* Thu Jun 16 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-191.1
- Allow conman to kill conman_unconfined_script.
- Make conman_unconfined_script_t as init_system_domain.
- Allow init dbus chat with apmd.
- Dontaudit xguest_gkeyringd_t stream connect to system_dbusd_t
- Patch /var/lib/rpm is symlink to /usr/share/rpm on Atomic, due to this change we need to label also /usr/share/rpm as rpm_var_lib_t.
- Revert "Dontaudit xguest to stream connect to system_dbusd_t"
- Dontaudit xguest to stream connect to system_dbusd_t
- Allow collectd_t to stream connect to postgresql.
- Allow mysqld_safe to inherit rlimit information from mysqld
- Add hwloc-dump-hwdata SELinux policy
- Add labels for mediawiki123
- Fix label for all fence_scsi_check scripts
- Allow setcap for fenced
- Allow glusterd domain read krb5_keytab_t files.
- Allow tmpreaper_t to read/setattr all non_security_file_type dirs
- Allow sysadm_t to run newaliases command.
- Update refpolicy to handle hwloc
- Fix typo in files_setattr_non_security_dirs.