* Wed Jan 06 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-158.1
    - Allow cupsd to execute dynamic linker. BZ(1294718)
    - Allow qemu-bridge-helper running as virt_bridgehelper_t to access cpuinfo/cpuinfo_max_freq and unix stream socket the running virtual machine. BZ(#1267217).
    - Allow dnssec-trigger-script to create symlinks in /var/run/dnssec*.(BZ#1292873)
    - Add support for /usr/libexec/ipa/oddjob/com.redhat.idm.trust-fetch-domains and label it as ipa_helper_exec_t. BZ(#1289930)
    - ldap_read_certs() should be called within optional block to have modular policy.
    - Allow snapperd dac_override capability.
    - Allow usbhid-ups to access /proc/bus/usb to have it working on ppc64 machines.
    - Update apache_content_template() inteface to allow "shutdown" permissions for apache scripts on unix_stream_socket."
    - Allow sandbox_x domains to talk with userdomains over unix_stream_socket.
    - Allow uspsmon reading form rand/urand. #1282103, #1282104, #1282105, Allow uspsmon to use kill within its domain. #1276861
    - Allow mdadm read files in EFI partotion. BZ(1287203, 1276519)
    - Allow sddm-helper running as xdm_t to create .wayland-errors with correct labeling. BZ(#1291085)
    - Add userdom_connectto_stream() interface.
    - Allow systemd-logind to read /run/utmp. BZ(#1278662)