- Allow xend to create xend_var_log_t directories
    - dontaudit setfiles relabel of /proc /sys caused by named-chroot
    - Add rules for pam_keyinit (setkeycreate, ipc_lock)
    - Allow mount to read unlabeled directorys for reiserfs