+- Add label for /var/lib/iscan/interpreter
    +- Dont audit writes to leaked file descriptors or redirected output for nacl
    +- NetworkManager needs to write to /sys/class/net/ib*/mode