Backport lots of fixes from F15 including:
    Do not drop capability bounding set in seunshare, this allows sandbox to
    run setuid apps.
    Cleanup policy generation template
    Pass dpi settings to sandbox
    Add .config/* to restorecond_users.conf
    Clean up some of the templates for sepolgen
    Apply patches from Christoph A.
    * fix sandbox title
    * stop xephyr from li
    Also ignore errors on sandbox include of directory missing files
    Change fixfiles restore to delete unlabeled sockets in /tmp