# Support asec containers getting mounted
allow file_type rootfs:filesystem associate;