fixes #5930 - implement katello selinux policy

After week of Satellite 6 testing, it looks like we only miss those rules.

I was not able to find out what is spawning the `consoletype` binary. Searched
most of our plugins, Foreman, Katello, tog, passenger itself. But it looks
harmless - only returns console type, it has it's own domain which is safe
enough.

There is still one bug - something binds *random* udp port. Open topic.
I think something like `network_port(elasticsearch, tcp,9200-9300,s0)` (looking at selinux-policy), but very much untested :)