Description of problem:
pcp-pmda-named uses /usr/sbin/rndc to get data from named.
Unfortunately when pcp-pmda-named executes /usr/sbin/rndc the execution fails due to a missing SELinux rules allowing the execution of rndc.


Version-Release number of selected component (if applicable):
pcp-5.0.2-5.el8
selinux-policy-3.14.3-41.el8
pcp-selinux-5.0.2-5.el8
pcp-pmda-named-5.0.2-5.el8


How reproducible:
Always

Steps to Reproduce:
1. Install pcp with pcp-pmda-named
2. Install bind, bind-chroot, caching-nameserver, bind-utils packages
3. Configure bind as a caching nameserver
4. Start PCP as well as bind
5. Use i.e. "dig @127.0.0.1" to query DNS

Actual results:
Output of "audit2allow -a" shows:
<stdout>
#============= pcp_pmcd_t ==============
allow pcp_pmcd_t ndc_exec_t:file execute;
allow pcp_pmcd_t ndc_exec_t:file execute_no_trans;
</stdout>

# grep 'type=AVC ' /var/log/audit/audit.log
type=AVC msg=audit(1586150510.119:1454): avc:  denied  { execute_no_trans } for  pid=30473 comm="perl" path="/usr/sbin/rndc" dev="vda1" ino=7449669 scontext=system_u:system_r:pcp_pmcd_t:s0 tcontext=system_u:object_r:ndc_exec_t:s0 tclass=file permissive=0
type=AVC msg=audit(1586150510.120:1455) : avc:  denied  { execute } for  pid=30473 comm=perl name=rndc dev="vda1" ino=7449669 scontext=system_u:system_r:pcp_pmcd_t:s0 tcontext=system_u:object_r:ndc_exec_t:s0 tclass=file permissive=0 


Expected results:
Output of "audit2allow -a" should be empty.
No AVC records in "/var/log/audit/audit.log".

Additional info:
This is RHEL-8.2 clone of BZ1749870 and BZ1821122.