- gpg_t needs to talk to gnome-keyring
    - nscd wants to read /usr/tmp->/var/tmp to generate randomziation in unixchkpwd
    - enforce MCS labeling on nodes
    - Allow arpwatch to read meminfo
    - Allow gnomeclock to send itself signals
    - init relabels /dev/.udev files on boot
    - gkeyringd has to transition back to staff_t when it runs commands in bin_t or shell_
    - nautilus checks access on /media directory before mounting usb sticks, dontaudit acc
    - dnsmasq can run as a dbus service, needs acquire service
    - mysql_admin should  be allowed to connect to mysql service
    - virt creates monitor sockets in the users home dir