- Fix condor policy
    - Add labeling for gnashpluginrc
    - Allow chrome_nacl to execute /dev/zero
    - Allow condor domains to read /proc
    - mozilla_plugin_t will getattr on /core if firefox crashes
    - Allow block_suspend cap2 for glusterd
    - Allow nmbd to read /dev/random
    - Fix glusterd labeling
    - dmraid creates /var/lock/dmraid
    - Allow systemd_localed to creatre unix_dgram_sockets
    - Allow systemd_localed to write kernel messages.
    - Also cleanup systemd definition a little.
    - Backport fixes for systemd-hostname policy to F18