* Wed Feb 15 2017 Lukas Vrabec  <lvrabec@redhat.com> - 3.13.1-225.8
    - Allow rhsmcertd domain signull kernel.
    - Fix label for nagios plugins in nagios file conxtext file
    - Allow kdumpgui domain to read nvme device
    - Add amanda_tmpfs_t label. BZ(1243752)
    - More cleanup of read access for container domains
    - Allow sssd_t domain setpgid BZ(1411437)
    - Dontaudit xdm_t wake_alarm capability2
    - Allow ifconfig_t to mount/unmount nsfs_t filesystem
    - Add interfaces allowing mount/unmount nsfs_t filesystem
    - Label /usr/lib/libGLdispatch.so.0.0.0 as textrel_shlib_t BZ(1419944)
    - su using libselinux and creating netlink_selinux socket is needed to allow libselinux initialization. Resolves: rhbz#1146987
    - Add module_load permission to can_load_kernmodule
    - Add module_load permission to class system
    - Add the validate_trans access vector to the security class
    - Allow ifconfig_t domain read nsfs_t
    - Allow ping_t domain to load kernel modules.
    - rawhide-base: Fix wrong type/attribute flavors in require blocks