(#20967) Apply Redhat carried patch for rundir permissions

Since 2009 Redhat has been carrying a patch that modified the permissions
that puppet tried to enforce on the rundir from 01777 to 0755. This is a
much more secure option and by taking this patch allows packagers to use
sane permissions for the rundir without patching puppet.

See: https://bugzilla.redhat.com/show_bug.cgi?id=495096