Add fcontext for rsyslog pidfile
Module version bump for logging fc patch from Laurent Bigonville.
Update contrib.
Add a .gitignore
Make usage of deprecated interfaces fatal
Label /usr/lib/sudo/sesh as shell_exec_t
xserver: add lightdm file contexts
userdomain: no longer allow unprivileged users to read kernel symbols

Unprivileged users don't need to read kallsyms and /boot/System.map.

This allow rule was introduced in the initial revision of userdomain.if in
2005, with commit b16c6b8c32a631a2e66265f6f60b664222760972:

    # cjp: why?
    bootloader_read_kernel_symbol_table($1_t)
Debian patch 2: disable user-based access control
Debian patch 3: Make default and root mcs/seusers unconfined
Debian patch 4: Add additional interfaces and a boolean switch to access unconfined
Debian patch 8: Add pythonsupport policy
Debian patch 9: Add a new boolean to grant users access to dosfs_t.
Debian patch 10: Allow users read access to /var/lib/apt/lists
Debian patch 14: Debian nagios file locations and additional policy

This addresses distribution specific file locations, allows the nagios mail
plugin to run sudo for the purpose of directly searching postfix spools (more
policy needed for other MTAs), allows nrpe to create tmp files and do all
networking stuff, and to talk to database servers.
Debian patch 15: Move /dev/xconsole from xserver policy to logging.pp

The patch moves the xconsole policy to logging.pp from the xserver
policy.  It's more about logging than the X server and there are a lot of
systems which have syslogd configured to write to /dev/xconsole but that have
no X server installed.
Debian patch 16: Debian specific changes for init_t
Debian patch 19: gpg.{fc,if,te}: Fixes so that gpg-agent starts up (also when
 launched by ssh-agent). Add interfaces to access to transition to
 gpg_agent_t. unprivuser.te, ssh.if: Make use of the new interfaces.
 userdomain.fc: Label user's .gnupg
Debian patch 23: Watchdog policy: Allow watchdog_t to also read watchdog files
Debian patch 24: Use filesystem transitions for hugetlbfs_t