- Allow setroubleshoot_fixit to execute rpm
    - zoneminder needs to connect to httpd ports where remote cameras are listening
    - Allow firewalld to execute content created in /run directory
    - Allow svirt_t to read generic certs
    - Dontaudit leaked ps content to mozilla plugin
    - Allow sshd_t sys_admin for use with afs logins
    - Allow systemd to read/write all sysctls
    - init scripts are creating systemd_unit_file_t directories