* Fri Feb 26 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-158.8
    - Allow amanda to manipulate the tape changer to load the necessary tapes. rhbz#1311759
    - Allow keepalived to create netlink generic sockets. rhbz#1311756
    - Allow modemmanager to read /etc/passwd file.
    - Fix macro name from snmp_manage_snmp_var_lib_files to snmp_manage_var_lib_files in cupsd policy.
    - Allow hplip driver to write to its MIB index files stored in the /var/lib/net-snmp/mib_indexes. Resolves: rhbz#1291033
    - Allow collectd setgid capability Resolves:#1310896
    - Allow adcli running as sssd_t to write krb5.keytab file.
    - Allow abrt-hook-ccpp to getattr on all executables. BZ(1284304)
    - Revert "Label /usr/libexec/rpm-ostreed as rpm_exec_t. BZ(1309075)"
    - Allow kexec to read kernel module files in /usr/lib/modules.
    - Label /usr/libexec/rpm-ostreed as rpm_exec_t. BZ(1309075)
    - Label all files named /var/run/.*nologin.* as systemd_logind_var_run_t.
    - Allow systemd-logind to create .#nologinXXXXXX labeled as systemd_logind_var_run_t in /var/run/systemd/ rhbz#1285019
    - Allow systemd_networkd_t to write kmsg, when kernel was started with following params: systemd.debug systemd.log_level=debug systemd.log_target=kmsg rhbz#1311444
    - Allow ipsec to read home certs, when connecting to VPN. rhbz#1301319
    - ipsec: fix stringSwan charon-nm