init_daemon_run_dir ==> init_daemon_pid_file

init_daemon_run_dir has been deprecated, it should be
replaced with init_daemon_pid_file instead

Signed-off-by: Jason Zaman <jason@perfinion.com>
initrc_t needs to chmod /dev nodes

In the early phase of boot, initrc_t needs to be able to correct
the perms on some nodes in /dev

Signed-off-by: Jason Zaman <jason@perfinion.com>
dropbox exec path change

Dropbox has apparently decided that it will now use the following:
~/.dropbox-dist/dropbox-lnx.x86_64-2.10.1/dropbox

Signed-off-by: Jason Zaman <jason@perfinion.com>
Label /lib symlink as lib_t for every distro

As in Debian, Gentoo and Arch Linux /lib may be a symlink, move its file
context definition outside of ifdef blocks.
Module version bump for libraries fc fix from Nicolas Iooss.
Enable asound.state.lock support

asound.state.lock file when managing alsa state operations.

Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
Add support for Hiawatha web server

Signed-off-by: Sven Vermeulen <sven.vermeulen@siphos.be>
Module version bump for alsa and hiawatha fixes from Sven Vermeulen.
ftp: fix labels in /var/lock/subsys/

In the pattern "/var/lock/subsys/*.ftpd", the star is applied to the
slash instead to the dot.  This means that the pattern matches these
files:

* "Xftpd" in "/var/lock/subsys/" (where X is whatever character)
* "subsysXftpd" in "/var/lock/" (where X is whatever character)

"/var/lock/subsys/vsftpd", which has been used by vsftpd, is therefore
not matched by the pattern.

As "*." looks like a typo, this patch replaces it with ".*".
Label /usr/bin/tftpd as tftpd_exec_t

This TFTP daemon executable is provided by iputils package in Arch Linux
(https://www.archlinux.org/packages/core/x86_64/iputils/files/).
Module version bump for ftp and tftp fixes from Nicolas Iooss.
Merge upstream
Reading generic user content includes listing generic user directories
OpenRC 0.13 renamed some of the commands
silence portage sandbox a little
fcontext for /run/resolvconf/
Workaround for bug #514440 - sntp is in bin, not sbin
Merged upstream, so can be removed from the ifdef distro_gentoo
Add seutil_relabelto_bin_policy explicitly to all users

As we are going to move seutil_relabelto_bin_policy outside the
files_relabel_non_auth_files, we first add it to all the users
explicitly.

The move is needed because otherwise files_relabel_non_auth_files cannot
be used inside a tunable_policy statement.
Comment out seutil_relabelto_bin_policy

We comment out the use of the seutil_relabelto_bin_policy call in the
files_relabel_non_auth_files interface. This allows us to set this
interface in a tunable statement, like so:

  seutil_relabelto_bin_policy(foo_t)

  tunable_policy(`foo_relabel_non_auth_files',`
    files_relabel_non_auth_files(foo_t)
  ')

In larger entries, this allows us to have a minimalistic policy (a
domain only allowed to manage and relabel a certain set of file types)
and, through a boolean, enable it to manage and relabel a larger set of
types.