* Mon Feb 15 2021 Zdenek Pytela <zpytela@redhat.com> - 3.14.8-2
    - Allow userdomain watch various filesystem objects
    - Allow systemd-logind and systemd-sleep integrity lockdown permission
    - Allow unconfined_t and kprop_t to create krb5_0.rcache2 with the right context
    - Allow pulseaudio watch devices and systemd-logind session dirs
    - Allow abrt-dump-journal-* watch generic log dirs and /run/log/journal dir
    - Remove duplicate files_mounton_etc(init_t) call
    - Add watch permissions to manage_* object permissions sets
    - Allow journalctl watch generic log dirs and /run/log/journal dir
    - Label /etc/resolv.conf as net_conf_t even when it's a symlink
    - Allow SSSD to watch /var/run/NetworkManager
    - Allow dnsmasq_t to watch /etc
    - Remove unnecessary lines from the new watch interfaces
    - Fix docstring for init_watch_dir()
    - Allow xdm watch its private lib dirs, /etc, /usr