Signing works now with at least Mobile-ID (didn't work before). Unable to test with physical ID card at the moment though, but based on upstream changelog it should be fixed as well.

Works for me! :)

Still get following AVC denials:

denied  { read write } for  pid=3472 comm="mount" name="loop-control" dev="devtmpfs" ino=1353 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:loop_control_device_t:s0 tclass=chr_file permissive=1
denied  { open } for  pid=3472 comm="mount" path="/dev/loop-control" dev="devtmpfs" ino=1353 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:loop_control_device_t:s0 tclass=chr_file permissive=1
denied  { ioctl } for  pid=3472 comm="mount" path="/dev/loop-control" dev="devtmpfs" ino=1353 ioctlcmd=0x4c82 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:loop_control_device_t:s0 tclass=chr_file permissive=1
denied  { read write } for  pid=3472 comm="mount" name="loop0" dev="devtmpfs" ino=25246 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
denied  { open } for  pid=3472 comm="mount" path="/dev/loop0" dev="devtmpfs" ino=25246 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
denied  { ioctl } for  pid=3472 comm="mount" path="/dev/loop0" dev="devtmpfs" ino=25246 ioctlcmd=0x4c00 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
denied  { mounton } for  pid=3472 comm="mount" path="/tmp/selftest-mountpoint-810244833" dev="tmpfs" ino=500922 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir permissive=1
denied  { getattr } for  pid=3478 comm="umount" name="/" dev="loop0" ino=2 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1

Seems to be also fixing "#1533654 - Two-finger scroll does not work after suspend-resume cycle." \o/