- Fixes for sandbox policy
    - Add setuid capability for vpnc
    - Allow sandbox to run on nfs partitions
    - Allow domains that transition to ping or traceroute, kill them
    - Allow user_t to conditionally transition to ping_t and traceroute_t