I implemented policy for the cgclear command that is part of the libcgroup suite.
You can find the extended cgroup module in my personal repository:
git://217.19.27.98/refpolicy.git
It is still permissive as it needs a bit more scrutiny.
Show replies by date