Fix typo in dnsmasq.if

Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
Mark icedtea binaries as java_exec_t

Add the icedtea location to the java file contexts so that the icedtea
java binaries are marked as java_exec_t.

See also https://bugs.gentoo.org/show_bug.cgi?id=510364

Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
Module version bump for java icedtea fc entries from Sven Vermeulen.
[NOT UPSTREAMABLE] Remove deprecated interfaces to make their usage fatal
Debian patch 8: Add pythonsupport policy
Debian patch 13: Add debian apache paths and apache_script_exec_domain()

The patch firstly adds support for some Debian paths to the Apache
policy and has some minor changes to the access granted to user content.

The biggest change is to have a new interface apache_script_exec_domain() for
creating types for Apache content which doesn't need to be optional.  So the
types created by it can be used in a .fc file which will be included even if
apache.pp isn't loaded.  This means that a module which has a script that
Apache might run won't depend on apache.pp.
Debian patch 17: logrotate.if: Add interface to search logrotate runtime directories.

Nobody is using this interface so this is for easier local policies only.
Debian patch 19: gpg.{fc,if,te}: Fixes so that gpg-agent starts up (also when
 launched by ssh-agent). Add interfaces to access to transition to
  gpg_agent_t. unprivuser.te, ssh.if: Make use of the new interfaces.
   userdomain.fc: Label user's .gnupg
Debian patch 20: Small fixes for gpg policy: allow gpg_pinentry_t to read /var/lib.
Debian patch 21: mozilla.{fc,if,te}: Add chromium policy
Debian patch 31: some changes in cron policy for debian and small fixes

* Allow crond_t the sys_resource capability to set resource limits for children.
* Allow crontab_t to create a directory of type crontab_tmp_t, necessary to allow crontab -e to work
* Allow cron jobs to write to crond_tmp_t
* Allow system_mail_t (sendmail) to get read/write access to crond_tmp_t
Debian patch 35: Correctly label older pm-*.log* logs
Debian patch 36: Allow inetd_t to read netlink_route_socket
Debian patch 38: mysqld policy fixes

* Allow mysqld_safe_t to send messages to syslogd
* Allow mysqld_t to run shell scripts (shell_exec_t and bin_t)
* Add interface to execute mysqld in its own domain for use in userdomain
Debian patch 39: Allow network manager to run wpa_cli_exec_t programs
Debian patch 40: openvpn policy fixes

allow openvpn_t to access var_lib_t and usr_t files for vulnkey.
Debian patch 59: Allow cron to read mysql config and connect to mysql
Debian patch 69: Clamav policy adjustments:

* Allow clamd_t to search bin_t and read bin_t links
* Allow clamd_t to search postfix_spool_t for creation of Unix
  domain socket in the sub-directory, this is ugly and a little bit
  wrong but makes it easier to configure Postfix
* Allow freshclam_t to read the routing table and talk to http_cache_port_t
* Create new interface crond_search_dir() and use it to allow crond_t
  to search clamd_var_lib_t for amavis cron jobs
* Allow clamd_t to read files under /usr (for Perl)
* Allow it to talk to itself by unix stream sockets
  and bind to UDP nodes Closes: #502274
* Allow clamd_t access to inherit it's own fds
* Give freshclam_t and clamd_t the same access WRT execmem
* Allow freshclam_t to read proc_t files
Debian patch 70: Cover amavisd in clamav policy
Debian patch 75: postfix policy adjustments:

* Allow user_mail_t to transition to postfix_master_t for postalias,
  confined by roles. Uses domain_system_change_exemption() for
  user_mail_t via postfix_domtrans_master() which isn't ideal.
* Allow postfix_local_t to write to mail_spool_t files for locking
* Added in_unconfined_r() interface and made postfix user domains
  use it so they can be in the role unconfined_r. Ugly but no
  better solution at this time Closes: #592038 #599053
* Allow postfix_local_t to run sendmail for programs like vacation