* Tue Oct 22 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.3-50
- Allow nagios_script_t domain list files labled sysfs_t.
- Allow jetty_t domain search and read cgroup_t files.
- Dontaudit and disallow sys_admin capability for keepalived_t domain
- Update numad policy to allow signull, kill, nice and trace processes
- Label /var/log/hawkey.log as rpm_log_t and update rpm named filetrans interfaces.
- Allow ipmievd_t to RW watchdog devices
- Update allow rules set for pads_t domain
- Allow user domains to manage user session services
- Allow staff and user users to get status of user systemd session
- Update sudo_role_template() to allow caller domain to read syslog pid files