- nslcd needs setsched and to read /usr/tmp
    - Invalid call in likewise policy ends up creating a bogus role
    - Cannon puts content into /var/lib/bjlib that cups needs to be able to write
    - Allow screen to create screen_home_t in /root
    - dirsrv sends syslog messages
    - pinentry reads stuff in .kde directory
    - Add labels for .kde directory in homedir
    - Treat irpinit, iprupdate, iprdump services with raid policy