Comment 4 for bug 647664

This 'fix' for this is to move "/usr/lib" (and probably "/usr/share/") from restricted[] in src/security/virt-aa-helper.c:valid_path() to restricted_rw[]. I'm not sure this is generally desirable and want to think about it more.