- Update from NSA
    Updated to use get interfaces for hidden sepol_module_package type.
    Changed semanage_expand_sandbox and semanage_install_active to
        generate/install the latest policy version supported by libsepol by
        default (unless overridden by semanage.conf), since libselinux will now
        downgrade automatically for load_policy.
    Merged new callback-based error reporting system and ongoing database work
        from Ivan Gyurdiev.