Update Changelog and VERSION for release.

Signed-off-by: Chris PeBenito <[email protected]>

Changelog

@@ -1,3 +1,238 @@
+* Sat Feb 29 2020 Chris PeBenito <[email protected]> - 2.20200229
+Alexander Miroshnichenko (1):
+      Add knot module
+
+Chris PeBenito (174):
+      knot: Whitespace changes.
+      knot: Move lines.
+      devices, storage: Add fc entries for mtd char devices and ndctl devices.
+      devices: Add types for trusted execution environment interfaces.
+      ulogd: Rename ulogd_var_run_t to ulogd_runtime_t.
+      INSTALL: Fix build requirements.
+         fishilico/systemd-read-netlink_kobject_uevent_socket
+      Rename *_var_run_t types to *_runtime_t.
+      Reorder declarations based on *_runtime_t renaming.
+      Remove old aliases.
+         fishilico/filesystem-fs_rw_cgroup_files-follow-symlink
+      fc_sort.py: Use "==" for comparing integers.
+      xserver: Remove duplicate colord rule.
+      xserver: Move XDM dbus chats under main dbus optional.
+      Move open, audit_access, and execmod to file common.
+      Add file and filesystem watch access vectors.
+      Fix file common ordering and kernel version from previous commit.
+      init: Whitespace change.
+      unconfined: Add namespaced capabilities.
+      unconfined: Fix systemd --user rule.
+      Remove incorrect usages of "is" operator from Python scripts.
+      logging: Reorder lines.
+      systemd: Logind removes /run/user/* user temp files.
+      unconfined: Add watch permission for files.
+      systemd: Add filesystem watches.
+      dbus: Add directory watches.
+      udev: Watch devices.
+      init: Revise systemd bind mounts.
+      Add perf_event access vectors.
+      systemd: Whitespace fix.
+      logging: Whitespace fix.
+      Bump module versions for release.
+
+Christian Göttsche (6):
+      fix Makefile for policy-module directories with same ending
+      segenxml.py: fix format usage in warning message
+      travis: force the use of python3.5
+      travis: run check_fc_files linter with python 3.7
+      re-implement fc_sort in python
+      Add genfs_seclabel_symlinks policy capability
+
+Daniel Burgener (4):
+      Add requires to interfaces that reference types or attributes without
+         requiring them
+      Remove uneeded types from interfaces where types were added
+      Fix situations where require blocks in interfaces listed types not
+         actually referenced by that interface
+      Remove unneeded semicolons after interface and macro calls
+
+Dominick Grift (2):
+      domain: unconfined access to bpf
+      Remove shell automatic domain transitions to unconfined_t from various pam
+         login programs
+
+Guido Trentalancia (4):
+      Update the pulseaudio application module with a few user domain file read
+         and management permissions.
+      Allow userdomain to read and write the wireless devices (for example for
+         querying their state, enabling and/or disabling them using userspace
+         tools such as "rfkill" from util-linux).
+      Add an interface to allow watch permission on generic device directories.
+      Allow pulseaudio to watch generic device directories.
+
+Jason Zaman (16):
+      udev: Allow udevadm access to udev_tbl_t
+      xserver: ICEauthority can be in /run/user
+      devicekit: udisks needs access to /run/mount/utab.lock
+      dirmngr: accept unix stream socket
+      chromium: allow dbus chat to inhibit power
+      virt: Add unix socket for virtlogd/virtlockd
+      virt: allow lvm_control access
+      fstools: add zfs-auto-snapshot
+      udev: Add watch perms
+      accountsd: Add watch perms
+      cron: watch cron spool
+      colord: add watch perms
+      policykit devicekit: Add watch perms
+      dbus: add watch perms
+      chromium: watch etc dirs
+      gpg: add watch perms for agent
+
+Laurent Bigonville (9):
+      Makefile: Avoid regenerating the iftemplates at everyrun
+      Allow systemd_modules_load_t to module_request and map modules_object_t
+         files
+      Allow udevadm to read files in /run/udev/data
+      Allow udevadm_t to use dac_read_search capability
+      Allow the systemd dbus-daemon to talk to systemd
+      Allow geoclue to log in syslog
+      Allow realmd_t to read localization files
+      Allow alsa_t to create alsa_runtime_t file as well
+      Allow alsa_t to set scheduling priority and send signal to itself
+
+Luca Boccassi (2):
+      journald: allow to remove /run/log/journal
+      logging: add interface to start/stop syslog units
+
+Nicolas Iooss (75):
+      ulogd: add Debian's log directory
+      ulogd: allow creating a netlink-netfilter socket
+      ulogd: allow starting on a Debian system
+      entropyd: label the unit file of haveged
+      entropyd: allow haveged to create a Unix socket to received commands
+      ulogd: fix pattern for /run/ulog directory
+      monit: use s0 instead of s9
+      java: reduce the scope of the pattern in for java entry points
+      libraries: match a digit in Adobe Reader directories
+      drbd: fix pattern for /usr/lib/ocf/resource.d/linbit/drbd
+      rpcbind: remove redundant file context for /run/rpc.statd.pid
+      files: reduce the scope of the pattern matching /usr/include
+      Remove unescaped single dot from the policy
+      Fix use of buggy pattern (.*)?
+      libraries: drop a pattern specific to Python 2.4
+      systemd: introduce an interface for services using PrivateDevices=yes
+      Vagrantfile: upgrade VM to Fedora 30
+      Allow Debian to generate a dynamic motd when users log in
+      entropyd: haveged service uses PrivateDevices=yes
+      Check the .fc files for common typos
+      corecommands: no longer use \d
+      libraries: fix some misspellings in patterns
+      java: remove unnecessary parentheses in pattern
+      cups: add a slash to match /opt/brother/Printers/
+      Vagrantfile: build and install refpolicy on Fedora VM
+      Vagrantfile: add a Debian virtual machine
+      ntp: allow systemd-timesyncd to read network status
+      cups: use ([^/]+/)? to match a subdirectory of CUPS configuration
+      portage: really make consoletype module optional
+      Label programs in /usr/bin like /usr/sbin
+      apt: allow transition from apt_t to dpkg_t with NNP
+      apt: allow preventing shutdown by calling a systemd-logind D-Bus method
+      authlogin: label utempter correctly on Debian
+      irc: add WeeChat policy
+      systemd: allow systemd --user to receive messages from
+         netlink_kobject_uevent_socket
+      Add a policy module for WireGuard VPN
+      modutils: allow depmod to read /boot/System.map
+      modutils: allow depmod and modprobe to use the I/O provided by apt
+      systemd: allow systemd-modules-load.service to read sysfs
+      sudo: allow using use_pty flag
+      Allow using /([^/]+/)? and (/[^/]+)?/ in patterns
+      ulogd: adjust policy for Debian
+      bitlbee: allow using GetDynamicUser on Debian
+      chromium: remove distro-specific ifdef
+      systemd-networkd: allow creating a generic netlink socket
+      systemd-networkd: allow communicating with hostnamed
+      sudo: allow transmitting SIGWINCH to its child
+      sudo: allow using CAP_KILL for SIGWINCH
+      systemd: allow detecting Windows Subsystem for Linux
+      systemd: allow more accesses to systemd --user
+      systemd: remove unnecessary init_write_runtime_socket()
+      .travis.yml: update distro to Ubuntu 18.04 LTS (Bionic Beaver)
+      filesystem: allow following symlinks with fs_rw_cgroup_files()
+      systemd: allow user environment helpers to communicate with systemd --user
+      .travis.yml: check the .fc files in CI
+      systemd: make the kernel spawn systemd-coredump with a context transition
+      gpg: allow gpg-agent to read crypto.fips_enabled sysctl
+      testing/check_fc_files: allow @ character in file context patterns
+      mount: allow callers of mount to search /usr/bin
+      sysadm: allow using hostnamectl
+      init: allow systemd to mount over /dev/kmsg and /proc/kmsg
+      Add policy for CryFS, encfs and gocryptfs
+      Vagrantfile: fix configuration
+      Vagrantfile: remove sudo
+      Vagrantfile: add a specific SELinux policy module
+      systemd: allow reading options from EFI variable SystemdOptions
+      virt: allow more accesses to libvirt_leaseshelper
+      systemd-logind: allow using BootLoaderEntries DBUS property
+      storage: introduce storage_raw_read_fixed_disk_cond
+      Vagrantfile: allow unconfined and sysadm SSH login
+      Vagrant: allow VirtualBox provisionning to use dhclient and ip
+      Associate role unconfined_r to wine_t
+      systemd: add an interface to use nss-systemd
+      usermanage: allow groupadd to lookup dynamic users from systemd
+      mount: label fusermount3 like fusermount
+
+Peter Morrow (1):
+      systemd_tmpfiles_t: Allow systemd_tempfiles_t to change permissions in
+         sysfs
+
+Petr Lautrbach (1):
+      newrole: allow newrole to use setcap to drop capabilities
+
+Stephen Smalley (4):
+      access_vectors: Remove unused permissions
+      access_vectors: Remove entrypoint and execute_no_trans from chr_file
+      access_vectors: remove flow_in and flow_out permissions from packet class
+      Rename obsolete netlink_firewall_socket and netlink_ip6fw_socket classes
+
+Sugar, David (13):
+      grant rpm permission to map rpm_var_lib_t
+      grant permission for rpm to write to audit log
+      grant rpm permissions to map locale_t
+      Allow rpm to map file contexts
+      Allow rpm scripts to alter systemd services
+      grant rpm_t permission to map security_t
+      Module for tpm2
+      Add missing gen_require for init_t in init_script_domain
+      resolve syslog imuxsock denial
+      Add interface to read efivarfs_t directory
+      Fix indent to match the rest of the file (space -> tab)
+      Allow systemd to getattr all files
+      audit daemon can halt system, allow this to happen.
+
+Topi Miettinen (2):
+      Consider jitterentropy to belong to entropyd family
+      Consider iwd equivalent to NetworkManager etc.
+
+Vilgot Fredenberg (1):
+      Remove obsolete gentoo specific rule
+
+bauen1 (16):
+      fix: sudo can't determine default type for sysadm_r
+      fix ifupdown2 executable mislabeled as lib_t
+      added bpf_t filesystem label
+      netutils: allow mtr to communicate with mtr-packet
+      kernel/corecommands: fix the label of xfce4 helpers (on debian)
+      systemd: remove whitespace
+      init: add interfaces for managing /run/systemd
+      systemd: add policy for systemd-fstab-generator
+      udev: remove console-setup
+      consolesetup: add policy for console-setup
+      udev: run consolesetup
+      loadkeys: remove redundant ifdef
+      init: split init_create_pid_files interface
+      ntp: watch systemd networkd runtime dirs This is required for correct
+         function after linux 5.4
+      systemd-user-runtime-dir: add policy
+      sysadm: add sysadm_allow_rw_inherited_fifo tunable to allow writing to
+         fifo_files inherited from domains allowed to change role to sysadm_r.
+
 * Sun Jun 09 2019 Chris PeBenito <[email protected]> - 2.20190609
 Chris PeBenito (70):
       systemd: Module version bump.

VERSION

@@ -1 +1 @@
-2.20190609
+2.20200229