* Wed Apr 03 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-53
- Add gnome_filetrans_fontconfig_home_content interface
- Add permissions needed by systemd's machinectl shell/login
- Update SELinux policy for xen services
- Fix varnisncsa typo
- Allow init start freenx-server BZ(1678025)
- Allow tcpd bind to services ports BZ(1676940)
- Add tcpd_wrapped_domain for telnetd BZ(1676940)
- Update mysql_filetrans_named_content() to allow cluster to create mysql dirs in /var/run with proper label mysqld_var_run_t
- Make shell_exec_t type as entrypoint for vmtools_unconfined_t.
- Allow esmtp access .esmtprc BZ(1691149)
- Allow virtlogd_t domain to create virt_etc_rw_t files in virt_etc_t
- Allow tlp_t domain to read nvme block devices BZ(1692154)
- Add permissions needed by systemd's machinectl shell/login
- Allow systemd_machined_t dac_override capability BZ(1670787)
- Allow unconfined_domain_type to use bpf tools BZ(1694115)
- Update dev_filetrans_all_named_dev() interface
- Allow getty_t, local_login_t, chkpwd_t and passwd_t to use usbttys. BZ(1691582)
- Allow xdm_t domain to create own tmp files BZ(1686675)