+ Features

  - Convert secid mapping to XArrays instead of IDR
  - Add a kernel label to use on kernel objects
  - Extend policydb permission set by making use of the xbits
  - Make export of raw binary profile to userspace optional
  - Enable tuning of policy paranoid load for embedded systems
  - Don't create raw_sha1 symlink if sha1 hashing is disabled
  - Allow labels to carry debug flags

+ Cleanups
  - Update MAINTAINERS file
  - Use struct_size() helper in kmalloc()
  - Move ptrace mediation to more logical task.{h,c}
  - Resolve uninitialized symbol warnings
  - Remove redundant ret variable
  - Mark alloc_unconfined() as static
  - Update help description of policy hash for introspection
  - Remove some casts which are no-longer required

+ Bug Fixes
  - Fix aa_label_asxprint return check
  - Fix reference count leak in aa_pivotroot()
  - Fix memleak in aa_simple_write_to_buffer()
  - Fix kernel doc comments
  - Fix absroot causing audited secids to begin with =
  - Fix quiet_denied for file rules
  - Fix failed mount permission check error message
  - Disable showing the mode as part of a secid to secctx
  - Fix setting unconfined mode on a loaded profile
  - Fix overlapping attachment computation
  - Fix undefined reference to `zlib_deflate_workspacesize'
-----BEGIN PGP SIGNATURE-----
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=Wt4E
-----END PGP SIGNATURE-----