various
    add/remove watch with auditctl
    fix some trivial bugs
systemctl
    i suspect these are related to fss (sealing)
systemd: listing /run/log or /var/log/journal
moc reading terminfo files