- Allow smbd sys_admin capability
    - Allow certmonger to search through directories that contain certs
    - Allow fail2ban the DAC Override so it can read log files owned by non root users
    - Allow boinc_project to use shm
    - Alllow vpnc to be able to read /root/.cert
    - Add mediawiki policy