* Wed Feb 15 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-225.8
- Allow rhsmcertd domain signull kernel.
- Fix label for nagios plugins in nagios file conxtext file
- Allow kdumpgui domain to read nvme device
- Add amanda_tmpfs_t label. BZ(1243752)
- More cleanup of read access for container domains
- Allow sssd_t domain setpgid BZ(1411437)
- Dontaudit xdm_t wake_alarm capability2
- Allow ifconfig_t to mount/unmount nsfs_t filesystem
- Add interfaces allowing mount/unmount nsfs_t filesystem
- Label /usr/lib/libGLdispatch.so.0.0.0 as textrel_shlib_t BZ(1419944)
- su using libselinux and creating netlink_selinux socket is needed to allow libselinux initialization. Resolves: rhbz#1146987
- Add module_load permission to can_load_kernmodule
- Add module_load permission to class system
- Add the validate_trans access vector to the security class
- Allow ifconfig_t domain read nsfs_t
- Allow ping_t domain to load kernel modules.
- rawhide-base: Fix wrong type/attribute flavors in require blocks