* Mon Mar 27 2017 lukas vrabec  <lvrabec@redhat.com> - 3.13.1-248
    - Label /run/haproxy.sock socket as haproxy_var_run_t
    - Allow oddjob_mkhomedir_t to mamange autofs_t dirs.
    - Allow tomcat to connect on http_cache_port_t
    - Update mta_filetrans_named_content() interface to allow calling domain create files labeled as etc_aliases_t in dir labeled as etc_mail_t.
    - Allow nova domain search for httpd configuration.
    - Add sys_module capability for drbd
    - Merge pull request #6 from rhatdan/cloud_init
    - Allow cloud_init to send dbus messages to the init system
    - Merge branch 'rawhide' of github.com:wrabcak/selinux-policy-contrib into rawhide
    - Dontaudit postfix domains to request modules
    - Merge pull request #5 from robmv/rawhide-cups-pdf-3.0
    - Add haproxy_t domain fowner capability
    - Allow domain transition from ntpd_t to hwclock_t domains
    - Allow cockpit_session_t setrlimit and sys_resource
    - Dontaudit svirt_t read state of libvirtd domain
    - Update httpd and gssproxy modules to reflects latest changes in freeipa
    - Allow user_u users stream connect to dirsrv, Allow sysadm_u and staff_u users to manage dirsrv files
    - Allow systemd_networkd_t communicate with systemd_networkd_t via dbus
    - Allow iptables read modules_conf_t