Remove allow_ptrace and replace it with deny_ptrace, which will remove all
    ptrace from the system
    Remove 2000 dontaudit rules between confined domains on transition
    and replace with single
    dontaudit domain domain:process { noatsecure siginh rlimitinh } ;