By the way, there are several sets of rules for the same processes. So when inspecting rules, you need to always look which "user" you are inspecting.
There is a set of rules for "system". Those rules are generally more lenient than the rules for a regular user, and it is best not to mess with system rules, in order not to break things.
