[minibcs-policy] Grant sandbox_t permissions to random, urandom, and tmpfs.