Allow nacl_helper_boo running in :chrome_sandbox_t to send SIGCHLD to chrome_sandbox_nacl_t.
Back port modemmanager for F21.
Change virt.te to match default docker capabilies

Add additional booleans for turning on mknod or all caps.

Also add interface to allow users to write policy that matches docker defaults
for capabilies.

Conflicts:
	virt.te
docker does a getattr on all file systems