* Mon May 12 2014 Lukas Vrabec <lvrabec@redhat.com> 3.12.1-162
    - More rules needed for openshift/gear in rhel7
    - svirt sandbox domains to read gear content in /run. Allow gear_t to
    manage openshift files
    - Allow mozilla plugins to use /dev/sr0
    - Dontaudit logrotate executing systemctl command attempting to
    net_admin
    - Allow neutron execute arping in neutron_t
    - Allow nova-scheduler to read passwd file
    - Fix zabbix_can_network boolean to have this boolean for all zabbix
    domains
    - Allow openwsman to execute chkpwd and make this domain as unconfined
    for F20.
    - Add openwsman_tmp_t rules
    - Allow ulogd to request the kernel to load a module
    - Add support for /usr/local/Brother labeling. We removed
    /usr/local equiv.
    - Systectl_net_t can be a lnk_file
    - Fix path to mmap_min_addr
    - Any app that executes systemctl will attempt a net_admin