* Tue Mar 19 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.4-5
    - Update xen SELinux module
    - Improve labeling for PCP plugins
    - Allow varnishd_t domain to read sysfs_t files
    - Update vmtools policy
    - Allow virt_qemu_ga_t domain to read udev_var_run_t files
    - Update nagios_run_sudo boolean with few allow rules related to accessing sssd
    - Update file context for modutils rhbz#1689975
    - Label /dev/xen/hypercall and /dev/xen/xenbus_backend as xen_device_t Resolves: rhbz#1679293
    - Grant permissions for onloadfs files of all classes.
    - Allow all domains to send dbus msgs to vmtools_unconfined_t processes
    - Label /dev/pkey as crypt_device_t
    - Allow sudodomains to write to systemd_logind_sessions_t pipes.
    - Label /usr/lib64/libcuda.so.XX.XX library as textrel_shlib_t.