- Rename svirt_lxc_file_t to svirt_sandbox_file_t
    - Allow virt_domain with USB devices to look at dos file systems
    - Dontaudit thumb_t trying to look in /proc
    - Change svirt_lxc_domain to svirt_sandbox_domain, and add
      svirt_qemu_net_t type
    - Rename interface virt_transition_svirt_lxc to
      virt_transition_svirt_sanbox
    - Allow ipsec_t to domtrans to iptables_t
    - dontaudit users running nautilus on /proc
    - Dontaudit hostname inheriting any terminal