notebook: mention wildcard and complement constrain permission support

Since 4be0e2e1 ("checkpolicy: allow wildcard permissions in
constraints") checkpolicy(8) supports the wildcard and the complement
operator in the constrain statement.

Signed-off-by: Christian Göttsche <[email protected]>
[PM: minor grammar/style edits]
Signed-off-by: Paul Moore <[email protected]>

Author: cgzones

src/constraint_statements.md

@@ -31,7 +31,10 @@ enclosed in braces \'\{\}\'.
 *perm_set*
 
 One or more permissions. Multiple entries consist of a space separated list
-enclosed in braces \'\{\}\'.
+enclosed in braces \'\{\}\'. Since ***checkpolicy**(8)* 3.4 the wildcard
+operator, \'\*\', can be used to specify that all permissions are to be
+included, and the complement operator, \'\~\', can be used to specify all
+permissions are to be included except those explicitly listed.
 
 *expression*
 
@@ -274,7 +277,10 @@ list enclosed in braces \'\{\}\'.
 *perm_set*
 
 One or more permissions. Multiple entries consist of a space separated
-list enclosed in braces \'\{\}\'.
+list enclosed in braces \'\{\}\'. Since ***checkpolicy**(8)* 3.4 the wildcard
+operator, \'\*\', can be used to specify that all permissions are to be
+included, and the complement operator, \'\~\', can be used to specify all
+permissions are to be included except those explicitly listed.
 
 *expression*