Dontaudit screen asking for the sys_tty_config capability

This avc shows up when using screen as root, however screen seems to
work fine without that permission.
Move screen dontaudit rule.
Module version bump for screen fix from Luis Ressel.
git: fix file pattern after whitespace fixes

Commit bb7d721c "Whitespace fixes in git.fc." removed the last letter of a
file pattern in git.fc. This patch adds the letter back.
Module version bump for git fc fix from Nicolas Iooss.
apt: remove reference to write_dir_perms

write_dir_perms doesn't exist and no directories permission provides
{ write add_name remove_name } but rw_dir_perms. As list_dir_perms is allowed,
replace write_dir_perms with rw_dir_perms in the dontaudit statement.
Remove deprecated interfaces to make their usage fatal

Signed-off-by: Nicolas Iooss <nicolas.iooss_git@polytechnique.org>
Debian patch 8: Add pythonsupport policy
Debian patch 13: Add debian apache paths and apache_script_exec_domain()

The patch firstly adds support for some Debian paths to the Apache
policy and has some minor changes to the access granted to user content.

The biggest change is to have a new interface apache_script_exec_domain() for
creating types for Apache content which doesn't need to be optional.  So the
types created by it can be used in a .fc file which will be included even if
apache.pp isn't loaded.  This means that a module which has a script that
Apache might run won't depend on apache.pp.
Debian patch 14: Debian nagios file locations and additional policy

This addresses distribution specific file locations, allows the nagios mail
plugin to run sudo for the purpose of directly searching postfix spools (more
policy needed for other MTAs), allows nrpe to create tmp files and do all
networking stuff, and to talk to database servers.
Debian patch 17: logrotate.if: Add interface to search logrotate runtime directories.

Nobody is using this interface so this is for easier local policies only.
Debian patch 19: gpg.{fc,if,te}: Fixes so that gpg-agent starts up (also when
 launched by ssh-agent). Add interfaces to access to transition to
  gpg_agent_t. unprivuser.te, ssh.if: Make use of the new interfaces.
   userdomain.fc: Label user's .gnupg
Debian patch 20: Small fixes for gpg policy: allow gpg_pinentry_t to read /var/lib.
Debian patch 21: mozilla.{fc,if,te}: Add chromium policy
Debian patch 22: mozilla.{fc,te}: fixes for debian mozilla/iceweasel packaging and
 fix to use userdom_search_user_home_conent instead of
 userdom_serach_user_home_dirs.
Debian patch 23: Watchdog policy: Allow watchdog_t to also read watchdog files
Debian patch 26: tmpreaper policy: Some debian customisations, also make tmpreaper
 policy MCS-aware (add interface in mcs.if for that)
Debian patch 31: some changes in cron policy for debian and small fixes

* Allow crond_t the sys_resource capability to set resource limits for children.
* Allow crontab_t to create a directory of type crontab_tmp_t, necessary to allow crontab -e to work
* Allow cron jobs to write to crond_tmp_t
* Allow system_mail_t (sendmail) to get read/write access to crond_tmp_t
Debian patch 35: Correctly label older pm-*.log* logs
Debian patch 36: Allow inetd_t to read netlink_route_socket