From 78826f0b99230f025e8788fa22dd0d2a70bb018e Mon Sep 17 00:00:00 2001
From: Lukas Vrabec <lvrabec@redhat.com>
Date: Tue, 24 Nov 2015 15:49:54 +0100
Subject: [PATCH] * Tue Nov 24 2015 Lukas Vrabec <lvrabec@redhat.com>
 3.13.1-160 - Allow apcupsd sending mails about battery state. BZ(1274018) -
 Allow pcp_pmcd_t domain transition to lvm_t. BZ(1277779) - Merge pull request
 #68 from rhatdan/rawhide-contrib - Allow antivirus_t to bind to all
 unreserved ports. Clamd binds to random unassigned port (by default in range
 1024-2048). #1248785 -  Allow systemd-networkd to bind dhcpd ports if
 DHCP=yes in *.network conf file. BZ(#1280092) - systemd-tmpfiles performs
 operations on System V IPC objects which requires sys_admin capability.
 BZ(#1279269)

---
 docker-selinux.tgz           | Bin 3956 -> 3959 bytes
 policy-rawhide-base.patch    |   9 ++++++---
 policy-rawhide-contrib.patch |  17 +++++++++++------
 selinux-policy.spec          |  10 +++++++++-
 4 files changed, 26 insertions(+), 10 deletions(-)

diff --git a/docker-selinux.tgz b/docker-selinux.tgz
index b24750c47273c4efa3de80f7a078ef5c16b5e728..df508b3787bcd9b59da953908d7169cd870fec4e 100644
GIT binary patch
delta 3906
zcmV-I554g89`_y}ABzY8zj#zu00Zq@-H+Qg63^@UuMjo`;yon$)lCACA3%Ti?gl@v
z-oL%HKcQS-y}Nn);_CX{_1nw$H`njqzqq`*etUKGBDj3UKGmh-B4R=CBE4tPip0Hi
zhwA@N%i`tB;0Io1S;Y1~{kA1RQIh-(FDe$3AS%n0#*v^!9>hg1BAOExkbDE5=RaH+
zwgrHUE3MYx$H_k*NL&dLBvOA31DXe7TmMRm3|c&wOcxec@Ix7~C=2o^BR`%hs?(o3
z*dJv@5T$9cBS|2NK(Hw16o=yjy^yHzeL-_U*gA^I@(<OO5E_xpuU`MLIN6XqWaO`k
zG9Xx-oQQpC`W%Ya<{N>bh2q2F<ki_?aS|7d#90z@60vw2u4ume?&^PRabkeOG7``z
zK6Mc4pW<wRP)C+^4D$K5WR1f<DCcp~jiX#rcBT46S^g>;GNMfBDoCK0u_zcNe1a5D
zhNKw9G2s&JWP<p#44_X3g?Jw^q-*3TTMoXv>JZ$*@B)ntU&E5Hj04x2ri7a&HMJD|
zF*Ws@60cOBFC$!^_SSz)PZaTgNR-&}l@s}OCCi{oa%{3M)8*T%izgCUReQ{A4fL!+
z=G%yoZ$`|rHzNhDXh(=SrCgu_d!?*V+}{Uh=Kx=t-#vnN{H%87^dE8+<Ic%T64Ny$
ziQYVM*CTDqB^ylCtRwRi_uS_)XHU=upN)Eim_362ca%pP@{NDls7!Y1d90Miew>{$
z+=J`k`7B*`vc8!O+nO@8P0ui6eJ1bu#QihaKCm*y>Q9g{M^`>FvWF&G^4}x<j*4v%
z0aYbHq=LqQ9C72LgY81P$TDgrqxaYdQhvc1bdYr~LhOYHA0t*dlwvI{tC9#>;#i7k
zN>hqAjMIqoo~D0fUAL_j(aj}O+QWZOA>Ky$N9m8Jf>nJ(L{g{O6`}cNRI{EnVeHqq
znAW=@dZSiL>%Y5(zwhDi=7^5eFaP@ZE$jr+`zUELVIN>s-eXk&hmUntB}(_naYHUn
z*!|P<F@s|7<On7OxqB{17K`+7Lgs_>pvtL`5^m-~p(TIX88XmnLMW0mk{0MSgH$Le
zi>wKBG0b}A)`bEu!BXrJoEwGXMt@c}Zt)|iXTFaAhFEl00=)(4pN4gDQiA@l0u|e*
zM@I>4qC5$9jCQ=;jAXFweC5@-1CeB-l*1dFqkywOp%|e~keDm5AaEpRt*TP&r|z+V
z1KumLU`l`9t>U0RVlQnODt23NM%``kCFH&o9HodgC?EWEWof8x<1Gu7s_#N*{5XQe
zqGGZp3RAnH5in-1NiL>{7fZL90WnL4@uF@vP;5L2br(_cBSmlR$-e43O2dkl%BRIf
zs=W_TZ%{tKZIKaoqV+bV_dq$Gp3MsDUk9hE;v9cCPR}MHaCj27Vervp9B_+kgg0?Y
zLFyU<1hWB`N(#t}A|+=K(ucU!wwaIK_DvvQwQm88@uu9QhL#5C&YEt{Nq&DEylue+
zKOU6ya*u+>2rtt6a~$sz0o5en&aQ#L^f531VU%PvSGtagSnp)2m0&>5>#2NNKv(3s
z4kmxJ)hf{ciUQd49|A7Gpk;Cm5b>2y7i3q^U}1kJ9EXi{fZGjBbb^oO;8^qV>n}ey
zhoAhLotH8mJvT^;CKW!$&Wd_0eU}hADow2#Hh0`x34V*>G5t|=f$o+l)Q11~xq;o@
z#KNqCZUuUPGNh0zm_p0o0LY9+ZWa_6NXmbTJe%YSJi|=M9!?Ki{K+IUcLNcQv-`s~
z>Up~9K2-b4kc+GXjNlXaundM6aJtE(RJnD*=MN*I5P+2?*HdfSA5OvbvRkRPUacNv
z)={;?i~>Bwt%QuM#;2&6H-~xkkljG{0G~DI2ZBu#IpQ+zgpDQ}6_!Ox<GoZ%6X1X9
zh!(=lT$r5ynN@!v0Dg6hm=hPhQ9CYV4s?ws$Fk60-3+S(HtgI16Kqyi&nl5LQfSY3
z|3~}Mf;?jz2kw8}yt}^X-2b}%e!l<pC5l?-VOAutl`fSwybi9;FV8P0E!M@$;3J7s
zSQ%(QU=c3lT1g0xb;hF9xe9`zKdgV$V7Dc(oLL>FN4X@38`lfgV({C~zXWB$M4itl
z^(s`*xVl7@N2|K`wd)w=dx#yPloJ?<v$y)L63I+o5|OOPLuDnF9WT~g9#ZuouU3DC
z;0ndtDBlpQ&7=WcHancAWCfVS0kVZ{7Bmk&T52nR{5sVbG8vh3L*1}i9zlOQB3`y?
z9dTHx1jQxW^=zZQe1M6Z@KZh1xr}9t(BW=;3)Q0jExX#?{(TON;!90dVCinX9{0u#
z@R!b(+ftFNwB!LlYzA4`WmxkT3;cALkia8*|BQJ&kzOCq?7;QIrOzu^_)~W(6DRgd
zr^aEZGfG_@sn7eT*$Z=6T*QA-8Ynvi&m*17Q$h<kN!Pb=R7NYBQn3eLGu{@vJh-D^
z8`kg*5Z0UsngrQhUL-+IgmSUvw-wFnw7q=5q8(t0H9(?=>T3<miHTVlNx|r+7_;~&
z8wYqpV80iv?EynOETtJ0vPG`5l0B`~juU1_EiX!WW<CyIj3t|BKOBF85OMif)+*_+
z9^`4}@j6(^rOGQ_k~{$;=Dq#UvA=clrEOe%2k{emyB8<M0vt>p^#eI6q;cagmeCU_
zjT7PkfZ`+~9_qfu-_B-^>%X$mooH!X-+P#y?VzXQhWQhATxJi0&vh<$Z09%bukl^)
zXC0w^UUq-dx{ucyw`qSc_<ZIrRh#G5XtKH%0j5*{iZ+XDR%DHdM8h^thI0RG{~9a9
zA=VKx^s=`%`5p;s&K?Pl9yhuG?(Yd>A7mdl{sTSG`_2<E%qia!AXe$)N8(pzT`g}~
zTiW|!QQu$eYXS7bcIW!lLv_bCEr&W&pND2em5U-DyMB7FwT^$&qeJW?^r#oYKVV%w
z)tL0pP2Jv0{h;SS)ef*miFWYH-gpHc12aO&$G{u`V#I_G!uTh>^?JjEY41Bv9qQAQ
z%<|x+s_{}j1W})0KM`l-Z1uwU&dP@ne6p>_BBkt~|L(O9XVQ1|N^0UI45Hk}pLL9?
z!wf4_ZTf2kt?+*{C#lZDs)UJ5##*+(CV`-ESFpQ58ks8J^H`+ZL$O1Q{(2Y{kGCWl
zz{WVzHdQ+RgBNmSiaCk}y$2;sY<NwSVB)(<<Rvu?r)qd-NDK3toXldasGWamRq-uJ
zQ<o73iSeQgsW<SG(Kv*Nn>Z+jjze4rnD;d;U5}-lf{K5+!5&)KQz>7}ANCNLY~faj
zatO@O#YL8tDR~H`^m`a&a6D@KUdo>Fw`hmPg@j|KsiyORX+t5k%F55#B#NTZK%E6q
zN(eT0B&iFF9+zr%!-}fxHmj?ZAI0}sO7lC1K%clpEj@<kt#(_Da#1j}uPoYyG6nMh
zendj~olSofRbngGWzPAIig;^P%DV0d!B<I&oeiR|l$ui_t4h}3!>ZM_<`@y@N}^|c
zW0SNfz!YKd1|%*2hw|8(Qkiz6|Bc){wDd*m_nlh;B9)-pY9(YHRjE*Z)<a8gY%--c
zEs#A&%}cbW7OG1<whT0dG(>dWMerO^vNCHsif4c7nd<7wee96F@`J8HA&QjyMA5@R
zOM&MQQ&{kA`+KEH&h-t47ZaxGL#%E*;OWZ2JZTceAzoHtG$FXPZfJrZC1yV1v%;Ty
zu5+dMZB-OPeu4eheANg0=#3vtfNEg<fkKw;>2~EF*tsF#MTP0d6&=FjuhWWw+GgeR
zR-%8=pJ_CtYO%EQlwO$r3~RDsO@j54FWDL3s#DJE$UN<*fplwgQN|}ApL5;BkB5l6
z5odplWuN?Lhov!Y{Z7qB`9k-!gyoyB3!mHbS4Fr8<(2x@!J|c_I~Zo5USO3yewCr{
zI8YvnUiYlZrArF79^yr|ZymaINIDC<KBa$OfCp-CF1Dj))j&5ek-(j5X{ahdPJ9*V
zy|fB~6)r4ZP)Ee><FqKsekMPn-lR=mDTf#V#o^z}bvQDW%I`yT$b7rHpRx|e50lm*
zcZXE%Hr%|<(}mKige1L{Is9=FSBzRAiVvaPamVvf8*s-zfto7suVbXIZm|EgkhFiR
z<<6m7?{&rMm@a&fiqq{|Lm_>(iN2hCuY6m9UZ$(I&nDwSbjRvwK<sUTy1o?IgZtd*
zIq<Z*ENgYAduok5s~k;kjPKxuqTTiaO&fSZjXMDLki$dA9g-)v%IA}_SD)FooT`S7
ziLm}<-bb<!&1qDxH&GKP54rc?-XedkBTIbHjVl{6C9($69fp_EWZp*+ItuFZsWxRZ
zx9}bB&K>l_l2ye`wgA7XHv??PQQZ!ab=#<0qb5eZ(1!Qpa2D-;4&JP*Ve!y~wl)EE
zL(Ip#ri|=hQWAf!UiFT(syCLFYurP9Pnqa(=2e~Rc*}>q+UKhdIc$8Z;=z9lZ7Mq|
zqDV|~ZIH-lQHx5--X?t+tP6%tw&rTyP7Jx~wbRYl^@W_eH`*-N4OvaRR8*ju5&HX@
z2=5zEd5h5MjO$3+9nc9L&qW1wrhzl5??lxTsgbO^QRX!-Uy{R@53p(5S%@f>_rU$6
zt)z_)ciN>;2!rstr}xr`bj5!#@^Ktk=hPthtX{a3{$5$oTznY3Ue)<8x;n0MeH@~l
z!NVL@?ppJ>6E3gOH}O?(1m(Fr+Hp?3*gEF$<m4gpuoJa9CqI5fu2j@50gOe{Xn#6j
zfTam+tnjkA0qeD6xwJ^R^2;$BmlrZRnaVfP2=>|o^FBpw40=$y=01M|JAfT&_uxz3
z|5Od1ub=Z`>+t>G%j=t)&i&sT_?Ykiet~j<sh*49^&KR6SzYJ!mRg^yTm2tnuv@LA
z`uY;b8^RYAXBR7)Uub}nlQ(b1q3HkJut5RqaiN!p{?wr7+Rq)2ZQXm+4G<A)wB^P5
z-_HJiG7hM|>ZDM>$jN_hJ_4z+j|k-;U1;N|5k~<U^V)*Dt6<X?N9@==#6Dv>)pk%?
zqDMql84dXzU;iCHlg&Y7-8&l#H!%R?M*!1r15cJ+1E_@uRTtnzP6E<5(`=N@BS88z
z^#Ws*NmyR((qPTIHh_2`-xq!sR6HO!0x+PdW&At7Bt0GPi|zr(lTi;BlU)xBlU)x7
Q3_Pa%4*&sa*Z_C{0B0Mc$N&HU

delta 3900
zcmV-C55w^H9`qg`ABzY8ed11500Zq@-H+Qg63^@UuMjo`;yon$l}!qfA3%Tq{sup<
zzJGUVe?qywdVllo#ntuu>$mUTUqQu-%d6|_>vu1L%V+FUT`Ddj76dP{4I^dRPj{&P
z|FkS#z6^fgRhC6;|I=?<5)>uL-|(VhF$towOlcemTI4}o<RYRuVFAfE@Ol2jg<)F&
z$hgvK4St;b^MS;bAVDJ4Fra^VAhz|dq{yJfbIEjJaRon=5sR`Qk23P(siHdlse}Dd
zRs>O+7CVvzq6h?wa!zqLKF|w^3f~tr7lf^&m@NNLT?wHP$^7c|AB&R>$wNl|swe}3
z#mR}-m!{95cx}EB7+NSkEKXjXEfyzn!AP7XAtw=wx8aKB%kQqv7AJoOI4mOpjp9=W
zq5dh(76^4@S;rusZ%fuV?1OS1C*3&8C1qEtPn6}avLPeNl&*pVdKrs?QNkxk@nlGf
zQ5+L4(M~3aPs;%MbWn)*5ktC0j<V(8yQ>btEetQv$nZ5R3ClQet!YZQX;M>5(H~P&
zzbWxb_4zWw^=WU-^hAFV|A$10Enhj2UstjWx+KRY`!Zd=y}EcJkyW+F%+^59DrCNm
z82M(zEPFFj(2911m{ZCHDzI0|8pZv6aCQ#xrTN_>c*oCbXHNeiS26CKyd*JQQ<CV-
z6L&q*wp_BoM9n%fKXK1}E_3z-ZSdKsM~K-Y=zm9fv?1S^jmm#yr=G`3Y3#?@DZ@Ru
z9-hzAbtmha*|4oCL)-KWGuCJFo=@CAgY5$=Q>^|38FO^yBO`lgq9y-5((kC)1`$wI
z0z@ik9LNzjK04Sgq>C)0Rx)~zjUeS0oIwX!_aekzc<?b|l|w1k(y}Uvpe2r_h^929
zc*8i2IPYmn)^&f|S`pn`GNnEI_Y~r7lz)`|cq&-cH$)_Lnq3i^Z$>riSrf*7jf-i$
zE21}QwY2`bYxsK$e>X>Tq<;C=$8TXLklsg0lL`9(tMVSJ0yuoEt13~tPmUXMal-DO
zo{t$6dnZRQDahS(L9$q+hZ8a%oCj4-g_LkJ7YZ%W&X9kBRue*zoRPFZuNkC5L0M!?
zpo?MFGq)}jcnOwbm*Cte95?#2x^asiK|S+z{5Qm+yAtRvNdGjfi<1)chZU&UK0P{0
zU=!s@uw%62?Per{ZRabm&K-y(8>JlH*c=6%1q#Iob%MlPfdzphF>6(oVn20{4IJ=Z
zkp)xoZWVtA{SkX<%TTe~f-~xFi!UMfrQj$<tU>wUrz=ZCbsKM4s8oFyLgU8~EEW}$
zHBp$_6^(!~b4_wFMZ8$L%?yZHGK?2>vw>pcNvOMsk{>C0Yftu7*HIc)v{XJVHd5_<
zfO>=S0d9+oxD&0nDZK~E@$_s~SpPaWRTbyJae99?5rM;#unmKcCgXrxTqC@RQwmbo
z7$BGpxKvU=UKA-ggOEPNt+vg4^tNvT0jqrrV2n5ACN;D)KzG)3b58R6<KS%zF8J}F
zq?daXG)8!l-k;-mp9rWX0e5x{1g4LH0SKccqq)*`OvHL8Q>_F8a$Zm6(*n98&vh`N
ztyX`5{#O*hp8pVV0R}CTYk-Kae7YdJf(8rwJK;ENtOML`V4@RzGzZ6;k6(ZJxjFpg
z-|W1U@#wihS~RKfF?LqeW9hqu&{1h>)v&qa-b(OW6p!hTq6>7lM4>kP$IlJy_9hl)
z6?7}m1C$|!T)`At1_wZ9G;*_`z(7(~<k^2DSKt|DO7?Ji*y2wnnYkN?aGc#Awo%X1
zP4}VNSB6|<9bg2Xz=vfp#DLRH9;M2y3qF4s5rqJ(G`XHy)BbP@u9w|Pwe@QCAhV9D
z9cC2ZA#NpPWHmlT&Ad6xtB33cx(E2IIX@6=n#d8CaVKmv*{HBAQX222TABb?N3?$s
zZsx+|{LifV0|D@>W5k@e=#AQOA#<Q>G&z=q{_18}9k5~N4wzuGvU*mDq>(~<#`{0o
zmlot1+c<Fl>*oFSP3QjC+wbT5UtglAbslC#0$b@)X~XN_>iqKja?)a5ybL~)IE9sg
z1_T!2LavpB@K|RoN}a1982ZCX4R(K90?V1zVS1EHg1B+LU@Zo}{rpQ%7EILnj8d;c
z1&ymqRC%<jdtbYbQND-RAxb%ckvMy+?<$eZ^d%9=iab<SV%hOx&E+9gAM$GTX9%uP
zyp8e=!P-n3&}Fm3X-ZarNgN<s*k(cV;G?Cs0?4mZjUkhfIXBb|tK|{2BjSH$tJV>R
zl}b=tvR%(M>dOb1$O%8yL!HZ5wg?^W#<x%{>ff@f-R<A!z$m`dWCfP)*6VR^+yH;+
zY`HBJ$x2He@WW=1m0gB4Z?V8nhY1NhviHxJ#}n!G@yrffKV15}f`vbIr!sM3zjSIG
zhB~9v)sgzVf1158hs8x4rGbC4L-0J(xjZGbfRl868%JfdqA3-7@HOLYvCD%y3btVl
z-vD9FiJ(c4-Q`6R<U}YJTYg*7yiVK82Q1nFrdR_cdZ@nEz?_(vg^@H`krZPVA7$eJ
zZwT!7g0($hXosaVqe8aGbyl*c)!K2w?5O2MDbLKu;ft|k6YYmX5F&prAIn-L9oB<9
z%{*QQE4fs8#Y>VWV8pz)A3FB8PQJ8_i|-(QB5(KN#8`lX$)kQCCxtX_9L6$wBBgOc
z8~{+9M8regxA@!H%yIo!Ho6lnjq7_4v$Gxablfn1!j8-AVeq-m<&N$A#{D(E>;0@F
zw9m`#Pg?i!TH`hi2A_Y=+@)&s+!{?**CN1_3P90jam|XXF_CE4#>r6bpY2~`WjMq-
zLWW-U_9ovWLCx7C!O`PJ7r^~JVeEtK<HmoW2YTOm0){!|djiBNef&uL%B-v9O>0Yg
zKP>9|i+wGCe%S6@zj~<d*rw%BXX^9Ntf+EP<YU)Q@3q!(dUSt?eS{wMLih))tEU>1
z{<*2!d#NAv9H`m>)+o^qUfCP3;A3D$DESzeBS4Ip@Ie^=q_<vgm@w^q=cz+|dXiZl
zyi_$_%7-B86YMAAjGV1r7~fg>5Q0y(^;o2o{qx_w_TfzWu3kw^yo5oN`}nhtQFWMM
zg{n<|t)LZt<|KdBSy+`Yk;z!g7T6>Z6z&RkH%KE><$E5BlzS+4h|ymUqvG+FBm>wO
zN7|-J=YQ}*j!ZE}v7q;$gozEWi4shFSBbo&rr}f#?+j^SUXznqtQEEMPpvAxC28t1
z;vg|zlp*y7eli+|5OEU+#n5qx>j3k<rlsq#lv7YKH`sqeD|;&Ci}}MIB9krL3Q-P$
z8M?U0vN9zPp_G0PgA9&Gjo(YzGyWFs(72Fr%rw<>J}_-4q*ht^Ih#aLG#aS0AW8|r
z=8hzFVbSAK&2CsxmEC4_weq9*K1*qS=Md-<x2UDZ@VwP-t5GfrhW3?3yHKWJ9>9-C
zD8I9bqDp^k<+{u{-%$~7tx8$f9U=HCNwKp*^p#R`N@P{Z8hlu_y4D;c;#^7ejBjj`
z76q6h4BmjG<^NC~TT?32ZuGyAn}?RZX#Ku(OF*O&R9mfttfMLw%FlXe>5WaM^ri)}
z=csv!_S8aksmGRqrjUk+uDb}HBT80gZAbA;JyU;OUAd1P(pP@aH7G=pa-S%AIA|&G
z9AXL!zHNW6G|9QX;qYR@G<}HGjR!nkIhZF+qBz9MDvTxsx7H0!@T0`cCwx};bI*0I
z6u+&CLdY+$|C+D*U?08lg9%U#tUpl5vOV3d+ygr|1iYv){kWn-Sp0QbF;LsAeBMel
z`ZIrxhEy$<cAnA;)1P5YHmpgoe)1(d16*~=c^#Rj{WOqnZ7$0A1mttBoA~h%aW~@Z
zkFo5NAMLO-#;xC}*(hJ=o|dqD^L62Kd;Y2j7oogT-#U1-h;#?T4Acv(vd6D76dni4
zL(%J=Rk?IY!PY~($o8#6w+=~XVb`bh3-EtH?ajq@)T|ol1||}?Q!Ncu1;~l7BE6SZ
zL9oJw#S7|)*nON9McL2fN7S3N=_}<BBcM3^d$|rrrc(KRhz^-=SNBua;rL<FI^^z<
zs@;a0*Lk{7T9uHbw=#!6PU4DDD@5@jv^(y2K57H*_$N?P<^6Sx^wkaazZQ~qwcLL>
zbnCsYSRK=a4^nZueQPMB&o<GQlkb&pE6~ey)%MwBT!`*i9Sw-RO;FdDB71P38$Ab}
zc9&(X?sQMBk!O{o$&K+Hyil~;UZ80MPpEMRz#ejV=(t1j<W~87a`x&o+m=(+&@mC#
zzs&nc7NR+g>h&gS0_7q19^6}`b!2~u54v$>L#9O5K)S>5Qku;BC_+a;eLmHuY~~ie
z<K4M~eps@qxXBjaSM_Fq?KrC2A+l~8b!*hbs2AGsejLuC-Os_Bbu}y=y3p1ppl*oy
znAen%9ZX8%@71f`u~zlQ(sGS^sP8EgJ<hzUa~*H_uvhzh)ggzCZ&f^ap-q2fM@1Bg
zNv;hN87*p2N!i<^FN1Z#(8<<Z&D)6~SG{(+`MSQ4Q};%j1-l`uiI<8BG&4efUlZYd
z11fJ3TAgtnNxK6&!Q;88pw2XKCiR`DdLlKFbvMeq=H*Lr`0@cZZ95AQ#qu7wpR|><
z@!?Lp6bfMwUib7~8j-FTMm~Rz1M8d`1fSIlm(t%W3z~}$gV(D%|3z2FRj!Xiv@>{^
z!^&N29(Tg!HTovL>W!d0mq$C!sTW(v9G;v!L>_jcR_El$kI0pZx+Q?IXd3NL2Mn+@
zfsGYjHaB3sb}W|`DOY|uX5;cgMkiDGMjF9hdtlzDsEt7nO4r<HU<ZG&Bkdl1$@`zG
z;q!I;jBO0x|Gm7vx#`~jy?Q&}|NRo>0#iK~zw0|l^0K<l=`FQBSGW2<#$dNvOZD|7
zjyHraD$XueG{4XQCns;-j6>1?yJ3R@*5g7i5&fw_&$XXB9^1P2s2d<6)@aL%^S_<_
z{bU?aebq^!fRU5kd<1_|V;>R9LAub!Q6r85H0HGhcUQrtFOJx;dx(9;bgJ#3v_y}H
ztTGz%JHGxqekPlP$hvnn7H(ny#*YA|-v*v6y9Q7T52`M}i<|_cZ>HHOn@523Y3c>W
zD3h?f+NHsocWnUiLcTBjEU0)ua0FmLQ_J{wd`Wsb-WT1E=Q5K>4<nOc4+IQ(O!*(t
KFt|<tcmM#Qi=99K

diff --git a/policy-rawhide-base.patch b/policy-rawhide-base.patch
index f0068de3..6a4e7cca 100644
--- a/policy-rawhide-base.patch
+++ b/policy-rawhide-base.patch
@@ -45145,10 +45145,10 @@ index 0000000..c253b33
 +')
 diff --git a/policy/modules/system/systemd.te b/policy/modules/system/systemd.te
 new file mode 100644
-index 0000000..9afb637
+index 0000000..3358b07
 --- /dev/null
 +++ b/policy/modules/system/systemd.te
-@@ -0,0 +1,788 @@
+@@ -0,0 +1,791 @@
 +policy_module(systemd, 1.0.0)
 +
 +#######################################
@@ -45486,6 +45486,9 @@ index 0000000..9afb637
 +corenet_udp_bind_all_nodes(systemd_networkd_t)
 +corenet_tcp_bind_dhcpc_port(systemd_networkd_t)
 +corenet_udp_bind_dhcpc_port(systemd_networkd_t)
++corenet_tcp_bind_dhcpd_port(systemd_networkd_t)
++corenet_udp_bind_dhcpd_port(systemd_networkd_t)
++
 +
 +fs_read_xenfs_files(systemd_networkd_t)
 +
@@ -45556,7 +45559,7 @@ index 0000000..9afb637
 +# Local policy
 +#
 +
-+allow systemd_tmpfiles_t self:capability { chown dac_override fsetid fowner mknod };
++allow systemd_tmpfiles_t self:capability { chown dac_override fsetid fowner mknod sys_admin };
 +allow systemd_tmpfiles_t self:process { setfscreate };
 +
 +allow systemd_tmpfiles_t self:unix_dgram_socket create_socket_perms;
diff --git a/policy-rawhide-contrib.patch b/policy-rawhide-contrib.patch
index dc370d4c..3bff3823 100644
--- a/policy-rawhide-contrib.patch
+++ b/policy-rawhide-contrib.patch
@@ -7818,7 +7818,7 @@ index f3c0aba..f6e25ed 100644
 +	files_etc_filetrans(apcupsd_t, apcupsd_power_t, file, "powerfail")
  ')
 diff --git a/apcupsd.te b/apcupsd.te
-index 080bc4d..5db6cde 100644
+index 080bc4d..5b4d973 100644
 --- a/apcupsd.te
 +++ b/apcupsd.te
 @@ -24,6 +24,12 @@ files_tmp_file(apcupsd_tmp_t)
@@ -7856,7 +7856,7 @@ index 080bc4d..5db6cde 100644
  corenet_all_recvfrom_netlabel(apcupsd_t)
  corenet_tcp_sendrecv_generic_if(apcupsd_t)
  corenet_tcp_sendrecv_generic_node(apcupsd_t)
-@@ -67,26 +73,38 @@ corenet_tcp_bind_apcupsd_port(apcupsd_t)
+@@ -67,26 +73,41 @@ corenet_tcp_bind_apcupsd_port(apcupsd_t)
  corenet_sendrecv_apcupsd_server_packets(apcupsd_t)
  corenet_tcp_sendrecv_apcupsd_port(apcupsd_t)
  corenet_tcp_connect_apcupsd_port(apcupsd_t)
@@ -7867,9 +7867,12 @@ index 080bc4d..5db6cde 100644
  corenet_sendrecv_snmp_server_packets(apcupsd_t)
  corenet_udp_sendrecv_snmp_port(apcupsd_t)
  
++corenet_tcp_connect_smtp_port(apcupsd_t)
++
 +fs_getattr_xattr_fs(apcupsd_t)
 +
 +dev_read_sysfs(apcupsd_t)
++dev_read_urand(apcupsd_t)
 +
  dev_rw_generic_usb_dev(apcupsd_t)
  
@@ -7900,7 +7903,7 @@ index 080bc4d..5db6cde 100644
  
  optional_policy(`
  	hostname_exec(apcupsd_t)
-@@ -101,6 +119,11 @@ optional_policy(`
+@@ -101,6 +122,11 @@ optional_policy(`
  	shutdown_domtrans(apcupsd_t)
  ')
  
@@ -7912,7 +7915,7 @@ index 080bc4d..5db6cde 100644
  ########################################
  #
  # CGI local policy
-@@ -108,20 +131,20 @@ optional_policy(`
+@@ -108,20 +134,20 @@ optional_policy(`
  
  optional_policy(`
  	apache_content_template(apcupsd_cgi)
@@ -66690,10 +66693,10 @@ index 0000000..80246e6
 +
 diff --git a/pcp.te b/pcp.te
 new file mode 100644
-index 0000000..65502e1
+index 0000000..573632e
 --- /dev/null
 +++ b/pcp.te
-@@ -0,0 +1,272 @@
+@@ -0,0 +1,274 @@
 +policy_module(pcp, 1.0.0)
 +
 +########################################
@@ -66838,6 +66841,8 @@ index 0000000..65502e1
 +
 +logging_send_syslog_msg(pcp_pmcd_t)
 +
++lvm_domtrans(pcp_pmcd_t)
++
 +storage_getattr_fixed_disk_dev(pcp_pmcd_t)
 +
 +userdom_read_user_tmp_files(pcp_pmcd_t)
diff --git a/selinux-policy.spec b/selinux-policy.spec
index 19e82c3b..fb6d602f 100644
--- a/selinux-policy.spec
+++ b/selinux-policy.spec
@@ -19,7 +19,7 @@
 Summary: SELinux policy configuration
 Name: selinux-policy
 Version: 3.13.1
-Release: 159%{?dist}
+Release: 160%{?dist}
 License: GPLv2+
 Group: System Environment/Base
 Source: serefpolicy-%{version}.tgz
@@ -664,6 +664,14 @@ exit 0
 %endif
 
 %changelog
+* Tue Nov 24 2015 Lukas Vrabec <lvrabec@redhat.com> 3.13.1-160
+- Allow apcupsd sending mails about battery state. BZ(1274018)
+- Allow pcp_pmcd_t domain transition to lvm_t. BZ(1277779)
+- Merge pull request #68 from rhatdan/rawhide-contrib
+- Allow antivirus_t to bind to all unreserved ports. Clamd binds to random unassigned port (by default in range 1024-2048). #1248785
+-  Allow systemd-networkd to bind dhcpd ports if DHCP=yes in *.network conf file. BZ(#1280092)
+- systemd-tmpfiles performs operations on System V IPC objects which requires sys_admin capability. BZ(#1279269)
+
 * Fri Nov 20 2015 Miroslav Grepl <mgrepl@redhat.com> 3.13.1-159
 - Allow antivirus_t to bind to all unreserved ports. Clamd binds to random unassigned port (by default in range 1024-2048)
 - Allow abrt-hook-ccpp to change SELinux user identity for created objects.