* Thu Mar 11 2021 Zdenek Pytela <zpytela@redhat.com> - 3.14.7-25
    - Allow polkit-agent-helper-1 read logind sessions files
    - Allow polkit-agent-helper read init state
    - Allow login_userdomain watch generic device dirs
    - Allow login_userdomain listen on bluetooth sockets
    - Allow user_t and staff_t bind netlink_generic_socket
    - Allow login_userdomain write inaccessible nodes
    - Allow transition from xdm domain to unconfined_t domain.
    - Add 'make validate' step to CI
    - Disallow user_t run su/sudo and staff_t run su
    - Fix typo in rsyncd.conf in rsync.if
    - Add an alias for nvme_device_t
    - Allow systemd watch and watch_reads unallocated ttys