MongoDB用のType Enforcementファイルの作成例(sysctl_fs_t用)。

mongodb_sysctl_fs.te

module mongodb_sysctl_fs 1.0;

require {
        type mongod_t;
        type sysctl_fs_t;
        class dir search;
        class file { getattr read open };
}

#============= mongod_t ==============
allow mongod_t sysctl_fs_t:dir search;
allow mongod_t sysctl_fs_t:file { getattr read open };