Add support for open-vm-tools

[dsugar100]

node=localhost type=AVC msg=audit(1732592552.733:8660): avc: denied { create } for pid=1006 comm="vmtoolsd" scontext=system_u:system_r:initrc_t:s0 tcontext=system_u:system_r:initrc_t:s0 tclass=vsock_socket permissive=0
node=localhost type=AVC msg=audit(1732592232.142:477): avc: denied { create } for pid=1005 comm="VGAuthService" scontext=system_u:system_r:initrc_t:s0 tcontext=system_u:system_r:initrc_t:s0 tclass=vsock_socket permissive=0
node=localhost type=AVC msg=audit(1732592232.516:506): avc: denied { read write } for pid=1006 comm="vmtoolsd" name="card0" dev="devtmpfs" ino=275 scontext=system_u:system_r:initrc_t:s0 tcontext=system_u:object_r:dri_device_t:s0 tclass=chr_file permissive=0
node=localhost type=AVC msg=audit(1732592232.194:479): avc: denied { create } for pid=1005 comm="VGAuthService" name="vmware" scontext=system_u:system_r:initrc_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=0

[pebenito]

Check name: PRIVILEGE-CAP_NET_ADMIN

Description: Verify only expected domains can use CAP_NET_ADMIN.

    * allow vmware_tools_t vmware_tools_t:capability { net_admin net_bind_service sys_admin sys_time };

Check FAILED

[dsugar100]

Thanks for sharing that, I wasn't seeing it in the automated tests, is there something else that I need to look at?