1 type irqbalance, domain; 2 type irqbalance_exec, exec_type, file_type; 3 4 init_daemon_domain(irqbalance); 5 6 allow irqbalance self:capability { setgid setuid }; 7 8 allow irqbalance sysfs_devices_system_cpu:file rw_file_perms; 9 allow irqbalance proc_irq:dir r_dir_perms; 10 allow irqbalance proc_irq:file rw_file_perms; 11 12 r_dir_file(irqbalance, proc)