* Tue May 19 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-127
    - Allow docker dbus chat with firewalld. BZ(1221911)
    - Allow anaconda to run iscsid in own domain. BZ(1220948).
    - Add new iscsid_run() interface.
    - Update nagios_run_sudo boolean.
    - Allow rhsmcetd to use the ypbind service to access NIS services.
    - Add nagios_run_pnp4nagios and nagios_run_sudo booleans to allow run sudo from NRPE utils scripts and allow run nagios in conjunction with PNP4Nagios.
    - Allow ctdb to create rawip socket.
    - Allow ctdbd to bind  smbd port.
    - Make ctdbd as userdom_home_reader.
    - Dontaudit chrome-sandbox write access its parent process information. BZ(1220958)
    - Fix missing bracket in apache.te.
    - Fix httpd_use_openstack boolean related to keystone_read_pid.
    - Allow net_admin cap for dnssec-trigger to make wifi reconnect working.
    - Add support for /var/lib/ipsilon dir and label it as httpd_var_lib_t. BZ(1186046)
    - Allow gluster rpm scripletto create glusterd socket with correct labeling. This is a workaround until we get fix in glusterd.
    - Add glusterd_filetrans_named_pid() interface.
    - Fix description for seutil_search_config() interface.
    - make ssh-keygen as nsswitch domain to access SSSD.
    - Label ctdb events scripts as bin_t.
    - Add unconfined_dontaudit_write_state() interface.
    - Add support for ~/.local/share/networkmanagement/certificates and update filename transitions rules. BZ(1215877)
    - Fix selinux_search_fs() interface.
    - Update selinux_search_fs(domain) rule to have ability to search /etc/selinuc/ to check if /etc/selinux/config exists. BZ(1219045)
    - Add seutil_search_config() interface.
    - Fix typo in systemd.te
    - Add lvm_stream_connect() interface.
    - Add support for /usr/sbin/lvmpolld.BZ(1220817)
    - Allow gvfsd-fuse running as xdm_t to use /run/user/42/gvfs as mountpoint.BZ(1218137)