mon network monitoring daemon.
dontaudit searching /var/lib/mon
Domain to not audit
dontaudit using an inherited fd from mon_t