SELinux: swift denied access to /var/lib/swift/.local

Swift services cannot search /var/lib/swift/.local. This is a
custom policy to allow search for swift until the upstream SELinux
policy is updated.

Change-Id: Ie6197cc63597e29f0e84f97d67b1935c67e54a53
Partial-Bug: 1379081
Fix os-svc-install

The 'a' option was missing from the getops set of available options
in os-svc-restart.  This is causing CI failures in patces with an
"illegal operation -- a" error.[1]  This patch adds the 'a' option
to os-svc-restart.

[1] Ib3bc5c47de1b8bb6006530d56e9d47c3763af7b5

Change-Id: I527c5b0cda0cda7877d23422702517760c1bf340
Support Debian distro for iptables

We currently use the add-rule script to create iptables rules that allow
the cloud we deployed to function.

These iptable rules are required on RedHat based distros that have a
default deny-all policy; but they're also useful on Debian distros if
the operators turn on a deny-all policy as part of locking down their
environment. It would be useful if these operators could leverage the
work RedHat has done to get the Debian distro working.

This change adds a check for Debian and allows the add-rule script to
run, as a first step towards full support for Debian-based distros.

Also, install.d installs iptables and there is a Debian specific change.

Change-Id: Iea773d37b18c15a417896e93e29bcdc1e20096ac
Closes-Bug: #1351412
Add ability to enable debug logging on seed

Because our seed uses a static config json we require special logic to
enable debug logging on it.

Change-Id: If38d9947e6e70ce537219caf1e2835285351d960
Merge "Support Debian distro for iptables"
Merge "Add ability to enable debug logging on seed"
Merge "Fix os-svc-install"
Merge "SELinux: swift denied access to /var/lib/swift/.local"