Add support for the SCTP portcon keyword (rhbz#1603571)

Define extended_socket_class policy capability (rhbz#1564775)

Define nnp_nosuid_transition policy capability (rhbz#1480519)
use IN6ADDR_ANY_INIT to initialize IPv6 addresses
Allow runtime labeling of ibendports (rhbz#1464489)
Allow runtime labeling of Infiniband Pkeys (rhbz#1464489)
Add IB end port handling to CIL (rhbz#1464489)
Add ibendport ocontext handling (rhbz#1464489)
Add support for ibendportcon labels (rhbz#1464489)
Add Infiniband Pkey handling to CIL (rhbz#1464489)
Add ibpkey ocontext handling (rhbz#1464489)
Add support for ibpkeycon labels (rhbz#1464489)
Remove unused attribute on a used argument from avrule_read() (rhbz#1464489)
Add binary module support for xperms
Add support for converting extended permissions to CIL

Define cgroup_seclabel policy capability (rhbz#1493517)
Fix unitialized jmp and invalid dereference

Fix memory leak in expand.c
Fix invalid read when policy file is corrupt
Fix possible use of uninitialized variables

Warn instead of fail if permission is not resolved
Ignore object_r when adding userrole mappings to policydb

Add missing return to sepol_node_query()

Correctly detect unknown classes in sepol_string_to_security_class
Sort object files for deterministic linking order
Fix neverallowxperm checking on attributes
Remove libsepol.map when cleaning
Add high-level language line marking support to CIL
Change logic of bounds checking to match change in kernel
Fix multiple spelling errors
Only apply bounds checking to source types in rules
Fix CIL and not add an attribute as a type in the attr_type_map
Build policy on systems not supporting DCCP protocol
Fix extended permissions neverallow checking
Fix CIL neverallow and bounds checking
Android.mk: Add -D_GNU_SOURCE to common_cflags

Fix bug in CIL when resetting classes
Add support for portcon dccp protocol

Update to upstream release 2016-02-23

Mass rebuild 2014-01-24

Mass rebuild 2013-12-27

Update to upstream
Add CONTRAINT_NAMES to the kernel

Update to latest patches from eparis/Upstream

Update to latest patches from eparis/Upstream

Fix libsepol.stack messages in audit2allow/audit2why