build @lsm5/RHEL7.5 branc (cherry-picked commits from master)

Allow containers to use fuse file systems by default
Allow containers to sendto dgram socket of container runtimes
Needed to run container runtimes in notify socket unit files.

Allow containers to setexec themselves

tweak macro for fedora - applies to rhel8 as well

moved changelog entries:
Define spc_t as a container_domain, so that container_runtime will transition
Allow container_runtimes to setattr on callers fifo_files
Fix restorecon to not error on missing directory

Make sure we pull in the latest selinux-policy

Add map support to container-selinux for RHEL 7.5
Dontudit attempts to write to kernel_sysctl_t

Add label for /var/lib/origin
Add customizable_file_t to customizable_types

Add policy for container_logreader_t

Allow dnsmasq to dbus chat with spc_t

Allow containers to create all socket classes

Label overlay directories under /var/lib/containers/ correctly

Allow spc_t to load kernel modules from inside of container

Allow containers to list cgroup directories
Transition for unconfined_service_t to container_runtime_t when executing container_runtime_exec_t.

Run restorecon /usr/bin/podman in postinstall

Add labels to allow podman to be run from a systemd unit file