* Thu May 02 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.4-15
    - Allow iscsid_t domain to mmap modules_dep_t files
    - Allow ngaios to use chown capability
    - Dontaudit gpg_domain to create netlink_audit sockets
    - Remove role transition in rpm_run() interface to allow sysadm_r jump to rpm_t type. BZ(1704251)
    - Allow dirsrv_t domain to execute own tmp files BZ(1703111)
    - Update fs_rw_cephfs_files() interface to allow also caller domain to read/write cephpfs_t lnk files
    - Update domain_can_mmap_files() boolean to allow also mmap lnk files
    - Improve userdom interfaces to drop guest_u SELinux user to use nsswitch