pp | tee mypegasus.cil (roleattributeset cil_gen_require system_r) (typeattributeset cil_gen_require certmonger_t) (typeattributeset cil_gen_require pegasus_conf_t) (allow certmonger_t pegasus_conf_t (file (ioctl read getattr lock open)))