* Thu Oct 08 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-152
    - Allow pcp_pmlogger to read system state. BZ(1258699)
    - Allow cupsd to connect on socket. BZ(1258089)
    - Allow named to bind on ephemeral ports. BZ(#1259766)
    - Allow iscsid create netlink iscsid sockets.
    - We need allow connect to xserver for all sandbox_x domain because we have one type for all sandbox processes.
    - Allow NetworkManager_t and policykit_t read access to systemd-machined pid files. #1255305
    - Add missing labeling for /usr/libexec/abrt-hook-ccpp as a part of #1245477 and #1242467 bugs.
    - Allow search dirs in sysfs types in kernel_read_security_state.
    - Fix kernel_read_security_state interface that source domain of this interface can search sysctl_fs_t dirs.