- change append patch so that file create to require 'w' perm for now - fix lock mediation so it check lock perm even if the files profile matches - remove uneeded hooks from network mediation and ensure unix domain and netlink sockets are never mediated