* Thu Jun 08 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-257
    -  Add a boolean to enable the use of dac_override
    - Add support for userns for sandbox domains
    - Allow zabbix_t to kill zabbix_script_t processes
    - Allow kdumpgui to read removable disk device
    - Allow systemd_dbusd_t domain read/write to nvme devices
    - Allow udisks2 domain to read removable devices BZ(1443981)
    - Allow virtlogd_t to execute itself
    - Allow keepalived to read/write usermodehelper state
    - Allow named_t to bind on udp 4321 port
    - Fix interface tlp_manage_pid_files()
    - Allow collectd domain read lvm config files. BZ(1459097)
    - Allow RabbitMQ to use systemd-notify
    - Allow samba_manage_home_dirs boolean to manage user content
    - udev wants this when unconfined disabled
    - Allow systemd_modules_load_t to load modules