* Mon May 05 2014 Lukas Vrabec <lvrabec@redhat.com> 3.12.1-160
- Dontaudit leaked xserver_misc_device_t into plugins
- Allow all domains to search through all base_file_types, this should
be back ported to RHEL7 policy
- Bootloader wants to look at init state
- init reads kdbump etc files
- userdom_search_admin_dir() calling needs to be optional in kernel.te
- Fix labeling for /root/\.yubico
- Allow httpd_t to kill passenger
- Add new labeling for /var/spool/smtpd
- Dontaudit leaked xserver_misc_device_t into plugins
- Backport exim policy from rawhide to F20
- Allow apache cgi scripts to use inherited httpd_t unix_stream_sockets
- Add back kerberos_keytab_template() for exim+f20.
- ALlow stap-server to get attr on all fs
- Allow mysql to execute ifconfig if Red Hat OpenStack
- Fix virt_use_samba in virt.te