- Allow logrotate to execute systemctl
    - Allow nsplugin_t to getattr on gpmctl
    - Fix dev_getattr_all_chr_files() interface
    - Allow shorewall to use inherited terms
    - Allow userhelper to getattr all chr_file devices
    - sandbox domains should be able to getattr and dontaudit search of sysctl_kernel_t
    - Fix labeling for ABRT Retrace Server