module my-chmod 1.0; require { type httpd_sys_content_t; type httpd_sys_script_t; class file setattr; } #============= httpd_sys_script_t ============== #!!!! This avc can be allowed using the boolean 'httpd_unified' allow httpd_sys_script_t httpd_sys_content_t:file setattr;