* Tue Jan 30 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.1-4
    - rpm: Label /usr/share/rpm usr_t (ostree/Atomic systems)
    - Update dbus_role_template() BZ(1536218)
    - Allow lldpad_t domain to mmap own tmpfs files BZ(1534119)
    - Allow blueman_t dbus chat with policykit_t BZ(1470501)
    - Expand virt_read_lib_files() interface to allow list dirs with label virt_var_lib_t BZ(1507110)
    - Allow postfix_master_t and postfix_local_t to connect to system dbus. BZ(1530275)
    - Allow system_munin_plugin_t domain to read sssd public files and allow stream connect to ssd daemon BZ(1528471)
    - Allow rkt_t domain to bind on rkt_port_t tcp BZ(1534636)
    - Allow jetty_t domain to mmap own temp files BZ(1534628)
    - Allow sslh_t domain to read sssd public files and stream connect to sssd. BZ(1534624)
    - Consistently label usr_t for kernel/initrd in /usr
    - kernel/files.fc: Label /usr/lib/sysimage as usr_t
    - Allow iptables sysctl load list support with SELinux enforced
    - Label HOME_DIR/.config/systemd/user/* user unit files as systemd_unit_file_t BZ(1531864)