xserver_t read dri_etc_t
style
gnumeric policy
macros and comments
fc update
flip pcmanfm boolean defaults
pcmanfm read xattr boolean
move user_fonts to generic_user_content boolean
dontaudits
userdom_list_user_home_content for read_generic_user_content
remove pts rw perms

Only needed for debugging.
pcmanfm_role_template

Seems to be required to return to the caller domain for multiple roles, since
transitioning to a domain  based on role doesn't seem possible.

Ugly, but works.

General method lifted from screen.if.
disable xephyr_shm by default

Given that qt4 doesn't need shm (use "native" rendering), the majority of apps
don't need this, and so it makes sense for it to be disabled by default.

Also rename to clarify its purpose.
fix xephyr tmp type perm
zad_execmem

When spidermonkey is compiled without jit support, pyrogenesis doesn't need
execmem.
s/xephyr_connect/xephyr_stream_connect/