# certmonger uses libraries which may want to put temporary files in $TMPDIR,
# but SELinux policy won't let anything running as certmonger_t do that
d /run/certmonger 0755 root root