Prelink patch from Dan Walsh.
    
    Prelink has new directory under /var/lib
    
    dontaudit leaks from domains that transition
    
    cron job looks at all mount points.