Update to upstream
    * policycoreutils
    	* setfiles: Fix process_glob to handle error situations
    	* sandbox: Allow seunshare to run as root
    	* sandbox: trap sigterm to make sure sandbox
    	* sandbox: pass DPI from the desktop
    	* sandbox: seunshare: introduce helper spawn_command
    	* sandbox: seunshare: introduce new filesystem helpers
    	* sandbox: add -C option to not drop
    	* sandbox: split seunshare caps dropping
    	* sandbox: use dbus-launch
    	* sandbox: numerous simple updates to sandbox
    	* sandbox: do not require selinux context
    	* sandbox: Makefile: new man pages
    	* sandbox: rename dir to srcdir
    	* sandbox: allow users specify sandbox window size
    	* sandbox: check for paths up front
    	* sandbox: use defined values for paths rather
    	* sandbox: move seunshare globals to the top
    	* sandbox: whitespace fix
    	* semodule_package: Add semodule_unpackage executable
    	* setfiles: get rid of some stupid globals
    	* setfiles: move exclude_non_seclabel_mounts to a generic location
    * sepolgen
    	* refparser: include open among valid permissions
    	* refparser: add support for filename_trans rules