~# chown 0.0 /etc/dnsmasq.conf
~# chmod 0644 /etc/dnsmasq.conf
~# chcon u:object_r:system_file:s0 /etc/dnsmasq.conf

allow dnsmasq system_file file { read getattr open }
allow dnsmasq system_file dir { search }