RELEASE 3.3

User-visible changes

• When reading a binary policy by checkpolicy, do not automatically change the version
  to the max policy version supported by libsepol or, if specified, the value given
  using the "-c" flag.

• fixfiles -C doesn't exclude /dev and /run anymore

• CIL: Lists are allowed in constraint expressions

• CIL: Improved situation with duplicate macro and block declarations

• Added the new secilc2tree program to write out CIL AST.

• Improved documentation

• A lot of static code analyse issues, fuzzer issues and compiler warnings fixed

• Updated checkpolicy documentation

• checkpolicy prints the reason why opening a source policy file failed

• Bug fixes

Development-relevant changes

• CIFuzz is turned on in CI
  https://google.github.io/oss-fuzz/getting-started/continuous-integration/

• Fedora 34 image is used in CI

Issues fixed

• #293
• #307