Tighten controls on svirt_sandbox_domain, to not allow it to modify network controls
Merge branch 'rawhide-contrib' of github.com:selinux-policy/selinux-policy into rawhide-contrib