This release includes several new modules:

• cryfs
• consolesetup
• knot
• tpm2
• wireguard

Changes:

• *_var_run_t types are renamed to *_runtime_t to remove the path from the type name
• Added inotify watch permissions defined and added to systemd and other common services
• Defined perf_event object class
• Reimplemented fc_sort in Python
• Added file contexts lint tool in Travis CI build
• Updated Vagrant tooling for refpolicy testing on Fedora and Debian VMs
• Added general interfaces for systemd bind mount points
• Many more minor fixes across the policy

Removals:

• Removed obsolete permissions

This release requires SELinux userspace 2.8 or higher and Python 3.4 to build.