Backport patches for to ensure rpm-ostreed has the install_exec_t label

Allow glusterd domain read krb5_keytab_t files.

Allow ganesha-ha.sh script running under unconfined_t domain communicate with glusterd_t domains via dbus.

Label /var/log/ganesha.log as gluster_log_t
Allow glusterd_t domain to create glusterd_log_t files.
Label /var/run/ganesha.pid as gluster_var_run_t.

Label /usr/bin/ganesha.nfsd as glusterd_exec_t to run ganesha as glusterd_t.
Allow glusterd_t stream connect to rpbind_t.
Allow cluster_t to create symlink /var/lib/nfs labeled as var_lib_nfs_t.
Add interface rpc_filetrans_var_lib_nfs_content()
Add new boolean: rpcd_use_fusefs to allow rpcd daemon use fusefs.

Allow openvswitch domain capability sys_rawio

Add fs_manage_hugetlbfs_files() interface.
Allow openvswitch to manage hugetlfs files and dirs

Allow openvswitch read/write hugetlb filesystem.
Allow smbcontrol domain to send sigchld to ctdbd domain.

Revert Add missing labeling for /usr/libexec/abrt-hook-ccpp patch

Allow search dirs in sysfs types in kernel_read_security_state.
Fix kernel_read_security_state interface that source domain of this interface can search sysctl_fs_t dirs.

Add missing labeling for /usr/libexec/abrt-hook-ccpp as a part of #1245477 and #1242467 bugs
We need allow connect to xserver for all sandbox_x domain because we have one type for all sandbox processes.

Remove labeling for modules_dep_t file contexts to have labeled them as modules_object_t.
Update files_read_kernel_modules() to contain modutils_read_module_deps_files() calling because module deps labeling could remain and it allows to avoid regressions.

We need to require sandbox_web_type attribute in sandbox_x_domain_template().
ipsec: The NM helper needs to read the SAs
ipsec: Allow ipsec management to create ptys

Add temporary fixes for sandbox related to #1103622. It allows to run everything under one sandbox type.
Allow abrt_t domain to write to kernel msg device.
Allow rpcbind_t domain to change file owner and group

Allow smbcontrol to create a socket in /var/samba which uses for a communication with smbd, nmbd and winbind.