Initial minissdpd policy module

MiniSSDPd is a small daemon used by MiniUPnPc (a UPnP control point for
IGD devices) to speed up device discoveries. MiniSSDPd keeps memory of
all UPnP devices that announced themselves on the network through SSDP
NOTIFY packets. MiniSSDPd also has the ability to handle all SSDP
traffic received on a computer via the multicast group
239.255.255.250:1900.

MiniSSDPd receives NOTIFY packets and stores information contained for
later use by UPnP Control Points on the machine. MiniSSDPd receives
M-SEARCH packets and answers on behalf of the UPnP devices running on
the machine. MiniUPnPd and MiniUPnPc are designed to take automatically
advantage of MiniSSDPd running on the same computer. Just make sure that
MiniSSDPd is started before any other UPnP program on the computer.

Signed-off-by: Dominick Grift <dominick.grift@gmail.com>
alsa: due to a bug in gnome 3.4, in debian, alsactl does all kinds of
weird things related to pulseaudio

Signed-off-by: Dominick Grift <dominick.grift@gmail.com>
various: revert regex fixes: fcsort does not want this now

Signed-off-by: Dominick Grift <dominick.grift@gmail.com>
Remove deprecated interfaces to make their usage fatal

Signed-off-by: Nicolas Iooss <nicolas.iooss_git@polytechnique.org>
Debian patch 7: Added new "lda" module for email local delivery agents such as maildrop and procmail
Debian patch 8: Add pythonsupport policy
Debian patch 13: Add debian apache paths and apache_script_exec_domain()

The patch firstly adds support for some Debian paths to the Apache
policy and has some minor changes to the access granted to user content.

The biggest change is to have a new interface apache_script_exec_domain() for
creating types for Apache content which doesn't need to be optional.  So the
types created by it can be used in a .fc file which will be included even if
apache.pp isn't loaded.  This means that a module which has a script that
Apache might run won't depend on apache.pp.
Debian patch 14: Debian nagios file locations and additional policy

This addresses distribution specific file locations, allows the nagios mail
plugin to run sudo for the purpose of directly searching postfix spools (more
policy needed for other MTAs), allows nrpe to create tmp files and do all
networking stuff, and to talk to database servers.
Debian patch 17: logrotate.if: Add interface to search logrotate runtime directories.

Nobody is using this interface so this is for easier local policies only.
Debian patch 19: gpg.{fc,if,te}: Fixes so that gpg-agent starts up (also when
 launched by ssh-agent). Add interfaces to access to transition to
  gpg_agent_t. unprivuser.te, ssh.if: Make use of the new interfaces.
   userdomain.fc: Label user's .gnupg
Debian patch 20: Small fixes for gpg policy: allow gpg_pinentry_t to read /var/lib.
Debian patch 21: mozilla.{fc,if,te}: Add chromium policy
Debian patch 22: mozilla.{fc,te}: fixes for debian mozilla/iceweasel packaging and
 fix to use userdom_search_user_home_conent instead of
 userdom_serach_user_home_dirs.
Debian patch 23: Watchdog policy: Allow watchdog_t to also read watchdog files
Debian patch 26: tmpreaper policy: Some debian customisations, also make tmpreaper
 policy MCS-aware (add interface in mcs.if for that)
Debian patch 31: some changes in cron policy for debian and small fixes

* Allow crond_t the sys_resource capability to set resource limits for children.
* Allow crontab_t to create a directory of type crontab_tmp_t, necessary to allow crontab -e to work
* Allow cron jobs to write to crond_tmp_t
* Allow system_mail_t (sendmail) to get read/write access to crond_tmp_t
Debian patch 32: Small adaptions of the base dbus policy for debian
Debian patch 33: Small debian fixes for exim policy
Debian patch 35: Correctly label older pm-*.log* logs
Debian patch 36: Allow inetd_t to read netlink_route_socket