Add genfs_seclabel_symlinks policy capability

policy/policy_capabilities

@@ -98,3 +98,11 @@ policycap cgroup_seclabel;
 # process2: nnp_transition, nosuid_transition
 #
 policycap nnp_nosuid_transition;
+
+# Enable extended genfscon labeling for symlinks.
+# Requires libsepol 3.1 (estimated) and kernel 5.6 (estimated).
+#
+# Added checks:
+# (none)
+#
+#policycap genfs_seclabel_symlinks;