Description of problem:
OpenStack with packstack on centos and neutron was not able to function properly due to:
 /var/log/neutron/dhcp-agent.log:2016-07-03 13:20:04.605 1600 ERROR neutron.agent.linux.dhcp RuntimeError: Exit code: 1
; Stdin: ; Stdout: ; Stderr: open("/proc/self/ns/net"): Permission denied

Version-Release number of selected component (if applicable):
Package openstack-selinux-0.7.2-1.el7.noarch 

How reproducible:
Every time. 

Steps to Reproduce:
Installed packstack following RDO instructions on AArch64.

Used the following repo for AArch64:
http://people.linaro.org/~marcin.juszkiewicz/centos7/openstack-mitaka/

Actual results:Neutron was not allowed to access /proc/self/ns/net

Expected Results: Neutron should be allowed to access /proc/self/ns/net


Additional info:
After adding the following rules the error went away:
# cat neutron_fix_read.te  

module neutron_fix_read 1.0;

require {
        type unlabeled_t;
        type neutron_t;
        type proc_net_t;
        class file { read open };
}

#============= neutron_t ==============
allow neutron_t unlabeled_t:file open;
allow neutron_t unlabeled_t:file read;

allow neutron_t proc_net_t:file open;
allow neutron_t proc_net_t:file read;