Add fsetid caps for mandb. #1116165.
Allow all nut domains to read  /dev/(u)?random.
Merge branch 'rawhide-contrib' of github.com:selinux-policy/selinux-policy into rawhide-contrib