Make support/policyvers.py compatible with Python 3

Add parenthesis around print statement, like in other Python scripts.
Make unconfined user run lvm programs in confined domain

When an unconfined user uses truecrypt to mount an encrypted file, dmsetup is
called to setup a new device.  This program works with udev to configure the
new device and uses SysV semaphores to synchronize states.  As udev runs
dmsetup in lvm_t domain, the first dmsetup process needs to create lvm_t
semaphores (not unconfined_t) and hence needs to run in lvm_t domain.

More details are available in the archives on the ML:
http://oss.tresys.com/pipermail/refpolicy/2014-May/007111.html
Module version bump for unconfined->lvm transition from Nicolas Iooss.
Need the __future__ import for python2 if using print().
Merge upstream
Introduce cachefilesd_kernel_t for cachefiles

When the Linux kernel is acting for cachefilesd, it does so through the
defined context. As the module is called cachefilesd, we call it
cachefilesd_kernel_t (unlike fedora, which uses cachefiles_kernel_t).

Port changes from fedora to use the kernel_service class into this
module as well.
Make cachefiles_kernel_t an alias to cachefilesd_kernel_t so that default package settings can be retained
Fix typo in dnsmasq.if

Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
Mark icedtea binaries as java_exec_t

Add the icedtea location to the java file contexts so that the icedtea
java binaries are marked as java_exec_t.

See also https://bugs.gentoo.org/show_bug.cgi?id=510364

Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
Module version bump for java icedtea fc entries from Sven Vermeulen.
Merge upstream
Gnome Keyring policies

Gnome keyring communicates with other programs via a socket in
~/.cache/. This patch creates gnome_xdg_*_home_t labels and lets
gnome keyring manage them

Signed-off-by: Jason Zaman <jason@perfinion.com>
gconfd keeps its database in the xdg directories

gconfd stores settings for applications in the gnome desktop.
it needs to be able to manage gnome directories inside
~/.{cache,config,local}/

Signed-off-by: Jason Zaman <jason@perfinion.com>
ifconfig can also be in /bin

Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
Module version bump for ifconfig fc entry from Sven Vermeulen.
No longer use deprecated MLS interfaces

Since commit 2d0c9cec mls_file_read_up and mls_file_write_down
interfaces are deprecated even though they are still present.

Replace mls_file_read_up with mls_file_read_all_levels and
mls_file_write_down with mls_file_write_all_levels.
Module version bump for deprecated interface usage removal from Nicolas Iooss.
Merge with upstream
Add gnome_dbus_chat_gconfd interface (bug #510572)
Allow GNOME enabled user domains to send dbus messages to gconfd