no_files_unowned_by_user needs to be tightened down

[Jeremiah Jahn]

It currently includes /proc in which nothing seems to be owned by anyone.

path                        type             UID GID size permissions
/proc/16815/ns/pid symbolic link 0 0 0 rwxrwxrwx
/proc/16815/net/ip_tables_targets regular 0 0 0 r--r-----