* Tue Oct 10 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-260.12
    - Allow tlp domain to read sssd public files Allow tlp domain to mmap kernel modules
    - Allow fsdaemon to use nsswitch BZ(1499498)
    - Dontaudit VM to read gnome-boxes process data BZ(1415975)
    - Allow cupsd_t to execute ld_so_cache_t BZ(1478602)
    - Add new interface unconfined_dontaudit_read_state()
    - Allow unconfined_service_t to start containers