autoneihxy: improve policy with scapy behavior

Signed-off-by: Nicolas Iooss <nicolas.iooss_git@polytechnique.org>
fcgiwrap: allow read access to kernel sysctl

Signed-off-by: Nicolas Iooss <nicolas.iooss_git@polytechnique.org>
nginx: allow more policy

Signed-off-by: Nicolas Iooss <nicolas.iooss_git@polytechnique.org>
Import thumb policy from Fedora