# berkeley process accounting
/sbin/accton -- system_u:object_r:acct_exec_t
/usr/sbin/accton -- system_u:object_r:acct_exec_t
/var/account(/.*)? system_u:object_r:acct_data_t
/etc/cron\.(daily|monthly)/acct -- system_u:object_r:acct_exec_t