Mysql can execute scripts when run in a cluster to see if someone is listening on a socket, basically runs lsof.  Cluster team found it needed these access to make it work
Allow nova domains to getattr on all filesystems.