* Sun Nov 04 2018 Lukas Vrabec <lvrabec@redhat.com> - 3.14.1-48
    - Dontaudit thumb_t domain to setattr on lib_t dirs BZ(1643672)
    - Dontaudit cupsd_t domain to setattr lib_t dirs BZ(1636766)
    - Add dac_override capability to postgrey_t domain BZ(1638954)
    - Allow thumb_t domain to execute own tmpfs files BZ(1643698)
    - Add nnp transition rule for vnstatd_t domain using NoNewPrivileges systemd feature BZ(1643063)
    - Allow l2tpd_t domain to mmap /etc/passwd file BZ(1638948)
    - Add dac_override capability to ftpd_t domain
    - Allow gpg_t to create own tmpfs dirs and sockets
    - Allow rhsmcertd_t domain to relabel cert_t files
    - Allow nova_t domain to use pam
    - sysstat: grant sysstat_t the search_dir_perms set
    - Improve fs_manage_ecryptfs_files to allow caller domain also mmap ecryptfs_t files BZ(1630675)
    - kernel/files.fc: Label /run/motd.d(/.*)? as etc_t
    - Allow ipsec_mgmt_t process to send signals other than SIGKILL, SIGSTOP, or SIGCHLD to the ipsec_t domains BZ(1638949)
    - Allow X display manager to check status and reload services which are part of x_domain attribute
    - Add interface miscfiles_relabel_generic_cert()
    - Fix userdom_write_user_tmp_dirs() to allow caller domain also read/write user_tmp_t dirs
    - Dontaudit sys_admin capability for netutils_t domain
    - Label tcp and udp ports 2611 as qpasa_agent_port_t