(type openrc_cgroup_release_t)
(roletype object_r openrc_cgroup_release_t)
(type openrc_cgroup_release_exec_t)
(roletype object_r openrc_cgroup_release_exec_t)
(roleattributeset cil_gen_require system_r)
(roletype system_r openrc_cgroup_release_t)
(typeattributeset cil_gen_require domain)
(typeattributeset domain (openrc_cgroup_release_t ))
(typeattributeset cil_gen_require sysfs_t)
(typeattributeset cil_gen_require entry_type)
(typeattributeset entry_type (openrc_cgroup_release_exec_t ))
(typeattributeset cil_gen_require exec_type)
(typeattributeset exec_type (openrc_cgroup_release_exec_t ))
(typeattributeset cil_gen_require file_type)
(typeattributeset file_type (openrc_cgroup_release_exec_t ))
(typeattributeset cil_gen_require non_security_file_type)
(typeattributeset non_security_file_type (openrc_cgroup_release_exec_t ))
(typeattributeset cil_gen_require non_auth_file_type)
(typeattributeset non_auth_file_type (openrc_cgroup_release_exec_t ))
(typeattributeset cil_gen_require kernel_t)
(typeattributeset cil_gen_require proc_t)
(typeattributeset cil_gen_require bin_t)
(typeattributeset cil_gen_require usr_t)
(typeattributeset cil_gen_require shell_exec_t)
(typeattributeset cil_gen_require etc_t)
(typeattributeset cil_gen_require var_t)
(typeattributeset cil_gen_require var_run_t)
(typeattributeset cil_gen_require cgroup_types)
(typeattributeset cil_gen_require tmpfs_t)
(typeattributeset cil_gen_require nsswitch_domain)
(typeattributeset nsswitch_domain (openrc_cgroup_release_t ))
(allow openrc_cgroup_release_t openrc_cgroup_release_exec_t (file (entrypoint)))
(allow openrc_cgroup_release_t openrc_cgroup_release_exec_t (file (ioctl read getattr lock map execute open)))
(allow openrc_cgroup_release_t self (capability (dac_override)))
(allow openrc_cgroup_release_t self (unix_stream_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow kernel_t openrc_cgroup_release_exec_t (file (ioctl read getattr map execute open)))
(allow kernel_t openrc_cgroup_release_t (process (transition)))
(dontaudit kernel_t openrc_cgroup_release_t (process (noatsecure siginh rlimitinh)))
(typetransition kernel_t openrc_cgroup_release_exec_t process openrc_cgroup_release_t)
(allow openrc_cgroup_release_t kernel_t (fd (use)))
(allow openrc_cgroup_release_t kernel_t (fifo_file (ioctl read write getattr lock append)))
(allow openrc_cgroup_release_t kernel_t (process (sigchld)))
(allow openrc_cgroup_release_t proc_t (dir (getattr open search)))
(allow openrc_cgroup_release_t proc_t (file (ioctl read getattr lock open)))
(allow openrc_cgroup_release_t proc_t (dir (getattr open search)))
(allow openrc_cgroup_release_t proc_t (lnk_file (read getattr)))
(allow openrc_cgroup_release_t proc_t (dir (getattr open search)))
(allow openrc_cgroup_release_t proc_t (dir (ioctl read getattr lock open search)))
(allow openrc_cgroup_release_t bin_t (dir (getattr open search)))
(allow openrc_cgroup_release_t bin_t (lnk_file (read getattr)))
(allow openrc_cgroup_release_t usr_t (dir (getattr open search)))
(allow openrc_cgroup_release_t bin_t (dir (getattr open search)))
(allow openrc_cgroup_release_t bin_t (dir (ioctl read getattr lock open search)))
(allow openrc_cgroup_release_t bin_t (file (ioctl read getattr lock map execute open execute_no_trans)))
(allow openrc_cgroup_release_t bin_t (dir (getattr open search)))
(allow openrc_cgroup_release_t bin_t (lnk_file (read getattr)))
(allow openrc_cgroup_release_t usr_t (dir (getattr open search)))
(allow openrc_cgroup_release_t bin_t (dir (getattr open search)))
(allow openrc_cgroup_release_t bin_t (dir (ioctl read getattr lock open search)))
(allow openrc_cgroup_release_t shell_exec_t (file (ioctl read getattr lock map execute open execute_no_trans)))
(allow openrc_cgroup_release_t etc_t (dir (ioctl read getattr lock open search)))
(allow openrc_cgroup_release_t etc_t (dir (getattr open search)))
(allow openrc_cgroup_release_t etc_t (file (ioctl read getattr lock open)))
(allow openrc_cgroup_release_t etc_t (dir (getattr open search)))
(allow openrc_cgroup_release_t etc_t (lnk_file (read getattr)))
(allow openrc_cgroup_release_t var_run_t (lnk_file (read getattr)))
(allow openrc_cgroup_release_t var_t (dir (getattr open search)))
(allow openrc_cgroup_release_t var_run_t (dir (getattr open search)))
(allow openrc_cgroup_release_t cgroup_types (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow openrc_cgroup_release_t cgroup_types (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow openrc_cgroup_release_t sysfs_t (dir (getattr open search)))
(allow openrc_cgroup_release_t sysfs_t (dir (getattr open search)))
(allow openrc_cgroup_release_t cgroup_types (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow openrc_cgroup_release_t cgroup_types (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow openrc_cgroup_release_t sysfs_t (dir (getattr open search)))
(allow openrc_cgroup_release_t sysfs_t (dir (getattr open search)))
(allow openrc_cgroup_release_t tmpfs_t (dir (getattr open search)))
(optional openrc_optional_2
    (typeattributeset cil_gen_require init_t)
    (allow openrc_cgroup_release_t init_t (process (sigchld)))
    (allow openrc_cgroup_release_t init_t (process (signull)))
)
(optional openrc_optional_3
    (typeattributeset cil_gen_require rpm_t)
    (allow openrc_cgroup_release_t rpm_t (fd (use)))
    (allow openrc_cgroup_release_t rpm_t (fifo_file (ioctl read getattr lock open)))
)
(optional openrc_optional_4
    (typeattributeset cil_gen_require security_t)
    (typeattributeset cil_gen_require sysfs_t)
    (dontaudit openrc_cgroup_release_t security_t (filesystem (getattr)))
    (dontaudit openrc_cgroup_release_t sysfs_t (filesystem (getattr)))
    (dontaudit openrc_cgroup_release_t sysfs_t (dir (getattr open search)))
    (dontaudit openrc_cgroup_release_t security_t (dir (getattr open search)))
    (dontaudit openrc_cgroup_release_t security_t (file (ioctl read getattr lock open)))
)
(optional openrc_optional_5
    (typeattributeset cil_gen_require selinux_config_t)
    (dontaudit openrc_cgroup_release_t selinux_config_t (dir (getattr open search)))
    (dontaudit openrc_cgroup_release_t selinux_config_t (file (ioctl read getattr lock open)))
)
(filecon "/usr/lib/rc/sh/cgroup-release-agent\.sh" file (system_u object_r openrc_cgroup_release_exec_t (systemlow systemlow)))
