Jamie Nguyen wrote: > ccs-loadpolicy -df < domain_policy.conf > ccs-loadpolicy -ef < exception_policy.conf > ccs-loadpolicy -p < policy.conf Actually, the above commands don't seem to work. The policy is loaded into kernel memory, but has no effect on the system. Reverting back from systemd solves the issue.