* Fri Apr 25 2014 Lukas Vrabec <lvrabec@redhat.com> 3.12.1-157
    - Added fprintd dontaudit tmp dirs rule
    - Add interface to allow tools to check the processes state of
    bind/named
    - ALlow rhsmcertd-worker connect to tcp/8080
    - Allow locate to getattr any files in mock_var_lib
    - Fix label on sensor logs
    - Add cockpit policy
    - Allow locate to getattr any files in mock_var_lib
    - Allow docker to start systemd service
    - Allow mock-build to write all inherited ttys and ptys
    - Fix mock_read_lib_files() interface
    - Allow sys_ptrace for mock-build
    - Additional access required for gear management of openshift
    directories
    - Allow tgtd to read /proc/net/psched
    - Add glance_use_fusefs() boolean
    - Allow ifconfig to manage lnk files
    - Allow ipsec_mgmt_t to read state of the bind process
    - If you use ldap you should be able to read certs
    - Dontaudit access to this leaked fifo_file
    - Remove dup sysnet_manage_ifconfig_run() interface
    - systemd calling needs to be optional