todo: systemd and pid files
readahead
    these where added in an attempt to make readahead-collect, replay not exit with an error
    the rules were taken from fedora since i was not able to audit them myself (no avc deniaks)

    these rules do not fix the issue (there might be more needed)
various
    binfmt files
    readhead mainntains /run/systemd/readahead
alsactl reads mislabeled /dev/snd/Control.* early
readahead
    the systemd_stream_connect() seems to have fixed this
    there are still some unconfirmed fedora rules present
    but they arent that harmful (see git blame)