* Mon Mar 05 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-3
    - Allow vdagent_t domain search cgroup dirs BZ(1541564)
    - Allow bluetooth_t domain listen on bluetooth sockets BZ(1549247)
    - Allow bluetooth domain creating bluetooth sockets BZ(1551577)
    - pki_log_t should be log_file
    - Allow gpgdomain to unix_stream socket connectto
    - Make working gpg agent in gpg_agent_t domain
    - Dontaudit thumb_t to rw lvm pipes BZ(154997)
    - Allow start cups_lpd via systemd socket activation BZ(1532015)
    - Improve screen_role_template Resolves: rhbz#1534111
    - Dontaudit modemmanager to setpgid. BZ(1520482)
    - Dontaudit kernel bug when systemd requesting load kernel module BZ(1547227)
    - Allow systemd-networkd to create netlink generic sockets BZ(1551578)
    - refpolicy: Define getrlimit permission for class process
    - refpolicy: Define smc_socket security class
    - Allow transition from sysadm role into mdadm_t domain.
    - ssh_t trying to communicate with gpg agent not sshd_t
    - Allow sshd_t communicate with gpg_agent_t
    - Allow initrc domains to mmap binaries with direct_init_entry attribute BZ(1545643)
    - Revert "Allow systemd_rfkill_t domain to reguest kernel load module BZ(1543650)"
    - Revert "Allow systemd to request load kernel module BZ(1547227)"
    - Allow systemd to write to all pidfile socketes because of SocketActivation unit option ListenStream= BZ(1543576)
    - Add interface lvm_dontaudit_rw_pipes() BZ(154997)
    - Add interfaces for systemd socket activation
    - Allow systemd-resolved to create stub-resolv.conf with right label net_conf_t BZ(1547098)