- Allow domains to append rkhunter lib files
    - Allow snapperd to getattr on all fs
    - Allow xdm to create /var/gdm with correct labeling
    - Add label for snapper.log
    - Allow fail2ban-client to read apache log files
    - Allow thumb_t to execute dbus-daemon in thumb_t