Beginning to break out hal policy into it's helper apps.  So hald_mac is 
the only  domain that needs to write to  /dev/shm and hald_acl  needs 
dac overrides.