Changes to qgs.service to make it more amenable to writing a strict
SELinux policy.
Also add patch to allow control over socket perms so QEMU can get
access to the socket.
Related: https://issues.redhat.com/browse/RHELPLAN-171791
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
