Description of problem:
wg-quick@.service fails if endpoint contains dns name

Version-Release number of selected component (if applicable):
1.0.20210914

How reproducible:
Attempt to start the wg-quick@.service using a configuration file containing a peer with an Endpoint = <dns-name>:port with SELinux enforcing and with SELinux permissive.

wg-quick@.service fails with "Name or service not known: '<dns-name>:51820'"

Initial selinux issues worked around with the following policy but no further audit log denial entries appear.

require {
        type net_conf_t;
        type wireguard_t;
        class udp_socket { connect create getattr setopt };
        class file { getattr open read };
}

#============= wireguard_t ==============

#!!!! This avc is allowed in the current policy
allow wireguard_t net_conf_t:file { getattr open read };

#!!!! This avc is allowed in the current policy
allow wireguard_t self:udp_socket { connect create setopt };
allow wireguard_t self:udp_socket getattr;

Steps to Reproduce:
1. Create wg-quick configuration file, wg0.conf, with Peer section containing `Endpoint = <dns-name>:port`
2. systemctl start wg-quick

Actual results:
Service fails to start.  Logs show error "Name or service not known" 

Expected results:
Service starts successfully.

Additional info:
'setenforce 0' allows the service to start successfully.  Additionally, manual calls of wg-quick up <conf-file> work with and without selinux in enforcing mode.  Failure is only observed in systemd service.