Support for cgroup restrictions
SELinux policy for cgroup settings