Upadate fapolicyd-selinux

Added fapolicyd_config_t label for /etc/fapolicyd.
Make fapolicyd a base read only file-readable for all domains.
Allow fapolicyd to execute generic programs in system bin directories (/bin, /sbin, /usr/bin, /usr/sbin) a without domain transition.

Author: 5umm3r15

fapolicyd.fc

@@ -1,3 +1,7 @@
+/etc/fapolicyd(/.*)?			 gen_context(system_u:object_r:fapolicyd_config_t,s0)
+
+/usr/lib/systemd/system/fapolicyd.*   --	gen_context(system_u:object_r:fapolicyd_unit_file_t,s0)
+
 /usr/sbin/fapolicyd		--	 gen_context(system_u:object_r:fapolicyd_exec_t,s0)
 
 /var/lib/fapolicyd(/.*)?		 gen_context(system_u:object_r:fapolicyd_var_lib_t,s0)

fapolicyd.te

@@ -9,12 +9,19 @@ type fapolicyd_t;
 type fapolicyd_exec_t; 
 init_daemon_domain(fapolicyd_t, fapolicyd_exec_t)
 
+type fapolicyd_config_t;
+files_type(fapolicyd_config_t)
+files_ro_base_file(fapolicyd_config_t)
+
 type fapolicyd_var_lib_t;
 files_type(fapolicyd_var_lib_t)
 
 type fapolicyd_log_t;
 logging_log_file(fapolicyd_log_t)
 
+type fapolicyd_unit_file_t;
+systemd_unit_file(fapolicyd_unit_file_t)
+
 type fapolicyd_var_run_t;
 files_pid_file(fapolicyd_var_run_t)
 
@@ -47,6 +54,8 @@ kernel_dgram_send(fapolicyd_t)
 
 auth_read_passwd(fapolicyd_t)
 
+corecmd_exec_bin(fapolicyd_t)
+
 domain_read_all_domains_state(fapolicyd_t)
 
 files_mmap_usr_files(fapolicyd_t)