commit da4208c8808e6a62fcfe848343abd3e2f3b339cc
Author: Stephen Smalley <sds@tycho.nsa.gov>
Date:   Mon Jul 7 14:59:06 2014 -0400

    Do not try to set restorecon_last on /sys entries.

    There is no benefit to setting restorecon_last on /sys entries
    since they are re-created on each boot and doing so triggers
    sys_admin denials.   Also, apply the same partial matching
    optimization to restorecon_recursive on subdirectories of /sys
    as we apply on the top-level restorecon_recursive /sys.

    Change-Id: I90ea143e189db44bf8dc6c93c08d794e80d5539f
    Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>

commit f58dbddbf5d4f10732501e91427afa421f463be5
Author: Nick Kralevich <nnk@google.com>
Date:   Tue Jul 1 11:01:13 2014 -0700

    Log userspace SELinux denials to the event log.

    In addition to logging userspace SELinux denials to logcat,
    also log it to eventlog using the auditd log tag.

    Change-Id: I6a269a832bc2f5e5da6c9dbd169ed2f901b49166

commit be7f5e8814c4954aca51d3f95455c5d9d527658c
Author: Stephen Smalley <sds@tycho.nsa.gov>
Date:   Thu Jun 12 12:21:13 2014 -0400

    Extend label file backend to support label-by-symlink for ueventd.

    When ueventd creates a device node, it may also create one or more
    symlinks to the device node.  These symlinks may be the only stable
    name for the device, e.g. if the partition is dynamically assigned.
    Extend the label file backend to support looking up the "best match"
    for a device node based on its real path (key) and any links to it
    (aliases).  The order of precedence for best match is:
    1) An exact match for the real path (key), or
    2) An exact match for any of the links (aliases), or
    3) The longest fixed prefix match.

    Change-Id: Id6c2597eee2b6723a5089dcf7c450f8d0a4128f4
    Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>

commit bad0ebb47417d17ca807e5f97fcbe649bc4cc05e
Author: Riley Spahn <rileyspahn@google.com>
Date:   Wed Jun 11 16:07:53 2014 -0700

    Add service_context management into libselinux.

    Add functions to handle opening handles for MAC
    on service_manager. Also add selinux_log_callback
    into libselinux because identical code was spread
    through three different files.