884a4ca
Tighten security on thumb_t, only allow it to rread /etc/passwd, not all of nsswitch. Dontaudit setattr on user_tmp_t files