* Mon Mar 27 2017 lukas vrabec <lvrabec@redhat.com> - 3.13.1-248
- Label /run/haproxy.sock socket as haproxy_var_run_t
- Allow oddjob_mkhomedir_t to mamange autofs_t dirs.
- Allow tomcat to connect on http_cache_port_t
- Update mta_filetrans_named_content() interface to allow calling domain create files labeled as etc_aliases_t in dir labeled as etc_mail_t.
- Allow nova domain search for httpd configuration.
- Add sys_module capability for drbd
- Merge pull request #6 from rhatdan/cloud_init
- Allow cloud_init to send dbus messages to the init system
- Merge branch 'rawhide' of github.com:wrabcak/selinux-policy-contrib into rawhide
- Dontaudit postfix domains to request modules
- Merge pull request #5 from robmv/rawhide-cups-pdf-3.0
- Add haproxy_t domain fowner capability
- Allow domain transition from ntpd_t to hwclock_t domains
- Allow cockpit_session_t setrlimit and sys_resource
- Dontaudit svirt_t read state of libvirtd domain
- Update httpd and gssproxy modules to reflects latest changes in freeipa
- Allow user_u users stream connect to dirsrv, Allow sysadm_u and staff_u users to manage dirsrv files
- Allow systemd_networkd_t communicate with systemd_networkd_t via dbus
- Allow iptables read modules_conf_t