- Allow colord to use unix_dgram_socket
    - Allow apps that search pids to read /var/run if it is a lnk_file
    - iscsid_t creates its own directory
    - Allow init to list var_lock_t dir
    - apm needs to verify user accounts auth_use_nsswitch