changes to the guest policy module
Ported from Fedora with changes
We should probably modify userdom_login_user_template() instead to allow
all login users to read system state files
We might want to make the apache_role() conditional
Signed-off-by: Dominick Grift <dominick.grift@gmail.com>