* Wed Jan 06 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-158.1
- Allow cupsd to execute dynamic linker. BZ(1294718)
- Allow qemu-bridge-helper running as virt_bridgehelper_t to access cpuinfo/cpuinfo_max_freq and unix stream socket the running virtual machine. BZ(#1267217).
- Allow dnssec-trigger-script to create symlinks in /var/run/dnssec*.(BZ#1292873)
- Add support for /usr/libexec/ipa/oddjob/com.redhat.idm.trust-fetch-domains and label it as ipa_helper_exec_t. BZ(#1289930)
- ldap_read_certs() should be called within optional block to have modular policy.
- Allow snapperd dac_override capability.
- Allow usbhid-ups to access /proc/bus/usb to have it working on ppc64 machines.
- Update apache_content_template() inteface to allow "shutdown" permissions for apache scripts on unix_stream_socket."
- Allow sandbox_x domains to talk with userdomains over unix_stream_socket.
- Allow uspsmon reading form rand/urand. #1282103, #1282104, #1282105, Allow uspsmon to use kill within its domain. #1276861
- Allow mdadm read files in EFI partotion. BZ(1287203, 1276519)
- Allow sddm-helper running as xdm_t to create .wayland-errors with correct labeling. BZ(#1291085)
- Add userdom_connectto_stream() interface.
- Allow systemd-logind to read /run/utmp. BZ(#1278662)