* Thu Aug 25 2016 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-211
    - Add new domain ipa_ods_exporter_t BZ(1366640)
    - Create new interface opendnssec_stream_connect()
    - Allow systemd-machined to communicate to lxc container using dbus
    - Dontaudit accountsd domain creating dirs in /root
    - Add new policy for Disk Manager called udisks2
    - Dontaudit firewalld wants write to /root
    - Label /etc/pki/pki-tomcat/ca/ as pki_tomcat_cert_t
    - Allow certmonger to manage all systemd unit files
    - Allow ipa_helper_t stream connect to dirsrv_t domain
    - Update oracleasm SELinux module
    - label /var/lib/kubelet as svirt_sandbox_file_t
    - Allow systemd to create blk and chr files with correct label in /var/run/systemd/inaccessible BZ(1367280)
    - Label /usr/libexec/gsd-backlight-helper as xserver_exec_t. This allows also confined users to manage screen brightness
    - Add new userdom_dontaudit_manage_admin_dir() interface
    - Label /dev/oracleasmfs as oracleasmfs_t. Add few interfaces related to oracleasmfs_t type