- For some reason chfn tries to stat all devices, dontaudit this
    - On resume, devicekit_power is resetting X using xmodutil, so it needs to talk to the Xserver
    - Allow saslauthd to be able to manipulate afs kernel subsystem at login
    - allow xdm_t to execute content labeled xdm_tmp_t, needed for xdm to be able to run gnome-shell
    - /etc/passwd.adjunct and /etc/passwd.adjunct.old need to be labeled shadow_t