- A lot of users are running yum -y update while in /root which is causing ldc
    - Allow colord to interact with the users through the tmpfs file system
    - Since we changed the label on deferred, we need to allow postfix_qmgr_t to b
    - Add label for /var/log/mcelog
    - Allow asterisk to read /dev/random if it uses TLS
    - Allow colord to read ini files which are labeled as bin_t
    - Allow dirsrvadmin sys_resource and setrlimit to use ulimit
    - Systemd needs to be able to create sock_files for every label in /var/run di
    - Also lists /var and /var/spool directories
    - Add openl2tpd to l2tpd policy
    - qpidd is reading the sysfs file