Manually build selinux module

gistfile1.txt

semodule -DB
....
module allowsnmpdtmp 1.0;

require {
        type system_cronjob_tmp_t;
        type snmpd_t;
        class file { read open ioctl getattr };
}

#============= snmpd_t ==============
allow snmpd_t system_cronjob_tmp_t:file { read open ioctl getattr };
....
checkmodule -M -m -o allowsnmpdtmp.mod allowsnmpdtmp.te
semodule_package -o allowsnmpdtmp.pp -m allowsnmpdtmp.mod
semodule -i allowsnmpdtmp.pp
semodule -B