gentoo: Add gentoo-specific rules to sechecker config

Signed-off-by: Jason Zaman <perfinion@gentoo.org>

Author: perfinion

testing/sechecker.ini

@@ -39,6 +39,7 @@ desc = Verify only expected domains can change SELinux to permissive mode.
 tclass = security
 perms = setenforce
 exempt_source = cloud_init_t        # VM configuration on initial boot
+                initrc_t
                 secadm_t            # Security admin role
                 sysadm_t            # System admin role
 
@@ -136,8 +137,10 @@ exempt_source = acpi_t
                 plymouthd_t
                 podman_t
                 podman_user_t
+                portage_t
                 postgresql_t
                 pppd_t
+                qemu_ga_t
                 quota_t             # Configure filesystem quotas
                 remote_login_t      # Conditional access (allow_polyinstantiation)
                 resmgrd_t
@@ -295,6 +298,7 @@ exempt_source = arpwatch_t
                 pegasus_t
                 podman_t
                 podman_user_t
+                portage_t
                 portslave_t
                 pppd_t
                 pptp_t
@@ -311,6 +315,7 @@ exempt_source = arpwatch_t
                 sosreport_t
                 spc_t
                 squid_t             # Conditional access (squid_use_tproxy)
+                ss_t
                 sssd_t
                 sysadm_t
                 syslogd_t           # Conditional network config (logging_syslog_can_network)