* Thu Sep 14 2017 Lukas Vrabec <lvrabec@redhat.com> - 3.13.1-260.9
    - Allow svirt_t read userdomain state
    - Fix keepalived SELinux module
    - Allow automount domain to manage mount pid files
    - Allow stunnel_t domain setsched
    - Allow svirt_t read userdomain state
    - Fix keepalived SELinux module
    - Allow automount domain to manage mount pid files
    - Allow stunnel_t domain setsched
    - Add keepalived domain setpgid capability
    - dbus: add policy for dbus-broker
    - Revert "Add rules fixing installing ipa-server-install with SELinux in Enforcing. BZ(1488404)"
    - Allow tomcat domain to connect to mssql port
    - Fix typo bug in apache module
    - Dontaudit that system_mail_t is trying to read /root/ files
    - Merge branch 'f26' of github.com:fedora-selinux/selinux-policy-contrib into f26
    - networkmanager: allow talking to openvswitch
    - Merge pull request #27 from lslebodn/pki_tomcat_tf26
    - Make working webadm_t userdomain
    - Allow redis domain to execute shell scripts.
    - Allow system_cronjob_t to create redhat-access-insights.log with var_log_t
    - Add couple capabilities to keepalived domain and allow get attributes of all domains
    - Allow dmidecode read rhsmcertd lock files
    - Add new interface rhsmcertd_rw_lock_files()
    - Allow pki_tomcat_t use nsswitch
    - Allow logrotate_t to change passwd and reloead services
    - Label all plymouthd archives as plymouthd_var_log_t
    - Add rules fixing installing ipa-server-install with SELinux in Enforcing. BZ(1488404)
    - Add few rules to make tlp_t domain working in enforcing mode
    - Allow cloud_init_t to dbus chat with systemd_timedated_t
    - Allow logrotate_t to write to kmsg
    - Add capability kill to rhsmcertd_t
    - Allow winbind to manage smbd_tmp_t files
    - Allow ipa_dnskey_t to exec ipa_dnskey_exec_t files
    - Allow sysctl_irq_t assciate with proc_t
    - Allow sshd_t domain to send signull to xdm_t processes
    - Allow updpwd_t domain auth file name trans
    - Add support labeling for vmci and vsock device
    - Add userdom_dontaudit_manage_admin_files() interface
    - Allow iptables_t domain to read files with modules_conf_t label
    - Allow groupadd_t domain to dbus chat with systemd.BZ(1488404)
    - Allow useradd_t domain dbus chat with systemd
    - Dontaudit netutils to write to kdumpctl_tmp_t pipes BZ(1481670)