Allow read antivirus domain all kernel sysctls.
Merge branch 'f20-contrib' of github.com:selinux-policy/selinux-policy into f20-contrib