policy_module(java_additional, 0.0.1) require { type java_t; } fs_read_cgroup_files(java_t) fs_search_cgroup_dirs(java_t)