fixes from gentoo strict testing:
    - Allow semanage to read from /root on strict non-MLS for
      local policy modules.
    - Gentoo init script fixes for udev.
    - Allow udev to read kernel modules.inputmap.
    - Dnsmasq fixes from testing.
    - Allow kernel NFS server to getattr filesystems so df can work
      on clients.