Allow sandbox domains read all mountpoint symlinks to make symlinked homedirs working with sandbox.
Merge branch 'rawhide-contrib' of github.com:selinux-policy/selinux-policy into rawhide-contrib