https://sourceforge.net/projects/libcg/files/ Above seems to be the source for the programs listed in policy/modules/ services/cgroup.fc, upstream has no changes since 2014 and the package in Debian doesn't support cgroup2 so is pretty much useless. Is there any reason for not deleting policy/modules/services/cgroup.* from refpolicy? Also as an aside what is the best way of managing cgroups and do we have policy that works with it? -- My Main Blog http://etbe.coker.com.au/ My Documents Blog http://doc.coker.com.au/