* Tue Aug 07 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.1-38
    - Allow kprop_t domain to read network state
    - Add support boltd policy
    - Allow kpropd domain to exec itself
    - Allow pdns_t to bind on tcp transproxy port
    - Add support for opafm service
    - Allow hsqldb_t domain to read cgroup files
    - Allow rngd_t domain to read generic certs
    - Allow innd_t domain to mmap own var_lib_t files
    - Update screen_role_temaplate interface
    - Allow chronyd_t domain to mmap own tmpfs files
    - Allow chronyd_t domain to mmap own tmpfs files
    - Fix typo bug in oracleasm policy module
    - Allow systemd to mounont boltd lib dirs
    - Allow sysadm_t domain to create rawip sockets
    - Allow sysadm_t domain to listen on socket
    - Update sudo_role_template() to allow caller domain also setattr generic ptys