Use single comment character as it messes up the refpolicy documentation system
Allow unconfined domains to use syslog capability

When an unconfined_t root user runs dmesg, the kernel complains with
this message in its logs (when SELinux is in enforcing mode):

  dmesg (16289): Attempt to access syslog with CAP_SYS_ADMIN but no
  CAP_SYSLOG (deprecated).

audit.log contains following AVC:

  avc:  denied  { syslog } for  pid=16289 comm="dmesg" capability=34
  scontext=unconfined_u:unconfined_r:unconfined_t
  tcontext=unconfined_u:unconfined_r:unconfined_t tclass=capability2
Module version bump for unconfined syslog cap from Nicolas Iooss.
Always use the unknown permissions handling build option.

This compile-time feature is in the minimum-required checkpolicy/checkmodule
for building the policy, so it should always be used.
New database object classes

Pair of objects which supported by Interbase/Firebird/Red Database:

db_exception - exception which can be thrown from PSQL
db_domain - named set of column attributes
Fixes for db_domain and db_exception

Rename db_domain to db_type
Add "use" permission to db_domain and db_type
Renamed db_type to db_datatype, to avoid confusion with SELinux "type"
File contexts for zram

zram is a compressed block device in ram

Signed-off-by: Jason Zaman <jason@perfinion.com>
Module version bump for zram fc entry from Jason Zaman.
apache.te: Add labelling support for /var/log/mlogc

Add the right labelling support for the
ModSecurity Audit Log Collector(mlogc).
mlogc is started by apache and run with the
same selinux security context.

Signed-off-by: Elia Pinto <andronicus.spiros@gmail.com>
Module version bump for apache/mlogc patch from Elia Pinto.
Add filetrans for ntp-kod file

sntp has a file used to persist the history of KoD responses
received from servers.  The  default  is /var/db/ntp-kod.

This patch adds the fcontext and a filetrans so it can be created.

Changes from v1:
* use files_var_filetrans instead of filetrans_pattern

Signed-off-by: Jason Zaman <jason@perfinion.com>
Remove name from ntp-kod ntp_drift_t filetrans.
Module version bump for ntp-kod file support from Jason Zaman.
Merged with usptream