typeattribute fsck coredomain; init_daemon_domain(fsck) allow fsck metadata_block_device:blk_file rw_file_perms;