policy_module(patch_initrc_to_allow_cgconf_cgrulesengd_manage_files_on_cgroup_fs, 1.0.0) 

########################################
#
# Declarations
#

optional_policy(`
	gen_require(`
		type initrc_t;
	')

	fs_manage_cgroup_dirs(initrc_t)
	fs_rw_cgroup_files(initrc_t)
	fs_setattr_cgroup_files(initrc_t)

	libcgroup_cgrulesengd_rw_pid_sock_file(initrc_t)
	libcgroup_cgrulesengd_stream_connect(initrc_t)
')