6 <!-- The exec label is needed because the agent is ran
7 directly by the kernel, not resourced. Since the
8 kernel doesn't have any SMACK label on its own,
9 such processes get the default SMACK label which
10 doesn't confer the needed privilege. -->
11 <filesystem path="/usr/bin/resourced-watchdog-handler" label="System" exec_label="System"/>