Add MLS constraints for x_pointer and x_keyboard.
Add label for parted.
Get grub2-install to work properly

The grub2-install application runs a few grub2-* commands. Two of those,
grub2-bios-setup and grub2-probe, need read/write access to the (fixed) disks.

Mark those two applications as bootloader_exec_t (as is the case with the "grub"
legacy command in the past) allows the commands to continue.

Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
Support named file transition for fixed_disk_device_t

Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
The kerberos_keytab_template() template is deprecated: Breaks monolithic built (out-of-scope)

This keytab functionality should be re-evaluated because it does not
make sense in its current implementation

Signed-off-by: Dominick Grift <dominick.grift@gmail.com>
Fix support/policyvers.py not to error if building policy on a SELinux-disabled system.
Module version bump for kerberos keytab changes for ssh from Dominick Grift.
Initial pstore support

Generic interface to platform dependent persistent storage
https://www.kernel.org/doc/Documentation/ABI/testing/pstore

This basically works pretty much the same as cgroup file systems from a
SELinux perspective

Make sure that the installed /sys/fs/pstore directory is labeled
properly so that the pstore file system can be mounted on that

I also removed the files_type() calls as they are duplicate (it is
already called in files_mountpoint)

Signed-off-by: Dominick Grift <dominick.grift@gmail.com>
Module version bump for pstore filesystem support from Dominick Grift.
Support redis port tcp,6379

Signed-off-by: Dominick Grift <dominick.grift@gmail.com>
Module version bump for redis port from Dominick Grift.
Update contrib.
These regular expressions were not matched

Signed-off-by: Dominick Grift <dominick.grift@gmail.com>
Restorecon reads, and writes /dev/console before it is properly labeled

Signed-off-by: Dominick Grift <dominick.grift@gmail.com>
Add comment for setfiles using /dev/console when it needs to be relabeled.
Module version bump for xserver and selinuxutil updates from Dominick Grift.
filesystem: associate tmpfs_t (shm) to device_t (devtmpfs) file systems

Signed-off-by: Dominick Grift <dominick.grift@gmail.com>
Module version bump for tmpfs associate to device_t from Dominick Grift.
logging: syslog (rs:main Q:Reg) reading sysctl_vm files (overcommit_memory) in Debian

Signed-off-by: Dominick Grift <dominick.grift@gmail.com>
Module version bump for syslog reading overcommit_memory from Dominick Grift.