ANN: SELinux userspace 3.9

[Petr Lautrbach <lautrbach@redhat.com>]

Hello!

The 3.9 release for the SELinux userspace is now available at:

https://github.com/SELinuxProject/selinux/wiki/Releases

I signed all tarballs using my gpg key, see .asc files.
You can download the public key from
https://github.com/bachradsusi.gpg

Thanks to all the contributors, reviewers, testers and reporters!

User-visible changes
--------------------
* Support static-only builds with DISABLE_SHARED=y

* Add restore option to modify user and role portions

* setfiles: Add -U option to modify user and role portions

* semanage.conf: Add relabel_store config option

* semodule: Add [-g PATH |--config=PATH] for an alternate path for the semanage config

* libselinux: Fix local literal fcontext definitions priority

* libselinux: Fix order for path substitutions

* libsepol: Add new 'netif_wildcard' policy capability

* checkpolicy: Add support for wildcard netifcon names

* libsepol: Allow multiple policycap statements

* libsepol: Support genfs_seclabel_wildcard

* Replace all links to selinuxproject.org

* Bug fixes

Shortlog of the changes since 3.8.1 release
-------------------------------------------
Alyssa Ross (4):
      Support static-only builds
      libselinux: be careful with non-portable LFS macro
      libsemanage: add missing libaudit private library
      policycoreutils: use pkg-config for libsemanage

Christian Göttsche (23):
      checkpolicy: rework cleanup in define_te_avtab_xperms_helper()
      checkpolicy: free left hand conditional expression on error
      checkpolicy: abort on mismatched declarations
      checkpolicy: perform cleanup on error in define_filename_trans()
      libselinux: add restore option to modify user and role portions
      setfiles: add option to modify user and role portions
      libselinux: introduce context_to_str(3)
      mcstrans: make use of context_to_str(3)
      libselinux: constify global strings
      libselinux: use local instead of global error buffer
      libselinux: initialize regex arch string in a thread safe way
      libselinux: limit fcontext regex path length
      checkpolicy: free ebitmap on error in define_compute_type_helper()
      libselinux: limit node depth while parsing compiled fcontexts
      libsemanage: fix handling errors during child execution
      semanage: improve -e documentation and fix delete operation
      libselinux: prioritize local literal fcontext definitions
      libselinux: retain LIFO order for path substitutions
      libsepol: update sort order for netifcon definitions
      libsepol: add netif_wildcard polcap
      checkpolicy: add support for wildcard netifcon names
      secilc/test: add test for wildcard netifcon statement
      libsepol/cil: reject wildcard only network interface names

Daniel Burgener (1):
      Switch from bison name-prefix to api.prefix

Inseob Kim (8):
      libsepol: Fix markers for info nodes w/o children
      libsepol: Allow booleanif to have info nodes
      libsepol: Make line markers of rules configurable
      checkpolicy: Support line markers for allow rules
      checkmodule: Support line markers for allow rules
      checkpolicy: Allow lineno > 1 for source file line
      libsepol: Allow multiple policycap statements
      libsepol: Support genfs_seclabel_wildcard

James Carter (5):
      libselinux: Do not inline compile_regex()
      libsemanage: Ignore missing field initializers in swig generated code
      Policycoreutils: Make pkg-config work for more types of builds
      libsepol/cil: Fix copying of declarations
      libsepol/cil: Expand class-permissions in deny rules

Petr Lautrbach (6):
      README: update subscribe information
      Update VERSIONs to 3.9-rc1 for release.
      Update VERSIONs to 3.9-rc2 for release.
      sepolicy: use multiprocessing 'fork' method
      Update VERSIONs to 3.9-rc3 for release.
      Update VERSIONs to 3.9 for release.

Rahul Sandhu (1):
      libsemanage: create semanage_basename to ensure posix compliance

Robert Marko (1):
      policycoreutils: run_init: define _GNU_SOURCE

Stephen Smalley (2):
      libsepol,checkpolicy: introduce neveraudit types
      userspace: replace all links to selinuxproject.org

Thiébaud Weksteen (2):
      libselinux: warn on identical duplicate properties
      libselinux: Document thread caveat for security_compute_av.3

Tristan Ross (3):
      libsemanage: add relabel_store config option
      libsemanage: add semanage_handle_create_with_path
      semodule: add config argument

наб (2):
      Insert -I../../libselinux/include and -L../../libselinux/src into subprograms where needed
      Inject matchpathcon_filespec_add64() if !defined(__INO_T_MATCHES_INO64_T) instead of using __BITS_PER_LONG < 64 as proxy