fixes #5930 - implement katello selinux policy

After week of Satellite 6 testing, it looks like we only miss those rules.

I was not able to find out what is spawning the `consoletype` binary. Searched
most of our plugins, Foreman, Katello, tog, passenger itself. But it looks
harmless - only returns console type, it has it's own domain which is safe
enough.

There is still one bug - something binds *random* udp port. Open topic.
> Why's it only coming up now?  I thought you were adding policy changes for Katello.

Perhaps passenger is under heavier load with Katello services or
something. I have no clue, really. Do you think we should ignore the
denial for now and only add it when we will have more of these reported?

-- 
Later,

 Lukas "lzap" Zapletal
 irc: lzap #theforeman