Update SELinux policy to support linkerd-cni

[lachlan-smith]

Found some issues with the SELinux policy when trying to chain the Linkerd CNI plugin with Cilium. Determined additional required policy statements by running grep "denied" /var/log/audit/audit.log | audit2allow -M linkerd until no more denied errors logged. Patched in the additional statements to existing SELinux module.

For reference, generated module was:

require {
        type etc_t;
        type container_t;
        class file { create setattr unlink write };
        class dir watch;
}

#============= container_t ==============

#!!!! This avc is allowed in the current policy
allow container_t etc_t:dir watch;

#!!!! This avc is allowed in the current policy
allow container_t etc_t:file { create setattr unlink write };```

[Silvest89]

@mysticaltech

[mysticaltech]

LGTM, thanks @lachlan-smith

[mysticaltech]

@lachlan-smith @Silvest89 Fix released in v2.11.7. Enjoy and don't hesitate to shoot more PRs please, this help is truly appreciate it.