| Allow virt to sandbox use all caps |
| Allow virt to use nfs |
| Allow zebra to write config |
| fcontext -a -f a -t cockpit_ws_exec_t -r 's0' '/usr/libexec/cockpit-wsinstance-factory' |
| fcontext -a -f a -t samba_share_t -r 's0' '/var/tmp/' |
| Install setroubleshoot-server to troubleshoot SELinux events. |