- Update from NSA
    Prevent overflow of spec array in matchpathcon.
    Fixed several uses of internal functions to avoid relocations.
    Changed rpm_execcon to check is_selinux_enabled() and fallback to a regular
        execve if not enabled (or unable to determine due to a lack of /proc,
        e.g. chroot'd environment).