systemd-homework: move optional policy to end of block

Signed-off-by: Rahul Sandhu <[email protected]>

policy/modules/system/systemd.te

@@ -750,12 +750,6 @@ files_home_filetrans(systemd_homework_t, systemd_homed_storage_t, file)
 
 allow systemd_homework_t systemd_homed_tmpfs_t:file rw_inherited_file_perms;
 
-# setup luks backed home directories in /run/cryptsetup
-optional_policy(`
-	lvm_manage_runtime_files(systemd_homework_t)
-	lvm_manage_runtime_dirs(systemd_homework_t)
-')
-
 dev_rw_loop_control(systemd_homework_t)
 dev_read_rand(systemd_homework_t)
 dev_read_urand(systemd_homework_t)
@@ -792,6 +786,12 @@ systemd_log_parse_environment(systemd_homework_t)
 
 udev_read_runtime_files(systemd_homework_t)
 
+# setup luks backed home directories in /run/cryptsetup
+optional_policy(`
+	lvm_manage_runtime_files(systemd_homework_t)
+	lvm_manage_runtime_dirs(systemd_homework_t)
+')
+
 #######################################
 #
 # Hostnamed policy