Add new ksm domain.

[Dominick Grift]

Attached is ksm module. If virtualization is installed then ksm and
ksmtuned services are enabled by default.

Currently they run in initrc_t. It seems the initrc_t domain has
sufficient permissions for ksm tune daemon.

The policy is not thoroughly tested yet and so i left ksmtuned_t permissive.
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: ksm.fc
URL: <http://listman.redhat.com/archives/fedora-selinux-list/attachments/20091121/e5de09bb/attachment.ksh>
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: ksm.if
URL: <http://listman.redhat.com/archives/fedora-selinux-list/attachments/20091121/e5de09bb/attachment-0001.ksh>
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: ksm.te
URL: <http://listman.redhat.com/archives/fedora-selinux-list/attachments/20091121/e5de09bb/attachment-0002.ksh>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 261 bytes
Desc: OpenPGP digital signature
URL: <http://listman.redhat.com/archives/fedora-selinux-list/attachments/20091121/e5de09bb/attachment.sig>