SELinux blocks swift's access to ephemeral ports

[Richard Su]

These denials are being logged on the overcloud-control node on Fedora 20:

type=AVC msg=audit(1411756364.896:5765): avc: denied { name_connect } for pid=10073 comm="swift-object-se" dest=56420 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:ephemeral_port_t:s0 tclass=tcp_socket
type=AVC msg=audit(1411756391.224:6246): avc: denied { name_connect } for pid=9938 comm="swift-object-re" dest=47392 scontext=system_u:system_r:swift_t:s0 tcontext=system_u:object_r:ephemeral_port_t:s0 tclass=tcp_socket

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/124940

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/124940
Committed: https://git.openstack.org/cgit/openstack/tripleo-image-elements/commit/?id=531841d38d69754dafef7a15098e408c83a0d832
Submitter: Jenkins
Branch: master

commit 531841d38d69754dafef7a15098e408c83a0d832
Author: Richard Su <email address hidden>
Date: Mon Sep 29 18:52:06 2014 -0700

    SELinux: Allow swift access to ephemeral ports

    Enable the swift_can_network SELinux boolean to allow
    swift access to ephemeral ports.

    Change-Id: Ib7289929093f03ad39bb0aaa8e75f7e0842a9f5f
    Closes-Bug: 1375526