cgroup policy

[Dominick Grift]

I implemented policy for the cgclear command that is part of the libcgroup suite.
You can find the extended cgroup module in my personal repository:

git://217.19.27.98/refpolicy.git

It is still permissive as it needs a bit more scrutiny.