* Sat Mar 23 2019 Lukas Vrabec <lvrabec@redhat.com> - 3.14.2-52
- Allow boltd_t domain to write to sysfs_t dirs BZ(1689287)
- Allow fail2ban execute journalctl BZ(1689034)
- Update xen SELinux module
- Improve labeling for PCP plugins
- Allow varnishd_t domain to read sysfs_t files
- Update sudodomains to make working confined users run sudo/su
- Allow iptables_t domain to read NetworkManager state BZ(1690881)
- Label /dev/xen/hypercall and /dev/xen/xenbus_backend as xen_device_t Resolves: rhbz#1679293
- Grant permissions for onloadfs files of all classes.