fixes #5930 - implement katello selinux policy
fixes #6162 - fixed websockify hidden denial