- Add /var/run/lock /var/lock definition to file_contexts.subs
    - nslcd_t is looking for kerberos cc files
    - SSH_USE_STRONG_RNG is 1 which requires /dev/random
    - Fix auth_rw_faillog definition
    - Allow sysadm_t to set attributes on fixed disks
    - allow user domains to execute lsof and look at application sockets
    - prelink_cron job calls telinit -u if init is rewritten
    - Fixes to run qemu_t from staff_t