libsepol: Add sepol_validate_transition_reason_buffer function

This will return mls/validatetrans constraint information for each
expression in a buffer. If POLICY_KERN version is >=
POLICYDB_VERSION_CONSTRAINT_NAMES then the policy defined types/attributes
will be returned.

Signed-off-by: Richard Haines <richard_c_haines@btinternet.com>
checkpolicy: Add debug feature to display constraints / validatetrans

Allow mls/constraint mls/validatetrans constraints to be displayed
in debug mode. If POLICY_KERN version is >=
POLICYDB_VERSION_CONSTRAINT_NAMES then the policy defined
types/attributes will be returned.

Signed-off-by: Richard Haines <richard_c_haines@btinternet.com>
libsepol: Fix valgrind errors in constraint_expr_eval_reason

Running valgrind flagged up three "definitely lost" malloc/realloc errors
when checking constraints.

Signed-off-by: Richard Haines <richard_c_haines@btinternet.com>
Update libsepol and checkpolicy ChangeLog.

Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Add systemd unit file for mcstrans daemon
Improve restorecond systemd unit file

Use Type=forking and pass PIDFile option, this allows better tracking of
the livecycle of the daemon.

Only attempt to start the daemon if selinux is enabled.

Drop After=syslog.target, syslog is socket activated anyway
Minor manpages improvements
Update policycoreutils ChangeLog.

Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Merge branch 'master' into next
selinux_set_mapping: Document it

This patch may not actually be useful since there's a man page.
Call proper dbus function

Signed-off-by: Dan Walsh <dwalsh@redhat.com>
Only return writeable files that are enabled

Signed-off-by: Dan Walsh <dwalsh@redhat.com>
Add domain to short list of domains, when -t and -d used together

Signed-off-by: Dan Walsh <dwalsh@redhat.com>
Fix up desktop files to match current standards

Encoding is depracated
Keywords is depracated

Signed-off-by: Dan Walsh <dwalsh@redhat.com>
Add support to return sesitivities and cats for python bindings.

Signed-off-by: Dan Walsh <dwalsh@redhat.com>
Cleanup whitespace

Signed-off-by: Dan Walsh <dwalsh@redhat.com>
Add message to tell user to install sandbox policy package.

Sandbox policy is huge do to macro expansion.  We do not install this by default
but sandbox command can fail without it installed.  This patch prints a message to the
user to install the package.

Signed-off-by: Dan Walsh <dwalsh@redhat.com>
Update policycoreutils ChangeLog.

Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>
Merge branch 'master' into next

Conflicts:
	policycoreutils/ChangeLog
Add new icons for sepolicy gui