fill in: iptables
fill in: kmod
    lib_search is redundant if lib.cil is installed (i suppose file_search_etc and file_search_usr as well but not if lib.cil is not installed)