rebase to fapolicyd-1.3.3 and fapolicyd-selinux-0.7
36285

Rebase fapolicyd to the latest stable version
430
fapolicyd can leak FDs and never answer request, causing target process to hang forever
621
RFE: send rule number to fanotify so it gets audited
624
fapolicyd needs to make sure the FD limit is never reached
623
fapolicyd still allows execution of a program after "untrusting" it
622
Default q_size doesn't match manpage's one
627
fapolicyd-cli --update then mount/umount twice causes fapolicyd daemon to block (state 'D')
817
Fix broken backwards compatibility backend numbers
730
SELinux prevents the fapolicyd from reading symlink (cert_t)
816

statically linked app can execute untrusted app
fapolicyd ineffective with systemd DynamicUser=yes
Starting manually fapolicyd while the service is already running breaks the system
Cannot execute /usr/libexec/grepconf.sh when falcon-sensor is enabled
fapolicyd: Introduce filtering of rpmdb
192

rebase fapolicyd to the latest stable vesion
fapolicyd gets way too easily killed by OOM killer
fapolicyd does not correctly handle SIGHUP
Introduce ppid rule attribute
fapolicyd often breaks package updates
drop libgcrypt in favour of openssl
Remove dnf plugin
fapolicyd.rules doesn't advertise that using a username/groupname instead of uid/gid also works

CVE-2022-1117 fapolicyd: fapolicyd wrongly prepares ld.so path
Faulty handling of static applications

fapolicyd denies access to /usr/lib64/ld-2.28.so

rebase to 1.1
introduce rules.d
remove pretrans scriptlet

rebase to 1.0.4
added rpm_sha256_only option
added trust.d directory
allow file names with whitespaces in trust files
use full paths in trust files
fix libc.so getting identified as application/x-executable
fix selinux DSP module definition in spec file

Rebuilt for IMA sigs, glibc 2.34, aarch64 flags

SELinux prevents fapolicyd from watch_mount/watch_with_perm on /dev/shm