diff --git a/public/file.te b/public/file.te
index 5a1f1133151dac0d03c8846aa25587ea04d2a76f..bfc670b383287c2cd3e99d14bc955208f583a78c 100644
--- a/public/file.te
+++ b/public/file.te
@@ -320,6 +320,7 @@ type vndservice_contexts_file, file_type;
 
 # Allow files to be created in their appropriate filesystems.
 allow fs_type self:filesystem associate;
+allow cgroup tmpfs:filesystem associate;
 allow sysfs_type sysfs:filesystem associate;
 allow debugfs_type { debugfs debugfs_tracing }:filesystem associate;
 allow file_type labeledfs:filesystem associate;