* Thu Aug 31 2017 Lukas Vrabec  <lvrabec@redhat.com> - 3.13.1-225.22
    - Allow ddclient use nsswitch BZ(1456241)
    - Allow thumb_t domain getattr fixed_disk device. BZ(1379137)
    - After fix in kernel where LSM hooks for dac_override and dac_search_read capability was swaped we need to fix it also in policy
    - Allow cupsd_t to execute ld_so_cache
    - Allow postgrey to execute bin_t files and add postgrey into nsswitch_domain
    - Allow nscd_t domain to search network sysctls
    - Allow iscsid_t domain to read mount pid files
    - Allow ksmtuned_t domain manage sysfs_t files/dirs
    - Dontaudit useradd_t sys_ptrace BZ(1480121)
    - Allow ipsec_t can exec ipsec_exec_t
    - After fix in kernel where LSM hooks for dac_override and dac_search_read capability was swaped we need to fix it also in policy
    - Allow ifconfig_t domain unmount fs_t