tweak: add yet another selinux rule.. lvm_var_run_t:dir search and self:capability sys_admin