gentoo-selinux-policies/apache_additional.te

policy_module(apache_additional, 0.0.5)

require {
  type httpd_t;
  type usr_t;
  type httpd_sys_content_t;
  type httpd_initrc_exec_t;
  type zero_device_t;
}

apache_manage_sys_content(httpd_t)

allow httpd_t usr_t:file map;
allow httpd_t httpd_sys_content_t:file map;
allow httpd_t zero_device_t:chr_file map;