- Latest upgrade from NSA
    Removed obsolete cond_check_type_rules() function and call and
        cond_optimize_lists() call from checkpolicy.c; these are handled during
        parsing and expansion now.
    Updated calls to expand_module for interface change.
    Changed checkmodule to verify that expand_module succeeds when building
        base modules.
    Merged module compiler fixes from Joshua Brindle.
    Removed direct calls to hierarchy_check_constraints() and
        check_assertions() from checkpolicy since they are now called
        internally by expand_module().