* Sat May 26 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-21
    - Add dac_override to exim policy BZ(1574303)
    - Fix typo in conntrackd.fc file
    - Allow sssd_t to kill sssd_selinux_manager_t
    - Allow httpd_sys_script_t to connect to mongodb_port_t if boolean httpd_can_network_connect_db  is turned on
    - Allow chronyc_t to redirect ourput to /var/lib /var/log and /tmp
    - Allow policykit_auth_t to read udev db files BZ(1574419)
    - Allow varnishd_t do be dbus client BZ(1582251)
    - Allow cyrus_t domain to mmap own pid files BZ(1582183)
    - Allow user_mail_t domain to mmap etc_aliases_t files
    - Allow gkeyringd domains to run ssh agents
    - Allow gpg_pinentry_t domain read ssh state
    - Allow sysadm_u use xdm
    - Allow xdm_t domain to listen ofor unix dgram sockets BZ(1581495)
    - Add interface ssh_read_state()
    - Fix typo in sysnetwork.if file