* Mon Sep 10 2012 Miroslav Grepl <mgreplh@redhat.com> 3.11.1-17
    - Merge openshift policy
    - Allow xauth to read /dev/urandom
    - systemd needs to relabel content in /run/systemd directories
    - Files unconfined should be able to perform all services on all files
    - Puppet tmp file can be leaked to all domains
    - Dontaudit rhsmcertd-worker to search /root/.local
    - Allow chown capability for zarafa domains
    -  Allow system cronjobs to runcon into openshift domains
    - Allow virt_bridgehelper_t to manage content in the svirt_home_t labeled directories