* Fri Jul 26 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.4-25
    - Allow spamd_update_t domain to read network state of system BZ(1733172)
    - Allow dlm_controld_t domain to transition to the lvm_t
    - Allow sandbox_web_client_t domain to do sys_chroot in user namespace
    - Allow virtlockd process read virtlockd.conf file
    - Add more permissions for session dbus types to make working dbus broker with systemd user sessions
    - Allow sssd_t domain to read gnome config and named cache files
    - Allow brltty to request to load kernel module
    - Add svnserve_tmp_t label forl svnserve temp files to system private tmp
    - Allow sssd_t domain to read kernel net sysctls BZ(1732185)
    - Run timedatex service as timedatex_t
    - Allow mysqld_t domain to domtrans to ifconfig_t domain when executing ifconfig tool
    - Allow cyrus work with PrivateTmp
    - Make cgdcbxd_t domain working with SELinux enforcing.
    - Make working wireshark execute byt confined users staff_t and sysadm_t
    - Dontaudit virt_domain to manage ~/.cache dirs BZ(1730963)
    - Allow svnserve_t domain to read system state
    - allow named_t to map named_cache_t files
    - Label user cron spool file with user_cron_spool_t
    - Update gnome_role_template() template to allow sysadm_t confined user to login to xsession
    - Allow lograte_t domain to manage collect_rw_content files and dirs
    - Add interface collectd_manage_rw_content()
    - Allow ifconfig_t domain to manage vmware logs
    - Remove system_r role from staff_u user.
    - Make new timedatex policy module active
    - Add systemd_private_tmp_type attribute
    - Allow systemd to load kernel modules during boot process.
    - Allow sysadm_t and staff_t domains to read wireshark shared memory
    - Label /usr/libexec/utempter/utempter  as utemper_exec_t
    - Allow ipsec_t domain to read/write  l2tpd pipe BZ(1731197)
    - Allow sysadm_t domain to create netlink selinux sockets
    - Make cgdcbxd active in Fedora upstream sources