* Fri Jan 11 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.1-51
    - Dontaudit ptrace all domains for blueman_t BZ(1653671)
    - Change label of /usr/libexec/lm_sensors/sensord-service-wrapper from lsmd_exec_t to sensord_exec_t BZ(1662922)
    - Allow hddtemp_t domain to read nvme block devices BZ(1663579)
    - Add dac_override capability to spamd_t domain BZ(1645667)
    - Allow pcp_pmlogger_t to mount tracefs_t filesystem BZ(1662983)
    - Allow pcp_pmlogger_t domain to read al sysctls BZ(1662441)
    - Dontaudit certwatch_t domain to write to all mountpoints BZ(1655357)
    - Add dac_override capability for snapperd_t domain BZ(1619356)
    - Allow pcp_pmlogger_t domain to send signals to rpm_script_t BZ(1651030)
    - Add new interface: rpm_script_signal()
    - Label for /home/$USER/.config/chromium should be chrome_sandbox_home_t instead of  mozilla_home_t. BZ(1650053)
    - Allow pcp_pmie_t domain to dbus chat with systemd_resolved_t domain BZ(1650997)
    - Allow staff_t domain to read read_binfmt_misc filesystem
    - Add interface fs_read_binfmt_misc()
    - Revert "Allow staff_t to rw binfmt_misc_fs_t files BZ(1658975)"
    - Make workin: systemd-run --system --pty bash BZ(1647162)
    - Allow ipsec_t domain dbus chat with systemd_resolved_t BZ(1662443)
    - Allow staff_t to rw binfmt_misc_fs_t files BZ(1658975)