Fixes #4464 - policy for foreman-proxy

This is preliminary policy for proxy, feel free to review and *test*.
Instructions how to easily test will follow.

What was tested so far:

* create host
* edit host
* rebuild host
* delete host
* list puppetca certificates

PLEASE I NEED YOUR ASSISTANCE WITH HELPING TO TEST THIS POLICY. It is piece of
cake to test it, won't break your existing instance at all. Read the
instructions in my comments bellow.
On Wed, Nov 26, 2014 at 04:48:36AM -0800, Dominic Cleal wrote:
> should this be around line 245 instead?

Good catch, this explains lot of things :-)

  # ping support via ECHO TCP service
  ifdef(`distro_rhel6', `
    corenet_tcp_connect_inetd_child_port(foreman_proxy_t)
  ',`
    corenet_tcp_connect_echo_port(foreman_proxy_t)
  ')

The echo service port was introduced in RHEL7.

>
-- 
Later,
 Lukas #lzap Zapletal