Fix monolithic built

Make unconfined_cronjob_t declaration mandatory, because else monolithic
built fails due to duplicate declaration

Deprecate kerberos_keytab_template:

Keytab type declarations have to be mandatory, because else monolithic
built fails due to out-of-scope

This keytab solution does not make sense in its current implementation,
as many corresponding file context specs are missing, and there are no
type transtion rules

Replaced two deprecated interface calls

Signed-off-by: Dominick Grift <dominick.grift@gmail.com>
Add aide bin /usr/bin and mark /var/lib/aide

In Gentoo, the aide binary is at /usr/bin/aide.

Also, the /var/lib/aide directory itself is best labeled as aide_db_t as well to
allow aide to handle its contents.

Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
Change file context spec for aide log files to catch suffixes

Signed-off-by: Dominick Grift <dominick.grift@gmail.com>
Provide alsa_write_lib interface

The initrc_t domain needs write privileges in the /var/lib/alsa location to
store the asound.state file generated through the alsa init script. To prepare
for this, create the alsa_write_lib interface.

Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
Run dmidecode after newrole or on terminals

The dmidecode application needs to use the file descriptors often owned by the
switching process (like newrole_t after switching roles with newrole), commonly
done by administrators.

Grant this through domain_use_interactive_fds(), allowing output for dmidecode
to be displayed on such terminals.

Also update style a bit to be confirm the coding style for refpolicy.

Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
Grant write privileges to squid on its log files

The squid daemon currently seems to require write privileges on the files
(squid_log_t) - append no longer cuts it. This is confirmed for both the
cache.log file as well as the netdb.state file.

Switching append_files_pattern to write_files_pattern.

Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
Module version bumps for changes in various policy modules by Sven
Vermeulen

Signed-off-by: Dominick Grift <dominick.grift@gmail.com>
Squid: Use a single pattern for brevity

Signed-off-by: Dominick Grift <dominick.grift@gmail.com>