use virt_sandbox_use_fusefs instead of a custom policy

Fixes OS-4695 and OS-4491.

magnum/drivers/common/templates/fragments/configure-cvmfs.sh

@@ -12,9 +12,8 @@ chattr +i /
 
 atomic install gitlab-registry.cern.ch/cloud-infrastructure/docker-volume-cvmfs:${CVMFS_TAG:-latest}
 
-# add selinux policy
-docker cp docker-volume-cvmfs:/dockercvmfs.pp /tmp
-semodule -i /tmp/dockercvmfs.pp
+# allow containers to access fuse mounts
+setsebool virt_sandbox_use_fusefs true
 
 # install kubernetes volume plugin
 mkdir -p /var/lib/kubelet/plugins/volume/exec/cern~cvmfs