* New upstream release * Updated version for release. * Merged checkmodule man page from Dan Walsh, and edited it. * Added error checking of all ebitmap_set_bit calls for out of memory conditions. * Merged removal of compatibility handling of netlink classes (requirement that policies with newer versions include the netlink class definitions, remapping of fine-grained netlink classes in newer source policies to single netlink class when generating older policies) from George Coker. * Merged dismod fix from Joshua Brindle. * Removed obsolete cond_check_type_rules() function and call and cond_optimize_lists() call from checkpolicy.c; these are handled during parsing and expansion now. * Updated calls to expand_module for interface change. * Changed checkmodule to verify that expand_module succeeds when building base modules. * Merged module compiler fixes from Joshua Brindle. * Removed direct calls to hierarchy_check_constraints() and check_assertions() from checkpolicy since they are now called internally by expand_module(). * Updated for changes to sepol policydb_index_others interface. * Updated for changes to sepol expand_module and link_modules interfaces. * Merged support for require blocks inside conditionals from Joshua Brindle (Tresys). * Updated for changes to libsepol. * Merged several bug fixes from Joshua Brindle (Tresys). * Merged MLS in modules patch from Joshua Brindle (Tresys). * Merged error handling improvement in checkmodule from Karl MacMillan (Tresys). * Merged bugfix for dup role transition error messages from Karl MacMillan (Tresys). * Merged policyver/modulever patches from Joshua Brindle (Tresys). * Fixed parse_categories handling of undefined category. * Merged bug fix for role dominance handling from Darrel Goeddel (TCS).