type sswap, domain; type sswap_exec, exec_type, file_type, vendor_file_type; type sswap_device, dev_type; init_daemon_domain(sswap); allow sswap sswap_device:blk_file rw_file_perms; allow sswap sysfs_sswap:file rw_file_perms; allow sswap sysfs_sswap:dir search; allow sswap block_device:dir search; allow sswap self:capability sys_admin; allow sswap proc_meminfo:file r_file_perms; allow sswap properties_device:dir r_dir_perms; r_dir_file(sswap, proc_stat); set_prop(sswap, sswap_prop)