* Thu May 18 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-255
- devicekit wants to getattr blk devices when unconfined disabled
- Use stricter fc rules for sssd sockets in /var/run
- Allow certmonger reads httpd_config_t files
- Allow keepalived_t domain creating netlink_netfilter_socket.
- Allow sssd_t domain creating sock files labeled as sssd_var_run_t in /var/run/
- Allow svirt_t to read raw fixed_disk_device_t to make working blockcommit
- ejabberd small fixes
- Update targetd policy to accommodate changes in the service
- Allow virt_domain to read raw fixed_disk_device_t to make working blockcommit
- Add interface to allow types to associate with cgroup filesystems
- Dontaudit net_admin capability for useradd_t domain
- Allow systemd_localed_t and systemd_timedated_t create files in /etc with label locate_t BZ(1443723)
- Make able deply overcloud via neutron_t to label nsfs as fs_t
- Add fs_manage_configfs_lnk_files() interface