmanager, networkmanager, virt: Module version bump.
-      modemmanager: Move lines.
-      rpm: Module version bump.
-      cachefilesd, dbus, dirmngr, gnome, gpg, pulseaudio: Module version bump.
-      Replace deprecated mmap perm sets and pattern usage.
-      gssproxy: Module version bump.
-      monit: Module version bump.
-      apache, dkim, monit: Module version bump.
-      spamassassin: Module version bump.
-      Bump module versions for release.
-
-Christian Göttsche (20):
-      dkim: align filecontexts
-      dkim: update
-      milter: align filecontexts
-      apache: align filecontexts
-      dmidecode: use userdom_use_inherited_user_terminals
-      spamassassin: align filecontexts
-      chkrootkit: update
-      rkhunter: add several missing permission
-      fakehwclock: update
-      milter: update
-      mandb: fixes for systemd timer and /usr/local/man label
-      spamassassin: update
-      dphysswapfile: fix swapfile creation
-      apache: update
-      monit: update
-      dkim: align file contexts
-      dkim: update
-      apache: update
-      monit: read /usr/share/ca-certificates for cert verification
-      spamassassin: fix missing perms
-
-Daniel Jurgens (1):
-      networkmanager: Grant access to unlabeled PKeys
-
-David Sugar (5):
-      mon: move rpc_* into optional
-      wm: consolidate networkmanger interface calls into single optional
-      cron: optional_policy for mta_* interfaces
-      Label /usr/bin/mutter
-      Allow to read /proc/sys/crypto/fips_enabled
-
-Eduardo Barretto (2):
-      Update pkcs policy to include pkccsslotd.service
-      Update missing permissions for pkcs
-
-Guido Trentalancia (13):
-      libmtp: read symlinks in user home directories
-      spamassassin: update rules for the Bayesian classifier trainer
-      wm: let gnome-shell start properly
-      gnome: keyring daemon dbus policy update
-      gnome: keyring daemon read SELinux config
-      openoffice: improve temporary directories' operations
-      pulseaudio: general update
-      wm: gnome-shell SELinux integration
-      mozilla: run Java Web Start applications
-      wm: run PolicyKit
-      dbus: read user home content files
-      mozilla: read generic SSL certificates
-      contrib: use the new SSL private keys type (was: "let the mozilla and
-         other domains read generic SSL certificates")
-
-Jason Zaman (12):
-      cgmanager: Apply auth_use_nsswitch interface
-      alsa: needs to map its tmpfs files
-      virt: add policy for virtlogd
-      virt: updated perms for starting guests
-      gssproxy: add policy
-      rpc: Allow stream connect to gssproxy
-      gpg: search dir when connecting to agent socket
-      dirmngr: allow filetrans in gpg_runtime_t
-      gpg: Add gpg_agent_use_card boolean for OpenPGP cards
-      cachefilesd: make cachefilesd_cache_t a mountpoint
-      Set user_runtime_content_type for all remaining types in /run/user/%{UID}/
-      gssproxy: allow writing kerberos rcache
-
-Jason Zaman via refpolicy (3):
-      pulseaudio: Add neccessary map permissions
-      gpg: add fcontexts for user runtime sockets
-      rpc: add sm-notify pid fcontext
-
-Laurent Bigonville (2):
-      Allow NetworkManager to write to audit
-      Call systemd_write_inherited_logind_inhibit_pipes() where needed
-
-Luis Ressel (12):
-      portage: Allow portage_t and portage_sandbox_t to access locale_t
-      postfix: Some table drivers (notably cdb) need to mmap() their databases
-      portage: Grant the map permissions neccessary for git and install
-      alsa: alsactl needs to map its configuration
-      mozilla: Add neccessary map permissions
-      mandb: man-db needs to map its 'index.db' cache
-      portage: Remove nonsensical dontaudit of an allowed permission
-      portage: Transition to ldconfig_t when calling ldconfig
-      postfix: Some table drivers (notably cdb) need to mmap() their databases
-      postfix: Silence cap_dac_read_search denials
-      portage: Grant portage the map permission on usr_t
-      Allow gtk apps to map usr_t files
-
-Nicolas Iooss (2):
-      dbus: move comments out of the file context definitions
-      logrotate: allow systemd to start logrotate
-
-Russell Coker (3):
-      udev and dhcpd
-      minor nspawn, dnsmasq, and mon patches
-      refpolicy and certs
-
-Tom Gundersen (1):
-      dbus: add policy for dbus-broker
-
-* Sat Aug 05 2017 Chris PeBenito <pebenito@ieee.org> - 2.20170805
-Chris PeBenito (82):
-      Create / to /usr equivalence for bin, sbin, and lib, from Russell Coker.
-      Module version bump for usrmerge FC fixes from Jason Zaman.
-      mon policy from Russell Coker.
-      Module version bump for cups patches from Guido Trentalancia.
-      Module version bump for tbird and mozilla printing from Guido
-         Trentalancia.
-      Revert "cups/lpd: read permission for cupsd_var_run_t socket files"
-      Module version bump for cups revert.
-      Sort capabilities permissions from Russell Coker.
-      Little misc patch from Russell Coker.
-      mon: Fix deprecated interface usage.
-      dpkg: Updates from Russell Coker.
-      Monit policy from Russell Coker and cgzones.
-      monit: Fix build error.
-      fetchmail, mysql, tor: Misc fixes from Russell Coker.
-      Merge branch 'alsa_module' of git://github.com/cgzones/refpolicy-contrib
-      Merge branch 'vnstat_module' of git://github.com/cgzones/refpolicy-contrib
-      Module version bump for alsa and vnstatd fixes from cgzones.
-      Merge branch 'ntp_module' of git://github.com/cgzones/refpolicy-contrib
-      Module version bump for ntp fixes from cgzones.
-      samba: A few line moves.
-      Module version bump for samba patch from Russell Coker.
-      Systemd fixes from Russell Coker.
-      Xen fixes from Russell Coker.
-      mailman: Fixes from Russell Coker.
-      MTA fixes from Russell Coker.
-      Network daemon patches from Russell Coker.
-      apache: Fix CI error.
-      Merge branch 'modutils_adapt_interfaces' of
-         git://github.com/cgzones/refpolicy-contrib
-      Merge branch 'corecmd_read_bin_symlinks' of
-         git://github.com/cgzones/refpolicy-contrib
-      Module version bumps for fixes from cgzones.
-      Merge branch 'mandb' of git://github.com/cgzones/refpolicy-contrib
-      Merge branch 'dphysswapfile' of git://github.com/cgzones/refpolicy-contrib
-      Module version bump for dphysswapfile and mandb fixes from cgzones.
-      Merge branch 'var_run_filecontext' of
-         git://github.com/cgzones/refpolicy-contrib
-      Merge branch 'vnstatd' of git://github.com/cgzones/refpolicy-contrib
-      Module version bump for fixes from cgzones.
-      dontaudit net_admin for SO_SNDBUFFORCE
-      /var/run -> /run again
-      Merge branch 'monit' of git://github.com/cgzones/refpolicy-contrib
-      Module version bump for monit patch from cgzones.
-      systemd-resolvd, sessions, and tmpfiles take2
-      Misc fc changes from Russell Coker.
-      Systemd-related changes from Russell Coker.
-      networkmanager: adjust interface docs format.
-      wm: interface docs adjustment.
-      Module version bump for misc fixes from Guido Trentalancia.
-      systemd init from Russell Coker
-      misc daemons from Russell Coker.
-      logging patches from Russell Coker
-      kmod, lvm, brctl patches from Russell Coker
-      devicekit, mount, xserver, and selinuxutil from Russell Coker
-      some userdomain patches from Russell Coker
-      Module version bump for gnome fix from Guido Trentalancia.
-      apache: Move blocks.  No rule changes.
-      Module version bump for changes from Sven Vermeulen and Guido
-         Trentalancia.
-      login take 4 from Russell Coker.
-      Rename apm to acpi from Russell Coker.
-      Module version bump for patches from Russell Coker.
-      some little misc things from Russell Coker.
-      apt/dpkg strict patches from Russell Coker.
-      Module version bump for minor fixes from Guido Trentalancia.
-      Merge branch 'usr_bin_fc' of
-         git://github.com/fishilico/selinux-refpolicy-contrib
-      Module version bump for /usr/bin fc fixes from Nicolas Iooss.
-      Module version bump for chronyd changes from Luis Ressel.
-      openoffice: Move ooffice_rw_tmp_files() implementation.
-      Module version bump for openoffice fix from Guido Trentalancia.
-      libmtp: move lines
-      Module version bump for fixes from Guido Trentalancia.
-      Module version bump for mmap fixes from Stephen Smalley.
-      Module version bump for misc patches from Guido Trentalancia.
-      gpg: Fix overspecified dependencies in gpg_agent_tmp_filetrans.
-      dirmngr: Whitespace fixes.
-      Module version bumps for patches from Jason Zaman.
-      cgmanager: Move lines
-      Module version bumps for patches from Jason Zaman.
-      gpg: Module version bump for patch from Guido Trentalancia.
-      mozilla: Module version bump for patch from Luis Ressel.
-      rkhunter: Fix module version and move lines.
-      Module version bump for patches from cgzones.
-      chkrootkit: Fix module version.
-      Module version bump for patches from cgzones.
-      Bump module versions for release.
-
-Guido Trentalancia (28):
-      cups: read permission for cupsd_var_run_t socket files in
-         cups_stream_connect()
-      cups/lpd: read permission for cupsd_var_run_t socket files
-      thunderbird: allow stream connections to cups so that it can print
-      mozilla: allow stream connections to cups so that it can print
-      java: enable interactive use
-      evolution: add dbus acquire service permission
-      evolution: do not audit kernel read state
-      evolution: add some critical permissions
-      mozilla: read hardware state information
-      mozilla: add a permission
-      wm: load the NetworkManager applet
-      wm: interactive start
-      Gnome and Evolution dbus chat permissions
-      openoffice: support starting it from the window manager
-      evolution: minor fixes and updates
-      java: error messages terminal printout
-      loadkeys: use init fds (system bootup)
-      plymouth: pid interface usability
-      shutdown: send msg to syslog
-      openoffice: open files retrieved using mozilla
-      contrib: new libmtp module
-      openoffice: minor update
-      gnome: improved integration with openoffice
-      cups: let hplip read udev pid files
-      dbus: let session bus daemon manage user runtime dirs
-      zabbix: Grant zabbix_agent_t to call setrlimit on self
-      ntp: fix the drift file context and transition
-      gpg: manage user runtime socket files and directories
-
-Jason Zaman (12):
-      usrmerge: Add missed /usr fcontexts
-      java: update fcontexts for new versions of icedtea
-      dirmngr: add to roles and allow gpg to domtrans
-      gpg dirmngr: create and connect to socket
-      dirmngr: fcontext for ~/.gnupg/crls.d/
-      dirmngr: Network rules to connect to keyserver
-      cgmanager: add policy from gentoo
-      consolekit: Add support for consolekit2
-      consolekit: allow purging tmp
-      consolekit: introduce consolekit_use_inhibit_lock interface
-      dbus: use consolekit inhibit locks
-      networkmanager: use consolekit inhibit locks
-
-Luis Ressel (3):
-      chronyd: Re-align fc file
-      chronyd: Allow init scripts to create /run/chrony
-      mozilla: Add fc for the files used by the firefox addon "vimperator"
-
-Nicolas Iooss (1):
-      Support systems with a single /usr/bin directory
-
-Russell Coker (1):
-      patch for samba
-
-Stephen Smalley (1):
-      contrib: allow map permission where needed
-
-Sven Vermeulen (1):
-      rpc_* interfaces should be wrapped by optional_policy()
-
-cgzones (16):
-      update ntp module
-      update alsa module
-      vnstatd: update module
-      corecmd_read_bin_symlinks(): remove deprecated and redundant calls
-      modutils: adopt calls to new interfaces
-      vnstatd: update
-      dphysswapfile: update
-      monit: update
-      mandb: update
-      logrotate: reload monit after log rotation
-      remove /var/run file context lefovers, add dbus exception
-      monit: add syslog access and support for monit systemd service
-      rkhunter: add policy module
-      arpwatch: align file contexts
-      chkrootkit: add policy module
-      arpwatch: update
-
-* Sat Feb 04 2017 Chris PeBenito <pebenito@ieee.org> - 2.20170204
-Chris PeBenito (41):
-      Module version bump for patches from Jason Zaman.
-      authbind: Remove dead policy.
-      Module version bump for cups patch from Guido Trentalancia.
-      Merge pull request #29 from cgzones/deprecated_macros
-      Module version bump for Debian fprintd fc entry from Laurent Bigonville.
-      Module version bumps for openoffice patches from Guido Trentalancia.
-      Module version bumps for patches from Guido Trentalancia.
-      Merge pull request #30 from cgzones/trailing_whitespaces
-      Module version bumps for mozilla and gpg patches from Luis Ressel.
-      Module version bump for patches from Guido Trentalancia.
-      Module version bump for patches from Guido Trentalancia.
-      rtkit, wm: Remove calls to nonexistant interfaces.
-      Module version bumps for patches from Guido Trentalancia.
-      rtkit: enable dbus chat with xdm
-      Module version bump for patches from Guido Trentalancia.
-      Module version bump for xscreensaver patch from Guido Trentalancia.
-      Merge branch 'run_transition' of
-         git://github.com/cgzones/refpolicy-contrib
-      Module version bumps for /run fc changes from cgzones.
-      Module version bump for openoffice and wm patches from Guido Trentalancia.
-      Module version bump for patches from Guido Trentalancia.
-      Module version bump for wm patch from Guido Trentalancia.
-      Merge branch 'usr-fc' of
-         git://github.com/fishilico/selinux-refpolicy-contrib
-      Module version bump for fc updates from Nicolas Iooss.
-      Module version bump for patches from Guido Trentalancia.
-      Module version bump for capability2 fixes from Guido Trentalancia.
-      Module version bump for plymouth fix from Guido Trentalancia.
-      boinc: Update from Russell Coker.
-      Module version bump for mozilla update from Guido Trentalancia.
-      Merge pull request #47 from cgzones/dphysswap_module
-      Merge pull request #40 from cgzones/fakehwclock_module
-      Merge branch 'gpg_module' of git://github.com/cgzones/refpolicy-contrib
-      Merge branch 'irqbalance_module' of
-         git://github.com/cgzones/refpolicy-contrib
-      Merge branch 'loadkeys_module' of
-         git://github.com/cgzones/refpolicy-contrib
-      Module version bumps for patches from cgzones.
-      Merge branch 'exim_module' of git://github.com/cgzones/refpolicy-contrib
-      Merge branch 'screen_module' of git://github.com/cgzones/refpolicy-contrib
-      Module version bump for screen and exim changes from cgzones.
-      screen: Revert broken interface call.
-      cups: Move hplip_domtrans interface.
-      Module version bump for cups patch from Guido Trentalancia.
-      Bump module versions for release.
-
-Dominick Grift (1):
-      Re-add raid fc spec that must have been removed earlier by mistake
-
-Guido Trentalancia (29):
-      cups: descend "rw" directories when reading configuration files
-      Apache OpenOffice module (contrib policy part)
-      openoffice: rename two interfaces in openoffice and evolution
-      mozilla: extend dbus connection permissions
-      openoffice: permission to read user temporary files
-      xguest: restrict ability to execute files on noxattr filesystems
-      pulseaudio: update server and client permissions
-      mozilla: remove redundant pulseaudio interface calls
-      networkmanager: read user certs not user content (was enable
-         userdom_read_user_certs() throughout the policy)
-      Make several calls to mta interfaces optional
-      wm: update the window manager (wm) module and enable its role template
-         (v7)
-      rtkit: enable dbus chat with xdm
-      networkmanager: enable dbus chat with xdm
-      policykit: enable dbus chat with xdm
-      games: general update and improved pulseaudio integration
-      wm: improved integration with games
-      xscreensaver: update the module so that it can be effectively used
-      wm: properly set domain entrypoint in wm_application_domain()
-      openoffice: add writer support for sending email directly to multiple
-         recipients
-      contrib: use new genhomedircon template for username
-      contrib: extend wm ability to launch confined graphical applications
-      contrib: support the new interface to manage X session logs
-      networkmanager: dbus chat with cups
-      cups: add cups-browsed executable fc
-      devicekit: add new wake_alarm permission (capability2)
-      networkmanager: add new wake_alarm permission (capability2)
-      plymouth: use the correct running domain for the client
-      mozilla: execute evolution to send emails
-      cups: new interface to execute HPLIP applications in their own domain
-
-Jason Zaman (4):
-      pcscd: dbus and domain lookup
-      devicekit: fcontext for udisks2
-      gnome: add gkeyring rules and fcontext
-      gpg: add new socket paths
-
-Laurent Bigonville (1):
-      Add debian path for fprintd daemon
-
-Luis Ressel (3):
-      gpg: Add filetrans for scdaemon socket and gpg-agent extra sockets
-      gpg.fc: Adjust whitespace
-      mozilla: Add miscfiles_dontaudit_setattr_fonts_cache_dirs()
-
-Nicolas Iooss (1):
-      Add file contexts for files in /usr/{lib,sbin}
-
-cgzones (10):
-      use domain_auto_transition_pattern instead of domain_auto_trans
-      remove trailing whitespaces
-      transition file contexts to /run
-      update loadkeys module
-      add fakehwclock module
-      add dphysswapfile module
-      update gpg module
-      update screen module
-      update irqbalance module
-      update exim module
-
-* Sun Oct 23 2016 Chris PeBenito <pebenito@ieee.org> - 2.20161023
-Adam Tkac (2):
-      varnishncsa (varnishlog_t) reads localization files
-      Grant certmonger "chown" capability
-
-Chris PeBenito (42):
-      Merge branch 'bigon-geoclue'
-      Add additional comments in geoclue.
-      Merge branch 'bigon-virt-1'
-      Merge branch 'nm-1' of git://github.com/bigon/refpolicy-contrib into
-         bigon-nm-1
-      Merge branch 'bigon-nm-1'
-      Module version bump for virt and networkmanager patches from Laurent
-         Bigonville.
-      Merge branch 'master' of git://github.com/bigon/refpolicy-contrib
-      Module version bump for firewalld updates from Laurent Bigonville.
-      Module version bump for collectd update from Jason Zaman.
-      Module version bumps for user runtime fixes from Jason Zaman.
-      Boinc updates from Russell Coker.
-      rpcbind: Read /sys/devices/system/cpu/online from Russell Coker.
-      watchdog: Move line.
-      Module version bump for watchdog pidfile option from Russell Coker.
-      Systemd units from Russell Coker.
-      Module version bump for pulseaudio fc fix from Jason Zaman.
-      cpucontrol: revise cpucontrol_conf_t labeling, from Guido Trentalancia.
-      Module version bumps for patches from Guido Trentalancia.
-      Update the telepathy module:
-      Update the alsa module so that the alsa_etc_t file context (previously
-         alsa_etc_rw_t) is widened to the whole alsa share directory, instead of
-         just a couple of files.
-      alsa: Add compatibility alias for alsa_etc_rw_t.
-      Update the sysnetwork module to add some permissions needed by the dhcp
-         client (another separate patch makes changes to the ifconfig part).
-      Module version bump for various patches from Guido Trentalancia.
-      pulseaudio: Fix compile errors.
-      Merge branch 'master' of
-         https://github.com/SeanPlacchetti/refpolicy-contrib
-      Module version bump for webalizer dead type removal from Sean Placchetti.
-      Module version bump for Evolution SSL fix from Guido Trentalancia.
-      evolution: Read user certs from Guido Trentalancia.
-      cups: Move can_exec() line.
-      cups: Module version bump for hplip patch from Guido Trentalancia
-      pulseaudio: Move interface definitions.
-      Module version bump for mozilla patch from Guido Trentalancia.
-      Module version bump for gnome patch from Guido Trentalancia.
-      Module version bump for evolution patch from Guido Trentalancia.
-      gpg: Whitespace fix.
-      Merge branch 'feature/fix-networkmanager-varrun-macro' of
-         https://github.com/rfkrocktk/refpolicy-contrib
-      Module version bump for networkmanager fix from Naftuli Tzvi Kay.
-      Merge branch 'rfkrocktk-feature/syncthing'
-      Rearrange lines in syncthing.
-      webalizer: Rearrange a couple lines.
-      Module version bump for webalizer patch from Russell Coker.
-      Bump module versions for release.
-
-Dominick Grift (18):
-      Module version bump for changes to the geoclue module by Laurent
-         Bigonville.
-      Module version bump for changes to various modules from Laurent
-         Bigonville.
-      geoclue: move kernel interface call to the appropriate position
-      Actually associate mailmain_domain attribute with mailman domains
-      Module version bumps for changes to various modules by Nicolas Iooss
-      Module version bump for changes to the cron module by Jason Zaman
-      Module version bump for changes to the redis module by Grant Ridder
-      Module version bump for changes to the raid module by Laurent Bigonville
-      Module version bump for changes to the networkmanager module by Laurent
-         Bigonville.
-      Module version bump for changes to the redis module by Grant Ridder.
-      Module version bump for changes to the mozilla module by Laurent
-         Bigonville.
-      Module version bump for changes to the geoclue module by Nicolas Iooss.
-      Add hwloc-dump-hwdata SELinux policy
-      Module version bump for changes to the varnishd module by Robert Moucha
-      Module version bump for changes to the puppet module by Thomas Mueller
-      Module version bump for changes to the varnishd module by Adam Tkac
-      Module version bump for changes to the certmonger module by Adam Tkac
-      Revert "dbus: allow system, and session bus clients to answer to dbus
-         unconfined domains"
-
-Grant Ridder (2):
-      Add read/write perms for redis-sentinel
-      Allow tcp_connect to redis_port_t for redis_t
-
-Guido Trentalancia (7):
-      Policykit module: add fs_getattr_xattr_fs()
-      Update the policy for module apm
-      Let gpg disable core dumps
-      Update the rtkit module
-      Update the pulseaudio module for usability and ORC support
-      cups: update permissions for HP printers (load firmware)
-      gpg: public key signature verification in evolution
-
-Guido Trentalancia via refpolicy (3):
-      evolution: read SSL certificates
-      mozilla: let mozilla play audio
-      gnome: add support for the OIL Runtime Compiler (ORC) optimized code
-         execution
-
-Jason Zaman (10):
-      cron: Allow locks to be lnk_files
-      collectd: update policy for 5.5
-      consolekit: allow managing user runtime
-      pulseaudio: fcontext and filetrans for runtime
-      ftp: Add filetrans from user_runtime
-      gnome: Add filetrans from user_runtime
-      mplayer: Add filetrans from user_runtime
-      userhelper: Add filetrans from user_runtime
-      wm: Add filetrans from user_runtime
-      pulseaudio: fix user runtime fcontext
-
-Laurent Bigonville (13):
-      Add initial geoclue 2 module
-      Properly escape dot in the path to the geoclue daemon
-      Use auth_use_nsswitch() as we need DNS resolving and access nsswitch.conf
-      virt.fc: Add some debian contexts
-      networkmanager.fc: nm-dispatcher.action has been renamed to nm-dispatcher
-      Allow some domain to read sysctl_vm_overcommit_t
-      Allow mdadm read efivarfs files
-      Allow /var/run/firewalld/ directory to transition to firewalld_var_run_t
-      Add an interface to allow a domain to read firewalld_var_run_t files
-      Allow firewalld to create firewalld_var_run_t directory.
-      dontaudit firewalld attempt to relabel its own config files
-      Allow NM to execute arping
-      Debian now ships firefox-esr, properly label the executable
-
-Luis Ressel (1):
-      New policy for tboot utilities
-
-Naftuli Tzvi Kay (2):
-      Fix NetworkManager Read Pid Files Macro
-      Syncthing Policy
-
-Nicolas Iooss (3):
-      Describe _initrc_domtrans interfaces differently from the _domtrans ones
-      Fix typos in several interfaces
-      Add Arch Linux path for geoclue module
-
-Robert Moucha (1):
-      Fix trivial typo in varnishncsa name
-
-Russell Coker (2):
-      watchdog reads pid files
-      named reads vm sysctls
-
-Russell Coker via refpolicy (1):
-      webalizer patch for inclusion
-
-Sean Placchetti (1):
-      -Remove unused declarations from webalizer type enforcement file
-
-Thomas Mueller (1):
-      Allow puppet_t transtition to shorewall_t
-
-doverride (3):
-      Merge pull request #8 from bigon/geoclue
-      Merge pull request #11 from bigon/overcommit-1
-      Merge pull request #12 from fishilico/typos
-
-* Tue Dec 08 2015 Chris PeBenito <selinux@tresys.com> - 2.20151208
-Alexander Wetzel (1):
-      add vfio support for libvirt
-
-Chas Williams - CONTRACTOR (1):
-      afs: update labels, file contexts and allow access to urandom
-
-Chris PeBenito (14):
-      Module version bump for hadoop_admin() fix from Jazon Zaman.
-      Module version bump for fc typo in radius from Sven Vermeulen.
-      Module version bump for patches from Jason Zaman.
-      Module version bump for init_startstop_service from Jason Zaman.
-      Module version bump for cron_admin interface from Jason Zaman.
-      Comment/whitespace fix in virt.te.
-      Module version bump for vfio support for libvirt from Alexander Wetzel.
-      Add systemd unit types.
-      Add systemd socket activations.
-      Merge branch 'pebenito-master'
-      Module version bump for systemd additions.
-      Merge branch 'bigon-systemd'
-      Module version bump for dbus systemd patch from Laurent Bigonville.
-      Bump module versions for release.
-
-Dominick Grift (16):
-      Module version bump for courier fixes from Sven Vermeulen.
-      Module version bump for afs fixes from Chas Williams.
-      Redundant rules and afs_files_t is not a filesystem type
-      Various samhain fixes
-      Cachefilesd module updates
-      Module version bump for changes to the dnsmasq policy module by Jason
-         Zaman
-      Module version bump for changes to the snmp policy module by Jason Zaman
-      Module version bump for changes to the pulseaudio policy module by Jason
-         Zaman
-      cachefiles: It is cachefilesd_cache_t
-      Module version bump for update to the networkmanager policy module by
-         Stephen Smalley.
-      Module version bumps for "Remove run interface calls from admin
-         interfaces" changes by Jason Zaman.
-      Module version bump for changes to the pulseaudio module by Niklas Haas.
-      Changes to the git, hadoop and rsync modules by Jason Zaman.
-      Module version bump for changes to the virt module by Jason Zaman
-      Module version bump for changes to the mozilla module from Laurent
-         Bigonville.
-      Module version bump for changes to the wine module by Nicolas Iooss
-
-Jason Zaman (19):
-      hadoop: remove _role from _admin interface
-      rpcbind: typo fix
-      git: make inetd interface optional
-      rpc: introduce allow_gssd_write_tmp boolean
-      rpc: allow setgid capability
-      virt: add virt_tmpfs_t type and permissions
-      introduce virt_leaseshelper_t
-      dnsmasq: allow exec shell for scripts
-      snmp: missing fcontext for snmpd
-      pulseaudio: filetrans for autospawn.lock
-      Use init_startstop_service in admin interfaces A-M
-      Use init_startstop_service in admin interfaces N-Z
-      Remove _run() interfaces from _admin()
-      Introduce cron_admin interface
-      rsync: remove rsync_run from admin interface
-      git: allow git_system_t to listen on tcp_sockets
-      hadoop: init_startstop_service() can not take attributes
-      virt: Allow creating qemu guest agent socket
-      virt: Add policy for virtlockd the Virtual machine lock manager
-
-Laurent Bigonville (2):
-      Transition D-Bus system service out of the init_t domain when PID1 is
-         systemd
-      Label iceweasel plugin-container executable as mozilla_plugin_exec_t
-
-Nicolas Iooss (1):
-      wine: remove use of nonexisting interface
-
-Niklas Haas (1):
-      pulse: don't give pulseaudio_client full access to user_home_t
-
-Stephen Smalley (1):
-      contrib: networkmanager: allow netlink_generic_socket access
-
-Sven Vermeulen (6):
-      Locate authdaemon socket and communicate with authdaemon
-      Allow authdaemon to access selinux fs to check SELinux state
-      Grant setuid/setgid to courier_pop_t
-      Execute courier helper script after authentication
-      Courier IMAP needs to manage the users' maildir
-      Fix typo for radiusd /var/lib location
-
-doverride (2):
-      Merge pull request #3 from haasn/pulse-nohome
-      Merge pull request #6 from bigon/mozilla-1
-
-* Wed Dec 03 2014 Chris PeBenito <selinux@tresys.com> - 2.20141203
-Chris PeBenito (26):
-      Whitespace fix in ntp.fc.
-      Module version bump for ntp fc entries from Laurent Bigonville.
-      Whitespace fix in shibboleth.te.
-      Module version bump for new shibboleth module from Martin Lang.
-      Module version bump for apt fix from Nicolas Iooss.
-      Module version bump for dnsmasq MTU fix from Sven Vermeulen.
-      Module version bump for apache content interfaces from Sven Vermeulen.
-      Module version bump for gitweb fc entry on Debian and ArchLinux from
-         Nicolas Iooss.
-      Module version bump for fc regex fixes from Nicolas Iooss.
-      Module version bump for various fixes from Laurent Bigonville.
-      Module version bump for ModemManager fc entry from Laurent Bigonville.
-      Add missing cron_admin_role() dependency.
-      Move sock_file filetrans to fcron_crond conditional.
-      Module version bump for cron and snort updates from Sven Vermeulen.
-      Module version bump for java icedtea fc entries from Sven Vermeulen.
-      Module version bump for apache/mlogc patch from Elia Pinto.
-      Remove name from ntp-kod ntp_drift_t filetrans.
-      Module version bump for ntp-kod file support from Jason Zaman.
-      Module version bump for init_daemon_pid_file use from Sven Vermeulen.
-      Module version bump for alsa and hiawatha fixes from Sven Vermeulen.
-      Module version bump for ftp and tftp fixes from Nicolas Iooss.
-      Move irc exec lines.
-      Module version bump for irc re-exec itself patch from Luis Ressel.
-      Module version bump for NetworkManager fc fix for ArchLinux from Nicolas
-         Iooss.
-      Module version bump for _admin fixes from Jason Zaman.
-      Bump module versions for release.
-
-Dominick Grift (3):
-      Module version bump for changes to the loadkeys module by Nicolas Iooss
-      cron: that boolean identifier does not exist         also require it
-      Module version bump for changes to the networkmanager modules by Lubomir
-         Rintel
-
-Elia Pinto (1):
-      apache.te: Add labelling support for /var/log/mlogc
-
-Jason Zaman (20):
-      Add filetrans for ntp-kod file
-      ccs: syntax errors in ccs_admin interface
-      condor: syntax error in condor_admin
-      distcc: syntax error in distcc_admin
-      ftp: syntax error in ftp_admin
-      kerberos: syntax error in kerberos_admin
-      kismet: syntax error in kismet_admin
-      nut: syntax error in nut_admin
-      prelude: syntax error in prelude_admin
-      psad: syntax error in psad_admin
-      quota: syntax error in quota_admin
-      rpcbind: syntax error in rpcbind_admin
-      rpm: syntax error in rpm_admin
-      systemtap: syntax error in stapserver_admin
-      svnserve: syntax error in svnserve_admin
-      uptime: syntax error in uptime_admin
-      zabbix: syntax error in zabbix_admin
-      remove pyzor_role() from pyzor_admin()
-      remove spamassassin_role() from spamassassin_admin()
-      rsync: syntax error in rsync_admin
-
-Laurent Bigonville (7):
-      Add several fcontext for debian specific paths for ntp
-      Fix dbus_all_session_domain(), session_bus_type is an attribute
-      Allow gconfd to be started by the session bus
-      Fix the usage of dbus_spec_session_domain() interface
-      Properly label exim4 initscript under Debian
-      Add new gnome_spec_domtrans_all_gkeyringd() interface
-      Label /usr/sbin/ModemManager as modemmanager_exec_t
-
-Lubomir Rintel (1):
-      Allow NetworkManager to create Bluetooth SDP sockets
-
-Luis Ressel (1):
-      irc.te: Allow irssi to re-execute itself
-
-Martin Lang (1):
-      Add a policy module for shibboleth authentication
-
-Nicolas Iooss (7):
-      apt: remove non-existing permission set write_dir_perms
-      Label /usr/share/gitweb/static as httpd_git_content_t
-      Fix strange file patterns
-      ftp: fix labels in /var/lock/subsys/
-      Label /usr/bin/tftpd as tftpd_exec_t
-      Label /usr/lib/networkmanager/ like /usr/lib/NetworkManager/
-      Allow loadkeys to read usr_t files
-
-Sven Vermeulen (17):
-      dnsmasq reads MTU sysctl
-      Support read/append/manage functions for various httpd content
-      Snort policy updates
-      fcron socket support
-      Fix typo in dnsmasq.if
-      Mark icedtea binaries as java_exec_t
-      Use init_daemon_pid_file for contrib modules
-      Enable asound.state.lock support
-      Add support for Hiawatha web server
-      Use logging_search_logs, not logging_search_log
-      Use logging_search_logs, not logging_search_log
-      Use files_search_etc, not logging_search_etc
-      Use files_search_etc, not logging_search_etc
-      Use files_search_etc, not files_search_config
-      Use corecmd_search_bin, not corecmd_searh_bin
-      Use fs_search_tmpfs, not files_search_tmpfs
-      Use domain_auto_trans, not auto_trans
-
-* Tue Mar 11 2014 Chris PeBenito <selinux@tresys.com> - 2.20140311
-Chris PeBenito (17):
-      Minor rearrangement of minidlna lines.
-      Module version bump for openvpn tmp files from Sven Vermeulen.
-      Update modules for file_t merge into unlabeled_t.
-      Module version bump for postfix showq fc from Laurent Bigonville.
-      Rename gpg_agent_connect to gpg_stream_connect_agent.
-      Module version bump for gpg agent interface from Luis Ressel.
-      Whitespace fixes in git.fc.
-      Module version bump for debian git fc entries from Laurent Bigonville.
-      Move bin_t fc to corecommands.
-      Move exec/transition lines in couchdb.
-      Add comment about couchdb_js policy.
-      Module version bump for couchdb updates from Luis Ressel.
-      Module version bump for pcscd fix from Luis Ressel.
-      Move screen dontaudit rule.
-      Module version bump for screen fix from Luis Ressel.
-      Module version bump for git fc fix from Nicolas Iooss.
-      Bump module versions for release.
-
-Dan Walsh (28):
-      Allow irc_t to use tcp sockets
-      Add labels for apache logs under miq package
-      Allow smbcontrol to create content in /var/lib/samba
-      Allow ktalkd to bind to the ktalkd_port
-      Allow memcache to read sysfs data
-      Allow mdadm to getattr any file system
-      Allow cupsd_lpd_t to bind to the printer port
-      Allow rlogind to bind to the rlogin_port
-      Allow cvs to bind to the cvs_port
-      svirt domains neeed to create kobject_uevint_sockets
-      Lots of new access required for sosreport
-      Allow tgtd_t to connect to isns ports
-      openct needs to be able to create netlink_object_uevent_sockets
-      Allow glusterd to create sock_file in /run
-      Add support for tmp directories to openvswitch
-      Allow virt_domain with USB devices to look at dos file systems
-      Additional access for MLS
-      Additional access for MLS window manager
-      Additional access for MLS window manager
-      Additional access for MLS window manager
-      Allow rpcbind to use nsswitch
-      Allow gpg_agent to use ssh-add
-      Add apache labeling for glpi
-      Allow pegasus to transition to dmidecode
-      Allow mcelog to use the /dev/cpu device
-      Allow apmd to request the kernel load modules
-      Allow postfix programs to getattr on all executables
-      label mate-keyring-daemon with gkeyringd_exec_t
-
-Dominick Grift (126):
-      Typo fix in ksmtuned_admin() by Shintaro Fujiwara
-      Fix monolithic built
-      Change file context spec for aide log files to catch suffixes
-      Module version bumps for changes in various policy modules by Sven    
-         Vermeulen
-      Squid: Use a single pattern for brevity
-      Irc was already allowed to create tcp sockets, it only needed an    
-         additional accept, and listen to be able to act as a proxy
-      Its probably a better idea to use the httpd_sys_ra_content_t type sid    
-         for logs in these locations
-      Module version bump for changes to the tcsd policy module by Lukas    
-         Vrabec
-      Module version bump for changes to various policy modules by Miroslav    
-         Grepl
-      Module version bump for changes to the samba policy module by Dan Walsh
-      Module version bump for changes to the telepathy policy module by    
-         Miroslav Grepl
-      We do not have a boinc domain type attribute     Change boolean
-         description a bit
-      Additional rabbitmq couchdb support
-      Module version bumps for changes to various policy modules by Miroslav    
-         Grepl
-      Additional git tcp networking rules
-      Additional ktalkd udp networking rules
-      Module version bump for changes to various policy modules by Dan Walsh
-      Addtional cups ldp tcp networking rules
-      Should be server packets because it is binding, and not connecting
-      Clean up telnet, and rlogin networking rules
-      Additional cvs tcp networking rules
-      Module version bump for changes to various policy modules by Dan     Walsh
-      Addtional tgtd tcp networking rules
-      Additional polipo tcp networking rules
-      Fix asterisk files_spool_filetrans()
-      Module version bump for changes to the networkmanager policy module by    
-         Lukas Vrabec
-      Additional fs_tmpfs_filetrans() for munin service plugin content on    
-         tmpfs
-      Module version bump for changes to various policy modules by Miroslav    
-         Grepl
-      Support rlogind, and telnetd as init daemon domains ( i think fedora is   
-          campaigning to get rid of (x)?inetd )
-      Support mariadb logging, file context specification for mariadb specific  
-           config location
-      Change logwatch boolean identifier to something more self-documenting.    
-         Additional tcp networking rules
-      Module version bump for changes to various policy modules by Miroslav    
-         Grepl
-      Fix inconsistencies in the pkcs policy module
-      Fix fetchmail inconsistencies
-      Module version bump for changes in various policy modules by Dan Walsh
-      Support for window managers to stream socket connect to pulseaudio
-      Logwatch does not need to be able to bind tcp sockets to generic nodes    
-         since its only connecting
-      Adds userhelper_exec_consolehelper for window managers
-      Remove duplicate rules due to addition of auth_use_nsswitch()
-      We dont use the arbt domain types template.     Use a more uniform boolean
-         discription
-      Clean up libstoragemngmt policy module     We do not yet support systemd
-      Change type from etc_rw to conf for readability     admin access to
-         condor_conf_t
-      Hit by a nasty optional policy nesting issue
-      We will find another way to run pa as a system server
-      Module version bump for changes to various policy modules by Miroslav    
-         Grepl
-      Clean up hypervkvp policy module (seems incomplete)
-      Clean up initial redis policy module
-      Additional openvpn tcp networking rules
-      redis: allow redis to bind tcp sockets to redis_port_t type ports
-      bluetooth: bluetooth_t acquires org.bluez service on dbus system bus
-      wm: associate wm_exec_t to core command executable files so that initrc_t
-         (/sbin/start-stop-daemon) can access it (metacity)
-      logrotate restarts syslogd via init script in Debian
-      This file is called just man-db in Debian.
-      exim: exim owns directory /var/lib/exim4
-      accountsd: accounts-daemon lists /var/log
-      alsa: alsactl listing /dev/shm alsa: alsactl reading /dev/urandom alsa:
-         alsactl getting attributes of devtmpfs / (/dev) alsa: alsactl maintains
-         a pulseaudio tmpfs file
-      Cron: /sbin/runlevel reads /run/utmp cron: anacron (system_cronjob_t)
-         reading, writing inherited random crond tmp files (/tmp/tmpfk1VT2O)
-      dbus: allow system, and session bus clients to answer to dbus unconfined
-         domains
-      apt: Run apt system cronjobs in the apt_t domain apt: apt system cronjob
-         creates dpkg.status.* files in /var/backup
-      devicekit: upowerd reads own unix stream socket devicekit:
-         devicekit_power_t (runlevel) read /run/utmp
-      mandb: Make the man-db cronjob work on Debian
-      rtkit: traverse /proc to get to process state files
-      networkmanager: NetworkManager reads /run/udev/data/n2 file
-      avahi: create a avahi_initrc_domtrans for udev_t: udev runs a avahi dns
-         check script which does, i guess, a dns check. If needed it starts, or
-         stops avahi via its init script. I also created a
-         avahi_manage_pid_files() for udev_t because the script manages a file
-         called "checked_nameservers.*" in /run/avahi-daemon
-      Cleanups of various modules with regard to regular expressions and white  
-           space
-      apt: As it turns out the /var/backups directory is labeled in the backup  
-           module (which i incidentally did not have installed earlier). Instead
-         of     creating this file with a file type transition to
-         apt_var_cache_t, allow     apt_t to manage backup_store files
-      mta: this needs to be verified again, it should just have been running    
-         in exim_t. I might have taken this from old logs
-      mandb: /etc/cron.daily/man-db executes dpkg, reads dpkg db on Debian
-      slocate: catch /usr/bin/updatedb.mlocate, and /etc/cron.daily/mlocate on  
-           Debian
-      dpkg: catch /etc/cron.daily/dpkg on Debian     dpkg: allow
-         /etc/cron.daily/dpkg to manage backup store files on Debian
-      cron: consistent usage of regular expressions     cron: prelink no longer
-         runs in the system cronjob domain
-      alsa: alsactl wants to associate pulse-shm-.* to device_t type    
-         filesystems. This happens early on but i do not understand how that    
-         (/dev) relates to /dev/shm in this regard
-      devicekit: reads udev pid files     modemmanager: reads udev pid files
-      vdagent: spice-vdagentd uses /dev/vport1p1 virtio console
-      tmpreaper: mountall-bootcl in the tmpreaper_t domain reads, writes    
-         /dev/pts/0 inherited from init script
-      revert regular expressions
-      wm: allow $1_wm_t to stream connect to $1_gkeyringd_t
-      mta: allow system_mail_t (user_mail_domains) to read kernel sysctls and   
-          to read exim var lib files.
-      mta: These are duplicates because system_mail_t is a user_mail_domain,    
-         as it is based off of the mta_base_mail_template() which assigns that  
-           type attribute
-      locate: extra rules needed by debian /etc/cron.daily/locate script
-      backup: in Debian /etc/cron.daily/passwd backs-up shadow, passwd etc to   
-          /var/backups
-      avahi: create interfaces that will allow calles to create avahi pid dirs  
-           and create specifc avahi pid objects with a type transition (for
-         udev,     which runs: /usr/lib/avahi/avahi-daemon-check-dns.sh in
-         Debian
-      Initial gdomap policy module
-      Initial minissdpd policy module
-      alsa: due to a bug in gnome 3.4, in debian, alsactl does all kinds of    
-         weird things related to pulseaudio
-      various: revert regex fixes: fcsort does not want this now
-      gdomap: gdomap_port_t is now available, gdomap binds tcp, and udp socket
-         to it
-      alsa: make alsa_t and pulseaudio_client so that pulseaudio_client rules
-         apply to it. alsactl does not actually run pulseaudio it seems though.
-      pulseaudio: allow all pulseaudio_client to send null signals to
-         unconfined_t, since unconfined_t is not actually a pulseaudio_client (
-         unconfined_t runs pulseaudio without a domain transition)
-      avahi: create avahi_setattr_pid_dirs() for udev (avahi dns check script
-         run by udev in Debian)
-      These { read write } tty_device_t chr files on boot up in Debian
-      colord: colord executable file locations in Debian
-      colord: reads /proc/1, reads /run/udev files
-      vdagent: read/write mtrr file
-      mandb: dpkg running in the mandb_t domain in Debian (mandb cronjob)
-         traverses /root
-      exim: traverses sysfs, uses system cronjob file descriptors (/dev/null) in
-         Debian (/etc/cron.daily/exim)
-      minissdpd fixes
-      devicekit: disk reads /proc/sys/vm/overcommit_memory
-      devicekit: edit devicekit_append_inherited_log_files to include get
-         attribute permission so that it can be also used for fsadm
-      devicekit: 95hdparm-apm (devicekit_power_t) gets attributes of /dev/sda
-         (fixed_disk_device_t)
-      networkmanager: added interfaces that fedora calls for dhcpc. In Debian it
-         was confirmed that at least dhclient manages
-         /var/lib/NetworkManager/dhclient-eth0.conf
-      firewalld: various fixes that i borrowed from Fedora but that also apply
-         to Debian (confirmed)
-      firewalld: interfaces created for iptables
-      irqbalance: getsched from Debian
-      colord: colord reads /proc/3412/cmdline (cupsd state files)
-      virt: libvirtd reads /run/udev/data/+input:input3
-      firewalld: traverses / on sysfs
-      rngd: needs ipc_lock capability, maintains /run/rngd.pid
-      tmpreaper: mountall-bootcl executes /bin/plymouth on Debian
-      minissdpd: deal with assertion violation (sys_module)
-      gdomap: missing networking rules, it traverses /tmp for some reason
-      ntp: create ntp_read_drift_files() for dhclient
-      dpkg: allow dpkg, and dpkg script to domain transition to initrc_t on any
-         init script file type rather than only the generic initrc_exec_t init
-         script file type
-      exim: exim4 reads online
-      apt: apt runs /usr/bin/apt-get apt: on_ac_power (apt_t) lists
-         /sys/class/power_supply
-      exim: exim_manage_var_lib_files created for init: init script runs helper
-         apps that create/manage /var/lib/exim4/config.autogenerated.tmp
-      gdomap/minissdpd: create read_config interfaces for initrc_t
-      exim: make exim init script create /var/run/exim4 with a proper context
-      pulseaudio: pulsaudio_t needs to be able to read user_tmpfs_files
-         (/run/shm/pulse-shm-.*)
-      dnsmasq: add support for /etc/dnsmasq.d/
-      Module version bumps for various policy modules
-      Module version bump for changes to the logrotate module by Luis Ressel
-      Git: git daemons can list and read git personal repositories
-      Module version bumps for changes to various policy modules by Fedora
-      redis, lsm: typo fixes
-      userhelper: append newline
-
-James Carter (8):
-      - Fixed typo in contrib/avahi.if
-      - Fixed typo in contrib/glusterfs.te
-      - Fixed typo in contrib/jabber.if
-      - Fixed typo in contrib/keystone.if
-      - Fixed typo in contrib/mailscanner.if
-      - Fixed typo in contrib/qpid.if
-      - Fixed typo in contrib/readahead.fc.
-      - Fixed typo in contrib/rpm.if.
-
-Laurent Bigonville (2):
-      Label /usr/lib/postfix/showq as postfix_showq_exec_t
-      Properly label git-daemon and gitweb.cgi on Debian
-
-Luis Ressel (10):
-      Allow initrc_t to create /var/run/opendkim
-      Label /etc/cron.daily/logrotate correctly.
-      gpg: Create gpg_agent_connect interface
-      Minor updates to couchdb policy
-      couchdb: Add separate domain for couchjs
-      couchdb: Dontaudit denials caused by Erlang's disksup
-      Reformat couchdb.fc
-      pcscd.if: Permit access to pid files inside /var/run/pcscd/.
-      Allow gpg-agent's scdaemon to connect to pcscd.
-      Dontaudit screen asking for the sys_tty_config capability
-
-Lukas Vrabec (8):
-      Allow tcsd to read utmp file
-      fix boinc policy
-      Add support for couchdb in rabbitmq policy
-      Fix transition rules in asterisk policy
-      Add fowner capability to networkmanager policy
-      Add policy for lsmd
-      Add policy for hypervkvpd
-      Add policy for redis-server
-
-Mika Pflüger (1):
-      Correct typo in passenger module name
-
-Miroslav Grepl (40):
-      Allow passenger to execute ifconfig
-      Allow mpd setcap which is needed by pulseaudio
-      Allow block_suspend cap for samba-net
-      Allow t-mission-control to manage gabble cache files
-      Allow nslcd to read /sys/devices/system/cpu
-      Add labeling for ~/.cache/telepathy/avatars/gabble
-      Allow firewalld to read NM state
-      Allow systemd running as git_systemd to bind git port
-      Fix labeling for fetchmail pid files/dirs
-      Fix polipo.te
-      Fix cupsd.te
-      Allow munin service plugins to manage own tmpfs files/dirs
-      Make ktalk as init domain
-      Allow mysqld_safe_t to handle also symlinks in /var/log/mariadb
-      Add logwatch_can_sendmail boolean
-      Allow rhsmcertd to read init state
-      Allow fsetid for pkcsslotd
-      Allow fetchmail to create own pid with correct labeling
-      Fix rhcs_domain_template()
-      Add support for abrt-upload-watch
-      Allow virtd to relabel unix stream socket
-      Fix lsm.fc for pid files
-      Also sock_file trans rule is needed in lsm
-      Update condor_master rules to allow read system state info and allow
-         logging
-      Add labeling for /etc/condor and allow condor domain to write it (bug)
-      Allow condor domains to manage own logs
-      Allow glusterd to read domains state
-      Add openvpn_can_network_connect() boolean
-      Fix minissdpd_admin()
-      Allow ctdb to getattr on al filesystems
-      Watchdog opens the raw socket
-      Allow watchdog to read network state info
-      Add setroubleshoot_signull() interface
-      Allow sosreport to send signull to setroubleshootd
-      Allow sosreport all signal perms
-      Allow sosreport to dbus chat with rpm
-      Allow zabbix_agentd to read all domain state
-      Allow smoltclient to execute ldconfig
-      Allow sosreport to request the kernel to load a module
-      Allow setpgid for sosreport
-
-Nicolas Iooss (1):
-      git: fix file pattern after whitespace fixes
-
-Sven Vermeulen (6):
-      Add minidlna policy
-      Allow openvpn temporary files
-      Add aide bin /usr/bin and mark /var/lib/aide
-      Provide alsa_write_lib interface
-      Run dmidecode after newrole or on terminals
-      Grant write privileges to squid on its log files
-
-* Wed Apr 24 2013 Chris PeBenito <selinux@tresys.com> - 2.20130424
-Chris PeBenito (18):
-      Rewrite of mcelog module from Guido Trentalancia
-      Remove unnecessary lines in mcelog.te.
-      Slight rearrangement in mcelog.te.
-      Module version bump for mcelog update from Guido Trentalancia.
-      Module version bump for ntp module fixes from Dominick Grift.
-      Module version bump for fc substitutions optimizations from Sven
-         Vermeulen.
-      Module version bump for postfix/mta misc fixes from Sven Vermeulen.
-      Module version bump for init_daemon_run_dirs usage from Sven Vermeulen.
-      Turn off all tunables by default, from Guido Trentalancia.
-      Module version bump for tunable default change.
-      Module version bump for saslauthd tcp mysql connections from Mika Flueger.
-      Move kernel request line in quota.
-      Module version bump for quota kernel module request from Mika Pflueger.
-      Module version bump for djbdns ports fixes from Russell Coker.
-      Remove stray + in keystone.te.
-      Whitespace fixes in cron.fc.
-      Module version bump for pulseaudio type_transition conflict fix from Sven
-         Vermeulen.
-      Bump module versions for release.
-
-Dominick Grift (889):
-      Initial BIRD Internet Routing Daemon policy
-      oident daemon fixes
-      Introduce ntp_conf_t
-      Allow ntp_admin() to manage ntp_drift_t content.
-      List etc_t directories
-      Use "Role allowed access." for consistency
-      Use permissions sets for compatibility.
-      Remove getattr permision from ntp_admin()
-      Initial Sensord policy module
-      Various block_suspend capability2 support from Fedora
-      Gitolite3 support from Fedora
-      /var/lib/sqlgrey is greylist milter data from Fedora
-      Terminal related fixes for plymouthd from Fedora     Support block_suspend
-         capability2 for plymouth
-      Support minimal polkit in new location
-      Support ldap for user authentication from Fedora
-      Sanlock sends kill signals to non-root processes from Fedora     Various
-         other capabilities for sanlock from Fedora
-      Initial support for sqlgrey from Fedora
-      Tor reads network sysctls from Fedora
-      GPG agent reads /dev/random from Fedora
-      Freshclam reads system and network state from Fedora
-      Execute wpa_cli in the NetworkManager_t domain for wicd from Fedora
-      lpstat.cups reads fips_enabled from Fedora
-      Initial system tap compile server policy module
-      Systemtap server admin manages stapserver_var_lib_t content
-      Telepathy Idle reads gschemas.compiled from Fedora
-      Initial slpd policy module
-      Initial lightsquid policy module
-      Initial wdmd policy module
-      Initial mailscanner policy module and some depencies.
-      Support slpd log rotation
-      Initial numad policy module
-      Open log files for append only
-      CGClear reads CGConfig files from Fedora     Cosmetic changes to cgroup
-         policy module     File contexts of cgroup app executables files in
-         /sbin also apply to     /usr/sbin     Make cgroup_admin() a bit more
-         compact
-      Initial svnserve policy module
-      Various small changes to ucspitcp
-      Initial fcoe policy module
-      Initial lldpad policy module
-      fcoemon sends to lldpad with a dgram socket
-      Initial quantum policy module
-      Initial dspam policy module
-      Module version bump for Telepathy file context spec fixes from Laurent    
-         Bigonville.
-      Initial isns policy module
-      Various changes to tcs policy module
-      Initial ctdb policy module
-      Various changes to the sblim policy module and its dependencies
-      Initial polipo policy module
-      Module version bump for networkmanager fixes
-      Fixes to the polipo policy module
-      Module version bump for smartmon fixes from Laurent Bigonville.
-      Module version bump for accountsd file context spec fix from     Laurent
-         Bigonville.
-      Various changes to the raid module
-      Module version bump for rtkit file context spec fix from     Laurent
-         Bigonville
-      Initial couchdb policy module
-      Changes to the bind policy module
-      Initial dnssectrigger policy module
-      Initial man2html policy module
-      Initial openhpi policy module
-      Bind sends/receives http server instead of client packets conditionally
-      Two file context regular expression fixes by Eric Paris
-      Type mdadm_t is no longer a unconfined type
-      Initial pkcs policy module
-      Initial cfengine policy module
-      Initial keystone policy module
-      Initial l2tp policy module
-      Initial mongodb policy module
-      cfengine whitespace cleanup
-      Changes to the accountsservice policy module
-      Changes to the acct policy module
-      Changes to the ada policy module
-      changes to the afs policy module
-      Changes to the accountsservice policy module
-      Changes to the aiccu policy module
-      Changes to the aide policy module
-      Syntax error in afs_admin()
-      Changes to the aisexec policy module
-      Changes to the alsa policy module
-      Changes to the amanda policy module
-      Changes to the amavisd policy module and relevant dependencies
-      Changes to the amtu policy module
-      Changes to the anaconda policy module
-      Changes to the abrt policy module and relevant dependencies
-      numad sends/receives msgs from Fedora
-      Amtu executable file in installed in /usr/sbin in Fedora
-      The (usr/)? expression does not work consistently so better not use it    
-         at all
-      Changes to the httpd policy module
-      Merge branch 'master' of
-         ssh://dgrift@oss.tresys.com/home/git/refpolicy-contrib
-      Fixes to the apache policy module and dependencies
-      Changes to the apcupsd policy module
-      Role attributes for lightsquid application domain
-      Changes to the mailscanner module
-      Changes to the svnserve policy module
-      Changes to the quantum policy module
-      Changes to the dspam module
-      Changes to the ctdb policy module
-      Changes to the couchdb policy module
-      Changes to the openhpid policy module
-      Changes to the keystone policy module
-      Changes to the l2tp policy module
-      Changes to the apm module and relevant dependencies
-      Changes to the arpwatch policy module
-      Changes to the apcupsd policy module
-      Changes to the abrt policy module
-      Changes to the apache policy module
-      Changes to the asterisk policy module and dependencies
-      Changes to the authbind policy module
-      Changes to the automount policy module
-      Change acpid lock file context spec
-      Changes to the avahi policy module and dependencies
-      Changes to the awstats policy module
-      Changes to the bacula policy module
-      Changes to the bcfg2 policy module
-      Changes to the apt policy module
-      Changes to the apache policy module
-      Changes to the backup module
-      Changes to the bind policy module
-      Bird module clean up
-      Fix arpwatch connected_stream_socket_perms
-      Changes to the bitlbee policy module
-      Changes to the blueman policy module
-      Changes to the bluetooth policy module
-      Changes to the brctl policy module
-      Changes to the apache policy module
-      Changes to the bugzilla policy module
-      Changes to the calamaris policy module
-      Implement lightsquid_admin()
-      Changes to the apache policy module and dependencies
-      Initial boinc policy module
-      Initial callweaver policy module
-      Changes to the canna policy module
-      Changes to the ccs policy module
-      Changes to the cdrecord policy module
-      Changes to the certmaster policy module and various role attribute fixes
-      cdrecord needs to read and write callers unix domain stream socket not    
-         create it
-      Changes to the certmonger policy module and its dependencies
-      Initial cachefilesd policy module
-      Changes to the certwatch policy module
-      Changes to the chronyd policy module
-      Changes to the cipe policy module
-      Changes to the clamav policy module
-      Various network clean up
-      Add dev_rw_cachefiles() to cachefilesd policy module
-      Changes to the clockspeed policy module
-      Changes to the clogd policy module
-      Changes to the cmirrord policy module
-      Changes to the cobbler policy module
-      Changes to the colord policy module
-      Changes to the comsat policy module
-      Initial collectd policy module
-      Initial condor policy module and relevant dependencies
-      Changes to the consolekit policy module and relevant dependencies
-      Changes to the corosync policy module and relevant dependencies
-      Clean up couchdb network rules
-      Changes to the courier policy module
-      Changes to the cpucontrol policy module
-      Changes to the cpufreqselector policy module
-      Changes to the cron policy module and relevant dependencies
-      Changes to the cups policy module and relevant dependencies
-      Changes to the cvs policy module
-      Remove redundant connect avperms
-      Changes to the cyphesis policy module
-      Remove redundant rules from apache_admin()
-      Changes to the cyrus policy module
-      Changes to the daemontools policy module
-      Changes to the dante policy module
-      Modify dbadm boolean descriptions
-      Changes to the dbus policy module and its dependencies
-      Changes to the dcc policy module
-      Changes to the ddclient policy module
-      Changes to the ddcprobe policy module
-      Changes to the denyhosts policy module
-      Changes to the devicekit policy module and relevant dependencies
-      Changes to the dhcpd policy module
-      Changes tothe dictd policy module
-      Changes to the discc policy module
-      Changes to the djbdns policy module
-      Changes to the dkim policy module
-      Changes to the dmidecode policy module
-      Module bump for Laurent Bigonville trousers init script file context    
-         specification fix
-      Module bump for Laurent Bigonville libvirt init script file context    
-         specification fix
-      Changes to the dnsmasq policy module and relevant dependencies
-      Changes to the dovecot policy module
-      Changes to the dpkg policy module
-      Changes to the entropyd policy module
-      Changes to the evolution policy module
-      Changes to the exim policy module and relevant dependencies
-      Changes to the cron policy module
-      Changes to the fail2ban policy module
-      fcoemon XML clean up
-      Changes to the fetchmail policy module
-      Changes to the fingerd policy module
-      Initial firewalld policy module
-      Changes to the firstboot policy module
-      Changes to the fprint policy module and relevant dependencies
-      Changes to the ftp module
-      Changes to the games policy module
-      Clean up evolution and cdrecord XML
-      Changes to the gatekeeper policy module
-      Changes to the gift policy module
-      Changes to the git policy module
-      Changes to the gitosis policy module
-      Changes to the glance policy module
-      Initial glusterfs policy module
-      Add gatekeeper newline
-      Deprecate glusterd_admin() use glusterfs_admin() instead
-      Portage module version bump for autofs support by Matthew Thode and    
-         clean up
-      cfengine: This location is now labeled with a cfengine private type
-      Changes to the slpd policy module
-      Changes to the gnomeclock policy module and relevant dependencies
-      Changes to the gpg policy module
-      Changes to the gpm policy module
-      Changes to the gpsd policy module and relevant dependencies
-      changes to the guest policy module
-      Changes to the gnomeclock policy module
-      Deprecate various DBUS interfaces and relevant dependencies
-      Changes to the cachefilesd policy module
-      Remove file context specification for kgpg which is a GUI frontend to    
-         GPG. Domain transition to gpg_t will happen when kgpg runs gpg.    
-         (rhbz#862229)
-      Initial mandb policy module
-      Changes to the hadoop policy module
-      Changes to the hald policy module
-      Changes to the hddtemp policy module
-      Changes to the howl policy module
-      changes to the mandb policy module
-      Changes to the dbus policy module
-      Changes to the rpm policy module
-      Changes to the i18n_input policy module
-      Changes to the icecast policy module
-      Changes to the ifplugd policy module
-      Changes to the imaze policy module
-      Changes to the inetd policy module and relevant dependencies
-      Changes to the innd policy module
-      Changes to the irc policy module
-      Changes to the ircd policy module
-      Changes to the irc policy module
-      Changes to the dbus policy module
-      Changes to the avahi policy module
-      Changes to the bluetooth policy module
-      Changes to the aiccu policy module
-      Changes to the bacula policy module
-      Changes to the boinc policy module
-      Changes to the bugzilla policy module
-      Changes to the ccs policy module
-      Changes to the clamav policy module
-      Changes to the cobbler policy module
-      Changes to the cyphesis policy module
-      Changes to the dante policy module
-      Changes to the dbskk policy module
-      Changes to the ddclient policy module
-      Changes to the denyhosts policy module
-      Changes to the dnssectrigger policy module
-      Changes to the dovecot policy module
-      Changes to the drbd policy module
-      Changes to the evolution policy module
-      Changes to the fail2ban policy module
-      Changes to the firewalld policy module
-      Changes to the firstboot policy module
-      Changes to the games policy module
-      Changes to the gift policy module
-      Changes to the glance policy module
-      Changes to the hald policy module
-      Changes to the dbus policy module
-      Changes to the git policy module
-      Changes to the polipo policy module
-      Changes to the firewalld policy module
-      Changes to the gpg policy module
-      Tab clean up in ircbalance file context file
-      Changes to the irqbalance policy module
-      Tab clean up in iscsi file context file
-      Changes to the iscsi policy module
-      Tab clean up in jabber file context file
-      Changes to the jabberd policy module
-      Changes to the pyicqt policy module
-      Tab clean up in java file context file
-      Changes to the java policy module
-      Changes to the dbus policy module
-      Changes to the gnome policy module
-      Changes to the apache policy module
-      Changes to the accountsd policy module
-      Changes to the alsa policy module
-      Changes to the evolution policy module
-      Changes to the bluetooth policy module
-      Changes to the games policy module
-      Changes to the gift policy module
-      Changes to the gpg policy module
-      Changes to the hadoop policy module
-      Tab clean up in kdump file context file
-      Changes to the kdump policy module
-      Changes to the gpg policy module
-      Changes to the dbus policy module
-      Changes to the evolution policy module
-      Changes to the gpm policy module
-      Version bump for evolution file context fixes by Laurent Bigonville
-      Version bump for nut file context fixes by Laurent Bigonville
-      Changes to the kdumpgui policy module
-      Tab clean up in kerberos file context file
-      Changes to the kerberos policy module and relevant dependencies
-      Changes to the kerneloops policy module
-      Tab clean up in kerberos file context file
-      Changes to the kismet policy module
-      Clean up amavis XML header
-      Initial keyboardd policy module
-      Tab clean up in ksmtuned file context file
-      Changes to the ksmtuned policy module
-      Tab clean up in ktalk file context file
-      Changes to the ktalk policy module
-      Changes to the kudzu policy module
-      Initial iodine policy module
-      Initial dirmngr policy module
-      Changes to the iodine policy module
-      Changes to the kerberos policy module
-      Changes to the kdumpgui policy module
-      Update deprecated interface calls ( gnome_read_config ->    
-         gnome_read_generic_home_content )
-      Changes to the mozilla policy module
-      Changes to the thunderbird policy module
-      Changes to the l2tp policy module
-      Tab clean up in ldap file context file
-      Changes to the ldap policy module
-      Tab clean up in likewise file context file
-      Changes to the likewise policy module
-      Tab clean up in lircd file context file
-      Changes to the lircd policy module
-      Changes to the livecd policy module
-      Tab clean up in loadkeys file context file
-      Changes to the loadkeys policy module and relevant dependencies
-      Tab clean up in lockdev file context file
-      Changes to the lockdev policy module
-      Tab clean up in logrotate file context file
-      Changes to the logrotate policy module and relevant dependencies
-      Tab clean up in logwatch file context file
-      Changes to the logrotate policy module
-      Changes to the logwatch policy module
-      Tab clean up in lpd file context file
-      Changes to the lpd policy module
-      Tab clean up in cron policy module
-      Changes to the lpd policy module
-      Changes to the consolekit policy module
-      Tab fix in cron policy module
-      Tab clean up in mailman file context file
-      Changes to the mailman policy module and relevant dependencies
-      Tab clean up in mcelog file context file
-      Changes to the mcelog policy module
-      Tab clean up in mediawiki file context file
-      Mediawiki XML clean up
-      Tab clean up in memcached file context file
-      Changes to the memcached policy module
-      Changes to the apache policy module
-      Tab clean up in milter file context file
-      Changes to the milter policy module and relevant dependencies
-      Changes to the modemmanager policy module
-      Tab clean up in mojomojo file context file
-      Changes to the mojomojo policy module and relevant dependencies
-      Changes to the gpg policy module
-      Changes to the mongodb policy module
-      Changes to the mono policy module
-      Changes to the monop policy module
-      Tab clean up in mozilla file context file
-      Changes to the mozilla policy module and relevant dependencies
-      Changes to the mozilla policy module
-      Changes to the apache policy module
-      Tab clean up in mpd file context file
-      Changes to the mpd policy module
-      Tab clean up in mplayer file context file
-      Changes to the evolution policy module
-      Changes to the mplayer policy module
-      Changes to the irc policy module
-      Tab clean up in mrtg file context file
-      Changes to the mrtg policy module
-      Tab clean up in mta file context file
-      Changes to the mta policy module and relevant dependencies
-      Changes to the mta policy module and relevant dependencies
-      Get rid of mozilla_conf_t as it is unused
-      Changes to the logrotate policy module
-      Changes to the logwatch policy module
-      Changes to the java policy module
-      Changes to the apache module and relevant dependencies
-      Tab clean up in munin file context file
-      Changes to the munin policy module and relevant dependencies
-      Tab clean up in mysql file context file
-      Changes to mysqld policy module
-      Changes to various policy modules
-      Changes to the munin policy module
-      Changes to the dovecot policy module
-      Changes to various policy modules
-      Changes to the mta policy module
-      Changes to the certmonger policy module and relavant dependencies
-      Tab clean up in nagios file context file
-      Changes to the nagios policy module and relevant dependencies
-      Changes to the modutils policy module
-      Tab cleanup in the nessus file context file
-      Changes to the nessus policy module
-      Tab clean up in the network manager file context file
-      Changes to the networkmanager policy module and relevant dependencies
-      Changes to the mozilla policy module
-      Changes to the cobbler policy module
-      Initial rngd policy module
-      Tab clean up in the nis file context file
-      Changes to the nis policy module
-      Tab clean up in the nscd file context file
-      Changes to the nscd policy module
-      Tab clean up in the nsd file context file
-      Changes to the nsd policy module
-      Tab clean up in the nslcd file context file
-      Changes to the nslcd policy module
-      Tab clean up in the ntop file context file
-      Changes to the ntop policy module
-      Tab clean up in the ntp file context file
-      Changes to the ntp policy module
-      Changes to the numad policy module
-      Tab clean up in the nut file context file
-      Changes to the nut policy module
-      Tab clean up in the nx file context file
-      Changes to the nx policy module
-      Changes to the oav policy module
-      Initial obex policy module
-      Tab clean up in the oddjob file context file
-      Tab clean up in gpg policy module
-      Changes to the oddjob policy module
-      Changes to the mozilla policy module
-      Initial pacemaker policy module
-      Tab clean up in the oidentd file context file
-      Changes to the oident policy module
-      Tab clean up in the openca file context file
-      Changes to the openca policy module
-      Tab clean up in the openct file context file
-      Changes to the openct policy module
-      Tab clean up in the openvpn file context file
-      Changes to the openvpn policy module
-      Tab clean up in the pads file context file
-      Changes to the pads policy module
-      Tab clean up in the passenger file context file
-      Changes to the passenger policy module and relevant dependencies
-      Tab clean up in the pcmcia file context file
-      Changes to the pcmcia policy module
-      Tab clean up in the pcscd file context file
-      Changes to the pcscd policy module and relevant dependencies
-      Tab clean up in the pegasus file context file
-      Changes to the pegasus policy module
-      Tab clean up in the perdition file context file
-      Changes to the perdition policy module
-      Tab clean up in the pingd file context file
-      Changes to the pingd policy module
-      Changes to the plymouthd policy module
-      Changes to the mozilla policy module
-      Changes to the plymouth policy module
-      Tab clean up in the podsleuth file context file
-      Changes to the podsleuth policy module
-      Tab clean up in the policykit file context file
-      Changes to the policykit policy module and relevant dependencies
-      Tab clean up in the portage file context file
-      Changes to the portage policy module
-      Tab clean up in the portmap file context file
-      Changes to the portmap policy module
-      Tab clean up in the portreserve file context file
-      Changes to the portreserve policy module
-      Tab clean up in the portslave file context file
-      Changes to the portslave policy module and relevant dependencies
-      Tab clean up in the postfix file context file
-      Changes to the postfix policy module and relevant dependencies
-      Fixes to various policy modules
-      Tab clean up in the postfixpolicyd file context file
-      Changes to the postfixpolicyd policy module
-      Tab clean up in the postgrey file context file
-      Changes to the postgrey policy module
-      Tab clean up in the ppp file context file
-      Changes to the ppp policy module and relevant dependencies
-      Tab clean up in the prelink file context file
-      Changes to the prelink policy module and relevant dependencies
-      Tab clean up in the prelude file context file
-      Changes to the prelude policy module
-      Tab clean up in the privoxy file context file
-      Changes to the privoxy policy module
-      Tab clean up in the procmail file context file
-      Changes to the procmail policy module
-      Tab clean up in the psad file context file
-      Changes to the psad policy module
-      Changes to the ptchown policy module
-      Tab clean up in the publicfile file context file
-      Changes to the publicfile policy module
-      Fix a fatal syntax error in mozilla_plugin_role()
-      Changes to the plymouth policy module
-      Changes to the policykit policy module
-      Module version bump for fixes in shorewall, fail2ban and portage policy   
-          modules by Sven Vermeulen
-      Tab clean up in the puppet file context file
-      Changes to ther puppet policy module and relevant dependencies
-      Initial pwauth policy module
-      Tab clean up in the pxe file context file
-      Changes to the pxe policy module
-      Tab clean up in the pyzor file context file
-      Changes to the pyzor policy module
-      Tab clean up in the qemu file context file
-      Changes to the qemu policy module
-      Tab clean up in the virt file context file
-      Changes to the virt policy module and relevant depedencies
-      Changes to the virt policy module
-      Changes to the cron policy module
-      Changes to the qemu policy module
-      Changes to the virt policy module
-      Epylog wants sys_nice and setsched
-      Tab clean up in the qmail file context file
-      Changes to the qmail policy module
-      Tab clean up in the qpid file context file
-      Changes to the qpid policy module
-      Tab clean up in the quota file context file
-      Changes to the quota policy module and relevant dependencies
-      Initial rabbitmq policy module
-      Tab clean up in the radius file context file
-      Changes to the radius policy module
-      Tab clean up in the radvd file context file
-      Changes to the radvd policy module
-      Changes to the raid policy module
-      Tab clean up in the razor file context file
-      Changes to the razor policy module and relevant dependencies
-      Smokeping cgi needs to run ping with a domain transition     Remove
-         redundant socket create already provided by    
-         sysnet_dns_name_resolve()
-      Changes to the virt policy module
-      Changes to the apache policy module
-      Changes to the gnome policy module
-      Changes to the rdisc policy mpdule
-      Changes to the readahead policy module
-      Changes to the remotelogin policy module
-      Tab clean up in the resmgr file context file
-      Changes to the resmgr policy module
-      Tab clean up in the rgmanager file context file
-      Changes to the rgmanager policy module
-      Initial Realmd policy module and relevant dependencies
-      Fix resmgrd init script file context specification
-      Changes to the cups policy module
-      automount reads overcommit_memory
-      Changes to the networkmanager policy module
-      Freshclam manages amavis spool content
-      Changes to the tftp policy module
-      Changes to the cobbler policy module
-      Tab clean up in the rhcs file context file
-      Changes to the rhcs policy module and relevant dependencies
-      Tab clean up in the rhgb file context file
-      Changes to the rhgb policy module
-      Tab clean up in the rhsmcertd file context file
-      Changes to the rhsmcertd policy module
-      Tab clean up in the ricci file context file
-      Changes to the ricci policy module
-      Tab clean up in the rlogin file context file
-      Changes to the rlogin policy module
-      Tab clean up in the roundup file context file
-      Changes to the roundup policy module
-      Changes to the remotelogin policy module
-      Changes to the apache policy module
-      Changes to the awstats policy module
-      fix puppet_admin() need to require types that it uses
-      Replace wrong type in puppet_admin()
-      Fix a syntax error in ricci_domtrans()
-      Catch all rpcbind content in /var/run
-      Changes to the cups policy module
-      Tab clean up in the rpc file context file
-      Changes to the rpc policy module
-      Tab clean up in the rpcbind file context file
-      Changes to the rpcbind policy module
-      Tab clean up in the rpm file context file
-      Changes to the rpm policy module and depedencies
-      Changes to the rshd policy module
-      Changes to the virt policy module
-      Changes to the rssh policy module
-      Tab clean up in the rsync file context file
-      Fix a typo in apache XML
-      Changes to the rsync policy module
-      Changes to the rtkit policy module
-      Tab clean up in the rwho file context file
-      Changes to the rwho policy module
-      Reads /proc/sys/kernel/random/poolsize
-      Tab clean up in the samba file context file
-      Changes to the samba policy module and relevant dependencies
-      Tab clean up in the sambagui file context file
-      Changes to the sambagui policy module
-      Initial firewallgui policy module
-      Tab clean up in the samhain file context file
-      Changes to the samhain policy module
-      Tab clean up in the sanlock file context file
-      Changes to the sanlock policy module and relevant dependencies
-      Tab clean up in the sasl file context file
-      Changes to the sasl policy module
-      Chnages to the sblim policy module
-      Tab clean up in the screen file context file
-      Changes to the screen policy module
-      Tab clean up in the sectoolm file context file
-      Changes to firewallgui policy module
-      Changes to the sectoolm policy module
-      Tab clean up in the sendmail file context file
-      Changes to the sendmail policy module and relevant dependencies
-      Tab clean up in the setroubleshoot file context file
-      Changes to the setroubleshoot policy module
-      Tab clean up in the shorewall file context file
-      Changes to the shorewall policy module
-      Tab clean up in the shutdown file context file
-      Changes to the shutdown policy module and relevant dependencies
-      Tab clean up in the slocate file context file
-      Changes to the slocate policy module and relevant dependencies
-      These domains transition to shutdown domain now so they no longer need    
-         direct access
-      Re-add missing network rule in screen policy module
-      fail2ban server sets scheduler
-      shutdown XML clean up
-      libvirtd sets kernel scheduler
-      mongod reads cpuinfo_max_freq
-      Changes to the slrnpull policy module
-      Tab clean up in the smartmon file context file
-      Changes to the smartmon policy module
-      Tab clean up in the smokeping file context file
-      Changes to the smokeping policy module
-      Tab clean up in the smoltclient file context file
-      Changes to the smoltclient policy module
-      Tab clean up in the snmp file context file
-      Changes to the snmp policy module
-      Tab clean up in the snort file context file
-      Changes to the snort policy module
-      Changes to the sosreport policy module and relevant dependencies
-      Tab clean up in the soundserver file context file
-      Changes to the soundserver policy module
-      Tab clean up in the spamassassin file context file
-      Changes to the spamassassin policy module and relevant dependendies
-      spamassassin_role callers create ~/.spamd with the spamd_home_t user    
-         home type instead
-      Re-add sys_admin capability that was lost with porting from Fedora
-      Move mailscanner content to mailscanner module
-      Changes to the speedtouch policy module
-      Tab clean up in the squid file context file
-      Changes to the squid policy module
-      Changes to the sssd policy module
-      Tab clean up in the stunnel file context file
-      Changes to the stunnel policy module
-      Tab clean up in the sxid file context file
-      Changes to the sxid policy module
-      Tab clean up in the sysstat file context file
-      Changes to the sysstat policy module
-      Tab clean up in the tcpd file context file
-      Changes to the tcpd policy module
-      Changes to the tcsd policy module
-      Tab clean up in the telepathy file context file
-      Changes to the telepathy policy module
-      Tab clean up in the telnet file context file
-      Changes to the telnet policy module
-      Tab clean up in the tftp file context file
-      Changes to the tftp policy module
-      Tab clean up in the tgtd file context file
-      Changes to the tgtd policy module
-      Tab clean up in the thunderbird file context file
-      Changes to the thunderbird policy module
-      Catch /var/log/cron directory as well
-      Dovecot module version bump for fixes by Sven Vermeulen
-      Portage module version bump for fixes by Sven Vermeulen
-      Cron module version bump for fixes by Sven Vermeulen
-      Changes to the exim policy module
-      Entropyd reads /proc/meminfo
-      Blueman reads tmp_t directories
-      Do not audit attempts by cups config to read tmp_t directories
-      Do not audit attempts by fail2ban to read tmp_t directories
-      Do not audit attempts by firewalld to read tmp_t directories
-      Gnomeclock reads urandom and realtime clock
-      Kdumpctl needs sys_chroot capability
-      Various kdumpgui fixes from Fedora
-      Do not audit attempts by logwatch to read tmp_t directories
-      Catch all alias files
-      Refine aliases file transition with names
-      Realmd dbus chat policykit and networkmanager from Fedora
-      Do not audit attempts by tuned to read tmp_t directories
-      Changes to the timidity policy module
-      Tab clean up in the tmpreaper file context file
-      Changes to the tmpreaper policy module and relevant dependencies
-      Tab clean up in the tor file context file
-      Changes to the tor policy module
-      Changes to the transproxy policy module
-      Tab clean up in the tripwire file context file
-      Changes to the tripwire policy module
-      Tab clean up in the tuned file context file
-      Changes to the tuned policy module
-      Tab clean up in the tvtime file context file
-      Changes to the tvtime policy module
-      Changes to the tzdata policy module
-      Changes to the ucspitcp policy module
-      Tab clean up in the ulogd file context file
-      Changes to the ulogd policy module
-      Tab clean up in the uml file context file
-      Changes to the uml policy module
-      Make it so that irc clients can also get attributes of cifs, nfs, fuse    
-         and other file systems
-      Changes to the updfstab policy module
-      Changes to the uptime policy module
-      Tab clean up in the usbmodules file context file
-      Changes to the usbmodule policy module
-      Changes to the usbmuxd policy module
-      Tab clean up in the userhelper file context file
-      Screen sends child terminated signals to all interactive fd domains
-      Changes to the userhelper policy module and relevant dependencies
-      Changes to the virt policy module
-      Module version bump for fail2ban changes by Sven Vermeulen
-      Changes to the rpm policy module
-      fix smartmon init script file context specification
-      Changes to the usernetctl policy module
-      Tab clean up in the uucp file context file
-      Changes to the uucp policy module
-      Changes to the virt policy module
-      Tab clean up in the uuid file context file
-      Changes to the uuidd policy module
-      Tab clean up in the uwimap file context file
-      Changes to the uwimap policy module
-      Tab clean up in the varnishd file context file
-      Changes to the varnishd policy module
-      Changes to the vbetool policy module
-      Tab clean up in the vdagent file context file
-      Changes to the vdagent policy module
-      Tab clean up in the vhostmd file context file
-      Changes to the vhostmd policy module
-      Changes to the vlock policy module
-      Tab clean up in the vmware file context file
-      Changes to the vmware policy module
-      Tab clean up in the vnstatd file context file
-      Changes to the vnstatd policy module
-      Tab clean up in the vpn file context file
-      Changes to the vpnc policy module
-      Tab clean up in the w3c file context file
-      Changes to the w3c policy module
-      Tab clean up in the watchdog file context file
-      Changes to the watchdog policy module
-      Changes to the wdmd policy module
-      Changes to the webadm policy modules
-      Changes to the webalizer policy module
-      White space fix in apache policy module
-      Changes to the wine policy module
-      Tab clean up in the wireshark file context file
-      Changes to the wireshark policy module
-      Tab clean up in the wm file context file
-      Changes to the wm policy module
-      Changes to the inn policy module
-      Move man cache file type to miscfiles
-      Changes to the inn policy module
-      More accurate dbadm boolean descriptions
-      mysql_admin() has access to ~/.my.cnf files
-      Tab clean up in the xen file context file
-      Changes to the xen policy module and relevant dependencies
-      Tab clean up in the xfs file context file
-      Changes to the xfs policy module
-      Changes to the xguest policy module and relevant dependencies
-      Changes to the xprint policy module
-      Changes to the xscreensaver policy module
-      Tab clean up in the yam file context file
-      Changes to the yam policy module
-      Tab clean up in the zabbix file context file
-      Changes to the zabbix policy module
-      Tab clean up in the zarafa file context file
-      Changes to the zarafa policy module
-      Tab clean up in the zebra file context file
-      Changes to the zebra policy module
-      Changes to the zosremote policy module
-      Changes to the mysql policy module
-      Tab clean up in the pulseaudio file context file
-      Changes to the pulseaudio policy module and relevant dependencies
-      Changes to the pulseaudio policy module
-      One chown too many
-      Changes to the mplayer policy module
-      The prelink cron script now runs in its own domain
-      Initial smstools policy module
-      Initial openvswitch policy module and relevant dependencies
-      Reads pcsd pid files
-      Reads random device
-      winbind manages smbd pid sock files from Fedora
-      Changes to the bind policy module
-      CG rules daemon reads all sysctls
-      Runs consoletype and searches nfs state data from Fedora
-      Support munin unbound plugin from Fedora
-      Zabbix sends signals from Fedora
-      Blueman sets scheduler and sends signals from Fedora
-      pcscd_read_pub_files is deprecated, use pcscd_read_pid_files instead
-      Module version bumps for fixes in portage and virt modules by Sven    
-         Vermeulen
-      Policy module version bumps for various changes by Sven Vermeulen
-      Changes to the openvpn policy module
-      Module version bumps for various fixes by Sven Vermeulen
-      Changes to the mandb policy module
-      Changes to the tmpreaper policy module
-      Changes to the munin policy module
-      Changes to the rngd policy module
-      Changes to the awstats policy module and relevant dependencies
-      Changes to the apache policy module
-      Changes to various policy modules
-      Changes to the abrt policy module
-      Changes to the passenger policy module and relevant depedencies
-      Changes to the pegagus policy module
-      Changes to the mta policy module
-      Changes to the fetchmail policy module
-      Changes to the bitlbee policy module
-      Changes to the blueman policy module and relevant dependencies
-      Changes to the amavis policy module
-      Changes to the userhelper policy module
-      Changes to the blueman policy module
-      Changes to the squid policy module
-      Changes to the sblim policy module
-      Changes to the kdumpgui policy module
-      Changes to the mailman policy module
-      Changes to the realmd policy module
-      Changes to the raid policy module
-      Changes to the samba policy module
-      Changes to the various policy modules
-      Changes to the snmp policy module
-      Changes to the spamassassin policy module
-      Changes to the sssd policy module
-      Changes to the l2tpd policy module
-      Changes to the shorewall policy module
-      Changes to the xen policy module
-      Changes to the tftp policy modules
-      Changes to the accountsd policy module
-      Changes to the tgtd policy module
-      Changes to the corosync policy module
-      Changes to the kdump policy module
-      Changes to the openvswitch policy module
-      Changes to the mpd policy module
-      Changes to the mozilla policy module
-      Changes to the zarafa policy module
-      Changes to the boinc policy module
-      Changes to the setroubleshoot policy module
-      Changes to the dspam policy module
-      Changes to the rgrmanager policy module and relevant dependencies
-      Changes to the svnserve policy module
-      Changes to the virt policy module
-      Changes to the prelink policy module
-      Changes to the apache policy module
-      Changes to the gnomeclock policy module
-      Changes to various policy modules
-      Changes to the pegagus policy module
-      Changes to the shorewall policy module
-      Changes to the kerberos policy module
-      Changes to the rhcs policy module
-      Changes to the irc policy module
-      Changes to the clamav policy module
-      Changes to the mrtg policy module
-      Changes to the munin policy module
-      Changes to the amavis policy module
-      Changes to the ppp policy module
-      Initial jockey policy module
-      Module version bumps for "several named transition for directories    
-         created in /var/run by initscripts" in various modules by Laurent    
-         Bigonville
-      Module version bumps for fixes in various modules by Laurent Bigonville
-      Module version bump for changes to the consolekit policy module by    
-         Laurent Bigonville
-      Changes to the stunnel policy module
-      Module version bumps for fixes in various modules by Sven Vermeulen
-      Changes to the virt policy module
-      Changes to the apache policy module
-      Changes to the wm policy module
-      Changes to the samba policy module
-      Changes to the certmonger policy module
-      Changes to the mozilla policy module
-      Changes to the corosync policy module
-      Changes to the pacemaker policy module
-      Changes to the tuned policy module
-      Changes to the cups module and relevant dependencies
-      Changes to the rhsmcertd policy module
-      Changes to the lpd policy module
-      Changes to the munin policy module
-      Changes to the ntp policy module
-      Changes to the tor policy module
-      Changes to the firewalld policy module
-      Changes to the dspam policy module
-      Changes to the setroubleshoot policy module
-      Changes to the condor policy module
-      Changes to the kerberos policy module
-      Changes to the passenger policy module
-      Changes to the ppp policy module
-      Changes to the the dkim policy module
-      Changes to the abrt policy module
-      Changes to the lircd policy module
-      Changes to the dkim policy module
-      Changes to the virt policy module
-      Changes to the munin policy module
-      Changes to the dovecot policy module
-      Changes to the cobbler policy module
-      Changes to the userhelper policy module
-      Changes to the logwatch policy module
-      Changes to the wdmd policy module and relevant dependencies
-      Changes to the nscd policy module and relevant dependencies
-      Changes to the dbus policy module
-      Module version bumps for fixes in various policy modules by Laurent    
-         Bigonville
-      Changes to the cups policy module
-      Changes to the dbus policy module
-      Changes to the apcupsd policy module
-      Remove redundant net_bind_service capabilities in various modules
-      Changes to the virt policy module
-      Changes to the puppet policy module
-      Module version bumps for fixes in various policy module by Sven    
-         Vermeulen
-      Module version bumps for file context fixes in various policy modules by  
-           Laurent Bigonville
-      Make httpd_manage_all_user_content() do what it advertises
-      Add more networking rules to mplayer policy module for compatibility
-      Fix fcronsighup file context. Should be crontab_exec_t as per previous    
-         spec
-      Module version bumps for changes in various modules by Sven Vermeulen
-      Move asterisk_exec() and modify XML header
-      Consolekit creates /var/run/console directories with a type transition    
-         unconditionally
-      Module version bump in consolekit policy module for changes by Sven    
-         Vermeulen
-      The imaplogin executable file should be courier_pop_exec_t according to   
-          existing file context specification
-      Module version bump for changes to the fail2ban policy module by Sven    
-         Vermeulen
-      Modules version bumps for changes in various policy modules by Sven    
-         Vermeulen
-
-Laurent Bigonville (28):
-      Add Debian locations for Telepathy connection managers
-      Label telepathy-rakia as telepathy-sofiasip
-      Allow smartd daemon to write in /var/lib/smartmontools directory
-      Add Debian location for smartd daemon initscript
-      Add Debian location for accounts-daemon daemon
-      Add Debian location for rtkit-daemon daemon
-      Add Debian location for tcsd init script
-      Add Debian location for libvirtd init script
-      Add Debian location for evolution executables
-      Add Debian locationis for nut executables and configuration files
-      Add several named transition for directories created in /var/run by
-         initscripts
-      Run packagekit under apt_t context on Debian distribution
-      Add proper label for colord daemon in debian
-      Allow the system dbus to search cgroup directories
-      Allow virtd_t context to read sysctl_crypto_t
-      Allow colord_t context to read sysctl_crypto_t
-      Add proper label for gconfd-2 daemon in Debian
-      Ensure that consolekit can create /var/run/console directory on Debian
-      Properly label nm-dispatcher.action on Debian
-      policykit.fc: Properly label polkit-agent-helper-1 on Debian
-      cups.fc: Properly label cups-pk-helper-mechanism on Debian
-      Allow pcscd the fsetid capability
-      Allow networkmanager_t to read crypto_sysctl_t
-      Allow virsh_t context to read sysctl_crypto_t
-      Allow cupsd_t to read cupsd_log_t
-      gnomeclock.fc: Properly label gsd-datetime-mechanism in Debian
-      ptchown.fc: Properly label pt_chown executable in Debian
-      Label /usr/bin/kvm as qemu_exec_t
-
-Matthew Thode (2):
-      added autofs support and nsswitch support
-      removing refrences to named_var_lib_t as it doesn't exist anymore for
-         bind.if
-
-Mika Pflüger (3):
-      Allow saslauthd_t to talk to mysqld via TCP
-      Quota policy adjustments: * Allow quota_t to load kernel modules
-      Debian locations for dovecot deliver and dovecot auth.
-
-Russell Coker (1):
-      Fix djbdns ports
-
-Sven Vermeulen (75):
-      Update with new substitutions
-      Mark the pid directory as a pid directory
-      Add in transitions for queue types when the queues are created
-      Fix typo in interface postfix_exec_postqueue
-      Allow maildelivery to use dotlock files in the mail spool
-      Allow postfix local to change ownership of mailfiles
-      Use libexec location for postfix binaries
-      Allow initrc_t to create run dirs for contrib modules
-      Update logwatch location in file context
-      Sandbox is an inherent part of the portage inner workings
-      Fix startup issue with fail2ban-client
-      Be able to get output from fail2ban-client
-      Ignore searches when ran from the user home directory
-      Shorewall admins execute shorewall too
-      Shorewall needs sys_admin capability for manipulating network stack
-      Be able to display dovecot errors
-      Remove transition to ldconfig
-      Adding interfaces for handling cron log files
-      Fail2ban client checks state of log files before telling the server
-      Support mysql init script
-      Support initial creation of mysql database files
-      Portage fetch domain needs to access certificates
-      Make samba domtrans optional in virt
-      Fix typo in tunable declaration for fcron_crond
-      Introducing cron_manage_log_files interface
-      Introduce dontaudit interfaces for leaked fd and unix stream sockets
-      Dontaudit attempts by system_mail_t to use leaked fd or stream sockets
-      Support at service
-      Additional postfix admin requirements
-      Reintroduce postfix_var_run_t for pid directory and fowner capability
-      Postfix deferred queue should not mark mails as postfix_spool_maildrop_t
-      Running qemu with SDL support requires more xserver-related privileges
-      Fix typo in clockspeed comment
-      Support openvpn status file
-      Asterisk voicemail messages are generated from tmp
-      Make rtkit calls optional
-      Gentoo installs dovecot certs in /etc/ssl/dovecot
-      Moving sandbox code to sandbox section (v2)
-      Allow sandbox to log violations
-      Use rw_fifo_file_perms
-      Apache should not depend on gpg
-      Named init script creates rundir
-      Add ~/.maildir as a valid maildir destination
-      Support stunnel_read_config for startup
-      Updates on stunnel policy
-      More .maildir fixes
-      Mark make.profile entry as portage_conf_t (v2)
-      Move mta call (coding style)
-      Changes to puppet domain
-      Allow rpc admin to run exportfs
-      Grant sys_admin capability to puppet
-      Puppet module helper scripts are puppet_var_lib_t
-      Support netlink_route_socket creation for puppet
-      Puppet initscript creates /run/puppet
-      Puppet runs statfs against selinuxfs
-      mplayer streams HTTP resources
-      fcron and fcronsighup binaries are moved
-      Asterisk needs to search through logs
-      Denial in mail log on node bind
-      Fix typo in mcelog_admin (missing bracket)
-      Add in contexts for fcron rm.systab and systab.tmp
-      Remove pulseaudio filename_trans conflict
-      Allow asterisk admins to execute asterisk binary directly
-      Support tagfiles for consolekit
-      ConsoleKit needs to read the dbus machine-id
-      File context updates for courier-imap
-      Update on file contexts for OpenLDAP
-      Update on file contexts for wpa_supplicant
-      Allow IRC clients to read certificates
-      Allow reading /proc/self for fail2ban due to FAM support
-      Update file contexts for puppet
-      Support ~/.tmux.conf as tmux configuration file
-      Add setuid/setgid capability to ulogd_t
-      Support tmux control socket
-      Postfix creates defer(red) queue locations
-
diff --git a/policy/modules/contrib/metadata.xml b/policy/modules/contrib/metadata.xml
deleted file mode 100644
index 71d9e256..00000000
--- a/policy/modules/contrib/metadata.xml
+++ /dev/null
@@ -1 +0,0 @@
-<summary>Contributed Reference Policy modules.</summary>
diff --git a/policy/modules/contrib/dbadm.fc b/policy/modules/roles/dbadm.fc
index e6aa2fba..e6aa2fba 100644
--- a/policy/modules/contrib/dbadm.fc
+++ b/policy/modules/roles/dbadm.fc
diff --git a/policy/modules/contrib/dbadm.if b/policy/modules/roles/dbadm.if
index d9ed6511..d9ed6511 100644
--- a/policy/modules/contrib/dbadm.if
+++ b/policy/modules/roles/dbadm.if
diff --git a/policy/modules/contrib/dbadm.te b/policy/modules/roles/dbadm.te
index b60c464f..b60c464f 100644
--- a/policy/modules/contrib/dbadm.te
+++ b/policy/modules/roles/dbadm.te
diff --git a/policy/modules/contrib/guest.fc b/policy/modules/roles/guest.fc
index 601a7b02..601a7b02 100644
--- a/policy/modules/contrib/guest.fc
+++ b/policy/modules/roles/guest.fc
diff --git a/policy/modules/contrib/guest.if b/policy/modules/roles/guest.if
index ad1653f9..ad1653f9 100644
--- a/policy/modules/contrib/guest.if
+++ b/policy/modules/roles/guest.if
diff --git a/policy/modules/contrib/guest.te b/policy/modules/roles/guest.te
index 19cdbe1d..19cdbe1d 100644
--- a/policy/modules/contrib/guest.te
+++ b/policy/modules/roles/guest.te
diff --git a/policy/modules/contrib/webadm.fc b/policy/modules/roles/webadm.fc
index d46378a0..d46378a0 100644
--- a/policy/modules/contrib/webadm.fc
+++ b/policy/modules/roles/webadm.fc
diff --git a/policy/modules/contrib/webadm.if b/policy/modules/roles/webadm.if
index e1a7350a..e1a7350a 100644
--- a/policy/modules/contrib/webadm.if
+++ b/policy/modules/roles/webadm.if
diff --git a/policy/modules/contrib/webadm.te b/policy/modules/roles/webadm.te
index 2a6cae77..2a6cae77 100644
--- a/policy/modules/contrib/webadm.te
+++ b/policy/modules/roles/webadm.te
diff --git a/policy/modules/contrib/xguest.fc b/policy/modules/roles/xguest.fc
index 601a7b02..601a7b02 100644
--- a/policy/modules/contrib/xguest.fc
+++ b/policy/modules/roles/xguest.fc
diff --git a/policy/modules/contrib/xguest.if b/policy/modules/roles/xguest.if
index 4f1d07d7..4f1d07d7 100644
--- a/policy/modules/contrib/xguest.if
+++ b/policy/modules/roles/xguest.if
diff --git a/policy/modules/contrib/xguest.te b/policy/modules/roles/xguest.te
index 1e7f6433..1e7f6433 100644
--- a/policy/modules/contrib/xguest.te
+++ b/policy/modules/roles/xguest.te
diff --git a/policy/modules/contrib/abrt.fc b/policy/modules/services/abrt.fc
index d05819be..d05819be 100644
--- a/policy/modules/contrib/abrt.fc
+++ b/policy/modules/services/abrt.fc
diff --git a/policy/modules/contrib/abrt.if b/policy/modules/services/abrt.if
index 9d1f00da..9d1f00da 100644
--- a/policy/modules/contrib/abrt.if
+++ b/policy/modules/services/abrt.if
diff --git a/policy/modules/contrib/abrt.te b/policy/modules/services/abrt.te
index 718736b5..718736b5 100644
--- a/policy/modules/contrib/abrt.te
+++ b/policy/modules/services/abrt.te
diff --git a/policy/modules/contrib/accountsd.fc b/policy/modules/services/accountsd.fc
index f9d8d7a9..f9d8d7a9 100644
--- a/policy/modules/contrib/accountsd.fc
+++ b/policy/modules/services/accountsd.fc
diff --git a/policy/modules/contrib/accountsd.if b/policy/modules/services/accountsd.if
index 312d5692..312d5692 100644
--- a/policy/modules/contrib/accountsd.if
+++ b/policy/modules/services/accountsd.if
diff --git a/policy/modules/contrib/accountsd.te b/policy/modules/services/accountsd.te
index 5ae5fa50..5ae5fa50 100644
--- a/policy/modules/contrib/accountsd.te
+++ b/policy/modules/services/accountsd.te
diff --git a/policy/modules/contrib/acpi.fc b/policy/modules/services/acpi.fc
index ffd4ea00..ffd4ea00 100644
--- a/policy/modules/contrib/acpi.fc
+++ b/policy/modules/services/acpi.fc
diff --git a/policy/modules/contrib/acpi.if b/policy/modules/services/acpi.if
index 109b644e..109b644e 100644
--- a/policy/modules/contrib/acpi.if
+++ b/policy/modules/services/acpi.if
diff --git a/policy/modules/contrib/acpi.te b/policy/modules/services/acpi.te
index 3a7320d7..3a7320d7 100644
--- a/policy/modules/contrib/acpi.te
+++ b/policy/modules/services/acpi.te
diff --git a/policy/modules/contrib/afs.fc b/policy/modules/services/afs.fc
index 9307074e..9307074e 100644
--- a/policy/modules/contrib/afs.fc
+++ b/policy/modules/services/afs.fc
diff --git a/policy/modules/contrib/afs.if b/policy/modules/services/afs.if
index d934f454..d934f454 100644
--- a/policy/modules/contrib/afs.if
+++ b/policy/modules/services/afs.if
diff --git a/policy/modules/contrib/afs.te b/policy/modules/services/afs.te
index 9ebe863a..9ebe863a 100644
--- a/policy/modules/contrib/afs.te
+++ b/policy/modules/services/afs.te
diff --git a/policy/modules/contrib/aiccu.fc b/policy/modules/services/aiccu.fc
index 5fc50bec..5fc50bec 100644
--- a/policy/modules/contrib/aiccu.fc
+++ b/policy/modules/services/aiccu.fc
diff --git a/policy/modules/contrib/aiccu.if b/policy/modules/services/aiccu.if
index cd22faa1..cd22faa1 100644
--- a/policy/modules/contrib/aiccu.if
+++ b/policy/modules/services/aiccu.if
diff --git a/policy/modules/contrib/aiccu.te b/policy/modules/services/aiccu.te
index 82c6dff3..82c6dff3 100644
--- a/policy/modules/contrib/aiccu.te
+++ b/policy/modules/services/aiccu.te
diff --git a/policy/modules/contrib/aisexec.fc b/policy/modules/services/aisexec.fc
index 578f2d33..578f2d33 100644
--- a/policy/modules/contrib/aisexec.fc
+++ b/policy/modules/services/aisexec.fc
diff --git a/policy/modules/contrib/aisexec.if b/policy/modules/services/aisexec.if
index 9e1a105a..9e1a105a 100644
--- a/policy/modules/contrib/aisexec.if
+++ b/policy/modules/services/aisexec.if
diff --git a/policy/modules/contrib/aisexec.te b/policy/modules/services/aisexec.te
index dfacbf51..dfacbf51 100644
--- a/policy/modules/contrib/aisexec.te
+++ b/policy/modules/services/aisexec.te
diff --git a/policy/modules/contrib/amavis.fc b/policy/modules/services/amavis.fc
index da86959b..da86959b 100644
--- a/policy/modules/contrib/amavis.fc
+++ b/policy/modules/services/amavis.fc
diff --git a/policy/modules/contrib/amavis.if b/policy/modules/services/amavis.if
index f8a810ce..f8a810ce 100644
--- a/policy/modules/contrib/amavis.if
+++ b/policy/modules/services/amavis.if
diff --git a/policy/modules/contrib/amavis.te b/policy/modules/services/amavis.te
index 9517486e..9517486e 100644
--- a/policy/modules/contrib/amavis.te
+++ b/policy/modules/services/amavis.te
diff --git a/policy/modules/contrib/apache.fc b/policy/modules/services/apache.fc
index f3202453..f3202453 100644
--- a/policy/modules/contrib/apache.fc
+++ b/policy/modules/services/apache.fc
diff --git a/policy/modules/contrib/apache.if b/policy/modules/services/apache.if
index 94878d66..94878d66 100644
--- a/policy/modules/contrib/apache.if
+++ b/policy/modules/services/apache.if
diff --git a/policy/modules/contrib/apache.te b/policy/modules/services/apache.te
index f04ba5c3..f04ba5c3 100644
--- a/policy/modules/contrib/apache.te
+++ b/policy/modules/services/apache.te
diff --git a/policy/modules/contrib/apcupsd.fc b/policy/modules/services/apcupsd.fc
index 43666b34..43666b34 100644
--- a/policy/modules/contrib/apcupsd.fc
+++ b/policy/modules/services/apcupsd.fc
diff --git a/policy/modules/contrib/apcupsd.if b/policy/modules/services/apcupsd.if
index 3dda6345..3dda6345 100644
--- a/policy/modules/contrib/apcupsd.if
+++ b/policy/modules/services/apcupsd.if
diff --git a/policy/modules/contrib/apcupsd.te b/policy/modules/services/apcupsd.te
index 3e4a2465..3e4a2465 100644
--- a/policy/modules/contrib/apcupsd.te
+++ b/policy/modules/services/apcupsd.te
diff --git a/policy/modules/contrib/arpwatch.fc b/policy/modules/services/arpwatch.fc
index 9b0eadc8..9b0eadc8 100644
--- a/policy/modules/contrib/arpwatch.fc
+++ b/policy/modules/services/arpwatch.fc
diff --git a/policy/modules/contrib/arpwatch.if b/policy/modules/services/arpwatch.if
index 63e1b571..63e1b571 100644
--- a/policy/modules/contrib/arpwatch.if
+++ b/policy/modules/services/arpwatch.if
diff --git a/policy/modules/contrib/arpwatch.te b/policy/modules/services/arpwatch.te
index 87aed96f..87aed96f 100644
--- a/policy/modules/contrib/arpwatch.te
+++ b/policy/modules/services/arpwatch.te
diff --git a/policy/modules/contrib/asterisk.fc b/policy/modules/services/asterisk.fc
index 337bf601..337bf601 100644
--- a/policy/modules/contrib/asterisk.fc
+++ b/policy/modules/services/asterisk.fc
diff --git a/policy/modules/contrib/asterisk.if b/policy/modules/services/asterisk.if
index 2e3f5a4b..2e3f5a4b 100644
--- a/policy/modules/contrib/asterisk.if
+++ b/policy/modules/services/asterisk.if
diff --git a/policy/modules/contrib/asterisk.te b/policy/modules/services/asterisk.te
index 2e0a687c..2e0a687c 100644
--- a/policy/modules/contrib/asterisk.te
+++ b/policy/modules/services/asterisk.te
diff --git a/policy/modules/contrib/automount.fc b/policy/modules/services/automount.fc
index dadd3a9f..dadd3a9f 100644
--- a/policy/modules/contrib/automount.fc
+++ b/policy/modules/services/automount.fc
diff --git a/policy/modules/contrib/automount.if b/policy/modules/services/automount.if
index fbaa3220..fbaa3220 100644
--- a/policy/modules/contrib/automount.if
+++ b/policy/modules/services/automount.if
diff --git a/policy/modules/contrib/automount.te b/policy/modules/services/automount.te
index 34922281..34922281 100644
--- a/policy/modules/contrib/automount.te
+++ b/policy/modules/services/automount.te
diff --git a/policy/modules/contrib/avahi.fc b/policy/modules/services/avahi.fc
index 2f72be4a..2f72be4a 100644
--- a/policy/modules/contrib/avahi.fc
+++ b/policy/modules/services/avahi.fc
diff --git a/policy/modules/contrib/avahi.if b/policy/modules/services/avahi.if
index 4652358f..4652358f 100644
--- a/policy/modules/contrib/avahi.if
+++ b/policy/modules/services/avahi.if
diff --git a/policy/modules/contrib/avahi.te b/policy/modules/services/avahi.te
index c9020826..c9020826 100644
--- a/policy/modules/contrib/avahi.te
+++ b/policy/modules/services/avahi.te
diff --git a/policy/modules/contrib/bind.fc b/policy/modules/services/bind.fc
index b4879dc1..b4879dc1 100644
--- a/policy/modules/contrib/bind.fc
+++ b/policy/modules/services/bind.fc
diff --git a/policy/modules/contrib/bind.if b/policy/modules/services/bind.if
index a99bae9c..a99bae9c 100644
--- a/policy/modules/contrib/bind.if
+++ b/policy/modules/services/bind.if
diff --git a/policy/modules/contrib/bind.te b/policy/modules/services/bind.te
index c96d0b82..c96d0b82 100644
--- a/policy/modules/contrib/bind.te
+++ b/policy/modules/services/bind.te
diff --git a/policy/modules/contrib/bird.fc b/policy/modules/services/bird.fc
index d415fdf3..d415fdf3 100644
--- a/policy/modules/contrib/bird.fc
+++ b/policy/modules/services/bird.fc
diff --git a/policy/modules/contrib/bird.if b/policy/modules/services/bird.if
index d744d6b8..d744d6b8 100644
--- a/policy/modules/contrib/bird.if
+++ b/policy/modules/services/bird.if
diff --git a/policy/modules/contrib/bird.te b/policy/modules/services/bird.te
index e525f326..e525f326 100644
--- a/policy/modules/contrib/bird.te
+++ b/policy/modules/services/bird.te
diff --git a/policy/modules/contrib/bitlbee.fc b/policy/modules/services/bitlbee.fc
index e7b0aa60..e7b0aa60 100644
--- a/policy/modules/contrib/bitlbee.fc
+++ b/policy/modules/services/bitlbee.fc
diff --git a/policy/modules/contrib/bitlbee.if b/policy/modules/services/bitlbee.if
index 3409d80d..3409d80d 100644
--- a/policy/modules/contrib/bitlbee.if
+++ b/policy/modules/services/bitlbee.if
diff --git a/policy/modules/contrib/bitlbee.te b/policy/modules/services/bitlbee.te
index b71fff2d..b71fff2d 100644
--- a/policy/modules/contrib/bitlbee.te
+++ b/policy/modules/services/bitlbee.te
diff --git a/policy/modules/contrib/bluetooth.fc b/policy/modules/services/bluetooth.fc
index 4fbe7955..4fbe7955 100644
--- a/policy/modules/contrib/bluetooth.fc
+++ b/policy/modules/services/bluetooth.fc
diff --git a/policy/modules/contrib/bluetooth.if b/policy/modules/services/bluetooth.if
index dc61988c..dc61988c 100644
--- a/policy/modules/contrib/bluetooth.if
+++ b/policy/modules/services/bluetooth.if
diff --git a/policy/modules/contrib/bluetooth.te b/policy/modules/services/bluetooth.te
index 45e5a361..45e5a361 100644
--- a/policy/modules/contrib/bluetooth.te
+++ b/policy/modules/services/bluetooth.te
diff --git a/policy/modules/contrib/boinc.fc b/policy/modules/services/boinc.fc
index e1e53a60..e1e53a60 100644
--- a/policy/modules/contrib/boinc.fc
+++ b/policy/modules/services/boinc.fc
diff --git a/policy/modules/contrib/boinc.if b/policy/modules/services/boinc.if
index 464a8968..464a8968 100644
--- a/policy/modules/contrib/boinc.if
+++ b/policy/modules/services/boinc.if
diff --git a/policy/modules/contrib/boinc.te b/policy/modules/services/boinc.te
index ed1aaf34..ed1aaf34 100644
--- a/policy/modules/contrib/boinc.te
+++ b/policy/modules/services/boinc.te
diff --git a/policy/modules/contrib/bugzilla.fc b/policy/modules/services/bugzilla.fc
index fce0b6eb..fce0b6eb 100644
--- a/policy/modules/contrib/bugzilla.fc
+++ b/policy/modules/services/bugzilla.fc
diff --git a/policy/modules/contrib/bugzilla.if b/policy/modules/services/bugzilla.if
index 19fce8e0..19fce8e0 100644
--- a/policy/modules/contrib/bugzilla.if
+++ b/policy/modules/services/bugzilla.if
diff --git a/policy/modules/contrib/bugzilla.te b/policy/modules/services/bugzilla.te
index 1ff9613f..1ff9613f 100644
--- a/policy/modules/contrib/bugzilla.te
+++ b/policy/modules/services/bugzilla.te
diff --git a/policy/modules/contrib/cachefilesd.fc b/policy/modules/services/cachefilesd.fc
index f58be76b..f58be76b 100644
--- a/policy/modules/contrib/cachefilesd.fc
+++ b/policy/modules/services/cachefilesd.fc
diff --git a/policy/modules/contrib/cachefilesd.if b/policy/modules/services/cachefilesd.if
index c4084b91..c4084b91 100644
--- a/policy/modules/contrib/cachefilesd.if
+++ b/policy/modules/services/cachefilesd.if
diff --git a/policy/modules/contrib/cachefilesd.te b/policy/modules/services/cachefilesd.te
index cf1e0337..cf1e0337 100644
--- a/policy/modules/contrib/cachefilesd.te
+++ b/policy/modules/services/cachefilesd.te
diff --git a/policy/modules/contrib/callweaver.fc b/policy/modules/services/callweaver.fc
index 3cdd635b..3cdd635b 100644
--- a/policy/modules/contrib/callweaver.fc
+++ b/policy/modules/services/callweaver.fc
diff --git a/policy/modules/contrib/callweaver.if b/policy/modules/services/callweaver.if
index f89bf39a..f89bf39a 100644
--- a/policy/modules/contrib/callweaver.if
+++ b/policy/modules/services/callweaver.if
diff --git a/policy/modules/contrib/callweaver.te b/policy/modules/services/callweaver.te
index 3c8fff6f..3c8fff6f 100644
--- a/policy/modules/contrib/callweaver.te
+++ b/policy/modules/services/callweaver.te
diff --git a/policy/modules/contrib/canna.fc b/policy/modules/services/canna.fc
index 7688d0ec..7688d0ec 100644
--- a/policy/modules/contrib/canna.fc
+++ b/policy/modules/services/canna.fc
diff --git a/policy/modules/contrib/canna.if b/policy/modules/services/canna.if
index e3fd1993..e3fd1993 100644
--- a/policy/modules/contrib/canna.if
+++ b/policy/modules/services/canna.if
diff --git a/policy/modules/contrib/canna.te b/policy/modules/services/canna.te
index d4a2b787..d4a2b787 100644
--- a/policy/modules/contrib/canna.te
+++ b/policy/modules/services/canna.te
diff --git a/policy/modules/contrib/ccs.fc b/policy/modules/services/ccs.fc
index f428bee0..f428bee0 100644
--- a/policy/modules/contrib/ccs.fc
+++ b/policy/modules/services/ccs.fc
diff --git a/policy/modules/contrib/ccs.if b/policy/modules/services/ccs.if
index 767fb712..767fb712 100644
--- a/policy/modules/contrib/ccs.if
+++ b/policy/modules/services/ccs.if
diff --git a/policy/modules/contrib/ccs.te b/policy/modules/services/ccs.te
index 12865a83..12865a83 100644
--- a/policy/modules/contrib/ccs.te
+++ b/policy/modules/services/ccs.te
diff --git a/policy/modules/contrib/certmaster.fc b/policy/modules/services/certmaster.fc
index 8322c348..8322c348 100644
--- a/policy/modules/contrib/certmaster.fc
+++ b/policy/modules/services/certmaster.fc
diff --git a/policy/modules/contrib/certmaster.if b/policy/modules/services/certmaster.if
index 965755cd..965755cd 100644
--- a/policy/modules/contrib/certmaster.if
+++ b/policy/modules/services/certmaster.if
diff --git a/policy/modules/contrib/certmaster.te b/policy/modules/services/certmaster.te
index daeb417d..daeb417d 100644
--- a/policy/modules/contrib/certmaster.te
+++ b/policy/modules/services/certmaster.te
diff --git a/policy/modules/contrib/certmonger.fc b/policy/modules/services/certmonger.fc
index 7d357324..7d357324 100644
--- a/policy/modules/contrib/certmonger.fc
+++ b/policy/modules/services/certmonger.fc
diff --git a/policy/modules/contrib/certmonger.if b/policy/modules/services/certmonger.if
index 3a456b70..3a456b70 100644
--- a/policy/modules/contrib/certmonger.if
+++ b/policy/modules/services/certmonger.if
diff --git a/policy/modules/contrib/certmonger.te b/policy/modules/services/certmonger.te
index 6e569dff..6e569dff 100644
--- a/policy/modules/contrib/certmonger.te
+++ b/policy/modules/services/certmonger.te
diff --git a/policy/modules/contrib/cgmanager.fc b/policy/modules/services/cgmanager.fc
index d638d196..d638d196 100644
--- a/policy/modules/contrib/cgmanager.fc
+++ b/policy/modules/services/cgmanager.fc
diff --git a/policy/modules/contrib/cgmanager.if b/policy/modules/services/cgmanager.if
index ad459a68..ad459a68 100644
--- a/policy/modules/contrib/cgmanager.if
+++ b/policy/modules/services/cgmanager.if
diff --git a/policy/modules/contrib/cgmanager.te b/policy/modules/services/cgmanager.te
index 2faf6b79..2faf6b79 100644
--- a/policy/modules/contrib/cgmanager.te
+++ b/policy/modules/services/cgmanager.te
diff --git a/policy/modules/contrib/cgroup.fc b/policy/modules/services/cgroup.fc
index f631358e..f631358e 100644
--- a/policy/modules/contrib/cgroup.fc
+++ b/policy/modules/services/cgroup.fc
diff --git a/policy/modules/contrib/cgroup.if b/policy/modules/services/cgroup.if
index a8870b96..a8870b96 100644
--- a/policy/modules/contrib/cgroup.if
+++ b/policy/modules/services/cgroup.if
diff --git a/policy/modules/contrib/cgroup.te b/policy/modules/services/cgroup.te
index ac7294a2..ac7294a2 100644
--- a/policy/modules/contrib/cgroup.te
+++ b/policy/modules/services/cgroup.te
diff --git a/policy/modules/contrib/chronyd.fc b/policy/modules/services/chronyd.fc
index 7153deee..7153deee 100644
--- a/policy/modules/contrib/chronyd.fc
+++ b/policy/modules/services/chronyd.fc
diff --git a/policy/modules/contrib/chronyd.if b/policy/modules/services/chronyd.if
index bc4ba691..bc4ba691 100644
--- a/policy/modules/contrib/chronyd.if
+++ b/policy/modules/services/chronyd.if
diff --git a/policy/modules/contrib/chronyd.te b/policy/modules/services/chronyd.te
index e89aa2fe..e89aa2fe 100644
--- a/policy/modules/contrib/chronyd.te
+++ b/policy/modules/services/chronyd.te
diff --git a/policy/modules/contrib/cipe.fc b/policy/modules/services/cipe.fc
index 2cfb0ae9..2cfb0ae9 100644
--- a/policy/modules/contrib/cipe.fc
+++ b/policy/modules/services/cipe.fc
diff --git a/policy/modules/contrib/cipe.if b/policy/modules/services/cipe.if
index 11ec9dc5..11ec9dc5 100644
--- a/policy/modules/contrib/cipe.if
+++ b/policy/modules/services/cipe.if
diff --git a/policy/modules/contrib/cipe.te b/policy/modules/services/cipe.te
index 18e06be9..18e06be9 100644
--- a/policy/modules/contrib/cipe.te
+++ b/policy/modules/services/cipe.te
diff --git a/policy/modules/contrib/clamav.fc b/policy/modules/services/clamav.fc
index 70fb22e6..70fb22e6 100644
--- a/policy/modules/contrib/clamav.fc
+++ b/policy/modules/services/clamav.fc
diff --git a/policy/modules/contrib/clamav.if b/policy/modules/services/clamav.if
index 7ad8e800..7ad8e800 100644
--- a/policy/modules/contrib/clamav.if
+++ b/policy/modules/services/clamav.if
diff --git a/policy/modules/contrib/clamav.te b/policy/modules/services/clamav.te
index 2f78260f..2f78260f 100644
--- a/policy/modules/contrib/clamav.te
+++ b/policy/modules/services/clamav.te
diff --git a/policy/modules/contrib/clockspeed.fc b/policy/modules/services/clockspeed.fc
index 093366f1..093366f1 100644
--- a/policy/modules/contrib/clockspeed.fc
+++ b/policy/modules/services/clockspeed.fc
diff --git a/policy/modules/contrib/clockspeed.if b/policy/modules/services/clockspeed.if
index 2cb7bf7c..2cb7bf7c 100644
--- a/policy/modules/contrib/clockspeed.if
+++ b/policy/modules/services/clockspeed.if
diff --git a/policy/modules/contrib/clockspeed.te b/policy/modules/services/clockspeed.te
index 6544d006..6544d006 100644
--- a/policy/modules/contrib/clockspeed.te
+++ b/policy/modules/services/clockspeed.te
diff --git a/policy/modules/contrib/clogd.fc b/policy/modules/services/clogd.fc
index 6c5de73b..6c5de73b 100644
--- a/policy/modules/contrib/clogd.fc
+++ b/policy/modules/services/clogd.fc
diff --git a/policy/modules/contrib/clogd.if b/policy/modules/services/clogd.if
index dce4cb19..dce4cb19 100644
--- a/policy/modules/contrib/clogd.if
+++ b/policy/modules/services/clogd.if
diff --git a/policy/modules/contrib/clogd.te b/policy/modules/services/clogd.te
index 3f0c47ff..3f0c47ff 100644
--- a/policy/modules/contrib/clogd.te
+++ b/policy/modules/services/clogd.te
diff --git a/policy/modules/contrib/cmirrord.fc b/policy/modules/services/cmirrord.fc
index c948aacf..c948aacf 100644
--- a/policy/modules/contrib/cmirrord.fc
+++ b/policy/modules/services/cmirrord.fc
diff --git a/policy/modules/contrib/cmirrord.if b/policy/modules/services/cmirrord.if
index 0785068f..0785068f 100644
--- a/policy/modules/contrib/cmirrord.if
+++ b/policy/modules/services/cmirrord.if
diff --git a/policy/modules/contrib/cmirrord.te b/policy/modules/services/cmirrord.te
index 61247747..61247747 100644
--- a/policy/modules/contrib/cmirrord.te
+++ b/policy/modules/services/cmirrord.te
diff --git a/policy/modules/contrib/cobbler.fc b/policy/modules/services/cobbler.fc
index 973d208f..973d208f 100644
--- a/policy/modules/contrib/cobbler.fc
+++ b/policy/modules/services/cobbler.fc
diff --git a/policy/modules/contrib/cobbler.if b/policy/modules/services/cobbler.if
index 6c6b5757..6c6b5757 100644
--- a/policy/modules/contrib/cobbler.if
+++ b/policy/modules/services/cobbler.if
diff --git a/policy/modules/contrib/cobbler.te b/policy/modules/services/cobbler.te
index 5e8425c1..5e8425c1 100644
--- a/policy/modules/contrib/cobbler.te
+++ b/policy/modules/services/cobbler.te
diff --git a/policy/modules/contrib/collectd.fc b/policy/modules/services/collectd.fc
index 4e9b367e..4e9b367e 100644
--- a/policy/modules/contrib/collectd.fc
+++ b/policy/modules/services/collectd.fc
diff --git a/policy/modules/contrib/collectd.if b/policy/modules/services/collectd.if
index a55db07b..a55db07b 100644
--- a/policy/modules/contrib/collectd.if
+++ b/policy/modules/services/collectd.if
diff --git a/policy/modules/contrib/collectd.te b/policy/modules/services/collectd.te
index 5feefa30..5feefa30 100644
--- a/policy/modules/contrib/collectd.te
+++ b/policy/modules/services/collectd.te
diff --git a/policy/modules/contrib/colord.fc b/policy/modules/services/colord.fc
index 71639eb5..71639eb5 100644
--- a/policy/modules/contrib/colord.fc
+++ b/policy/modules/services/colord.fc
diff --git a/policy/modules/contrib/colord.if b/policy/modules/services/colord.if
index 8e27a37c..8e27a37c 100644
--- a/policy/modules/contrib/colord.if
+++ b/policy/modules/services/colord.if
diff --git a/policy/modules/contrib/colord.te b/policy/modules/services/colord.te
index d03335b7..d03335b7 100644
--- a/policy/modules/contrib/colord.te
+++ b/policy/modules/services/colord.te
diff --git a/policy/modules/contrib/comsat.fc b/policy/modules/services/comsat.fc
index 63e73363..63e73363 100644
--- a/policy/modules/contrib/comsat.fc
+++ b/policy/modules/services/comsat.fc
diff --git a/policy/modules/contrib/comsat.if b/policy/modules/services/comsat.if
index afc4dfe7..afc4dfe7 100644
--- a/policy/modules/contrib/comsat.if
+++ b/policy/modules/services/comsat.if
diff --git a/policy/modules/contrib/comsat.te b/policy/modules/services/comsat.te
index 76323528..76323528 100644
--- a/policy/modules/contrib/comsat.te
+++ b/policy/modules/services/comsat.te
diff --git a/policy/modules/contrib/condor.fc b/policy/modules/services/condor.fc
index eed1e341..eed1e341 100644
--- a/policy/modules/contrib/condor.fc
+++ b/policy/modules/services/condor.fc
diff --git a/policy/modules/contrib/condor.if b/policy/modules/services/condor.if
index b2af357a..b2af357a 100644
--- a/policy/modules/contrib/condor.if
+++ b/policy/modules/services/condor.if
diff --git a/policy/modules/contrib/condor.te b/policy/modules/services/condor.te
index 0d04d4cb..0d04d4cb 100644
--- a/policy/modules/contrib/condor.te
+++ b/policy/modules/services/condor.te
diff --git a/policy/modules/contrib/consolekit.fc b/policy/modules/services/consolekit.fc
index d4623586..d4623586 100644
--- a/policy/modules/contrib/consolekit.fc
+++ b/policy/modules/services/consolekit.fc
diff --git a/policy/modules/contrib/consolekit.if b/policy/modules/services/consolekit.if
index e5cc8434..e5cc8434 100644
--- a/policy/modules/contrib/consolekit.if
+++ b/policy/modules/services/consolekit.if
diff --git a/policy/modules/contrib/consolekit.te b/policy/modules/services/consolekit.te
index 0a10396a..0a10396a 100644
--- a/policy/modules/contrib/consolekit.te
+++ b/policy/modules/services/consolekit.te
diff --git a/policy/modules/contrib/corosync.fc b/policy/modules/services/corosync.fc
index 3671df61..3671df61 100644
--- a/policy/modules/contrib/corosync.fc
+++ b/policy/modules/services/corosync.fc
diff --git a/policy/modules/contrib/corosync.if b/policy/modules/services/corosync.if
index 2b2d11af..2b2d11af 100644
--- a/policy/modules/contrib/corosync.if
+++ b/policy/modules/services/corosync.if
diff --git a/policy/modules/contrib/corosync.te b/policy/modules/services/corosync.te
index 6f8d20c6..6f8d20c6 100644
--- a/policy/modules/contrib/corosync.te
+++ b/policy/modules/services/corosync.te
diff --git a/policy/modules/contrib/couchdb.fc b/policy/modules/services/couchdb.fc
index 620bb5c9..620bb5c9 100644
--- a/policy/modules/contrib/couchdb.fc
+++ b/policy/modules/services/couchdb.fc
diff --git a/policy/modules/contrib/couchdb.if b/policy/modules/services/couchdb.if
index 830c271f..830c271f 100644
--- a/policy/modules/contrib/couchdb.if
+++ b/policy/modules/services/couchdb.if
diff --git a/policy/modules/contrib/couchdb.te b/policy/modules/services/couchdb.te
index dbb4cf9a..dbb4cf9a 100644
--- a/policy/modules/contrib/couchdb.te
+++ b/policy/modules/services/couchdb.te
diff --git a/policy/modules/contrib/courier.fc b/policy/modules/services/courier.fc
index c28b2209..c28b2209 100644
--- a/policy/modules/contrib/courier.fc
+++ b/policy/modules/services/courier.fc
diff --git a/policy/modules/contrib/courier.if b/policy/modules/services/courier.if
index db4d192b..db4d192b 100644
--- a/policy/modules/contrib/courier.if
+++ b/policy/modules/services/courier.if
diff --git a/policy/modules/contrib/courier.te b/policy/modules/services/courier.te
index 1d873ae4..1d873ae4 100644
--- a/policy/modules/contrib/courier.te
+++ b/policy/modules/services/courier.te
diff --git a/policy/modules/contrib/cpucontrol.fc b/policy/modules/services/cpucontrol.fc
index d01f2350..d01f2350 100644
--- a/policy/modules/contrib/cpucontrol.fc
+++ b/policy/modules/services/cpucontrol.fc
diff --git a/policy/modules/contrib/cpucontrol.if b/policy/modules/services/cpucontrol.if
index ff6310d4..ff6310d4 100644
--- a/policy/modules/contrib/cpucontrol.if
+++ b/policy/modules/services/cpucontrol.if
diff --git a/policy/modules/contrib/cpucontrol.te b/policy/modules/services/cpucontrol.te
index aee03750..aee03750 100644
--- a/policy/modules/contrib/cpucontrol.te
+++ b/policy/modules/services/cpucontrol.te
diff --git a/policy/modules/contrib/cron.fc b/policy/modules/services/cron.fc
index ea6a0da8..ea6a0da8 100644
--- a/policy/modules/contrib/cron.fc
+++ b/policy/modules/services/cron.fc
diff --git a/policy/modules/contrib/cron.if b/policy/modules/services/cron.if
index 7bb6065b..7bb6065b 100644
--- a/policy/modules/contrib/cron.if
+++ b/policy/modules/services/cron.if
diff --git a/policy/modules/contrib/cron.te b/policy/modules/services/cron.te
index 49a14a6a..49a14a6a 100644
--- a/policy/modules/contrib/cron.te
+++ b/policy/modules/services/cron.te
diff --git a/policy/modules/contrib/ctdb.fc b/policy/modules/services/ctdb.fc
index 98484341..98484341 100644
--- a/policy/modules/contrib/ctdb.fc
+++ b/policy/modules/services/ctdb.fc
diff --git a/policy/modules/contrib/ctdb.if b/policy/modules/services/ctdb.if
index 79b0c9ab..79b0c9ab 100644
--- a/policy/modules/contrib/ctdb.if
+++ b/policy/modules/services/ctdb.if
diff --git a/policy/modules/contrib/ctdb.te b/policy/modules/services/ctdb.te
index f52a9a4f..f52a9a4f 100644
--- a/policy/modules/contrib/ctdb.te
+++ b/policy/modules/services/ctdb.te
diff --git a/policy/modules/contrib/cups.fc b/policy/modules/services/cups.fc
index 43c4616a..43c4616a 100644
--- a/policy/modules/contrib/cups.fc
+++ b/policy/modules/services/cups.fc
diff --git a/policy/modules/contrib/cups.if b/policy/modules/services/cups.if
index e268b96f..e268b96f 100644
--- a/policy/modules/contrib/cups.if
+++ b/policy/modules/services/cups.if
diff --git a/policy/modules/contrib/cups.te b/policy/modules/services/cups.te
index ce2694e2..ce2694e2 100644
--- a/policy/modules/contrib/cups.te
+++ b/policy/modules/services/cups.te
diff --git a/policy/modules/contrib/cvs.fc b/policy/modules/services/cvs.fc
index 67ba72b5..67ba72b5 100644
--- a/policy/modules/contrib/cvs.fc
+++ b/policy/modules/services/cvs.fc
diff --git a/policy/modules/contrib/cvs.if b/policy/modules/services/cvs.if
index 49f6c1cb..49f6c1cb 100644
--- a/policy/modules/contrib/cvs.if
+++ b/policy/modules/services/cvs.if
diff --git a/policy/modules/contrib/cvs.te b/policy/modules/services/cvs.te
index f090b62a..f090b62a 100644
--- a/policy/modules/contrib/cvs.te
+++ b/policy/modules/services/cvs.te
diff --git a/policy/modules/contrib/cyphesis.fc b/policy/modules/services/cyphesis.fc
index 5e9dd74e..5e9dd74e 100644
--- a/policy/modules/contrib/cyphesis.fc
+++ b/policy/modules/services/cyphesis.fc
diff --git a/policy/modules/contrib/cyphesis.if b/policy/modules/services/cyphesis.if
index da37d4ee..da37d4ee 100644
--- a/policy/modules/contrib/cyphesis.if
+++ b/policy/modules/services/cyphesis.if
diff --git a/policy/modules/contrib/cyphesis.te b/policy/modules/services/cyphesis.te
index 5707b618..5707b618 100644
--- a/policy/modules/contrib/cyphesis.te
+++ b/policy/modules/services/cyphesis.te
diff --git a/policy/modules/contrib/cyrus.fc b/policy/modules/services/cyrus.fc
index 36755fa2..36755fa2 100644
--- a/policy/modules/contrib/cyrus.fc
+++ b/policy/modules/services/cyrus.fc
diff --git a/policy/modules/contrib/cyrus.if b/policy/modules/services/cyrus.if
index 759e074b..759e074b 100644
--- a/policy/modules/contrib/cyrus.if
+++ b/policy/modules/services/cyrus.if
diff --git a/policy/modules/contrib/cyrus.te b/policy/modules/services/cyrus.te
index af6b5b6c..af6b5b6c 100644
--- a/policy/modules/contrib/cyrus.te
+++ b/policy/modules/services/cyrus.te
diff --git a/policy/modules/contrib/dante.fc b/policy/modules/services/dante.fc
index 3aea9187..3aea9187 100644
--- a/policy/modules/contrib/dante.fc
+++ b/policy/modules/services/dante.fc
diff --git a/policy/modules/contrib/dante.if b/policy/modules/services/dante.if
index 8d02f8c8..8d02f8c8 100644
--- a/policy/modules/contrib/dante.if
+++ b/policy/modules/services/dante.if
diff --git a/policy/modules/contrib/dante.te b/policy/modules/services/dante.te
index 55d8dad3..55d8dad3 100644
--- a/policy/modules/contrib/dante.te
+++ b/policy/modules/services/dante.te
diff --git a/policy/modules/contrib/dbskk.fc b/policy/modules/services/dbskk.fc
index a3028746..a3028746 100644
--- a/policy/modules/contrib/dbskk.fc
+++ b/policy/modules/services/dbskk.fc
diff --git a/policy/modules/contrib/dbskk.if b/policy/modules/services/dbskk.if
index 9e710048..9e710048 100644
--- a/policy/modules/contrib/dbskk.if
+++ b/policy/modules/services/dbskk.if
diff --git a/policy/modules/contrib/dbskk.te b/policy/modules/services/dbskk.te
index 41d6beb8..41d6beb8 100644
--- a/policy/modules/contrib/dbskk.te
+++ b/policy/modules/services/dbskk.te
diff --git a/policy/modules/contrib/dbus.fc b/policy/modules/services/dbus.fc
index e9a13ee9..e9a13ee9 100644
--- a/policy/modules/contrib/dbus.fc
+++ b/policy/modules/services/dbus.fc
diff --git a/policy/modules/contrib/dbus.if b/policy/modules/services/dbus.if
index 01e353ed..01e353ed 100644
--- a/policy/modules/contrib/dbus.if
+++ b/policy/modules/services/dbus.if
diff --git a/policy/modules/contrib/dbus.te b/policy/modules/services/dbus.te
index 486b0b18..486b0b18 100644
--- a/policy/modules/contrib/dbus.te
+++ b/policy/modules/services/dbus.te
diff --git a/policy/modules/contrib/dcc.fc b/policy/modules/services/dcc.fc
index bc9189c8..bc9189c8 100644
--- a/policy/modules/contrib/dcc.fc
+++ b/policy/modules/services/dcc.fc
diff --git a/policy/modules/contrib/dcc.if b/policy/modules/services/dcc.if
index a5c21e0e..a5c21e0e 100644
--- a/policy/modules/contrib/dcc.if
+++ b/policy/modules/services/dcc.if
diff --git a/policy/modules/contrib/dcc.te b/policy/modules/services/dcc.te
index 9b8a0bc1..9b8a0bc1 100644
--- a/policy/modules/contrib/dcc.te
+++ b/policy/modules/services/dcc.te
diff --git a/policy/modules/contrib/ddclient.fc b/policy/modules/services/ddclient.fc
index 64d55e5c..64d55e5c 100644
--- a/policy/modules/contrib/ddclient.fc
+++ b/policy/modules/services/ddclient.fc
diff --git a/policy/modules/contrib/ddclient.if b/policy/modules/services/ddclient.if
index 96ddeea1..96ddeea1 100644
--- a/policy/modules/contrib/ddclient.if
+++ b/policy/modules/services/ddclient.if
diff --git a/policy/modules/contrib/ddclient.te b/policy/modules/services/ddclient.te
index ff6500ab..ff6500ab 100644
--- a/policy/modules/contrib/ddclient.te
+++ b/policy/modules/services/ddclient.te
diff --git a/policy/modules/contrib/denyhosts.fc b/policy/modules/services/denyhosts.fc
index 89b0b77d..89b0b77d 100644
--- a/policy/modules/contrib/denyhosts.fc
+++ b/policy/modules/services/denyhosts.fc
diff --git a/policy/modules/contrib/denyhosts.if b/policy/modules/services/denyhosts.if
index 0fb8ec7c..0fb8ec7c 100644
--- a/policy/modules/contrib/denyhosts.if
+++ b/policy/modules/services/denyhosts.if
diff --git a/policy/modules/contrib/denyhosts.te b/policy/modules/services/denyhosts.te
index 342e6231..342e6231 100644
--- a/policy/modules/contrib/denyhosts.te
+++ b/policy/modules/services/denyhosts.te
diff --git a/policy/modules/contrib/devicekit.fc b/policy/modules/services/devicekit.fc
index 2b6d443c..2b6d443c 100644
--- a/policy/modules/contrib/devicekit.fc
+++ b/policy/modules/services/devicekit.fc
diff --git a/policy/modules/contrib/devicekit.if b/policy/modules/services/devicekit.if
index da75b8e4..da75b8e4 100644
--- a/policy/modules/contrib/devicekit.if
+++ b/policy/modules/services/devicekit.if
diff --git a/policy/modules/contrib/devicekit.te b/policy/modules/services/devicekit.te
index a5b869d3..a5b869d3 100644
--- a/policy/modules/contrib/devicekit.te
+++ b/policy/modules/services/devicekit.te
diff --git a/policy/modules/contrib/dhcp.fc b/policy/modules/services/dhcp.fc
index a58b1103..a58b1103 100644
--- a/policy/modules/contrib/dhcp.fc
+++ b/policy/modules/services/dhcp.fc
diff --git a/policy/modules/contrib/dhcp.if b/policy/modules/services/dhcp.if
index b7a0337c..b7a0337c 100644
--- a/policy/modules/contrib/dhcp.if
+++ b/policy/modules/services/dhcp.if
diff --git a/policy/modules/contrib/dhcp.te b/policy/modules/services/dhcp.te
index 2e5802bb..2e5802bb 100644
--- a/policy/modules/contrib/dhcp.te
+++ b/policy/modules/services/dhcp.te
diff --git a/policy/modules/contrib/dictd.fc b/policy/modules/services/dictd.fc
index b2c773b2..b2c773b2 100644
--- a/policy/modules/contrib/dictd.fc
+++ b/policy/modules/services/dictd.fc
diff --git a/policy/modules/contrib/dictd.if b/policy/modules/services/dictd.if
index 6feb8280..6feb8280 100644
--- a/policy/modules/contrib/dictd.if
+++ b/policy/modules/services/dictd.if
diff --git a/policy/modules/contrib/dictd.te b/policy/modules/services/dictd.te
index 6cad541b..6cad541b 100644
--- a/policy/modules/contrib/dictd.te
+++ b/policy/modules/services/dictd.te
diff --git a/policy/modules/contrib/dirmngr.fc b/policy/modules/services/dirmngr.fc
index 60f19f47..60f19f47 100644
--- a/policy/modules/contrib/dirmngr.fc
+++ b/policy/modules/services/dirmngr.fc
diff --git a/policy/modules/contrib/dirmngr.if b/policy/modules/services/dirmngr.if
index 07af5063..07af5063 100644
--- a/policy/modules/contrib/dirmngr.if
+++ b/policy/modules/services/dirmngr.if
diff --git a/policy/modules/contrib/dirmngr.te b/policy/modules/services/dirmngr.te
index 68b0cf09..68b0cf09 100644
--- a/policy/modules/contrib/dirmngr.te
+++ b/policy/modules/services/dirmngr.te
diff --git a/policy/modules/contrib/distcc.fc b/policy/modules/services/distcc.fc
index 3da3c346..3da3c346 100644
--- a/policy/modules/contrib/distcc.fc
+++ b/policy/modules/services/distcc.fc
diff --git a/policy/modules/contrib/distcc.if b/policy/modules/services/distcc.if
index 6b432866..6b432866 100644
--- a/policy/modules/contrib/distcc.if
+++ b/policy/modules/services/distcc.if
diff --git a/policy/modules/contrib/distcc.te b/policy/modules/services/distcc.te
index 4239519e..4239519e 100644
--- a/policy/modules/contrib/distcc.te
+++ b/policy/modules/services/distcc.te
diff --git a/policy/modules/contrib/djbdns.fc b/policy/modules/services/djbdns.fc
index e9b1b32a..e9b1b32a 100644
--- a/policy/modules/contrib/djbdns.fc
+++ b/policy/modules/services/djbdns.fc
diff --git a/policy/modules/contrib/djbdns.if b/policy/modules/services/djbdns.if
index dd87a12a..dd87a12a 100644
--- a/policy/modules/contrib/djbdns.if
+++ b/policy/modules/services/djbdns.if
diff --git a/policy/modules/contrib/djbdns.te b/policy/modules/services/djbdns.te
index d77c66b0..d77c66b0 100644
--- a/policy/modules/contrib/djbdns.te
+++ b/policy/modules/services/djbdns.te
diff --git a/policy/modules/contrib/dkim.fc b/policy/modules/services/dkim.fc
index 08b65263..08b65263 100644
--- a/policy/modules/contrib/dkim.fc
+++ b/policy/modules/services/dkim.fc
diff --git a/policy/modules/contrib/dkim.if b/policy/modules/services/dkim.if
index 059e495a..059e495a 100644
--- a/policy/modules/contrib/dkim.if
+++ b/policy/modules/services/dkim.if
diff --git a/policy/modules/contrib/dkim.te b/policy/modules/services/dkim.te
index 03c8fc65..03c8fc65 100644
--- a/policy/modules/contrib/dkim.te
+++ b/policy/modules/services/dkim.te
diff --git a/policy/modules/contrib/dnsmasq.fc b/policy/modules/services/dnsmasq.fc
index 07ffc0d4..07ffc0d4 100644
--- a/policy/modules/contrib/dnsmasq.fc
+++ b/policy/modules/services/dnsmasq.fc
diff --git a/policy/modules/contrib/dnsmasq.if b/policy/modules/services/dnsmasq.if
index f81566a8..f81566a8 100644
--- a/policy/modules/contrib/dnsmasq.if
+++ b/policy/modules/services/dnsmasq.if
diff --git a/policy/modules/contrib/dnsmasq.te b/policy/modules/services/dnsmasq.te
index 29d34c13..29d34c13 100644
--- a/policy/modules/contrib/dnsmasq.te
+++ b/policy/modules/services/dnsmasq.te
diff --git a/policy/modules/contrib/dnssectrigger.fc b/policy/modules/services/dnssectrigger.fc
index e2ed6e23..e2ed6e23 100644
--- a/policy/modules/contrib/dnssectrigger.fc
+++ b/policy/modules/services/dnssectrigger.fc
diff --git a/policy/modules/contrib/dnssectrigger.if b/policy/modules/services/dnssectrigger.if
index eea250e3..eea250e3 100644
--- a/policy/modules/contrib/dnssectrigger.if
+++ b/policy/modules/services/dnssectrigger.if
diff --git a/policy/modules/contrib/dnssectrigger.te b/policy/modules/services/dnssectrigger.te
index 27d900a1..27d900a1 100644
--- a/policy/modules/contrib/dnssectrigger.te
+++ b/policy/modules/services/dnssectrigger.te
diff --git a/policy/modules/contrib/dovecot.fc b/policy/modules/services/dovecot.fc
index 1ab9d643..1ab9d643 100644
--- a/policy/modules/contrib/dovecot.fc
+++ b/policy/modules/services/dovecot.fc
diff --git a/policy/modules/contrib/dovecot.if b/policy/modules/services/dovecot.if
index 3608ba24..3608ba24 100644
--- a/policy/modules/contrib/dovecot.if
+++ b/policy/modules/services/dovecot.if
diff --git a/policy/modules/contrib/dovecot.te b/policy/modules/services/dovecot.te
index 1d7a3bd3..1d7a3bd3 100644
--- a/policy/modules/contrib/dovecot.te
+++ b/policy/modules/services/dovecot.te
diff --git a/policy/modules/contrib/drbd.fc b/policy/modules/services/drbd.fc
index 3b7da568..3b7da568 100644
--- a/policy/modules/contrib/drbd.fc
+++ b/policy/modules/services/drbd.fc
diff --git a/policy/modules/contrib/drbd.if b/policy/modules/services/drbd.if
index f147c102..f147c102 100644
--- a/policy/modules/contrib/drbd.if
+++ b/policy/modules/services/drbd.if
diff --git a/policy/modules/contrib/drbd.te b/policy/modules/services/drbd.te
index 308e1488..308e1488 100644
--- a/policy/modules/contrib/drbd.te
+++ b/policy/modules/services/drbd.te
diff --git a/policy/modules/contrib/dspam.fc b/policy/modules/services/dspam.fc
index 40f98ba6..40f98ba6 100644
--- a/policy/modules/contrib/dspam.fc
+++ b/policy/modules/services/dspam.fc
diff --git a/policy/modules/contrib/dspam.if b/policy/modules/services/dspam.if
index 969fd89d..969fd89d 100644
--- a/policy/modules/contrib/dspam.if
+++ b/policy/modules/services/dspam.if
diff --git a/policy/modules/contrib/dspam.te b/policy/modules/services/dspam.te
index edf5d942..edf5d942 100644
--- a/policy/modules/contrib/dspam.te
+++ b/policy/modules/services/dspam.te
diff --git a/policy/modules/contrib/entropyd.fc b/policy/modules/services/entropyd.fc
index b7342ef2..b7342ef2 100644
--- a/policy/modules/contrib/entropyd.fc
+++ b/policy/modules/services/entropyd.fc
diff --git a/policy/modules/contrib/entropyd.if b/policy/modules/services/entropyd.if
index eedfae6c..eedfae6c 100644
--- a/policy/modules/contrib/entropyd.if
+++ b/policy/modules/services/entropyd.if
diff --git a/policy/modules/contrib/entropyd.te b/policy/modules/services/entropyd.te
index 4acc526b..4acc526b 100644
--- a/policy/modules/contrib/entropyd.te
+++ b/policy/modules/services/entropyd.te
diff --git a/policy/modules/contrib/exim.fc b/policy/modules/services/exim.fc
index bd1f558a..bd1f558a 100644
--- a/policy/modules/contrib/exim.fc
+++ b/policy/modules/services/exim.fc
diff --git a/policy/modules/contrib/exim.if b/policy/modules/services/exim.if
index 495adb85..495adb85 100644
--- a/policy/modules/contrib/exim.if
+++ b/policy/modules/services/exim.if
diff --git a/policy/modules/contrib/exim.te b/policy/modules/services/exim.te
index 693ac491..693ac491 100644
--- a/policy/modules/contrib/exim.te
+++ b/policy/modules/services/exim.te
diff --git a/policy/modules/contrib/fail2ban.fc b/policy/modules/services/fail2ban.fc
index 1379b6ee..1379b6ee 100644
--- a/policy/modules/contrib/fail2ban.fc
+++ b/policy/modules/services/fail2ban.fc
diff --git a/policy/modules/contrib/fail2ban.if b/policy/modules/services/fail2ban.if
index 5b8e08be..5b8e08be 100644
--- a/policy/modules/contrib/fail2ban.if
+++ b/policy/modules/services/fail2ban.if
diff --git a/policy/modules/contrib/fail2ban.te b/policy/modules/services/fail2ban.te
index 215d0935..215d0935 100644
--- a/policy/modules/contrib/fail2ban.te
+++ b/policy/modules/services/fail2ban.te
diff --git a/policy/modules/contrib/fcoe.fc b/policy/modules/services/fcoe.fc
index cb9552db..cb9552db 100644
--- a/policy/modules/contrib/fcoe.fc
+++ b/policy/modules/services/fcoe.fc
diff --git a/policy/modules/contrib/fcoe.if b/policy/modules/services/fcoe.if
index 78d11471..78d11471 100644
--- a/policy/modules/contrib/fcoe.if
+++ b/policy/modules/services/fcoe.if
diff --git a/policy/modules/contrib/fcoe.te b/policy/modules/services/fcoe.te
index 3ec9397c..3ec9397c 100644
--- a/policy/modules/contrib/fcoe.te
+++ b/policy/modules/services/fcoe.te
diff --git a/policy/modules/contrib/fetchmail.fc b/policy/modules/services/fetchmail.fc
index 8ffcb5ae..8ffcb5ae 100644
--- a/policy/modules/contrib/fetchmail.fc
+++ b/policy/modules/services/fetchmail.fc
diff --git a/policy/modules/contrib/fetchmail.if b/policy/modules/services/fetchmail.if
index 5115affc..5115affc 100644
--- a/policy/modules/contrib/fetchmail.if
+++ b/policy/modules/services/fetchmail.if
diff --git a/policy/modules/contrib/fetchmail.te b/policy/modules/services/fetchmail.te
index ca6f269f..ca6f269f 100644
--- a/policy/modules/contrib/fetchmail.te
+++ b/policy/modules/services/fetchmail.te
diff --git a/policy/modules/contrib/finger.fc b/policy/modules/services/finger.fc
index ce3adb5c..ce3adb5c 100644
--- a/policy/modules/contrib/finger.fc
+++ b/policy/modules/services/finger.fc
diff --git a/policy/modules/contrib/finger.if b/policy/modules/services/finger.if
index a071cfd4..a071cfd4 100644
--- a/policy/modules/contrib/finger.if
+++ b/policy/modules/services/finger.if
diff --git a/policy/modules/contrib/finger.te b/policy/modules/services/finger.te
index 92a0161f..92a0161f 100644
--- a/policy/modules/contrib/finger.te
+++ b/policy/modules/services/finger.te
diff --git a/policy/modules/contrib/firewalld.fc b/policy/modules/services/firewalld.fc
index 19fc9177..19fc9177 100644
--- a/policy/modules/contrib/firewalld.fc
+++ b/policy/modules/services/firewalld.fc
diff --git a/policy/modules/contrib/firewalld.if b/policy/modules/services/firewalld.if
index b4fda82c..b4fda82c 100644
--- a/policy/modules/contrib/firewalld.if
+++ b/policy/modules/services/firewalld.if
diff --git a/policy/modules/contrib/firewalld.te b/policy/modules/services/firewalld.te
index 7eea5265..7eea5265 100644
--- a/policy/modules/contrib/firewalld.te
+++ b/policy/modules/services/firewalld.te
diff --git a/policy/modules/contrib/fprintd.fc b/policy/modules/services/fprintd.fc
index 81317ea6..81317ea6 100644
--- a/policy/modules/contrib/fprintd.fc
+++ b/policy/modules/services/fprintd.fc
diff --git a/policy/modules/contrib/fprintd.if b/policy/modules/services/fprintd.if
index 8081132c..8081132c 100644
--- a/policy/modules/contrib/fprintd.if
+++ b/policy/modules/services/fprintd.if
diff --git a/policy/modules/contrib/fprintd.te b/policy/modules/services/fprintd.te
index 4ff45da5..4ff45da5 100644
--- a/policy/modules/contrib/fprintd.te
+++ b/policy/modules/services/fprintd.te
diff --git a/policy/modules/contrib/ftp.fc b/policy/modules/services/ftp.fc
index 6af8b34f..6af8b34f 100644
--- a/policy/modules/contrib/ftp.fc
+++ b/policy/modules/services/ftp.fc
diff --git a/policy/modules/contrib/ftp.if b/policy/modules/services/ftp.if
index 3bfe581d..3bfe581d 100644
--- a/policy/modules/contrib/ftp.if
+++ b/policy/modules/services/ftp.if
diff --git a/policy/modules/contrib/ftp.te b/policy/modules/services/ftp.te
index 96a92aca..96a92aca 100644
--- a/policy/modules/contrib/ftp.te
+++ b/policy/modules/services/ftp.te
diff --git a/policy/modules/contrib/gatekeeper.fc b/policy/modules/services/gatekeeper.fc
index 516f65a2..516f65a2 100644
--- a/policy/modules/contrib/gatekeeper.fc
+++ b/policy/modules/services/gatekeeper.fc
diff --git a/policy/modules/contrib/gatekeeper.if b/policy/modules/services/gatekeeper.if
index 83681df7..83681df7 100644
--- a/policy/modules/contrib/gatekeeper.if
+++ b/policy/modules/services/gatekeeper.if
diff --git a/policy/modules/contrib/gatekeeper.te b/policy/modules/services/gatekeeper.te
index a2a4b41c..a2a4b41c 100644
--- a/policy/modules/contrib/gatekeeper.te
+++ b/policy/modules/services/gatekeeper.te
diff --git a/policy/modules/contrib/gdomap.fc b/policy/modules/services/gdomap.fc
index ddf2c188..ddf2c188 100644
--- a/policy/modules/contrib/gdomap.fc
+++ b/policy/modules/services/gdomap.fc
diff --git a/policy/modules/contrib/gdomap.if b/policy/modules/services/gdomap.if
index 58e5c442..58e5c442 100644
--- a/policy/modules/contrib/gdomap.if
+++ b/policy/modules/services/gdomap.if
diff --git a/policy/modules/contrib/gdomap.te b/policy/modules/services/gdomap.te
index e710d356..e710d356 100644
--- a/policy/modules/contrib/gdomap.te
+++ b/policy/modules/services/gdomap.te
diff --git a/policy/modules/contrib/geoclue.fc b/policy/modules/services/geoclue.fc
index d460e44d..d460e44d 100644
--- a/policy/modules/contrib/geoclue.fc
+++ b/policy/modules/services/geoclue.fc
diff --git a/policy/modules/contrib/geoclue.if b/policy/modules/services/geoclue.if
index 9df36086..9df36086 100644
--- a/policy/modules/contrib/geoclue.if
+++ b/policy/modules/services/geoclue.if
diff --git a/policy/modules/contrib/geoclue.te b/policy/modules/services/geoclue.te
index c6e66408..c6e66408 100644
--- a/policy/modules/contrib/geoclue.te
+++ b/policy/modules/services/geoclue.te
diff --git a/policy/modules/contrib/git.fc b/policy/modules/services/git.fc
index c26586d3..c26586d3 100644
--- a/policy/modules/contrib/git.fc
+++ b/policy/modules/services/git.fc
diff --git a/policy/modules/contrib/git.if b/policy/modules/services/git.if
index 1e29af19..1e29af19 100644
--- a/policy/modules/contrib/git.if
+++ b/policy/modules/services/git.if
diff --git a/policy/modules/contrib/git.te b/policy/modules/services/git.te
index 45b25f0f..45b25f0f 100644
--- a/policy/modules/contrib/git.te
+++ b/policy/modules/services/git.te
diff --git a/policy/modules/contrib/glance.fc b/policy/modules/services/glance.fc
index caf9c3d8..caf9c3d8 100644
--- a/policy/modules/contrib/glance.fc
+++ b/policy/modules/services/glance.fc
diff --git a/policy/modules/contrib/glance.if b/policy/modules/services/glance.if
index 6d9f3daa..6d9f3daa 100644
--- a/policy/modules/contrib/glance.if
+++ b/policy/modules/services/glance.if
diff --git a/policy/modules/contrib/glance.te b/policy/modules/services/glance.te
index 20f0ff27..20f0ff27 100644
--- a/policy/modules/contrib/glance.te
+++ b/policy/modules/services/glance.te
diff --git a/policy/modules/contrib/glusterfs.fc b/policy/modules/services/glusterfs.fc
index be43eb4f..be43eb4f 100644
--- a/policy/modules/contrib/glusterfs.fc
+++ b/policy/modules/services/glusterfs.fc
diff --git a/policy/modules/contrib/glusterfs.if b/policy/modules/services/glusterfs.if
index b4f5d01c..b4f5d01c 100644
--- a/policy/modules/contrib/glusterfs.if
+++ b/policy/modules/services/glusterfs.if
diff --git a/policy/modules/contrib/glusterfs.te b/policy/modules/services/glusterfs.te
index 54bd1807..54bd1807 100644
--- a/policy/modules/contrib/glusterfs.te
+++ b/policy/modules/services/glusterfs.te
diff --git a/policy/modules/contrib/gnomeclock.fc b/policy/modules/services/gnomeclock.fc
index f9ba8cd9..f9ba8cd9 100644
--- a/policy/modules/contrib/gnomeclock.fc
+++ b/policy/modules/services/gnomeclock.fc
diff --git a/policy/modules/contrib/gnomeclock.if b/policy/modules/services/gnomeclock.if
index 3f55702f..3f55702f 100644
--- a/policy/modules/contrib/gnomeclock.if
+++ b/policy/modules/services/gnomeclock.if
diff --git a/policy/modules/contrib/gnomeclock.te b/policy/modules/services/gnomeclock.te
index 7cd7435e..7cd7435e 100644
--- a/policy/modules/contrib/gnomeclock.te
+++ b/policy/modules/services/gnomeclock.te
diff --git a/policy/modules/contrib/gpm.fc b/policy/modules/services/gpm.fc
index 24531dc0..24531dc0 100644
--- a/policy/modules/contrib/gpm.fc
+++ b/policy/modules/services/gpm.fc
diff --git a/policy/modules/contrib/gpm.if b/policy/modules/services/gpm.if
index 356fb6d1..356fb6d1 100644
--- a/policy/modules/contrib/gpm.if
+++ b/policy/modules/services/gpm.if
diff --git a/policy/modules/contrib/gpm.te b/policy/modules/services/gpm.te
index 39000d85..39000d85 100644
--- a/policy/modules/contrib/gpm.te
+++ b/policy/modules/services/gpm.te
diff --git a/policy/modules/contrib/gpsd.fc b/policy/modules/services/gpsd.fc
index 4e62fd9e..4e62fd9e 100644
--- a/policy/modules/contrib/gpsd.fc
+++ b/policy/modules/services/gpsd.fc
diff --git a/policy/modules/contrib/gpsd.if b/policy/modules/services/gpsd.if
index 1d10f63a..1d10f63a 100644
--- a/policy/modules/contrib/gpsd.if
+++ b/policy/modules/services/gpsd.if
diff --git a/policy/modules/contrib/gpsd.te b/policy/modules/services/gpsd.te
index d4aacb79..d4aacb79 100644
--- a/policy/modules/contrib/gpsd.te
+++ b/policy/modules/services/gpsd.te
diff --git a/policy/modules/contrib/gssproxy.fc b/policy/modules/services/gssproxy.fc
index a9970159..a9970159 100644
--- a/policy/modules/contrib/gssproxy.fc
+++ b/policy/modules/services/gssproxy.fc
diff --git a/policy/modules/contrib/gssproxy.if b/policy/modules/services/gssproxy.if
index 1f8a4461..1f8a4461 100644
--- a/policy/modules/contrib/gssproxy.if
+++ b/policy/modules/services/gssproxy.if
diff --git a/policy/modules/contrib/gssproxy.te b/policy/modules/services/gssproxy.te
index cd1b2b37..cd1b2b37 100644
--- a/policy/modules/contrib/gssproxy.te
+++ b/policy/modules/services/gssproxy.te
diff --git a/policy/modules/contrib/hadoop.fc b/policy/modules/services/hadoop.fc
index b43cfde9..b43cfde9 100644
--- a/policy/modules/contrib/hadoop.fc
+++ b/policy/modules/services/hadoop.fc
diff --git a/policy/modules/contrib/hadoop.if b/policy/modules/services/hadoop.if
index 5908119d..5908119d 100644
--- a/policy/modules/contrib/hadoop.if
+++ b/policy/modules/services/hadoop.if
diff --git a/policy/modules/contrib/hadoop.te b/policy/modules/services/hadoop.te
index 9f333bfd..9f333bfd 100644
--- a/policy/modules/contrib/hadoop.te
+++ b/policy/modules/services/hadoop.te
diff --git a/policy/modules/contrib/hal.fc b/policy/modules/services/hal.fc
index 5ac1f7a7..5ac1f7a7 100644
--- a/policy/modules/contrib/hal.fc
+++ b/policy/modules/services/hal.fc
diff --git a/policy/modules/contrib/hal.if b/policy/modules/services/hal.if
index 98c4f127..98c4f127 100644
--- a/policy/modules/contrib/hal.if
+++ b/policy/modules/services/hal.if
diff --git a/policy/modules/contrib/hal.te b/policy/modules/services/hal.te
index 9bfd37fb..9bfd37fb 100644
--- a/policy/modules/contrib/hal.te
+++ b/policy/modules/services/hal.te
diff --git a/policy/modules/contrib/hddtemp.fc b/policy/modules/services/hddtemp.fc
index f1d334eb..f1d334eb 100644
--- a/policy/modules/contrib/hddtemp.fc
+++ b/policy/modules/services/hddtemp.fc
diff --git a/policy/modules/contrib/hddtemp.if b/policy/modules/services/hddtemp.if
index 269bafd1..269bafd1 100644
--- a/policy/modules/contrib/hddtemp.if
+++ b/policy/modules/services/hddtemp.if
diff --git a/policy/modules/contrib/hddtemp.te b/policy/modules/services/hddtemp.te
index 2f925799..2f925799 100644
--- a/policy/modules/contrib/hddtemp.te
+++ b/policy/modules/services/hddtemp.te
diff --git a/policy/modules/contrib/howl.fc b/policy/modules/services/howl.fc
index c164df12..c164df12 100644
--- a/policy/modules/contrib/howl.fc
+++ b/policy/modules/services/howl.fc
diff --git a/policy/modules/contrib/howl.if b/policy/modules/services/howl.if
index afea1846..afea1846 100644
--- a/policy/modules/contrib/howl.if
+++ b/policy/modules/services/howl.if
diff --git a/policy/modules/contrib/howl.te b/policy/modules/services/howl.te
index 6bbede58..6bbede58 100644
--- a/policy/modules/contrib/howl.te
+++ b/policy/modules/services/howl.te
diff --git a/policy/modules/contrib/hypervkvp.fc b/policy/modules/services/hypervkvp.fc
index d1bbb44c..d1bbb44c 100644
--- a/policy/modules/contrib/hypervkvp.fc
+++ b/policy/modules/services/hypervkvp.fc
diff --git a/policy/modules/contrib/hypervkvp.if b/policy/modules/services/hypervkvp.if
index f9a3b8ea..f9a3b8ea 100644
--- a/policy/modules/contrib/hypervkvp.if
+++ b/policy/modules/services/hypervkvp.if
diff --git a/policy/modules/contrib/hypervkvp.te b/policy/modules/services/hypervkvp.te
index 33623eba..33623eba 100644
--- a/policy/modules/contrib/hypervkvp.te
+++ b/policy/modules/services/hypervkvp.te
diff --git a/policy/modules/contrib/i18n_input.fc b/policy/modules/services/i18n_input.fc
index 9dcc65aa..9dcc65aa 100644
--- a/policy/modules/contrib/i18n_input.fc
+++ b/policy/modules/services/i18n_input.fc
diff --git a/policy/modules/contrib/i18n_input.if b/policy/modules/services/i18n_input.if
index 4e08c3cf..4e08c3cf 100644
--- a/policy/modules/contrib/i18n_input.if
+++ b/policy/modules/services/i18n_input.if
diff --git a/policy/modules/contrib/i18n_input.te b/policy/modules/services/i18n_input.te
index 181d3e90..181d3e90 100644
--- a/policy/modules/contrib/i18n_input.te
+++ b/policy/modules/services/i18n_input.te
diff --git a/policy/modules/contrib/icecast.fc b/policy/modules/services/icecast.fc
index 6080443f..6080443f 100644
--- a/policy/modules/contrib/icecast.fc
+++ b/policy/modules/services/icecast.fc
diff --git a/policy/modules/contrib/icecast.if b/policy/modules/services/icecast.if
index 38ce1b7f..38ce1b7f 100644
--- a/policy/modules/contrib/icecast.if
+++ b/policy/modules/services/icecast.if
diff --git a/policy/modules/contrib/icecast.te b/policy/modules/services/icecast.te
index acbb3fc6..acbb3fc6 100644
--- a/policy/modules/contrib/icecast.te
+++ b/policy/modules/services/icecast.te
diff --git a/policy/modules/contrib/ifplugd.fc b/policy/modules/services/ifplugd.fc
index 2a1e9290..2a1e9290 100644
--- a/policy/modules/contrib/ifplugd.fc
+++ b/policy/modules/services/ifplugd.fc
diff --git a/policy/modules/contrib/ifplugd.if b/policy/modules/services/ifplugd.if
index 3cd19b36..3cd19b36 100644
--- a/policy/modules/contrib/ifplugd.if
+++ b/policy/modules/services/ifplugd.if
diff --git a/policy/modules/contrib/ifplugd.te b/policy/modules/services/ifplugd.te
index 14180ac6..14180ac6 100644
--- a/policy/modules/contrib/ifplugd.te
+++ b/policy/modules/services/ifplugd.te
diff --git a/policy/modules/contrib/imaze.fc b/policy/modules/services/imaze.fc
index eb9416e8..eb9416e8 100644
--- a/policy/modules/contrib/imaze.fc
+++ b/policy/modules/services/imaze.fc
diff --git a/policy/modules/contrib/imaze.if b/policy/modules/services/imaze.if
index db53881d..db53881d 100644
--- a/policy/modules/contrib/imaze.if
+++ b/policy/modules/services/imaze.if
diff --git a/policy/modules/contrib/imaze.te b/policy/modules/services/imaze.te
index 7649b91a..7649b91a 100644
--- a/policy/modules/contrib/imaze.te
+++ b/policy/modules/services/imaze.te
diff --git a/policy/modules/contrib/inetd.fc b/policy/modules/services/inetd.fc
index 3329de47..3329de47 100644
--- a/policy/modules/contrib/inetd.fc
+++ b/policy/modules/services/inetd.fc
diff --git a/policy/modules/contrib/inetd.if b/policy/modules/services/inetd.if
index 593cd40b..593cd40b 100644
--- a/policy/modules/contrib/inetd.if
+++ b/policy/modules/services/inetd.if
diff --git a/policy/modules/contrib/inetd.te b/policy/modules/services/inetd.te
index 277a8ad4..277a8ad4 100644
--- a/policy/modules/contrib/inetd.te
+++ b/policy/modules/services/inetd.te
diff --git a/policy/modules/contrib/inn.fc b/policy/modules/services/inn.fc
index eb9bda28..eb9bda28 100644
--- a/policy/modules/contrib/inn.fc
+++ b/policy/modules/services/inn.fc
diff --git a/policy/modules/contrib/inn.if b/policy/modules/services/inn.if
index 8e24feb9..8e24feb9 100644
--- a/policy/modules/contrib/inn.if
+++ b/policy/modules/services/inn.if
diff --git a/policy/modules/contrib/inn.te b/policy/modules/services/inn.te
index a1575e90..a1575e90 100644
--- a/policy/modules/contrib/inn.te
+++ b/policy/modules/services/inn.te
diff --git a/policy/modules/contrib/iodine.fc b/policy/modules/services/iodine.fc
index 7ae0c069..7ae0c069 100644
--- a/policy/modules/contrib/iodine.fc
+++ b/policy/modules/services/iodine.fc
diff --git a/policy/modules/contrib/iodine.if b/policy/modules/services/iodine.if
index 99f1afd1..99f1afd1 100644
--- a/policy/modules/contrib/iodine.if
+++ b/policy/modules/services/iodine.if
diff --git a/policy/modules/contrib/iodine.te b/policy/modules/services/iodine.te
index c918bbf4..c918bbf4 100644
--- a/policy/modules/contrib/iodine.te
+++ b/policy/modules/services/iodine.te
diff --git a/policy/modules/contrib/ircd.fc b/policy/modules/services/ircd.fc
index f1944c75..f1944c75 100644
--- a/policy/modules/contrib/ircd.fc
+++ b/policy/modules/services/ircd.fc
diff --git a/policy/modules/contrib/ircd.if b/policy/modules/services/ircd.if
index 3dbe87d6..3dbe87d6 100644
--- a/policy/modules/contrib/ircd.if
+++ b/policy/modules/services/ircd.if
diff --git a/policy/modules/contrib/ircd.te b/policy/modules/services/ircd.te
index a50373e0..a50373e0 100644
--- a/policy/modules/contrib/ircd.te
+++ b/policy/modules/services/ircd.te
diff --git a/policy/modules/contrib/irqbalance.fc b/policy/modules/services/irqbalance.fc
index a9fb4296..a9fb4296 100644
--- a/policy/modules/contrib/irqbalance.fc
+++ b/policy/modules/services/irqbalance.fc
diff --git a/policy/modules/contrib/irqbalance.if b/policy/modules/services/irqbalance.if
index a8e452fe..a8e452fe 100644
--- a/policy/modules/contrib/irqbalance.if
+++ b/policy/modules/services/irqbalance.if
diff --git a/policy/modules/contrib/irqbalance.te b/policy/modules/services/irqbalance.te
index a71058d8..a71058d8 100644
--- a/policy/modules/contrib/irqbalance.te
+++ b/policy/modules/services/irqbalance.te
diff --git a/policy/modules/contrib/isns.fc b/policy/modules/services/isns.fc
index 488e9a0c..488e9a0c 100644
--- a/policy/modules/contrib/isns.fc
+++ b/policy/modules/services/isns.fc
diff --git a/policy/modules/contrib/isns.if b/policy/modules/services/isns.if
index 4d847e9c..4d847e9c 100644
--- a/policy/modules/contrib/isns.if
+++ b/policy/modules/services/isns.if
diff --git a/policy/modules/contrib/isns.te b/policy/modules/services/isns.te
index b6780d1e..b6780d1e 100644
--- a/policy/modules/contrib/isns.te
+++ b/policy/modules/services/isns.te
diff --git a/policy/modules/contrib/jabber.fc b/policy/modules/services/jabber.fc
index bda8b8c5..bda8b8c5 100644
--- a/policy/modules/contrib/jabber.fc
+++ b/policy/modules/services/jabber.fc
diff --git a/policy/modules/contrib/jabber.if b/policy/modules/services/jabber.if
index 9a31ee51..9a31ee51 100644
--- a/policy/modules/contrib/jabber.if
+++ b/policy/modules/services/jabber.if
diff --git a/policy/modules/contrib/jabber.te b/policy/modules/services/jabber.te
index 7bed09fd..7bed09fd 100644
--- a/policy/modules/contrib/jabber.te
+++ b/policy/modules/services/jabber.te
diff --git a/policy/modules/contrib/jockey.fc b/policy/modules/services/jockey.fc
index d57dad40..d57dad40 100644
--- a/policy/modules/contrib/jockey.fc
+++ b/policy/modules/services/jockey.fc
diff --git a/policy/modules/contrib/jockey.if b/policy/modules/services/jockey.if
index 2fb7a20f..2fb7a20f 100644
--- a/policy/modules/contrib/jockey.if
+++ b/policy/modules/services/jockey.if
diff --git a/policy/modules/contrib/jockey.te b/policy/modules/services/jockey.te
index 520543c0..520543c0 100644
--- a/policy/modules/contrib/jockey.te
+++ b/policy/modules/services/jockey.te
diff --git a/policy/modules/contrib/kerberos.fc b/policy/modules/services/kerberos.fc
index df21fcc7..df21fcc7 100644
--- a/policy/modules/contrib/kerberos.fc
+++ b/policy/modules/services/kerberos.fc
diff --git a/policy/modules/contrib/kerberos.if b/policy/modules/services/kerberos.if
index c8c5a37d..c8c5a37d 100644
--- a/policy/modules/contrib/kerberos.if
+++ b/policy/modules/services/kerberos.if
diff --git a/policy/modules/contrib/kerberos.te b/policy/modules/services/kerberos.te
index 91ca8aac..91ca8aac 100644
--- a/policy/modules/contrib/kerberos.te
+++ b/policy/modules/services/kerberos.te
diff --git a/policy/modules/contrib/kerneloops.fc b/policy/modules/services/kerneloops.fc
index d0db3544..d0db3544 100644
--- a/policy/modules/contrib/kerneloops.fc
+++ b/policy/modules/services/kerneloops.fc
diff --git a/policy/modules/contrib/kerneloops.if b/policy/modules/services/kerneloops.if
index d6f5fd82..d6f5fd82 100644
--- a/policy/modules/contrib/kerneloops.if
+++ b/policy/modules/services/kerneloops.if
diff --git a/policy/modules/contrib/kerneloops.te b/policy/modules/services/kerneloops.te
index acf8d073..acf8d073 100644
--- a/policy/modules/contrib/kerneloops.te
+++ b/policy/modules/services/kerneloops.te
diff --git a/policy/modules/contrib/keyboardd.fc b/policy/modules/services/keyboardd.fc
index 647a5593..647a5593 100644
--- a/policy/modules/contrib/keyboardd.fc
+++ b/policy/modules/services/keyboardd.fc
diff --git a/policy/modules/contrib/keyboardd.if b/policy/modules/services/keyboardd.if
index 8982b910..8982b910 100644
--- a/policy/modules/contrib/keyboardd.if
+++ b/policy/modules/services/keyboardd.if
diff --git a/policy/modules/contrib/keyboardd.te b/policy/modules/services/keyboardd.te
index 628b78b4..628b78b4 100644
--- a/policy/modules/contrib/keyboardd.te
+++ b/policy/modules/services/keyboardd.te
diff --git a/policy/modules/contrib/keystone.fc b/policy/modules/services/keystone.fc
index b273d803..b273d803 100644
--- a/policy/modules/contrib/keystone.fc
+++ b/policy/modules/services/keystone.fc
diff --git a/policy/modules/contrib/keystone.if b/policy/modules/services/keystone.if
index ec9adb00..ec9adb00 100644
--- a/policy/modules/contrib/keystone.if
+++ b/policy/modules/services/keystone.if
diff --git a/policy/modules/contrib/keystone.te b/policy/modules/services/keystone.te
index 9e051ad0..9e051ad0 100644
--- a/policy/modules/contrib/keystone.te
+++ b/policy/modules/services/keystone.te
diff --git a/policy/modules/contrib/ksmtuned.fc b/policy/modules/services/ksmtuned.fc
index 68f3623b..68f3623b 100644
--- a/policy/modules/contrib/ksmtuned.fc
+++ b/policy/modules/services/ksmtuned.fc
diff --git a/policy/modules/contrib/ksmtuned.if b/policy/modules/services/ksmtuned.if
index 59f401bf..59f401bf 100644
--- a/policy/modules/contrib/ksmtuned.if
+++ b/policy/modules/services/ksmtuned.if
diff --git a/policy/modules/contrib/ksmtuned.te b/policy/modules/services/ksmtuned.te
index 97cfdc2d..97cfdc2d 100644
--- a/policy/modules/contrib/ksmtuned.te
+++ b/policy/modules/services/ksmtuned.te
diff --git a/policy/modules/contrib/ktalk.fc b/policy/modules/services/ktalk.fc
index fae3b8c4..fae3b8c4 100644
--- a/policy/modules/contrib/ktalk.fc
+++ b/policy/modules/services/ktalk.fc
diff --git a/policy/modules/contrib/ktalk.if b/policy/modules/services/ktalk.if
index 19777b80..19777b80 100644
--- a/policy/modules/contrib/ktalk.if
+++ b/policy/modules/services/ktalk.if
diff --git a/policy/modules/contrib/ktalk.te b/policy/modules/services/ktalk.te
index f190b5b2..f190b5b2 100644
--- a/policy/modules/contrib/ktalk.te
+++ b/policy/modules/services/ktalk.te
diff --git a/policy/modules/contrib/l2tp.fc b/policy/modules/services/l2tp.fc
index 499c7de6..499c7de6 100644
--- a/policy/modules/contrib/l2tp.fc
+++ b/policy/modules/services/l2tp.fc
diff --git a/policy/modules/contrib/l2tp.if b/policy/modules/services/l2tp.if
index 24d3c444..24d3c444 100644
--- a/policy/modules/contrib/l2tp.if
+++ b/policy/modules/services/l2tp.if
diff --git a/policy/modules/contrib/l2tp.te b/policy/modules/services/l2tp.te
index 2fd53698..2fd53698 100644
--- a/policy/modules/contrib/l2tp.te
+++ b/policy/modules/services/l2tp.te
diff --git a/policy/modules/contrib/ldap.fc b/policy/modules/services/ldap.fc
index 174f4d73..174f4d73 100644
--- a/policy/modules/contrib/ldap.fc
+++ b/policy/modules/services/ldap.fc
diff --git a/policy/modules/contrib/ldap.if b/policy/modules/services/ldap.if
index 59752140..59752140 100644
--- a/policy/modules/contrib/ldap.if
+++ b/policy/modules/services/ldap.if
diff --git a/policy/modules/contrib/ldap.te b/policy/modules/services/ldap.te
index 4a525e6d..4a525e6d 100644
--- a/policy/modules/contrib/ldap.te
+++ b/policy/modules/services/ldap.te
diff --git a/policy/modules/contrib/likewise.fc b/policy/modules/services/likewise.fc
index c95fd7d5..c95fd7d5 100644
--- a/policy/modules/contrib/likewise.fc
+++ b/policy/modules/services/likewise.fc
diff --git a/policy/modules/contrib/likewise.if b/policy/modules/services/likewise.if
index 2b884e64..2b884e64 100644
--- a/policy/modules/contrib/likewise.if
+++ b/policy/modules/services/likewise.if
diff --git a/policy/modules/contrib/likewise.te b/policy/modules/services/likewise.te
index d2a736ef..d2a736ef 100644
--- a/policy/modules/contrib/likewise.te
+++ b/policy/modules/services/likewise.te
diff --git a/policy/modules/contrib/lircd.fc b/policy/modules/services/lircd.fc
index 79947d0c..79947d0c 100644
--- a/policy/modules/contrib/lircd.fc
+++ b/policy/modules/services/lircd.fc
diff --git a/policy/modules/contrib/lircd.if b/policy/modules/services/lircd.if
index de2543bc..de2543bc 100644
--- a/policy/modules/contrib/lircd.if
+++ b/policy/modules/services/lircd.if
diff --git a/policy/modules/contrib/lircd.te b/policy/modules/services/lircd.te
index e85b2aa9..e85b2aa9 100644
--- a/policy/modules/contrib/lircd.te
+++ b/policy/modules/services/lircd.te
diff --git a/policy/modules/contrib/lldpad.fc b/policy/modules/services/lldpad.fc
index 305b8de7..305b8de7 100644
--- a/policy/modules/contrib/lldpad.fc
+++ b/policy/modules/services/lldpad.fc
diff --git a/policy/modules/contrib/lldpad.if b/policy/modules/services/lldpad.if
index 8d7692a3..8d7692a3 100644
--- a/policy/modules/contrib/lldpad.if
+++ b/policy/modules/services/lldpad.if
diff --git a/policy/modules/contrib/lldpad.te b/policy/modules/services/lldpad.te
index 3251f91d..3251f91d 100644
--- a/policy/modules/contrib/lldpad.te
+++ b/policy/modules/services/lldpad.te
diff --git a/policy/modules/contrib/lpd.fc b/policy/modules/services/lpd.fc
index 8916d38e..8916d38e 100644
--- a/policy/modules/contrib/lpd.fc
+++ b/policy/modules/services/lpd.fc
diff --git a/policy/modules/contrib/lpd.if b/policy/modules/services/lpd.if
index 62563717..62563717 100644
--- a/policy/modules/contrib/lpd.if
+++ b/policy/modules/services/lpd.if
diff --git a/policy/modules/contrib/lpd.te b/policy/modules/services/lpd.te
index 149a30ac..149a30ac 100644
--- a/policy/modules/contrib/lpd.te
+++ b/policy/modules/services/lpd.te
diff --git a/policy/modules/contrib/lsm.fc b/policy/modules/services/lsm.fc
index f8a44709..f8a44709 100644
--- a/policy/modules/contrib/lsm.fc
+++ b/policy/modules/services/lsm.fc
diff --git a/policy/modules/contrib/lsm.if b/policy/modules/services/lsm.if
index 44910afa..44910afa 100644
--- a/policy/modules/contrib/lsm.if
+++ b/policy/modules/services/lsm.if
diff --git a/policy/modules/contrib/lsm.te b/policy/modules/services/lsm.te
index c80e3e96..c80e3e96 100644
--- a/policy/modules/contrib/lsm.te
+++ b/policy/modules/services/lsm.te
diff --git a/policy/modules/contrib/mailman.fc b/policy/modules/services/mailman.fc
index fe7a5159..fe7a5159 100644
--- a/policy/modules/contrib/mailman.fc
+++ b/policy/modules/services/mailman.fc
diff --git a/policy/modules/contrib/mailman.if b/policy/modules/services/mailman.if
index 259f0c3e..259f0c3e 100644
--- a/policy/modules/contrib/mailman.if
+++ b/policy/modules/services/mailman.if
diff --git a/policy/modules/contrib/mailman.te b/policy/modules/services/mailman.te
index ca7f7b45..ca7f7b45 100644
--- a/policy/modules/contrib/mailman.te
+++ b/policy/modules/services/mailman.te
diff --git a/policy/modules/contrib/mailscanner.fc b/policy/modules/services/mailscanner.fc
index cc6a8f88..cc6a8f88 100644
--- a/policy/modules/contrib/mailscanner.fc
+++ b/policy/modules/services/mailscanner.fc
diff --git a/policy/modules/contrib/mailscanner.if b/policy/modules/services/mailscanner.if
index a684cfdb..a684cfdb 100644
--- a/policy/modules/contrib/mailscanner.if
+++ b/policy/modules/services/mailscanner.if
diff --git a/policy/modules/contrib/mailscanner.te b/policy/modules/services/mailscanner.te
index 1011e3b2..1011e3b2 100644
--- a/policy/modules/contrib/mailscanner.te
+++ b/policy/modules/services/mailscanner.te
diff --git a/policy/modules/contrib/mediawiki.fc b/policy/modules/services/mediawiki.fc
index 99f7c418..99f7c418 100644
--- a/policy/modules/contrib/mediawiki.fc
+++ b/policy/modules/services/mediawiki.fc
diff --git a/policy/modules/contrib/mediawiki.if b/policy/modules/services/mediawiki.if
index 9771b4ba..9771b4ba 100644
--- a/policy/modules/contrib/mediawiki.if
+++ b/policy/modules/services/mediawiki.if
diff --git a/policy/modules/contrib/mediawiki.te b/policy/modules/services/mediawiki.te
index c528b9fa..c528b9fa 100644
--- a/policy/modules/contrib/mediawiki.te
+++ b/policy/modules/services/mediawiki.te
diff --git a/policy/modules/contrib/memcached.fc b/policy/modules/services/memcached.fc
index 37429fd4..37429fd4 100644
--- a/policy/modules/contrib/memcached.fc
+++ b/policy/modules/services/memcached.fc
diff --git a/policy/modules/contrib/memcached.if b/policy/modules/services/memcached.if
index 5c12b31a..5c12b31a 100644
--- a/policy/modules/contrib/memcached.if
+++ b/policy/modules/services/memcached.if
diff --git a/policy/modules/contrib/memcached.te b/policy/modules/services/memcached.te
index c90c632f..c90c632f 100644
--- a/policy/modules/contrib/memcached.te
+++ b/policy/modules/services/memcached.te
diff --git a/policy/modules/contrib/milter.fc b/policy/modules/services/milter.fc
index 42fe5e94..42fe5e94 100644
--- a/policy/modules/contrib/milter.fc
+++ b/policy/modules/services/milter.fc
diff --git a/policy/modules/contrib/milter.if b/policy/modules/services/milter.if
index ffb58f9f..ffb58f9f 100644
--- a/policy/modules/contrib/milter.if
+++ b/policy/modules/services/milter.if
diff --git a/policy/modules/contrib/milter.te b/policy/modules/services/milter.te
index 6767e831..6767e831 100644
--- a/policy/modules/contrib/milter.te
+++ b/policy/modules/services/milter.te
diff --git a/policy/modules/contrib/minidlna.fc b/policy/modules/services/minidlna.fc
index 79af2d74..79af2d74 100644
--- a/policy/modules/contrib/minidlna.fc
+++ b/policy/modules/services/minidlna.fc
diff --git a/policy/modules/contrib/minidlna.if b/policy/modules/services/minidlna.if
index 7aa4fc99..7aa4fc99 100644
--- a/policy/modules/contrib/minidlna.if
+++ b/policy/modules/services/minidlna.if
diff --git a/policy/modules/contrib/minidlna.te b/policy/modules/services/minidlna.te
index 565f6090..565f6090 100644
--- a/policy/modules/contrib/minidlna.te
+++ b/policy/modules/services/minidlna.te
diff --git a/policy/modules/contrib/minissdpd.fc b/policy/modules/services/minissdpd.fc
index cdad38ed..cdad38ed 100644
--- a/policy/modules/contrib/minissdpd.fc
+++ b/policy/modules/services/minissdpd.fc
diff --git a/policy/modules/contrib/minissdpd.if b/policy/modules/services/minissdpd.if
index d4bdf6c4..d4bdf6c4 100644
--- a/policy/modules/contrib/minissdpd.if
+++ b/policy/modules/services/minissdpd.if
diff --git a/policy/modules/contrib/minissdpd.te b/policy/modules/services/minissdpd.te
index 86d0d54e..86d0d54e 100644
--- a/policy/modules/contrib/minissdpd.te
+++ b/policy/modules/services/minissdpd.te
diff --git a/policy/modules/contrib/modemmanager.fc b/policy/modules/services/modemmanager.fc
index 88d8ff3f..88d8ff3f 100644
--- a/policy/modules/contrib/modemmanager.fc
+++ b/policy/modules/services/modemmanager.fc
diff --git a/policy/modules/contrib/modemmanager.if b/policy/modules/services/modemmanager.if
index b1ac8b5d..b1ac8b5d 100644
--- a/policy/modules/contrib/modemmanager.if
+++ b/policy/modules/services/modemmanager.if
diff --git a/policy/modules/contrib/modemmanager.te b/policy/modules/services/modemmanager.te
index 9efe585d..9efe585d 100644
--- a/policy/modules/contrib/modemmanager.te
+++ b/policy/modules/services/modemmanager.te
diff --git a/policy/modules/contrib/mojomojo.fc b/policy/modules/services/mojomojo.fc
index 7b827ca7..7b827ca7 100644
--- a/policy/modules/contrib/mojomojo.fc
+++ b/policy/modules/services/mojomojo.fc
diff --git a/policy/modules/contrib/mojomojo.if b/policy/modules/services/mojomojo.if
index 6680a087..6680a087 100644
--- a/policy/modules/contrib/mojomojo.if
+++ b/policy/modules/services/mojomojo.if
diff --git a/policy/modules/contrib/mojomojo.te b/policy/modules/services/mojomojo.te
index b22d0d98..b22d0d98 100644
--- a/policy/modules/contrib/mojomojo.te
+++ b/policy/modules/services/mojomojo.te
diff --git a/policy/modules/contrib/mon.fc b/policy/modules/services/mon.fc
index 71b42ee7..71b42ee7 100644
--- a/policy/modules/contrib/mon.fc
+++ b/policy/modules/services/mon.fc
diff --git a/policy/modules/contrib/mon.if b/policy/modules/services/mon.if
index 4701724e..4701724e 100644
--- a/policy/modules/contrib/mon.if
+++ b/policy/modules/services/mon.if
diff --git a/policy/modules/contrib/mon.te b/policy/modules/services/mon.te
index ae2ef764..ae2ef764 100644
--- a/policy/modules/contrib/mon.te
+++ b/policy/modules/services/mon.te
diff --git a/policy/modules/contrib/mongodb.fc b/policy/modules/services/mongodb.fc
index 8d8517cd..8d8517cd 100644
--- a/policy/modules/contrib/mongodb.fc
+++ b/policy/modules/services/mongodb.fc
diff --git a/policy/modules/contrib/mongodb.if b/policy/modules/services/mongodb.if
index 9a184f2a..9a184f2a 100644
--- a/policy/modules/contrib/mongodb.if
+++ b/policy/modules/services/mongodb.if
diff --git a/policy/modules/contrib/mongodb.te b/policy/modules/services/mongodb.te
index bf2b56f7..bf2b56f7 100644
--- a/policy/modules/contrib/mongodb.te
+++ b/policy/modules/services/mongodb.te
diff --git a/policy/modules/contrib/monit.fc b/policy/modules/services/monit.fc
index 1cd0238e..1cd0238e 100644
--- a/policy/modules/contrib/monit.fc
+++ b/policy/modules/services/monit.fc
diff --git a/policy/modules/contrib/monit.if b/policy/modules/services/monit.if
index 832cdca8..832cdca8 100644
--- a/policy/modules/contrib/monit.if
+++ b/policy/modules/services/monit.if
diff --git a/policy/modules/contrib/monit.te b/policy/modules/services/monit.te
index 54e411b2..54e411b2 100644
--- a/policy/modules/contrib/monit.te
+++ b/policy/modules/services/monit.te
diff --git a/policy/modules/contrib/monop.fc b/policy/modules/services/monop.fc
index f89b50f9..f89b50f9 100644
--- a/policy/modules/contrib/monop.fc
+++ b/policy/modules/services/monop.fc
diff --git a/policy/modules/contrib/monop.if b/policy/modules/services/monop.if
index 01060047..01060047 100644
--- a/policy/modules/contrib/monop.if
+++ b/policy/modules/services/monop.if
diff --git a/policy/modules/contrib/monop.te b/policy/modules/services/monop.te
index b27c06c3..b27c06c3 100644
--- a/policy/modules/contrib/monop.te
+++ b/policy/modules/services/monop.te
diff --git a/policy/modules/contrib/mpd.fc b/policy/modules/services/mpd.fc
index 313ce521..313ce521 100644
--- a/policy/modules/contrib/mpd.fc
+++ b/policy/modules/services/mpd.fc
diff --git a/policy/modules/contrib/mpd.if b/policy/modules/services/mpd.if
index 02faa37e..02faa37e 100644
--- a/policy/modules/contrib/mpd.if
+++ b/policy/modules/services/mpd.if
diff --git a/policy/modules/contrib/mpd.te b/policy/modules/services/mpd.te
index 43de2d97..43de2d97 100644
--- a/policy/modules/contrib/mpd.te
+++ b/policy/modules/services/mpd.te
diff --git a/policy/modules/contrib/mta.fc b/policy/modules/services/mta.fc
index 66634b0c..66634b0c 100644
--- a/policy/modules/contrib/mta.fc
+++ b/policy/modules/services/mta.fc
diff --git a/policy/modules/contrib/mta.if b/policy/modules/services/mta.if
index f98346fe..f98346fe 100644
--- a/policy/modules/contrib/mta.if
+++ b/policy/modules/services/mta.if
diff --git a/policy/modules/contrib/mta.te b/policy/modules/services/mta.te
index b64e2322..b64e2322 100644
--- a/policy/modules/contrib/mta.te
+++ b/policy/modules/services/mta.te
diff --git a/policy/modules/contrib/munin.fc b/policy/modules/services/munin.fc
index 8beeff98..8beeff98 100644
--- a/policy/modules/contrib/munin.fc
+++ b/policy/modules/services/munin.fc
diff --git a/policy/modules/contrib/munin.if b/policy/modules/services/munin.if
index cd674994..cd674994 100644
--- a/policy/modules/contrib/munin.if
+++ b/policy/modules/services/munin.if
diff --git a/policy/modules/contrib/munin.te b/policy/modules/services/munin.te
index 137c82e6..137c82e6 100644
--- a/policy/modules/contrib/munin.te
+++ b/policy/modules/services/munin.te
diff --git a/policy/modules/contrib/mysql.fc b/policy/modules/services/mysql.fc
index 8213e53c..8213e53c 100644
--- a/policy/modules/contrib/mysql.fc
+++ b/policy/modules/services/mysql.fc
diff --git a/policy/modules/contrib/mysql.if b/policy/modules/services/mysql.if
index af59114a..af59114a 100644
--- a/policy/modules/contrib/mysql.if
+++ b/policy/modules/services/mysql.if
diff --git a/policy/modules/contrib/mysql.te b/policy/modules/services/mysql.te
index df8e7899..df8e7899 100644
--- a/policy/modules/contrib/mysql.te
+++ b/policy/modules/services/mysql.te
diff --git a/policy/modules/contrib/nagios.fc b/policy/modules/services/nagios.fc
index ee84bd7b..ee84bd7b 100644
--- a/policy/modules/contrib/nagios.fc
+++ b/policy/modules/services/nagios.fc
diff --git a/policy/modules/contrib/nagios.if b/policy/modules/services/nagios.if
index 5df0af43..5df0af43 100644
--- a/policy/modules/contrib/nagios.if
+++ b/policy/modules/services/nagios.if
diff --git a/policy/modules/contrib/nagios.te b/policy/modules/services/nagios.te
index 031c43e4..031c43e4 100644
--- a/policy/modules/contrib/nagios.te
+++ b/policy/modules/services/nagios.te
diff --git a/policy/modules/contrib/nessus.fc b/policy/modules/services/nessus.fc
index 2065c1b8..2065c1b8 100644
--- a/policy/modules/contrib/nessus.fc
+++ b/policy/modules/services/nessus.fc
diff --git a/policy/modules/contrib/nessus.if b/policy/modules/services/nessus.if
index 57bed033..57bed033 100644
--- a/policy/modules/contrib/nessus.if
+++ b/policy/modules/services/nessus.if
diff --git a/policy/modules/contrib/nessus.te b/policy/modules/services/nessus.te
index a9eaab63..a9eaab63 100644
--- a/policy/modules/contrib/nessus.te
+++ b/policy/modules/services/nessus.te
diff --git a/policy/modules/contrib/networkmanager.fc b/policy/modules/services/networkmanager.fc
index 16b3c06f..16b3c06f 100644
--- a/policy/modules/contrib/networkmanager.fc
+++ b/policy/modules/services/networkmanager.fc
diff --git a/policy/modules/contrib/networkmanager.if b/policy/modules/services/networkmanager.if
index 371ebfbd..371ebfbd 100644
--- a/policy/modules/contrib/networkmanager.if
+++ b/policy/modules/services/networkmanager.if
diff --git a/policy/modules/contrib/networkmanager.te b/policy/modules/services/networkmanager.te
index e65eb094..e65eb094 100644
--- a/policy/modules/contrib/networkmanager.te
+++ b/policy/modules/services/networkmanager.te
diff --git a/policy/modules/contrib/nis.fc b/policy/modules/services/nis.fc
index 46f101bc..46f101bc 100644
--- a/policy/modules/contrib/nis.fc
+++ b/policy/modules/services/nis.fc
diff --git a/policy/modules/contrib/nis.if b/policy/modules/services/nis.if
index 66a3ba28..66a3ba28 100644
--- a/policy/modules/contrib/nis.if
+++ b/policy/modules/services/nis.if
diff --git a/policy/modules/contrib/nis.te b/policy/modules/services/nis.te
index cb1fc97a..cb1fc97a 100644
--- a/policy/modules/contrib/nis.te
+++ b/policy/modules/services/nis.te
diff --git a/policy/modules/contrib/nscd.fc b/policy/modules/services/nscd.fc
index 4857b5b7..4857b5b7 100644
--- a/policy/modules/contrib/nscd.fc
+++ b/policy/modules/services/nscd.fc
diff --git a/policy/modules/contrib/nscd.if b/policy/modules/services/nscd.if
index d6b3687a..d6b3687a 100644
--- a/policy/modules/contrib/nscd.if
+++ b/policy/modules/services/nscd.if
diff --git a/policy/modules/contrib/nscd.te b/policy/modules/services/nscd.te
index 6a905d98..6a905d98 100644
--- a/policy/modules/contrib/nscd.te
+++ b/policy/modules/services/nscd.te
diff --git a/policy/modules/contrib/nsd.fc b/policy/modules/services/nsd.fc
index d4fc584e..d4fc584e 100644
--- a/policy/modules/contrib/nsd.fc
+++ b/policy/modules/services/nsd.fc
diff --git a/policy/modules/contrib/nsd.if b/policy/modules/services/nsd.if
index e071bcd0..e071bcd0 100644
--- a/policy/modules/contrib/nsd.if
+++ b/policy/modules/services/nsd.if
diff --git a/policy/modules/contrib/nsd.te b/policy/modules/services/nsd.te
index eb405114..eb405114 100644
--- a/policy/modules/contrib/nsd.te
+++ b/policy/modules/services/nsd.te
diff --git a/policy/modules/contrib/nslcd.fc b/policy/modules/services/nslcd.fc
index 89543b3e..89543b3e 100644
--- a/policy/modules/contrib/nslcd.fc
+++ b/policy/modules/services/nslcd.fc
diff --git a/policy/modules/contrib/nslcd.if b/policy/modules/services/nslcd.if
index b3747dab..b3747dab 100644
--- a/policy/modules/contrib/nslcd.if
+++ b/policy/modules/services/nslcd.if
diff --git a/policy/modules/contrib/nslcd.te b/policy/modules/services/nslcd.te
index 9f30667a..9f30667a 100644
--- a/policy/modules/contrib/nslcd.te
+++ b/policy/modules/services/nslcd.te
diff --git a/policy/modules/contrib/ntop.fc b/policy/modules/services/ntop.fc
index 3ededdd2..3ededdd2 100644
--- a/policy/modules/contrib/ntop.fc
+++ b/policy/modules/services/ntop.fc
diff --git a/policy/modules/contrib/ntop.if b/policy/modules/services/ntop.if
index 60c77939..60c77939 100644
--- a/policy/modules/contrib/ntop.if
+++ b/policy/modules/services/ntop.if
diff --git a/policy/modules/contrib/ntop.te b/policy/modules/services/ntop.te
index 178bbb1d..178bbb1d 100644
--- a/policy/modules/contrib/ntop.te
+++ b/policy/modules/services/ntop.te
diff --git a/policy/modules/contrib/ntp.fc b/policy/modules/services/ntp.fc
index 38436f38..38436f38 100644
--- a/policy/modules/contrib/ntp.fc
+++ b/policy/modules/services/ntp.fc
diff --git a/policy/modules/contrib/ntp.if b/policy/modules/services/ntp.if
index 31f71108..31f71108 100644
--- a/policy/modules/contrib/ntp.if
+++ b/policy/modules/services/ntp.if
diff --git a/policy/modules/contrib/ntp.te b/policy/modules/services/ntp.te
index da6bd145..da6bd145 100644
--- a/policy/modules/contrib/ntp.te
+++ b/policy/modules/services/ntp.te
diff --git a/policy/modules/contrib/numad.fc b/policy/modules/services/numad.fc
index 277ad1dd..277ad1dd 100644
--- a/policy/modules/contrib/numad.fc
+++ b/policy/modules/services/numad.fc
diff --git a/policy/modules/contrib/numad.if b/policy/modules/services/numad.if
index d1c6b8f3..d1c6b8f3 100644
--- a/policy/modules/contrib/numad.if
+++ b/policy/modules/services/numad.if
diff --git a/policy/modules/contrib/numad.te b/policy/modules/services/numad.te
index f3d831ae..f3d831ae 100644
--- a/policy/modules/contrib/numad.te
+++ b/policy/modules/services/numad.te
diff --git a/policy/modules/contrib/nut.fc b/policy/modules/services/nut.fc
index 6dbfbde1..6dbfbde1 100644
--- a/policy/modules/contrib/nut.fc
+++ b/policy/modules/services/nut.fc
diff --git a/policy/modules/contrib/nut.if b/policy/modules/services/nut.if
index 462c079e..462c079e 100644
--- a/policy/modules/contrib/nut.if
+++ b/policy/modules/services/nut.if
diff --git a/policy/modules/contrib/nut.te b/policy/modules/services/nut.te
index 05be0195..05be0195 100644
--- a/policy/modules/contrib/nut.te
+++ b/policy/modules/services/nut.te
diff --git a/policy/modules/contrib/nx.fc b/policy/modules/services/nx.fc
index 73b84d80..73b84d80 100644
--- a/policy/modules/contrib/nx.fc
+++ b/policy/modules/services/nx.fc
diff --git a/policy/modules/contrib/nx.if b/policy/modules/services/nx.if
index 251d6816..251d6816 100644
--- a/policy/modules/contrib/nx.if
+++ b/policy/modules/services/nx.if
diff --git a/policy/modules/contrib/nx.te b/policy/modules/services/nx.te
index 091f8727..091f8727 100644
--- a/policy/modules/contrib/nx.te
+++ b/policy/modules/services/nx.te
diff --git a/policy/modules/contrib/oav.fc b/policy/modules/services/oav.fc
index dabf41ee..dabf41ee 100644
--- a/policy/modules/contrib/oav.fc
+++ b/policy/modules/services/oav.fc
diff --git a/policy/modules/contrib/oav.if b/policy/modules/services/oav.if
index b096e3fb..b096e3fb 100644
--- a/policy/modules/contrib/oav.if
+++ b/policy/modules/services/oav.if
diff --git a/policy/modules/contrib/oav.te b/policy/modules/services/oav.te
index e2b36d4f..e2b36d4f 100644
--- a/policy/modules/contrib/oav.te
+++ b/policy/modules/services/oav.te
diff --git a/policy/modules/contrib/obex.fc b/policy/modules/services/obex.fc
index 03fa5604..03fa5604 100644
--- a/policy/modules/contrib/obex.fc
+++ b/policy/modules/services/obex.fc
diff --git a/policy/modules/contrib/obex.if b/policy/modules/services/obex.if
index 6723697e..6723697e 100644
--- a/policy/modules/contrib/obex.if
+++ b/policy/modules/services/obex.if
diff --git a/policy/modules/contrib/obex.te b/policy/modules/services/obex.te
index c0e36892..c0e36892 100644
--- a/policy/modules/contrib/obex.te
+++ b/policy/modules/services/obex.te
diff --git a/policy/modules/contrib/oddjob.fc b/policy/modules/services/oddjob.fc
index f1c819ef..f1c819ef 100644
--- a/policy/modules/contrib/oddjob.fc
+++ b/policy/modules/services/oddjob.fc
diff --git a/policy/modules/contrib/oddjob.if b/policy/modules/services/oddjob.if
index baa890a9..baa890a9 100644
--- a/policy/modules/contrib/oddjob.if
+++ b/policy/modules/services/oddjob.if
diff --git a/policy/modules/contrib/oddjob.te b/policy/modules/services/oddjob.te
index 39e2dcf5..39e2dcf5 100644
--- a/policy/modules/contrib/oddjob.te
+++ b/policy/modules/services/oddjob.te
diff --git a/policy/modules/contrib/oident.fc b/policy/modules/services/oident.fc
index 584d948f..584d948f 100644
--- a/policy/modules/contrib/oident.fc
+++ b/policy/modules/services/oident.fc
diff --git a/policy/modules/contrib/oident.if b/policy/modules/services/oident.if
index 95b329ef..95b329ef 100644
--- a/policy/modules/contrib/oident.if
+++ b/policy/modules/services/oident.if
diff --git a/policy/modules/contrib/oident.te b/policy/modules/services/oident.te
index 96e4d87c..96e4d87c 100644
--- a/policy/modules/contrib/oident.te
+++ b/policy/modules/services/oident.te
diff --git a/policy/modules/contrib/openca.fc b/policy/modules/services/openca.fc
index 2e485b91..2e485b91 100644
--- a/policy/modules/contrib/openca.fc
+++ b/policy/modules/services/openca.fc
diff --git a/policy/modules/contrib/openca.if b/policy/modules/services/openca.if
index e20879ef..e20879ef 100644
--- a/policy/modules/contrib/openca.if
+++ b/policy/modules/services/openca.if
diff --git a/policy/modules/contrib/openca.te b/policy/modules/services/openca.te
index 0fc3a58d..0fc3a58d 100644
--- a/policy/modules/contrib/openca.te
+++ b/policy/modules/services/openca.te
diff --git a/policy/modules/contrib/openct.fc b/policy/modules/services/openct.fc
index 4c0236d2..4c0236d2 100644
--- a/policy/modules/contrib/openct.fc
+++ b/policy/modules/services/openct.fc
diff --git a/policy/modules/contrib/openct.if b/policy/modules/services/openct.if
index 61c3eb8b..61c3eb8b 100644
--- a/policy/modules/contrib/openct.if
+++ b/policy/modules/services/openct.if
diff --git a/policy/modules/contrib/openct.te b/policy/modules/services/openct.te
index 3f424656..3f424656 100644
--- a/policy/modules/contrib/openct.te
+++ b/policy/modules/services/openct.te
diff --git a/policy/modules/contrib/openhpi.fc b/policy/modules/services/openhpi.fc
index 1ce9da3d..1ce9da3d 100644
--- a/policy/modules/contrib/openhpi.fc
+++ b/policy/modules/services/openhpi.fc
diff --git a/policy/modules/contrib/openhpi.if b/policy/modules/services/openhpi.if
index ca1e226e..ca1e226e 100644
--- a/policy/modules/contrib/openhpi.if
+++ b/policy/modules/services/openhpi.if
diff --git a/policy/modules/contrib/openhpi.te b/policy/modules/services/openhpi.te
index 65b538c0..65b538c0 100644
--- a/policy/modules/contrib/openhpi.te
+++ b/policy/modules/services/openhpi.te
diff --git a/policy/modules/contrib/openvpn.fc b/policy/modules/services/openvpn.fc
index 7a00b7a8..7a00b7a8 100644
--- a/policy/modules/contrib/openvpn.fc
+++ b/policy/modules/services/openvpn.fc
diff --git a/policy/modules/contrib/openvpn.if b/policy/modules/services/openvpn.if
index a03c2582..a03c2582 100644
--- a/policy/modules/contrib/openvpn.if
+++ b/policy/modules/services/openvpn.if
diff --git a/policy/modules/contrib/openvpn.te b/policy/modules/services/openvpn.te
index f282b1fe..f282b1fe 100644
--- a/policy/modules/contrib/openvpn.te
+++ b/policy/modules/services/openvpn.te
diff --git a/policy/modules/contrib/openvswitch.fc b/policy/modules/services/openvswitch.fc
index 04dabe8c..04dabe8c 100644
--- a/policy/modules/contrib/openvswitch.fc
+++ b/policy/modules/services/openvswitch.fc
diff --git a/policy/modules/contrib/openvswitch.if b/policy/modules/services/openvswitch.if
index f0133ed3..f0133ed3 100644
--- a/policy/modules/contrib/openvswitch.if
+++ b/policy/modules/services/openvswitch.if
diff --git a/policy/modules/contrib/openvswitch.te b/policy/modules/services/openvswitch.te
index b9790021..b9790021 100644
--- a/policy/modules/contrib/openvswitch.te
+++ b/policy/modules/services/openvswitch.te
diff --git a/policy/modules/contrib/pacemaker.fc b/policy/modules/services/pacemaker.fc
index 3b398450..3b398450 100644
--- a/policy/modules/contrib/pacemaker.fc
+++ b/policy/modules/services/pacemaker.fc
diff --git a/policy/modules/contrib/pacemaker.if b/policy/modules/services/pacemaker.if
index 44d1cf63..44d1cf63 100644
--- a/policy/modules/contrib/pacemaker.if
+++ b/policy/modules/services/pacemaker.if
diff --git a/policy/modules/contrib/pacemaker.te b/policy/modules/services/pacemaker.te
index a7c5c2f9..a7c5c2f9 100644
--- a/policy/modules/contrib/pacemaker.te
+++ b/policy/modules/services/pacemaker.te
diff --git a/policy/modules/contrib/pads.fc b/policy/modules/services/pads.fc
index 8a7e20b5..8a7e20b5 100644
--- a/policy/modules/contrib/pads.fc
+++ b/policy/modules/services/pads.fc
diff --git a/policy/modules/contrib/pads.if b/policy/modules/services/pads.if
index 4dd35745..4dd35745 100644
--- a/policy/modules/contrib/pads.if
+++ b/policy/modules/services/pads.if
diff --git a/policy/modules/contrib/pads.te b/policy/modules/services/pads.te
index 98d22bfd..98d22bfd 100644
--- a/policy/modules/contrib/pads.te
+++ b/policy/modules/services/pads.te
diff --git a/policy/modules/contrib/pcscd.fc b/policy/modules/services/pcscd.fc
index 4d667ea2..4d667ea2 100644
--- a/policy/modules/contrib/pcscd.fc
+++ b/policy/modules/services/pcscd.fc
diff --git a/policy/modules/contrib/pcscd.if b/policy/modules/services/pcscd.if
index 412c24aa..412c24aa 100644
--- a/policy/modules/contrib/pcscd.if
+++ b/policy/modules/services/pcscd.if
diff --git a/policy/modules/contrib/pcscd.te b/policy/modules/services/pcscd.te
index 247fe5c8..247fe5c8 100644
--- a/policy/modules/contrib/pcscd.te
+++ b/policy/modules/services/pcscd.te
diff --git a/policy/modules/contrib/pegasus.fc b/policy/modules/services/pegasus.fc
index 0f7fe617..0f7fe617 100644
--- a/policy/modules/contrib/pegasus.fc
+++ b/policy/modules/services/pegasus.fc
diff --git a/policy/modules/contrib/pegasus.if b/policy/modules/services/pegasus.if
index eadb0129..eadb0129 100644
--- a/policy/modules/contrib/pegasus.if
+++ b/policy/modules/services/pegasus.if
diff --git a/policy/modules/contrib/pegasus.te b/policy/modules/services/pegasus.te
index 2af2dda5..2af2dda5 100644
--- a/policy/modules/contrib/pegasus.te
+++ b/policy/modules/services/pegasus.te
diff --git a/policy/modules/contrib/perdition.fc b/policy/modules/services/perdition.fc
index f9f88dfb..f9f88dfb 100644
--- a/policy/modules/contrib/perdition.fc
+++ b/policy/modules/services/perdition.fc
diff --git a/policy/modules/contrib/perdition.if b/policy/modules/services/perdition.if
index 4d69d909..4d69d909 100644
--- a/policy/modules/contrib/perdition.if
+++ b/policy/modules/services/perdition.if
diff --git a/policy/modules/contrib/perdition.te b/policy/modules/services/perdition.te
index 82e24cc8..82e24cc8 100644
--- a/policy/modules/contrib/perdition.te
+++ b/policy/modules/services/perdition.te
diff --git a/policy/modules/contrib/pingd.fc b/policy/modules/services/pingd.fc
index 1cbbf6d8..1cbbf6d8 100644
--- a/policy/modules/contrib/pingd.fc
+++ b/policy/modules/services/pingd.fc
diff --git a/policy/modules/contrib/pingd.if b/policy/modules/services/pingd.if
index fe9acb09..fe9acb09 100644
--- a/policy/modules/contrib/pingd.if
+++ b/policy/modules/services/pingd.if
diff --git a/policy/modules/contrib/pingd.te b/policy/modules/services/pingd.te
index e20b15f8..e20b15f8 100644
--- a/policy/modules/contrib/pingd.te
+++ b/policy/modules/services/pingd.te
diff --git a/policy/modules/contrib/pkcs.fc b/policy/modules/services/pkcs.fc
index e920f427..e920f427 100644
--- a/policy/modules/contrib/pkcs.fc
+++ b/policy/modules/services/pkcs.fc
diff --git a/policy/modules/contrib/pkcs.if b/policy/modules/services/pkcs.if
index 9d1af4e5..9d1af4e5 100644
--- a/policy/modules/contrib/pkcs.if
+++ b/policy/modules/services/pkcs.if
diff --git a/policy/modules/contrib/pkcs.te b/policy/modules/services/pkcs.te
index 19915e31..19915e31 100644
--- a/policy/modules/contrib/pkcs.te
+++ b/policy/modules/services/pkcs.te
diff --git a/policy/modules/contrib/plymouthd.fc b/policy/modules/services/plymouthd.fc
index c99ccd2d..c99ccd2d 100644
--- a/policy/modules/contrib/plymouthd.fc
+++ b/policy/modules/services/plymouthd.fc
diff --git a/policy/modules/contrib/plymouthd.if b/policy/modules/services/plymouthd.if
index 04e0c734..04e0c734 100644
--- a/policy/modules/contrib/plymouthd.if
+++ b/policy/modules/services/plymouthd.if
diff --git a/policy/modules/contrib/plymouthd.te b/policy/modules/services/plymouthd.te
index 8b265787..8b265787 100644
--- a/policy/modules/contrib/plymouthd.te
+++ b/policy/modules/services/plymouthd.te
diff --git a/policy/modules/contrib/policykit.fc b/policy/modules/services/policykit.fc
index 588b9823..588b9823 100644
--- a/policy/modules/contrib/policykit.fc
+++ b/policy/modules/services/policykit.fc
diff --git a/policy/modules/contrib/policykit.if b/policy/modules/services/policykit.if
index 39062262..39062262 100644
--- a/policy/modules/contrib/policykit.if
+++ b/policy/modules/services/policykit.if
diff --git a/policy/modules/contrib/policykit.te b/policy/modules/services/policykit.te
index 0fd3d3f6..0fd3d3f6 100644
--- a/policy/modules/contrib/policykit.te
+++ b/policy/modules/services/policykit.te
diff --git a/policy/modules/contrib/polipo.fc b/policy/modules/services/polipo.fc
index 1cfd0761..1cfd0761 100644
--- a/policy/modules/contrib/polipo.fc
+++ b/policy/modules/services/polipo.fc
diff --git a/policy/modules/contrib/polipo.if b/policy/modules/services/polipo.if
index 4b1988de..4b1988de 100644
--- a/policy/modules/contrib/polipo.if
+++ b/policy/modules/services/polipo.if
diff --git a/policy/modules/contrib/polipo.te b/policy/modules/services/polipo.te
index 5f724161..5f724161 100644
--- a/policy/modules/contrib/polipo.te
+++ b/policy/modules/services/polipo.te
diff --git a/policy/modules/contrib/portmap.fc b/policy/modules/services/portmap.fc
index b33b5f4e..b33b5f4e 100644
--- a/policy/modules/contrib/portmap.fc
+++ b/policy/modules/services/portmap.fc
diff --git a/policy/modules/contrib/portmap.if b/policy/modules/services/portmap.if
index 52208ce0..52208ce0 100644
--- a/policy/modules/contrib/portmap.if
+++ b/policy/modules/services/portmap.if
diff --git a/policy/modules/contrib/portmap.te b/policy/modules/services/portmap.te
index 4620bb8c..4620bb8c 100644
--- a/policy/modules/contrib/portmap.te
+++ b/policy/modules/services/portmap.te
diff --git a/policy/modules/contrib/portreserve.fc b/policy/modules/services/portreserve.fc
index d649d58d..d649d58d 100644
--- a/policy/modules/contrib/portreserve.fc
+++ b/policy/modules/services/portreserve.fc
diff --git a/policy/modules/contrib/portreserve.if b/policy/modules/services/portreserve.if
index 0a90afd6..0a90afd6 100644
--- a/policy/modules/contrib/portreserve.if
+++ b/policy/modules/services/portreserve.if
diff --git a/policy/modules/contrib/portreserve.te b/policy/modules/services/portreserve.te
index 4a42d7ce..4a42d7ce 100644
--- a/policy/modules/contrib/portreserve.te
+++ b/policy/modules/services/portreserve.te
diff --git a/policy/modules/contrib/portslave.fc b/policy/modules/services/portslave.fc
index 1afb1976..1afb1976 100644
--- a/policy/modules/contrib/portslave.fc
+++ b/policy/modules/services/portslave.fc
diff --git a/policy/modules/contrib/portslave.if b/policy/modules/services/portslave.if
index c2919e26..c2919e26 100644
--- a/policy/modules/contrib/portslave.if
+++ b/policy/modules/services/portslave.if
diff --git a/policy/modules/contrib/portslave.te b/policy/modules/services/portslave.te
index 1d61734d..1d61734d 100644
--- a/policy/modules/contrib/portslave.te
+++ b/policy/modules/services/portslave.te
diff --git a/policy/modules/contrib/postfix.fc b/policy/modules/services/postfix.fc
index ecf447d6..ecf447d6 100644
--- a/policy/modules/contrib/postfix.fc
+++ b/policy/modules/services/postfix.fc
diff --git a/policy/modules/contrib/postfix.if b/policy/modules/services/postfix.if
index fa17bde4..fa17bde4 100644
--- a/policy/modules/contrib/postfix.if
+++ b/policy/modules/services/postfix.if
diff --git a/policy/modules/contrib/postfix.te b/policy/modules/services/postfix.te
index 03843a2a..03843a2a 100644
--- a/policy/modules/contrib/postfix.te
+++ b/policy/modules/services/postfix.te
diff --git a/policy/modules/contrib/postfixpolicyd.fc b/policy/modules/services/postfixpolicyd.fc
index a8fb9f8c..a8fb9f8c 100644
--- a/policy/modules/contrib/postfixpolicyd.fc
+++ b/policy/modules/services/postfixpolicyd.fc
diff --git a/policy/modules/contrib/postfixpolicyd.if b/policy/modules/services/postfixpolicyd.if
index e462ac04..e462ac04 100644
--- a/policy/modules/contrib/postfixpolicyd.if
+++ b/policy/modules/services/postfixpolicyd.if
diff --git a/policy/modules/contrib/postfixpolicyd.te b/policy/modules/services/postfixpolicyd.te
index 78e565be..78e565be 100644
--- a/policy/modules/contrib/postfixpolicyd.te
+++ b/policy/modules/services/postfixpolicyd.te
diff --git a/policy/modules/contrib/postgrey.fc b/policy/modules/services/postgrey.fc
index 076987a6..076987a6 100644
--- a/policy/modules/contrib/postgrey.fc
+++ b/policy/modules/services/postgrey.fc
diff --git a/policy/modules/contrib/postgrey.if b/policy/modules/services/postgrey.if
index d63198e9..d63198e9 100644
--- a/policy/modules/contrib/postgrey.if
+++ b/policy/modules/services/postgrey.if
diff --git a/policy/modules/contrib/postgrey.te b/policy/modules/services/postgrey.te
index 70aaf77e..70aaf77e 100644
--- a/policy/modules/contrib/postgrey.te
+++ b/policy/modules/services/postgrey.te
diff --git a/policy/modules/contrib/ppp.fc b/policy/modules/services/ppp.fc
index 67de5b3e..67de5b3e 100644
--- a/policy/modules/contrib/ppp.fc
+++ b/policy/modules/services/ppp.fc
diff --git a/policy/modules/contrib/ppp.if b/policy/modules/services/ppp.if
index 070e565c..070e565c 100644
--- a/policy/modules/contrib/ppp.if
+++ b/policy/modules/services/ppp.if
diff --git a/policy/modules/contrib/ppp.te b/policy/modules/services/ppp.te
index d5c80292..d5c80292 100644
--- a/policy/modules/contrib/ppp.te
+++ b/policy/modules/services/ppp.te
diff --git a/policy/modules/contrib/prelude.fc b/policy/modules/services/prelude.fc
index ca48c982..ca48c982 100644
--- a/policy/modules/contrib/prelude.fc
+++ b/policy/modules/services/prelude.fc
diff --git a/policy/modules/contrib/prelude.if b/policy/modules/services/prelude.if
index ceef90f2..ceef90f2 100644
--- a/policy/modules/contrib/prelude.if
+++ b/policy/modules/services/prelude.if
diff --git a/policy/modules/contrib/prelude.te b/policy/modules/services/prelude.te
index 187cac12..187cac12 100644
--- a/policy/modules/contrib/prelude.te
+++ b/policy/modules/services/prelude.te
diff --git a/policy/modules/contrib/privoxy.fc b/policy/modules/services/privoxy.fc
index 9feef4f7..9feef4f7 100644
--- a/policy/modules/contrib/privoxy.fc
+++ b/policy/modules/services/privoxy.fc
diff --git a/policy/modules/contrib/privoxy.if b/policy/modules/services/privoxy.if
index a35e6eab..a35e6eab 100644
--- a/policy/modules/contrib/privoxy.if
+++ b/policy/modules/services/privoxy.if
diff --git a/policy/modules/contrib/privoxy.te b/policy/modules/services/privoxy.te
index 8f6b50cb..8f6b50cb 100644
--- a/policy/modules/contrib/privoxy.te
+++ b/policy/modules/services/privoxy.te
diff --git a/policy/modules/contrib/procmail.fc b/policy/modules/services/procmail.fc
index dac08916..dac08916 100644
--- a/policy/modules/contrib/procmail.fc
+++ b/policy/modules/services/procmail.fc
diff --git a/policy/modules/contrib/procmail.if b/policy/modules/services/procmail.if
index 00edeab1..00edeab1 100644
--- a/policy/modules/contrib/procmail.if
+++ b/policy/modules/services/procmail.if
diff --git a/policy/modules/contrib/procmail.te b/policy/modules/services/procmail.te
index deb10b38..deb10b38 100644
--- a/policy/modules/contrib/procmail.te
+++ b/policy/modules/services/procmail.te
diff --git a/policy/modules/contrib/psad.fc b/policy/modules/services/psad.fc
index d26a15b5..d26a15b5 100644
--- a/policy/modules/contrib/psad.fc
+++ b/policy/modules/services/psad.fc
diff --git a/policy/modules/contrib/psad.if b/policy/modules/services/psad.if
index 6ad87034..6ad87034 100644
--- a/policy/modules/contrib/psad.if
+++ b/policy/modules/services/psad.if
diff --git a/policy/modules/contrib/psad.te b/policy/modules/services/psad.te
index a18acb8c..a18acb8c 100644
--- a/policy/modules/contrib/psad.te
+++ b/policy/modules/services/psad.te
diff --git a/policy/modules/contrib/publicfile.fc b/policy/modules/services/publicfile.fc
index 68bd5f50..68bd5f50 100644
--- a/policy/modules/contrib/publicfile.fc
+++ b/policy/modules/services/publicfile.fc
diff --git a/policy/modules/contrib/publicfile.if b/policy/modules/services/publicfile.if
index f39eec61..f39eec61 100644
--- a/policy/modules/contrib/publicfile.if
+++ b/policy/modules/services/publicfile.if
diff --git a/policy/modules/contrib/publicfile.te b/policy/modules/services/publicfile.te
index 3246beff..3246beff 100644
--- a/policy/modules/contrib/publicfile.te
+++ b/policy/modules/services/publicfile.te
diff --git a/policy/modules/contrib/pwauth.fc b/policy/modules/services/pwauth.fc
index bef33518..bef33518 100644
--- a/policy/modules/contrib/pwauth.fc
+++ b/policy/modules/services/pwauth.fc
diff --git a/policy/modules/contrib/pwauth.if b/policy/modules/services/pwauth.if
index 1148dce1..1148dce1 100644
--- a/policy/modules/contrib/pwauth.if
+++ b/policy/modules/services/pwauth.if
diff --git a/policy/modules/contrib/pwauth.te b/policy/modules/services/pwauth.te
index dda03739..dda03739 100644
--- a/policy/modules/contrib/pwauth.te
+++ b/policy/modules/services/pwauth.te
diff --git a/policy/modules/contrib/pxe.fc b/policy/modules/services/pxe.fc
index 56ca3ecd..56ca3ecd 100644
--- a/policy/modules/contrib/pxe.fc
+++ b/policy/modules/services/pxe.fc
diff --git a/policy/modules/contrib/pxe.if b/policy/modules/services/pxe.if
index e0068b79..e0068b79 100644
--- a/policy/modules/contrib/pxe.if
+++ b/policy/modules/services/pxe.if
diff --git a/policy/modules/contrib/pxe.te b/policy/modules/services/pxe.te
index 66b5fda4..66b5fda4 100644
--- a/policy/modules/contrib/pxe.te
+++ b/policy/modules/services/pxe.te
diff --git a/policy/modules/contrib/pyicqt.fc b/policy/modules/services/pyicqt.fc
index 4dd36d1c..4dd36d1c 100644
--- a/policy/modules/contrib/pyicqt.fc
+++ b/policy/modules/services/pyicqt.fc
diff --git a/policy/modules/contrib/pyicqt.if b/policy/modules/services/pyicqt.if
index 1742d8cf..1742d8cf 100644
--- a/policy/modules/contrib/pyicqt.if
+++ b/policy/modules/services/pyicqt.if
diff --git a/policy/modules/contrib/pyicqt.te b/policy/modules/services/pyicqt.te
index 6861a4af..6861a4af 100644
--- a/policy/modules/contrib/pyicqt.te
+++ b/policy/modules/services/pyicqt.te
diff --git a/policy/modules/contrib/pyzor.fc b/policy/modules/services/pyzor.fc
index af13139a..af13139a 100644
--- a/policy/modules/contrib/pyzor.fc
+++ b/policy/modules/services/pyzor.fc
diff --git a/policy/modules/contrib/pyzor.if b/policy/modules/services/pyzor.if
index 7bc14f91..7bc14f91 100644
--- a/policy/modules/contrib/pyzor.if
+++ b/policy/modules/services/pyzor.if
diff --git a/policy/modules/contrib/pyzor.te b/policy/modules/services/pyzor.te
index 3119df00..3119df00 100644
--- a/policy/modules/contrib/pyzor.te
+++ b/policy/modules/services/pyzor.te
diff --git a/policy/modules/contrib/qmail.fc b/policy/modules/services/qmail.fc
index 54e0847f..54e0847f 100644
--- a/policy/modules/contrib/qmail.fc
+++ b/policy/modules/services/qmail.fc
diff --git a/policy/modules/contrib/qmail.if b/policy/modules/services/qmail.if
index e4f0000e..e4f0000e 100644
--- a/policy/modules/contrib/qmail.if
+++ b/policy/modules/services/qmail.if
diff --git a/policy/modules/contrib/qmail.te b/policy/modules/services/qmail.te
index 8abb5f9b..8abb5f9b 100644
--- a/policy/modules/contrib/qmail.te
+++ b/policy/modules/services/qmail.te
diff --git a/policy/modules/contrib/qpid.fc b/policy/modules/services/qpid.fc
index ed8f5432..ed8f5432 100644
--- a/policy/modules/contrib/qpid.fc
+++ b/policy/modules/services/qpid.fc
diff --git a/policy/modules/contrib/qpid.if b/policy/modules/services/qpid.if
index 531bdc39..531bdc39 100644
--- a/policy/modules/contrib/qpid.if
+++ b/policy/modules/services/qpid.if
diff --git a/policy/modules/contrib/qpid.te b/policy/modules/services/qpid.te
index 533fbb16..533fbb16 100644
--- a/policy/modules/contrib/qpid.te
+++ b/policy/modules/services/qpid.te
diff --git a/policy/modules/contrib/quantum.fc b/policy/modules/services/quantum.fc
index 70ab68b0..70ab68b0 100644
--- a/policy/modules/contrib/quantum.fc
+++ b/policy/modules/services/quantum.fc
diff --git a/policy/modules/contrib/quantum.if b/policy/modules/services/quantum.if
index 31aa2d93..31aa2d93 100644
--- a/policy/modules/contrib/quantum.if
+++ b/policy/modules/services/quantum.if
diff --git a/policy/modules/contrib/quantum.te b/policy/modules/services/quantum.te
index f4d304a6..f4d304a6 100644
--- a/policy/modules/contrib/quantum.te
+++ b/policy/modules/services/quantum.te
diff --git a/policy/modules/contrib/rabbitmq.fc b/policy/modules/services/rabbitmq.fc
index 88541bb7..88541bb7 100644
--- a/policy/modules/contrib/rabbitmq.fc
+++ b/policy/modules/services/rabbitmq.fc
diff --git a/policy/modules/contrib/rabbitmq.if b/policy/modules/services/rabbitmq.if
index 854cd364..854cd364 100644
--- a/policy/modules/contrib/rabbitmq.if
+++ b/policy/modules/services/rabbitmq.if
diff --git a/policy/modules/contrib/rabbitmq.te b/policy/modules/services/rabbitmq.te
index e557dc00..e557dc00 100644
--- a/policy/modules/contrib/rabbitmq.te
+++ b/policy/modules/services/rabbitmq.te
diff --git a/policy/modules/contrib/radius.fc b/policy/modules/services/radius.fc
index 19ff8e93..19ff8e93 100644
--- a/policy/modules/contrib/radius.fc
+++ b/policy/modules/services/radius.fc
diff --git a/policy/modules/contrib/radius.if b/policy/modules/services/radius.if
index bce89c30..bce89c30 100644
--- a/policy/modules/contrib/radius.if
+++ b/policy/modules/services/radius.if
diff --git a/policy/modules/contrib/radius.te b/policy/modules/services/radius.te
index e6ff2d00..e6ff2d00 100644
--- a/policy/modules/contrib/radius.te
+++ b/policy/modules/services/radius.te
diff --git a/policy/modules/contrib/radvd.fc b/policy/modules/services/radvd.fc
index 9765e456..9765e456 100644
--- a/policy/modules/contrib/radvd.fc
+++ b/policy/modules/services/radvd.fc
diff --git a/policy/modules/contrib/radvd.if b/policy/modules/services/radvd.if
index 38e35fe6..38e35fe6 100644
--- a/policy/modules/contrib/radvd.if
+++ b/policy/modules/services/radvd.if
diff --git a/policy/modules/contrib/radvd.te b/policy/modules/services/radvd.te
index e06e52e6..e06e52e6 100644
--- a/policy/modules/contrib/radvd.te
+++ b/policy/modules/services/radvd.te
diff --git a/policy/modules/contrib/razor.fc b/policy/modules/services/razor.fc
index 6723f4d3..6723f4d3 100644
--- a/policy/modules/contrib/razor.fc
+++ b/policy/modules/services/razor.fc
diff --git a/policy/modules/contrib/razor.if b/policy/modules/services/razor.if
index 1e4b523b..1e4b523b 100644
--- a/policy/modules/contrib/razor.if
+++ b/policy/modules/services/razor.if
diff --git a/policy/modules/contrib/razor.te b/policy/modules/services/razor.te
index 8497f9af..8497f9af 100644
--- a/policy/modules/contrib/razor.te
+++ b/policy/modules/services/razor.te
diff --git a/policy/modules/contrib/rdisc.fc b/policy/modules/services/rdisc.fc
index 0c4d5b55..0c4d5b55 100644
--- a/policy/modules/contrib/rdisc.fc
+++ b/policy/modules/services/rdisc.fc
diff --git a/policy/modules/contrib/rdisc.if b/policy/modules/services/rdisc.if
index 170ef52f..170ef52f 100644
--- a/policy/modules/contrib/rdisc.if
+++ b/policy/modules/services/rdisc.if
diff --git a/policy/modules/contrib/rdisc.te b/policy/modules/services/rdisc.te
index cd8ead33..cd8ead33 100644
--- a/policy/modules/contrib/rdisc.te
+++ b/policy/modules/services/rdisc.te
diff --git a/policy/modules/contrib/realmd.fc b/policy/modules/services/realmd.fc
index 04babe3d..04babe3d 100644
--- a/policy/modules/contrib/realmd.fc
+++ b/policy/modules/services/realmd.fc
diff --git a/policy/modules/contrib/realmd.if b/policy/modules/services/realmd.if
index bff31dfd..bff31dfd 100644
--- a/policy/modules/contrib/realmd.if
+++ b/policy/modules/services/realmd.if
diff --git a/policy/modules/contrib/realmd.te b/policy/modules/services/realmd.te
index 5bc878b2..5bc878b2 100644
--- a/policy/modules/contrib/realmd.te
+++ b/policy/modules/services/realmd.te
diff --git a/policy/modules/contrib/redis.fc b/policy/modules/services/redis.fc
index 74443abd..74443abd 100644
--- a/policy/modules/contrib/redis.fc
+++ b/policy/modules/services/redis.fc
diff --git a/policy/modules/contrib/redis.if b/policy/modules/services/redis.if
index 276309a9..276309a9 100644
--- a/policy/modules/contrib/redis.if
+++ b/policy/modules/services/redis.if
diff --git a/policy/modules/contrib/redis.te b/policy/modules/services/redis.te
index 5e809cf6..5e809cf6 100644
--- a/policy/modules/contrib/redis.te
+++ b/policy/modules/services/redis.te
diff --git a/policy/modules/contrib/remotelogin.fc b/policy/modules/services/remotelogin.fc
index 327baf05..327baf05 100644
--- a/policy/modules/contrib/remotelogin.fc
+++ b/policy/modules/services/remotelogin.fc
diff --git a/policy/modules/contrib/remotelogin.if b/policy/modules/services/remotelogin.if
index a9ce68e3..a9ce68e3 100644
--- a/policy/modules/contrib/remotelogin.if
+++ b/policy/modules/services/remotelogin.if
diff --git a/policy/modules/contrib/remotelogin.te b/policy/modules/services/remotelogin.te
index bc2292e3..bc2292e3 100644
--- a/policy/modules/contrib/remotelogin.te
+++ b/policy/modules/services/remotelogin.te
diff --git a/policy/modules/contrib/resmgr.fc b/policy/modules/services/resmgr.fc
index c5b467dc..c5b467dc 100644
--- a/policy/modules/contrib/resmgr.fc
+++ b/policy/modules/services/resmgr.fc
diff --git a/policy/modules/contrib/resmgr.if b/policy/modules/services/resmgr.if
index a4069344..a4069344 100644
--- a/policy/modules/contrib/resmgr.if
+++ b/policy/modules/services/resmgr.if
diff --git a/policy/modules/contrib/resmgr.te b/policy/modules/services/resmgr.te
index d3a7890f..d3a7890f 100644
--- a/policy/modules/contrib/resmgr.te
+++ b/policy/modules/services/resmgr.te
diff --git a/policy/modules/contrib/rgmanager.fc b/policy/modules/services/rgmanager.fc
index 0e064444..0e064444 100644
--- a/policy/modules/contrib/rgmanager.fc
+++ b/policy/modules/services/rgmanager.fc
diff --git a/policy/modules/contrib/rgmanager.if b/policy/modules/services/rgmanager.if
index 943b0b87..943b0b87 100644
--- a/policy/modules/contrib/rgmanager.if
+++ b/policy/modules/services/rgmanager.if
diff --git a/policy/modules/contrib/rgmanager.te b/policy/modules/services/rgmanager.te
index 2329f8e3..2329f8e3 100644
--- a/policy/modules/contrib/rgmanager.te
+++ b/policy/modules/services/rgmanager.te
diff --git a/policy/modules/contrib/rhcs.fc b/policy/modules/services/rhcs.fc
index 90d0c0de..90d0c0de 100644
--- a/policy/modules/contrib/rhcs.fc
+++ b/policy/modules/services/rhcs.fc
diff --git a/policy/modules/contrib/rhcs.if b/policy/modules/services/rhcs.if
index 776c5701..776c5701 100644
--- a/policy/modules/contrib/rhcs.if
+++ b/policy/modules/services/rhcs.if
diff --git a/policy/modules/contrib/rhcs.te b/policy/modules/services/rhcs.te
index c0a7c3d5..c0a7c3d5 100644
--- a/policy/modules/contrib/rhcs.te
+++ b/policy/modules/services/rhcs.te
diff --git a/policy/modules/contrib/rhgb.fc b/policy/modules/services/rhgb.fc
index b83c05f9..b83c05f9 100644
--- a/policy/modules/contrib/rhgb.fc
+++ b/policy/modules/services/rhgb.fc
diff --git a/policy/modules/contrib/rhgb.if b/policy/modules/services/rhgb.if
index 1a134a72..1a134a72 100644
--- a/policy/modules/contrib/rhgb.if
+++ b/policy/modules/services/rhgb.if
diff --git a/policy/modules/contrib/rhgb.te b/policy/modules/services/rhgb.te
index 3f32e4bb..3f32e4bb 100644
--- a/policy/modules/contrib/rhgb.te
+++ b/policy/modules/services/rhgb.te
diff --git a/policy/modules/contrib/rhsmcertd.fc b/policy/modules/services/rhsmcertd.fc
index 95b6bc5c..95b6bc5c 100644
--- a/policy/modules/contrib/rhsmcertd.fc
+++ b/policy/modules/services/rhsmcertd.fc
diff --git a/policy/modules/contrib/rhsmcertd.if b/policy/modules/services/rhsmcertd.if
index 7bdee3cb..7bdee3cb 100644
--- a/policy/modules/contrib/rhsmcertd.if
+++ b/policy/modules/services/rhsmcertd.if
diff --git a/policy/modules/contrib/rhsmcertd.te b/policy/modules/services/rhsmcertd.te
index 4419243e..4419243e 100644
--- a/policy/modules/contrib/rhsmcertd.te
+++ b/policy/modules/services/rhsmcertd.te
diff --git a/policy/modules/contrib/ricci.fc b/policy/modules/services/ricci.fc
index b7918a93..b7918a93 100644
--- a/policy/modules/contrib/ricci.fc
+++ b/policy/modules/services/ricci.fc
diff --git a/policy/modules/contrib/ricci.if b/policy/modules/services/ricci.if
index 086f434a..086f434a 100644
--- a/policy/modules/contrib/ricci.if
+++ b/policy/modules/services/ricci.if
diff --git a/policy/modules/contrib/ricci.te b/policy/modules/services/ricci.te
index d808ab66..d808ab66 100644
--- a/policy/modules/contrib/ricci.te
+++ b/policy/modules/services/ricci.te
diff --git a/policy/modules/contrib/rlogin.fc b/policy/modules/services/rlogin.fc
index 00e7f3a5..00e7f3a5 100644
--- a/policy/modules/contrib/rlogin.fc
+++ b/policy/modules/services/rlogin.fc
diff --git a/policy/modules/contrib/rlogin.if b/policy/modules/services/rlogin.if
index 050479de..050479de 100644
--- a/policy/modules/contrib/rlogin.if
+++ b/policy/modules/services/rlogin.if
diff --git a/policy/modules/contrib/rlogin.te b/policy/modules/services/rlogin.te
index 0348564d..0348564d 100644
--- a/policy/modules/contrib/rlogin.te
+++ b/policy/modules/services/rlogin.te
diff --git a/policy/modules/contrib/rngd.fc b/policy/modules/services/rngd.fc
index c49ab4ac..c49ab4ac 100644
--- a/policy/modules/contrib/rngd.fc
+++ b/policy/modules/services/rngd.fc
diff --git a/policy/modules/contrib/rngd.if b/policy/modules/services/rngd.if
index 7b26dc32..7b26dc32 100644
--- a/policy/modules/contrib/rngd.if
+++ b/policy/modules/services/rngd.if
diff --git a/policy/modules/contrib/rngd.te b/policy/modules/services/rngd.te
index 8cf7921d..8cf7921d 100644
--- a/policy/modules/contrib/rngd.te
+++ b/policy/modules/services/rngd.te
diff --git a/policy/modules/contrib/roundup.fc b/policy/modules/services/roundup.fc
index 6f05cd06..6f05cd06 100644
--- a/policy/modules/contrib/roundup.fc
+++ b/policy/modules/services/roundup.fc
diff --git a/policy/modules/contrib/roundup.if b/policy/modules/services/roundup.if
index c874017b..c874017b 100644
--- a/policy/modules/contrib/roundup.if
+++ b/policy/modules/services/roundup.if
diff --git a/policy/modules/contrib/roundup.te b/policy/modules/services/roundup.te
index 015c344f..015c344f 100644
--- a/policy/modules/contrib/roundup.te
+++ b/policy/modules/services/roundup.te
diff --git a/policy/modules/contrib/rpc.fc b/policy/modules/services/rpc.fc
index 6dfd4516..6dfd4516 100644
--- a/policy/modules/contrib/rpc.fc
+++ b/policy/modules/services/rpc.fc
diff --git a/policy/modules/contrib/rpc.if b/policy/modules/services/rpc.if
index 7063c42f..7063c42f 100644
--- a/policy/modules/contrib/rpc.if
+++ b/policy/modules/services/rpc.if
diff --git a/policy/modules/contrib/rpc.te b/policy/modules/services/rpc.te
index 2eaf02af..2eaf02af 100644
--- a/policy/modules/contrib/rpc.te
+++ b/policy/modules/services/rpc.te
diff --git a/policy/modules/contrib/rpcbind.fc b/policy/modules/services/rpcbind.fc
index afba9b29..afba9b29 100644
--- a/policy/modules/contrib/rpcbind.fc
+++ b/policy/modules/services/rpcbind.fc
diff --git a/policy/modules/contrib/rpcbind.if b/policy/modules/services/rpcbind.if
index 78ca83a4..78ca83a4 100644
--- a/policy/modules/contrib/rpcbind.if
+++ b/policy/modules/services/rpcbind.if
diff --git a/policy/modules/contrib/rpcbind.te b/policy/modules/services/rpcbind.te
index 5914af99..5914af99 100644
--- a/policy/modules/contrib/rpcbind.te
+++ b/policy/modules/services/rpcbind.te
diff --git a/policy/modules/contrib/rshd.fc b/policy/modules/services/rshd.fc
index b77f12dc..b77f12dc 100644
--- a/policy/modules/contrib/rshd.fc
+++ b/policy/modules/services/rshd.fc
diff --git a/policy/modules/contrib/rshd.if b/policy/modules/services/rshd.if
index 7ad29c04..7ad29c04 100644
--- a/policy/modules/contrib/rshd.if
+++ b/policy/modules/services/rshd.if
diff --git a/policy/modules/contrib/rshd.te b/policy/modules/services/rshd.te
index 0f4caffc..0f4caffc 100644
--- a/policy/modules/contrib/rshd.te
+++ b/policy/modules/services/rshd.te
diff --git a/policy/modules/contrib/rsync.fc b/policy/modules/services/rsync.fc
index 83b8b4bd..83b8b4bd 100644
--- a/policy/modules/contrib/rsync.fc
+++ b/policy/modules/services/rsync.fc
diff --git a/policy/modules/contrib/rsync.if b/policy/modules/services/rsync.if
index 097f4d3a..097f4d3a 100644
--- a/policy/modules/contrib/rsync.if
+++ b/policy/modules/services/rsync.if
diff --git a/policy/modules/contrib/rsync.te b/policy/modules/services/rsync.te
index ad85fa79..ad85fa79 100644
--- a/policy/modules/contrib/rsync.te
+++ b/policy/modules/services/rsync.te
diff --git a/policy/modules/contrib/rtkit.fc b/policy/modules/services/rtkit.fc
index a3021dac..a3021dac 100644
--- a/policy/modules/contrib/rtkit.fc
+++ b/policy/modules/services/rtkit.fc
diff --git a/policy/modules/contrib/rtkit.if b/policy/modules/services/rtkit.if
index ed6d0cd1..ed6d0cd1 100644
--- a/policy/modules/contrib/rtkit.if
+++ b/policy/modules/services/rtkit.if
diff --git a/policy/modules/contrib/rtkit.te b/policy/modules/services/rtkit.te
index 94edc206..94edc206 100644
--- a/policy/modules/contrib/rtkit.te
+++ b/policy/modules/services/rtkit.te
diff --git a/policy/modules/contrib/rwho.fc b/policy/modules/services/rwho.fc
index fd5fdf71..fd5fdf71 100644
--- a/policy/modules/contrib/rwho.fc
+++ b/policy/modules/services/rwho.fc
diff --git a/policy/modules/contrib/rwho.if b/policy/modules/services/rwho.if
index 05aa3f16..05aa3f16 100644
--- a/policy/modules/contrib/rwho.if
+++ b/policy/modules/services/rwho.if
diff --git a/policy/modules/contrib/rwho.te b/policy/modules/services/rwho.te
index 7be17dda..7be17dda 100644
--- a/policy/modules/contrib/rwho.te
+++ b/policy/modules/services/rwho.te
diff --git a/policy/modules/contrib/samba.fc b/policy/modules/services/samba.fc
index e104d2ba..e104d2ba 100644
--- a/policy/modules/contrib/samba.fc
+++ b/policy/modules/services/samba.fc
diff --git a/policy/modules/contrib/samba.if b/policy/modules/services/samba.if
index 3d729f0c..3d729f0c 100644
--- a/policy/modules/contrib/samba.if
+++ b/policy/modules/services/samba.if
diff --git a/policy/modules/contrib/samba.te b/policy/modules/services/samba.te
index 6a0978b2..6a0978b2 100644
--- a/policy/modules/contrib/samba.te
+++ b/policy/modules/services/samba.te
diff --git a/policy/modules/contrib/sanlock.fc b/policy/modules/services/sanlock.fc
index 6c6f3dec..6c6f3dec 100644
--- a/policy/modules/contrib/sanlock.fc
+++ b/policy/modules/services/sanlock.fc
diff --git a/policy/modules/contrib/sanlock.if b/policy/modules/services/sanlock.if
index dbca6c8e..dbca6c8e 100644
--- a/policy/modules/contrib/sanlock.if
+++ b/policy/modules/services/sanlock.if
diff --git a/policy/modules/contrib/sanlock.te b/policy/modules/services/sanlock.te
index 6fc33eb8..6fc33eb8 100644
--- a/policy/modules/contrib/sanlock.te
+++ b/policy/modules/services/sanlock.te
diff --git a/policy/modules/contrib/sasl.fc b/policy/modules/services/sasl.fc
index 72551273..72551273 100644
--- a/policy/modules/contrib/sasl.fc
+++ b/policy/modules/services/sasl.fc
diff --git a/policy/modules/contrib/sasl.if b/policy/modules/services/sasl.if
index edb4de2a..edb4de2a 100644
--- a/policy/modules/contrib/sasl.if
+++ b/policy/modules/services/sasl.if
diff --git a/policy/modules/contrib/sasl.te b/policy/modules/services/sasl.te
index 231d6b2b..231d6b2b 100644
--- a/policy/modules/contrib/sasl.te
+++ b/policy/modules/services/sasl.te
diff --git a/policy/modules/contrib/sendmail.fc b/policy/modules/services/sendmail.fc
index f1450f0f..f1450f0f 100644
--- a/policy/modules/contrib/sendmail.fc
+++ b/policy/modules/services/sendmail.fc
diff --git a/policy/modules/contrib/sendmail.if b/policy/modules/services/sendmail.if
index 5358d159..5358d159 100644
--- a/policy/modules/contrib/sendmail.if
+++ b/policy/modules/services/sendmail.if
diff --git a/policy/modules/contrib/sendmail.te b/policy/modules/services/sendmail.te
index 9fb6b649..9fb6b649 100644
--- a/policy/modules/contrib/sendmail.te
+++ b/policy/modules/services/sendmail.te
diff --git a/policy/modules/contrib/sensord.fc b/policy/modules/services/sensord.fc
index 1216f4bf..1216f4bf 100644
--- a/policy/modules/contrib/sensord.fc
+++ b/policy/modules/services/sensord.fc
diff --git a/policy/modules/contrib/sensord.if b/policy/modules/services/sensord.if
index e58af365..e58af365 100644
--- a/policy/modules/contrib/sensord.if
+++ b/policy/modules/services/sensord.if
diff --git a/policy/modules/contrib/sensord.te b/policy/modules/services/sensord.te
index e880ae30..e880ae30 100644
--- a/policy/modules/contrib/sensord.te
+++ b/policy/modules/services/sensord.te
diff --git a/policy/modules/contrib/setroubleshoot.fc b/policy/modules/services/setroubleshoot.fc
index 096fd47c..096fd47c 100644
--- a/policy/modules/contrib/setroubleshoot.fc
+++ b/policy/modules/services/setroubleshoot.fc
diff --git a/policy/modules/contrib/setroubleshoot.if b/policy/modules/services/setroubleshoot.if
index f7d788b8..f7d788b8 100644
--- a/policy/modules/contrib/setroubleshoot.if
+++ b/policy/modules/services/setroubleshoot.if
diff --git a/policy/modules/contrib/setroubleshoot.te b/policy/modules/services/setroubleshoot.te
index 7610a7ce..7610a7ce 100644
--- a/policy/modules/contrib/setroubleshoot.te
+++ b/policy/modules/services/setroubleshoot.te
diff --git a/policy/modules/contrib/shibboleth.fc b/policy/modules/services/shibboleth.fc
index fc32f7c9..fc32f7c9 100644
--- a/policy/modules/contrib/shibboleth.fc
+++ b/policy/modules/services/shibboleth.fc
diff --git a/policy/modules/contrib/shibboleth.if b/policy/modules/services/shibboleth.if
index 4a3ba022..4a3ba022 100644
--- a/policy/modules/contrib/shibboleth.if
+++ b/policy/modules/services/shibboleth.if
diff --git a/policy/modules/contrib/shibboleth.te b/policy/modules/services/shibboleth.te
index 8b52f701..8b52f701 100644
--- a/policy/modules/contrib/shibboleth.te
+++ b/policy/modules/services/shibboleth.te
diff --git a/policy/modules/contrib/slpd.fc b/policy/modules/services/slpd.fc
index 77ff516b..77ff516b 100644
--- a/policy/modules/contrib/slpd.fc
+++ b/policy/modules/services/slpd.fc
diff --git a/policy/modules/contrib/slpd.if b/policy/modules/services/slpd.if
index ffacc363..ffacc363 100644
--- a/policy/modules/contrib/slpd.if
+++ b/policy/modules/services/slpd.if
diff --git a/policy/modules/contrib/slpd.te b/policy/modules/services/slpd.te
index a76acb7f..a76acb7f 100644
--- a/policy/modules/contrib/slpd.te
+++ b/policy/modules/services/slpd.te
diff --git a/policy/modules/contrib/slrnpull.fc b/policy/modules/services/slrnpull.fc
index d0f1dd7d..d0f1dd7d 100644
--- a/policy/modules/contrib/slrnpull.fc
+++ b/policy/modules/services/slrnpull.fc
diff --git a/policy/modules/contrib/slrnpull.if b/policy/modules/services/slrnpull.if
index a0b17340..a0b17340 100644
--- a/policy/modules/contrib/slrnpull.if
+++ b/policy/modules/services/slrnpull.if
diff --git a/policy/modules/contrib/slrnpull.te b/policy/modules/services/slrnpull.te
index 9d4515ab..9d4515ab 100644
--- a/policy/modules/contrib/slrnpull.te
+++ b/policy/modules/services/slrnpull.te
diff --git a/policy/modules/contrib/smartmon.fc b/policy/modules/services/smartmon.fc
index daff956c..daff956c 100644
--- a/policy/modules/contrib/smartmon.fc
+++ b/policy/modules/services/smartmon.fc
diff --git a/policy/modules/contrib/smartmon.if b/policy/modules/services/smartmon.if
index 08f4ee20..08f4ee20 100644
--- a/policy/modules/contrib/smartmon.if
+++ b/policy/modules/services/smartmon.if
diff --git a/policy/modules/contrib/smartmon.te b/policy/modules/services/smartmon.te
index f1d7e36d..f1d7e36d 100644
--- a/policy/modules/contrib/smartmon.te
+++ b/policy/modules/services/smartmon.te
diff --git a/policy/modules/contrib/smokeping.fc b/policy/modules/services/smokeping.fc
index c75825e8..c75825e8 100644
--- a/policy/modules/contrib/smokeping.fc
+++ b/policy/modules/services/smokeping.fc
diff --git a/policy/modules/contrib/smokeping.if b/policy/modules/services/smokeping.if
index 4f49c998..4f49c998 100644
--- a/policy/modules/contrib/smokeping.if
+++ b/policy/modules/services/smokeping.if
diff --git a/policy/modules/contrib/smokeping.te b/policy/modules/services/smokeping.te
index 65a3441d..65a3441d 100644
--- a/policy/modules/contrib/smokeping.te
+++ b/policy/modules/services/smokeping.te
diff --git a/policy/modules/contrib/smstools.fc b/policy/modules/services/smstools.fc
index 12a58511..12a58511 100644
--- a/policy/modules/contrib/smstools.fc
+++ b/policy/modules/services/smstools.fc
diff --git a/policy/modules/contrib/smstools.if b/policy/modules/services/smstools.if
index fc420a53..fc420a53 100644
--- a/policy/modules/contrib/smstools.if
+++ b/policy/modules/services/smstools.if
diff --git a/policy/modules/contrib/smstools.te b/policy/modules/services/smstools.te
index c5ec9f95..c5ec9f95 100644
--- a/policy/modules/contrib/smstools.te
+++ b/policy/modules/services/smstools.te
diff --git a/policy/modules/contrib/snmp.fc b/policy/modules/services/snmp.fc
index 8974ac9d..8974ac9d 100644
--- a/policy/modules/contrib/snmp.fc
+++ b/policy/modules/services/snmp.fc
diff --git a/policy/modules/contrib/snmp.if b/policy/modules/services/snmp.if
index d8a75680..d8a75680 100644
--- a/policy/modules/contrib/snmp.if
+++ b/policy/modules/services/snmp.if
diff --git a/policy/modules/contrib/snmp.te b/policy/modules/services/snmp.te
index af4897d8..af4897d8 100644
--- a/policy/modules/contrib/snmp.te
+++ b/policy/modules/services/snmp.te
diff --git a/policy/modules/contrib/snort.fc b/policy/modules/services/snort.fc
index 97797bd6..97797bd6 100644
--- a/policy/modules/contrib/snort.fc
+++ b/policy/modules/services/snort.fc
diff --git a/policy/modules/contrib/snort.if b/policy/modules/services/snort.if
index e6ae26e5..e6ae26e5 100644
--- a/policy/modules/contrib/snort.if
+++ b/policy/modules/services/snort.if
diff --git a/policy/modules/contrib/snort.te b/policy/modules/services/snort.te
index 9eaaa70a..9eaaa70a 100644
--- a/policy/modules/contrib/snort.te
+++ b/policy/modules/services/snort.te
diff --git a/policy/modules/contrib/soundserver.fc b/policy/modules/services/soundserver.fc
index d1880f66..d1880f66 100644
--- a/policy/modules/contrib/soundserver.fc
+++ b/policy/modules/services/soundserver.fc
diff --git a/policy/modules/contrib/soundserver.if b/policy/modules/services/soundserver.if
index 106e0700..106e0700 100644
--- a/policy/modules/contrib/soundserver.if
+++ b/policy/modules/services/soundserver.if
diff --git a/policy/modules/contrib/soundserver.te b/policy/modules/services/soundserver.te
index 651420ca..651420ca 100644
--- a/policy/modules/contrib/soundserver.te
+++ b/policy/modules/services/soundserver.te
diff --git a/policy/modules/contrib/spamassassin.fc b/policy/modules/services/spamassassin.fc
index a8b3c019..a8b3c019 100644
--- a/policy/modules/contrib/spamassassin.fc
+++ b/policy/modules/services/spamassassin.fc
diff --git a/policy/modules/contrib/spamassassin.if b/policy/modules/services/spamassassin.if
index 75550eec..75550eec 100644
--- a/policy/modules/contrib/spamassassin.if
+++ b/policy/modules/services/spamassassin.if
diff --git a/policy/modules/contrib/spamassassin.te b/policy/modules/services/spamassassin.te
index 000c67ea..000c67ea 100644
--- a/policy/modules/contrib/spamassassin.te
+++ b/policy/modules/services/spamassassin.te
diff --git a/policy/modules/contrib/speedtouch.fc b/policy/modules/services/speedtouch.fc
index 48fe2da3..48fe2da3 100644
--- a/policy/modules/contrib/speedtouch.fc
+++ b/policy/modules/services/speedtouch.fc
diff --git a/policy/modules/contrib/speedtouch.if b/policy/modules/services/speedtouch.if
index 826e2db0..826e2db0 100644
--- a/policy/modules/contrib/speedtouch.if
+++ b/policy/modules/services/speedtouch.if
diff --git a/policy/modules/contrib/speedtouch.te b/policy/modules/services/speedtouch.te
index 68b45e06..68b45e06 100644
--- a/policy/modules/contrib/speedtouch.te
+++ b/policy/modules/services/speedtouch.te
diff --git a/policy/modules/contrib/squid.fc b/policy/modules/services/squid.fc
index 4d838b27..4d838b27 100644
--- a/policy/modules/contrib/squid.fc
+++ b/policy/modules/services/squid.fc
diff --git a/policy/modules/contrib/squid.if b/policy/modules/services/squid.if
index 2443afbd..2443afbd 100644
--- a/policy/modules/contrib/squid.if
+++ b/policy/modules/services/squid.if
diff --git a/policy/modules/contrib/squid.te b/policy/modules/services/squid.te
index 05a87c13..05a87c13 100644
--- a/policy/modules/contrib/squid.te
+++ b/policy/modules/services/squid.te
diff --git a/policy/modules/contrib/sssd.fc b/policy/modules/services/sssd.fc
index ef8a215b..ef8a215b 100644
--- a/policy/modules/contrib/sssd.fc
+++ b/policy/modules/services/sssd.fc
diff --git a/policy/modules/contrib/sssd.if b/policy/modules/services/sssd.if
index bdb7f881..bdb7f881 100644
--- a/policy/modules/contrib/sssd.if
+++ b/policy/modules/services/sssd.if
diff --git a/policy/modules/contrib/sssd.te b/policy/modules/services/sssd.te
index 32c9761b..32c9761b 100644
--- a/policy/modules/contrib/sssd.te
+++ b/policy/modules/services/sssd.te
diff --git a/policy/modules/contrib/stunnel.fc b/policy/modules/services/stunnel.fc
index d8543062..d8543062 100644
--- a/policy/modules/contrib/stunnel.fc
+++ b/policy/modules/services/stunnel.fc
diff --git a/policy/modules/contrib/stunnel.if b/policy/modules/services/stunnel.if
index 038efa89..038efa89 100644
--- a/policy/modules/contrib/stunnel.if
+++ b/policy/modules/services/stunnel.if
diff --git a/policy/modules/contrib/stunnel.te b/policy/modules/services/stunnel.te
index a68d2b78..a68d2b78 100644
--- a/policy/modules/contrib/stunnel.te
+++ b/policy/modules/services/stunnel.te
diff --git a/policy/modules/contrib/svnserve.fc b/policy/modules/services/svnserve.fc
index b1da9ca2..b1da9ca2 100644
--- a/policy/modules/contrib/svnserve.fc
+++ b/policy/modules/services/svnserve.fc
diff --git a/policy/modules/contrib/svnserve.if b/policy/modules/services/svnserve.if
index 618dccb3..618dccb3 100644
--- a/policy/modules/contrib/svnserve.if
+++ b/policy/modules/services/svnserve.if
diff --git a/policy/modules/contrib/svnserve.te b/policy/modules/services/svnserve.te
index 5fcd8b41..5fcd8b41 100644
--- a/policy/modules/contrib/svnserve.te
+++ b/policy/modules/services/svnserve.te
diff --git a/policy/modules/contrib/sysstat.fc b/policy/modules/services/sysstat.fc
index b660cfc3..b660cfc3 100644
--- a/policy/modules/contrib/sysstat.fc
+++ b/policy/modules/services/sysstat.fc
diff --git a/policy/modules/contrib/sysstat.if b/policy/modules/services/sysstat.if
index a00a0dd4..a00a0dd4 100644
--- a/policy/modules/contrib/sysstat.if
+++ b/policy/modules/services/sysstat.if
diff --git a/policy/modules/contrib/sysstat.te b/policy/modules/services/sysstat.te
index bfb44a33..bfb44a33 100644
--- a/policy/modules/contrib/sysstat.te
+++ b/policy/modules/services/sysstat.te
diff --git a/policy/modules/contrib/systemtap.fc b/policy/modules/services/systemtap.fc
index 72cbadb8..72cbadb8 100644
--- a/policy/modules/contrib/systemtap.fc
+++ b/policy/modules/services/systemtap.fc
diff --git a/policy/modules/contrib/systemtap.if b/policy/modules/services/systemtap.if
index 62520b33..62520b33 100644
--- a/policy/modules/contrib/systemtap.if
+++ b/policy/modules/services/systemtap.if
diff --git a/policy/modules/contrib/systemtap.te b/policy/modules/services/systemtap.te
index c0ddb637..c0ddb637 100644
--- a/policy/modules/contrib/systemtap.te
+++ b/policy/modules/services/systemtap.te
diff --git a/policy/modules/contrib/tcpd.fc b/policy/modules/services/tcpd.fc
index 57fe2bf1..57fe2bf1 100644
--- a/policy/modules/contrib/tcpd.fc
+++ b/policy/modules/services/tcpd.fc
diff --git a/policy/modules/contrib/tcpd.if b/policy/modules/services/tcpd.if
index 9eb34fd0..9eb34fd0 100644
--- a/policy/modules/contrib/tcpd.if
+++ b/policy/modules/services/tcpd.if
diff --git a/policy/modules/contrib/tcpd.te b/policy/modules/services/tcpd.te
index aa4585de..aa4585de 100644
--- a/policy/modules/contrib/tcpd.te
+++ b/policy/modules/services/tcpd.te
diff --git a/policy/modules/contrib/tcsd.fc b/policy/modules/services/tcsd.fc
index d6980334..d6980334 100644
--- a/policy/modules/contrib/tcsd.fc
+++ b/policy/modules/services/tcsd.fc
diff --git a/policy/modules/contrib/tcsd.if b/policy/modules/services/tcsd.if
index 5140a7d7..5140a7d7 100644
--- a/policy/modules/contrib/tcsd.if
+++ b/policy/modules/services/tcsd.if
diff --git a/policy/modules/contrib/tcsd.te b/policy/modules/services/tcsd.te
index 6ad0cacb..6ad0cacb 100644
--- a/policy/modules/contrib/tcsd.te
+++ b/policy/modules/services/tcsd.te
diff --git a/policy/modules/contrib/telnet.fc b/policy/modules/services/telnet.fc
index 05d4726c..05d4726c 100644
--- a/policy/modules/contrib/telnet.fc
+++ b/policy/modules/services/telnet.fc
diff --git a/policy/modules/contrib/telnet.if b/policy/modules/services/telnet.if
index 42a17ca3..42a17ca3 100644
--- a/policy/modules/contrib/telnet.if
+++ b/policy/modules/services/telnet.if
diff --git a/policy/modules/contrib/telnet.te b/policy/modules/services/telnet.te
index 76e257b5..76e257b5 100644
--- a/policy/modules/contrib/telnet.te
+++ b/policy/modules/services/telnet.te
diff --git a/policy/modules/contrib/tftp.fc b/policy/modules/services/tftp.fc
index dbd7f2a8..dbd7f2a8 100644
--- a/policy/modules/contrib/tftp.fc
+++ b/policy/modules/services/tftp.fc
diff --git a/policy/modules/contrib/tftp.if b/policy/modules/services/tftp.if
index b32fa3c0..b32fa3c0 100644
--- a/policy/modules/contrib/tftp.if
+++ b/policy/modules/services/tftp.if
diff --git a/policy/modules/contrib/tftp.te b/policy/modules/services/tftp.te
index add99702..add99702 100644
--- a/policy/modules/contrib/tftp.te
+++ b/policy/modules/services/tftp.te
diff --git a/policy/modules/contrib/tgtd.fc b/policy/modules/services/tgtd.fc
index 1989d090..1989d090 100644
--- a/policy/modules/contrib/tgtd.fc
+++ b/policy/modules/services/tgtd.fc
diff --git a/policy/modules/contrib/tgtd.if b/policy/modules/services/tgtd.if
index 3056b2ed..3056b2ed 100644
--- a/policy/modules/contrib/tgtd.if
+++ b/policy/modules/services/tgtd.if
diff --git a/policy/modules/contrib/tgtd.te b/policy/modules/services/tgtd.te
index c0f74009..c0f74009 100644
--- a/policy/modules/contrib/tgtd.te
+++ b/policy/modules/services/tgtd.te
diff --git a/policy/modules/contrib/timidity.fc b/policy/modules/services/timidity.fc
index 1c703ecb..1c703ecb 100644
--- a/policy/modules/contrib/timidity.fc
+++ b/policy/modules/services/timidity.fc
diff --git a/policy/modules/contrib/timidity.if b/policy/modules/services/timidity.if
index b6ff6dc7..b6ff6dc7 100644
--- a/policy/modules/contrib/timidity.if
+++ b/policy/modules/services/timidity.if
diff --git a/policy/modules/contrib/timidity.te b/policy/modules/services/timidity.te
index 97cd1558..97cd1558 100644
--- a/policy/modules/contrib/timidity.te
+++ b/policy/modules/services/timidity.te
diff --git a/policy/modules/contrib/tor.fc b/policy/modules/services/tor.fc
index 5c950713..5c950713 100644
--- a/policy/modules/contrib/tor.fc
+++ b/policy/modules/services/tor.fc
diff --git a/policy/modules/contrib/tor.if b/policy/modules/services/tor.if
index f2fc7a72..f2fc7a72 100644
--- a/policy/modules/contrib/tor.if
+++ b/policy/modules/services/tor.if
diff --git a/policy/modules/contrib/tor.te b/policy/modules/services/tor.te
index 8029630f..8029630f 100644
--- a/policy/modules/contrib/tor.te
+++ b/policy/modules/services/tor.te
diff --git a/policy/modules/contrib/transproxy.fc b/policy/modules/services/transproxy.fc
index ce0eb7d6..ce0eb7d6 100644
--- a/policy/modules/contrib/transproxy.fc
+++ b/policy/modules/services/transproxy.fc
diff --git a/policy/modules/contrib/transproxy.if b/policy/modules/services/transproxy.if
index 946881b3..946881b3 100644
--- a/policy/modules/contrib/transproxy.if
+++ b/policy/modules/services/transproxy.if
diff --git a/policy/modules/contrib/transproxy.te b/policy/modules/services/transproxy.te
index f267800c..f267800c 100644
--- a/policy/modules/contrib/transproxy.te
+++ b/policy/modules/services/transproxy.te
diff --git a/policy/modules/contrib/tuned.fc b/policy/modules/services/tuned.fc
index 21ea1295..21ea1295 100644
--- a/policy/modules/contrib/tuned.fc
+++ b/policy/modules/services/tuned.fc
diff --git a/policy/modules/contrib/tuned.if b/policy/modules/services/tuned.if
index 5ca6fa59..5ca6fa59 100644
--- a/policy/modules/contrib/tuned.if
+++ b/policy/modules/services/tuned.if
diff --git a/policy/modules/contrib/tuned.te b/policy/modules/services/tuned.te
index f853dff3..f853dff3 100644
--- a/policy/modules/contrib/tuned.te
+++ b/policy/modules/services/tuned.te
diff --git a/policy/modules/contrib/ucspitcp.fc b/policy/modules/services/ucspitcp.fc
index f2b4e91e..f2b4e91e 100644
--- a/policy/modules/contrib/ucspitcp.fc
+++ b/policy/modules/services/ucspitcp.fc
diff --git a/policy/modules/contrib/ucspitcp.if b/policy/modules/services/ucspitcp.if
index b729778e..b729778e 100644
--- a/policy/modules/contrib/ucspitcp.if
+++ b/policy/modules/services/ucspitcp.if
diff --git a/policy/modules/contrib/ucspitcp.te b/policy/modules/services/ucspitcp.te
index 7745b72e..7745b72e 100644
--- a/policy/modules/contrib/ucspitcp.te
+++ b/policy/modules/services/ucspitcp.te
diff --git a/policy/modules/contrib/ulogd.fc b/policy/modules/services/ulogd.fc
index ca27a1d2..ca27a1d2 100644
--- a/policy/modules/contrib/ulogd.fc
+++ b/policy/modules/services/ulogd.fc
diff --git a/policy/modules/contrib/ulogd.if b/policy/modules/services/ulogd.if
index 290eb1b4..290eb1b4 100644
--- a/policy/modules/contrib/ulogd.if
+++ b/policy/modules/services/ulogd.if
diff --git a/policy/modules/contrib/ulogd.te b/policy/modules/services/ulogd.te
index 18779e5d..18779e5d 100644
--- a/policy/modules/contrib/ulogd.te
+++ b/policy/modules/services/ulogd.te
diff --git a/policy/modules/contrib/uptime.fc b/policy/modules/services/uptime.fc
index 535dda0b..535dda0b 100644
--- a/policy/modules/contrib/uptime.fc
+++ b/policy/modules/services/uptime.fc
diff --git a/policy/modules/contrib/uptime.if b/policy/modules/services/uptime.if
index ce3bc3b9..ce3bc3b9 100644
--- a/policy/modules/contrib/uptime.if
+++ b/policy/modules/services/uptime.if
diff --git a/policy/modules/contrib/uptime.te b/policy/modules/services/uptime.te
index c131e543..c131e543 100644
--- a/policy/modules/contrib/uptime.te
+++ b/policy/modules/services/uptime.te
diff --git a/policy/modules/contrib/usbmuxd.fc b/policy/modules/services/usbmuxd.fc
index dd949dde..dd949dde 100644
--- a/policy/modules/contrib/usbmuxd.fc
+++ b/policy/modules/services/usbmuxd.fc
diff --git a/policy/modules/contrib/usbmuxd.if b/policy/modules/services/usbmuxd.if
index 1ec5e996..1ec5e996 100644
--- a/policy/modules/contrib/usbmuxd.if
+++ b/policy/modules/services/usbmuxd.if
diff --git a/policy/modules/contrib/usbmuxd.te b/policy/modules/services/usbmuxd.te
index 32036a2e..32036a2e 100644
--- a/policy/modules/contrib/usbmuxd.te
+++ b/policy/modules/services/usbmuxd.te
diff --git a/policy/modules/contrib/uucp.fc b/policy/modules/services/uucp.fc
index 21b5d723..21b5d723 100644
--- a/policy/modules/contrib/uucp.fc
+++ b/policy/modules/services/uucp.fc
diff --git a/policy/modules/contrib/uucp.if b/policy/modules/services/uucp.if
index a06faaf9..a06faaf9 100644
--- a/policy/modules/contrib/uucp.if
+++ b/policy/modules/services/uucp.if
diff --git a/policy/modules/contrib/uucp.te b/policy/modules/services/uucp.te
index c18f3557..c18f3557 100644
--- a/policy/modules/contrib/uucp.te
+++ b/policy/modules/services/uucp.te
diff --git a/policy/modules/contrib/uuidd.fc b/policy/modules/services/uuidd.fc
index d0a8520d..d0a8520d 100644
--- a/policy/modules/contrib/uuidd.fc
+++ b/policy/modules/services/uuidd.fc
diff --git a/policy/modules/contrib/uuidd.if b/policy/modules/services/uuidd.if
index 30f45ebf..30f45ebf 100644
--- a/policy/modules/contrib/uuidd.if
+++ b/policy/modules/services/uuidd.if
diff --git a/policy/modules/contrib/uuidd.te b/policy/modules/services/uuidd.te
index 8c0defb3..8c0defb3 100644
--- a/policy/modules/contrib/uuidd.te
+++ b/policy/modules/services/uuidd.te
diff --git a/policy/modules/contrib/uwimap.fc b/policy/modules/services/uwimap.fc
index 92db9eac..92db9eac 100644
--- a/policy/modules/contrib/uwimap.fc
+++ b/policy/modules/services/uwimap.fc
diff --git a/policy/modules/contrib/uwimap.if b/policy/modules/services/uwimap.if
index 42f34a69..42f34a69 100644
--- a/policy/modules/contrib/uwimap.if
+++ b/policy/modules/services/uwimap.if
diff --git a/policy/modules/contrib/uwimap.te b/policy/modules/services/uwimap.te
index 02a45cf1..02a45cf1 100644
--- a/policy/modules/contrib/uwimap.te
+++ b/policy/modules/services/uwimap.te
diff --git a/policy/modules/contrib/varnishd.fc b/policy/modules/services/varnishd.fc
index 5d3f0915..5d3f0915 100644
--- a/policy/modules/contrib/varnishd.fc
+++ b/policy/modules/services/varnishd.fc
diff --git a/policy/modules/contrib/varnishd.if b/policy/modules/services/varnishd.if
index e2dc5ea1..e2dc5ea1 100644
--- a/policy/modules/contrib/varnishd.if
+++ b/policy/modules/services/varnishd.if
diff --git a/policy/modules/contrib/varnishd.te b/policy/modules/services/varnishd.te
index 665e31c8..665e31c8 100644
--- a/policy/modules/contrib/varnishd.te
+++ b/policy/modules/services/varnishd.te
diff --git a/policy/modules/contrib/vdagent.fc b/policy/modules/services/vdagent.fc
index 13aecb58..13aecb58 100644
--- a/policy/modules/contrib/vdagent.fc
+++ b/policy/modules/services/vdagent.fc
diff --git a/policy/modules/contrib/vdagent.if b/policy/modules/services/vdagent.if
index c4a5ed7e..c4a5ed7e 100644
--- a/policy/modules/contrib/vdagent.if
+++ b/policy/modules/services/vdagent.if
diff --git a/policy/modules/contrib/vdagent.te b/policy/modules/services/vdagent.te
index 1c7919c3..1c7919c3 100644
--- a/policy/modules/contrib/vdagent.te
+++ b/policy/modules/services/vdagent.te
diff --git a/policy/modules/contrib/vhostmd.fc b/policy/modules/services/vhostmd.fc
index ded76282..ded76282 100644
--- a/policy/modules/contrib/vhostmd.fc
+++ b/policy/modules/services/vhostmd.fc
diff --git a/policy/modules/contrib/vhostmd.if b/policy/modules/services/vhostmd.if
index 3c66a92c..3c66a92c 100644
--- a/policy/modules/contrib/vhostmd.if
+++ b/policy/modules/services/vhostmd.if
diff --git a/policy/modules/contrib/vhostmd.te b/policy/modules/services/vhostmd.te
index 685e7b8b..685e7b8b 100644
--- a/policy/modules/contrib/vhostmd.te
+++ b/policy/modules/services/vhostmd.te
diff --git a/policy/modules/contrib/virt.fc b/policy/modules/services/virt.fc
index eb5ff0d8..eb5ff0d8 100644
--- a/policy/modules/contrib/virt.fc
+++ b/policy/modules/services/virt.fc
diff --git a/policy/modules/contrib/virt.if b/policy/modules/services/virt.if
index 993ee6c8..993ee6c8 100644
--- a/policy/modules/contrib/virt.if
+++ b/policy/modules/services/virt.if
diff --git a/policy/modules/contrib/virt.te b/policy/modules/services/virt.te
index 76629885..76629885 100644
--- a/policy/modules/contrib/virt.te
+++ b/policy/modules/services/virt.te
diff --git a/policy/modules/contrib/vnstatd.fc b/policy/modules/services/vnstatd.fc
index 303f5009..303f5009 100644
--- a/policy/modules/contrib/vnstatd.fc
+++ b/policy/modules/services/vnstatd.fc
diff --git a/policy/modules/contrib/vnstatd.if b/policy/modules/services/vnstatd.if
index ee614638..ee614638 100644
--- a/policy/modules/contrib/vnstatd.if
+++ b/policy/modules/services/vnstatd.if
diff --git a/policy/modules/contrib/vnstatd.te b/policy/modules/services/vnstatd.te
index 3aa1fee2..3aa1fee2 100644
--- a/policy/modules/contrib/vnstatd.te
+++ b/policy/modules/services/vnstatd.te
diff --git a/policy/modules/contrib/w3c.fc b/policy/modules/services/w3c.fc
index 463c799f..463c799f 100644
--- a/policy/modules/contrib/w3c.fc
+++ b/policy/modules/services/w3c.fc
diff --git a/policy/modules/contrib/w3c.if b/policy/modules/services/w3c.if
index 6a4204bc..6a4204bc 100644
--- a/policy/modules/contrib/w3c.if
+++ b/policy/modules/services/w3c.if
diff --git a/policy/modules/contrib/w3c.te b/policy/modules/services/w3c.te
index b14d6a94..b14d6a94 100644
--- a/policy/modules/contrib/w3c.te
+++ b/policy/modules/services/w3c.te
diff --git a/policy/modules/contrib/watchdog.fc b/policy/modules/services/watchdog.fc
index 1e4f1158..1e4f1158 100644
--- a/policy/modules/contrib/watchdog.fc
+++ b/policy/modules/services/watchdog.fc
diff --git a/policy/modules/contrib/watchdog.if b/policy/modules/services/watchdog.if
index b0fe9221..b0fe9221 100644
--- a/policy/modules/contrib/watchdog.if
+++ b/policy/modules/services/watchdog.if
diff --git a/policy/modules/contrib/watchdog.te b/policy/modules/services/watchdog.te
index d1e4ea8c..d1e4ea8c 100644
--- a/policy/modules/contrib/watchdog.te
+++ b/policy/modules/services/watchdog.te
diff --git a/policy/modules/contrib/wdmd.fc b/policy/modules/services/wdmd.fc
index 849f93cc..849f93cc 100644
--- a/policy/modules/contrib/wdmd.fc
+++ b/policy/modules/services/wdmd.fc
diff --git a/policy/modules/contrib/wdmd.if b/policy/modules/services/wdmd.if
index 53de648e..53de648e 100644
--- a/policy/modules/contrib/wdmd.if
+++ b/policy/modules/services/wdmd.if
diff --git a/policy/modules/contrib/wdmd.te b/policy/modules/services/wdmd.te
index b1a6a482..b1a6a482 100644
--- a/policy/modules/contrib/wdmd.te
+++ b/policy/modules/services/wdmd.te
diff --git a/policy/modules/contrib/xfs.fc b/policy/modules/services/xfs.fc
index 5702b94a..5702b94a 100644
--- a/policy/modules/contrib/xfs.fc
+++ b/policy/modules/services/xfs.fc
diff --git a/policy/modules/contrib/xfs.if b/policy/modules/services/xfs.if
index 1aafbbc1..1aafbbc1 100644
--- a/policy/modules/contrib/xfs.if
+++ b/policy/modules/services/xfs.if
diff --git a/policy/modules/contrib/xfs.te b/policy/modules/services/xfs.te
index 1469f2fd..1469f2fd 100644
--- a/policy/modules/contrib/xfs.te
+++ b/policy/modules/services/xfs.te
diff --git a/policy/modules/contrib/xprint.fc b/policy/modules/services/xprint.fc
index 6a857fff..6a857fff 100644
--- a/policy/modules/contrib/xprint.fc
+++ b/policy/modules/services/xprint.fc
diff --git a/policy/modules/contrib/xprint.if b/policy/modules/services/xprint.if
index f684288e..f684288e 100644
--- a/policy/modules/contrib/xprint.if
+++ b/policy/modules/services/xprint.if
diff --git a/policy/modules/contrib/xprint.te b/policy/modules/services/xprint.te
index 3c44d849..3c44d849 100644
--- a/policy/modules/contrib/xprint.te
+++ b/policy/modules/services/xprint.te
diff --git a/policy/modules/contrib/zabbix.fc b/policy/modules/services/zabbix.fc
index 076e8544..076e8544 100644
--- a/policy/modules/contrib/zabbix.fc
+++ b/policy/modules/services/zabbix.fc
diff --git a/policy/modules/contrib/zabbix.if b/policy/modules/services/zabbix.if
index d71bce09..d71bce09 100644
--- a/policy/modules/contrib/zabbix.if
+++ b/policy/modules/services/zabbix.if
diff --git a/policy/modules/contrib/zabbix.te b/policy/modules/services/zabbix.te
index 68b8d99c..68b8d99c 100644
--- a/policy/modules/contrib/zabbix.te
+++ b/policy/modules/services/zabbix.te
diff --git a/policy/modules/contrib/zarafa.fc b/policy/modules/services/zarafa.fc
index 72c6f459..72c6f459 100644
--- a/policy/modules/contrib/zarafa.fc
+++ b/policy/modules/services/zarafa.fc
diff --git a/policy/modules/contrib/zarafa.if b/policy/modules/services/zarafa.if
index 37a7434e..37a7434e 100644
--- a/policy/modules/contrib/zarafa.if
+++ b/policy/modules/services/zarafa.if
diff --git a/policy/modules/contrib/zarafa.te b/policy/modules/services/zarafa.te
index 506952fb..506952fb 100644
--- a/policy/modules/contrib/zarafa.te
+++ b/policy/modules/services/zarafa.te
diff --git a/policy/modules/contrib/zebra.fc b/policy/modules/services/zebra.fc
index 3ded81f8..3ded81f8 100644
--- a/policy/modules/contrib/zebra.fc
+++ b/policy/modules/services/zebra.fc
diff --git a/policy/modules/contrib/zebra.if b/policy/modules/services/zebra.if
index 21da77a4..21da77a4 100644
--- a/policy/modules/contrib/zebra.if
+++ b/policy/modules/services/zebra.if
diff --git a/policy/modules/contrib/zebra.te b/policy/modules/services/zebra.te
index 19bc9943..19bc9943 100644
--- a/policy/modules/contrib/zebra.te
+++ b/policy/modules/services/zebra.te
diff --git a/policy/modules/contrib/zosremote.fc b/policy/modules/services/zosremote.fc
index ca923534..ca923534 100644
--- a/policy/modules/contrib/zosremote.fc
+++ b/policy/modules/services/zosremote.fc
diff --git a/policy/modules/contrib/zosremote.if b/policy/modules/services/zosremote.if
index b14698c4..b14698c4 100644
--- a/policy/modules/contrib/zosremote.if
+++ b/policy/modules/services/zosremote.if
diff --git a/policy/modules/contrib/zosremote.te b/policy/modules/services/zosremote.te
index b4e61106..b4e61106 100644
--- a/policy/modules/contrib/zosremote.te
+++ b/policy/modules/services/zosremote.te
diff --git a/policy/modules/contrib/daemontools.fc b/policy/modules/system/daemontools.fc
index d5574cdc..d5574cdc 100644
--- a/policy/modules/contrib/daemontools.fc
+++ b/policy/modules/system/daemontools.fc
diff --git a/policy/modules/contrib/daemontools.if b/policy/modules/system/daemontools.if
index 54c71e1f..54c71e1f 100644
--- a/policy/modules/contrib/daemontools.if
+++ b/policy/modules/system/daemontools.if
diff --git a/policy/modules/contrib/daemontools.te b/policy/modules/system/daemontools.te
index d355befc..d355befc 100644
--- a/policy/modules/contrib/daemontools.te
+++ b/policy/modules/system/daemontools.te
diff --git a/policy/modules/contrib/iscsi.fc b/policy/modules/system/iscsi.fc
index 9503952e..9503952e 100644
--- a/policy/modules/contrib/iscsi.fc
+++ b/policy/modules/system/iscsi.fc
diff --git a/policy/modules/contrib/iscsi.if b/policy/modules/system/iscsi.if
index 44a891d2..44a891d2 100644
--- a/policy/modules/contrib/iscsi.if
+++ b/policy/modules/system/iscsi.if
diff --git a/policy/modules/contrib/iscsi.te b/policy/modules/system/iscsi.te
index 9457ef29..9457ef29 100644
--- a/policy/modules/contrib/iscsi.te
+++ b/policy/modules/system/iscsi.te
diff --git a/policy/modules/contrib/pcmcia.fc b/policy/modules/system/pcmcia.fc
index f9fadf5f..f9fadf5f 100644
--- a/policy/modules/contrib/pcmcia.fc
+++ b/policy/modules/system/pcmcia.fc
diff --git a/policy/modules/contrib/pcmcia.if b/policy/modules/system/pcmcia.if
index 965b4086..965b4086 100644
--- a/policy/modules/contrib/pcmcia.if
+++ b/policy/modules/system/pcmcia.if
diff --git a/policy/modules/contrib/pcmcia.te b/policy/modules/system/pcmcia.te
index 9074bcbd..9074bcbd 100644
--- a/policy/modules/contrib/pcmcia.te
+++ b/policy/modules/system/pcmcia.te
diff --git a/policy/modules/contrib/raid.fc b/policy/modules/system/raid.fc
index 323a8865..323a8865 100644
--- a/policy/modules/contrib/raid.fc
+++ b/policy/modules/system/raid.fc
diff --git a/policy/modules/contrib/raid.if b/policy/modules/system/raid.if
index 091c805e..091c805e 100644
--- a/policy/modules/contrib/raid.if
+++ b/policy/modules/system/raid.if
diff --git a/policy/modules/contrib/raid.te b/policy/modules/system/raid.te
index 4b9a6af1..4b9a6af1 100644
--- a/policy/modules/contrib/raid.te
+++ b/policy/modules/system/raid.te
diff --git a/policy/modules/contrib/xen.fc b/policy/modules/system/xen.fc
index ac5439f9..ac5439f9 100644
--- a/policy/modules/contrib/xen.fc
+++ b/policy/modules/system/xen.fc
diff --git a/policy/modules/contrib/xen.if b/policy/modules/system/xen.if
index 44116292..44116292 100644
--- a/policy/modules/contrib/xen.if
+++ b/policy/modules/system/xen.if
diff --git a/policy/modules/contrib/xen.te b/policy/modules/system/xen.te
index 04dd1ea7..04dd1ea7 100644
--- a/policy/modules/contrib/xen.te
+++ b/policy/modules/system/xen.te