Katello selinux policy and other fixes

After week of Satellite 6 testing, it looks like we only miss those rules.

I was not able to find out what is spawning the `consoletype` binary. Searched
most of our plugins, Foreman, Katello, tog, passenger itself. But it looks
harmless - only returns console type, it has it's own domain which is safe
enough.

There is still one bug - something binds *random* udp port. Open topic.