policycoreutils: sandbox: add -C option to not drop

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

This patch looks good to me. acked.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk5WtJQACgkQrlYvE4MpobMPQACgmVrhXNB27FVhon99oFab+JWy rAUAoIvk33x3f8Cf2Gz/O5lWH/GaKLhc
=WApq
-----END PGP SIGNATURE-----