* Thu May 18 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-255
    - devicekit wants to getattr blk devices when unconfined disabled
    - Use stricter fc rules for sssd sockets in /var/run
    - Allow certmonger reads httpd_config_t files
    - Allow keepalived_t domain creating netlink_netfilter_socket.
    - Allow sssd_t domain creating sock files labeled as sssd_var_run_t in /var/run/
    - Allow svirt_t to read raw fixed_disk_device_t to make working blockcommit
    - ejabberd small fixes
    - Update targetd policy to accommodate changes in the service
    - Allow virt_domain to read raw fixed_disk_device_t to make working blockcommit
    - Add interface to allow types to associate with cgroup filesystems
    - Dontaudit net_admin capability for useradd_t domain
    - Allow systemd_localed_t and systemd_timedated_t create files in /etc with label locate_t BZ(1443723)
    - Make able deply overcloud via neutron_t to label nsfs as fs_t
    - Add fs_manage_configfs_lnk_files() interface