c2e709e
- Add labeling for /root/.debug - Remove permissive from cmirrord domain - Dontaudit cmirrord_t sys_tty_config capability - Allow virtd to read from processes up to its clearance