fixes #5930 - implement katello selinux policy

After week of Satellite 6 testing, it looks like we only miss those rules.

I was not able to find out what is spawning the `consoletype` binary. Searched
most of our plugins, Foreman, Katello, tog, passenger itself. But it looks
harmless - only returns console type, it has it's own domain which is safe
enough.

There is still one bug - something binds *random* udp port. Open topic.
The assigning of ports to elasticsearch_port_t.