test: Enable globbing in the INSTALL script.

Because we need it for "rm -rf /var/log/journal/*".  This was broken
all the time but now it bites us because audit messages from
before the relabeling are left in the journal.
test: Enable audit journalling in cockpit.setup.

And not in the INSTALL script.  This avoids disturbing other image
flavors.
ws: Rely on pam_selinux.so to transition cockpit-agent correctly

Changes from mgrepl@redhat.com
ws: Cleanup selinux policy further

Use common interfaces instead of defining the policy bit by byt

Signed-off-by: Stef Walter <stefw@redhat.com>
 * userdomain_signal -> userdom_signal_all_users
 * Cleaned up comments
 * added setexec for cockpit_session_t
test: Make selinux permissive in the ipa test image

We really don't want to be chasing around selinux bugs in a
whole different stack ... at least not yet.
test: Don't check the error message when killing the agent.

It doesn't seem to be predictable any more.
See https://github.com/cockpit-project/cockpit/issues/606