(sensitivity s0)
(sensitivityorder (s0))
(level systemlow (s0))
(role object_r)
(typeattribute cil_gen_require)
(roleattribute cil_gen_require)
(handleunknown allow)
(mls false)
(policycap network_peer_controls)
(policycap open_perms)
(policycap extended_socket_class)
(policycap cgroup_seclabel)
(policycap nnp_nosuid_transition)
(sid devnull)
(sidcontext devnull (system_u object_r null_device_t (systemlow systemlow)))
(sid UNKNOWN26)
(sidcontext UNKNOWN26 (system_u object_r unlabeled_t (systemlow systemlow)))
(sid UNKNOWN25)
(sidcontext UNKNOWN25 (system_u object_r unlabeled_t (systemlow systemlow)))
(sid UNKNOWN24)
(sidcontext UNKNOWN24 (system_u object_r unlabeled_t (systemlow systemlow)))
(sid UNKNOWN23)
(sidcontext UNKNOWN23 (system_u object_r unlabeled_t (systemlow systemlow)))
(sid UNKNOWN22)
(sidcontext UNKNOWN22 (system_u object_r unlabeled_t (systemlow systemlow)))
(sid UNKNOWN21)
(sidcontext UNKNOWN21 (system_u object_r unlabeled_t (systemlow systemlow)))
(sid UNKNOWN20)
(sidcontext UNKNOWN20 (system_u object_r unlabeled_t (systemlow systemlow)))
(sid UNKNOWN19)
(sidcontext UNKNOWN19 (system_u object_r unlabeled_t (systemlow systemlow)))
(sid UNKNOWN18)
(sidcontext UNKNOWN18 (system_u object_r unlabeled_t (systemlow systemlow)))
(sid UNKNOWN17)
(sidcontext UNKNOWN17 (system_u object_r sysctl_t (systemlow systemlow)))
(sid UNKNOWN16)
(sidcontext UNKNOWN16 (system_u object_r unlabeled_t (systemlow systemlow)))
(sid UNKNOWN15)
(sidcontext UNKNOWN15 (system_u object_r unlabeled_t (systemlow systemlow)))
(sid UNKNOWN14)
(sidcontext UNKNOWN14 (system_u object_r unlabeled_t (systemlow systemlow)))
(sid UNKNOWN13)
(sidcontext UNKNOWN13 (system_u object_r unlabeled_t (systemlow systemlow)))
(sid node)
(sidcontext node (system_u object_r node_t (systemlow systemlow)))
(sid netmsg)
(sidcontext netmsg (system_u object_r netlabel_peer_t (systemlow systemlow)))
(sid netif)
(sidcontext netif (system_u object_r netif_t (systemlow systemlow)))
(sid port)
(sidcontext port (system_u object_r port_t (systemlow systemlow)))
(sid any_socket)
(sidcontext any_socket (system_u object_r unlabeled_t (systemlow systemlow)))
(sid init)
(sidcontext init (system_u object_r unlabeled_t (systemlow systemlow)))
(sid UNKNOWN6)
(sidcontext UNKNOWN6 (system_u object_r unlabeled_t (systemlow systemlow)))
(sid file)
(sidcontext file (system_u object_r unlabeled_t (systemlow systemlow)))
(sid UNKNOWN4)
(sidcontext UNKNOWN4 (system_u object_r fs_t (systemlow systemlow)))
(sid unlabeled)
(sidcontext unlabeled (system_u object_r unlabeled_t (systemlow systemlow)))
(sid security)
(sidcontext security (system_u object_r security_t (systemlow systemlow)))
(sid kernel)
(sidcontext kernel (system_u system_r kernel_t (systemlow systemlow)))
(sidorder (kernel security unlabeled UNKNOWN4 file UNKNOWN6 init any_socket port netif netmsg node UNKNOWN13 UNKNOWN14 UNKNOWN15 UNKNOWN16 UNKNOWN17 UNKNOWN18 UNKNOWN19 UNKNOWN20 UNKNOWN21 UNKNOWN22 UNKNOWN23 UNKNOWN24 UNKNOWN25 UNKNOWN26 devnull ))
(portcon tcp 5037 (system_u object_r adb_port_t (systemlow systemlow)))
(portcon udp 7007 (system_u object_r afs_bos_port_t (systemlow systemlow)))
(portcon tcp 2040 (system_u object_r afs_fs_port_t (systemlow systemlow)))
(portcon udp 7000 (system_u object_r afs_fs_port_t (systemlow systemlow)))
(portcon udp 7005 (system_u object_r afs_fs_port_t (systemlow systemlow)))
(portcon udp 7004 (system_u object_r afs_ka_port_t (systemlow systemlow)))
(portcon udp 7002 (system_u object_r afs_pt_port_t (systemlow systemlow)))
(portcon udp 7003 (system_u object_r afs_vl_port_t (systemlow systemlow)))
(portcon tcp 7001 (system_u object_r afs3_callback_port_t (systemlow systemlow)))
(portcon udp 7001 (system_u object_r afs3_callback_port_t (systemlow systemlow)))
(portcon udp 705 (system_u object_r agentx_port_t (systemlow systemlow)))
(portcon tcp 705 (system_u object_r agentx_port_t (systemlow systemlow)))
(portcon udp (10080 10082) (system_u object_r amanda_port_t (systemlow systemlow)))
(portcon tcp (10080 10083) (system_u object_r amanda_port_t (systemlow systemlow)))
(portcon tcp 10024 (system_u object_r amavisd_recv_port_t (systemlow systemlow)))
(portcon tcp 10025 (system_u object_r amavisd_send_port_t (systemlow systemlow)))
(portcon udp (5671 5672) (system_u object_r amqp_port_t (systemlow systemlow)))
(portcon tcp (5671 5672) (system_u object_r amqp_port_t (systemlow systemlow)))
(portcon udp (5190 5193) (system_u object_r aol_port_t (systemlow systemlow)))
(portcon tcp (5190 5193) (system_u object_r aol_port_t (systemlow systemlow)))
(portcon tcp 3551 (system_u object_r apcupsd_port_t (systemlow systemlow)))
(portcon udp 3551 (system_u object_r apcupsd_port_t (systemlow systemlow)))
(portcon tcp 539 (system_u object_r apertus_ldp_port_t (systemlow systemlow)))
(portcon udp 539 (system_u object_r apertus_ldp_port_t (systemlow systemlow)))
(portcon tcp 3142 (system_u object_r aptcacher_port_t (systemlow systemlow)))
(portcon tcp 9292 (system_u object_r armtechdaemon_port_t (systemlow systemlow)))
(portcon udp 9292 (system_u object_r armtechdaemon_port_t (systemlow systemlow)))
(portcon tcp 1720 (system_u object_r asterisk_port_t (systemlow systemlow)))
(portcon udp 2427 (system_u object_r asterisk_port_t (systemlow systemlow)))
(portcon udp 2727 (system_u object_r asterisk_port_t (systemlow systemlow)))
(portcon udp 4569 (system_u object_r asterisk_port_t (systemlow systemlow)))
(portcon tcp 60 (system_u object_r audit_port_t (systemlow systemlow)))
(portcon tcp 113 (system_u object_r auth_port_t (systemlow systemlow)))
(portcon tcp 179 (system_u object_r bgp_port_t (systemlow systemlow)))
(portcon udp 179 (system_u object_r bgp_port_t (systemlow systemlow)))
(portcon tcp 2605 (system_u object_r bgp_port_t (systemlow systemlow)))
(portcon udp 2605 (system_u object_r bgp_port_t (systemlow systemlow)))
(portcon tcp 8332 (system_u object_r bitcoin_port_t (systemlow systemlow)))
(portcon tcp 8333 (system_u object_r bitcoin_port_t (systemlow systemlow)))
(portcon tcp 31416 (system_u object_r boinc_port_t (systemlow systemlow)))
(portcon tcp 1043 (system_u object_r boinc_client_port_t (systemlow systemlow)))
(portcon udp 1034 (system_u object_r boinc_client_port_t (systemlow systemlow)))
(portcon tcp 51235 (system_u object_r certmaster_port_t (systemlow systemlow)))
(portcon udp 323 (system_u object_r chronyd_port_t (systemlow systemlow)))
(portcon tcp 3310 (system_u object_r clamd_port_t (systemlow systemlow)))
(portcon udp 4041 (system_u object_r clockspeed_port_t (systemlow systemlow)))
(portcon tcp 5149 (system_u object_r cluster_port_t (systemlow systemlow)))
(portcon udp 5149 (system_u object_r cluster_port_t (systemlow systemlow)))
(portcon tcp 40040 (system_u object_r cluster_port_t (systemlow systemlow)))
(portcon tcp (50006 50008) (system_u object_r cluster_port_t (systemlow systemlow)))
(portcon udp (50006 50008) (system_u object_r cluster_port_t (systemlow systemlow)))
(portcon tcp 1050 (system_u object_r cma_port_t (systemlow systemlow)))
(portcon udp 1050 (system_u object_r cma_port_t (systemlow systemlow)))
(portcon tcp 25151 (system_u object_r cobbler_port_t (systemlow systemlow)))
(portcon tcp 5001 (system_u object_r commplex_link_port_t (systemlow systemlow)))
(portcon udp 5001 (system_u object_r commplex_link_port_t (systemlow systemlow)))
(portcon tcp 5000 (system_u object_r commplex_main_port_t (systemlow systemlow)))
(portcon udp 5000 (system_u object_r commplex_main_port_t (systemlow systemlow)))
(portcon udp 512 (system_u object_r comsat_port_t (systemlow systemlow)))
(portcon tcp 9618 (system_u object_r condor_port_t (systemlow systemlow)))
(portcon udp 9618 (system_u object_r condor_port_t (systemlow systemlow)))
(portcon tcp 5984 (system_u object_r couchdb_port_t (systemlow systemlow)))
(portcon udp 5984 (system_u object_r couchdb_port_t (systemlow systemlow)))
(portcon tcp 9000 (system_u object_r cslistener_port_t (systemlow systemlow)))
(portcon udp 9000 (system_u object_r cslistener_port_t (systemlow systemlow)))
(portcon tcp 4379 (system_u object_r ctdb_port_t (systemlow systemlow)))
(portcon udp 4397 (system_u object_r ctdb_port_t (systemlow systemlow)))
(portcon tcp 2401 (system_u object_r cvs_port_t (systemlow systemlow)))
(portcon udp 2401 (system_u object_r cvs_port_t (systemlow systemlow)))
(portcon tcp 6767 (system_u object_r cyphesis_port_t (systemlow systemlow)))
(portcon tcp 6769 (system_u object_r cyphesis_port_t (systemlow systemlow)))
(portcon tcp (6780 6799) (system_u object_r cyphesis_port_t (systemlow systemlow)))
(portcon udp 32771 (system_u object_r cyphesis_port_t (systemlow systemlow)))
(portcon tcp 3689 (system_u object_r daap_port_t (systemlow systemlow)))
(portcon udp 3689 (system_u object_r daap_port_t (systemlow systemlow)))
(portcon tcp 1178 (system_u object_r dbskkd_port_t (systemlow systemlow)))
(portcon udp 6276 (system_u object_r dcc_port_t (systemlow systemlow)))
(portcon udp 6277 (system_u object_r dcc_port_t (systemlow systemlow)))
(portcon tcp 5679 (system_u object_r dccm_port_t (systemlow systemlow)))
(portcon udp 5679 (system_u object_r dccm_port_t (systemlow systemlow)))
(portcon udp 68 (system_u object_r dhcpc_port_t (systemlow systemlow)))
(portcon tcp 68 (system_u object_r dhcpc_port_t (systemlow systemlow)))
(portcon udp 546 (system_u object_r dhcpc_port_t (systemlow systemlow)))
(portcon tcp 546 (system_u object_r dhcpc_port_t (systemlow systemlow)))
(portcon udp 5546 (system_u object_r dhcpc_port_t (systemlow systemlow)))
(portcon tcp 5546 (system_u object_r dhcpc_port_t (systemlow systemlow)))
(portcon udp 67 (system_u object_r dhcpd_port_t (systemlow systemlow)))
(portcon udp 547 (system_u object_r dhcpd_port_t (systemlow systemlow)))
(portcon tcp 547 (system_u object_r dhcpd_port_t (systemlow systemlow)))
(portcon udp 548 (system_u object_r dhcpd_port_t (systemlow systemlow)))
(portcon tcp 548 (system_u object_r dhcpd_port_t (systemlow systemlow)))
(portcon tcp 647 (system_u object_r dhcpd_port_t (systemlow systemlow)))
(portcon udp 647 (system_u object_r dhcpd_port_t (systemlow systemlow)))
(portcon tcp 847 (system_u object_r dhcpd_port_t (systemlow systemlow)))
(portcon udp 847 (system_u object_r dhcpd_port_t (systemlow systemlow)))
(portcon tcp 7911 (system_u object_r dhcpd_port_t (systemlow systemlow)))
(portcon tcp 2628 (system_u object_r dict_port_t (systemlow systemlow)))
(portcon tcp 3632 (system_u object_r distccd_port_t (systemlow systemlow)))
(portcon tcp 53 (system_u object_r dns_port_t (systemlow systemlow)))
(portcon udp 53 (system_u object_r dns_port_t (systemlow systemlow)))
(portcon tcp 853 (system_u object_r dns_port_t (systemlow systemlow)))
(portcon tcp 17500 (system_u object_r dropbox_port_t (systemlow systemlow)))
(portcon udp 17500 (system_u object_r dropbox_port_t (systemlow systemlow)))
(portcon tcp 520 (system_u object_r efs_port_t (systemlow systemlow)))
(portcon tcp 3198 (system_u object_r embrace_dp_c_port_t (systemlow systemlow)))
(portcon udp 3198 (system_u object_r embrace_dp_c_port_t (systemlow systemlow)))
(portcon tcp 135 (system_u object_r epmap_port_t (systemlow systemlow)))
(portcon udp 135 (system_u object_r epmap_port_t (systemlow systemlow)))
(portcon tcp 4369 (system_u object_r epmd_port_t (systemlow systemlow)))
(portcon udp 4369 (system_u object_r epmd_port_t (systemlow systemlow)))
(portcon tcp 79 (system_u object_r fingerd_port_t (systemlow systemlow)))
(portcon tcp 21 (system_u object_r ftp_port_t (systemlow systemlow)))
(portcon tcp 990 (system_u object_r ftp_port_t (systemlow systemlow)))
(portcon udp 990 (system_u object_r ftp_port_t (systemlow systemlow)))
(portcon tcp 20 (system_u object_r ftp_data_port_t (systemlow systemlow)))
(portcon udp 1718 (system_u object_r gatekeeper_port_t (systemlow systemlow)))
(portcon udp 1719 (system_u object_r gatekeeper_port_t (systemlow systemlow)))
(portcon tcp 1721 (system_u object_r gatekeeper_port_t (systemlow systemlow)))
(portcon tcp 7000 (system_u object_r gatekeeper_port_t (systemlow systemlow)))
(portcon tcp 538 (system_u object_r gdomap_port_t (systemlow systemlow)))
(portcon udp 538 (system_u object_r gdomap_port_t (systemlow systemlow)))
(portcon tcp 3050 (system_u object_r gds_db_port_t (systemlow systemlow)))
(portcon udp 3050 (system_u object_r gds_db_port_t (systemlow systemlow)))
(portcon tcp 9418 (system_u object_r git_port_t (systemlow systemlow)))
(portcon udp 9418 (system_u object_r git_port_t (systemlow systemlow)))
(portcon tcp 9191 (system_u object_r glance_registry_port_t (systemlow systemlow)))
(portcon udp 9191 (system_u object_r glance_registry_port_t (systemlow systemlow)))
(portcon tcp 24007 (system_u object_r glusterd_port_t (systemlow systemlow)))
(portcon tcp 24009 (system_u object_r glusterd_port_t (systemlow systemlow)))
(portcon tcp 70 (system_u object_r gopher_port_t (systemlow systemlow)))
(portcon udp 70 (system_u object_r gopher_port_t (systemlow systemlow)))
(portcon tcp 2947 (system_u object_r gpsd_port_t (systemlow systemlow)))
(portcon tcp 50010 (system_u object_r hadoop_datanode_port_t (systemlow systemlow)))
(portcon tcp 8020 (system_u object_r hadoop_namenode_port_t (systemlow systemlow)))
(portcon tcp 7634 (system_u object_r hddtemp_port_t (systemlow systemlow)))
(portcon tcp 5335 (system_u object_r howl_port_t (systemlow systemlow)))
(portcon udp 5353 (system_u object_r howl_port_t (systemlow systemlow)))
(portcon tcp 1782 (system_u object_r hplip_port_t (systemlow systemlow)))
(portcon tcp 2207 (system_u object_r hplip_port_t (systemlow systemlow)))
(portcon tcp 2208 (system_u object_r hplip_port_t (systemlow systemlow)))
(portcon tcp 8290 (system_u object_r hplip_port_t (systemlow systemlow)))
(portcon tcp 50000 (system_u object_r hplip_port_t (systemlow systemlow)))
(portcon tcp 50002 (system_u object_r hplip_port_t (systemlow systemlow)))
(portcon tcp 8292 (system_u object_r hplip_port_t (systemlow systemlow)))
(portcon tcp 9100 (system_u object_r hplip_port_t (systemlow systemlow)))
(portcon tcp 9101 (system_u object_r hplip_port_t (systemlow systemlow)))
(portcon tcp 9102 (system_u object_r hplip_port_t (systemlow systemlow)))
(portcon tcp 9220 (system_u object_r hplip_port_t (systemlow systemlow)))
(portcon tcp 9221 (system_u object_r hplip_port_t (systemlow systemlow)))
(portcon tcp 9222 (system_u object_r hplip_port_t (systemlow systemlow)))
(portcon tcp 9280 (system_u object_r hplip_port_t (systemlow systemlow)))
(portcon tcp 9281 (system_u object_r hplip_port_t (systemlow systemlow)))
(portcon tcp 9282 (system_u object_r hplip_port_t (systemlow systemlow)))
(portcon tcp 9290 (system_u object_r hplip_port_t (systemlow systemlow)))
(portcon tcp 9291 (system_u object_r hplip_port_t (systemlow systemlow)))
(portcon tcp 80 (system_u object_r http_port_t (systemlow systemlow)))
(portcon tcp 443 (system_u object_r http_port_t (systemlow systemlow)))
(portcon tcp 488 (system_u object_r http_port_t (systemlow systemlow)))
(portcon tcp 8008 (system_u object_r http_port_t (systemlow systemlow)))
(portcon tcp 8009 (system_u object_r http_port_t (systemlow systemlow)))
(portcon tcp 8443 (system_u object_r http_port_t (systemlow systemlow)))
(portcon tcp 8448 (system_u object_r http_port_t (systemlow systemlow)))
(portcon tcp 3128 (system_u object_r http_cache_port_t (systemlow systemlow)))
(portcon udp 3130 (system_u object_r http_cache_port_t (systemlow systemlow)))
(portcon tcp 8080 (system_u object_r http_cache_port_t (systemlow systemlow)))
(portcon tcp 8118 (system_u object_r http_cache_port_t (systemlow systemlow)))
(portcon tcp (10001 10010) (system_u object_r http_cache_port_t (systemlow systemlow)))
(portcon tcp 9010 (system_u object_r i18n_input_port_t (systemlow systemlow)))
(portcon tcp 5323 (system_u object_r imaze_port_t (systemlow systemlow)))
(portcon udp 5323 (system_u object_r imaze_port_t (systemlow systemlow)))
(portcon tcp 1 (system_u object_r inetd_child_port_t (systemlow systemlow)))
(portcon udp 1 (system_u object_r inetd_child_port_t (systemlow systemlow)))
(portcon tcp 7 (system_u object_r inetd_child_port_t (systemlow systemlow)))
(portcon udp 7 (system_u object_r inetd_child_port_t (systemlow systemlow)))
(portcon tcp 9 (system_u object_r inetd_child_port_t (systemlow systemlow)))
(portcon udp 9 (system_u object_r inetd_child_port_t (systemlow systemlow)))
(portcon tcp 13 (system_u object_r inetd_child_port_t (systemlow systemlow)))
(portcon udp 13 (system_u object_r inetd_child_port_t (systemlow systemlow)))
(portcon tcp 19 (system_u object_r inetd_child_port_t (systemlow systemlow)))
(portcon udp 19 (system_u object_r inetd_child_port_t (systemlow systemlow)))
(portcon tcp 37 (system_u object_r inetd_child_port_t (systemlow systemlow)))
(portcon udp 37 (system_u object_r inetd_child_port_t (systemlow systemlow)))
(portcon tcp 512 (system_u object_r inetd_child_port_t (systemlow systemlow)))
(portcon tcp 543 (system_u object_r inetd_child_port_t (systemlow systemlow)))
(portcon tcp 544 (system_u object_r inetd_child_port_t (systemlow systemlow)))
(portcon tcp 891 (system_u object_r inetd_child_port_t (systemlow systemlow)))
(portcon udp 891 (system_u object_r inetd_child_port_t (systemlow systemlow)))
(portcon tcp 892 (system_u object_r inetd_child_port_t (systemlow systemlow)))
(portcon udp 892 (system_u object_r inetd_child_port_t (systemlow systemlow)))
(portcon tcp 2105 (system_u object_r inetd_child_port_t (systemlow systemlow)))
(portcon tcp 5666 (system_u object_r inetd_child_port_t (systemlow systemlow)))
(portcon tcp 119 (system_u object_r innd_port_t (systemlow systemlow)))
(portcon tcp 7778 (system_u object_r interwise_port_t (systemlow systemlow)))
(portcon udp 7778 (system_u object_r interwise_port_t (systemlow systemlow)))
(portcon tcp 7410 (system_u object_r ionixnetmon_port_t (systemlow systemlow)))
(portcon udp 7410 (system_u object_r ionixnetmon_port_t (systemlow systemlow)))
(portcon udp 623 (system_u object_r ipmi_port_t (systemlow systemlow)))
(portcon udp 664 (system_u object_r ipmi_port_t (systemlow systemlow)))
(portcon tcp 631 (system_u object_r ipp_port_t (systemlow systemlow)))
(portcon udp 631 (system_u object_r ipp_port_t (systemlow systemlow)))
(portcon tcp (8610 8614) (system_u object_r ipp_port_t (systemlow systemlow)))
(portcon udp (8610 8614) (system_u object_r ipp_port_t (systemlow systemlow)))
(portcon tcp 4500 (system_u object_r ipsecnat_port_t (systemlow systemlow)))
(portcon udp 4500 (system_u object_r ipsecnat_port_t (systemlow systemlow)))
(portcon tcp 6665 (system_u object_r ircd_port_t (systemlow systemlow)))
(portcon tcp 6666 (system_u object_r ircd_port_t (systemlow systemlow)))
(portcon tcp 6667 (system_u object_r ircd_port_t (systemlow systemlow)))
(portcon tcp 6668 (system_u object_r ircd_port_t (systemlow systemlow)))
(portcon tcp 6669 (system_u object_r ircd_port_t (systemlow systemlow)))
(portcon tcp 6697 (system_u object_r ircd_port_t (systemlow systemlow)))
(portcon udp 500 (system_u object_r isakmp_port_t (systemlow systemlow)))
(portcon tcp 3260 (system_u object_r iscsi_port_t (systemlow systemlow)))
(portcon tcp 3205 (system_u object_r isns_port_t (systemlow systemlow)))
(portcon udp 3205 (system_u object_r isns_port_t (systemlow systemlow)))
(portcon tcp 5222 (system_u object_r jabber_client_port_t (systemlow systemlow)))
(portcon tcp 5223 (system_u object_r jabber_client_port_t (systemlow systemlow)))
(portcon tcp 5269 (system_u object_r jabber_interserver_port_t (systemlow systemlow)))
(portcon tcp 3528 (system_u object_r jboss_iiop_port_t (systemlow systemlow)))
(portcon udp 3528 (system_u object_r jboss_iiop_port_t (systemlow systemlow)))
(portcon tcp 88 (system_u object_r kerberos_port_t (systemlow systemlow)))
(portcon udp 88 (system_u object_r kerberos_port_t (systemlow systemlow)))
(portcon tcp 750 (system_u object_r kerberos_port_t (systemlow systemlow)))
(portcon udp 750 (system_u object_r kerberos_port_t (systemlow systemlow)))
(portcon tcp 464 (system_u object_r kerberos_admin_port_t (systemlow systemlow)))
(portcon udp 464 (system_u object_r kerberos_admin_port_t (systemlow systemlow)))
(portcon tcp 749 (system_u object_r kerberos_admin_port_t (systemlow systemlow)))
(portcon tcp 4444 (system_u object_r kerberos_master_port_t (systemlow systemlow)))
(portcon udp 4444 (system_u object_r kerberos_master_port_t (systemlow systemlow)))
(portcon tcp 2501 (system_u object_r kismet_port_t (systemlow systemlow)))
(portcon tcp 1714 (system_u object_r kdeconnect_port_t (systemlow systemlow)))
(portcon udp 1714 (system_u object_r kdeconnect_port_t (systemlow systemlow)))
(portcon tcp 754 (system_u object_r kprop_port_t (systemlow systemlow)))
(portcon udp 517 (system_u object_r ktalkd_port_t (systemlow systemlow)))
(portcon udp 518 (system_u object_r ktalkd_port_t (systemlow systemlow)))
(portcon tcp (2379 2381) (system_u object_r kubernetes_port_t (systemlow systemlow)))
(portcon tcp 6443 (system_u object_r kubernetes_port_t (systemlow systemlow)))
(portcon tcp (10248 10250) (system_u object_r kubernetes_port_t (systemlow systemlow)))
(portcon tcp (10256 10257) (system_u object_r kubernetes_port_t (systemlow systemlow)))
(portcon tcp 10259 (system_u object_r kubernetes_port_t (systemlow systemlow)))
(portcon tcp 1701 (system_u object_r l2tp_port_t (systemlow systemlow)))
(portcon udp 1701 (system_u object_r l2tp_port_t (systemlow systemlow)))
(portcon tcp 389 (system_u object_r ldap_port_t (systemlow systemlow)))
(portcon udp 389 (system_u object_r ldap_port_t (systemlow systemlow)))
(portcon tcp 636 (system_u object_r ldap_port_t (systemlow systemlow)))
(portcon udp 636 (system_u object_r ldap_port_t (systemlow systemlow)))
(portcon tcp 3268 (system_u object_r ldap_port_t (systemlow systemlow)))
(portcon tcp 3269 (system_u object_r ldap_port_t (systemlow systemlow)))
(portcon tcp 8765 (system_u object_r lirc_port_t (systemlow systemlow)))
(portcon tcp 5355 (system_u object_r llmnr_port_t (systemlow systemlow)))
(portcon udp 5355 (system_u object_r llmnr_port_t (systemlow systemlow)))
(portcon tcp 24 (system_u object_r lmtp_port_t (systemlow systemlow)))
(portcon udp 24 (system_u object_r lmtp_port_t (systemlow systemlow)))
(portcon tcp 2000 (system_u object_r mail_port_t (systemlow systemlow)))
(portcon tcp 3905 (system_u object_r mail_port_t (systemlow systemlow)))
(portcon tcp 49000 (system_u object_r matahari_port_t (systemlow systemlow)))
(portcon udp 49000 (system_u object_r matahari_port_t (systemlow systemlow)))
(portcon tcp 11211 (system_u object_r memcache_port_t (systemlow systemlow)))
(portcon udp 11211 (system_u object_r memcache_port_t (systemlow systemlow)))
(portcon tcp 5050 (system_u object_r mmcc_port_t (systemlow systemlow)))
(portcon udp 5050 (system_u object_r mmcc_port_t (systemlow systemlow)))
(portcon tcp 2583 (system_u object_r mon_port_t (systemlow systemlow)))
(portcon udp 2583 (system_u object_r mon_port_t (systemlow systemlow)))
(portcon tcp 2812 (system_u object_r monit_port_t (systemlow systemlow)))
(portcon tcp 1234 (system_u object_r monopd_port_t (systemlow systemlow)))
(portcon tcp 20048 (system_u object_r mountd_port_t (systemlow systemlow)))
(portcon udp 20048 (system_u object_r mountd_port_t (systemlow systemlow)))
(portcon tcp 5252 (system_u object_r movaz_ssc_port_t (systemlow systemlow)))
(portcon udp 5252 (system_u object_r movaz_ssc_port_t (systemlow systemlow)))
(portcon tcp 6600 (system_u object_r mpd_port_t (systemlow systemlow)))
(portcon tcp 8787 (system_u object_r msgsrvr_port_t (systemlow systemlow)))
(portcon udp 8787 (system_u object_r msgsrvr_port_t (systemlow systemlow)))
(portcon tcp 1863 (system_u object_r msnp_port_t (systemlow systemlow)))
(portcon udp 1863 (system_u object_r msnp_port_t (systemlow systemlow)))
(portcon tcp (1433 1434) (system_u object_r mssql_port_t (systemlow systemlow)))
(portcon udp (1433 1434) (system_u object_r mssql_port_t (systemlow systemlow)))
(portcon tcp 1755 (system_u object_r ms_streaming_port_t (systemlow systemlow)))
(portcon udp 1755 (system_u object_r ms_streaming_port_t (systemlow systemlow)))
(portcon tcp 4949 (system_u object_r munin_port_t (systemlow systemlow)))
(portcon udp 4949 (system_u object_r munin_port_t (systemlow systemlow)))
(portcon tcp 8005 (system_u object_r mxi_port_t (systemlow systemlow)))
(portcon udp 8005 (system_u object_r mxi_port_t (systemlow systemlow)))
(portcon tcp 1186 (system_u object_r mysqld_port_t (systemlow systemlow)))
(portcon tcp 3306 (system_u object_r mysqld_port_t (systemlow systemlow)))
(portcon tcp (63132 63164) (system_u object_r mysqld_port_t (systemlow systemlow)))
(portcon tcp 2273 (system_u object_r mysqlmanagerd_port_t (systemlow systemlow)))
(portcon tcp 1241 (system_u object_r nessus_port_t (systemlow systemlow)))
(portcon tcp 3129 (system_u object_r netport_port_t (systemlow systemlow)))
(portcon udp 3129 (system_u object_r netport_port_t (systemlow systemlow)))
(portcon tcp 5404 (system_u object_r netsupport_port_t (systemlow systemlow)))
(portcon udp 5404 (system_u object_r netsupport_port_t (systemlow systemlow)))
(portcon tcp 5405 (system_u object_r netsupport_port_t (systemlow systemlow)))
(portcon udp 5405 (system_u object_r netsupport_port_t (systemlow systemlow)))
(portcon tcp 2049 (system_u object_r nfs_port_t (systemlow systemlow)))
(portcon udp 2049 (system_u object_r nfs_port_t (systemlow systemlow)))
(portcon tcp 20049 (system_u object_r nfsrdma_port_t (systemlow systemlow)))
(portcon udp 20049 (system_u object_r nfsrdma_port_t (systemlow systemlow)))
(portcon udp 137 (system_u object_r nmbd_port_t (systemlow systemlow)))
(portcon udp 138 (system_u object_r nmbd_port_t (systemlow systemlow)))
(portcon tcp (3000 3001) (system_u object_r ntop_port_t (systemlow systemlow)))
(portcon udp (3000 3001) (system_u object_r ntop_port_t (systemlow systemlow)))
(portcon udp 123 (system_u object_r ntp_port_t (systemlow systemlow)))
(portcon tcp 4460 (system_u object_r ntske_port_t (systemlow systemlow)))
(portcon tcp 8022 (system_u object_r oa_system_port_t (systemlow systemlow)))
(portcon udp 8022 (system_u object_r oa_system_port_t (systemlow systemlow)))
(portcon tcp 1521 (system_u object_r oracledb_port_t (systemlow systemlow)))
(portcon udp 1521 (system_u object_r oracledb_port_t (systemlow systemlow)))
(portcon tcp 2483 (system_u object_r oracledb_port_t (systemlow systemlow)))
(portcon udp 2483 (system_u object_r oracledb_port_t (systemlow systemlow)))
(portcon tcp 2484 (system_u object_r oracledb_port_t (systemlow systemlow)))
(portcon udp 2484 (system_u object_r oracledb_port_t (systemlow systemlow)))
(portcon tcp 9080 (system_u object_r ocsp_port_t (systemlow systemlow)))
(portcon tcp 4743 (system_u object_r openhpid_port_t (systemlow systemlow)))
(portcon udp 4743 (system_u object_r openhpid_port_t (systemlow systemlow)))
(portcon tcp 1194 (system_u object_r openvpn_port_t (systemlow systemlow)))
(portcon udp 1194 (system_u object_r openvpn_port_t (systemlow systemlow)))
(portcon tcp 1314 (system_u object_r pdps_port_t (systemlow systemlow)))
(portcon udp 1314 (system_u object_r pdps_port_t (systemlow systemlow)))
(portcon tcp 5988 (system_u object_r pegasus_http_port_t (systemlow systemlow)))
(portcon tcp 5989 (system_u object_r pegasus_https_port_t (systemlow systemlow)))
(portcon udp 11371 (system_u object_r pgpkeyserver_port_t (systemlow systemlow)))
(portcon tcp 11371 (system_u object_r pgpkeyserver_port_t (systemlow systemlow)))
(portcon tcp 9125 (system_u object_r pingd_port_t (systemlow systemlow)))
(portcon tcp 2126 (system_u object_r pktcable_cops_port_t (systemlow systemlow)))
(portcon udp 2126 (system_u object_r pktcable_cops_port_t (systemlow systemlow)))
(portcon tcp 106 (system_u object_r pop_port_t (systemlow systemlow)))
(portcon tcp 109 (system_u object_r pop_port_t (systemlow systemlow)))
(portcon tcp 110 (system_u object_r pop_port_t (systemlow systemlow)))
(portcon tcp 143 (system_u object_r pop_port_t (systemlow systemlow)))
(portcon tcp 220 (system_u object_r pop_port_t (systemlow systemlow)))
(portcon tcp 993 (system_u object_r pop_port_t (systemlow systemlow)))
(portcon tcp 995 (system_u object_r pop_port_t (systemlow systemlow)))
(portcon tcp 1109 (system_u object_r pop_port_t (systemlow systemlow)))
(portcon udp 111 (system_u object_r portmap_port_t (systemlow systemlow)))
(portcon tcp 111 (system_u object_r portmap_port_t (systemlow systemlow)))
(portcon tcp 10031 (system_u object_r postfix_policyd_port_t (systemlow systemlow)))
(portcon tcp 5432 (system_u object_r postgresql_port_t (systemlow systemlow)))
(portcon tcp 10023 (system_u object_r postgrey_port_t (systemlow systemlow)))
(portcon tcp 60000 (system_u object_r postgrey_port_t (systemlow systemlow)))
(portcon tcp 1723 (system_u object_r pptp_port_t (systemlow systemlow)))
(portcon udp 1723 (system_u object_r pptp_port_t (systemlow systemlow)))
(portcon tcp 4690 (system_u object_r prelude_port_t (systemlow systemlow)))
(portcon udp 4690 (system_u object_r prelude_port_t (systemlow systemlow)))
(portcon tcp (5298 5299) (system_u object_r presence_port_t (systemlow systemlow)))
(portcon udp (5298 5299) (system_u object_r presence_port_t (systemlow systemlow)))
(portcon tcp 515 (system_u object_r printer_port_t (systemlow systemlow)))
(portcon tcp 5703 (system_u object_r ptal_port_t (systemlow systemlow)))
(portcon tcp 4713 (system_u object_r pulseaudio_port_t (systemlow systemlow)))
(portcon tcp 8140 (system_u object_r puppet_port_t (systemlow systemlow)))
(portcon tcp 8139 (system_u object_r puppetclient_port_t (systemlow systemlow)))
(portcon udp 4011 (system_u object_r pxe_port_t (systemlow systemlow)))
(portcon udp 24441 (system_u object_r pyzor_port_t (systemlow systemlow)))
(portcon udp 1646 (system_u object_r radacct_port_t (systemlow systemlow)))
(portcon udp 1813 (system_u object_r radacct_port_t (systemlow systemlow)))
(portcon udp 1645 (system_u object_r radius_port_t (systemlow systemlow)))
(portcon udp 1812 (system_u object_r radius_port_t (systemlow systemlow)))
(portcon tcp 2083 (system_u object_r radsec_port_t (systemlow systemlow)))
(portcon tcp 2703 (system_u object_r razor_port_t (systemlow systemlow)))
(portcon tcp 6379 (system_u object_r redis_port_t (systemlow systemlow)))
(portcon tcp 26379 (system_u object_r redis_port_t (systemlow systemlow)))
(portcon tcp 6363 (system_u object_r repository_port_t (systemlow systemlow)))
(portcon tcp 11111 (system_u object_r ricci_port_t (systemlow systemlow)))
(portcon udp 11111 (system_u object_r ricci_port_t (systemlow systemlow)))
(portcon tcp 16851 (system_u object_r ricci_modcluster_port_t (systemlow systemlow)))
(portcon udp 16851 (system_u object_r ricci_modcluster_port_t (systemlow systemlow)))
(portcon tcp 513 (system_u object_r rlogind_port_t (systemlow systemlow)))
(portcon tcp 953 (system_u object_r rndc_port_t (systemlow systemlow)))
(portcon udp 953 (system_u object_r rndc_port_t (systemlow systemlow)))
(portcon tcp 8953 (system_u object_r rndc_port_t (systemlow systemlow)))
(portcon udp 8953 (system_u object_r rndc_port_t (systemlow systemlow)))
(portcon udp 520 (system_u object_r router_port_t (systemlow systemlow)))
(portcon udp 521 (system_u object_r router_port_t (systemlow systemlow)))
(portcon tcp 521 (system_u object_r router_port_t (systemlow systemlow)))
(portcon tcp 514 (system_u object_r rsh_port_t (systemlow systemlow)))
(portcon tcp 873 (system_u object_r rsync_port_t (systemlow systemlow)))
(portcon udp 873 (system_u object_r rsync_port_t (systemlow systemlow)))
(portcon tcp 6881 (system_u object_r rtorrent_port_t (systemlow systemlow)))
(portcon udp 6881 (system_u object_r rtorrent_port_t (systemlow systemlow)))
(portcon tcp 6926 (system_u object_r rtorrent_port_t (systemlow systemlow)))
(portcon tcp 554 (system_u object_r rtsp_port_t (systemlow systemlow)))
(portcon udp 554 (system_u object_r rtsp_port_t (systemlow systemlow)))
(portcon udp 513 (system_u object_r rwho_port_t (systemlow systemlow)))
(portcon tcp 4505 (system_u object_r salt_port_t (systemlow systemlow)))
(portcon tcp 4506 (system_u object_r salt_port_t (systemlow systemlow)))
(portcon tcp 9875 (system_u object_r sap_port_t (systemlow systemlow)))
(portcon udp 9875 (system_u object_r sap_port_t (systemlow systemlow)))
(portcon tcp 3636 (system_u object_r servistaitsm_port_t (systemlow systemlow)))
(portcon udp 3636 (system_u object_r servistaitsm_port_t (systemlow systemlow)))
(portcon tcp 4190 (system_u object_r sieve_port_t (systemlow systemlow)))
(portcon tcp 5060 (system_u object_r sip_port_t (systemlow systemlow)))
(portcon udp 5060 (system_u object_r sip_port_t (systemlow systemlow)))
(portcon tcp 5061 (system_u object_r sip_port_t (systemlow systemlow)))
(portcon udp 5061 (system_u object_r sip_port_t (systemlow systemlow)))
(portcon tcp 3874 (system_u object_r sixxsconfig_port_t (systemlow systemlow)))
(portcon udp 3874 (system_u object_r sixxsconfig_port_t (systemlow systemlow)))
(portcon tcp (137 139) (system_u object_r smbd_port_t (systemlow systemlow)))
(portcon tcp 445 (system_u object_r smbd_port_t (systemlow systemlow)))
(portcon tcp 25 (system_u object_r smtp_port_t (systemlow systemlow)))
(portcon tcp 465 (system_u object_r smtp_port_t (systemlow systemlow)))
(portcon tcp 587 (system_u object_r smtp_port_t (systemlow systemlow)))
(portcon udp 161 (system_u object_r snmp_port_t (systemlow systemlow)))
(portcon udp 162 (system_u object_r snmp_port_t (systemlow systemlow)))
(portcon tcp 199 (system_u object_r snmp_port_t (systemlow systemlow)))
(portcon tcp 1161 (system_u object_r snmp_port_t (systemlow systemlow)))
(portcon tcp 8000 (system_u object_r soundd_port_t (systemlow systemlow)))
(portcon tcp 9433 (system_u object_r soundd_port_t (systemlow systemlow)))
(portcon tcp 16001 (system_u object_r soundd_port_t (systemlow systemlow)))
(portcon tcp 783 (system_u object_r spamd_port_t (systemlow systemlow)))
(portcon tcp 8036 (system_u object_r speech_port_t (systemlow systemlow)))
(portcon udp 3401 (system_u object_r squid_port_t (systemlow systemlow)))
(portcon tcp 3401 (system_u object_r squid_port_t (systemlow systemlow)))
(portcon udp 4827 (system_u object_r squid_port_t (systemlow systemlow)))
(portcon tcp 4827 (system_u object_r squid_port_t (systemlow systemlow)))
(portcon tcp 1900 (system_u object_r ssdp_port_t (systemlow systemlow)))
(portcon udp 1900 (system_u object_r ssdp_port_t (systemlow systemlow)))
(portcon tcp 22 (system_u object_r ssh_port_t (systemlow systemlow)))
(portcon tcp 3690 (system_u object_r svn_port_t (systemlow systemlow)))
(portcon udp 3690 (system_u object_r svn_port_t (systemlow systemlow)))
(portcon tcp 427 (system_u object_r svrloc_port_t (systemlow systemlow)))
(portcon udp 427 (system_u object_r svrloc_port_t (systemlow systemlow)))
(portcon tcp 901 (system_u object_r swat_port_t (systemlow systemlow)))
(portcon tcp 22000 (system_u object_r syncthing_port_t (systemlow systemlow)))
(portcon tcp 8384 (system_u object_r syncthing_admin_port_t (systemlow systemlow)))
(portcon udp 21027 (system_u object_r syncthing_discovery_port_t (systemlow systemlow)))
(portcon tcp 9911 (system_u object_r sype_transport_port_t (systemlow systemlow)))
(portcon udp 9911 (system_u object_r sype_transport_port_t (systemlow systemlow)))
(portcon udp 514 (system_u object_r syslogd_port_t (systemlow systemlow)))
(portcon tcp 6514 (system_u object_r syslog_tls_port_t (systemlow systemlow)))
(portcon udp 6514 (system_u object_r syslog_tls_port_t (systemlow systemlow)))
(portcon tcp 30003 (system_u object_r tcs_port_t (systemlow systemlow)))
(portcon tcp 23 (system_u object_r telnetd_port_t (systemlow systemlow)))
(portcon udp 69 (system_u object_r tftp_port_t (systemlow systemlow)))
(portcon tcp 6969 (system_u object_r tor_port_t (systemlow systemlow)))
(portcon tcp 9001 (system_u object_r tor_port_t (systemlow systemlow)))
(portcon tcp 9030 (system_u object_r tor_port_t (systemlow systemlow)))
(portcon tcp 9050 (system_u object_r tor_port_t (systemlow systemlow)))
(portcon tcp 9051 (system_u object_r tor_port_t (systemlow systemlow)))
(portcon udp (64000 64010) (system_u object_r traceroute_port_t (systemlow systemlow)))
(portcon tcp 8081 (system_u object_r transproxy_port_t (systemlow systemlow)))
(portcon tcp 10200 (system_u object_r trisoap_port_t (systemlow systemlow)))
(portcon udp 10200 (system_u object_r trisoap_port_t (systemlow systemlow)))
(portcon tcp 8200 (system_u object_r trivnet1_port_t (systemlow systemlow)))
(portcon udp 8200 (system_u object_r trivnet1_port_t (systemlow systemlow)))
(portcon tcp 3493 (system_u object_r ups_port_t (systemlow systemlow)))
(portcon tcp 540 (system_u object_r uucpd_port_t (systemlow systemlow)))
(portcon tcp (6081 6082) (system_u object_r varnishd_port_t (systemlow systemlow)))
(portcon tcp 16509 (system_u object_r virt_port_t (systemlow systemlow)))
(portcon udp 16509 (system_u object_r virt_port_t (systemlow systemlow)))
(portcon tcp 16514 (system_u object_r virt_port_t (systemlow systemlow)))
(portcon udp 16514 (system_u object_r virt_port_t (systemlow systemlow)))
(portcon tcp 1533 (system_u object_r virtual_places_port_t (systemlow systemlow)))
(portcon udp 1533 (system_u object_r virtual_places_port_t (systemlow systemlow)))
(portcon tcp (49152 49216) (system_u object_r virt_migration_port_t (systemlow systemlow)))
(portcon tcp 5900 (system_u object_r vnc_port_t (systemlow systemlow)))
(portcon udp 2048 (system_u object_r wccp_port_t (systemlow systemlow)))
(portcon tcp 9090 (system_u object_r websm_port_t (systemlow systemlow)))
(portcon udp 9090 (system_u object_r websm_port_t (systemlow systemlow)))
(portcon tcp 43 (system_u object_r whois_port_t (systemlow systemlow)))
(portcon udp 43 (system_u object_r whois_port_t (systemlow systemlow)))
(portcon tcp 4321 (system_u object_r whois_port_t (systemlow systemlow)))
(portcon udp 4321 (system_u object_r whois_port_t (systemlow systemlow)))
(portcon tcp 3261 (system_u object_r winshadow_port_t (systemlow systemlow)))
(portcon udp 3261 (system_u object_r winshadow_port_t (systemlow systemlow)))
(portcon tcp 5357 (system_u object_r wsdapi_port_t (systemlow systemlow)))
(portcon udp 5357 (system_u object_r wsdapi_port_t (systemlow systemlow)))
(portcon tcp 3378 (system_u object_r wsicopy_port_t (systemlow systemlow)))
(portcon udp 3378 (system_u object_r wsicopy_port_t (systemlow systemlow)))
(portcon udp 177 (system_u object_r xdmcp_port_t (systemlow systemlow)))
(portcon tcp 177 (system_u object_r xdmcp_port_t (systemlow systemlow)))
(portcon tcp 8002 (system_u object_r xen_port_t (systemlow systemlow)))
(portcon tcp 7100 (system_u object_r xfs_port_t (systemlow systemlow)))
(portcon tcp (6000 6020) (system_u object_r xserver_port_t (systemlow systemlow)))
(portcon tcp 236 (system_u object_r zarafa_port_t (systemlow systemlow)))
(portcon tcp 237 (system_u object_r zarafa_port_t (systemlow systemlow)))
(portcon tcp 10051 (system_u object_r zabbix_port_t (systemlow systemlow)))
(portcon tcp 10050 (system_u object_r zabbix_agent_port_t (systemlow systemlow)))
(portcon tcp 2181 (system_u object_r zookeeper_client_port_t (systemlow systemlow)))
(portcon tcp 3888 (system_u object_r zookeeper_election_port_t (systemlow systemlow)))
(portcon tcp 2888 (system_u object_r zookeeper_leader_port_t (systemlow systemlow)))
(portcon tcp (2600 2604) (system_u object_r zebra_port_t (systemlow systemlow)))
(portcon tcp 2606 (system_u object_r zebra_port_t (systemlow systemlow)))
(portcon udp (2600 2604) (system_u object_r zebra_port_t (systemlow systemlow)))
(portcon udp 2606 (system_u object_r zebra_port_t (systemlow systemlow)))
(portcon tcp 1229 (system_u object_r zented_port_t (systemlow systemlow)))
(portcon udp 1229 (system_u object_r zented_port_t (systemlow systemlow)))
(portcon tcp 8021 (system_u object_r zope_port_t (systemlow systemlow)))
(portcon udp (1024 65535) (system_u object_r unreserved_port_t (systemlow systemlow)))
(portcon tcp (1024 65535) (system_u object_r unreserved_port_t (systemlow systemlow)))
(portcon tcp (512 1023) (system_u object_r hi_reserved_port_t (systemlow systemlow)))
(portcon sctp (1024 65535) (system_u object_r unreserved_port_t (systemlow systemlow)))
(portcon sctp (512 1023) (system_u object_r hi_reserved_port_t (systemlow systemlow)))
(portcon udp (512 1023) (system_u object_r hi_reserved_port_t (systemlow systemlow)))
(portcon tcp (1 511) (system_u object_r reserved_port_t (systemlow systemlow)))
(portcon udp (1 511) (system_u object_r reserved_port_t (systemlow systemlow)))
(portcon sctp (1 511) (system_u object_r reserved_port_t (systemlow systemlow)))
(fsuse trans devpts (system_u object_r devpts_t (systemlow systemlow)))
(fsuse trans tmpfs (system_u object_r tmpfs_t (systemlow systemlow)))
(fsuse trans shm (system_u object_r tmpfs_t (systemlow systemlow)))
(fsuse trans mqueue (system_u object_r tmpfs_t (systemlow systemlow)))
(fsuse trans ramfs (system_u object_r ramfs_t (systemlow systemlow)))
(fsuse trans hugetlbfs (system_u object_r hugetlbfs_t (systemlow systemlow)))
(fsuse task sockfs (system_u object_r fs_t (systemlow systemlow)))
(fsuse task pipefs (system_u object_r fs_t (systemlow systemlow)))
(fsuse task eventpollfs (system_u object_r fs_t (systemlow systemlow)))
(fsuse xattr zfs (system_u object_r fs_t (systemlow systemlow)))
(fsuse xattr xfs (system_u object_r fs_t (systemlow systemlow)))
(fsuse xattr virtiofs (system_u object_r fs_t (systemlow systemlow)))
(fsuse xattr ubifs (system_u object_r fs_t (systemlow systemlow)))
(fsuse xattr squashfs (system_u object_r fs_t (systemlow systemlow)))
(fsuse xattr overlay (system_u object_r fs_t (systemlow systemlow)))
(fsuse xattr lustre (system_u object_r fs_t (systemlow systemlow)))
(fsuse xattr jfs (system_u object_r fs_t (systemlow systemlow)))
(fsuse xattr jffs2 (system_u object_r fs_t (systemlow systemlow)))
(fsuse xattr gpfs (system_u object_r fs_t (systemlow systemlow)))
(fsuse xattr gfs2 (system_u object_r fs_t (systemlow systemlow)))
(fsuse xattr gfs (system_u object_r fs_t (systemlow systemlow)))
(fsuse xattr f2fs (system_u object_r fs_t (systemlow systemlow)))
(fsuse xattr ext4dev (system_u object_r fs_t (systemlow systemlow)))
(fsuse xattr ext4 (system_u object_r fs_t (systemlow systemlow)))
(fsuse xattr ext3 (system_u object_r fs_t (systemlow systemlow)))
(fsuse xattr ext2 (system_u object_r fs_t (systemlow systemlow)))
(fsuse xattr erofs (system_u object_r fs_t (systemlow systemlow)))
(fsuse xattr encfs (system_u object_r fs_t (systemlow systemlow)))
(fsuse xattr ceph (system_u object_r fs_t (systemlow systemlow)))
(fsuse xattr btrfs (system_u object_r fs_t (systemlow systemlow)))
(fsuse trans devtmpfs (system_u object_r device_t (systemlow systemlow)))
(genfscon afs "/" (system_u object_r nfs_t (systemlow systemlow)))
(genfscon anon_inodefs "/" (system_u object_r anon_inodefs_t (systemlow systemlow)))
(genfscon autofs "/" (system_u object_r autofs_t (systemlow systemlow)))
(genfscon automount "/" (system_u object_r autofs_t (systemlow systemlow)))
(genfscon bdev "/" (system_u object_r bdev_t (systemlow systemlow)))
(genfscon binfmt_misc "/" (system_u object_r binfmt_misc_fs_t (systemlow systemlow)))
(genfscon bpf "/" (system_u object_r bpf_t (systemlow systemlow)))
(genfscon capifs "/" (system_u object_r capifs_t (systemlow systemlow)))
(genfscon cgroup "/" (system_u object_r cgroup_t (systemlow systemlow)))
(genfscon cgroup2 "/" (system_u object_r cgroup_t (systemlow systemlow)))
(genfscon cifs "/" (system_u object_r cifs_t (systemlow systemlow)))
(genfscon coda "/" (system_u object_r nfs_t (systemlow systemlow)))
(genfscon configfs "/" (system_u object_r configfs_t (systemlow systemlow)))
(genfscon cpuset "/" (system_u object_r cpusetfs_t (systemlow systemlow)))
(genfscon cramfs "/" (system_u object_r romfs_t (systemlow systemlow)))
(genfscon dazukofs "/" (system_u object_r nfs_t (systemlow systemlow)))
(genfscon debugfs "/" (system_u object_r debugfs_t (systemlow systemlow)))
(genfscon ecryptfs "/" (system_u object_r ecryptfs_t (systemlow systemlow)))
(genfscon efivarfs "/" (system_u object_r efivarfs_t (systemlow systemlow)))
(genfscon fat "/" (system_u object_r dosfs_t (systemlow systemlow)))
(genfscon functionfs "/" (system_u object_r usbfs_t (systemlow systemlow)))
(genfscon fuse "/" (system_u object_r fusefs_t (systemlow systemlow)))
(genfscon fuseblk "/" (system_u object_r fusefs_t (systemlow systemlow)))
(genfscon fusectl "/" (system_u object_r fusefs_t (systemlow systemlow)))
(genfscon futexfs "/" (system_u object_r futexfs_t (systemlow systemlow)))
(genfscon gadgetfs "/" (system_u object_r usbfs_t (systemlow systemlow)))
(genfscon hfs "/" (system_u object_r dosfs_t (systemlow systemlow)))
(genfscon hfsplus "/" (system_u object_r dosfs_t (systemlow systemlow)))
(genfscon ibmasmfs "/" (system_u object_r ibmasmfs_t (systemlow systemlow)))
(genfscon infinibandeventfs "/" (system_u object_r infinibandeventfs_t (systemlow systemlow)))
(genfscon inotifyfs "/" (system_u object_r inotifyfs_t (systemlow systemlow)))
(genfscon iso9660 "/" (system_u object_r iso9660_t (systemlow systemlow)))
(genfscon kvmfs "/" (system_u object_r kvmfs_t (systemlow systemlow)))
(genfscon lustre "/" (system_u object_r nfs_t (systemlow systemlow)))
(genfscon msdos "/" (system_u object_r dosfs_t (systemlow systemlow)))
(genfscon mvfs "/" (system_u object_r mvfs_t (systemlow systemlow)))
(genfscon ncpfs "/" (system_u object_r nfs_t (systemlow systemlow)))
(genfscon nfs "/" (system_u object_r nfs_t (systemlow systemlow)))
(genfscon nfs4 "/" (system_u object_r nfs_t (systemlow systemlow)))
(genfscon nfsd "/" (system_u object_r nfsd_fs_t (systemlow systemlow)))
(genfscon nsfs "/" (system_u object_r nsfs_t (systemlow systemlow)))
(genfscon ntfs "/" (system_u object_r dosfs_t (systemlow systemlow)))
(genfscon ntfs-3g "/" (system_u object_r dosfs_t (systemlow systemlow)))
(genfscon oprofilefs "/" (system_u object_r oprofilefs_t (systemlow systemlow)))
(genfscon panfs "/" (system_u object_r nfs_t (systemlow systemlow)))
(genfscon proc "/sys/vm/overcommit_memory" (system_u object_r sysctl_vm_overcommit_t (systemlow systemlow)))
(genfscon proc "/sys/kernel/ns_last_pid" (system_u object_r sysctl_kernel_ns_last_pid_t (systemlow systemlow)))
(genfscon proc "/sys/kernel/modprobe" (system_u object_r sysctl_modprobe_t (systemlow systemlow)))
(genfscon proc "/sys/kernel/hotplug" (system_u object_r sysctl_hotplug_t (systemlow systemlow)))
(genfscon proc "/sys/net/unix" (system_u object_r sysctl_net_unix_t (systemlow systemlow)))
(genfscon proc "/fs/openafs" (system_u object_r proc_afs_t (systemlow systemlow)))
(genfscon proc "/sys/crypto" (system_u object_r sysctl_crypto_t (systemlow systemlow)))
(genfscon proc "/sys/kernel" (system_u object_r sysctl_kernel_t (systemlow systemlow)))
(genfscon proc "/kallsyms" (system_u object_r system_map_t (systemlow systemlow)))
(genfscon proc "/pressure" (system_u object_r proc_psi_t (systemlow systemlow)))
(genfscon proc "/sysvipc" (system_u object_r proc_t (systemlow systemlow)))
(genfscon proc "/net/rpc" (system_u object_r sysctl_rpc_t (systemlow systemlow)))
(genfscon proc "/sys/net" (system_u object_r sysctl_net_t (systemlow systemlow)))
(genfscon proc "/sys/dev" (system_u object_r sysctl_dev_t (systemlow systemlow)))
(genfscon proc "/mdstat" (system_u object_r proc_mdstat_t (systemlow systemlow)))
(genfscon proc "/sys/fs" (system_u object_r sysctl_fs_t (systemlow systemlow)))
(genfscon proc "/sys/vm" (system_u object_r sysctl_vm_t (systemlow systemlow)))
(genfscon proc "/kcore" (system_u object_r proc_kcore_t (systemlow systemlow)))
(genfscon proc "/mtrr" (system_u object_r mtrr_device_t (systemlow systemlow)))
(genfscon proc "/kmsg" (system_u object_r proc_kmsg_t (systemlow systemlow)))
(genfscon proc "/net" (system_u object_r proc_net_t (systemlow systemlow)))
(genfscon proc "/xen" (system_u object_r proc_xen_t (systemlow systemlow)))
(genfscon proc "/sys" (system_u object_r sysctl_t (systemlow systemlow)))
(genfscon proc "/irq" (system_u object_r sysctl_irq_t (systemlow systemlow)))
(genfscon proc "/" (system_u object_r proc_t (systemlow systemlow)))
(genfscon pstore "/" (system_u object_r pstore_t (systemlow systemlow)))
(genfscon reiserfs "/" (system_u object_r nfs_t (systemlow systemlow)))
(genfscon romfs "/" (system_u object_r romfs_t (systemlow systemlow)))
(genfscon rootfs "/" (system_u object_r root_t (systemlow systemlow)))
(genfscon rpc_pipefs "/" (system_u object_r rpc_pipefs_t (systemlow systemlow)))
(genfscon securityfs "/" (system_u object_r security_t (systemlow systemlow)))
(genfscon selinuxfs "/booleans/secure_mode_policyload" file (system_u object_r secure_mode_policyload_t (systemlow systemlow)))
(genfscon selinuxfs "/booleans/" file (system_u object_r boolean_t (systemlow systemlow)))
(genfscon selinuxfs "/" (system_u object_r security_t (systemlow systemlow)))
(genfscon smbfs "/" (system_u object_r cifs_t (systemlow systemlow)))
(genfscon spufs "/" (system_u object_r spufs_t (systemlow systemlow)))
(genfscon sysfs "/devices/system/cpu/online" (system_u object_r cpu_online_t (systemlow systemlow)))
(genfscon sysfs "/" (system_u object_r sysfs_t (systemlow systemlow)))
(genfscon sysv "/" (system_u object_r sysv_t (systemlow systemlow)))
(genfscon tracefs "/" (system_u object_r tracefs_t (systemlow systemlow)))
(genfscon udf "/" (system_u object_r iso9660_t (systemlow systemlow)))
(genfscon usbdevfs "/" (system_u object_r usbfs_t (systemlow systemlow)))
(genfscon usbfs "/" (system_u object_r usbfs_t (systemlow systemlow)))
(genfscon v7 "/" (system_u object_r sysv_t (systemlow systemlow)))
(genfscon vboxsf "/" (system_u object_r vmblock_t (systemlow systemlow)))
(genfscon vfat "/" (system_u object_r dosfs_t (systemlow systemlow)))
(genfscon virtiofs "/" (system_u object_r virtiofs_t (systemlow systemlow)))
(genfscon vmblock "/" (system_u object_r vmblock_t (systemlow systemlow)))
(genfscon vmhgfs "/" (system_u object_r vmblock_t (systemlow systemlow)))
(genfscon vxfs "/" (system_u object_r vxfs_t (systemlow systemlow)))
(genfscon xenfs "/" (system_u object_r xenfs_t (systemlow systemlow)))
(common database (create drop getattr setattr relabelfrom relabelto ))
(common socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind ))
(common x_device (getattr setattr use read write getfocus setfocus bell force_cursor freeze grab manage list_property get_property set_property add remove create destroy ))
(common file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads ))
(common cap2 (mac_override mac_admin syslog wake_alarm block_suspend audit_read perfmon bpf checkpoint_restore ))
(common cap (chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap ))
(common ipc (create destroy getattr setattr read write associate unix_read unix_write ))
(typealias lo_netif_t)
(typealiasactual lo_netif_t netif_t)
(typealias systemd_run_exec_t)
(typealiasactual systemd_run_exec_t bin_t)
(typealias sbin_t)
(typealiasactual sbin_t bin_t)
(typealias netcontrol_device_t)
(typealiasactual netcontrol_device_t pmqos_device_t)
(typealias systemd_detect_virt_t)
(typealiasactual systemd_detect_virt_t bin_t)
(typealias ls_exec_t)
(typealiasactual ls_exec_t bin_t)
(class security (compute_av compute_create compute_member check_context load_policy compute_relabel compute_user setenforce setbool setsecparam setcheckreqprot read_policy validate_trans ))
(class process (fork transition sigchld sigkill sigstop signull signal ptrace getsched setsched getsession getpgid setpgid getcap setcap share getattr setexec setfscreate noatsecure siginh setrlimit rlimitinh dyntransition setcurrent execmem execstack execheap setkeycreate setsockcreate getrlimit ))
(constrain (process (transition noatsecure siginh rlimitinh dyntransition)) (or (or (or (or (eq r1 r2) (and (eq t1 can_change_process_role) (eq t2 process_user_target))) (and (eq t1 cron_source_domain) (eq t2 cron_job_domain))) (and (eq t1 can_system_change) (eq r2 system_r))) (eq t1 process_uncond_exempt)))
(constrain (process (transition noatsecure siginh rlimitinh dyntransition)) (or (or (or (or (eq u1 u2) (and (eq t1 can_change_process_identity) (eq t2 process_user_target))) (and (eq t1 cron_source_domain) (or (eq t2 cron_job_domain) (eq u2 system_u)))) (and (eq t1 can_system_change) (eq u2 system_u))) (eq t1 process_uncond_exempt)))
(constrain (process (sigchld sigkill sigstop signull signal ptrace getsched setsched getsession getpgid setpgid getcap setcap share getattr setrlimit)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacproc)))
(class system (ipc_info syslog_read syslog_mod syslog_console module_request module_load halt reboot status start stop enable disable reload ))
(class capability ())
(classcommon capability cap)
(class filesystem (mount remount unmount getattr relabelfrom relabelto associate quotamod quotaget watch ))
(class file (execute_no_trans entrypoint ))
(classcommon file file)
(constrain (file (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(constrain (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacfile)))
(class dir (add_name remove_name reparent search rmdir ))
(classcommon dir file)
(constrain (dir (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(constrain (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacfile)))
(class fd (use ))
(constrain (fd (use)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacfd)))
(class lnk_file ())
(classcommon lnk_file file)
(constrain (lnk_file (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(constrain (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacfile)))
(class chr_file ())
(classcommon chr_file file)
(constrain (chr_file (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(constrain (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacfile)))
(class blk_file ())
(classcommon blk_file file)
(constrain (blk_file (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(constrain (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacfile)))
(class sock_file ())
(classcommon sock_file file)
(constrain (sock_file (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(constrain (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacfile)))
(class fifo_file ())
(classcommon fifo_file file)
(constrain (fifo_file (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(constrain (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacfile)))
(class socket ())
(classcommon socket socket)
(constrain (socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacsock)))
(class tcp_socket (node_bind name_connect ))
(classcommon tcp_socket socket)
(constrain (tcp_socket (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(constrain (tcp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacsock)))
(class udp_socket (node_bind ))
(classcommon udp_socket socket)
(constrain (udp_socket (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(constrain (udp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacsock)))
(class rawip_socket (node_bind ))
(classcommon rawip_socket socket)
(constrain (rawip_socket (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(constrain (rawip_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacsock)))
(class node (recvfrom sendto ))
(class netif (ingress egress ))
(class netlink_socket ())
(classcommon netlink_socket socket)
(constrain (netlink_socket (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(constrain (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacsock)))
(class packet_socket ())
(classcommon packet_socket socket)
(constrain (packet_socket (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(constrain (packet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacsock)))
(class key_socket ())
(classcommon key_socket socket)
(constrain (key_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacsock)))
(class unix_stream_socket (connectto ))
(classcommon unix_stream_socket socket)
(constrain (unix_stream_socket (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(constrain (unix_stream_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind connectto)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacsock)))
(class unix_dgram_socket ())
(classcommon unix_dgram_socket socket)
(constrain (unix_dgram_socket (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(constrain (unix_dgram_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacsock)))
(class sem ())
(classcommon sem ipc)
(constrain (sem (create destroy getattr setattr read write associate unix_read unix_write)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacipc)))
(class msg (send receive ))
(constrain (msg (send receive)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacipc)))
(class msgq (enqueue ))
(classcommon msgq ipc)
(constrain (msgq (create destroy getattr setattr read write associate unix_read unix_write enqueue)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacipc)))
(class shm (lock ))
(classcommon shm ipc)
(constrain (shm (create destroy getattr setattr read write associate unix_read unix_write lock)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacipc)))
(class ipc ())
(classcommon ipc ipc)
(constrain (ipc (create destroy getattr setattr read write associate unix_read unix_write)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacipc)))
(class passwd (passwd chfn chsh rootok crontab ))
(class x_drawable (create destroy read write blend getattr setattr list_child add_child remove_child list_property get_property set_property manage override show hide send receive ))
(constrain (x_drawable (create destroy read write blend getattr setattr list_child add_child remove_child list_property get_property set_property manage override show hide send receive)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacxwin)))
(class x_screen (getattr setattr hide_cursor show_cursor saver_getattr saver_setattr saver_hide saver_show ))
(constrain (x_screen (getattr setattr hide_cursor show_cursor saver_getattr saver_setattr saver_hide saver_show)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacxwin)))
(class x_gc (create destroy getattr setattr use ))
(constrain (x_gc (create destroy getattr setattr use)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacxwin)))
(class x_font (create destroy getattr add_glyph remove_glyph use ))
(constrain (x_font (create destroy getattr add_glyph remove_glyph use)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacxwin)))
(class x_colormap (create destroy read write getattr add_color remove_color install uninstall use ))
(constrain (x_colormap (create destroy read write getattr add_color remove_color install uninstall use)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacxwin)))
(class x_property (create destroy read write append getattr setattr ))
(constrain (x_property (create destroy read write append getattr setattr)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacxwin)))
(class x_selection (read write getattr setattr ))
(constrain (x_selection (read write getattr setattr)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacxwin)))
(class x_cursor (create destroy read write getattr setattr use ))
(constrain (x_cursor (create destroy read write getattr setattr use)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacxwin)))
(class x_client (destroy getattr setattr manage ))
(constrain (x_client (destroy getattr setattr manage)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacxwin)))
(class x_device ())
(classcommon x_device x_device)
(constrain (x_device (getattr setattr use read write getfocus setfocus bell force_cursor freeze grab manage list_property get_property set_property add remove create destroy)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacxwin)))
(class x_server (getattr setattr record debug grab manage ))
(constrain (x_server (getattr setattr record debug grab manage)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacxwin)))
(class x_extension (query use ))
(constrain (x_extension (query use)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacxwin)))
(class netlink_route_socket (nlmsg_read nlmsg_write nlmsg ))
(classcommon netlink_route_socket socket)
(constrain (netlink_route_socket (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(constrain (netlink_route_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacsock)))
(class obsolete_netlink_firewall_socket (nlmsg_read nlmsg_write ))
(classcommon obsolete_netlink_firewall_socket socket)
(class netlink_tcpdiag_socket (nlmsg_read nlmsg_write nlmsg ))
(classcommon netlink_tcpdiag_socket socket)
(constrain (netlink_tcpdiag_socket (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(constrain (netlink_tcpdiag_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacsock)))
(class netlink_nflog_socket ())
(classcommon netlink_nflog_socket socket)
(constrain (netlink_nflog_socket (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(constrain (netlink_nflog_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacsock)))
(class netlink_xfrm_socket (nlmsg_read nlmsg_write nlmsg ))
(classcommon netlink_xfrm_socket socket)
(constrain (netlink_xfrm_socket (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(constrain (netlink_xfrm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacsock)))
(class netlink_selinux_socket ())
(classcommon netlink_selinux_socket socket)
(constrain (netlink_selinux_socket (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(constrain (netlink_selinux_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacsock)))
(class netlink_audit_socket (nlmsg_read nlmsg_write nlmsg_relay nlmsg_readpriv nlmsg_tty_audit nlmsg ))
(classcommon netlink_audit_socket socket)
(constrain (netlink_audit_socket (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(constrain (netlink_audit_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind nlmsg_read nlmsg_write nlmsg_relay nlmsg_readpriv nlmsg_tty_audit nlmsg)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacsock)))
(class obsolete_netlink_ip6fw_socket (nlmsg_read nlmsg_write ))
(classcommon obsolete_netlink_ip6fw_socket socket)
(class netlink_dnrt_socket ())
(classcommon netlink_dnrt_socket socket)
(constrain (netlink_dnrt_socket (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(constrain (netlink_dnrt_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacsock)))
(class dbus (acquire_svc send_msg ))
(constrain (dbus (acquire_svc send_msg)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacdbus)))
(class nscd (getpwd getgrp gethost getstat admin shmempwd shmemgrp shmemhost getserv shmemserv ))
(class association (sendto recvfrom setcontext polmatch ))
(constrain (association (sendto recvfrom setcontext polmatch)) (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)))
(class netlink_kobject_uevent_socket ())
(classcommon netlink_kobject_uevent_socket socket)
(constrain (netlink_kobject_uevent_socket (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(constrain (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacsock)))
(class appletalk_socket ())
(classcommon appletalk_socket socket)
(constrain (appletalk_socket (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(constrain (appletalk_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacsock)))
(class packet (send recv relabelto forward_in forward_out ))
(class key (view read write search link setattr create ))
(constrain (key (view read write search link setattr create)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubackey)))
(class context (unused_perm contains ))
(class dccp_socket (node_bind name_connect ))
(classcommon dccp_socket socket)
(constrain (dccp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacsock)))
(class memprotect (mmap_zero ))
(class db_database (access install_module load_module get_param set_param ))
(classcommon db_database database)
(constrain (db_database (create drop getattr setattr relabelfrom relabelto access install_module load_module get_param set_param)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacdb)))
(class db_table (select update insert delete lock ))
(classcommon db_table database)
(constrain (db_table (create drop getattr setattr relabelfrom relabelto select update insert delete lock)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacdb)))
(class db_procedure (execute entrypoint install ))
(classcommon db_procedure database)
(constrain (db_procedure (create drop getattr setattr relabelfrom relabelto execute entrypoint install)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacdb)))
(class db_column (select update insert ))
(classcommon db_column database)
(constrain (db_column (create drop getattr setattr relabelfrom relabelto select update insert)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacdb)))
(class db_tuple (relabelfrom relabelto use select update insert delete ))
(constrain (db_tuple (relabelfrom relabelto use select update insert delete)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacdb)))
(class db_blob (read write import export ))
(classcommon db_blob database)
(constrain (db_blob (create drop getattr setattr relabelfrom relabelto read write import export)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacdb)))
(class db_exception (use ))
(classcommon db_exception database)
(class db_datatype (use ))
(classcommon db_datatype database)
(class peer (recv ))
(constrain (peer (recv)) (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)))
(class capability2 ())
(classcommon capability2 cap2)
(class x_resource (read write ))
(constrain (x_resource (read write)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacxwin)))
(class x_event (send receive ))
(constrain (x_event (send receive)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacxwin)))
(class x_synthetic_event (send receive ))
(constrain (x_synthetic_event (send receive)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacxwin)))
(class x_application_data (paste paste_after_confirm copy ))
(constrain (x_application_data (paste paste_after_confirm copy)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacxwin)))
(class kernel_service (use_as_override create_files_as ))
(class tun_socket (attach_queue ))
(classcommon tun_socket socket)
(constrain (tun_socket (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(constrain (tun_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind attach_queue)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacsock)))
(class binder (impersonate call set_context_mgr transfer ))
(class netlink_iscsi_socket ())
(classcommon netlink_iscsi_socket socket)
(constrain (netlink_iscsi_socket (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(constrain (netlink_iscsi_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacsock)))
(class netlink_fib_lookup_socket ())
(classcommon netlink_fib_lookup_socket socket)
(constrain (netlink_fib_lookup_socket (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(constrain (netlink_fib_lookup_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacsock)))
(class netlink_connector_socket ())
(classcommon netlink_connector_socket socket)
(constrain (netlink_connector_socket (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(constrain (netlink_connector_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacsock)))
(class netlink_netfilter_socket ())
(classcommon netlink_netfilter_socket socket)
(constrain (netlink_netfilter_socket (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(constrain (netlink_netfilter_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacsock)))
(class netlink_generic_socket ())
(classcommon netlink_generic_socket socket)
(constrain (netlink_generic_socket (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(constrain (netlink_generic_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacsock)))
(class netlink_scsitransport_socket ())
(classcommon netlink_scsitransport_socket socket)
(constrain (netlink_scsitransport_socket (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(constrain (netlink_scsitransport_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacsock)))
(class netlink_rdma_socket ())
(classcommon netlink_rdma_socket socket)
(constrain (netlink_rdma_socket (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(constrain (netlink_rdma_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacsock)))
(class netlink_crypto_socket ())
(classcommon netlink_crypto_socket socket)
(constrain (netlink_crypto_socket (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(constrain (netlink_crypto_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacsock)))
(class x_pointer ())
(classcommon x_pointer x_device)
(class x_keyboard ())
(classcommon x_keyboard x_device)
(class infiniband_pkey (access ))
(class infiniband_endport (manage_subnet ))
(class db_schema (search add_name remove_name ))
(classcommon db_schema database)
(class db_view (expand ))
(classcommon db_view database)
(class db_sequence (get_value next_value set_value ))
(classcommon db_sequence database)
(class db_language (implement execute ))
(classcommon db_language database)
(class service (start stop status reload enable disable ))
(class cap_userns ())
(classcommon cap_userns cap)
(class cap2_userns ())
(classcommon cap2_userns cap2)
(class sctp_socket (node_bind name_connect association ))
(classcommon sctp_socket socket)
(constrain (sctp_socket (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(constrain (sctp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind node_bind name_connect association)) (or (or (or (or (or (eq u1 u2) (eq u1 system_u)) (eq u2 system_u)) (neq t1 ubac_constrained_type)) (neq t2 ubac_constrained_type)) (eq t1 ubacsock)))
(class icmp_socket (node_bind ))
(classcommon icmp_socket socket)
(constrain (icmp_socket (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(class ax25_socket ())
(classcommon ax25_socket socket)
(constrain (ax25_socket (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(class ipx_socket ())
(classcommon ipx_socket socket)
(constrain (ipx_socket (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(class netrom_socket ())
(classcommon netrom_socket socket)
(constrain (netrom_socket (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(class atmpvc_socket ())
(classcommon atmpvc_socket socket)
(constrain (atmpvc_socket (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(class x25_socket ())
(classcommon x25_socket socket)
(constrain (x25_socket (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(class rose_socket ())
(classcommon rose_socket socket)
(constrain (rose_socket (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(class decnet_socket ())
(classcommon decnet_socket socket)
(constrain (decnet_socket (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(class atmsvc_socket ())
(classcommon atmsvc_socket socket)
(constrain (atmsvc_socket (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(class rds_socket ())
(classcommon rds_socket socket)
(constrain (rds_socket (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(class irda_socket ())
(classcommon irda_socket socket)
(constrain (irda_socket (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(class pppox_socket ())
(classcommon pppox_socket socket)
(constrain (pppox_socket (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(class llc_socket ())
(classcommon llc_socket socket)
(constrain (llc_socket (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(class can_socket ())
(classcommon can_socket socket)
(constrain (can_socket (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(class tipc_socket ())
(classcommon tipc_socket socket)
(constrain (tipc_socket (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(class bluetooth_socket ())
(classcommon bluetooth_socket socket)
(constrain (bluetooth_socket (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(class iucv_socket ())
(classcommon iucv_socket socket)
(constrain (iucv_socket (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(class rxrpc_socket ())
(classcommon rxrpc_socket socket)
(constrain (rxrpc_socket (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(class isdn_socket ())
(classcommon isdn_socket socket)
(constrain (isdn_socket (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(class phonet_socket ())
(classcommon phonet_socket socket)
(constrain (phonet_socket (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(class ieee802154_socket ())
(classcommon ieee802154_socket socket)
(constrain (ieee802154_socket (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(class caif_socket ())
(classcommon caif_socket socket)
(constrain (caif_socket (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(class alg_socket ())
(classcommon alg_socket socket)
(constrain (alg_socket (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(class nfc_socket ())
(classcommon nfc_socket socket)
(constrain (nfc_socket (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(class vsock_socket ())
(classcommon vsock_socket socket)
(constrain (vsock_socket (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(class kcm_socket ())
(classcommon kcm_socket socket)
(constrain (kcm_socket (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(class qipcrtr_socket ())
(classcommon qipcrtr_socket socket)
(constrain (qipcrtr_socket (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(class smc_socket ())
(classcommon smc_socket socket)
(constrain (smc_socket (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(class process2 (nnp_transition nosuid_transition ))
(class bpf (map_create map_read map_write prog_load prog_run ))
(class xdp_socket ())
(classcommon xdp_socket socket)
(constrain (xdp_socket (create relabelfrom relabelto)) (or (eq u1 u2) (eq t1 can_change_object_identity)))
(class mctp_socket ())
(classcommon mctp_socket socket)
(class perf_event (open cpu kernel tracepoint read write ))
(class lockdown (integrity confidentiality ))
(class anon_inode ())
(classcommon anon_inode file)
(class io_uring (override_creds sqpoll cmd ))
(class user_namespace (create ))
(classorder (security process system capability filesystem file dir fd lnk_file chr_file blk_file sock_file fifo_file socket tcp_socket udp_socket rawip_socket node netif netlink_socket packet_socket key_socket unix_stream_socket unix_dgram_socket sem msg msgq shm ipc passwd x_drawable x_screen x_gc x_font x_colormap x_property x_selection x_cursor x_client x_device x_server x_extension netlink_route_socket obsolete_netlink_firewall_socket netlink_tcpdiag_socket netlink_nflog_socket netlink_xfrm_socket netlink_selinux_socket netlink_audit_socket obsolete_netlink_ip6fw_socket netlink_dnrt_socket dbus nscd association netlink_kobject_uevent_socket appletalk_socket packet key context dccp_socket memprotect db_database db_table db_procedure db_column db_tuple db_blob db_exception db_datatype peer capability2 x_resource x_event x_synthetic_event x_application_data kernel_service tun_socket binder netlink_iscsi_socket netlink_fib_lookup_socket netlink_connector_socket netlink_netfilter_socket netlink_generic_socket netlink_scsitransport_socket netlink_rdma_socket netlink_crypto_socket x_pointer x_keyboard infiniband_pkey infiniband_endport db_schema db_view db_sequence db_language service cap_userns cap2_userns sctp_socket icmp_socket ax25_socket ipx_socket netrom_socket atmpvc_socket x25_socket rose_socket decnet_socket atmsvc_socket rds_socket irda_socket pppox_socket llc_socket can_socket tipc_socket bluetooth_socket iucv_socket rxrpc_socket isdn_socket phonet_socket ieee802154_socket caif_socket alg_socket nfc_socket vsock_socket kcm_socket qipcrtr_socket smc_socket process2 bpf xdp_socket mctp_socket perf_event lockdown anon_inode io_uring user_namespace ))
(role staff_r)
(role sysadm_r)
(role system_r)
(roletype system_r kernel_t)
(role user_r)
(typeattribute auth_file_type)
(typeattribute boolean_type)
(typeattributeset boolean_type (boolean_t secure_mode_policyload_t ))
(typeattribute can_change_object_identity)
(typeattribute can_change_process_identity)
(typeattribute can_change_process_role)
(typeattribute can_dump_kernel)
(typeattribute can_load_kernmodule)
(typeattributeset can_load_kernmodule (kernel_t ))
(typeattribute can_load_policy)
(typeattributeset can_load_policy (kernel_t ))
(typeattribute can_receive_kernel_messages)
(typeattribute can_setenforce)
(typeattribute can_setsecparam)
(typeattribute can_system_change)
(typeattribute cgroup_types)
(typeattributeset cgroup_types (cgroup_t memory_pressure_t ))
(typeattribute client_packet_type)
(typeattributeset client_packet_type (adb_client_packet_t afs3_callback_client_packet_t afs_bos_client_packet_t afs_fs_client_packet_t afs_ka_client_packet_t afs_pt_client_packet_t afs_vl_client_packet_t agentx_client_packet_t amanda_client_packet_t amavisd_recv_client_packet_t amavisd_send_client_packet_t amqp_client_packet_t aol_client_packet_t apcupsd_client_packet_t apertus_ldp_client_packet_t aptcacher_client_packet_t armtechdaemon_client_packet_t asterisk_client_packet_t audit_client_packet_t auth_client_packet_t bgp_client_packet_t biff_client_packet_t bitcoin_client_packet_t boinc_client_client_packet_t boinc_client_packet_t certmaster_client_packet_t chronyd_client_packet_t clamd_client_packet_t client_packet_t clockspeed_client_packet_t cluster_client_packet_t cma_client_packet_t cobbler_client_packet_t commplex_link_client_packet_t commplex_main_client_packet_t comsat_client_packet_t condor_client_packet_t couchdb_client_packet_t cslistener_client_packet_t ctdb_client_packet_t cvs_client_packet_t cyphesis_client_packet_t daap_client_packet_t dbskkd_client_packet_t dcc_client_packet_t dccm_client_packet_t dhcpc_client_packet_t dhcpd_client_packet_t dict_client_packet_t distccd_client_packet_t dns_client_packet_t dropbox_client_packet_t efs_client_packet_t embrace_dp_c_client_packet_t epmap_client_packet_t epmd_client_packet_t fingerd_client_packet_t ftp_client_packet_t ftp_data_client_packet_t gatekeeper_client_packet_t gdomap_client_packet_t gds_db_client_packet_t git_client_packet_t glance_registry_client_packet_t glusterd_client_packet_t gopher_client_packet_t gpsd_client_packet_t hadoop_datanode_client_packet_t hadoop_namenode_client_packet_t hddtemp_client_packet_t howl_client_packet_t hplip_client_packet_t http_cache_client_packet_t http_client_packet_t i18n_input_client_packet_t imaze_client_packet_t inetd_child_client_packet_t innd_client_packet_t interwise_client_packet_t ionixnetmon_client_packet_t ipmi_client_packet_t ipp_client_packet_t ipsecnat_client_packet_t ircd_client_packet_t isakmp_client_packet_t iscsi_client_packet_t isns_client_packet_t jabber_client_client_packet_t jabber_interserver_client_packet_t jboss_iiop_client_packet_t kdeconnect_client_packet_t kerberos_admin_client_packet_t kerberos_client_packet_t kerberos_master_client_packet_t kismet_client_packet_t kprop_client_packet_t ktalkd_client_packet_t kubernetes_client_packet_t l2tp_client_packet_t ldap_client_packet_t lirc_client_packet_t llmnr_client_packet_t lmtp_client_packet_t lrrd_client_packet_t mail_client_packet_t matahari_client_packet_t memcache_client_packet_t milter_client_packet_t mmcc_client_packet_t mon_client_packet_t monit_client_packet_t monopd_client_packet_t mountd_client_packet_t movaz_ssc_client_packet_t mpd_client_packet_t ms_streaming_client_packet_t msgsrvr_client_packet_t msnp_client_packet_t mssql_client_packet_t munin_client_packet_t mxi_client_packet_t mysqld_client_packet_t mysqlmanagerd_client_packet_t nessus_client_packet_t netport_client_packet_t netsupport_client_packet_t nfs_client_packet_t nfsrdma_client_packet_t nmbd_client_packet_t ntop_client_packet_t ntp_client_packet_t ntske_client_packet_t oa_system_client_packet_t ocsp_client_packet_t openhpid_client_packet_t openvpn_client_packet_t oracledb_client_packet_t pdps_client_packet_t pegasus_http_client_packet_t pegasus_https_client_packet_t pgpkeyserver_client_packet_t pingd_client_packet_t pktcable_cops_client_packet_t pop_client_packet_t portmap_client_packet_t postfix_policyd_client_packet_t postgresql_client_packet_t postgrey_client_packet_t pptp_client_packet_t prelude_client_packet_t presence_client_packet_t printer_client_packet_t ptal_client_packet_t pulseaudio_client_packet_t puppet_client_packet_t puppetclient_client_packet_t pxe_client_packet_t pyzor_client_packet_t radacct_client_packet_t radius_client_packet_t radsec_client_packet_t razor_client_packet_t redis_client_packet_t repository_client_packet_t ricci_client_packet_t ricci_modcluster_client_packet_t rlogind_client_packet_t rndc_client_packet_t router_client_packet_t rsh_client_packet_t rsync_client_packet_t rtorrent_client_packet_t rtsp_client_packet_t rwho_client_packet_t salt_client_packet_t sap_client_packet_t servistaitsm_client_packet_t sieve_client_packet_t sip_client_packet_t sixxsconfig_client_packet_t smbd_client_packet_t smtp_client_packet_t snmp_client_packet_t socks_client_packet_t soundd_client_packet_t spamd_client_packet_t speech_client_packet_t squid_client_packet_t ssdp_client_packet_t ssh_client_packet_t stunnel_client_packet_t svn_client_packet_t svrloc_client_packet_t swat_client_packet_t syncthing_admin_client_packet_t syncthing_client_packet_t syncthing_discovery_client_packet_t sype_transport_client_packet_t syslog_tls_client_packet_t syslogd_client_packet_t tcs_client_packet_t telnetd_client_packet_t tftp_client_packet_t tor_client_packet_t traceroute_client_packet_t transproxy_client_packet_t trisoap_client_packet_t trivnet1_client_packet_t ups_client_packet_t utcpserver_client_packet_t uucpd_client_packet_t varnishd_client_packet_t virt_client_packet_t virt_migration_client_packet_t virtual_places_client_packet_t vnc_client_packet_t wccp_client_packet_t websm_client_packet_t whois_client_packet_t winshadow_client_packet_t wsdapi_client_packet_t wsicopy_client_packet_t xdmcp_client_packet_t xen_client_packet_t xfs_client_packet_t xserver_client_packet_t zabbix_agent_client_packet_t zabbix_client_packet_t zarafa_client_packet_t zebra_client_packet_t zented_client_packet_t zookeeper_client_client_packet_t zookeeper_election_client_packet_t zookeeper_leader_client_packet_t zope_client_packet_t ))
(typeattribute configfile)
(typeattributeset configfile (etc_runtime_t etc_t ))
(typeattribute corenet_unconfined_type)
(typeattribute cron_job_domain)
(typeattribute cron_source_domain)
(typeattribute defined_port_type)
(typeattributeset defined_port_type (adb_port_t afs3_callback_port_t afs_bos_port_t afs_fs_port_t afs_ka_port_t afs_pt_port_t afs_vl_port_t agentx_port_t amanda_port_t amavisd_recv_port_t amavisd_send_port_t amqp_port_t aol_port_t apcupsd_port_t apertus_ldp_port_t aptcacher_port_t armtechdaemon_port_t asterisk_port_t audit_port_t auth_port_t bgp_port_t biff_port_t bitcoin_port_t boinc_client_port_t boinc_port_t certmaster_port_t chronyd_port_t clamd_port_t clockspeed_port_t cluster_port_t cma_port_t cobbler_port_t commplex_link_port_t commplex_main_port_t comsat_port_t condor_port_t couchdb_port_t cslistener_port_t ctdb_port_t cvs_port_t cyphesis_port_t daap_port_t dbskkd_port_t dcc_port_t dccm_port_t dhcpc_port_t dhcpd_port_t dict_port_t distccd_port_t dns_port_t dropbox_port_t efs_port_t embrace_dp_c_port_t epmap_port_t epmd_port_t fingerd_port_t ftp_data_port_t ftp_port_t gatekeeper_port_t gdomap_port_t gds_db_port_t git_port_t glance_registry_port_t glusterd_port_t gopher_port_t gpsd_port_t hadoop_datanode_port_t hadoop_namenode_port_t hddtemp_port_t howl_port_t hplip_port_t http_cache_port_t http_port_t i18n_input_port_t imaze_port_t inetd_child_port_t innd_port_t interwise_port_t ionixnetmon_port_t ipmi_port_t ipp_port_t ipsecnat_port_t ircd_port_t isakmp_port_t iscsi_port_t isns_port_t jabber_client_port_t jabber_interserver_port_t jboss_iiop_port_t kdeconnect_port_t kerberos_admin_port_t kerberos_master_port_t kerberos_port_t kismet_port_t kprop_port_t ktalkd_port_t kubernetes_port_t l2tp_port_t ldap_port_t lirc_port_t llmnr_port_t lmtp_port_t lrrd_port_t mail_port_t matahari_port_t memcache_port_t milter_port_t mmcc_port_t mon_port_t monit_port_t monopd_port_t mountd_port_t movaz_ssc_port_t mpd_port_t ms_streaming_port_t msgsrvr_port_t msnp_port_t mssql_port_t munin_port_t mxi_port_t mysqld_port_t mysqlmanagerd_port_t nessus_port_t netport_port_t netsupport_port_t nfs_port_t nfsrdma_port_t nmbd_port_t ntop_port_t ntp_port_t ntske_port_t oa_system_port_t ocsp_port_t openhpid_port_t openvpn_port_t oracledb_port_t pdps_port_t pegasus_http_port_t pegasus_https_port_t pgpkeyserver_port_t pingd_port_t pktcable_cops_port_t pop_port_t portmap_port_t postfix_policyd_port_t postgresql_port_t postgrey_port_t pptp_port_t prelude_port_t presence_port_t printer_port_t ptal_port_t pulseaudio_port_t puppet_port_t puppetclient_port_t pxe_port_t pyzor_port_t radacct_port_t radius_port_t radsec_port_t razor_port_t redis_port_t repository_port_t ricci_modcluster_port_t ricci_port_t rlogind_port_t rndc_port_t router_port_t rsh_port_t rsync_port_t rtorrent_port_t rtsp_port_t rwho_port_t salt_port_t sap_port_t servistaitsm_port_t sieve_port_t sip_port_t sixxsconfig_port_t smbd_port_t smtp_port_t snmp_port_t socks_port_t soundd_port_t spamd_port_t speech_port_t squid_port_t ssdp_port_t ssh_port_t stunnel_port_t svn_port_t svrloc_port_t swat_port_t syncthing_admin_port_t syncthing_discovery_port_t syncthing_port_t sype_transport_port_t syslog_tls_port_t syslogd_port_t tcs_port_t telnetd_port_t tftp_port_t tor_port_t traceroute_port_t transproxy_port_t trisoap_port_t trivnet1_port_t ups_port_t utcpserver_port_t uucpd_port_t varnishd_port_t virt_migration_port_t virt_port_t virtual_places_port_t vnc_port_t wccp_port_t websm_port_t whois_port_t winshadow_port_t wsdapi_port_t wsicopy_port_t xdmcp_port_t xen_port_t xfs_port_t xserver_port_t zabbix_agent_port_t zabbix_port_t zarafa_port_t zebra_port_t zented_port_t zookeeper_client_port_t zookeeper_election_port_t zookeeper_leader_port_t zope_port_t ))
(typeattribute device_node)
(typeattributeset device_node (acpi_bios_t agp_device_t autofs_device_t bsdpty_device_t cachefiles_device_t cardmgr_dev_t clock_device_t console_device_t cpu_device_t crash_device_t crypt_device_t dax_device_t devtty_t dlm_control_device_t dma_device_t dri_device_t event_device_t framebuf_device_t freefall_device_t gpiochip_device_t hyperv_kvp_device_t hyperv_vss_device_t iio_device_t infiniband_device_t ipmi_device_t kmsg_device_t ksm_device_t kvm_device_t lirc_device_t loop_control_device_t lvm_control_t mei_device_t memory_device_t misc_device_t modem_device_t mouse_device_t mptctl_device_t mtrr_device_t null_device_t nvram_device_t pmqos_device_t power_device_t ppp_device_t printer_device_t ptmx_t qemu_device_t random_device_t scanner_device_t smartcard_device_t sound_device_t sysdig_device_t tee_device_t tee_priv_device_t tpm_device_t tty_device_t tun_tap_device_t uhid_device_t urandom_device_t usb_device_t usbmon_device_t usbtty_device_t userfaultfd_device_t userio_device_t v4l_device_t vfio_device_t vhost_device_t virtio_device_t vmware_device_t vsock_device_t watchdog_device_t wireless_device_t xen_device_t xserver_misc_device_t zero_device_t ))
(typeattribute devices_unconfined_type)
(typeattribute domain)
(typeattributeset domain (kernel_t ))
(typeattribute entry_type)
(typeattribute exec_type)
(typeattributeset exec_type (bin_t chroot_exec_t shell_exec_t ))
(typeattribute file_type)
(typeattributeset file_type (anon_inodefs_t autofs_t bin_t binfmt_misc_fs_t boot_t bpf_t capifs_t cardmgr_dev_t cgroup_t chroot_exec_t cifs_t configfs_t cpu_online_t debugfs_t default_t device_t devpts_t dosfs_t ecryptfs_t efivarfs_t etc_runtime_t etc_t fusefs_t home_root_t hugetlbfs_t iso9660_t lost_found_t memory_pressure_t mnt_t modules_object_t nfs_t no_access_t poly_t proc_t proc_xen_t pstore_t ramfs_t readable_t removable_t root_t rpc_pipefs_t security_t shell_exec_t spufs_t src_t sysctl_fs_t sysctl_t sysfs_t system_map_t sysv_t tmp_t tmpfs_t usbfs_t usr_t var_lib_t var_lock_t var_run_t var_spool_t var_t virtiofs_t vmblock_t vxfs_t xenfs_t ))
(typeattribute files_unconfined_type)
(typeattribute filesystem_image_file_type)
(typeattribute filesystem_type)
(typeattributeset filesystem_type (anon_inodefs_t autofs_t bdev_t binfmt_misc_fs_t bpf_t capifs_t cgroup_t cifs_t configfs_t cpusetfs_t debugfs_t device_t devpts_t dosfs_t ecryptfs_t efivarfs_t fs_t fusefs_t futexfs_t hugetlbfs_t ibmasmfs_t infinibandeventfs_t inotifyfs_t iso9660_t kvmfs_t mvfs_t nfs_t nfsd_fs_t nsfs_t oprofilefs_t proc_t pstore_t ramfs_t removable_t romfs_t rpc_pipefs_t security_t spufs_t sysfs_t sysv_t tmpfs_t tracefs_t usbfs_t virtiofs_t vmblock_t vxfs_t xenfs_t ))
(typeattribute filesystem_unconfined_type)
(typeattribute ibendport_type)
(typeattribute ibpkey_type)
(typeattribute ipsec_spd_type)
(typeattribute kern_unconfined)
(typeattribute lockfile)
(typeattributeset lockfile (var_lock_t ))
(typeattribute mcs_constrained_type)
(typeattributeset mcs_constrained_type (netlabel_peer_t ))
(typeattribute mcskillall)
(typeattribute mcsptraceall)
(typeattribute mcsreadall)
(typeattribute mcssetcats)
(typeattributeset mcssetcats (kernel_t ))
(typeattribute mcswriteall)
(typeattribute memory_raw_read)
(typeattribute memory_raw_write)
(typeattribute mlsdbdowngrade)
(typeattribute mlsdbread)
(typeattribute mlsdbreadtoclr)
(typeattribute mlsdbupgrade)
(typeattribute mlsdbusrecv)
(typeattribute mlsdbussend)
(typeattribute mlsdbwrite)
(typeattribute mlsdbwriteinrange)
(typeattribute mlsdbwritetoclr)
(typeattribute mlsfdshare)
(typeattribute mlsfduse)
(typeattribute mlsfiledowngrade)
(typeattribute mlsfileread)
(typeattributeset mlsfileread (kernel_t ))
(typeattribute mlsfilereadtoclr)
(typeattribute mlsfilerelabel)
(typeattribute mlsfilerelabeltoclr)
(typeattribute mlsfileupgrade)
(typeattribute mlsfilewrite)
(typeattributeset mlsfilewrite (kernel_t ))
(typeattribute mlsfilewriteinrange)
(typeattributeset mlsfilewriteinrange (printer_device_t ))
(typeattribute mlsfilewritetoclr)
(typeattribute mlsipcread)
(typeattribute mlsipcreadtoclr)
(typeattribute mlsipcwrite)
(typeattribute mlsipcwritetoclr)
(typeattribute mlskeywrite)
(typeattribute mlskeywritetoclr)
(typeattribute mlsnetdowngrade)
(typeattribute mlsnetinbound)
(typeattribute mlsnetoutbound)
(typeattribute mlsnetread)
(typeattribute mlsnetreadtoclr)
(typeattribute mlsnetrecvall)
(typeattribute mlsnetupgrade)
(typeattribute mlsnetwrite)
(typeattribute mlsnetwriteranged)
(typeattribute mlsnetwritetoclr)
(typeattribute mlsprocread)
(typeattributeset mlsprocread (kernel_t ))
(typeattribute mlsprocreadtoclr)
(typeattribute mlsprocsetsl)
(typeattributeset mlsprocsetsl (kernel_t ))
(typeattribute mlsprocwrite)
(typeattributeset mlsprocwrite (kernel_t ))
(typeattribute mlsprocwritetoclr)
(typeattribute mlsrangetrans)
(typeattribute mlstrustedobject)
(typeattributeset mlstrustedobject (devtty_t null_device_t ptmx_t security_t zero_device_t ))
(typeattribute mlstrustedsocket)
(typeattribute mlsxwinread)
(typeattribute mlsxwinreadcolormap)
(typeattribute mlsxwinreadproperty)
(typeattribute mlsxwinreadselection)
(typeattribute mlsxwinreadtoclr)
(typeattribute mlsxwinwrite)
(typeattribute mlsxwinwritecolormap)
(typeattribute mlsxwinwriteproperty)
(typeattribute mlsxwinwriteselection)
(typeattribute mlsxwinwritetoclr)
(typeattribute mlsxwinwritexinput)
(typeattribute mmap_low_domain_type)
(typeattribute mountpoint)
(typeattributeset mountpoint (anon_inodefs_t autofs_t binfmt_misc_fs_t boot_t bpf_t capifs_t cgroup_t cifs_t configfs_t debugfs_t default_t device_t devpts_t dosfs_t ecryptfs_t efivarfs_t fusefs_t home_root_t hugetlbfs_t iso9660_t mnt_t nfs_t proc_t proc_xen_t pstore_t ramfs_t removable_t root_t rpc_pipefs_t security_t spufs_t src_t sysctl_fs_t sysctl_t sysfs_t sysv_t tmp_t tmpfs_t usbfs_t usr_t var_lib_t var_lock_t var_run_t var_t virtiofs_t vmblock_t vxfs_t xenfs_t ))
(typeattribute netif_type)
(typeattributeset netif_type (netif_t ))
(typeattribute node_type)
(typeattributeset node_type (node_t ))
(typeattribute non_auth_file_type)
(typeattributeset non_auth_file_type (anon_inodefs_t autofs_t bin_t binfmt_misc_fs_t boot_t bpf_t capifs_t cardmgr_dev_t cgroup_t chroot_exec_t cifs_t configfs_t cpu_online_t debugfs_t default_t device_t devpts_t dosfs_t ecryptfs_t efivarfs_t etc_runtime_t etc_t fusefs_t home_root_t hugetlbfs_t iso9660_t lost_found_t memory_pressure_t mnt_t modules_object_t nfs_t no_access_t poly_t proc_t proc_xen_t pstore_t ramfs_t readable_t removable_t root_t rpc_pipefs_t security_t shell_exec_t spufs_t src_t sysctl_fs_t sysctl_t sysfs_t system_map_t sysv_t tmp_t tmpfs_t usbfs_t usr_t var_lib_t var_lock_t var_run_t var_spool_t var_t virtiofs_t vmblock_t vxfs_t xenfs_t ))
(typeattribute non_security_file_type)
(typeattributeset non_security_file_type (anon_inodefs_t autofs_t bin_t binfmt_misc_fs_t boot_t bpf_t capifs_t cardmgr_dev_t cgroup_t chroot_exec_t cifs_t configfs_t cpu_online_t debugfs_t default_t device_t devpts_t dosfs_t ecryptfs_t efivarfs_t etc_runtime_t etc_t fusefs_t home_root_t hugetlbfs_t iso9660_t lost_found_t memory_pressure_t mnt_t modules_object_t nfs_t no_access_t poly_t proc_t proc_xen_t pstore_t ramfs_t readable_t removable_t root_t rpc_pipefs_t security_t shell_exec_t spufs_t src_t sysctl_fs_t sysctl_t sysfs_t system_map_t sysv_t tmp_t tmpfs_t usbfs_t usr_t var_lib_t var_lock_t var_run_t var_spool_t var_t virtiofs_t vmblock_t vxfs_t xenfs_t ))
(typeattribute noxattrfs)
(typeattributeset noxattrfs (autofs_t cifs_t dosfs_t ecryptfs_t fusefs_t iso9660_t mvfs_t nfs_t removable_t sysv_t virtiofs_t vmblock_t vxfs_t xenfs_t ))
(typeattribute packet_type)
(typeattributeset packet_type (adb_client_packet_t adb_server_packet_t afs3_callback_client_packet_t afs3_callback_server_packet_t afs_bos_client_packet_t afs_bos_server_packet_t afs_fs_client_packet_t afs_fs_server_packet_t afs_ka_client_packet_t afs_ka_server_packet_t afs_pt_client_packet_t afs_pt_server_packet_t afs_vl_client_packet_t afs_vl_server_packet_t agentx_client_packet_t agentx_server_packet_t amanda_client_packet_t amanda_server_packet_t amavisd_recv_client_packet_t amavisd_recv_server_packet_t amavisd_send_client_packet_t amavisd_send_server_packet_t amqp_client_packet_t amqp_server_packet_t aol_client_packet_t aol_server_packet_t apcupsd_client_packet_t apcupsd_server_packet_t apertus_ldp_client_packet_t apertus_ldp_server_packet_t aptcacher_client_packet_t aptcacher_server_packet_t armtechdaemon_client_packet_t armtechdaemon_server_packet_t asterisk_client_packet_t asterisk_server_packet_t audit_client_packet_t audit_server_packet_t auth_client_packet_t auth_server_packet_t bgp_client_packet_t bgp_server_packet_t biff_client_packet_t biff_server_packet_t bitcoin_client_packet_t bitcoin_server_packet_t boinc_client_client_packet_t boinc_client_packet_t boinc_client_server_packet_t boinc_server_packet_t certmaster_client_packet_t certmaster_server_packet_t chronyd_client_packet_t chronyd_server_packet_t clamd_client_packet_t clamd_server_packet_t client_packet_t clockspeed_client_packet_t clockspeed_server_packet_t cluster_client_packet_t cluster_server_packet_t cma_client_packet_t cma_server_packet_t cobbler_client_packet_t cobbler_server_packet_t commplex_link_client_packet_t commplex_link_server_packet_t commplex_main_client_packet_t commplex_main_server_packet_t comsat_client_packet_t comsat_server_packet_t condor_client_packet_t condor_server_packet_t couchdb_client_packet_t couchdb_server_packet_t cslistener_client_packet_t cslistener_server_packet_t ctdb_client_packet_t ctdb_server_packet_t cvs_client_packet_t cvs_server_packet_t cyphesis_client_packet_t cyphesis_server_packet_t daap_client_packet_t daap_server_packet_t dbskkd_client_packet_t dbskkd_server_packet_t dcc_client_packet_t dcc_server_packet_t dccm_client_packet_t dccm_server_packet_t dhcpc_client_packet_t dhcpc_server_packet_t dhcpd_client_packet_t dhcpd_server_packet_t dict_client_packet_t dict_server_packet_t distccd_client_packet_t distccd_server_packet_t dns_client_packet_t dns_server_packet_t dropbox_client_packet_t dropbox_server_packet_t efs_client_packet_t efs_server_packet_t embrace_dp_c_client_packet_t embrace_dp_c_server_packet_t epmap_client_packet_t epmap_server_packet_t epmd_client_packet_t epmd_server_packet_t fingerd_client_packet_t fingerd_server_packet_t ftp_client_packet_t ftp_data_client_packet_t ftp_data_server_packet_t ftp_server_packet_t gatekeeper_client_packet_t gatekeeper_server_packet_t gdomap_client_packet_t gdomap_server_packet_t gds_db_client_packet_t gds_db_server_packet_t git_client_packet_t git_server_packet_t glance_registry_client_packet_t glance_registry_server_packet_t glusterd_client_packet_t glusterd_server_packet_t gopher_client_packet_t gopher_server_packet_t gpsd_client_packet_t gpsd_server_packet_t hadoop_datanode_client_packet_t hadoop_datanode_server_packet_t hadoop_namenode_client_packet_t hadoop_namenode_server_packet_t hddtemp_client_packet_t hddtemp_server_packet_t howl_client_packet_t howl_server_packet_t hplip_client_packet_t hplip_server_packet_t http_cache_client_packet_t http_cache_server_packet_t http_client_packet_t http_server_packet_t i18n_input_client_packet_t i18n_input_server_packet_t icmp_packet_t imaze_client_packet_t imaze_server_packet_t inetd_child_client_packet_t inetd_child_server_packet_t innd_client_packet_t innd_server_packet_t interwise_client_packet_t interwise_server_packet_t ionixnetmon_client_packet_t ionixnetmon_server_packet_t ipmi_client_packet_t ipmi_server_packet_t ipp_client_packet_t ipp_server_packet_t ipsecnat_client_packet_t ipsecnat_server_packet_t ircd_client_packet_t ircd_server_packet_t isakmp_client_packet_t isakmp_server_packet_t iscsi_client_packet_t iscsi_server_packet_t isns_client_packet_t isns_server_packet_t jabber_client_client_packet_t jabber_client_server_packet_t jabber_interserver_client_packet_t jabber_interserver_server_packet_t jboss_iiop_client_packet_t jboss_iiop_server_packet_t kdeconnect_client_packet_t kdeconnect_server_packet_t kerberos_admin_client_packet_t kerberos_admin_server_packet_t kerberos_client_packet_t kerberos_master_client_packet_t kerberos_master_server_packet_t kerberos_server_packet_t kismet_client_packet_t kismet_server_packet_t kprop_client_packet_t kprop_server_packet_t ktalkd_client_packet_t ktalkd_server_packet_t kubernetes_client_packet_t kubernetes_server_packet_t l2tp_client_packet_t l2tp_server_packet_t ldap_client_packet_t ldap_server_packet_t lirc_client_packet_t lirc_server_packet_t llmnr_client_packet_t llmnr_server_packet_t lmtp_client_packet_t lmtp_server_packet_t lrrd_client_packet_t lrrd_server_packet_t mail_client_packet_t mail_server_packet_t matahari_client_packet_t matahari_server_packet_t memcache_client_packet_t memcache_server_packet_t milter_client_packet_t milter_server_packet_t mmcc_client_packet_t mmcc_server_packet_t mon_client_packet_t mon_server_packet_t monit_client_packet_t monit_server_packet_t monopd_client_packet_t monopd_server_packet_t mountd_client_packet_t mountd_server_packet_t movaz_ssc_client_packet_t movaz_ssc_server_packet_t mpd_client_packet_t mpd_server_packet_t ms_streaming_client_packet_t ms_streaming_server_packet_t msgsrvr_client_packet_t msgsrvr_server_packet_t msnp_client_packet_t msnp_server_packet_t mssql_client_packet_t mssql_server_packet_t munin_client_packet_t munin_server_packet_t mxi_client_packet_t mxi_server_packet_t mysqld_client_packet_t mysqld_server_packet_t mysqlmanagerd_client_packet_t mysqlmanagerd_server_packet_t nessus_client_packet_t nessus_server_packet_t netport_client_packet_t netport_server_packet_t netsupport_client_packet_t netsupport_server_packet_t nfs_client_packet_t nfs_server_packet_t nfsrdma_client_packet_t nfsrdma_server_packet_t nmbd_client_packet_t nmbd_server_packet_t ntop_client_packet_t ntop_server_packet_t ntp_client_packet_t ntp_server_packet_t ntske_client_packet_t ntske_server_packet_t oa_system_client_packet_t oa_system_server_packet_t ocsp_client_packet_t ocsp_server_packet_t openhpid_client_packet_t openhpid_server_packet_t openvpn_client_packet_t openvpn_server_packet_t oracledb_client_packet_t oracledb_server_packet_t pdps_client_packet_t pdps_server_packet_t pegasus_http_client_packet_t pegasus_http_server_packet_t pegasus_https_client_packet_t pegasus_https_server_packet_t pgpkeyserver_client_packet_t pgpkeyserver_server_packet_t pingd_client_packet_t pingd_server_packet_t pktcable_cops_client_packet_t pktcable_cops_server_packet_t pop_client_packet_t pop_server_packet_t portmap_client_packet_t portmap_server_packet_t postfix_policyd_client_packet_t postfix_policyd_server_packet_t postgresql_client_packet_t postgresql_server_packet_t postgrey_client_packet_t postgrey_server_packet_t pptp_client_packet_t pptp_server_packet_t prelude_client_packet_t prelude_server_packet_t presence_client_packet_t presence_server_packet_t printer_client_packet_t printer_server_packet_t ptal_client_packet_t ptal_server_packet_t pulseaudio_client_packet_t pulseaudio_server_packet_t puppet_client_packet_t puppet_server_packet_t puppetclient_client_packet_t puppetclient_server_packet_t pxe_client_packet_t pxe_server_packet_t pyzor_client_packet_t pyzor_server_packet_t radacct_client_packet_t radacct_server_packet_t radius_client_packet_t radius_server_packet_t radsec_client_packet_t radsec_server_packet_t razor_client_packet_t razor_server_packet_t redis_client_packet_t redis_server_packet_t repository_client_packet_t repository_server_packet_t ricci_client_packet_t ricci_modcluster_client_packet_t ricci_modcluster_server_packet_t ricci_server_packet_t rlogind_client_packet_t rlogind_server_packet_t rndc_client_packet_t rndc_server_packet_t router_client_packet_t router_server_packet_t rsh_client_packet_t rsh_server_packet_t rsync_client_packet_t rsync_server_packet_t rtorrent_client_packet_t rtorrent_server_packet_t rtsp_client_packet_t rtsp_server_packet_t rwho_client_packet_t rwho_server_packet_t salt_client_packet_t salt_server_packet_t sap_client_packet_t sap_server_packet_t server_packet_t servistaitsm_client_packet_t servistaitsm_server_packet_t sieve_client_packet_t sieve_server_packet_t sip_client_packet_t sip_server_packet_t sixxsconfig_client_packet_t sixxsconfig_server_packet_t smbd_client_packet_t smbd_server_packet_t smtp_client_packet_t smtp_server_packet_t snmp_client_packet_t snmp_server_packet_t socks_client_packet_t socks_server_packet_t soundd_client_packet_t soundd_server_packet_t spamd_client_packet_t spamd_server_packet_t speech_client_packet_t speech_server_packet_t squid_client_packet_t squid_server_packet_t ssdp_client_packet_t ssdp_server_packet_t ssh_client_packet_t ssh_server_packet_t stunnel_client_packet_t stunnel_server_packet_t svn_client_packet_t svn_server_packet_t svrloc_client_packet_t svrloc_server_packet_t swat_client_packet_t swat_server_packet_t syncthing_admin_client_packet_t syncthing_admin_server_packet_t syncthing_client_packet_t syncthing_discovery_client_packet_t syncthing_discovery_server_packet_t syncthing_server_packet_t sype_transport_client_packet_t sype_transport_server_packet_t syslog_tls_client_packet_t syslog_tls_server_packet_t syslogd_client_packet_t syslogd_server_packet_t tcs_client_packet_t tcs_server_packet_t telnetd_client_packet_t telnetd_server_packet_t tftp_client_packet_t tftp_server_packet_t tor_client_packet_t tor_server_packet_t traceroute_client_packet_t traceroute_server_packet_t transproxy_client_packet_t transproxy_server_packet_t trisoap_client_packet_t trisoap_server_packet_t trivnet1_client_packet_t trivnet1_server_packet_t ups_client_packet_t ups_server_packet_t utcpserver_client_packet_t utcpserver_server_packet_t uucpd_client_packet_t uucpd_server_packet_t varnishd_client_packet_t varnishd_server_packet_t virt_client_packet_t virt_migration_client_packet_t virt_migration_server_packet_t virt_server_packet_t virtual_places_client_packet_t virtual_places_server_packet_t vnc_client_packet_t vnc_server_packet_t wccp_client_packet_t wccp_server_packet_t websm_client_packet_t websm_server_packet_t whois_client_packet_t whois_server_packet_t winshadow_client_packet_t winshadow_server_packet_t wsdapi_client_packet_t wsdapi_server_packet_t wsicopy_client_packet_t wsicopy_server_packet_t xdmcp_client_packet_t xdmcp_server_packet_t xen_client_packet_t xen_server_packet_t xfs_client_packet_t xfs_server_packet_t xserver_client_packet_t xserver_server_packet_t zabbix_agent_client_packet_t zabbix_agent_server_packet_t zabbix_client_packet_t zabbix_server_packet_t zarafa_client_packet_t zarafa_server_packet_t zebra_client_packet_t zebra_server_packet_t zented_client_packet_t zented_server_packet_t zookeeper_client_client_packet_t zookeeper_client_server_packet_t zookeeper_election_client_packet_t zookeeper_election_server_packet_t zookeeper_leader_client_packet_t zookeeper_leader_server_packet_t zope_client_packet_t zope_server_packet_t ))
(typeattribute pidfile)
(typeattributeset pidfile (var_run_t ))
(typeattribute polydir)
(typeattributeset polydir (tmp_t ))
(typeattribute polymember)
(typeattributeset polymember (cardmgr_dev_t tmp_t var_spool_t ))
(typeattribute polyparent)
(typeattributeset polyparent (home_root_t root_t tmp_t tmpfs_t ))
(typeattribute port_type)
(typeattributeset port_type (adb_port_t afs3_callback_port_t afs_bos_port_t afs_fs_port_t afs_ka_port_t afs_pt_port_t afs_vl_port_t agentx_port_t amanda_port_t amavisd_recv_port_t amavisd_send_port_t amqp_port_t aol_port_t apcupsd_port_t apertus_ldp_port_t aptcacher_port_t armtechdaemon_port_t asterisk_port_t audit_port_t auth_port_t bgp_port_t biff_port_t bitcoin_port_t boinc_client_port_t boinc_port_t certmaster_port_t chronyd_port_t clamd_port_t clockspeed_port_t cluster_port_t cma_port_t cobbler_port_t commplex_link_port_t commplex_main_port_t comsat_port_t condor_port_t couchdb_port_t cslistener_port_t ctdb_port_t cvs_port_t cyphesis_port_t daap_port_t dbskkd_port_t dcc_port_t dccm_port_t dhcpc_port_t dhcpd_port_t dict_port_t distccd_port_t dns_port_t dropbox_port_t efs_port_t embrace_dp_c_port_t epmap_port_t epmd_port_t fingerd_port_t ftp_data_port_t ftp_port_t gatekeeper_port_t gdomap_port_t gds_db_port_t git_port_t glance_registry_port_t glusterd_port_t gopher_port_t gpsd_port_t hadoop_datanode_port_t hadoop_namenode_port_t hddtemp_port_t hi_reserved_port_t howl_port_t hplip_port_t http_cache_port_t http_port_t i18n_input_port_t imaze_port_t inetd_child_port_t innd_port_t interwise_port_t ionixnetmon_port_t ipmi_port_t ipp_port_t ipsecnat_port_t ircd_port_t isakmp_port_t iscsi_port_t isns_port_t jabber_client_port_t jabber_interserver_port_t jboss_iiop_port_t kdeconnect_port_t kerberos_admin_port_t kerberos_master_port_t kerberos_port_t kismet_port_t kprop_port_t ktalkd_port_t kubernetes_port_t l2tp_port_t ldap_port_t lirc_port_t llmnr_port_t lmtp_port_t lrrd_port_t mail_port_t matahari_port_t memcache_port_t milter_port_t mmcc_port_t mon_port_t monit_port_t monopd_port_t mountd_port_t movaz_ssc_port_t mpd_port_t ms_streaming_port_t msgsrvr_port_t msnp_port_t mssql_port_t munin_port_t mxi_port_t mysqld_port_t mysqlmanagerd_port_t nessus_port_t netport_port_t netsupport_port_t nfs_port_t nfsrdma_port_t nmbd_port_t ntop_port_t ntp_port_t ntske_port_t oa_system_port_t ocsp_port_t openhpid_port_t openvpn_port_t oracledb_port_t pdps_port_t pegasus_http_port_t pegasus_https_port_t pgpkeyserver_port_t pingd_port_t pktcable_cops_port_t pop_port_t port_t portmap_port_t postfix_policyd_port_t postgresql_port_t postgrey_port_t pptp_port_t prelude_port_t presence_port_t printer_port_t ptal_port_t pulseaudio_port_t puppet_port_t puppetclient_port_t pxe_port_t pyzor_port_t radacct_port_t radius_port_t radsec_port_t razor_port_t redis_port_t repository_port_t reserved_port_t ricci_modcluster_port_t ricci_port_t rlogind_port_t rndc_port_t router_port_t rsh_port_t rsync_port_t rtorrent_port_t rtsp_port_t rwho_port_t salt_port_t sap_port_t servistaitsm_port_t sieve_port_t sip_port_t sixxsconfig_port_t smbd_port_t smtp_port_t snmp_port_t socks_port_t soundd_port_t spamd_port_t speech_port_t squid_port_t ssdp_port_t ssh_port_t stunnel_port_t svn_port_t svrloc_port_t swat_port_t syncthing_admin_port_t syncthing_discovery_port_t syncthing_port_t sype_transport_port_t syslog_tls_port_t syslogd_port_t tcs_port_t telnetd_port_t tftp_port_t tor_port_t traceroute_port_t transproxy_port_t trisoap_port_t trivnet1_port_t unreserved_port_t ups_port_t utcpserver_port_t uucpd_port_t varnishd_port_t virt_migration_port_t virt_port_t virtual_places_port_t vnc_port_t wccp_port_t websm_port_t whois_port_t winshadow_port_t wsdapi_port_t wsicopy_port_t xdmcp_port_t xen_port_t xfs_port_t xserver_port_t zabbix_agent_port_t zabbix_port_t zarafa_port_t zebra_port_t zented_port_t zookeeper_client_port_t zookeeper_election_port_t zookeeper_leader_port_t zope_port_t ))
(typeattribute privfd)
(typeattribute privrangetrans)
(typeattributeset privrangetrans (kernel_t ))
(typeattribute proc_type)
(typeattributeset proc_type (proc_afs_t proc_kcore_t proc_kmsg_t proc_mdstat_t proc_net_t proc_psi_t proc_t proc_xen_t ))
(typeattribute process_uncond_exempt)
(typeattribute process_user_target)
(typeattribute pseudofs)
(typeattributeset pseudofs (efivarfs_t usbfs_t ))
(typeattribute ptynode)
(typeattribute reserved_port_type)
(typeattributeset reserved_port_type (agentx_port_t apertus_ldp_port_t audit_port_t auth_port_t bgp_port_t chronyd_port_t comsat_port_t dhcpc_port_t dhcpd_port_t dns_port_t efs_port_t epmap_port_t fingerd_port_t ftp_data_port_t ftp_port_t gdomap_port_t gopher_port_t hi_reserved_port_t http_port_t inetd_child_port_t innd_port_t ipmi_port_t ipp_port_t isakmp_port_t kerberos_admin_port_t kerberos_port_t kprop_port_t ktalkd_port_t ldap_port_t lmtp_port_t nmbd_port_t ntp_port_t pop_port_t portmap_port_t printer_port_t reserved_port_t rlogind_port_t rndc_port_t router_port_t rsh_port_t rsync_port_t rtsp_port_t rwho_port_t smbd_port_t smtp_port_t snmp_port_t spamd_port_t ssh_port_t svrloc_port_t swat_port_t syslogd_port_t telnetd_port_t tftp_port_t uucpd_port_t whois_port_t xdmcp_port_t zarafa_port_t ))
(typeattribute rpc_port_type)
(typeattributeset rpc_port_type (agentx_port_t apertus_ldp_port_t comsat_port_t dhcpc_port_t dhcpd_port_t dns_port_t efs_port_t ftp_port_t gdomap_port_t hi_reserved_port_t inetd_child_port_t ipmi_port_t ipp_port_t kerberos_admin_port_t kerberos_port_t kprop_port_t ktalkd_port_t ldap_port_t pop_port_t printer_port_t rlogind_port_t rndc_port_t router_port_t rsh_port_t rsync_port_t rtsp_port_t rwho_port_t smtp_port_t spamd_port_t swat_port_t syslogd_port_t uucpd_port_t ))
(typeattribute security_file_type)
(typeattribute selinux_unconfined_type)
(typeattribute serial_device)
(typeattributeset serial_device (tty_device_t usbtty_device_t virtio_device_t ))
(typeattribute server_packet_type)
(typeattributeset server_packet_type (adb_server_packet_t afs3_callback_server_packet_t afs_bos_server_packet_t afs_fs_server_packet_t afs_ka_server_packet_t afs_pt_server_packet_t afs_vl_server_packet_t agentx_server_packet_t amanda_server_packet_t amavisd_recv_server_packet_t amavisd_send_server_packet_t amqp_server_packet_t aol_server_packet_t apcupsd_server_packet_t apertus_ldp_server_packet_t aptcacher_server_packet_t armtechdaemon_server_packet_t asterisk_server_packet_t audit_server_packet_t auth_server_packet_t bgp_server_packet_t biff_server_packet_t bitcoin_server_packet_t boinc_client_server_packet_t boinc_server_packet_t certmaster_server_packet_t chronyd_server_packet_t clamd_server_packet_t clockspeed_server_packet_t cluster_server_packet_t cma_server_packet_t cobbler_server_packet_t commplex_link_server_packet_t commplex_main_server_packet_t comsat_server_packet_t condor_server_packet_t couchdb_server_packet_t cslistener_server_packet_t ctdb_server_packet_t cvs_server_packet_t cyphesis_server_packet_t daap_server_packet_t dbskkd_server_packet_t dcc_server_packet_t dccm_server_packet_t dhcpc_server_packet_t dhcpd_server_packet_t dict_server_packet_t distccd_server_packet_t dns_server_packet_t dropbox_server_packet_t efs_server_packet_t embrace_dp_c_server_packet_t epmap_server_packet_t epmd_server_packet_t fingerd_server_packet_t ftp_data_server_packet_t ftp_server_packet_t gatekeeper_server_packet_t gdomap_server_packet_t gds_db_server_packet_t git_server_packet_t glance_registry_server_packet_t glusterd_server_packet_t gopher_server_packet_t gpsd_server_packet_t hadoop_datanode_server_packet_t hadoop_namenode_server_packet_t hddtemp_server_packet_t howl_server_packet_t hplip_server_packet_t http_cache_server_packet_t http_server_packet_t i18n_input_server_packet_t imaze_server_packet_t inetd_child_server_packet_t innd_server_packet_t interwise_server_packet_t ionixnetmon_server_packet_t ipmi_server_packet_t ipp_server_packet_t ipsecnat_server_packet_t ircd_server_packet_t isakmp_server_packet_t iscsi_server_packet_t isns_server_packet_t jabber_client_server_packet_t jabber_interserver_server_packet_t jboss_iiop_server_packet_t kdeconnect_server_packet_t kerberos_admin_server_packet_t kerberos_master_server_packet_t kerberos_server_packet_t kismet_server_packet_t kprop_server_packet_t ktalkd_server_packet_t kubernetes_server_packet_t l2tp_server_packet_t ldap_server_packet_t lirc_server_packet_t llmnr_server_packet_t lmtp_server_packet_t lrrd_server_packet_t mail_server_packet_t matahari_server_packet_t memcache_server_packet_t milter_server_packet_t mmcc_server_packet_t mon_server_packet_t monit_server_packet_t monopd_server_packet_t mountd_server_packet_t movaz_ssc_server_packet_t mpd_server_packet_t ms_streaming_server_packet_t msgsrvr_server_packet_t msnp_server_packet_t mssql_server_packet_t munin_server_packet_t mxi_server_packet_t mysqld_server_packet_t mysqlmanagerd_server_packet_t nessus_server_packet_t netport_server_packet_t netsupport_server_packet_t nfs_server_packet_t nfsrdma_server_packet_t nmbd_server_packet_t ntop_server_packet_t ntp_server_packet_t ntske_server_packet_t oa_system_server_packet_t ocsp_server_packet_t openhpid_server_packet_t openvpn_server_packet_t oracledb_server_packet_t pdps_server_packet_t pegasus_http_server_packet_t pegasus_https_server_packet_t pgpkeyserver_server_packet_t pingd_server_packet_t pktcable_cops_server_packet_t pop_server_packet_t portmap_server_packet_t postfix_policyd_server_packet_t postgresql_server_packet_t postgrey_server_packet_t pptp_server_packet_t prelude_server_packet_t presence_server_packet_t printer_server_packet_t ptal_server_packet_t pulseaudio_server_packet_t puppet_server_packet_t puppetclient_server_packet_t pxe_server_packet_t pyzor_server_packet_t radacct_server_packet_t radius_server_packet_t radsec_server_packet_t razor_server_packet_t redis_server_packet_t repository_server_packet_t ricci_modcluster_server_packet_t ricci_server_packet_t rlogind_server_packet_t rndc_server_packet_t router_server_packet_t rsh_server_packet_t rsync_server_packet_t rtorrent_server_packet_t rtsp_server_packet_t rwho_server_packet_t salt_server_packet_t sap_server_packet_t server_packet_t servistaitsm_server_packet_t sieve_server_packet_t sip_server_packet_t sixxsconfig_server_packet_t smbd_server_packet_t smtp_server_packet_t snmp_server_packet_t socks_server_packet_t soundd_server_packet_t spamd_server_packet_t speech_server_packet_t squid_server_packet_t ssdp_server_packet_t ssh_server_packet_t stunnel_server_packet_t svn_server_packet_t svrloc_server_packet_t swat_server_packet_t syncthing_admin_server_packet_t syncthing_discovery_server_packet_t syncthing_server_packet_t sype_transport_server_packet_t syslog_tls_server_packet_t syslogd_server_packet_t tcs_server_packet_t telnetd_server_packet_t tftp_server_packet_t tor_server_packet_t traceroute_server_packet_t transproxy_server_packet_t trisoap_server_packet_t trivnet1_server_packet_t ups_server_packet_t utcpserver_server_packet_t uucpd_server_packet_t varnishd_server_packet_t virt_migration_server_packet_t virt_server_packet_t virtual_places_server_packet_t vnc_server_packet_t wccp_server_packet_t websm_server_packet_t whois_server_packet_t winshadow_server_packet_t wsdapi_server_packet_t wsicopy_server_packet_t xdmcp_server_packet_t xen_server_packet_t xfs_server_packet_t xserver_server_packet_t zabbix_agent_server_packet_t zabbix_server_packet_t zarafa_server_packet_t zebra_server_packet_t zented_server_packet_t zookeeper_client_server_packet_t zookeeper_election_server_packet_t zookeeper_leader_server_packet_t zope_server_packet_t ))
(typeattribute server_ptynode)
(typeattribute set_curr_context)
(typeattribute spoolfile)
(typeattribute sysctl_type)
(typeattributeset sysctl_type (sysctl_crypto_t sysctl_dev_t sysctl_fs_t sysctl_hotplug_t sysctl_irq_t sysctl_kernel_ns_last_pid_t sysctl_kernel_t sysctl_modprobe_t sysctl_net_t sysctl_net_unix_t sysctl_rpc_t sysctl_t sysctl_vm_overcommit_t sysctl_vm_t ))
(typeattribute sysfs_types)
(typeattributeset sysfs_types (cpu_online_t sysfs_t ))
(typeattribute tmpfile)
(typeattributeset tmpfile (cardmgr_dev_t tmp_t var_spool_t ))
(typeattribute tmpfsfile)
(typeattribute ttynode)
(typeattribute ubac_constrained_type)
(typeattribute ubacdb)
(typeattribute ubacdbus)
(typeattribute ubacfd)
(typeattribute ubacfile)
(typeattribute ubacipc)
(typeattribute ubackey)
(typeattribute ubacproc)
(typeattribute ubacsock)
(typeattribute ubacxwin)
(typeattribute unconfined_domain_type)
(typeattribute unreserved_port_type)
(typeattributeset unreserved_port_type (adb_port_t afs3_callback_port_t afs_bos_port_t afs_fs_port_t afs_ka_port_t afs_pt_port_t afs_vl_port_t amanda_port_t amavisd_recv_port_t amavisd_send_port_t amqp_port_t aol_port_t apcupsd_port_t aptcacher_port_t armtechdaemon_port_t asterisk_port_t bitcoin_port_t boinc_client_port_t boinc_port_t certmaster_port_t clamd_port_t clockspeed_port_t cluster_port_t cma_port_t cobbler_port_t commplex_link_port_t commplex_main_port_t condor_port_t couchdb_port_t cslistener_port_t ctdb_port_t cvs_port_t cyphesis_port_t daap_port_t dbskkd_port_t dcc_port_t dccm_port_t dict_port_t distccd_port_t dropbox_port_t embrace_dp_c_port_t epmd_port_t gatekeeper_port_t gds_db_port_t git_port_t glance_registry_port_t glusterd_port_t gpsd_port_t hadoop_datanode_port_t hadoop_namenode_port_t hddtemp_port_t howl_port_t hplip_port_t http_cache_port_t i18n_input_port_t imaze_port_t interwise_port_t ionixnetmon_port_t ipsecnat_port_t ircd_port_t iscsi_port_t isns_port_t jabber_client_port_t jabber_interserver_port_t jboss_iiop_port_t kdeconnect_port_t kerberos_master_port_t kismet_port_t kubernetes_port_t l2tp_port_t lirc_port_t llmnr_port_t mail_port_t matahari_port_t memcache_port_t mmcc_port_t mon_port_t monit_port_t monopd_port_t mountd_port_t movaz_ssc_port_t mpd_port_t ms_streaming_port_t msgsrvr_port_t msnp_port_t mssql_port_t munin_port_t mxi_port_t mysqld_port_t mysqlmanagerd_port_t nessus_port_t netport_port_t netsupport_port_t nfs_port_t nfsrdma_port_t ntop_port_t ntske_port_t oa_system_port_t ocsp_port_t openhpid_port_t openvpn_port_t oracledb_port_t pdps_port_t pegasus_http_port_t pegasus_https_port_t pgpkeyserver_port_t pingd_port_t pktcable_cops_port_t postfix_policyd_port_t postgresql_port_t postgrey_port_t pptp_port_t prelude_port_t presence_port_t ptal_port_t pulseaudio_port_t puppet_port_t puppetclient_port_t pxe_port_t pyzor_port_t radacct_port_t radius_port_t radsec_port_t razor_port_t redis_port_t repository_port_t ricci_modcluster_port_t ricci_port_t rtorrent_port_t salt_port_t sap_port_t servistaitsm_port_t sieve_port_t sip_port_t sixxsconfig_port_t soundd_port_t speech_port_t squid_port_t ssdp_port_t svn_port_t syncthing_admin_port_t syncthing_discovery_port_t syncthing_port_t sype_transport_port_t syslog_tls_port_t tcs_port_t tor_port_t traceroute_port_t transproxy_port_t trisoap_port_t trivnet1_port_t unreserved_port_t ups_port_t varnishd_port_t virt_migration_port_t virt_port_t virtual_places_port_t vnc_port_t wccp_port_t websm_port_t winshadow_port_t wsdapi_port_t wsicopy_port_t xen_port_t xfs_port_t xserver_port_t zabbix_agent_port_t zabbix_port_t zebra_port_t zented_port_t zookeeper_client_port_t zookeeper_election_port_t zookeeper_leader_port_t zope_port_t ))
(typeattribute usercanread)
(typeattribute xattrfs)
(typeattributeset xattrfs (device_t devpts_t fs_t hugetlbfs_t ramfs_t sysfs_t tmpfs_t ))
(type acpi_bios_t)
(roletype object_r acpi_bios_t)
(type adb_client_packet_t)
(roletype object_r adb_client_packet_t)
(type adb_port_t)
(roletype object_r adb_port_t)
(type adb_server_packet_t)
(roletype object_r adb_server_packet_t)
(type afs3_callback_client_packet_t)
(roletype object_r afs3_callback_client_packet_t)
(type afs3_callback_port_t)
(roletype object_r afs3_callback_port_t)
(type afs3_callback_server_packet_t)
(roletype object_r afs3_callback_server_packet_t)
(type afs_bos_client_packet_t)
(roletype object_r afs_bos_client_packet_t)
(type afs_bos_port_t)
(roletype object_r afs_bos_port_t)
(type afs_bos_server_packet_t)
(roletype object_r afs_bos_server_packet_t)
(type afs_fs_client_packet_t)
(roletype object_r afs_fs_client_packet_t)
(type afs_fs_port_t)
(roletype object_r afs_fs_port_t)
(type afs_fs_server_packet_t)
(roletype object_r afs_fs_server_packet_t)
(type afs_ka_client_packet_t)
(roletype object_r afs_ka_client_packet_t)
(type afs_ka_port_t)
(roletype object_r afs_ka_port_t)
(type afs_ka_server_packet_t)
(roletype object_r afs_ka_server_packet_t)
(type afs_pt_client_packet_t)
(roletype object_r afs_pt_client_packet_t)
(type afs_pt_port_t)
(roletype object_r afs_pt_port_t)
(type afs_pt_server_packet_t)
(roletype object_r afs_pt_server_packet_t)
(type afs_vl_client_packet_t)
(roletype object_r afs_vl_client_packet_t)
(type afs_vl_port_t)
(roletype object_r afs_vl_port_t)
(type afs_vl_server_packet_t)
(roletype object_r afs_vl_server_packet_t)
(type agentx_client_packet_t)
(roletype object_r agentx_client_packet_t)
(type agentx_port_t)
(roletype object_r agentx_port_t)
(type agentx_server_packet_t)
(roletype object_r agentx_server_packet_t)
(type agp_device_t)
(roletype object_r agp_device_t)
(type amanda_client_packet_t)
(roletype object_r amanda_client_packet_t)
(type amanda_port_t)
(roletype object_r amanda_port_t)
(type amanda_server_packet_t)
(roletype object_r amanda_server_packet_t)
(type amavisd_recv_client_packet_t)
(roletype object_r amavisd_recv_client_packet_t)
(type amavisd_recv_port_t)
(roletype object_r amavisd_recv_port_t)
(type amavisd_recv_server_packet_t)
(roletype object_r amavisd_recv_server_packet_t)
(type amavisd_send_client_packet_t)
(roletype object_r amavisd_send_client_packet_t)
(type amavisd_send_port_t)
(roletype object_r amavisd_send_port_t)
(type amavisd_send_server_packet_t)
(roletype object_r amavisd_send_server_packet_t)
(type amqp_client_packet_t)
(roletype object_r amqp_client_packet_t)
(type amqp_port_t)
(roletype object_r amqp_port_t)
(type amqp_server_packet_t)
(roletype object_r amqp_server_packet_t)
(type anon_inodefs_t)
(roletype object_r anon_inodefs_t)
(type aol_client_packet_t)
(roletype object_r aol_client_packet_t)
(type aol_port_t)
(roletype object_r aol_port_t)
(type aol_server_packet_t)
(roletype object_r aol_server_packet_t)
(type apcupsd_client_packet_t)
(roletype object_r apcupsd_client_packet_t)
(type apcupsd_port_t)
(roletype object_r apcupsd_port_t)
(type apcupsd_server_packet_t)
(roletype object_r apcupsd_server_packet_t)
(type apertus_ldp_client_packet_t)
(roletype object_r apertus_ldp_client_packet_t)
(type apertus_ldp_port_t)
(roletype object_r apertus_ldp_port_t)
(type apertus_ldp_server_packet_t)
(roletype object_r apertus_ldp_server_packet_t)
(type aptcacher_client_packet_t)
(roletype object_r aptcacher_client_packet_t)
(type aptcacher_port_t)
(roletype object_r aptcacher_port_t)
(type aptcacher_server_packet_t)
(roletype object_r aptcacher_server_packet_t)
(type armtechdaemon_client_packet_t)
(roletype object_r armtechdaemon_client_packet_t)
(type armtechdaemon_port_t)
(roletype object_r armtechdaemon_port_t)
(type armtechdaemon_server_packet_t)
(roletype object_r armtechdaemon_server_packet_t)
(type asterisk_client_packet_t)
(roletype object_r asterisk_client_packet_t)
(type asterisk_port_t)
(roletype object_r asterisk_port_t)
(type asterisk_server_packet_t)
(roletype object_r asterisk_server_packet_t)
(type audit_client_packet_t)
(roletype object_r audit_client_packet_t)
(type audit_port_t)
(roletype object_r audit_port_t)
(type audit_server_packet_t)
(roletype object_r audit_server_packet_t)
(type auth_client_packet_t)
(roletype object_r auth_client_packet_t)
(type auth_port_t)
(roletype object_r auth_port_t)
(type auth_server_packet_t)
(roletype object_r auth_server_packet_t)
(type autofs_device_t)
(roletype object_r autofs_device_t)
(type autofs_t)
(roletype object_r autofs_t)
(type bdev_t)
(roletype object_r bdev_t)
(type bgp_client_packet_t)
(roletype object_r bgp_client_packet_t)
(type bgp_port_t)
(roletype object_r bgp_port_t)
(type bgp_server_packet_t)
(roletype object_r bgp_server_packet_t)
(type biff_client_packet_t)
(roletype object_r biff_client_packet_t)
(type biff_port_t)
(roletype object_r biff_port_t)
(type biff_server_packet_t)
(roletype object_r biff_server_packet_t)
(type bin_t)
(roletype object_r bin_t)
(type binfmt_misc_fs_t)
(roletype object_r binfmt_misc_fs_t)
(type bitcoin_client_packet_t)
(roletype object_r bitcoin_client_packet_t)
(type bitcoin_port_t)
(roletype object_r bitcoin_port_t)
(type bitcoin_server_packet_t)
(roletype object_r bitcoin_server_packet_t)
(type boinc_client_client_packet_t)
(roletype object_r boinc_client_client_packet_t)
(type boinc_client_packet_t)
(roletype object_r boinc_client_packet_t)
(type boinc_client_port_t)
(roletype object_r boinc_client_port_t)
(type boinc_client_server_packet_t)
(roletype object_r boinc_client_server_packet_t)
(type boinc_port_t)
(roletype object_r boinc_port_t)
(type boinc_server_packet_t)
(roletype object_r boinc_server_packet_t)
(type boolean_t)
(roletype object_r boolean_t)
(type boot_t)
(roletype object_r boot_t)
(type bpf_t)
(roletype object_r bpf_t)
(type bsdpty_device_t)
(roletype object_r bsdpty_device_t)
(type cachefiles_device_t)
(roletype object_r cachefiles_device_t)
(type capifs_t)
(roletype object_r capifs_t)
(type cardmgr_dev_t)
(roletype object_r cardmgr_dev_t)
(type certmaster_client_packet_t)
(roletype object_r certmaster_client_packet_t)
(type certmaster_port_t)
(roletype object_r certmaster_port_t)
(type certmaster_server_packet_t)
(roletype object_r certmaster_server_packet_t)
(type cgroup_t)
(roletype object_r cgroup_t)
(type chronyd_client_packet_t)
(roletype object_r chronyd_client_packet_t)
(type chronyd_port_t)
(roletype object_r chronyd_port_t)
(type chronyd_server_packet_t)
(roletype object_r chronyd_server_packet_t)
(type chroot_exec_t)
(roletype object_r chroot_exec_t)
(type cifs_t)
(roletype object_r cifs_t)
(type clamd_client_packet_t)
(roletype object_r clamd_client_packet_t)
(type clamd_port_t)
(roletype object_r clamd_port_t)
(type clamd_server_packet_t)
(roletype object_r clamd_server_packet_t)
(type client_packet_t)
(roletype object_r client_packet_t)
(type clock_device_t)
(roletype object_r clock_device_t)
(type clockspeed_client_packet_t)
(roletype object_r clockspeed_client_packet_t)
(type clockspeed_port_t)
(roletype object_r clockspeed_port_t)
(type clockspeed_server_packet_t)
(roletype object_r clockspeed_server_packet_t)
(type cluster_client_packet_t)
(roletype object_r cluster_client_packet_t)
(type cluster_port_t)
(roletype object_r cluster_port_t)
(type cluster_server_packet_t)
(roletype object_r cluster_server_packet_t)
(type cma_client_packet_t)
(roletype object_r cma_client_packet_t)
(type cma_port_t)
(roletype object_r cma_port_t)
(type cma_server_packet_t)
(roletype object_r cma_server_packet_t)
(type cobbler_client_packet_t)
(roletype object_r cobbler_client_packet_t)
(type cobbler_port_t)
(roletype object_r cobbler_port_t)
(type cobbler_server_packet_t)
(roletype object_r cobbler_server_packet_t)
(type commplex_link_client_packet_t)
(roletype object_r commplex_link_client_packet_t)
(type commplex_link_port_t)
(roletype object_r commplex_link_port_t)
(type commplex_link_server_packet_t)
(roletype object_r commplex_link_server_packet_t)
(type commplex_main_client_packet_t)
(roletype object_r commplex_main_client_packet_t)
(type commplex_main_port_t)
(roletype object_r commplex_main_port_t)
(type commplex_main_server_packet_t)
(roletype object_r commplex_main_server_packet_t)
(type comsat_client_packet_t)
(roletype object_r comsat_client_packet_t)
(type comsat_port_t)
(roletype object_r comsat_port_t)
(type comsat_server_packet_t)
(roletype object_r comsat_server_packet_t)
(type condor_client_packet_t)
(roletype object_r condor_client_packet_t)
(type condor_port_t)
(roletype object_r condor_port_t)
(type condor_server_packet_t)
(roletype object_r condor_server_packet_t)
(type configfs_t)
(roletype object_r configfs_t)
(type console_device_t)
(roletype object_r console_device_t)
(type couchdb_client_packet_t)
(roletype object_r couchdb_client_packet_t)
(type couchdb_port_t)
(roletype object_r couchdb_port_t)
(type couchdb_server_packet_t)
(roletype object_r couchdb_server_packet_t)
(type cpu_device_t)
(roletype object_r cpu_device_t)
(type cpu_online_t)
(roletype object_r cpu_online_t)
(type cpusetfs_t)
(roletype object_r cpusetfs_t)
(type crash_device_t)
(roletype object_r crash_device_t)
(type crypt_device_t)
(roletype object_r crypt_device_t)
(type cslistener_client_packet_t)
(roletype object_r cslistener_client_packet_t)
(type cslistener_port_t)
(roletype object_r cslistener_port_t)
(type cslistener_server_packet_t)
(roletype object_r cslistener_server_packet_t)
(type ctdb_client_packet_t)
(roletype object_r ctdb_client_packet_t)
(type ctdb_port_t)
(roletype object_r ctdb_port_t)
(type ctdb_server_packet_t)
(roletype object_r ctdb_server_packet_t)
(type cvs_client_packet_t)
(roletype object_r cvs_client_packet_t)
(type cvs_port_t)
(roletype object_r cvs_port_t)
(type cvs_server_packet_t)
(roletype object_r cvs_server_packet_t)
(type cyphesis_client_packet_t)
(roletype object_r cyphesis_client_packet_t)
(type cyphesis_port_t)
(roletype object_r cyphesis_port_t)
(type cyphesis_server_packet_t)
(roletype object_r cyphesis_server_packet_t)
(type daap_client_packet_t)
(roletype object_r daap_client_packet_t)
(type daap_port_t)
(roletype object_r daap_port_t)
(type daap_server_packet_t)
(roletype object_r daap_server_packet_t)
(type dax_device_t)
(roletype object_r dax_device_t)
(type dbskkd_client_packet_t)
(roletype object_r dbskkd_client_packet_t)
(type dbskkd_port_t)
(roletype object_r dbskkd_port_t)
(type dbskkd_server_packet_t)
(roletype object_r dbskkd_server_packet_t)
(type dcc_client_packet_t)
(roletype object_r dcc_client_packet_t)
(type dcc_port_t)
(roletype object_r dcc_port_t)
(type dcc_server_packet_t)
(roletype object_r dcc_server_packet_t)
(type dccm_client_packet_t)
(roletype object_r dccm_client_packet_t)
(type dccm_port_t)
(roletype object_r dccm_port_t)
(type dccm_server_packet_t)
(roletype object_r dccm_server_packet_t)
(type debugfs_t)
(roletype object_r debugfs_t)
(type default_t)
(roletype object_r default_t)
(type device_t)
(roletype object_r device_t)
(type devpts_t)
(roletype object_r devpts_t)
(type devtty_t)
(roletype object_r devtty_t)
(type dhcpc_client_packet_t)
(roletype object_r dhcpc_client_packet_t)
(type dhcpc_port_t)
(roletype object_r dhcpc_port_t)
(type dhcpc_server_packet_t)
(roletype object_r dhcpc_server_packet_t)
(type dhcpd_client_packet_t)
(roletype object_r dhcpd_client_packet_t)
(type dhcpd_port_t)
(roletype object_r dhcpd_port_t)
(type dhcpd_server_packet_t)
(roletype object_r dhcpd_server_packet_t)
(type dict_client_packet_t)
(roletype object_r dict_client_packet_t)
(type dict_port_t)
(roletype object_r dict_port_t)
(type dict_server_packet_t)
(roletype object_r dict_server_packet_t)
(type distccd_client_packet_t)
(roletype object_r distccd_client_packet_t)
(type distccd_port_t)
(roletype object_r distccd_port_t)
(type distccd_server_packet_t)
(roletype object_r distccd_server_packet_t)
(type dlm_control_device_t)
(roletype object_r dlm_control_device_t)
(type dma_device_t)
(roletype object_r dma_device_t)
(type dns_client_packet_t)
(roletype object_r dns_client_packet_t)
(type dns_port_t)
(roletype object_r dns_port_t)
(type dns_server_packet_t)
(roletype object_r dns_server_packet_t)
(type dosfs_t)
(roletype object_r dosfs_t)
(type dri_device_t)
(roletype object_r dri_device_t)
(type dropbox_client_packet_t)
(roletype object_r dropbox_client_packet_t)
(type dropbox_port_t)
(roletype object_r dropbox_port_t)
(type dropbox_server_packet_t)
(roletype object_r dropbox_server_packet_t)
(type ecryptfs_t)
(roletype object_r ecryptfs_t)
(type efivarfs_t)
(roletype object_r efivarfs_t)
(type efs_client_packet_t)
(roletype object_r efs_client_packet_t)
(type efs_port_t)
(roletype object_r efs_port_t)
(type efs_server_packet_t)
(roletype object_r efs_server_packet_t)
(type embrace_dp_c_client_packet_t)
(roletype object_r embrace_dp_c_client_packet_t)
(type embrace_dp_c_port_t)
(roletype object_r embrace_dp_c_port_t)
(type embrace_dp_c_server_packet_t)
(roletype object_r embrace_dp_c_server_packet_t)
(type epmap_client_packet_t)
(roletype object_r epmap_client_packet_t)
(type epmap_port_t)
(roletype object_r epmap_port_t)
(type epmap_server_packet_t)
(roletype object_r epmap_server_packet_t)
(type epmd_client_packet_t)
(roletype object_r epmd_client_packet_t)
(type epmd_port_t)
(roletype object_r epmd_port_t)
(type epmd_server_packet_t)
(roletype object_r epmd_server_packet_t)
(type etc_runtime_t)
(roletype object_r etc_runtime_t)
(type etc_t)
(roletype object_r etc_t)
(type event_device_t)
(roletype object_r event_device_t)
(type fingerd_client_packet_t)
(roletype object_r fingerd_client_packet_t)
(type fingerd_port_t)
(roletype object_r fingerd_port_t)
(type fingerd_server_packet_t)
(roletype object_r fingerd_server_packet_t)
(type framebuf_device_t)
(roletype object_r framebuf_device_t)
(type freefall_device_t)
(roletype object_r freefall_device_t)
(type fs_t)
(roletype object_r fs_t)
(type ftp_client_packet_t)
(roletype object_r ftp_client_packet_t)
(type ftp_data_client_packet_t)
(roletype object_r ftp_data_client_packet_t)
(type ftp_data_port_t)
(roletype object_r ftp_data_port_t)
(type ftp_data_server_packet_t)
(roletype object_r ftp_data_server_packet_t)
(type ftp_port_t)
(roletype object_r ftp_port_t)
(type ftp_server_packet_t)
(roletype object_r ftp_server_packet_t)
(type fusefs_t)
(roletype object_r fusefs_t)
(type futexfs_t)
(roletype object_r futexfs_t)
(type gatekeeper_client_packet_t)
(roletype object_r gatekeeper_client_packet_t)
(type gatekeeper_port_t)
(roletype object_r gatekeeper_port_t)
(type gatekeeper_server_packet_t)
(roletype object_r gatekeeper_server_packet_t)
(type gdomap_client_packet_t)
(roletype object_r gdomap_client_packet_t)
(type gdomap_port_t)
(roletype object_r gdomap_port_t)
(type gdomap_server_packet_t)
(roletype object_r gdomap_server_packet_t)
(type gds_db_client_packet_t)
(roletype object_r gds_db_client_packet_t)
(type gds_db_port_t)
(roletype object_r gds_db_port_t)
(type gds_db_server_packet_t)
(roletype object_r gds_db_server_packet_t)
(type git_client_packet_t)
(roletype object_r git_client_packet_t)
(type git_port_t)
(roletype object_r git_port_t)
(type git_server_packet_t)
(roletype object_r git_server_packet_t)
(type glance_registry_client_packet_t)
(roletype object_r glance_registry_client_packet_t)
(type glance_registry_port_t)
(roletype object_r glance_registry_port_t)
(type glance_registry_server_packet_t)
(roletype object_r glance_registry_server_packet_t)
(type glusterd_client_packet_t)
(roletype object_r glusterd_client_packet_t)
(type glusterd_port_t)
(roletype object_r glusterd_port_t)
(type glusterd_server_packet_t)
(roletype object_r glusterd_server_packet_t)
(type gopher_client_packet_t)
(roletype object_r gopher_client_packet_t)
(type gopher_port_t)
(roletype object_r gopher_port_t)
(type gopher_server_packet_t)
(roletype object_r gopher_server_packet_t)
(type gpiochip_device_t)
(roletype object_r gpiochip_device_t)
(type gpsd_client_packet_t)
(roletype object_r gpsd_client_packet_t)
(type gpsd_port_t)
(roletype object_r gpsd_port_t)
(type gpsd_server_packet_t)
(roletype object_r gpsd_server_packet_t)
(type hadoop_datanode_client_packet_t)
(roletype object_r hadoop_datanode_client_packet_t)
(type hadoop_datanode_port_t)
(roletype object_r hadoop_datanode_port_t)
(type hadoop_datanode_server_packet_t)
(roletype object_r hadoop_datanode_server_packet_t)
(type hadoop_namenode_client_packet_t)
(roletype object_r hadoop_namenode_client_packet_t)
(type hadoop_namenode_port_t)
(roletype object_r hadoop_namenode_port_t)
(type hadoop_namenode_server_packet_t)
(roletype object_r hadoop_namenode_server_packet_t)
(type hddtemp_client_packet_t)
(roletype object_r hddtemp_client_packet_t)
(type hddtemp_port_t)
(roletype object_r hddtemp_port_t)
(type hddtemp_server_packet_t)
(roletype object_r hddtemp_server_packet_t)
(type hi_reserved_port_t)
(roletype object_r hi_reserved_port_t)
(type home_root_t)
(roletype object_r home_root_t)
(type howl_client_packet_t)
(roletype object_r howl_client_packet_t)
(type howl_port_t)
(roletype object_r howl_port_t)
(type howl_server_packet_t)
(roletype object_r howl_server_packet_t)
(type hplip_client_packet_t)
(roletype object_r hplip_client_packet_t)
(type hplip_port_t)
(roletype object_r hplip_port_t)
(type hplip_server_packet_t)
(roletype object_r hplip_server_packet_t)
(type http_cache_client_packet_t)
(roletype object_r http_cache_client_packet_t)
(type http_cache_port_t)
(roletype object_r http_cache_port_t)
(type http_cache_server_packet_t)
(roletype object_r http_cache_server_packet_t)
(type http_client_packet_t)
(roletype object_r http_client_packet_t)
(type http_port_t)
(roletype object_r http_port_t)
(type http_server_packet_t)
(roletype object_r http_server_packet_t)
(type hugetlbfs_t)
(roletype object_r hugetlbfs_t)
(type hyperv_kvp_device_t)
(roletype object_r hyperv_kvp_device_t)
(type hyperv_vss_device_t)
(roletype object_r hyperv_vss_device_t)
(type i18n_input_client_packet_t)
(roletype object_r i18n_input_client_packet_t)
(type i18n_input_port_t)
(roletype object_r i18n_input_port_t)
(type i18n_input_server_packet_t)
(roletype object_r i18n_input_server_packet_t)
(type ibmasmfs_t)
(roletype object_r ibmasmfs_t)
(type icmp_packet_t)
(roletype object_r icmp_packet_t)
(type iio_device_t)
(roletype object_r iio_device_t)
(type imaze_client_packet_t)
(roletype object_r imaze_client_packet_t)
(type imaze_port_t)
(roletype object_r imaze_port_t)
(type imaze_server_packet_t)
(roletype object_r imaze_server_packet_t)
(type inetd_child_client_packet_t)
(roletype object_r inetd_child_client_packet_t)
(type inetd_child_port_t)
(roletype object_r inetd_child_port_t)
(type inetd_child_server_packet_t)
(roletype object_r inetd_child_server_packet_t)
(type infiniband_device_t)
(roletype object_r infiniband_device_t)
(type infinibandeventfs_t)
(roletype object_r infinibandeventfs_t)
(type innd_client_packet_t)
(roletype object_r innd_client_packet_t)
(type innd_port_t)
(roletype object_r innd_port_t)
(type innd_server_packet_t)
(roletype object_r innd_server_packet_t)
(type inotifyfs_t)
(roletype object_r inotifyfs_t)
(type interwise_client_packet_t)
(roletype object_r interwise_client_packet_t)
(type interwise_port_t)
(roletype object_r interwise_port_t)
(type interwise_server_packet_t)
(roletype object_r interwise_server_packet_t)
(type ionixnetmon_client_packet_t)
(roletype object_r ionixnetmon_client_packet_t)
(type ionixnetmon_port_t)
(roletype object_r ionixnetmon_port_t)
(type ionixnetmon_server_packet_t)
(roletype object_r ionixnetmon_server_packet_t)
(type ipmi_client_packet_t)
(roletype object_r ipmi_client_packet_t)
(type ipmi_device_t)
(roletype object_r ipmi_device_t)
(type ipmi_port_t)
(roletype object_r ipmi_port_t)
(type ipmi_server_packet_t)
(roletype object_r ipmi_server_packet_t)
(type ipp_client_packet_t)
(roletype object_r ipp_client_packet_t)
(type ipp_port_t)
(roletype object_r ipp_port_t)
(type ipp_server_packet_t)
(roletype object_r ipp_server_packet_t)
(type ipsecnat_client_packet_t)
(roletype object_r ipsecnat_client_packet_t)
(type ipsecnat_port_t)
(roletype object_r ipsecnat_port_t)
(type ipsecnat_server_packet_t)
(roletype object_r ipsecnat_server_packet_t)
(type ircd_client_packet_t)
(roletype object_r ircd_client_packet_t)
(type ircd_port_t)
(roletype object_r ircd_port_t)
(type ircd_server_packet_t)
(roletype object_r ircd_server_packet_t)
(type isakmp_client_packet_t)
(roletype object_r isakmp_client_packet_t)
(type isakmp_port_t)
(roletype object_r isakmp_port_t)
(type isakmp_server_packet_t)
(roletype object_r isakmp_server_packet_t)
(type iscsi_client_packet_t)
(roletype object_r iscsi_client_packet_t)
(type iscsi_port_t)
(roletype object_r iscsi_port_t)
(type iscsi_server_packet_t)
(roletype object_r iscsi_server_packet_t)
(type isns_client_packet_t)
(roletype object_r isns_client_packet_t)
(type isns_port_t)
(roletype object_r isns_port_t)
(type isns_server_packet_t)
(roletype object_r isns_server_packet_t)
(type iso9660_t)
(roletype object_r iso9660_t)
(type jabber_client_client_packet_t)
(roletype object_r jabber_client_client_packet_t)
(type jabber_client_port_t)
(roletype object_r jabber_client_port_t)
(type jabber_client_server_packet_t)
(roletype object_r jabber_client_server_packet_t)
(type jabber_interserver_client_packet_t)
(roletype object_r jabber_interserver_client_packet_t)
(type jabber_interserver_port_t)
(roletype object_r jabber_interserver_port_t)
(type jabber_interserver_server_packet_t)
(roletype object_r jabber_interserver_server_packet_t)
(type jboss_iiop_client_packet_t)
(roletype object_r jboss_iiop_client_packet_t)
(type jboss_iiop_port_t)
(roletype object_r jboss_iiop_port_t)
(type jboss_iiop_server_packet_t)
(roletype object_r jboss_iiop_server_packet_t)
(type kdeconnect_client_packet_t)
(roletype object_r kdeconnect_client_packet_t)
(type kdeconnect_port_t)
(roletype object_r kdeconnect_port_t)
(type kdeconnect_server_packet_t)
(roletype object_r kdeconnect_server_packet_t)
(type kerberos_admin_client_packet_t)
(roletype object_r kerberos_admin_client_packet_t)
(type kerberos_admin_port_t)
(roletype object_r kerberos_admin_port_t)
(type kerberos_admin_server_packet_t)
(roletype object_r kerberos_admin_server_packet_t)
(type kerberos_client_packet_t)
(roletype object_r kerberos_client_packet_t)
(type kerberos_master_client_packet_t)
(roletype object_r kerberos_master_client_packet_t)
(type kerberos_master_port_t)
(roletype object_r kerberos_master_port_t)
(type kerberos_master_server_packet_t)
(roletype object_r kerberos_master_server_packet_t)
(type kerberos_port_t)
(roletype object_r kerberos_port_t)
(type kerberos_server_packet_t)
(roletype object_r kerberos_server_packet_t)
(type kernel_t)
(roletype object_r kernel_t)
(type kismet_client_packet_t)
(roletype object_r kismet_client_packet_t)
(type kismet_port_t)
(roletype object_r kismet_port_t)
(type kismet_server_packet_t)
(roletype object_r kismet_server_packet_t)
(type kmsg_device_t)
(roletype object_r kmsg_device_t)
(type kprop_client_packet_t)
(roletype object_r kprop_client_packet_t)
(type kprop_port_t)
(roletype object_r kprop_port_t)
(type kprop_server_packet_t)
(roletype object_r kprop_server_packet_t)
(type ksm_device_t)
(roletype object_r ksm_device_t)
(type ktalkd_client_packet_t)
(roletype object_r ktalkd_client_packet_t)
(type ktalkd_port_t)
(roletype object_r ktalkd_port_t)
(type ktalkd_server_packet_t)
(roletype object_r ktalkd_server_packet_t)
(type kubernetes_client_packet_t)
(roletype object_r kubernetes_client_packet_t)
(type kubernetes_port_t)
(roletype object_r kubernetes_port_t)
(type kubernetes_server_packet_t)
(roletype object_r kubernetes_server_packet_t)
(type kvm_device_t)
(roletype object_r kvm_device_t)
(type kvmfs_t)
(roletype object_r kvmfs_t)
(type l2tp_client_packet_t)
(roletype object_r l2tp_client_packet_t)
(type l2tp_port_t)
(roletype object_r l2tp_port_t)
(type l2tp_server_packet_t)
(roletype object_r l2tp_server_packet_t)
(type ldap_client_packet_t)
(roletype object_r ldap_client_packet_t)
(type ldap_port_t)
(roletype object_r ldap_port_t)
(type ldap_server_packet_t)
(roletype object_r ldap_server_packet_t)
(type lirc_client_packet_t)
(roletype object_r lirc_client_packet_t)
(type lirc_device_t)
(roletype object_r lirc_device_t)
(type lirc_port_t)
(roletype object_r lirc_port_t)
(type lirc_server_packet_t)
(roletype object_r lirc_server_packet_t)
(type llmnr_client_packet_t)
(roletype object_r llmnr_client_packet_t)
(type llmnr_port_t)
(roletype object_r llmnr_port_t)
(type llmnr_server_packet_t)
(roletype object_r llmnr_server_packet_t)
(type lmtp_client_packet_t)
(roletype object_r lmtp_client_packet_t)
(type lmtp_port_t)
(roletype object_r lmtp_port_t)
(type lmtp_server_packet_t)
(roletype object_r lmtp_server_packet_t)
(type loop_control_device_t)
(roletype object_r loop_control_device_t)
(type lost_found_t)
(roletype object_r lost_found_t)
(type lrrd_client_packet_t)
(roletype object_r lrrd_client_packet_t)
(type lrrd_port_t)
(roletype object_r lrrd_port_t)
(type lrrd_server_packet_t)
(roletype object_r lrrd_server_packet_t)
(type lvm_control_t)
(roletype object_r lvm_control_t)
(type mail_client_packet_t)
(roletype object_r mail_client_packet_t)
(type mail_port_t)
(roletype object_r mail_port_t)
(type mail_server_packet_t)
(roletype object_r mail_server_packet_t)
(type matahari_client_packet_t)
(roletype object_r matahari_client_packet_t)
(type matahari_port_t)
(roletype object_r matahari_port_t)
(type matahari_server_packet_t)
(roletype object_r matahari_server_packet_t)
(type mei_device_t)
(roletype object_r mei_device_t)
(type memcache_client_packet_t)
(roletype object_r memcache_client_packet_t)
(type memcache_port_t)
(roletype object_r memcache_port_t)
(type memcache_server_packet_t)
(roletype object_r memcache_server_packet_t)
(type memory_device_t)
(roletype object_r memory_device_t)
(type memory_pressure_t)
(roletype object_r memory_pressure_t)
(type milter_client_packet_t)
(roletype object_r milter_client_packet_t)
(type milter_port_t)
(roletype object_r milter_port_t)
(type milter_server_packet_t)
(roletype object_r milter_server_packet_t)
(type misc_device_t)
(roletype object_r misc_device_t)
(type mmcc_client_packet_t)
(roletype object_r mmcc_client_packet_t)
(type mmcc_port_t)
(roletype object_r mmcc_port_t)
(type mmcc_server_packet_t)
(roletype object_r mmcc_server_packet_t)
(type mnt_t)
(roletype object_r mnt_t)
(type modem_device_t)
(roletype object_r modem_device_t)
(type modules_object_t)
(roletype object_r modules_object_t)
(type mon_client_packet_t)
(roletype object_r mon_client_packet_t)
(type mon_port_t)
(roletype object_r mon_port_t)
(type mon_server_packet_t)
(roletype object_r mon_server_packet_t)
(type monit_client_packet_t)
(roletype object_r monit_client_packet_t)
(type monit_port_t)
(roletype object_r monit_port_t)
(type monit_server_packet_t)
(roletype object_r monit_server_packet_t)
(type monopd_client_packet_t)
(roletype object_r monopd_client_packet_t)
(type monopd_port_t)
(roletype object_r monopd_port_t)
(type monopd_server_packet_t)
(roletype object_r monopd_server_packet_t)
(type mountd_client_packet_t)
(roletype object_r mountd_client_packet_t)
(type mountd_port_t)
(roletype object_r mountd_port_t)
(type mountd_server_packet_t)
(roletype object_r mountd_server_packet_t)
(type mouse_device_t)
(roletype object_r mouse_device_t)
(type movaz_ssc_client_packet_t)
(roletype object_r movaz_ssc_client_packet_t)
(type movaz_ssc_port_t)
(roletype object_r movaz_ssc_port_t)
(type movaz_ssc_server_packet_t)
(roletype object_r movaz_ssc_server_packet_t)
(type mpd_client_packet_t)
(roletype object_r mpd_client_packet_t)
(type mpd_port_t)
(roletype object_r mpd_port_t)
(type mpd_server_packet_t)
(roletype object_r mpd_server_packet_t)
(type mptctl_device_t)
(roletype object_r mptctl_device_t)
(type ms_streaming_client_packet_t)
(roletype object_r ms_streaming_client_packet_t)
(type ms_streaming_port_t)
(roletype object_r ms_streaming_port_t)
(type ms_streaming_server_packet_t)
(roletype object_r ms_streaming_server_packet_t)
(type msgsrvr_client_packet_t)
(roletype object_r msgsrvr_client_packet_t)
(type msgsrvr_port_t)
(roletype object_r msgsrvr_port_t)
(type msgsrvr_server_packet_t)
(roletype object_r msgsrvr_server_packet_t)
(type msnp_client_packet_t)
(roletype object_r msnp_client_packet_t)
(type msnp_port_t)
(roletype object_r msnp_port_t)
(type msnp_server_packet_t)
(roletype object_r msnp_server_packet_t)
(type mssql_client_packet_t)
(roletype object_r mssql_client_packet_t)
(type mssql_port_t)
(roletype object_r mssql_port_t)
(type mssql_server_packet_t)
(roletype object_r mssql_server_packet_t)
(type mtrr_device_t)
(roletype object_r mtrr_device_t)
(type munin_client_packet_t)
(roletype object_r munin_client_packet_t)
(type munin_port_t)
(roletype object_r munin_port_t)
(type munin_server_packet_t)
(roletype object_r munin_server_packet_t)
(type mvfs_t)
(roletype object_r mvfs_t)
(type mxi_client_packet_t)
(roletype object_r mxi_client_packet_t)
(type mxi_port_t)
(roletype object_r mxi_port_t)
(type mxi_server_packet_t)
(roletype object_r mxi_server_packet_t)
(type mysqld_client_packet_t)
(roletype object_r mysqld_client_packet_t)
(type mysqld_port_t)
(roletype object_r mysqld_port_t)
(type mysqld_server_packet_t)
(roletype object_r mysqld_server_packet_t)
(type mysqlmanagerd_client_packet_t)
(roletype object_r mysqlmanagerd_client_packet_t)
(type mysqlmanagerd_port_t)
(roletype object_r mysqlmanagerd_port_t)
(type mysqlmanagerd_server_packet_t)
(roletype object_r mysqlmanagerd_server_packet_t)
(type nessus_client_packet_t)
(roletype object_r nessus_client_packet_t)
(type nessus_port_t)
(roletype object_r nessus_port_t)
(type nessus_server_packet_t)
(roletype object_r nessus_server_packet_t)
(type netif_t)
(roletype object_r netif_t)
(type netlabel_peer_t)
(roletype object_r netlabel_peer_t)
(type netport_client_packet_t)
(roletype object_r netport_client_packet_t)
(type netport_port_t)
(roletype object_r netport_port_t)
(type netport_server_packet_t)
(roletype object_r netport_server_packet_t)
(type netsupport_client_packet_t)
(roletype object_r netsupport_client_packet_t)
(type netsupport_port_t)
(roletype object_r netsupport_port_t)
(type netsupport_server_packet_t)
(roletype object_r netsupport_server_packet_t)
(type nfs_client_packet_t)
(roletype object_r nfs_client_packet_t)
(type nfs_port_t)
(roletype object_r nfs_port_t)
(type nfs_server_packet_t)
(roletype object_r nfs_server_packet_t)
(type nfs_t)
(roletype object_r nfs_t)
(type nfsd_fs_t)
(roletype object_r nfsd_fs_t)
(type nfsrdma_client_packet_t)
(roletype object_r nfsrdma_client_packet_t)
(type nfsrdma_port_t)
(roletype object_r nfsrdma_port_t)
(type nfsrdma_server_packet_t)
(roletype object_r nfsrdma_server_packet_t)
(type nmbd_client_packet_t)
(roletype object_r nmbd_client_packet_t)
(type nmbd_port_t)
(roletype object_r nmbd_port_t)
(type nmbd_server_packet_t)
(roletype object_r nmbd_server_packet_t)
(type no_access_t)
(roletype object_r no_access_t)
(type node_t)
(roletype object_r node_t)
(type nsfs_t)
(roletype object_r nsfs_t)
(type ntop_client_packet_t)
(roletype object_r ntop_client_packet_t)
(type ntop_port_t)
(roletype object_r ntop_port_t)
(type ntop_server_packet_t)
(roletype object_r ntop_server_packet_t)
(type ntp_client_packet_t)
(roletype object_r ntp_client_packet_t)
(type ntp_port_t)
(roletype object_r ntp_port_t)
(type ntp_server_packet_t)
(roletype object_r ntp_server_packet_t)
(type ntske_client_packet_t)
(roletype object_r ntske_client_packet_t)
(type ntske_port_t)
(roletype object_r ntske_port_t)
(type ntske_server_packet_t)
(roletype object_r ntske_server_packet_t)
(type null_device_t)
(roletype object_r null_device_t)
(type nvram_device_t)
(roletype object_r nvram_device_t)
(type oa_system_client_packet_t)
(roletype object_r oa_system_client_packet_t)
(type oa_system_port_t)
(roletype object_r oa_system_port_t)
(type oa_system_server_packet_t)
(roletype object_r oa_system_server_packet_t)
(type ocsp_client_packet_t)
(roletype object_r ocsp_client_packet_t)
(type ocsp_port_t)
(roletype object_r ocsp_port_t)
(type ocsp_server_packet_t)
(roletype object_r ocsp_server_packet_t)
(type openhpid_client_packet_t)
(roletype object_r openhpid_client_packet_t)
(type openhpid_port_t)
(roletype object_r openhpid_port_t)
(type openhpid_server_packet_t)
(roletype object_r openhpid_server_packet_t)
(type openvpn_client_packet_t)
(roletype object_r openvpn_client_packet_t)
(type openvpn_port_t)
(roletype object_r openvpn_port_t)
(type openvpn_server_packet_t)
(roletype object_r openvpn_server_packet_t)
(type oprofilefs_t)
(roletype object_r oprofilefs_t)
(type oracledb_client_packet_t)
(roletype object_r oracledb_client_packet_t)
(type oracledb_port_t)
(roletype object_r oracledb_port_t)
(type oracledb_server_packet_t)
(roletype object_r oracledb_server_packet_t)
(type pdps_client_packet_t)
(roletype object_r pdps_client_packet_t)
(type pdps_port_t)
(roletype object_r pdps_port_t)
(type pdps_server_packet_t)
(roletype object_r pdps_server_packet_t)
(type pegasus_http_client_packet_t)
(roletype object_r pegasus_http_client_packet_t)
(type pegasus_http_port_t)
(roletype object_r pegasus_http_port_t)
(type pegasus_http_server_packet_t)
(roletype object_r pegasus_http_server_packet_t)
(type pegasus_https_client_packet_t)
(roletype object_r pegasus_https_client_packet_t)
(type pegasus_https_port_t)
(roletype object_r pegasus_https_port_t)
(type pegasus_https_server_packet_t)
(roletype object_r pegasus_https_server_packet_t)
(type pgpkeyserver_client_packet_t)
(roletype object_r pgpkeyserver_client_packet_t)
(type pgpkeyserver_port_t)
(roletype object_r pgpkeyserver_port_t)
(type pgpkeyserver_server_packet_t)
(roletype object_r pgpkeyserver_server_packet_t)
(type pingd_client_packet_t)
(roletype object_r pingd_client_packet_t)
(type pingd_port_t)
(roletype object_r pingd_port_t)
(type pingd_server_packet_t)
(roletype object_r pingd_server_packet_t)
(type pktcable_cops_client_packet_t)
(roletype object_r pktcable_cops_client_packet_t)
(type pktcable_cops_port_t)
(roletype object_r pktcable_cops_port_t)
(type pktcable_cops_server_packet_t)
(roletype object_r pktcable_cops_server_packet_t)
(type pmqos_device_t)
(roletype object_r pmqos_device_t)
(type poly_t)
(roletype object_r poly_t)
(type pop_client_packet_t)
(roletype object_r pop_client_packet_t)
(type pop_port_t)
(roletype object_r pop_port_t)
(type pop_server_packet_t)
(roletype object_r pop_server_packet_t)
(type port_t)
(roletype object_r port_t)
(type portmap_client_packet_t)
(roletype object_r portmap_client_packet_t)
(type portmap_port_t)
(roletype object_r portmap_port_t)
(type portmap_server_packet_t)
(roletype object_r portmap_server_packet_t)
(type postfix_policyd_client_packet_t)
(roletype object_r postfix_policyd_client_packet_t)
(type postfix_policyd_port_t)
(roletype object_r postfix_policyd_port_t)
(type postfix_policyd_server_packet_t)
(roletype object_r postfix_policyd_server_packet_t)
(type postgresql_client_packet_t)
(roletype object_r postgresql_client_packet_t)
(type postgresql_port_t)
(roletype object_r postgresql_port_t)
(type postgresql_server_packet_t)
(roletype object_r postgresql_server_packet_t)
(type postgrey_client_packet_t)
(roletype object_r postgrey_client_packet_t)
(type postgrey_port_t)
(roletype object_r postgrey_port_t)
(type postgrey_server_packet_t)
(roletype object_r postgrey_server_packet_t)
(type power_device_t)
(roletype object_r power_device_t)
(type ppp_device_t)
(roletype object_r ppp_device_t)
(type pptp_client_packet_t)
(roletype object_r pptp_client_packet_t)
(type pptp_port_t)
(roletype object_r pptp_port_t)
(type pptp_server_packet_t)
(roletype object_r pptp_server_packet_t)
(type prelude_client_packet_t)
(roletype object_r prelude_client_packet_t)
(type prelude_port_t)
(roletype object_r prelude_port_t)
(type prelude_server_packet_t)
(roletype object_r prelude_server_packet_t)
(type presence_client_packet_t)
(roletype object_r presence_client_packet_t)
(type presence_port_t)
(roletype object_r presence_port_t)
(type presence_server_packet_t)
(roletype object_r presence_server_packet_t)
(type printer_client_packet_t)
(roletype object_r printer_client_packet_t)
(type printer_device_t)
(roletype object_r printer_device_t)
(type printer_port_t)
(roletype object_r printer_port_t)
(type printer_server_packet_t)
(roletype object_r printer_server_packet_t)
(type proc_afs_t)
(roletype object_r proc_afs_t)
(type proc_kcore_t)
(roletype object_r proc_kcore_t)
(type proc_kmsg_t)
(roletype object_r proc_kmsg_t)
(type proc_mdstat_t)
(roletype object_r proc_mdstat_t)
(type proc_net_t)
(roletype object_r proc_net_t)
(type proc_psi_t)
(roletype object_r proc_psi_t)
(type proc_t)
(roletype object_r proc_t)
(type proc_xen_t)
(roletype object_r proc_xen_t)
(type pstore_t)
(roletype object_r pstore_t)
(type ptal_client_packet_t)
(roletype object_r ptal_client_packet_t)
(type ptal_port_t)
(roletype object_r ptal_port_t)
(type ptal_server_packet_t)
(roletype object_r ptal_server_packet_t)
(type ptmx_t)
(roletype object_r ptmx_t)
(type pulseaudio_client_packet_t)
(roletype object_r pulseaudio_client_packet_t)
(type pulseaudio_port_t)
(roletype object_r pulseaudio_port_t)
(type pulseaudio_server_packet_t)
(roletype object_r pulseaudio_server_packet_t)
(type puppet_client_packet_t)
(roletype object_r puppet_client_packet_t)
(type puppet_port_t)
(roletype object_r puppet_port_t)
(type puppet_server_packet_t)
(roletype object_r puppet_server_packet_t)
(type puppetclient_client_packet_t)
(roletype object_r puppetclient_client_packet_t)
(type puppetclient_port_t)
(roletype object_r puppetclient_port_t)
(type puppetclient_server_packet_t)
(roletype object_r puppetclient_server_packet_t)
(type pxe_client_packet_t)
(roletype object_r pxe_client_packet_t)
(type pxe_port_t)
(roletype object_r pxe_port_t)
(type pxe_server_packet_t)
(roletype object_r pxe_server_packet_t)
(type pyzor_client_packet_t)
(roletype object_r pyzor_client_packet_t)
(type pyzor_port_t)
(roletype object_r pyzor_port_t)
(type pyzor_server_packet_t)
(roletype object_r pyzor_server_packet_t)
(type qemu_device_t)
(roletype object_r qemu_device_t)
(type radacct_client_packet_t)
(roletype object_r radacct_client_packet_t)
(type radacct_port_t)
(roletype object_r radacct_port_t)
(type radacct_server_packet_t)
(roletype object_r radacct_server_packet_t)
(type radius_client_packet_t)
(roletype object_r radius_client_packet_t)
(type radius_port_t)
(roletype object_r radius_port_t)
(type radius_server_packet_t)
(roletype object_r radius_server_packet_t)
(type radsec_client_packet_t)
(roletype object_r radsec_client_packet_t)
(type radsec_port_t)
(roletype object_r radsec_port_t)
(type radsec_server_packet_t)
(roletype object_r radsec_server_packet_t)
(type ramfs_t)
(roletype object_r ramfs_t)
(type random_device_t)
(roletype object_r random_device_t)
(type razor_client_packet_t)
(roletype object_r razor_client_packet_t)
(type razor_port_t)
(roletype object_r razor_port_t)
(type razor_server_packet_t)
(roletype object_r razor_server_packet_t)
(type readable_t)
(roletype object_r readable_t)
(type redis_client_packet_t)
(roletype object_r redis_client_packet_t)
(type redis_port_t)
(roletype object_r redis_port_t)
(type redis_server_packet_t)
(roletype object_r redis_server_packet_t)
(type removable_t)
(roletype object_r removable_t)
(type repository_client_packet_t)
(roletype object_r repository_client_packet_t)
(type repository_port_t)
(roletype object_r repository_port_t)
(type repository_server_packet_t)
(roletype object_r repository_server_packet_t)
(type reserved_port_t)
(roletype object_r reserved_port_t)
(type ricci_client_packet_t)
(roletype object_r ricci_client_packet_t)
(type ricci_modcluster_client_packet_t)
(roletype object_r ricci_modcluster_client_packet_t)
(type ricci_modcluster_port_t)
(roletype object_r ricci_modcluster_port_t)
(type ricci_modcluster_server_packet_t)
(roletype object_r ricci_modcluster_server_packet_t)
(type ricci_port_t)
(roletype object_r ricci_port_t)
(type ricci_server_packet_t)
(roletype object_r ricci_server_packet_t)
(type rlogind_client_packet_t)
(roletype object_r rlogind_client_packet_t)
(type rlogind_port_t)
(roletype object_r rlogind_port_t)
(type rlogind_server_packet_t)
(roletype object_r rlogind_server_packet_t)
(type rndc_client_packet_t)
(roletype object_r rndc_client_packet_t)
(type rndc_port_t)
(roletype object_r rndc_port_t)
(type rndc_server_packet_t)
(roletype object_r rndc_server_packet_t)
(type romfs_t)
(roletype object_r romfs_t)
(type root_t)
(roletype object_r root_t)
(type router_client_packet_t)
(roletype object_r router_client_packet_t)
(type router_port_t)
(roletype object_r router_port_t)
(type router_server_packet_t)
(roletype object_r router_server_packet_t)
(type rpc_pipefs_t)
(roletype object_r rpc_pipefs_t)
(type rsh_client_packet_t)
(roletype object_r rsh_client_packet_t)
(type rsh_port_t)
(roletype object_r rsh_port_t)
(type rsh_server_packet_t)
(roletype object_r rsh_server_packet_t)
(type rsync_client_packet_t)
(roletype object_r rsync_client_packet_t)
(type rsync_port_t)
(roletype object_r rsync_port_t)
(type rsync_server_packet_t)
(roletype object_r rsync_server_packet_t)
(type rtorrent_client_packet_t)
(roletype object_r rtorrent_client_packet_t)
(type rtorrent_port_t)
(roletype object_r rtorrent_port_t)
(type rtorrent_server_packet_t)
(roletype object_r rtorrent_server_packet_t)
(type rtsp_client_packet_t)
(roletype object_r rtsp_client_packet_t)
(type rtsp_port_t)
(roletype object_r rtsp_port_t)
(type rtsp_server_packet_t)
(roletype object_r rtsp_server_packet_t)
(type rwho_client_packet_t)
(roletype object_r rwho_client_packet_t)
(type rwho_port_t)
(roletype object_r rwho_port_t)
(type rwho_server_packet_t)
(roletype object_r rwho_server_packet_t)
(type salt_client_packet_t)
(roletype object_r salt_client_packet_t)
(type salt_port_t)
(roletype object_r salt_port_t)
(type salt_server_packet_t)
(roletype object_r salt_server_packet_t)
(type sap_client_packet_t)
(roletype object_r sap_client_packet_t)
(type sap_port_t)
(roletype object_r sap_port_t)
(type sap_server_packet_t)
(roletype object_r sap_server_packet_t)
(type scanner_device_t)
(roletype object_r scanner_device_t)
(type secure_mode_policyload_t)
(roletype object_r secure_mode_policyload_t)
(type security_t)
(roletype object_r security_t)
(type server_packet_t)
(roletype object_r server_packet_t)
(type servistaitsm_client_packet_t)
(roletype object_r servistaitsm_client_packet_t)
(type servistaitsm_port_t)
(roletype object_r servistaitsm_port_t)
(type servistaitsm_server_packet_t)
(roletype object_r servistaitsm_server_packet_t)
(type shell_exec_t)
(roletype object_r shell_exec_t)
(type sieve_client_packet_t)
(roletype object_r sieve_client_packet_t)
(type sieve_port_t)
(roletype object_r sieve_port_t)
(type sieve_server_packet_t)
(roletype object_r sieve_server_packet_t)
(type sip_client_packet_t)
(roletype object_r sip_client_packet_t)
(type sip_port_t)
(roletype object_r sip_port_t)
(type sip_server_packet_t)
(roletype object_r sip_server_packet_t)
(type sixxsconfig_client_packet_t)
(roletype object_r sixxsconfig_client_packet_t)
(type sixxsconfig_port_t)
(roletype object_r sixxsconfig_port_t)
(type sixxsconfig_server_packet_t)
(roletype object_r sixxsconfig_server_packet_t)
(type smartcard_device_t)
(roletype object_r smartcard_device_t)
(type smbd_client_packet_t)
(roletype object_r smbd_client_packet_t)
(type smbd_port_t)
(roletype object_r smbd_port_t)
(type smbd_server_packet_t)
(roletype object_r smbd_server_packet_t)
(type smtp_client_packet_t)
(roletype object_r smtp_client_packet_t)
(type smtp_port_t)
(roletype object_r smtp_port_t)
(type smtp_server_packet_t)
(roletype object_r smtp_server_packet_t)
(type snmp_client_packet_t)
(roletype object_r snmp_client_packet_t)
(type snmp_port_t)
(roletype object_r snmp_port_t)
(type snmp_server_packet_t)
(roletype object_r snmp_server_packet_t)
(type socks_client_packet_t)
(roletype object_r socks_client_packet_t)
(type socks_port_t)
(roletype object_r socks_port_t)
(type socks_server_packet_t)
(roletype object_r socks_server_packet_t)
(type sound_device_t)
(roletype object_r sound_device_t)
(type soundd_client_packet_t)
(roletype object_r soundd_client_packet_t)
(type soundd_port_t)
(roletype object_r soundd_port_t)
(type soundd_server_packet_t)
(roletype object_r soundd_server_packet_t)
(type spamd_client_packet_t)
(roletype object_r spamd_client_packet_t)
(type spamd_port_t)
(roletype object_r spamd_port_t)
(type spamd_server_packet_t)
(roletype object_r spamd_server_packet_t)
(type speech_client_packet_t)
(roletype object_r speech_client_packet_t)
(type speech_port_t)
(roletype object_r speech_port_t)
(type speech_server_packet_t)
(roletype object_r speech_server_packet_t)
(type spufs_t)
(roletype object_r spufs_t)
(type squid_client_packet_t)
(roletype object_r squid_client_packet_t)
(type squid_port_t)
(roletype object_r squid_port_t)
(type squid_server_packet_t)
(roletype object_r squid_server_packet_t)
(type src_t)
(roletype object_r src_t)
(type ssdp_client_packet_t)
(roletype object_r ssdp_client_packet_t)
(type ssdp_port_t)
(roletype object_r ssdp_port_t)
(type ssdp_server_packet_t)
(roletype object_r ssdp_server_packet_t)
(type ssh_client_packet_t)
(roletype object_r ssh_client_packet_t)
(type ssh_port_t)
(roletype object_r ssh_port_t)
(type ssh_server_packet_t)
(roletype object_r ssh_server_packet_t)
(type stunnel_client_packet_t)
(roletype object_r stunnel_client_packet_t)
(type stunnel_port_t)
(roletype object_r stunnel_port_t)
(type stunnel_server_packet_t)
(roletype object_r stunnel_server_packet_t)
(type svn_client_packet_t)
(roletype object_r svn_client_packet_t)
(type svn_port_t)
(roletype object_r svn_port_t)
(type svn_server_packet_t)
(roletype object_r svn_server_packet_t)
(type svrloc_client_packet_t)
(roletype object_r svrloc_client_packet_t)
(type svrloc_port_t)
(roletype object_r svrloc_port_t)
(type svrloc_server_packet_t)
(roletype object_r svrloc_server_packet_t)
(type swat_client_packet_t)
(roletype object_r swat_client_packet_t)
(type swat_port_t)
(roletype object_r swat_port_t)
(type swat_server_packet_t)
(roletype object_r swat_server_packet_t)
(type syncthing_admin_client_packet_t)
(roletype object_r syncthing_admin_client_packet_t)
(type syncthing_admin_port_t)
(roletype object_r syncthing_admin_port_t)
(type syncthing_admin_server_packet_t)
(roletype object_r syncthing_admin_server_packet_t)
(type syncthing_client_packet_t)
(roletype object_r syncthing_client_packet_t)
(type syncthing_discovery_client_packet_t)
(roletype object_r syncthing_discovery_client_packet_t)
(type syncthing_discovery_port_t)
(roletype object_r syncthing_discovery_port_t)
(type syncthing_discovery_server_packet_t)
(roletype object_r syncthing_discovery_server_packet_t)
(type syncthing_port_t)
(roletype object_r syncthing_port_t)
(type syncthing_server_packet_t)
(roletype object_r syncthing_server_packet_t)
(type sype_transport_client_packet_t)
(roletype object_r sype_transport_client_packet_t)
(type sype_transport_port_t)
(roletype object_r sype_transport_port_t)
(type sype_transport_server_packet_t)
(roletype object_r sype_transport_server_packet_t)
(type sysctl_crypto_t)
(roletype object_r sysctl_crypto_t)
(type sysctl_dev_t)
(roletype object_r sysctl_dev_t)
(type sysctl_fs_t)
(roletype object_r sysctl_fs_t)
(type sysctl_hotplug_t)
(roletype object_r sysctl_hotplug_t)
(type sysctl_irq_t)
(roletype object_r sysctl_irq_t)
(type sysctl_kernel_ns_last_pid_t)
(roletype object_r sysctl_kernel_ns_last_pid_t)
(type sysctl_kernel_t)
(roletype object_r sysctl_kernel_t)
(type sysctl_modprobe_t)
(roletype object_r sysctl_modprobe_t)
(type sysctl_net_t)
(roletype object_r sysctl_net_t)
(type sysctl_net_unix_t)
(roletype object_r sysctl_net_unix_t)
(type sysctl_rpc_t)
(roletype object_r sysctl_rpc_t)
(type sysctl_t)
(roletype object_r sysctl_t)
(type sysctl_vm_overcommit_t)
(roletype object_r sysctl_vm_overcommit_t)
(type sysctl_vm_t)
(roletype object_r sysctl_vm_t)
(type sysdig_device_t)
(roletype object_r sysdig_device_t)
(type sysfs_t)
(roletype object_r sysfs_t)
(type syslog_tls_client_packet_t)
(roletype object_r syslog_tls_client_packet_t)
(type syslog_tls_port_t)
(roletype object_r syslog_tls_port_t)
(type syslog_tls_server_packet_t)
(roletype object_r syslog_tls_server_packet_t)
(type syslogd_client_packet_t)
(roletype object_r syslogd_client_packet_t)
(type syslogd_port_t)
(roletype object_r syslogd_port_t)
(type syslogd_server_packet_t)
(roletype object_r syslogd_server_packet_t)
(type system_map_t)
(roletype object_r system_map_t)
(type sysv_t)
(roletype object_r sysv_t)
(type tcs_client_packet_t)
(roletype object_r tcs_client_packet_t)
(type tcs_port_t)
(roletype object_r tcs_port_t)
(type tcs_server_packet_t)
(roletype object_r tcs_server_packet_t)
(type tee_device_t)
(roletype object_r tee_device_t)
(type tee_priv_device_t)
(roletype object_r tee_priv_device_t)
(type telnetd_client_packet_t)
(roletype object_r telnetd_client_packet_t)
(type telnetd_port_t)
(roletype object_r telnetd_port_t)
(type telnetd_server_packet_t)
(roletype object_r telnetd_server_packet_t)
(type tftp_client_packet_t)
(roletype object_r tftp_client_packet_t)
(type tftp_port_t)
(roletype object_r tftp_port_t)
(type tftp_server_packet_t)
(roletype object_r tftp_server_packet_t)
(type tmp_t)
(roletype object_r tmp_t)
(type tmpfs_t)
(roletype object_r tmpfs_t)
(type tor_client_packet_t)
(roletype object_r tor_client_packet_t)
(type tor_port_t)
(roletype object_r tor_port_t)
(type tor_server_packet_t)
(roletype object_r tor_server_packet_t)
(type tpm_device_t)
(roletype object_r tpm_device_t)
(type tracefs_t)
(roletype object_r tracefs_t)
(type traceroute_client_packet_t)
(roletype object_r traceroute_client_packet_t)
(type traceroute_port_t)
(roletype object_r traceroute_port_t)
(type traceroute_server_packet_t)
(roletype object_r traceroute_server_packet_t)
(type transproxy_client_packet_t)
(roletype object_r transproxy_client_packet_t)
(type transproxy_port_t)
(roletype object_r transproxy_port_t)
(type transproxy_server_packet_t)
(roletype object_r transproxy_server_packet_t)
(type trisoap_client_packet_t)
(roletype object_r trisoap_client_packet_t)
(type trisoap_port_t)
(roletype object_r trisoap_port_t)
(type trisoap_server_packet_t)
(roletype object_r trisoap_server_packet_t)
(type trivnet1_client_packet_t)
(roletype object_r trivnet1_client_packet_t)
(type trivnet1_port_t)
(roletype object_r trivnet1_port_t)
(type trivnet1_server_packet_t)
(roletype object_r trivnet1_server_packet_t)
(type tty_device_t)
(roletype object_r tty_device_t)
(type tun_tap_device_t)
(roletype object_r tun_tap_device_t)
(type uhid_device_t)
(roletype object_r uhid_device_t)
(type unlabeled_t)
(roletype object_r unlabeled_t)
(type unreserved_port_t)
(roletype object_r unreserved_port_t)
(type ups_client_packet_t)
(roletype object_r ups_client_packet_t)
(type ups_port_t)
(roletype object_r ups_port_t)
(type ups_server_packet_t)
(roletype object_r ups_server_packet_t)
(type urandom_device_t)
(roletype object_r urandom_device_t)
(type usb_device_t)
(roletype object_r usb_device_t)
(type usbfs_t)
(roletype object_r usbfs_t)
(type usbmon_device_t)
(roletype object_r usbmon_device_t)
(type usbtty_device_t)
(roletype object_r usbtty_device_t)
(type userfaultfd_device_t)
(roletype object_r userfaultfd_device_t)
(type userio_device_t)
(roletype object_r userio_device_t)
(type usr_t)
(roletype object_r usr_t)
(type utcpserver_client_packet_t)
(roletype object_r utcpserver_client_packet_t)
(type utcpserver_port_t)
(roletype object_r utcpserver_port_t)
(type utcpserver_server_packet_t)
(roletype object_r utcpserver_server_packet_t)
(type uucpd_client_packet_t)
(roletype object_r uucpd_client_packet_t)
(type uucpd_port_t)
(roletype object_r uucpd_port_t)
(type uucpd_server_packet_t)
(roletype object_r uucpd_server_packet_t)
(type v4l_device_t)
(roletype object_r v4l_device_t)
(type var_lib_t)
(roletype object_r var_lib_t)
(type var_lock_t)
(roletype object_r var_lock_t)
(type var_run_t)
(roletype object_r var_run_t)
(type var_spool_t)
(roletype object_r var_spool_t)
(type var_t)
(roletype object_r var_t)
(type varnishd_client_packet_t)
(roletype object_r varnishd_client_packet_t)
(type varnishd_port_t)
(roletype object_r varnishd_port_t)
(type varnishd_server_packet_t)
(roletype object_r varnishd_server_packet_t)
(type vfio_device_t)
(roletype object_r vfio_device_t)
(type vhost_device_t)
(roletype object_r vhost_device_t)
(type virt_client_packet_t)
(roletype object_r virt_client_packet_t)
(type virt_migration_client_packet_t)
(roletype object_r virt_migration_client_packet_t)
(type virt_migration_port_t)
(roletype object_r virt_migration_port_t)
(type virt_migration_server_packet_t)
(roletype object_r virt_migration_server_packet_t)
(type virt_port_t)
(roletype object_r virt_port_t)
(type virt_server_packet_t)
(roletype object_r virt_server_packet_t)
(type virtio_device_t)
(roletype object_r virtio_device_t)
(type virtiofs_t)
(roletype object_r virtiofs_t)
(type virtual_places_client_packet_t)
(roletype object_r virtual_places_client_packet_t)
(type virtual_places_port_t)
(roletype object_r virtual_places_port_t)
(type virtual_places_server_packet_t)
(roletype object_r virtual_places_server_packet_t)
(type vmblock_t)
(roletype object_r vmblock_t)
(type vmware_device_t)
(roletype object_r vmware_device_t)
(type vnc_client_packet_t)
(roletype object_r vnc_client_packet_t)
(type vnc_port_t)
(roletype object_r vnc_port_t)
(type vnc_server_packet_t)
(roletype object_r vnc_server_packet_t)
(type vsock_device_t)
(roletype object_r vsock_device_t)
(type vxfs_t)
(roletype object_r vxfs_t)
(type watchdog_device_t)
(roletype object_r watchdog_device_t)
(type wccp_client_packet_t)
(roletype object_r wccp_client_packet_t)
(type wccp_port_t)
(roletype object_r wccp_port_t)
(type wccp_server_packet_t)
(roletype object_r wccp_server_packet_t)
(type websm_client_packet_t)
(roletype object_r websm_client_packet_t)
(type websm_port_t)
(roletype object_r websm_port_t)
(type websm_server_packet_t)
(roletype object_r websm_server_packet_t)
(type whois_client_packet_t)
(roletype object_r whois_client_packet_t)
(type whois_port_t)
(roletype object_r whois_port_t)
(type whois_server_packet_t)
(roletype object_r whois_server_packet_t)
(type winshadow_client_packet_t)
(roletype object_r winshadow_client_packet_t)
(type winshadow_port_t)
(roletype object_r winshadow_port_t)
(type winshadow_server_packet_t)
(roletype object_r winshadow_server_packet_t)
(type wireless_device_t)
(roletype object_r wireless_device_t)
(type wsdapi_client_packet_t)
(roletype object_r wsdapi_client_packet_t)
(type wsdapi_port_t)
(roletype object_r wsdapi_port_t)
(type wsdapi_server_packet_t)
(roletype object_r wsdapi_server_packet_t)
(type wsicopy_client_packet_t)
(roletype object_r wsicopy_client_packet_t)
(type wsicopy_port_t)
(roletype object_r wsicopy_port_t)
(type wsicopy_server_packet_t)
(roletype object_r wsicopy_server_packet_t)
(type xdmcp_client_packet_t)
(roletype object_r xdmcp_client_packet_t)
(type xdmcp_port_t)
(roletype object_r xdmcp_port_t)
(type xdmcp_server_packet_t)
(roletype object_r xdmcp_server_packet_t)
(type xen_client_packet_t)
(roletype object_r xen_client_packet_t)
(type xen_device_t)
(roletype object_r xen_device_t)
(type xen_port_t)
(roletype object_r xen_port_t)
(type xen_server_packet_t)
(roletype object_r xen_server_packet_t)
(type xenfs_t)
(roletype object_r xenfs_t)
(type xfs_client_packet_t)
(roletype object_r xfs_client_packet_t)
(type xfs_port_t)
(roletype object_r xfs_port_t)
(type xfs_server_packet_t)
(roletype object_r xfs_server_packet_t)
(type xserver_client_packet_t)
(roletype object_r xserver_client_packet_t)
(type xserver_misc_device_t)
(roletype object_r xserver_misc_device_t)
(type xserver_port_t)
(roletype object_r xserver_port_t)
(type xserver_server_packet_t)
(roletype object_r xserver_server_packet_t)
(type zabbix_agent_client_packet_t)
(roletype object_r zabbix_agent_client_packet_t)
(type zabbix_agent_port_t)
(roletype object_r zabbix_agent_port_t)
(type zabbix_agent_server_packet_t)
(roletype object_r zabbix_agent_server_packet_t)
(type zabbix_client_packet_t)
(roletype object_r zabbix_client_packet_t)
(type zabbix_port_t)
(roletype object_r zabbix_port_t)
(type zabbix_server_packet_t)
(roletype object_r zabbix_server_packet_t)
(type zarafa_client_packet_t)
(roletype object_r zarafa_client_packet_t)
(type zarafa_port_t)
(roletype object_r zarafa_port_t)
(type zarafa_server_packet_t)
(roletype object_r zarafa_server_packet_t)
(type zebra_client_packet_t)
(roletype object_r zebra_client_packet_t)
(type zebra_port_t)
(roletype object_r zebra_port_t)
(type zebra_server_packet_t)
(roletype object_r zebra_server_packet_t)
(type zented_client_packet_t)
(roletype object_r zented_client_packet_t)
(type zented_port_t)
(roletype object_r zented_port_t)
(type zented_server_packet_t)
(roletype object_r zented_server_packet_t)
(type zero_device_t)
(roletype object_r zero_device_t)
(type zookeeper_client_client_packet_t)
(roletype object_r zookeeper_client_client_packet_t)
(type zookeeper_client_port_t)
(roletype object_r zookeeper_client_port_t)
(type zookeeper_client_server_packet_t)
(roletype object_r zookeeper_client_server_packet_t)
(type zookeeper_election_client_packet_t)
(roletype object_r zookeeper_election_client_packet_t)
(type zookeeper_election_port_t)
(roletype object_r zookeeper_election_port_t)
(type zookeeper_election_server_packet_t)
(roletype object_r zookeeper_election_server_packet_t)
(type zookeeper_leader_client_packet_t)
(roletype object_r zookeeper_leader_client_packet_t)
(type zookeeper_leader_port_t)
(roletype object_r zookeeper_leader_port_t)
(type zookeeper_leader_server_packet_t)
(roletype object_r zookeeper_leader_server_packet_t)
(type zope_client_packet_t)
(roletype object_r zope_client_packet_t)
(type zope_port_t)
(roletype object_r zope_port_t)
(type zope_server_packet_t)
(roletype object_r zope_server_packet_t)
(user system_u)
(userrole system_u object_r)
(userrole system_u system_r)
(userlevel system_u systemlow)
(userrange system_u (systemlow systemlow))
(user user_u)
(userrole user_u object_r)
(userrole user_u user_r)
(userlevel user_u systemlow)
(userrange user_u (systemlow systemlow))
(user staff_u)
(userrole staff_u object_r)
(userrole staff_u staff_r)
(userrole staff_u sysadm_r)
(userlevel staff_u systemlow)
(userrange staff_u (systemlow systemlow))
(user sysadm_u)
(userrole sysadm_u object_r)
(userrole sysadm_u sysadm_r)
(userlevel sysadm_u systemlow)
(userrange sysadm_u (systemlow systemlow))
(user root)
(userrole root object_r)
(userrole root staff_r)
(userrole root sysadm_r)
(userlevel root systemlow)
(userrange root (systemlow systemlow))
(boolean mmap_low_allowed false)
(boolean secure_mode_insmod false)
(boolean secure_mode_policyload false)
(boolean secure_mode_setbool false)
(boolean secure_mode false)
(boolean allow_execheap false)
(boolean allow_execmem false)
(boolean allow_execmod false)
(boolean allow_execstack false)
(boolean allow_raw_memory_access false)
(boolean allow_polyinstantiation false)
(boolean allow_ypbind false)
(boolean console_login true)
(boolean global_ssp false)
(boolean mail_read_content false)
(boolean nfs_export_all_rw false)
(boolean nfs_export_all_ro false)
(boolean use_nfs_home_dirs false)
(boolean use_samba_home_dirs false)
(boolean user_tcp_server false)
(boolean user_udp_server false)
(allow bin_t device_t (filesystem (associate)))
(allow bin_t tmpfs_t (filesystem (associate)))
(allow corenet_unconfined_type node_type (node (recvfrom sendto)))
(allow corenet_unconfined_type netif_type (netif (ingress egress)))
(allow corenet_unconfined_type packet_type (packet (send recv relabelto forward_in forward_out)))
(allow corenet_unconfined_type port_type (tcp_socket (name_connect)))
(allow corenet_unconfined_type port_type (sctp_socket (name_connect)))
(allow corenet_unconfined_type port_type (tcp_socket (name_bind)))
(allow corenet_unconfined_type port_type (udp_socket (name_bind)))
(allow corenet_unconfined_type port_type (rawip_socket (name_bind)))
(allow corenet_unconfined_type port_type (sctp_socket (name_bind)))
(allow corenet_unconfined_type node_type (tcp_socket (node_bind)))
(allow corenet_unconfined_type node_type (udp_socket (node_bind)))
(allow corenet_unconfined_type node_type (rawip_socket (node_bind)))
(allow corenet_unconfined_type node_type (sctp_socket (node_bind)))
(allow corenet_unconfined_type ibpkey_type (infiniband_pkey (access)))
(allow corenet_unconfined_type ibendport_type (infiniband_endport (manage_subnet)))
(allow corenet_unconfined_type unlabeled_t (infiniband_pkey (access)))
(allow corenet_unconfined_type unlabeled_t (infiniband_endport (manage_subnet)))
(allow device_t tmpfs_t (filesystem (associate)))
(allow device_t tmp_t (filesystem (associate)))
(allow cpu_online_t sysfs_t (filesystem (associate)))
(neverallow base_typeattr_1 memory_device_t (chr_file (read)))
(neverallow base_typeattr_1 memory_device_t (blk_file (read)))
(neverallow base_typeattr_2 memory_device_t (chr_file (write append)))
(neverallow base_typeattr_2 memory_device_t (blk_file (write append)))
(allow device_node device_t (filesystem (associate)))
(allow device_node fs_t (filesystem (associate)))
(allow device_node tmpfs_t (filesystem (associate)))
(allow device_node tmp_t (filesystem (associate)))
(allow devices_unconfined_type self (capability (sys_rawio)))
(allow devices_unconfined_type device_node (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(allow devices_unconfined_type device_node (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(allow devices_unconfined_type mtrr_device_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(neverallow domain base_typeattr_3 (process (transition dyntransition)))
(neverallow base_typeattr_4 self (memprotect (mmap_zero)))
(neverallow base_typeattr_5 self (process (setcurrent)))
(neverallow domain self (capability2 (mac_override)))
(neverallow domain base_typeattr_6 (process (fork transition sigchld sigkill sigstop signull signal ptrace getsched setsched getsession getpgid setpgid getcap setcap share getattr setexec setfscreate noatsecure siginh setrlimit rlimitinh dyntransition setcurrent execmem execstack execheap setkeycreate setsockcreate getrlimit)))
(neverallow unlabeled_t base_typeattr_6 (process (fork transition sigchld sigkill sigstop signull signal ptrace getsched setsched getsession getpgid setpgid getcap setcap share getattr setexec setfscreate noatsecure siginh setrlimit rlimitinh dyntransition setcurrent execmem execstack execheap setkeycreate setsockcreate getrlimit)))
(neverallow base_typeattr_6 base_typeattr_7 (process (fork transition sigchld sigkill sigstop signull signal ptrace getsched setsched getsession getpgid setpgid getcap setcap share getattr setexec setfscreate noatsecure siginh setrlimit rlimitinh dyntransition setcurrent execmem execstack execheap setkeycreate setsockcreate getrlimit)))
(allow domain self (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow domain self (lnk_file (ioctl read getattr lock)))
(allow domain self (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow domain proc_t (dir (getattr open search)))
(allow domain sysctl_crypto_t (dir (getattr open search)))
(allow domain sysctl_t (dir (getattr open search)))
(allow domain sysctl_crypto_t (file (ioctl read getattr lock open)))
(allow domain proc_t (dir (getattr open search)))
(allow domain sysctl_t (dir (getattr open search)))
(allow domain sysctl_crypto_t (dir (ioctl read getattr lock open search)))
(allow domain proc_t (dir (getattr open search)))
(allow domain proc_t (lnk_file (read getattr)))
(dontaudit domain kernel_t (key (search)))
(dontaudit domain kernel_t (key (link)))
(allow domain self (process (fork sigchld)))
(dontaudit domain self (udp_socket (listen)))
(allow domain self (lockdown (integrity confidentiality)))
(allow domain cpu_online_t (file (ioctl read getattr lock open)))
(allow domain sysfs_t (dir (getattr open search)))
(allow domain sysfs_t (dir (getattr open search)))
(allow domain device_t (dir (getattr open search)))
(allow domain null_device_t (chr_file (ioctl read write getattr lock append open)))
(allow domain device_t (dir (getattr open search)))
(allow domain zero_device_t (chr_file (ioctl read write getattr lock append open)))
(allow domain device_t (dir (getattr open search)))
(allow domain device_t (dir (ioctl read getattr lock open search)))
(allow domain device_t (dir (getattr open search)))
(allow domain device_t (lnk_file (read getattr)))
(allow domain devtty_t (chr_file (ioctl read write getattr lock append open)))
(allow domain root_t (dir (ioctl read getattr lock open search)))
(allow domain root_t (lnk_file (ioctl read getattr lock)))
(allow unconfined_domain_type domain (bpf (map_create map_read map_write prog_load prog_run)))
(allow unconfined_domain_type domain (socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow unconfined_domain_type domain (tcp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow unconfined_domain_type domain (udp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow unconfined_domain_type domain (rawip_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow unconfined_domain_type domain (netlink_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow unconfined_domain_type domain (packet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow unconfined_domain_type domain (key_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow unconfined_domain_type domain (unix_stream_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow unconfined_domain_type domain (unix_dgram_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow unconfined_domain_type domain (netlink_route_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow unconfined_domain_type domain (netlink_tcpdiag_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow unconfined_domain_type domain (netlink_nflog_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow unconfined_domain_type domain (netlink_xfrm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow unconfined_domain_type domain (netlink_selinux_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow unconfined_domain_type domain (netlink_audit_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow unconfined_domain_type domain (netlink_dnrt_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow unconfined_domain_type domain (netlink_kobject_uevent_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow unconfined_domain_type domain (appletalk_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow unconfined_domain_type domain (tun_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow unconfined_domain_type domain (netlink_iscsi_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow unconfined_domain_type domain (netlink_fib_lookup_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow unconfined_domain_type domain (netlink_connector_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow unconfined_domain_type domain (netlink_netfilter_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow unconfined_domain_type domain (netlink_generic_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow unconfined_domain_type domain (netlink_scsitransport_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow unconfined_domain_type domain (netlink_rdma_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow unconfined_domain_type domain (netlink_crypto_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow unconfined_domain_type domain (sctp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow unconfined_domain_type domain (icmp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow unconfined_domain_type domain (ax25_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow unconfined_domain_type domain (ipx_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow unconfined_domain_type domain (netrom_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow unconfined_domain_type domain (atmpvc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow unconfined_domain_type domain (x25_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow unconfined_domain_type domain (rose_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow unconfined_domain_type domain (decnet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow unconfined_domain_type domain (atmsvc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow unconfined_domain_type domain (rds_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow unconfined_domain_type domain (irda_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow unconfined_domain_type domain (pppox_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow unconfined_domain_type domain (llc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow unconfined_domain_type domain (can_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow unconfined_domain_type domain (tipc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow unconfined_domain_type domain (bluetooth_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow unconfined_domain_type domain (iucv_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow unconfined_domain_type domain (rxrpc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow unconfined_domain_type domain (isdn_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow unconfined_domain_type domain (phonet_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow unconfined_domain_type domain (ieee802154_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow unconfined_domain_type domain (caif_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow unconfined_domain_type domain (alg_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow unconfined_domain_type domain (nfc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow unconfined_domain_type domain (vsock_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow unconfined_domain_type domain (kcm_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow unconfined_domain_type domain (qipcrtr_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow unconfined_domain_type domain (smc_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow unconfined_domain_type domain (xdp_socket (ioctl read write create getattr setattr lock relabelfrom relabelto append map bind connect listen accept getopt setopt shutdown recvfrom sendto name_bind)))
(allow unconfined_domain_type domain (rawip_socket (node_bind)))
(allow unconfined_domain_type domain (sctp_socket (node_bind)))
(allow unconfined_domain_type domain (icmp_socket (node_bind)))
(allow unconfined_domain_type domain (udp_socket (node_bind)))
(allow unconfined_domain_type domain (tcp_socket (node_bind name_connect)))
(allow unconfined_domain_type domain (tun_socket (attach_queue)))
(allow unconfined_domain_type domain (unix_stream_socket (connectto)))
(allow unconfined_domain_type domain (netlink_audit_socket (nlmsg_read nlmsg_write nlmsg_relay nlmsg_readpriv nlmsg_tty_audit)))
(allow unconfined_domain_type domain (netlink_route_socket (nlmsg_read nlmsg_write)))
(allow unconfined_domain_type domain (netlink_tcpdiag_socket (nlmsg_read nlmsg_write)))
(allow unconfined_domain_type domain (netlink_xfrm_socket (nlmsg_read nlmsg_write)))
(allow unconfined_domain_type domain (fd (use)))
(allow unconfined_domain_type domain (fifo_file (ioctl read write getattr lock append open)))
(allow unconfined_domain_type domain (process (fork sigchld sigkill sigstop signull signal ptrace getsched setsched getsession getpgid setpgid getcap setcap share getattr setexec setfscreate noatsecure siginh setrlimit rlimitinh setcurrent setkeycreate setsockcreate getrlimit)))
(allow unconfined_domain_type domain (sem (create destroy getattr setattr read write associate unix_read unix_write)))
(allow unconfined_domain_type domain (msgq (create destroy getattr setattr read write associate unix_read unix_write enqueue)))
(allow unconfined_domain_type domain (shm (create destroy getattr setattr read write associate unix_read unix_write lock)))
(allow unconfined_domain_type domain (msg (send receive)))
(allow unconfined_domain_type domain (dir (ioctl read getattr lock open search)))
(allow unconfined_domain_type domain (file (ioctl read write getattr lock append open)))
(allow unconfined_domain_type domain (lnk_file (ioctl read getattr lock)))
(allow unconfined_domain_type domain (key (view read write search link setattr create)))
(allow domain self (association (sendto)))
(allow unconfined_domain_type self (association (sendto)))
(allow unconfined_domain_type domain (association (recvfrom)))
(allow domain unconfined_domain_type (association (recvfrom)))
(allow unconfined_domain_type domain (peer (recv)))
(allow domain unconfined_domain_type (peer (recv)))
(allow unconfined_domain_type netlabel_peer_t (peer (recv)))
(allow domain netlabel_peer_t (peer (recv)))
(allow domain self (association (sendto)))
(allow unconfined_domain_type self (association (sendto)))
(allow unconfined_domain_type domain (tcp_socket (recvfrom)))
(allow unconfined_domain_type domain (association (recvfrom)))
(allow domain unconfined_domain_type (tcp_socket (recvfrom)))
(allow domain unconfined_domain_type (association (recvfrom)))
(allow unconfined_domain_type domain (peer (recv)))
(allow domain unconfined_domain_type (peer (recv)))
(allow unconfined_domain_type netlabel_peer_t (peer (recv)))
(allow unconfined_domain_type netlabel_peer_t (tcp_socket (recvfrom)))
(allow domain netlabel_peer_t (peer (recv)))
(allow domain netlabel_peer_t (tcp_socket (recvfrom)))
(allow domain self (association (sendto)))
(allow unconfined_domain_type domain (udp_socket (recvfrom)))
(allow unconfined_domain_type domain (association (recvfrom)))
(allow unconfined_domain_type domain (peer (recv)))
(allow unconfined_domain_type netlabel_peer_t (peer (recv)))
(allow unconfined_domain_type netlabel_peer_t (udp_socket (recvfrom)))
(allow domain self (association (sendto)))
(allow unconfined_domain_type domain (rawip_socket (recvfrom)))
(allow unconfined_domain_type domain (association (recvfrom)))
(allow unconfined_domain_type domain (peer (recv)))
(allow unconfined_domain_type netlabel_peer_t (peer (recv)))
(allow unconfined_domain_type netlabel_peer_t (rawip_socket (recvfrom)))
(allow domain proc_t (dir (getattr open search)))
(allow domain sysctl_t (dir (getattr open search)))
(allow domain sysctl_vm_t (dir (getattr open search)))
(allow domain sysctl_vm_t (file (ioctl read getattr lock open)))
(allow domain proc_t (dir (getattr open search)))
(allow domain sysctl_t (dir (getattr open search)))
(allow domain sysctl_vm_t (dir (ioctl read getattr lock open search)))
(allow kernel_t root_t (dir (mounton)))
(allow file_type self (filesystem (associate)))
(allow file_type fs_t (filesystem (associate)))
(allow file_type noxattrfs (filesystem (associate)))
(allow file_type tmpfs_t (filesystem (associate)))
(allow file_type ramfs_t (filesystem (associate)))
(allow file_type hugetlbfs_t (filesystem (associate)))
(allow file_type tmp_t (filesystem (associate)))
(allow tmpfile tmpfs_t (filesystem (associate)))
(allow tmpfsfile tmpfs_t (filesystem (associate)))
(allow files_unconfined_type file_type (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(allow files_unconfined_type file_type (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(allow files_unconfined_type file_type (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(allow files_unconfined_type file_type (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(allow files_unconfined_type file_type (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(allow files_unconfined_type file_type (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open watch watch_mount watch_sb watch_with_perm watch_reads)))
(allow files_unconfined_type file_type (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(allow files_unconfined_type file_type (filesystem (mount remount unmount getattr relabelfrom relabelto associate quotamod quotaget watch)))
(allow bpf_t sysfs_t (filesystem (associate)))
(allow cgroup_t sysfs_t (filesystem (associate)))
(allow cgroup_types cgroup_t (filesystem (associate)))
(allow memory_pressure_t sysfs_t (filesystem (associate)))
(allow cpusetfs_t self (filesystem (associate)))
(allow hugetlbfs_t device_t (filesystem (associate)))
(allow hugetlbfs_t tmpfs_t (filesystem (associate)))
(allow ibmasmfs_t self (filesystem (associate)))
(allow infinibandeventfs_t self (filesystem (associate)))
(allow mvfs_t self (filesystem (associate)))
(allow pstore_t sysfs_t (filesystem (associate)))
(allow tmpfs_t device_t (filesystem (associate)))
(allow tmpfs_t tmpfs_t (filesystem (associate)))
(allow tmpfs_t noxattrfs (filesystem (associate)))
(allow dosfs_t fs_t (filesystem (associate)))
(allow fusefs_t self (filesystem (associate)))
(allow fusefs_t fs_t (filesystem (associate)))
(allow removable_t noxattrfs (filesystem (associate)))
(allow filesystem_type self (filesystem (associate)))
(allow noxattrfs noxattrfs (filesystem (associate)))
(allow filesystem_unconfined_type filesystem_type (filesystem (mount remount unmount getattr relabelfrom relabelto associate quotamod quotaget watch)))
(allow filesystem_unconfined_type filesystem_type (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(allow filesystem_unconfined_type filesystem_type (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(allow filesystem_unconfined_type filesystem_type (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(allow filesystem_unconfined_type filesystem_type (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(allow filesystem_unconfined_type filesystem_type (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(allow filesystem_unconfined_type filesystem_type (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(allow filesystem_unconfined_type filesystem_type (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(neverallow base_typeattr_8 self (capability (sys_module)))
(allow debugfs_t self (filesystem (associate)))
(neverallow base_typeattr_9 proc_kmsg_t (file (read)))
(neverallow base_typeattr_10 proc_kcore_t (file (ioctl read write create setattr lock relabelfrom relabelto append map unlink link rename execute quotaon audit_access open execmod watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans entrypoint)))
(allow kernel_t unlabeled_t (dir (mounton)))
(allow unlabeled_t fs_t (filesystem (associate)))
(neverallow base_typeattr_7 unlabeled_t (file (entrypoint)))
(allow kernel_t self (capability (chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap)))
(allow kernel_t self (process (transition sigchld sigkill sigstop signull signal getsched setsched getsession getpgid setpgid getcap setcap share getattr noatsecure siginh rlimitinh dyntransition setkeycreate setsockcreate getrlimit)))
(allow kernel_t self (shm (create destroy getattr setattr read write associate unix_read unix_write lock)))
(allow kernel_t self (sem (create destroy getattr setattr read write associate unix_read unix_write)))
(allow kernel_t self (msg (send receive)))
(allow kernel_t self (msgq (create destroy getattr setattr read write associate unix_read unix_write enqueue)))
(allow kernel_t self (unix_dgram_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow kernel_t self (unix_stream_socket (ioctl read write create getattr setattr append bind connect listen accept getopt setopt shutdown)))
(allow kernel_t self (unix_dgram_socket (sendto)))
(allow kernel_t self (unix_stream_socket (connectto)))
(allow kernel_t self (fifo_file (ioctl read write getattr lock append open)))
(allow kernel_t self (sock_file (read getattr open)))
(allow kernel_t self (fd (use)))
(allow kernel_t debugfs_t (dir (getattr open search)))
(allow kernel_t proc_t (dir (ioctl read getattr lock open search)))
(allow kernel_t proc_t (file (ioctl read getattr lock open)))
(allow kernel_t proc_t (lnk_file (read getattr)))
(allow kernel_t proc_net_t (dir (ioctl read getattr lock open search)))
(allow kernel_t proc_net_t (file (ioctl read getattr lock open)))
(allow kernel_t proc_mdstat_t (file (ioctl read getattr lock open)))
(allow kernel_t proc_kcore_t (file (getattr)))
(allow kernel_t proc_kmsg_t (file (getattr)))
(allow kernel_t sysctl_kernel_t (dir (ioctl read getattr lock open search)))
(allow kernel_t sysctl_kernel_t (file (ioctl read getattr lock open)))
(allow kernel_t sysctl_t (dir (ioctl read getattr lock open search)))
(allow kernel_t sysctl_kernel_ns_last_pid_t (file (ioctl read getattr lock open)))
(allow kernel_t unlabeled_t (dir (mounton)))
(allow kernel_t unlabeled_t (packet (send)))
(allow kernel_t proc_t (dir (mounton)))
(allow kernel_t kernel_t (system (module_request)))
(allow unlabeled_t self (packet (forward_in forward_out)))
(allow unlabeled_t netif_t (netif (ingress)))
(allow unlabeled_t node_t (node (recvfrom)))
(allow kernel_t unlabeled_t (tcp_socket (recvfrom)))
(allow kernel_t unlabeled_t (udp_socket (recvfrom)))
(allow kernel_t unlabeled_t (rawip_socket (recvfrom)))
(allow kernel_t unlabeled_t (peer (recv)))
(allow kernel_t unlabeled_t (association (sendto recvfrom)))
(allow kernel_t netlabel_peer_t (peer (recv)))
(allow kernel_t netlabel_peer_t (tcp_socket (recvfrom)))
(allow kernel_t netlabel_peer_t (udp_socket (recvfrom)))
(allow kernel_t netlabel_peer_t (rawip_socket (recvfrom)))
(allow kernel_t netif_type (netif (egress)))
(allow kernel_t netif_type (netif (ingress)))
(allow kernel_t node_type (node (sendto)))
(allow kernel_t node_type (node (recvfrom)))
(allow kernel_t netif_t (netif (egress)))
(allow kernel_t netif_type (netif (ingress egress)))
(allow kernel_t node_type (node (recvfrom sendto)))
(allow kernel_t node_t (node (sendto)))
(allow kernel_t packet_type (packet (send)))
(allow kernel_t ibpkey_type (infiniband_pkey (access)))
(allow kernel_t unlabeled_t (infiniband_pkey (access)))
(allow kernel_t ibendport_type (infiniband_endport (manage_subnet)))
(allow kernel_t unlabeled_t (infiniband_endport (manage_subnet)))
(allow kernel_t sysfs_t (dir (mounton)))
(allow kernel_t sysfs_t (dir (getattr open search)))
(allow kernel_t sysfs_t (file (ioctl read getattr lock open)))
(allow kernel_t sysfs_t (dir (getattr open search)))
(allow kernel_t sysfs_t (lnk_file (read getattr)))
(allow kernel_t sysfs_t (dir (getattr open search)))
(allow kernel_t sysfs_t (dir (ioctl read getattr lock open search)))
(allow kernel_t usbfs_t (dir (getattr open search)))
(allow kernel_t usbfs_t (dir (getattr open search)))
(allow kernel_t device_t (dir (ioctl read getattr lock open search)))
(allow kernel_t device_t (dir (ioctl write getattr lock open add_name search)))
(allow kernel_t device_t (dir (create getattr)))
(allow kernel_t device_t (dir (ioctl write getattr lock open remove_name search)))
(allow kernel_t device_t (dir (getattr rmdir)))
(allow kernel_t self (capability (mknod)))
(allow kernel_t device_t (dir (ioctl write getattr lock open add_name search)))
(allow kernel_t device_t (blk_file (create getattr)))
(allow kernel_t device_t (dir (ioctl write getattr lock open remove_name search)))
(allow kernel_t device_t (blk_file (getattr unlink)))
(allow kernel_t self (capability (mknod)))
(allow kernel_t device_t (dir (ioctl write getattr lock open add_name search)))
(allow kernel_t device_t (chr_file (create getattr)))
(allow kernel_t device_t (dir (ioctl write getattr lock open remove_name search)))
(allow kernel_t device_t (chr_file (getattr unlink)))
(allow kernel_t device_t (dir (mounton)))
(allow kernel_t device_t (dir (ioctl write getattr lock open remove_name search)))
(allow kernel_t device_t (lnk_file (getattr unlink)))
(allow kernel_t device_t (blk_file (ioctl read write getattr lock append open)))
(allow kernel_t device_t (chr_file (ioctl read write getattr lock append open)))
(allow kernel_t device_t (blk_file (setattr)))
(allow kernel_t device_t (chr_file (setattr)))
(allow kernel_t device_t (dir (getattr open search)))
(allow kernel_t mouse_device_t (chr_file (getattr)))
(allow kernel_t device_t (dir (getattr open search)))
(allow kernel_t mouse_device_t (chr_file (setattr)))
(allow kernel_t device_t (dir (ioctl write getattr lock open remove_name search)))
(allow kernel_t mouse_device_t (chr_file (getattr unlink)))
(allow kernel_t device_t (filesystem (getattr)))
(allow kernel_t sysfs_t (filesystem (getattr)))
(allow kernel_t device_t (dir (getattr open search)))
(allow kernel_t kmsg_device_t (chr_file (ioctl write getattr lock append open)))
(allow kernel_t filesystem_type (filesystem (mount)))
(allow kernel_t filesystem_type (filesystem (unmount)))
(allow kernel_t tmpfs_t (filesystem (getattr)))
(allow kernel_t tmpfs_t (dir (getattr)))
(allow kernel_t tmpfs_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow kernel_t tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow kernel_t tmpfs_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow kernel_t tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow kernel_t tmpfs_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow kernel_t tmpfs_t (lnk_file (getattr unlink)))
(allow kernel_t filesystem_image_file_type (file (ioctl read getattr lock)))
(allow kernel_t security_t (filesystem (getattr)))
(allow kernel_t sysfs_t (filesystem (getattr)))
(allow kernel_t sysfs_t (dir (getattr open search)))
(allow kernel_t sysfs_t (dir (getattr open search)))
(allow kernel_t devpts_t (filesystem (getattr)))
(allow kernel_t device_t (dir (getattr open search)))
(allow kernel_t device_t (dir (ioctl read getattr lock open search)))
(allow kernel_t device_t (dir (getattr open search)))
(allow kernel_t device_t (lnk_file (read getattr)))
(allow kernel_t console_device_t (chr_file (ioctl read write getattr lock append open)))
(allow kernel_t device_t (dir (getattr open search)))
(allow kernel_t device_t (dir (ioctl read getattr lock open search)))
(allow kernel_t device_t (dir (getattr open search)))
(allow kernel_t device_t (lnk_file (read getattr)))
(allow kernel_t devpts_t (dir (ioctl read getattr lock open search)))
(allow kernel_t devpts_t (chr_file (ioctl read write getattr lock append open)))
(allow kernel_t device_t (dir (getattr open search)))
(allow kernel_t device_t (dir (ioctl read getattr lock open search)))
(allow kernel_t device_t (dir (getattr open search)))
(allow kernel_t device_t (lnk_file (read getattr)))
(allow kernel_t tty_device_t (chr_file (getattr setattr unlink)))
(allow kernel_t bin_t (dir (getattr open search)))
(allow kernel_t bin_t (lnk_file (read getattr)))
(allow kernel_t usr_t (dir (getattr open search)))
(allow kernel_t bin_t (dir (getattr open search)))
(allow kernel_t bin_t (dir (ioctl read getattr lock open search)))
(allow kernel_t shell_exec_t (file (ioctl read getattr lock map execute open execute_no_trans)))
(allow kernel_t bin_t (dir (getattr open search)))
(allow kernel_t bin_t (lnk_file (read getattr)))
(allow kernel_t usr_t (dir (getattr open search)))
(allow kernel_t bin_t (dir (getattr open search)))
(allow kernel_t bin_t (dir (ioctl read getattr lock open search)))
(allow kernel_t bin_t (dir (getattr open search)))
(allow kernel_t bin_t (lnk_file (read getattr)))
(allow kernel_t usr_t (dir (getattr open search)))
(allow kernel_t bin_t (dir (getattr open search)))
(allow kernel_t bin_t (dir (ioctl read getattr lock open search)))
(allow kernel_t bin_t (file (ioctl read getattr lock map execute open execute_no_trans)))
(allow kernel_t domain (process (signal)))
(allow kernel_t proc_t (dir (getattr open search)))
(allow kernel_t proc_t (dir (getattr open search)))
(allow kernel_t domain (dir (getattr open search)))
(allow kernel_t root_t (filesystem (getattr)))
(allow kernel_t root_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow kernel_t root_t (file (unlink)))
(allow kernel_t root_t (file (ioctl read getattr map execute open execute_no_trans)))
(allow kernel_t root_t (lnk_file (getattr unlink)))
(allow kernel_t root_t (chr_file (getattr unlink)))
(allow kernel_t root_t (dir (ioctl read getattr lock open search)))
(allow kernel_t root_t (lnk_file (ioctl read getattr lock)))
(allow kernel_t etc_t (dir (ioctl read getattr lock open search)))
(allow kernel_t var_run_t (dir (mounton)))
(allow kernel_t etc_runtime_t (dir (getattr)))
(allow kernel_t etc_runtime_t (dir (mounton)))
(allow kernel_t home_root_t (dir (ioctl read getattr lock open search)))
(allow kernel_t home_root_t (lnk_file (read getattr)))
(allow kernel_t usr_t (dir (ioctl read getattr lock open search)))
(allow kernel_t usr_t (dir (getattr open search)))
(allow kernel_t usr_t (file (ioctl read getattr lock open)))
(allow kernel_t usr_t (dir (getattr open search)))
(allow kernel_t usr_t (lnk_file (read getattr)))
(allow kernel_t default_t (dir (getattr mounton open search)))
(allow kern_unconfined proc_type (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(allow kern_unconfined proc_type (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(allow kern_unconfined proc_type (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(allow kern_unconfined sysctl_type (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(allow kern_unconfined sysctl_type (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(allow kern_unconfined kernel_t (system (ipc_info syslog_read syslog_mod syslog_console module_request module_load halt reboot status start stop enable disable reload)))
(allow kern_unconfined unlabeled_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open watch watch_mount watch_sb watch_with_perm watch_reads execute_no_trans)))
(allow kern_unconfined unlabeled_t (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(allow kern_unconfined unlabeled_t (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(allow kern_unconfined unlabeled_t (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(allow kern_unconfined unlabeled_t (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open execmod watch watch_mount watch_sb watch_with_perm watch_reads)))
(allow kern_unconfined unlabeled_t (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open watch watch_mount watch_sb watch_with_perm watch_reads)))
(allow kern_unconfined unlabeled_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto append map unlink link rename execute quotaon mounton open execmod watch watch_mount watch_sb watch_with_perm watch_reads add_name remove_name reparent search rmdir)))
(allow kern_unconfined unlabeled_t (filesystem (mount remount unmount getattr relabelfrom relabelto associate quotamod quotaget watch)))
(allow kern_unconfined unlabeled_t (association (sendto recvfrom setcontext polmatch)))
(allow kern_unconfined unlabeled_t (packet (send recv relabelto forward_in forward_out)))
(allow kern_unconfined unlabeled_t (process (fork sigchld sigkill sigstop signull signal ptrace getsched setsched getsession getpgid setpgid getcap setcap share getattr setexec setfscreate noatsecure siginh setrlimit rlimitinh setcurrent setkeycreate setsockcreate getrlimit)))
(allow kernel_t unlabeled_t (dir (getattr open search)))
(allow kernel_t device_t (chr_file (setattr)))
(neverallow base_typeattr_11 security_t (security (setenforce)))
(allow can_setenforce security_t (dir (ioctl read getattr lock open search)))
(allow can_setenforce security_t (file (ioctl read write getattr map open)))
(allow can_setenforce sysfs_t (dir (getattr open search)))
(allow can_setenforce sysfs_t (dir (getattr open search)))
(neverallow base_typeattr_12 security_t (security (load_policy)))
(allow can_load_policy security_t (dir (ioctl read getattr lock open search)))
(allow can_load_policy security_t (file (ioctl read write getattr map open)))
(allow can_load_policy sysfs_t (dir (getattr open search)))
(allow can_load_policy sysfs_t (dir (getattr open search)))
(neverallow base_typeattr_13 security_t (security (setsecparam)))
(allow can_setsecparam security_t (dir (ioctl read getattr lock open search)))
(allow can_setsecparam security_t (file (ioctl read write getattr map open)))
(allow can_setsecparam security_t (security (setsecparam)))
(auditallow can_setsecparam security_t (security (setsecparam)))
(allow can_setsecparam sysfs_t (dir (getattr open search)))
(allow can_setsecparam sysfs_t (dir (getattr open search)))
(allow selinux_unconfined_type security_t (dir (ioctl read getattr lock open search)))
(allow selinux_unconfined_type security_t (file (ioctl read write getattr map open)))
(allow selinux_unconfined_type boolean_type (file (ioctl read getattr lock open)))
(allow selinux_unconfined_type security_t (security (compute_av compute_create compute_member check_context compute_relabel compute_user setsecparam setcheckreqprot read_policy validate_trans)))
(allow devpts_t device_t (filesystem (associate)))
(allow devpts_t tmpfs_t (filesystem (associate)))
(allow devpts_t tmpfs_t (filesystem (associate)))
(allow ptmx_t devpts_t (filesystem (associate)))
(booleanif (and (not (secure_mode_policyload)) (not (secure_mode_setbool)))
    (true
        (allow selinux_unconfined_type boolean_type (file (ioctl write getattr lock append open)))
    )
    (false
        (dontaudit selinux_unconfined_type boolean_type (file (ioctl write getattr lock append open)))
    )
)
(booleanif (and (secure_mode_policyload) (not (secure_mode_setbool)))
    (true
        (allow selinux_unconfined_type base_typeattr_14 (file (ioctl write getattr lock append open)))
    )
    (false
        (dontaudit selinux_unconfined_type base_typeattr_14 (file (ioctl write getattr lock append open)))
    )
)
(booleanif (secure_mode_setbool)
    (true
        (dontaudit selinux_unconfined_type security_t (security (setbool)))
    )
    (false
        (allow selinux_unconfined_type security_t (security (setbool)))
    )
)
(booleanif (secure_mode_policyload)
    (true
        (dontaudit can_setenforce security_t (security (setenforce)))
        (dontaudit can_load_policy security_t (security (load_policy)))
        (dontaudit selinux_unconfined_type security_t (security (load_policy setenforce)))
    )
    (false
        (allow can_setenforce security_t (security (setenforce)))
        (allow can_load_policy security_t (security (load_policy)))
        (allow selinux_unconfined_type security_t (security (load_policy setenforce)))
    )
)
(booleanif (secure_mode_insmod)
    (true
        (dontaudit can_load_kernmodule kernel_t (key (search)))
        (dontaudit can_load_kernmodule modules_object_t (system (module_load)))
        (dontaudit can_load_kernmodule modules_object_t (file (ioctl read getattr lock open)))
        (dontaudit can_load_kernmodule self (system (module_load)))
        (dontaudit can_load_kernmodule self (capability (sys_module)))
    )
    (false
        (allow can_load_kernmodule kernel_t (key (search)))
        (allow can_load_kernmodule modules_object_t (system (module_load)))
        (allow can_load_kernmodule modules_object_t (lnk_file (read getattr)))
        (allow can_load_kernmodule modules_object_t (dir (getattr open search)))
        (allow can_load_kernmodule modules_object_t (file (ioctl read getattr lock open)))
        (allow can_load_kernmodule modules_object_t (dir (getattr open search)))
        (allow can_load_kernmodule modules_object_t (dir (ioctl read getattr lock open search)))
        (allow can_load_kernmodule self (system (module_load)))
        (allow can_load_kernmodule self (capability (sys_module)))
    )
)
(booleanif (allow_execmod)
    (true
        (allow files_unconfined_type file_type (file (execmod)))
    )
)
(booleanif (global_ssp)
    (true
        (allow domain urandom_device_t (chr_file (ioctl read getattr lock open)))
        (allow domain device_t (dir (getattr open search)))
    )
)
(typeattribute base_typeattr_14)
(typeattributeset base_typeattr_14 (and (boolean_type ) (not (secure_mode_policyload_t ))))
(typeattribute base_typeattr_13)
(typeattributeset base_typeattr_13 (not (can_setsecparam selinux_unconfined_type ) ))
(typeattribute base_typeattr_12)
(typeattributeset base_typeattr_12 (not (can_load_policy selinux_unconfined_type ) ))
(typeattribute base_typeattr_11)
(typeattributeset base_typeattr_11 (not (can_setenforce selinux_unconfined_type ) ))
(typeattribute base_typeattr_10)
(typeattributeset base_typeattr_10 (not (can_dump_kernel kern_unconfined ) ))
(typeattribute base_typeattr_9)
(typeattributeset base_typeattr_9 (not (can_receive_kernel_messages kern_unconfined ) ))
(typeattribute base_typeattr_8)
(typeattributeset base_typeattr_8 (not (can_load_kernmodule ) ))
(typeattribute base_typeattr_7)
(typeattributeset base_typeattr_7 (all))
(typeattribute base_typeattr_6)
(typeattributeset base_typeattr_6 (not (domain unlabeled_t ) ))
(typeattribute base_typeattr_5)
(typeattributeset base_typeattr_5 (and (domain ) (not (set_curr_context ))))
(typeattribute base_typeattr_4)
(typeattributeset base_typeattr_4 (and (domain ) (not (mmap_low_domain_type ))))
(typeattribute base_typeattr_3)
(typeattributeset base_typeattr_3 (not (domain ) ))
(typeattribute base_typeattr_2)
(typeattributeset base_typeattr_2 (not (devices_unconfined_type memory_raw_write ) ))
(typeattribute base_typeattr_1)
(typeattributeset base_typeattr_1 (not (devices_unconfined_type memory_raw_read ) ))
(optional base_optional_2
    (typeattributeset cil_gen_require container_mountpoint_type)
    (typeattributeset cil_gen_require container_mountpoint_type)
    (typeattributeset container_mountpoint_type (tun_tap_device_t ))
)
(optional base_optional_3
    (typeattributeset cil_gen_require init_mountpoint_type)
    (typeattributeset cil_gen_require init_mountpoint_type)
    (typeattributeset init_mountpoint_type (device_t ))
)
(optional base_optional_4
    (typeattributeset cil_gen_require container_mountpoint_type)
    (typeattributeset cil_gen_require container_mountpoint_type)
    (typeattributeset container_mountpoint_type (device_t ))
)
(optional base_optional_5
    (typeattributeset cil_gen_require systemd_tmpfiles_t)
    (allow systemd_tmpfiles_t device_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
    (allow systemd_tmpfiles_t device_t (file (ioctl write create getattr setattr lock relabelfrom relabelto append unlink open)))
    (allow systemd_tmpfiles_t device_t (lnk_file (read create getattr setattr relabelfrom relabelto unlink)))
    (allow systemd_tmpfiles_t device_t (fifo_file (create getattr setattr relabelfrom relabelto unlink)))
)
(optional base_optional_6
    (typeattributeset cil_gen_require container_mountpoint_type)
    (typeattributeset cil_gen_require container_mountpoint_type)
    (typeattributeset container_mountpoint_type (autofs_device_t ))
    (optional base_optional_7
        (typeattributeset cil_gen_require container_mountpoint_type)
        (typeattributeset cil_gen_require container_mountpoint_type)
        (typeattributeset container_mountpoint_type (kmsg_device_t ))
    )
)
(optional base_optional_8
    (typeattributeset cil_gen_require init_mountpoint_type)
    (typeattributeset cil_gen_require init_mountpoint_type)
    (typeattributeset init_mountpoint_type (kmsg_device_t ))
    (optional base_optional_9
        (typeattributeset cil_gen_require init_mountpoint_type)
        (typeattributeset cil_gen_require init_mountpoint_type)
        (typeattributeset init_mountpoint_type (mtrr_device_t ))
    )
)
(optional base_optional_10
    (typeattributeset cil_gen_require container_mountpoint_type)
    (typeattributeset cil_gen_require container_mountpoint_type)
    (typeattributeset container_mountpoint_type (null_device_t ))
    (optional base_optional_11
        (typeattributeset cil_gen_require container_mountpoint_type)
        (typeattributeset cil_gen_require container_mountpoint_type)
        (typeattributeset container_mountpoint_type (random_device_t ))
    )
)
(optional base_optional_12
    (typeattributeset cil_gen_require init_mountpoint_type)
    (typeattributeset cil_gen_require init_mountpoint_type)
    (typeattributeset init_mountpoint_type (sysfs_t ))
)
(optional base_optional_13
    (typeattributeset cil_gen_require container_mountpoint_type)
    (typeattributeset cil_gen_require container_mountpoint_type)
    (typeattributeset container_mountpoint_type (urandom_device_t ))
)
(optional base_optional_14
    (typeattributeset cil_gen_require init_mountpoint_type)
    (typeattributeset cil_gen_require init_mountpoint_type)
    (typeattributeset init_mountpoint_type (usbfs_t ))
)
(optional base_optional_15
    (typeattributeset cil_gen_require container_mountpoint_type)
    (typeattributeset cil_gen_require container_mountpoint_type)
    (typeattributeset container_mountpoint_type (usb_device_t ))
    (optional base_optional_16
        (typeattributeset cil_gen_require container_mountpoint_type)
        (typeattributeset cil_gen_require container_mountpoint_type)
        (typeattributeset container_mountpoint_type (zero_device_t ))
    )
)
(optional base_optional_17
    (typeattributeset cil_gen_require etc_t)
    (typeattributeset cil_gen_require usr_t)
    (typeattributeset cil_gen_require lib_t)
    (typeattributeset cil_gen_require ld_so_t)
    (typeattributeset cil_gen_require ld_so_cache_t)
    (typeattributeset cil_gen_require textrel_shlib_t)
    (allow domain etc_t (dir (ioctl read getattr lock open search)))
    (allow domain lib_t (dir (ioctl read getattr lock open search)))
    (allow domain lib_t (dir (getattr open search)))
    (allow domain lib_t (lnk_file (read getattr)))
    (allow domain ld_so_t (lnk_file (read getattr)))
    (allow domain lib_t (dir (getattr open search)))
    (allow domain ld_so_t (file (ioctl read getattr map execute open)))
    (allow domain ld_so_cache_t (file (ioctl read getattr lock map open)))
    (allow domain usr_t (dir (getattr open search)))
    (allow domain lib_t (dir (ioctl read getattr lock open search)))
    (allow domain lib_t (dir (getattr open search)))
    (allow domain lib_t (lnk_file (read getattr)))
    (allow domain textrel_shlib_t (lnk_file (read getattr)))
    (allow domain lib_t (dir (getattr open search)))
    (allow domain lib_t (file (ioctl read getattr map execute open)))
    (allow domain textrel_shlib_t (file (ioctl read getattr map execute open)))
    (allow domain textrel_shlib_t (file (execmod)))
)
(optional base_optional_18
    (typeattributeset cil_gen_require var_run_t)
    (typeattributeset cil_gen_require var_t)
    (typeattributeset cil_gen_require setrans_t)
    (typeattributeset cil_gen_require setrans_var_run_t)
    (allow domain self (unix_stream_socket (ioctl read write create getattr setattr append bind connect listen accept getopt setopt shutdown)))
    (allow domain setrans_var_run_t (dir (getattr open search)))
    (allow domain setrans_var_run_t (sock_file (write getattr append open)))
    (allow domain setrans_t (unix_stream_socket (connectto)))
    (allow domain var_run_t (lnk_file (read getattr)))
    (allow domain var_t (dir (getattr open search)))
    (allow domain var_run_t (dir (ioctl read getattr lock open search)))
)
(optional base_optional_19
    (typeattributeset cil_gen_require xdm_t)
    (dontaudit domain xdm_t (fd (use)))
    (dontaudit domain xdm_t (fifo_file (ioctl read write getattr lock append open)))
)
(optional base_optional_20
    (typeattributeset cil_gen_require init_mountpoint_type)
    (typeattributeset cil_gen_require init_mountpoint_type)
    (typeattributeset init_mountpoint_type (boot_t ))
    (optional base_optional_21
        (typeattributeset cil_gen_require init_mountpoint_type)
        (typeattributeset cil_gen_require init_mountpoint_type)
        (typeattributeset init_mountpoint_type (default_t ))
        (optional base_optional_22
            (typeattributeset cil_gen_require init_mountpoint_type)
            (typeattributeset cil_gen_require init_mountpoint_type)
            (typeattributeset init_mountpoint_type (etc_t ))
            (optional base_optional_23
                (typeattributeset cil_gen_require init_mountpoint_type)
                (typeattributeset cil_gen_require init_mountpoint_type)
                (typeattributeset init_mountpoint_type (home_root_t ))
                (optional base_optional_24
                    (typeattributeset cil_gen_require init_mountpoint_type)
                    (typeattributeset cil_gen_require init_mountpoint_type)
                    (typeattributeset init_mountpoint_type (mnt_t ))
                    (optional base_optional_25
                        (typeattributeset cil_gen_require init_mountpoint_type)
                        (typeattributeset cil_gen_require init_mountpoint_type)
                        (typeattributeset init_mountpoint_type (modules_object_t ))
                        (optional base_optional_26
                            (typeattributeset cil_gen_require init_mountpoint_type)
                            (typeattributeset cil_gen_require init_mountpoint_type)
                            (typeattributeset init_mountpoint_type (root_t ))
                            (optional base_optional_27
                                (typeattributeset cil_gen_require init_mountpoint_type)
                                (typeattributeset cil_gen_require init_mountpoint_type)
                                (typeattributeset init_mountpoint_type (src_t ))
                                (optional base_optional_28
                                    (typeattributeset cil_gen_require init_mountpoint_type)
                                    (typeattributeset cil_gen_require init_mountpoint_type)
                                    (typeattributeset init_mountpoint_type (system_map_t ))
                                    (optional base_optional_29
                                        (typeattributeset cil_gen_require init_mountpoint_type)
                                        (typeattributeset cil_gen_require init_mountpoint_type)
                                        (typeattributeset init_mountpoint_type (tmp_t ))
                                        (optional base_optional_30
                                            (typeattributeset cil_gen_require init_mountpoint_type)
                                            (typeattributeset cil_gen_require init_mountpoint_type)
                                            (typeattributeset init_mountpoint_type (usr_t ))
                                            (optional base_optional_31
                                                (typeattributeset cil_gen_require init_mountpoint_type)
                                                (typeattributeset cil_gen_require init_mountpoint_type)
                                                (typeattributeset init_mountpoint_type (var_t ))
                                                (optional base_optional_32
                                                    (typeattributeset cil_gen_require init_mountpoint_type)
                                                    (typeattributeset cil_gen_require init_mountpoint_type)
                                                    (typeattributeset init_mountpoint_type (var_lib_t ))
                                                    (optional base_optional_33
                                                        (typeattributeset cil_gen_require init_mountpoint_type)
                                                        (typeattributeset cil_gen_require init_mountpoint_type)
                                                        (typeattributeset init_mountpoint_type (var_lock_t ))
                                                        (optional base_optional_34
                                                            (typeattributeset cil_gen_require init_mountpoint_type)
                                                            (typeattributeset cil_gen_require init_mountpoint_type)
                                                            (typeattributeset init_mountpoint_type (var_run_t ))
                                                        )
                                                    )
                                                )
                                            )
                                        )
                                    )
                                )
                            )
                        )
                    )
                )
            )
        )
    )
)
(optional base_optional_35
    (typeattributeset cil_gen_require systemd_tmpfiles_t)
    (allow systemd_tmpfiles_t var_run_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
    (allow systemd_tmpfiles_t var_run_t (file (ioctl write create getattr setattr lock relabelfrom relabelto append unlink open)))
    (allow systemd_tmpfiles_t var_run_t (lnk_file (read create getattr setattr relabelfrom relabelto unlink)))
    (allow systemd_tmpfiles_t var_run_t (fifo_file (create getattr setattr relabelfrom relabelto unlink)))
)
(optional base_optional_36
    (typeattributeset cil_gen_require init_mountpoint_type)
    (typeattributeset cil_gen_require init_mountpoint_type)
    (typeattributeset init_mountpoint_type (anon_inodefs_t ))
    (optional base_optional_37
        (typeattributeset cil_gen_require init_mountpoint_type)
        (typeattributeset cil_gen_require init_mountpoint_type)
        (typeattributeset init_mountpoint_type (binfmt_misc_fs_t ))
        (optional base_optional_38
            (typeattributeset cil_gen_require init_mountpoint_type)
            (typeattributeset cil_gen_require init_mountpoint_type)
            (typeattributeset init_mountpoint_type (bpf_t ))
        )
    )
)
(optional base_optional_39
    (typeattributeset cil_gen_require kubernetes_mountpoint_type)
    (typeattributeset cil_gen_require kubernetes_mountpoint_type)
    (typeattributeset kubernetes_mountpoint_type (bpf_t ))
)
(optional base_optional_40
    (typeattributeset cil_gen_require init_mountpoint_type)
    (typeattributeset cil_gen_require init_mountpoint_type)
    (typeattributeset init_mountpoint_type (capifs_t ))
    (optional base_optional_41
        (typeattributeset cil_gen_require init_mountpoint_type)
        (typeattributeset cil_gen_require init_mountpoint_type)
        (typeattributeset init_mountpoint_type (cgroup_t ))
        (optional base_optional_42
            (typeattributeset cil_gen_require init_mountpoint_type)
            (typeattributeset cil_gen_require init_mountpoint_type)
            (typeattributeset init_mountpoint_type (ecryptfs_t ))
            (optional base_optional_43
                (typeattributeset cil_gen_require init_mountpoint_type)
                (typeattributeset cil_gen_require init_mountpoint_type)
                (typeattributeset init_mountpoint_type (efivarfs_t ))
                (optional base_optional_44
                    (typeattributeset cil_gen_require init_mountpoint_type)
                    (typeattributeset cil_gen_require init_mountpoint_type)
                    (typeattributeset init_mountpoint_type (hugetlbfs_t ))
                    (optional base_optional_45
                        (typeattributeset cil_gen_require init_mountpoint_type)
                        (typeattributeset cil_gen_require init_mountpoint_type)
                        (typeattributeset init_mountpoint_type (pstore_t ))
                        (optional base_optional_46
                            (typeattributeset cil_gen_require init_mountpoint_type)
                            (typeattributeset cil_gen_require init_mountpoint_type)
                            (typeattributeset init_mountpoint_type (ramfs_t ))
                            (optional base_optional_47
                                (typeattributeset cil_gen_require init_mountpoint_type)
                                (typeattributeset cil_gen_require init_mountpoint_type)
                                (typeattributeset init_mountpoint_type (rpc_pipefs_t ))
                                (optional base_optional_48
                                    (typeattributeset cil_gen_require init_mountpoint_type)
                                    (typeattributeset cil_gen_require init_mountpoint_type)
                                    (typeattributeset init_mountpoint_type (spufs_t ))
                                    (optional base_optional_49
                                        (typeattributeset cil_gen_require init_mountpoint_type)
                                        (typeattributeset cil_gen_require init_mountpoint_type)
                                        (typeattributeset init_mountpoint_type (sysv_t ))
                                        (optional base_optional_50
                                            (typeattributeset cil_gen_require init_mountpoint_type)
                                            (typeattributeset cil_gen_require init_mountpoint_type)
                                            (typeattributeset init_mountpoint_type (tracefs_t ))
                                            (optional base_optional_51
                                                (typeattributeset cil_gen_require init_mountpoint_type)
                                                (typeattributeset cil_gen_require init_mountpoint_type)
                                                (typeattributeset init_mountpoint_type (virtiofs_t ))
                                                (optional base_optional_52
                                                    (typeattributeset cil_gen_require init_mountpoint_type)
                                                    (typeattributeset cil_gen_require init_mountpoint_type)
                                                    (typeattributeset init_mountpoint_type (vmblock_t ))
                                                    (optional base_optional_53
                                                        (typeattributeset cil_gen_require init_mountpoint_type)
                                                        (typeattributeset cil_gen_require init_mountpoint_type)
                                                        (typeattributeset init_mountpoint_type (vxfs_t ))
                                                        (optional base_optional_54
                                                            (typeattributeset cil_gen_require init_mountpoint_type)
                                                            (typeattributeset cil_gen_require init_mountpoint_type)
                                                            (typeattributeset init_mountpoint_type (tmpfs_t ))
                                                            (optional base_optional_55
                                                                (typeattributeset cil_gen_require init_mountpoint_type)
                                                                (typeattributeset cil_gen_require init_mountpoint_type)
                                                                (typeattributeset init_mountpoint_type (xenfs_t ))
                                                                (optional base_optional_56
                                                                    (typeattributeset cil_gen_require init_mountpoint_type)
                                                                    (typeattributeset cil_gen_require init_mountpoint_type)
                                                                    (typeattributeset init_mountpoint_type (autofs_t ))
                                                                    (optional base_optional_57
                                                                        (typeattributeset cil_gen_require init_mountpoint_type)
                                                                        (typeattributeset cil_gen_require init_mountpoint_type)
                                                                        (typeattributeset init_mountpoint_type (cifs_t ))
                                                                        (optional base_optional_58
                                                                            (typeattributeset cil_gen_require init_mountpoint_type)
                                                                            (typeattributeset cil_gen_require init_mountpoint_type)
                                                                            (typeattributeset init_mountpoint_type (dosfs_t ))
                                                                            (optional base_optional_59
                                                                                (typeattributeset cil_gen_require init_mountpoint_type)
                                                                                (typeattributeset cil_gen_require init_mountpoint_type)
                                                                                (typeattributeset init_mountpoint_type (fusefs_t ))
                                                                            )
                                                                        )
                                                                    )
                                                                )
                                                            )
                                                        )
                                                    )
                                                )
                                            )
                                        )
                                    )
                                )
                            )
                        )
                    )
                )
            )
        )
    )
)
(optional base_optional_60
    (typeattributeset cil_gen_require container_mountpoint_type)
    (typeattributeset cil_gen_require container_mountpoint_type)
    (typeattributeset container_mountpoint_type (fusefs_t ))
)
(optional base_optional_61
    (typeattributeset cil_gen_require init_mountpoint_type)
    (typeattributeset cil_gen_require init_mountpoint_type)
    (typeattributeset init_mountpoint_type (iso9660_t ))
    (optional base_optional_62
        (typeattributeset cil_gen_require init_mountpoint_type)
        (typeattributeset cil_gen_require init_mountpoint_type)
        (typeattributeset init_mountpoint_type (removable_t ))
        (optional base_optional_63
            (typeattributeset cil_gen_require init_mountpoint_type)
            (typeattributeset cil_gen_require init_mountpoint_type)
            (typeattributeset init_mountpoint_type (nfs_t ))
            (optional base_optional_64
                (typeattributeset cil_gen_require init_mountpoint_type)
                (typeattributeset cil_gen_require init_mountpoint_type)
                (typeattributeset init_mountpoint_type (configfs_t ))
                (optional base_optional_65
                    (typeattributeset cil_gen_require init_mountpoint_type)
                    (typeattributeset cil_gen_require init_mountpoint_type)
                    (typeattributeset init_mountpoint_type (debugfs_t ))
                    (optional base_optional_66
                        (typeattributeset cil_gen_require init_mountpoint_type)
                        (typeattributeset cil_gen_require init_mountpoint_type)
                        (typeattributeset init_mountpoint_type (proc_t ))
                    )
                )
            )
        )
    )
)
(optional base_optional_67
    (typeattributeset cil_gen_require container_mountpoint_type)
    (typeattributeset cil_gen_require container_mountpoint_type)
    (typeattributeset container_mountpoint_type (proc_t ))
)
(optional base_optional_68
    (typeattributeset cil_gen_require init_mountpoint_type)
    (typeattributeset cil_gen_require init_mountpoint_type)
    (typeattributeset init_mountpoint_type (proc_kmsg_t ))
)
(optional base_optional_69
    (typeattributeset cil_gen_require container_mountpoint_type)
    (typeattributeset cil_gen_require container_mountpoint_type)
    (typeattributeset container_mountpoint_type (proc_kcore_t ))
)
(optional base_optional_70
    (typeattributeset cil_gen_require init_mountpoint_type)
    (typeattributeset cil_gen_require init_mountpoint_type)
    (typeattributeset init_mountpoint_type (proc_kcore_t ))
    (optional base_optional_71
        (typeattributeset cil_gen_require init_mountpoint_type)
        (typeattributeset cil_gen_require init_mountpoint_type)
        (typeattributeset init_mountpoint_type (proc_xen_t ))
        (optional base_optional_72
            (typeattributeset cil_gen_require init_mountpoint_type)
            (typeattributeset cil_gen_require init_mountpoint_type)
            (typeattributeset init_mountpoint_type (sysctl_t ))
        )
    )
)
(optional base_optional_73
    (typeattributeset cil_gen_require container_mountpoint_type)
    (typeattributeset cil_gen_require container_mountpoint_type)
    (typeattributeset container_mountpoint_type (sysctl_t ))
)
(optional base_optional_74
    (typeattributeset cil_gen_require init_mountpoint_type)
    (typeattributeset cil_gen_require init_mountpoint_type)
    (typeattributeset init_mountpoint_type (sysctl_irq_t ))
)
(optional base_optional_75
    (typeattributeset cil_gen_require container_mountpoint_type)
    (typeattributeset cil_gen_require container_mountpoint_type)
    (typeattributeset container_mountpoint_type (sysctl_irq_t ))
)
(optional base_optional_76
    (typeattributeset cil_gen_require init_mountpoint_type)
    (typeattributeset cil_gen_require init_mountpoint_type)
    (typeattributeset init_mountpoint_type (sysctl_fs_t ))
    (optional base_optional_77
        (typeattributeset cil_gen_require init_mountpoint_type)
        (typeattributeset cil_gen_require init_mountpoint_type)
        (typeattributeset init_mountpoint_type (sysctl_kernel_t ))
    )
)
(optional base_optional_78
    (typeattributeset cil_gen_require var_run_t)
    (typeattributeset cil_gen_require var_t)
    (typeattributeset cil_gen_require container_runtime_t)
    (typeattributeset cil_gen_require spc_t)
    (typeattributeset cil_gen_require container_file_t)
    (booleanif (container_spc_create_nfs_servers)
        (true
            (allow kernel_t container_file_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
            (allow kernel_t container_file_t (dir (ioctl read write getattr lock open add_name remove_name search)))
            (allow kernel_t container_file_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
            (allow kernel_t container_file_t (dir (ioctl read write getattr lock open add_name remove_name search)))
            (allow kernel_t container_file_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
            (allow kernel_t container_file_t (dir (ioctl read write getattr lock open add_name remove_name search)))
            (allow kernel_t container_file_t (chr_file (ioctl read write create getattr setattr lock append unlink link rename open)))
            (allow kernel_t container_file_t (dir (ioctl read write getattr lock open add_name remove_name search)))
            (allow kernel_t self (capability (mknod)))
            (allow kernel_t container_file_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
            (allow kernel_t container_file_t (dir (ioctl read write getattr lock open add_name remove_name search)))
            (allow kernel_t container_file_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
            (allow kernel_t container_file_t (dir (ioctl read write getattr lock open add_name remove_name search)))
            (allow kernel_t spc_t (tcp_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
            (allow kernel_t container_runtime_t (sock_file (read getattr open)))
            (allow kernel_t spc_t (unix_stream_socket (connectto)))
            (allow kernel_t container_runtime_t (sock_file (write getattr append open)))
            (allow kernel_t container_runtime_t (dir (getattr open search)))
            (allow kernel_t var_run_t (dir (getattr open search)))
            (allow kernel_t var_t (dir (getattr open search)))
            (allow kernel_t var_run_t (lnk_file (read getattr)))
        )
    )
)
(optional base_optional_79
    (typeattributeset cil_gen_require fsadm_t)
    (allow kernel_t fsadm_t (fd (use)))
)
(optional base_optional_80
    (typeattributeset cil_gen_require init_t)
    (allow kernel_t init_t (process (sigchld)))
)
(optional base_optional_81
    (typeattributeset cil_gen_require etc_t)
    (typeattributeset cil_gen_require usr_t)
    (typeattributeset cil_gen_require lib_t)
    (typeattributeset cil_gen_require ld_so_t)
    (typeattributeset cil_gen_require ld_so_cache_t)
    (typeattributeset cil_gen_require textrel_shlib_t)
    (allow kernel_t etc_t (dir (ioctl read getattr lock open search)))
    (allow kernel_t lib_t (dir (ioctl read getattr lock open search)))
    (allow kernel_t lib_t (dir (getattr open search)))
    (allow kernel_t lib_t (lnk_file (read getattr)))
    (allow kernel_t ld_so_t (lnk_file (read getattr)))
    (allow kernel_t lib_t (dir (getattr open search)))
    (allow kernel_t ld_so_t (file (ioctl read getattr map execute open)))
    (allow kernel_t ld_so_cache_t (file (ioctl read getattr lock map open)))
    (allow kernel_t usr_t (dir (getattr open search)))
    (allow kernel_t lib_t (dir (ioctl read getattr lock open search)))
    (allow kernel_t lib_t (dir (getattr open search)))
    (allow kernel_t lib_t (lnk_file (read getattr)))
    (allow kernel_t textrel_shlib_t (lnk_file (read getattr)))
    (allow kernel_t lib_t (dir (getattr open search)))
    (allow kernel_t lib_t (file (ioctl read getattr map execute open)))
    (allow kernel_t textrel_shlib_t (file (ioctl read getattr map execute open)))
    (allow kernel_t textrel_shlib_t (file (execmod)))
)
(optional base_optional_82
    (typeattributeset cil_gen_require console_device_t)
    (typeattributeset cil_gen_require device_t)
    (typeattributeset cil_gen_require var_run_t)
    (typeattributeset cil_gen_require var_t)
    (typeattributeset cil_gen_require var_log_t)
    (typeattributeset cil_gen_require syslogd_t)
    (typeattributeset cil_gen_require syslogd_runtime_t)
    (typeattributeset cil_gen_require devlog_t)
    (typeattributeset cil_gen_require init_runtime_t)
    (allow kernel_t var_t (dir (getattr open search)))
    (allow kernel_t var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
    (allow kernel_t var_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
    (allow kernel_t devlog_t (sock_file (write getattr append open)))
    (allow kernel_t var_run_t (lnk_file (read getattr)))
    (allow kernel_t var_t (dir (getattr open search)))
    (allow kernel_t var_run_t (dir (getattr open search)))
    (allow kernel_t init_runtime_t (dir (getattr open search)))
    (allow kernel_t syslogd_runtime_t (dir (getattr open search)))
    (allow kernel_t syslogd_t (unix_dgram_socket (sendto)))
    (allow kernel_t syslogd_t (unix_stream_socket (connectto)))
    (allow kernel_t self (unix_dgram_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
    (allow kernel_t self (unix_stream_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
    (allow kernel_t device_t (dir (getattr open search)))
    (allow kernel_t device_t (dir (ioctl read getattr lock open search)))
    (allow kernel_t device_t (dir (getattr open search)))
    (allow kernel_t device_t (lnk_file (read getattr)))
    (allow kernel_t console_device_t (chr_file (ioctl write getattr lock append open)))
    (dontaudit kernel_t console_device_t (chr_file (ioctl read getattr lock open)))
)
(optional base_optional_83
    (typeattributeset cil_gen_require mount_t)
    (allow kernel_t mount_t (fd (use)))
)
(optional base_optional_84
    (typeattributeset cil_gen_require defined_port_type)
    (typeattributeset defined_port_type (adb_port_t afs3_callback_port_t afs_bos_port_t afs_fs_port_t afs_ka_port_t afs_pt_port_t afs_vl_port_t agentx_port_t amanda_port_t amavisd_recv_port_t amavisd_send_port_t amqp_port_t aol_port_t apcupsd_port_t apertus_ldp_port_t aptcacher_port_t armtechdaemon_port_t asterisk_port_t audit_port_t auth_port_t bgp_port_t biff_port_t bitcoin_port_t boinc_client_port_t boinc_port_t certmaster_port_t chronyd_port_t clamd_port_t clockspeed_port_t cluster_port_t cma_port_t cobbler_port_t commplex_link_port_t commplex_main_port_t comsat_port_t condor_port_t couchdb_port_t cslistener_port_t ctdb_port_t cvs_port_t cyphesis_port_t daap_port_t dbskkd_port_t dcc_port_t dccm_port_t dhcpc_port_t dhcpd_port_t dict_port_t distccd_port_t dns_port_t dropbox_port_t efs_port_t embrace_dp_c_port_t epmap_port_t epmd_port_t fingerd_port_t ftp_data_port_t ftp_port_t gatekeeper_port_t gdomap_port_t gds_db_port_t git_port_t glance_registry_port_t glusterd_port_t gopher_port_t gpsd_port_t hadoop_datanode_port_t hadoop_namenode_port_t hddtemp_port_t howl_port_t hplip_port_t http_cache_port_t http_port_t i18n_input_port_t imaze_port_t inetd_child_port_t innd_port_t interwise_port_t ionixnetmon_port_t ipmi_port_t ipp_port_t ipsecnat_port_t ircd_port_t isakmp_port_t iscsi_port_t isns_port_t jabber_client_port_t jabber_interserver_port_t jboss_iiop_port_t kdeconnect_port_t kerberos_admin_port_t kerberos_master_port_t kerberos_port_t kismet_port_t kprop_port_t ktalkd_port_t kubernetes_port_t l2tp_port_t ldap_port_t lirc_port_t llmnr_port_t lmtp_port_t lrrd_port_t mail_port_t matahari_port_t memcache_port_t milter_port_t mmcc_port_t mon_port_t monit_port_t monopd_port_t mountd_port_t movaz_ssc_port_t mpd_port_t ms_streaming_port_t msgsrvr_port_t msnp_port_t mssql_port_t munin_port_t mxi_port_t mysqld_port_t mysqlmanagerd_port_t nessus_port_t netport_port_t netsupport_port_t nfs_port_t nfsrdma_port_t nmbd_port_t ntop_port_t ntp_port_t ntske_port_t oa_system_port_t ocsp_port_t openhpid_port_t openvpn_port_t oracledb_port_t pdps_port_t pegasus_http_port_t pegasus_https_port_t pgpkeyserver_port_t pingd_port_t pktcable_cops_port_t pop_port_t portmap_port_t postfix_policyd_port_t postgresql_port_t postgrey_port_t pptp_port_t prelude_port_t presence_port_t printer_port_t ptal_port_t pulseaudio_port_t puppet_port_t puppetclient_port_t pxe_port_t pyzor_port_t radacct_port_t radius_port_t radsec_port_t razor_port_t redis_port_t repository_port_t ricci_modcluster_port_t ricci_port_t rlogind_port_t rndc_port_t router_port_t rsh_port_t rsync_port_t rtorrent_port_t rtsp_port_t rwho_port_t salt_port_t sap_port_t servistaitsm_port_t sieve_port_t sip_port_t sixxsconfig_port_t smbd_port_t smtp_port_t snmp_port_t socks_port_t soundd_port_t spamd_port_t speech_port_t squid_port_t ssdp_port_t ssh_port_t stunnel_port_t svn_port_t svrloc_port_t swat_port_t syncthing_admin_port_t syncthing_discovery_port_t syncthing_port_t sype_transport_port_t syslog_tls_port_t syslogd_port_t tcs_port_t telnetd_port_t tftp_port_t tor_port_t traceroute_port_t transproxy_port_t trisoap_port_t trivnet1_port_t ups_port_t utcpserver_port_t uucpd_port_t varnishd_port_t virt_migration_port_t virt_port_t virtual_places_port_t vnc_port_t wccp_port_t websm_port_t whois_port_t winshadow_port_t wsdapi_port_t wsicopy_port_t xdmcp_port_t xen_port_t xfs_port_t xserver_port_t zabbix_agent_port_t zabbix_port_t zarafa_port_t zebra_port_t zented_port_t zookeeper_client_port_t zookeeper_election_port_t zookeeper_leader_port_t zope_port_t ))
    (typeattributeset cil_gen_require port_type)
    (typeattributeset port_type (adb_port_t afs3_callback_port_t afs_bos_port_t afs_fs_port_t afs_ka_port_t afs_pt_port_t afs_vl_port_t agentx_port_t amanda_port_t amavisd_recv_port_t amavisd_send_port_t amqp_port_t aol_port_t apcupsd_port_t apertus_ldp_port_t aptcacher_port_t armtechdaemon_port_t asterisk_port_t audit_port_t auth_port_t bgp_port_t biff_port_t bitcoin_port_t boinc_client_port_t boinc_port_t certmaster_port_t chronyd_port_t clamd_port_t clockspeed_port_t cluster_port_t cma_port_t cobbler_port_t commplex_link_port_t commplex_main_port_t comsat_port_t condor_port_t couchdb_port_t cslistener_port_t ctdb_port_t cvs_port_t cyphesis_port_t daap_port_t dbskkd_port_t dcc_port_t dccm_port_t dhcpc_port_t dhcpd_port_t dict_port_t distccd_port_t dns_port_t dropbox_port_t efs_port_t embrace_dp_c_port_t epmap_port_t epmd_port_t fingerd_port_t ftp_data_port_t ftp_port_t gatekeeper_port_t gdomap_port_t gds_db_port_t git_port_t glance_registry_port_t glusterd_port_t gopher_port_t gpsd_port_t hadoop_datanode_port_t hadoop_namenode_port_t hddtemp_port_t hi_reserved_port_t howl_port_t hplip_port_t http_cache_port_t http_port_t i18n_input_port_t imaze_port_t inetd_child_port_t innd_port_t interwise_port_t ionixnetmon_port_t ipmi_port_t ipp_port_t ipsecnat_port_t ircd_port_t isakmp_port_t iscsi_port_t isns_port_t jabber_client_port_t jabber_interserver_port_t jboss_iiop_port_t kdeconnect_port_t kerberos_admin_port_t kerberos_master_port_t kerberos_port_t kismet_port_t kprop_port_t ktalkd_port_t kubernetes_port_t l2tp_port_t ldap_port_t lirc_port_t llmnr_port_t lmtp_port_t lrrd_port_t mail_port_t matahari_port_t memcache_port_t milter_port_t mmcc_port_t mon_port_t monit_port_t monopd_port_t mountd_port_t movaz_ssc_port_t mpd_port_t ms_streaming_port_t msgsrvr_port_t msnp_port_t mssql_port_t munin_port_t mxi_port_t mysqld_port_t mysqlmanagerd_port_t nessus_port_t netport_port_t netsupport_port_t nfs_port_t nfsrdma_port_t nmbd_port_t ntop_port_t ntp_port_t ntske_port_t oa_system_port_t ocsp_port_t openhpid_port_t openvpn_port_t oracledb_port_t pdps_port_t pegasus_http_port_t pegasus_https_port_t pgpkeyserver_port_t pingd_port_t pktcable_cops_port_t pop_port_t port_t portmap_port_t postfix_policyd_port_t postgresql_port_t postgrey_port_t pptp_port_t prelude_port_t presence_port_t printer_port_t ptal_port_t pulseaudio_port_t puppet_port_t puppetclient_port_t pxe_port_t pyzor_port_t radacct_port_t radius_port_t radsec_port_t razor_port_t redis_port_t repository_port_t reserved_port_t ricci_modcluster_port_t ricci_port_t rlogind_port_t rndc_port_t router_port_t rsh_port_t rsync_port_t rtorrent_port_t rtsp_port_t rwho_port_t salt_port_t sap_port_t servistaitsm_port_t sieve_port_t sip_port_t sixxsconfig_port_t smbd_port_t smtp_port_t snmp_port_t socks_port_t soundd_port_t spamd_port_t speech_port_t squid_port_t ssdp_port_t ssh_port_t stunnel_port_t svn_port_t svrloc_port_t swat_port_t syncthing_admin_port_t syncthing_discovery_port_t syncthing_port_t sype_transport_port_t syslog_tls_port_t syslogd_port_t tcs_port_t telnetd_port_t tftp_port_t tor_port_t traceroute_port_t transproxy_port_t trisoap_port_t trivnet1_port_t unreserved_port_t ups_port_t utcpserver_port_t uucpd_port_t varnishd_port_t virt_migration_port_t virt_port_t virtual_places_port_t vnc_port_t wccp_port_t websm_port_t whois_port_t winshadow_port_t wsdapi_port_t wsicopy_port_t xdmcp_port_t xen_port_t xfs_port_t xserver_port_t zabbix_agent_port_t zabbix_port_t zarafa_port_t zebra_port_t zented_port_t zookeeper_client_port_t zookeeper_election_port_t zookeeper_leader_port_t zope_port_t ))
    (typeattributeset cil_gen_require reserved_port_type)
    (typeattributeset reserved_port_type (agentx_port_t apertus_ldp_port_t audit_port_t auth_port_t bgp_port_t chronyd_port_t comsat_port_t dhcpc_port_t dhcpd_port_t dns_port_t efs_port_t epmap_port_t fingerd_port_t ftp_data_port_t ftp_port_t gdomap_port_t gopher_port_t hi_reserved_port_t http_port_t inetd_child_port_t innd_port_t ipmi_port_t ipp_port_t isakmp_port_t kerberos_admin_port_t kerberos_port_t kprop_port_t ktalkd_port_t ldap_port_t lmtp_port_t nmbd_port_t ntp_port_t pop_port_t portmap_port_t printer_port_t reserved_port_t rlogind_port_t rndc_port_t router_port_t rsh_port_t rsync_port_t rtsp_port_t rwho_port_t smbd_port_t smtp_port_t snmp_port_t spamd_port_t ssh_port_t svrloc_port_t swat_port_t syslogd_port_t telnetd_port_t tftp_port_t uucpd_port_t whois_port_t xdmcp_port_t zarafa_port_t ))
    (typeattributeset cil_gen_require client_packet_t)
    (typeattributeset cil_gen_require etc_t)
    (typeattributeset cil_gen_require netif_t)
    (typeattributeset cil_gen_require netlabel_peer_t)
    (typeattributeset cil_gen_require node_t)
    (typeattributeset cil_gen_require port_t)
    (typeattributeset cil_gen_require portmap_client_packet_t)
    (typeattributeset cil_gen_require portmap_port_t)
    (typeattributeset cil_gen_require reserved_port_t)
    (typeattributeset cil_gen_require server_packet_t)
    (typeattributeset cil_gen_require var_run_t)
    (typeattributeset cil_gen_require var_t)
    (typeattributeset cil_gen_require var_yp_t)
    (typeattributeset cil_gen_require net_conf_t)
    (booleanif (allow_ypbind)
        (true
            (allow kernel_t net_conf_t (lnk_file (read getattr)))
            (allow kernel_t net_conf_t (file (ioctl read getattr lock open)))
            (allow kernel_t net_conf_t (dir (ioctl read getattr lock open search)))
            (allow kernel_t var_run_t (dir (getattr open search)))
            (allow kernel_t var_t (dir (getattr open search)))
            (allow kernel_t var_run_t (lnk_file (read getattr)))
            (allow kernel_t etc_t (dir (getattr open search)))
            (allow kernel_t server_packet_t (packet (recv)))
            (allow kernel_t server_packet_t (packet (send)))
            (allow kernel_t client_packet_t (packet (recv)))
            (allow kernel_t client_packet_t (packet (send)))
            (allow kernel_t portmap_client_packet_t (packet (recv)))
            (allow kernel_t portmap_client_packet_t (packet (send)))
            (dontaudit kernel_t port_type (tcp_socket (name_connect)))
            (allow kernel_t port_t (tcp_socket (name_connect)))
            (allow kernel_t reserved_port_t (tcp_socket (name_connect)))
            (allow kernel_t portmap_port_t (tcp_socket (name_connect)))
            (dontaudit kernel_t port_type (udp_socket (name_bind)))
            (dontaudit kernel_t port_type (tcp_socket (name_bind)))
            (dontaudit kernel_t reserved_port_type (udp_socket (name_bind)))
            (dontaudit kernel_t reserved_port_type (tcp_socket (name_bind)))
            (dontaudit kernel_t defined_port_type (udp_socket (name_bind)))
            (allow kernel_t port_t (udp_socket (name_bind)))
            (dontaudit kernel_t defined_port_type (tcp_socket (name_bind)))
            (allow kernel_t port_t (tcp_socket (name_bind)))
            (allow kernel_t node_t (udp_socket (node_bind)))
            (allow kernel_t node_t (tcp_socket (node_bind)))
            (allow kernel_t node_t (node (recvfrom)))
            (allow kernel_t node_t (node (sendto)))
            (allow kernel_t node_t (node (recvfrom sendto)))
            (allow kernel_t netif_t (netif (ingress)))
            (allow kernel_t netif_t (netif (egress)))
            (allow kernel_t netif_t (netif (ingress egress)))
            (allow kernel_t netlabel_peer_t (tcp_socket (recvfrom)))
            (allow kernel_t netlabel_peer_t (udp_socket (recvfrom)))
            (allow kernel_t netlabel_peer_t (rawip_socket (recvfrom)))
            (allow kernel_t netlabel_peer_t (peer (recv)))
            (allow kernel_t var_yp_t (lnk_file (read getattr)))
            (allow kernel_t var_yp_t (file (ioctl read getattr lock open)))
            (allow kernel_t var_yp_t (dir (ioctl read getattr lock open search)))
            (allow kernel_t self (udp_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
            (allow kernel_t self (tcp_socket (ioctl read write create getattr setattr append bind connect listen accept getopt setopt shutdown)))
            (allow kernel_t self (capability (net_bind_service)))
        )
    )
)
(optional base_optional_85
    (typeattributeset cil_gen_require device_t)
    (typeattributeset cil_gen_require dri_device_t)
    (typeattributeset cil_gen_require ptmx_t)
    (typeattributeset cil_gen_require tty_device_t)
    (typeattributeset cil_gen_require var_lib_t)
    (typeattributeset cil_gen_require var_run_t)
    (typeattributeset cil_gen_require var_spool_t)
    (typeattributeset cil_gen_require var_t)
    (typeattributeset cil_gen_require plymouthd_runtime_t)
    (typeattributeset cil_gen_require plymouthd_spool_t)
    (typeattributeset cil_gen_require plymouthd_var_lib_t)
    (allow kernel_t dri_device_t (chr_file (ioctl)))
    (allow kernel_t var_run_t (lnk_file (read getattr)))
    (allow kernel_t var_t (dir (getattr open search)))
    (allow kernel_t var_run_t (dir (getattr open search)))
    (allow kernel_t plymouthd_runtime_t (dir (ioctl write getattr lock open remove_name search)))
    (allow kernel_t plymouthd_runtime_t (file (getattr unlink)))
    (allow kernel_t var_run_t (lnk_file (read getattr)))
    (allow kernel_t var_t (dir (getattr open search)))
    (allow kernel_t var_run_t (dir (getattr open search)))
    (allow kernel_t plymouthd_runtime_t (dir (getattr open search)))
    (allow kernel_t plymouthd_runtime_t (file (ioctl read getattr lock open)))
    (allow kernel_t var_t (dir (getattr open search)))
    (allow kernel_t var_spool_t (dir (getattr open search)))
    (allow kernel_t plymouthd_spool_t (dir (getattr open search)))
    (allow kernel_t plymouthd_spool_t (file (ioctl read getattr lock open)))
    (allow kernel_t var_t (dir (getattr open search)))
    (allow kernel_t var_lib_t (dir (getattr open search)))
    (allow kernel_t plymouthd_var_lib_t (dir (getattr open search)))
    (allow kernel_t plymouthd_var_lib_t (file (ioctl read write getattr lock append open)))
    (allow kernel_t device_t (dir (getattr open search)))
    (allow kernel_t device_t (dir (ioctl read getattr lock open search)))
    (allow kernel_t device_t (dir (getattr open search)))
    (allow kernel_t device_t (lnk_file (read getattr)))
    (allow kernel_t ptmx_t (chr_file (ioctl read write getattr lock append open)))
    (allow kernel_t device_t (dir (getattr open search)))
    (allow kernel_t device_t (dir (ioctl read getattr lock open search)))
    (allow kernel_t device_t (dir (getattr open search)))
    (allow kernel_t device_t (lnk_file (read getattr)))
    (allow kernel_t tty_device_t (chr_file (ioctl read write getattr lock append open)))
)
(optional base_optional_86
    (typeattributeset cil_gen_require non_auth_file_type)
    (typeattributeset non_auth_file_type (anon_inodefs_t autofs_t bin_t binfmt_misc_fs_t boot_t bpf_t capifs_t cardmgr_dev_t cgroup_t chroot_exec_t cifs_t configfs_t cpu_online_t debugfs_t default_t device_t devpts_t dosfs_t ecryptfs_t efivarfs_t etc_runtime_t etc_t fusefs_t home_root_t hugetlbfs_t iso9660_t lost_found_t memory_pressure_t mnt_t modules_object_t nfs_t no_access_t poly_t proc_t proc_xen_t pstore_t ramfs_t readable_t removable_t root_t rpc_pipefs_t security_t shell_exec_t spufs_t src_t sysctl_fs_t sysctl_t sysfs_t system_map_t sysv_t tmp_t tmpfs_t usbfs_t usr_t var_lib_t var_lock_t var_run_t var_spool_t var_t virtiofs_t vmblock_t vxfs_t xenfs_t ))
    (typeattributeset cil_gen_require noxattrfs)
    (typeattributeset noxattrfs (autofs_t cifs_t dosfs_t ecryptfs_t fusefs_t iso9660_t mvfs_t nfs_t removable_t sysv_t virtiofs_t vmblock_t vxfs_t xenfs_t ))
    (typeattributeset cil_gen_require etc_t)
    (typeattributeset cil_gen_require fs_t)
    (typeattributeset cil_gen_require netif_t)
    (typeattributeset cil_gen_require node_t)
    (typeattributeset cil_gen_require portmap_client_packet_t)
    (typeattributeset cil_gen_require server_packet_t)
    (typeattributeset cil_gen_require var_lib_t)
    (typeattributeset cil_gen_require var_run_t)
    (typeattributeset cil_gen_require var_t)
    (typeattributeset cil_gen_require net_conf_t)
    (typeattributeset cil_gen_require shadow_t)
    (typeattributeset cil_gen_require nfsd_ro_t)
    (typeattributeset cil_gen_require nfsd_rw_t)
    (typeattributeset cil_gen_require var_lib_nfs_t)
    (typeattributeset cil_gen_require nfsd_t)
    (allow kernel_t self (tcp_socket (ioctl read write create getattr setattr append bind connect listen accept getopt setopt shutdown)))
    (allow kernel_t self (udp_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
    (allow kernel_t netif_t (netif (egress)))
    (allow kernel_t netif_t (netif (ingress)))
    (allow kernel_t node_t (node (sendto)))
    (allow kernel_t node_t (node (recvfrom)))
    (allow kernel_t node_t (udp_socket (node_bind)))
    (allow kernel_t portmap_client_packet_t (packet (send)))
    (allow kernel_t portmap_client_packet_t (packet (recv)))
    (allow kernel_t server_packet_t (packet (send)))
    (allow kernel_t server_packet_t (packet (recv)))
    (allow kernel_t fs_t (filesystem (getattr)))
    (dontaudit kernel_t shadow_t (file (getattr)))
    (allow kernel_t etc_t (dir (getattr open search)))
    (allow kernel_t var_run_t (lnk_file (read getattr)))
    (allow kernel_t var_t (dir (getattr open search)))
    (allow kernel_t var_run_t (dir (getattr open search)))
    (allow kernel_t net_conf_t (dir (ioctl read getattr lock open search)))
    (allow kernel_t net_conf_t (file (ioctl read getattr lock open)))
    (allow kernel_t net_conf_t (lnk_file (read getattr)))
    (allow kernel_t nfsd_ro_t (dir (ioctl read write getattr lock open add_name remove_name search)))
    (allow kernel_t nfsd_ro_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
    (allow kernel_t nfsd_ro_t (dir (ioctl read write getattr lock open add_name remove_name search)))
    (allow kernel_t nfsd_ro_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
    (allow kernel_t nfsd_ro_t (dir (ioctl read write getattr lock open add_name remove_name search)))
    (allow kernel_t nfsd_ro_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
    (allow kernel_t nfsd_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
    (allow kernel_t nfsd_rw_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
    (allow kernel_t nfsd_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
    (allow kernel_t nfsd_rw_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
    (allow kernel_t nfsd_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
    (allow kernel_t nfsd_rw_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
    (allow kernel_t var_t (dir (getattr open search)))
    (allow kernel_t var_lib_t (dir (getattr open search)))
    (allow kernel_t var_lib_nfs_t (dir (search)))
    (allow kernel_t nfsd_t (fd (use)))
    (allow kernel_t nfsd_t (tcp_socket (ioctl read write getattr setattr append bind connect getopt setopt shutdown)))
    (allow kernel_t nfsd_t (udp_socket (ioctl read write getattr setattr append bind connect getopt setopt shutdown)))
    (booleanif (nfs_export_all_rw)
        (true
            (allow kernel_t non_auth_file_type (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
            (allow kernel_t non_auth_file_type (dir (ioctl read write getattr lock open add_name remove_name search)))
            (allow kernel_t non_auth_file_type (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
            (allow kernel_t non_auth_file_type (dir (ioctl read write getattr lock open add_name remove_name search)))
            (allow kernel_t non_auth_file_type (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
            (allow kernel_t non_auth_file_type (dir (ioctl read write getattr lock open add_name remove_name search)))
            (allow kernel_t non_auth_file_type (file (ioctl read write create getattr setattr lock append unlink link rename open)))
            (allow kernel_t non_auth_file_type (dir (ioctl read write getattr lock open add_name remove_name search)))
            (allow kernel_t non_auth_file_type (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
            (allow kernel_t non_auth_file_type (dir (ioctl read write getattr lock open add_name remove_name search)))
            (allow kernel_t noxattrfs (lnk_file (read getattr)))
            (allow kernel_t noxattrfs (dir (getattr open search)))
            (allow kernel_t noxattrfs (dir (ioctl read getattr lock open search)))
            (allow kernel_t noxattrfs (file (ioctl read getattr lock open)))
            (allow kernel_t noxattrfs (dir (getattr open search)))
            (allow kernel_t noxattrfs (dir (ioctl read getattr lock open search)))
            (allow kernel_t noxattrfs (dir (ioctl read getattr lock open search)))
            (allow kernel_t noxattrfs (filesystem (getattr)))
        )
    )
    (booleanif (nfs_export_all_ro)
        (true
            (allow kernel_t non_auth_file_type (lnk_file (read getattr)))
            (allow kernel_t non_auth_file_type (dir (getattr open search)))
            (allow kernel_t non_auth_file_type (file (ioctl read getattr lock open)))
            (allow kernel_t non_auth_file_type (dir (getattr open search)))
            (allow kernel_t non_auth_file_type (dir (ioctl read getattr lock open search)))
            (allow kernel_t noxattrfs (lnk_file (read getattr)))
            (allow kernel_t noxattrfs (dir (getattr open search)))
            (allow kernel_t noxattrfs (dir (ioctl read getattr lock open search)))
            (allow kernel_t noxattrfs (file (ioctl read getattr lock open)))
            (allow kernel_t noxattrfs (dir (getattr open search)))
            (allow kernel_t noxattrfs (dir (ioctl read getattr lock open search)))
            (allow kernel_t noxattrfs (dir (ioctl read getattr lock open search)))
            (allow kernel_t noxattrfs (filesystem (getattr)))
        )
    )
    (optional base_optional_87
        (typeattributeset cil_gen_require var_run_t)
        (typeattributeset cil_gen_require var_t)
        (typeattributeset cil_gen_require gssproxy_t)
        (typeattributeset cil_gen_require gssproxy_run_t)
        (typeattributeset cil_gen_require gssproxy_var_lib_t)
        (allow kernel_t var_run_t (lnk_file (read getattr)))
        (allow kernel_t var_t (dir (getattr open search)))
        (allow kernel_t var_run_t (dir (getattr open search)))
        (allow kernel_t gssproxy_run_t (dir (getattr open search)))
        (allow kernel_t gssproxy_run_t (sock_file (write getattr append open)))
        (allow kernel_t gssproxy_t (unix_stream_socket (connectto)))
        (allow kernel_t gssproxy_var_lib_t (dir (getattr open search)))
        (allow kernel_t gssproxy_var_lib_t (sock_file (write getattr append open)))
        (allow kernel_t gssproxy_t (unix_stream_socket (connectto)))
    )
)
(optional base_optional_88
    (typeattributeset cil_gen_require bin_t)
    (typeattributeset cil_gen_require etc_t)
    (typeattributeset cil_gen_require usr_t)
    (typeattributeset cil_gen_require selinux_config_t)
    (typeattributeset cil_gen_require policy_config_t)
    (typeattributeset cil_gen_require setfiles_t)
    (typeattributeset cil_gen_require setfiles_exec_t)
    (allow kernel_t etc_t (dir (getattr open search)))
    (allow kernel_t selinux_config_t (dir (ioctl read getattr lock open search)))
    (allow kernel_t selinux_config_t (dir (getattr open search)))
    (allow kernel_t selinux_config_t (file (ioctl read getattr lock open)))
    (allow kernel_t selinux_config_t (dir (getattr open search)))
    (allow kernel_t selinux_config_t (lnk_file (read getattr)))
    (allow kernel_t etc_t (dir (getattr open search)))
    (allow kernel_t selinux_config_t (dir (getattr open search)))
    (allow kernel_t policy_config_t (dir (getattr open search)))
    (allow kernel_t policy_config_t (file (ioctl read getattr lock open)))
    (allow kernel_t policy_config_t (file (map)))
    (allow kernel_t policy_config_t (dir (ioctl read getattr lock open search)))
    (allow kernel_t usr_t (dir (getattr open search)))
    (allow kernel_t bin_t (dir (getattr open search)))
    (allow kernel_t bin_t (lnk_file (read getattr)))
    (allow kernel_t usr_t (dir (getattr open search)))
    (allow kernel_t setfiles_exec_t (file (ioctl read getattr map execute open)))
    (allow kernel_t setfiles_t (process (transition)))
    (dontaudit kernel_t setfiles_t (process (noatsecure siginh rlimitinh)))
    (typetransition kernel_t setfiles_exec_t process setfiles_t)
    (allow setfiles_t kernel_t (fd (use)))
    (allow setfiles_t kernel_t (fifo_file (ioctl read write getattr lock append)))
    (allow setfiles_t kernel_t (process (sigchld)))
)
(optional base_optional_89
    (typeattributeset cil_gen_require fixed_disk_device_t)
    (dontaudit kernel_t fixed_disk_device_t (blk_file (ioctl read getattr lock open)))
    (dontaudit kernel_t fixed_disk_device_t (chr_file (ioctl read getattr lock open)))
)
(optional base_optional_90
    (typeattributeset cil_gen_require can_change_object_identity)
    (typeattributeset cil_gen_require can_load_kernmodule)
    (typeattributeset can_load_kernmodule (kernel_t ))
    (typeattributeset cil_gen_require corenet_unconfined_type)
    (typeattributeset cil_gen_require devices_unconfined_type)
    (typeattributeset cil_gen_require domain)
    (typeattributeset domain (kernel_t ))
    (typeattributeset cil_gen_require files_unconfined_type)
    (typeattributeset cil_gen_require filesystem_unconfined_type)
    (typeattributeset cil_gen_require kern_unconfined)
    (typeattributeset cil_gen_require process_uncond_exempt)
    (typeattributeset cil_gen_require selinux_unconfined_type)
    (typeattributeset cil_gen_require set_curr_context)
    (typeattributeset cil_gen_require unconfined_domain_type)
    (typeattributeset cil_gen_require etc_t)
    (typeattributeset cil_gen_require unconfined_t)
    (typeattributeset cil_gen_require corenet_unconfined_type)
    (typeattributeset corenet_unconfined_type (kernel_t ))
    (typeattributeset cil_gen_require process_uncond_exempt)
    (typeattributeset process_uncond_exempt (kernel_t ))
    (typeattributeset cil_gen_require unconfined_domain_type)
    (typeattributeset unconfined_domain_type (kernel_t ))
    (typeattributeset cil_gen_require can_load_kernmodule)
    (typeattributeset can_load_kernmodule (kernel_t ))
    (typeattributeset cil_gen_require filesystem_unconfined_type)
    (typeattributeset filesystem_unconfined_type (kernel_t ))
    (typeattributeset cil_gen_require set_curr_context)
    (typeattributeset set_curr_context (kernel_t ))
    (typeattributeset cil_gen_require devices_unconfined_type)
    (typeattributeset devices_unconfined_type (kernel_t ))
    (typeattributeset cil_gen_require files_unconfined_type)
    (typeattributeset files_unconfined_type (kernel_t ))
    (typeattributeset cil_gen_require kern_unconfined)
    (typeattributeset kern_unconfined (kernel_t ))
    (typeattributeset cil_gen_require can_change_object_identity)
    (typeattributeset can_change_object_identity (kernel_t ))
    (typeattributeset cil_gen_require selinux_unconfined_type)
    (typeattributeset selinux_unconfined_type (kernel_t ))
    (allow kernel_t self (capability (chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap)))
    (allow kernel_t self (cap_userns (chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap)))
    (allow kernel_t self (capability2 (syslog wake_alarm perfmon bpf)))
    (allow kernel_t self (cap2_userns (syslog wake_alarm perfmon bpf)))
    (allow kernel_t self (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
    (allow kernel_t self (cap_userns (chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write setfcap)))
    (allow kernel_t self (cap2_userns (mac_override mac_admin syslog wake_alarm block_suspend audit_read perfmon bpf)))
    (allow kernel_t self (process (transition)))
    (allow kernel_t self (file (ioctl read write getattr lock append open)))
    (allow kernel_t self (anon_inode (read write create map)))
    (allow kernel_t self (nscd (getpwd getgrp gethost getstat admin shmempwd shmemgrp shmemhost getserv shmemserv)))
    (allow kernel_t self (dbus (acquire_svc send_msg)))
    (allow kernel_t self (passwd (passwd chfn chsh rootok crontab)))
    (allow kernel_t self (association (sendto recvfrom setcontext polmatch)))
    (dontaudit kernel_t domain (dir (ioctl read getattr lock open search)))
    (dontaudit kernel_t domain (lnk_file (read getattr)))
    (dontaudit kernel_t domain (file (ioctl read getattr lock open)))
    (dontaudit kernel_t domain (sock_file (read getattr open)))
    (dontaudit kernel_t domain (fifo_file (ioctl read getattr lock open)))
    (dontaudit kernel_t domain (process (ptrace)))
    (allow kernel_t etc_t (service (status)))
    (allow kernel_t etc_t (service (start)))
    (allow kernel_t etc_t (service (stop)))
    (booleanif (allow_execstack)
        (true
            (allow kernel_t self (process (execmem execstack)))
        )
    )
    (booleanif (allow_execmem)
        (true
            (allow kernel_t self (process (execmem)))
        )
    )
    (booleanif (allow_execheap)
        (true
            (allow kernel_t self (process (execheap)))
        )
    )
    (optional base_optional_91
        (typeattributeset cil_gen_require can_read_shadow_passwords)
        (typeattributeset cil_gen_require can_write_shadow_passwords)
        (typeattributeset cil_gen_require can_relabelto_shadow_passwords)
        (typeattributeset cil_gen_require can_write_shadow_passwords)
        (typeattributeset can_write_shadow_passwords (kernel_t ))
        (typeattributeset cil_gen_require can_read_shadow_passwords)
        (typeattributeset can_read_shadow_passwords (kernel_t ))
        (typeattributeset cil_gen_require can_relabelto_shadow_passwords)
        (typeattributeset can_relabelto_shadow_passwords (kernel_t ))
    )
    (optional base_optional_92
        (typeattributeset cil_gen_require dbusd_unconfined)
        (typeattributeset cil_gen_require dbusd_unconfined)
        (typeattributeset dbusd_unconfined (kernel_t ))
    )
    (optional base_optional_93
        (typeattributeset cil_gen_require ipsec_spd_t)
        (allow kernel_t ipsec_spd_t (association (setcontext)))
        (allow kernel_t ipsec_spd_t (association (polmatch)))
        (allow kernel_t self (association (sendto)))
    )
    (optional base_optional_94
        (typeattributeset cil_gen_require nscd_t)
        (allow kernel_t nscd_t (nscd (getpwd getgrp gethost getstat admin shmempwd shmemgrp shmemhost getserv shmemserv)))
    )
    (optional base_optional_95
        (typeattributeset cil_gen_require sepgsql_unconfined_type)
        (typeattributeset cil_gen_require sepgsql_unconfined_type)
        (typeattributeset sepgsql_unconfined_type (kernel_t ))
    )
    (optional base_optional_96
        (typeattributeset cil_gen_require etc_t)
        (typeattributeset cil_gen_require selinux_config_t)
        (typeattributeset cil_gen_require policy_config_t)
        (typeattributeset cil_gen_require can_relabelto_binary_policy)
        (typeattributeset cil_gen_require can_relabelto_binary_policy)
        (typeattributeset can_relabelto_binary_policy (kernel_t ))
        (allow kernel_t etc_t (dir (getattr open search)))
        (allow kernel_t selinux_config_t (dir (getattr open search)))
        (allow kernel_t policy_config_t (dir (ioctl write getattr lock open add_name search)))
        (allow kernel_t policy_config_t (file (create getattr open)))
        (allow kernel_t policy_config_t (dir (getattr open search)))
        (allow kernel_t policy_config_t (file (ioctl write getattr lock append open)))
        (allow kernel_t policy_config_t (file (relabelto)))
    )
    (optional base_optional_97
        (typeattributeset cil_gen_require storage_unconfined_type)
        (typeattributeset cil_gen_require storage_unconfined_type)
        (typeattributeset storage_unconfined_type (kernel_t ))
    )
    (optional base_optional_98
        (typeattributeset cil_gen_require x_domain)
        (typeattributeset cil_gen_require xserver_unconfined_type)
        (typeattributeset cil_gen_require x_domain)
        (typeattributeset x_domain (kernel_t ))
        (typeattributeset cil_gen_require xserver_unconfined_type)
        (typeattributeset xserver_unconfined_type (kernel_t ))
    )
)
(optional base_optional_99
    (typeattributeset cil_gen_require etc_t)
    (typeattributeset cil_gen_require zfs_config_t)
    (typeattributeset cil_gen_require zfs_zpool_cache_t)
    (allow kernel_t zfs_config_t (dir (ioctl read write getattr lock open add_name remove_name search)))
    (allow kernel_t etc_t (dir (getattr open search)))
    (allow kernel_t zfs_config_t (dir (getattr open search)))
    (allow kernel_t zfs_config_t (dir (getattr open search)))
    (allow kernel_t zfs_zpool_cache_t (file (ioctl read write getattr lock append open)))
    (typetransition kernel_t zfs_config_t file "zpool.cache" zfs_zpool_cache_t)
)
(optional base_optional_100
    (typeattributeset cil_gen_require init_t)
    (allow unlabeled_t init_t (process (sigchld)))
)
(optional base_optional_101
    (typeattributeset cil_gen_require sysadm_t)
    (allow kernel_t sysadm_t (fd (use)))
)
(optional base_optional_102
    (typeattributeset cil_gen_require mount_t)
    (allow kernel_t mount_t (fifo_file (ioctl read write getattr lock append open)))
)
(optional base_optional_103
    (typeattributeset cil_gen_require init_mountpoint_type)
    (typeattributeset cil_gen_require init_mountpoint_type)
    (typeattributeset init_mountpoint_type (security_t ))
    (optional base_optional_104
        (typeattributeset cil_gen_require init_mountpoint_type)
        (typeattributeset cil_gen_require init_mountpoint_type)
        (typeattributeset init_mountpoint_type (devpts_t ))
    )
)
(optional base_optional_105
    (typeattributeset cil_gen_require container_mountpoint_type)
    (typeattributeset cil_gen_require container_mountpoint_type)
    (typeattributeset container_mountpoint_type (devtty_t ))
)
(selinuxuser root root (systemlow systemlow))
(selinuxuserdefault user_u (systemlow systemlow))
(userprefix user_u user)
(userprefix staff_u staff)
(userprefix sysadm_u sysadm)
(userprefix root sysadm)
(filecon "/.*" any (system_u object_r default_t (systemlow systemlow)))
(filecon "/sys(/.*)?" any (system_u object_r sysfs_t (systemlow systemlow)))
(filecon "/mnt(/[^/]*)" symlink (system_u object_r mnt_t (systemlow systemlow)))
(filecon "/mnt(/[^/]*)?" dir (system_u object_r mnt_t (systemlow systemlow)))
(filecon "/dev/.*" any (system_u object_r device_t (systemlow systemlow)))
(filecon "/etc/.*" any (system_u object_r etc_t (systemlow systemlow)))
(filecon "/opt/.*" any (system_u object_r usr_t (systemlow systemlow)))
(filecon "/run/.*" any ())
(filecon "/srv/.*" any (system_u object_r var_t (systemlow systemlow)))
(filecon "/tmp/.*" any ())
(filecon "/usr/.*" any (system_u object_r usr_t (systemlow systemlow)))
(filecon "/var/.*" any (system_u object_r var_t (systemlow systemlow)))
(filecon "/dev/[0-9].*" char (system_u object_r usb_device_t (systemlow systemlow)))
(filecon "/mnt/[^/]*/.*" any ())
(filecon "/dev/.*mouse.*" char (system_u object_r mouse_device_t (systemlow systemlow)))
(filecon "/dev/.*tty[^/]*" char (system_u object_r tty_device_t (systemlow systemlow)))
(filecon "/dev/(misc/)?psaux" char (system_u object_r mouse_device_t (systemlow systemlow)))
(filecon "/opt/(.*/)?bin(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/(.*/)?Bin(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/(.*/)?bin(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/dev/(misc/)?agpgart" char (system_u object_r agp_device_t (systemlow systemlow)))
(filecon "/opt/(.*/)?sbin(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/(.*/)?sbin(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/dev/(misc/)?rtc[0-9]*" char (system_u object_r clock_device_t (systemlow systemlow)))
(filecon "/opt/(.*/)?libexec(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/dev/[pt]ty[a-ep-z][0-9a-f]" char (system_u object_r bsdpty_device_t (systemlow systemlow)))
(filecon "/opt/(.*/)?var/lib(64)?(/.*)?" any (system_u object_r var_lib_t (systemlow systemlow)))
(filecon "/usr/[^/-]+-[^/-]+-linux-[^/-]+/gcc-bin/.*(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/[^/-]+-[^/-]+-linux-[^/-]+/binutils-bin(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/[^/-]+-[^/-]+-linux-[^/-]+/[^/]+/gcc-bin/.*(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/[^/-]+-[^/-]+-linux-[^/-]+/[^/]+/binutils-bin(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/boot/.*" any (system_u object_r boot_t (systemlow systemlow)))
(filecon "/emul/.*" any (system_u object_r usr_t (systemlow systemlow)))
(filecon "/proc/.*" any ())
(filecon "/media(/[^/]*)?" symlink (system_u object_r mnt_t (systemlow systemlow)))
(filecon "/media(/[^/]*)?" dir (system_u object_r mnt_t (systemlow systemlow)))
(filecon "/dev/s(ou)?nd/.*" char (system_u object_r sound_device_t (systemlow systemlow)))
(filecon "/dev/fw.*" char (system_u object_r usb_device_t (systemlow systemlow)))
(filecon "/dev/js.*" char (system_u object_r mouse_device_t (systemlow systemlow)))
(filecon "/dev/lp.*" char (system_u object_r printer_device_t (systemlow systemlow)))
(filecon "/dev/cu.*" char (system_u object_r tty_device_t (systemlow systemlow)))
(filecon "/dev/ub[a-c]" char (system_u object_r usb_device_t (systemlow systemlow)))
(filecon "/dev/fb[0-9]*" char (system_u object_r framebuf_device_t (systemlow systemlow)))
(filecon "/media/[^/]*/.*" any ())
(filecon "/cgroup/.*" any ())
(filecon "/dev/tap.*" char (system_u object_r tun_tap_device_t (systemlow systemlow)))
(filecon "/dev/cec.*" char (system_u object_r v4l_device_t (systemlow systemlow)))
(filecon "/dev/dsp.*" char (system_u object_r sound_device_t (systemlow systemlow)))
(filecon "/dev/lik.*" char (system_u object_r event_device_t (systemlow systemlow)))
(filecon "/dev/msr.*" char (system_u object_r cpu_device_t (systemlow systemlow)))
(filecon "/dev/noz.*" char (system_u object_r modem_device_t (systemlow systemlow)))
(filecon "/dev/par.*" char (system_u object_r printer_device_t (systemlow systemlow)))
(filecon "/dev/pps.*" char (system_u object_r clock_device_t (systemlow systemlow)))
(filecon "/dev/usb.+" char (system_u object_r usb_device_t (systemlow systemlow)))
(filecon "/dev/vbi.*" char (system_u object_r v4l_device_t (systemlow systemlow)))
(filecon "/dev/vtx.*" char (system_u object_r v4l_device_t (systemlow systemlow)))
(filecon "/dev/cmx.*" char (system_u object_r smartcard_device_t (systemlow systemlow)))
(filecon "/dev/cpu.*" char (system_u object_r cpu_device_t (systemlow systemlow)))
(filecon "/vmlinuz.*" symlink (system_u object_r boot_t (systemlow systemlow)))
(filecon "/dev/adb.*" char (system_u object_r tty_device_t (systemlow systemlow)))
(filecon "/dev/hvc.*" char (system_u object_r tty_device_t (systemlow systemlow)))
(filecon "/dev/vcc?/.*" char (system_u object_r tty_device_t (systemlow systemlow)))
(filecon "/dev/tee[0-9]" char (system_u object_r tee_device_t (systemlow systemlow)))
(filecon "/dev/tlk[0-3]" char (system_u object_r v4l_device_t (systemlow systemlow)))
(filecon "/var/db/.*\.db" file (system_u object_r etc_t (systemlow systemlow)))
(filecon "/dev/i2c[^/]*" char (system_u object_r tty_device_t (systemlow systemlow)))
(filecon "/dev/ip2[^/]*" char (system_u object_r tty_device_t (systemlow systemlow)))
(filecon "/dev/xvc[^/]*" char (system_u object_r tty_device_t (systemlow systemlow)))
(filecon "/dev/vcs[^/]*" char (system_u object_r tty_device_t (systemlow systemlow)))
(filecon "/usr/bin(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/dev/pts(/.*)?" any ())
(filecon "/usr/etc(/.*)?" any (system_u object_r etc_t (systemlow systemlow)))
(filecon "/usr/src(/.*)?" any (system_u object_r src_t (systemlow systemlow)))
(filecon "/var/lib(/.*)?" any (system_u object_r var_lib_t (systemlow systemlow)))
(filecon "/dev/mei[0-9]*" char (system_u object_r mei_device_t (systemlow systemlow)))
(filecon "/dev/ptp[0-9]*" char (system_u object_r clock_device_t (systemlow systemlow)))
(filecon "/dev/tpm[0-9]*" char (system_u object_r tpm_device_t (systemlow systemlow)))
(filecon "/dev/uio[0-9]+" char (system_u object_r userio_device_t (systemlow systemlow)))
(filecon "/dev/xvc[0-9]*" char (system_u object_r tty_device_t (systemlow systemlow)))
(filecon "/dev/mpt[2-9]*ctl" char (system_u object_r mptctl_device_t (systemlow systemlow)))
(filecon "/dev/dax[0-9]\.[0-9]" char (system_u object_r dax_device_t (systemlow systemlow)))
(filecon "/usr/doc(/.*)?/lib(/.*)?" any (system_u object_r usr_t (systemlow systemlow)))
(filecon "/selinux/.*" any ())
(filecon "/usr/tmp/.*" any ())
(filecon "/var/tmp/.*" any ())
(filecon "/dev/shm/.*" any ())
(filecon "/dev/ippp.*" char (system_u object_r ppp_device_t (systemlow systemlow)))
(filecon "/dev/net/.*" char (system_u object_r tun_tap_device_t (systemlow systemlow)))
(filecon "/dev/adsp.*" char (system_u object_r sound_device_t (systemlow systemlow)))
(filecon "/dev/midi.*" char (system_u object_r sound_device_t (systemlow systemlow)))
(filecon "/dev/vbox.*" char (system_u object_r xserver_misc_device_t (systemlow systemlow)))
(filecon "/dev/card.*" char (system_u object_r xserver_misc_device_t (systemlow systemlow)))
(filecon "/dev/dri/.+" char (system_u object_r dri_device_t (systemlow systemlow)))
(filecon "/dev/dvb/.*" char (system_u object_r v4l_device_t (systemlow systemlow)))
(filecon "/dev/capi.*" char (system_u object_r tty_device_t (systemlow systemlow)))
(filecon "/dev/hvsi.*" char (system_u object_r tty_device_t (systemlow systemlow)))
(filecon "/dev/isdn.*" char (system_u object_r tty_device_t (systemlow systemlow)))
(filecon "/dev/pty/.*" char (system_u object_r bsdpty_device_t (systemlow systemlow)))
(filecon "/dev/srnd[0-7]" char (system_u object_r sound_device_t (systemlow systemlow)))
(filecon "/dev/tts/[^/]*" char (system_u object_r tty_device_t (systemlow systemlow)))
(filecon "/usr/sbin(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/dev/ipmi[0-9]+" char (system_u object_r ipmi_device_t (systemlow systemlow)))
(filecon "/dev/lirc[0-9]+" char (system_u object_r lirc_device_t (systemlow systemlow)))
(filecon "/usr/lib/(.*/)?bin(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/(.*/)?sbin(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/[^/]+/libexec/kf5/.*" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/[^/]*/run-mozilla\.sh" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/boot/efi(/.*)?/System\.map(-.*)?" file (system_u object_r system_map_t (systemlow systemlow)))
(filecon "/usr/lib/[^/]*/mozilla-xremote-client" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/[^/]*thunderbird[^/]*/thunderbird" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/[^/]*thunderbird[^/]*/thunderbird-bin" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/[^/]*thunderbird[^/]*/open-browser\.sh" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/var/lock/.*" any ())
(filecon "/dev/pppox.*" char (system_u object_r ppp_device_t (systemlow systemlow)))
(filecon "/dev/aload.*" char (system_u object_r sound_device_t (systemlow systemlow)))
(filecon "/dev/amidi.*" char (system_u object_r sound_device_t (systemlow systemlow)))
(filecon "/dev/audio.*" char (system_u object_r sound_device_t (systemlow systemlow)))
(filecon "/dev/event.*" char (system_u object_r event_device_t (systemlow systemlow)))
(filecon "/dev/gtrsc.*" char (system_u object_r clock_device_t (systemlow systemlow)))
(filecon "/dev/media.*" char (system_u object_r v4l_device_t (systemlow systemlow)))
(filecon "/dev/mixer.*" char (system_u object_r sound_device_t (systemlow systemlow)))
(filecon "/dev/rmidi.*" char (system_u object_r sound_device_t (systemlow systemlow)))
(filecon "/dev/radio.*" char (system_u object_r v4l_device_t (systemlow systemlow)))
(filecon "/dev/smpte.*" char (system_u object_r sound_device_t (systemlow systemlow)))
(filecon "/dev/usblp.*" char (system_u object_r printer_device_t (systemlow systemlow)))
(filecon "/dev/vfio/.+" char (system_u object_r vfio_device_t (systemlow systemlow)))
(filecon "/dev/video.*" char (system_u object_r v4l_device_t (systemlow systemlow)))
(filecon "/dev/vmnet.*" char (system_u object_r vmware_device_t (systemlow systemlow)))
(filecon "/dev/ttySG.*" char (system_u object_r tty_device_t (systemlow systemlow)))
(filecon "/usr/bin/d?ash" file (system_u object_r shell_exec_t (systemlow systemlow)))
(filecon "/dev/ndctl[0-9]" char (system_u object_r nvram_device_t (systemlow systemlow)))
(filecon "/etc/blkid(/.*)?" any (system_u object_r etc_runtime_t (systemlow systemlow)))
(filecon "/etc/env\.d(/.*)?" any (system_u object_r etc_runtime_t (systemlow systemlow)))
(filecon "/var/spool(/.*)?" any (system_u object_r var_spool_t (systemlow systemlow)))
(filecon "/dev/ipmi/[0-9]+" char (system_u object_r ipmi_device_t (systemlow systemlow)))
(filecon "/dev/irlpt[0-9]+" char (system_u object_r printer_device_t (systemlow systemlow)))
(filecon "/dev/tpmrm[0-9]*" char (system_u object_r tpm_device_t (systemlow systemlow)))
(filecon "/etc/mtab~[0-9]*" file (system_u object_r etc_runtime_t (systemlow systemlow)))
(filecon "/dev/dcbri[0-9]+" char (system_u object_r tty_device_t (systemlow systemlow)))
(filecon "/dev/slamr[0-9]+" char (system_u object_r tty_device_t (systemlow systemlow)))
(filecon "/dev/vport[0-9]p[0-9]+" char (system_u object_r virtio_device_t (systemlow systemlow)))
(filecon "/dev/amixer.*" char (system_u object_r sound_device_t (systemlow systemlow)))
(filecon "/dev/autofs.*" char (system_u object_r autofs_device_t (systemlow systemlow)))
(filecon "/dev/dahdi/.*" char (system_u object_r sound_device_t (systemlow systemlow)))
(filecon "/dev/dmmidi.*" char (system_u object_r sound_device_t (systemlow systemlow)))
(filecon "/dev/em8300.*" char (system_u object_r v4l_device_t (systemlow systemlow)))
(filecon "/dev/hiddev.*" char (system_u object_r usb_device_t (systemlow systemlow)))
(filecon "/dev/hidraw.*" char (system_u object_r usb_device_t (systemlow systemlow)))
(filecon "/dev/mpu401.*" char (system_u object_r sound_device_t (systemlow systemlow)))
(filecon "/dev/nvidia.*" char (system_u object_r xserver_misc_device_t (systemlow systemlow)))
(filecon "/dev/usbmon.+" char (system_u object_r usbmon_device_t (systemlow systemlow)))
(filecon "/dev/input/.*" char (system_u object_r event_device_t (systemlow systemlow)))
(filecon "/dev/usb/lp.*" char (system_u object_r printer_device_t (systemlow systemlow)))
(filecon "/initrd\.img.*" symlink (system_u object_r boot_t (systemlow systemlow)))
(filecon "/dev/patmgr[01]" char (system_u object_r sound_device_t (systemlow systemlow)))
(filecon "/dev/sysdig[0-9]" char (system_u object_r sysdig_device_t (systemlow systemlow)))
(filecon "/dev/hpilo/[^/]*" char (system_u object_r tty_device_t (systemlow systemlow)))
(filecon "/dev/mqueue(/.*)?" any ())
(filecon "/sys/fs/bpf(/.*)?" any ())
(filecon "/dev/ircomm[0-9]+" char (system_u object_r tty_device_t (systemlow systemlow)))
(filecon "/dev/rfcomm[0-9]+" char (system_u object_r tty_device_t (systemlow systemlow)))
(filecon "/etc/avahi/.*\.action" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/dev/input/.*mouse.*" char (system_u object_r mouse_device_t (systemlow systemlow)))
(filecon "/usr/lib/qt.*/bin(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/local/(.*/)?bin(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/(.*/)?bin(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/lost\+found/.*" any ())
(filecon "/usr/bin/ksh.*" file (system_u object_r shell_exec_t (systemlow systemlow)))
(filecon "/usr/bin/zsh.*" file (system_u object_r shell_exec_t (systemlow systemlow)))
(filecon "/usr/lib/yp/.+" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/dev/admmidi.*" char (system_u object_r sound_device_t (systemlow systemlow)))
(filecon "/dev/etherd/.+" char (system_u object_r lvm_control_t (systemlow systemlow)))
(filecon "/dev/mga_vid.*" char (system_u object_r xserver_misc_device_t (systemlow systemlow)))
(filecon "/dev/raw1394.*" char (system_u object_r v4l_device_t (systemlow systemlow)))
(filecon "/dev/swradio.*" char (system_u object_r v4l_device_t (systemlow systemlow)))
(filecon "/dev/input/m.*" char (system_u object_r mouse_device_t (systemlow systemlow)))
(filecon "/dev/mvideo/.*" char (system_u object_r xserver_misc_device_t (systemlow systemlow)))
(filecon "/etc/nologin.*" file (system_u object_r etc_runtime_t (systemlow systemlow)))
(filecon "/media/\.hal-.*" file (system_u object_r mnt_t (systemlow systemlow)))
(filecon "/dev/usb/tty.*" char (system_u object_r usbtty_device_t (systemlow systemlow)))
(filecon "/dev/cdc-wdm[0-9]" char (system_u object_r modem_device_t (systemlow systemlow)))
(filecon "/dev/teepriv[0-9]" char (system_u object_r tee_priv_device_t (systemlow systemlow)))
(filecon "/etc/kde/env(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/ssh(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/libexec(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/var/ftp/bin(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/include(/.*)?" any (system_u object_r usr_t (systemlow systemlow)))
(filecon "/var/ftp/etc(/.*)?" any (system_u object_r etc_t (systemlow systemlow)))
(filecon "/etc/mcelog/.*\.local" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/etc/mcelog/.*-trigger" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/nut/.*" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/dev/misc/dlm.*" char (system_u object_r dlm_control_device_t (systemlow systemlow)))
(filecon "/dev/pcfclock.*" char (system_u object_r clock_device_t (systemlow systemlow)))
(filecon "/dev/watchdog.*" char (system_u object_r watchdog_device_t (systemlow systemlow)))
(filecon "/dev/winradio.*" char (system_u object_r v4l_device_t (systemlow systemlow)))
(filecon "/dev/input/js.*" char (system_u object_r mouse_device_t (systemlow systemlow)))
(filecon "/etc/hotplug/.*rc" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/dev/gpiochip[0-9]" char (system_u object_r gpiochip_device_t (systemlow systemlow)))
(filecon "/usr/lib/cups(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/etc/hotplug/.*agent" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/dev/bus/usb/.*/[0-9]+" char (system_u object_r usb_device_t (systemlow systemlow)))
(filecon "/usr/lib/dpkg/.+" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/dev/dma_heap/.+" char (system_u object_r dma_device_t (systemlow systemlow)))
(filecon "/dev/v4l-touch.*" char (system_u object_r v4l_device_t (systemlow systemlow)))
(filecon "/dev/mfpports/.*" char (system_u object_r printer_device_t (systemlow systemlow)))
(filecon "/dev/usb/dc2xx.*" char (system_u object_r scanner_device_t (systemlow systemlow)))
(filecon "/usr/lib/udev/[^/]*" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/etc/netplug\.d(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/etc/profile\.d(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/etc/X11/xinit(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/fence(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/var/qmail/bin(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/local/etc(/.*)?" any (system_u object_r etc_t (systemlow systemlow)))
(filecon "/usr/local/src(/.*)?" any (system_u object_r src_t (systemlow systemlow)))
(filecon "/dev/hugepages(/.*)?" any ())
(filecon "/usr/share/doc(/.*)?/README.*" any (system_u object_r usr_t (systemlow systemlow)))
(filecon "/usr/lib/gimp/.*/plug-ins(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/X11R6/lib(64)?/X11/xkb/xkbcomp" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/apr(-[0-9])?/build/libtool" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/apr(-[0-9])?/build/[^/]+\.sh" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/sys/fs/cgroup/.*" any (system_u object_r cgroup_t (systemlow systemlow)))
(filecon "/sys/fs/pstore/.*" any ())
(filecon "/etc/cipe/ip-up.*" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/etc/ppp/ip-up\..*" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/cyrus/.*" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/ipsec/.*" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/rc/sh/.*" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/dev/v4l-subdev.*" char (system_u object_r v4l_device_t (systemlow systemlow)))
(filecon "/dev/usb/mdc800.*" char (system_u object_r scanner_device_t (systemlow systemlow)))
(filecon "/dev/xen/blktap.*" char (system_u object_r xen_device_t (systemlow systemlow)))
(filecon "/dev/iio:device[0-9]" char (system_u object_r iio_device_t (systemlow systemlow)))
(filecon "/etc/cron\.daily(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/etc/pm/power\.d(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/etc/pm/sleep\.d(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/dracut(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/local/sbin(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/dev/drm_dp_aux[0-9]*" char (system_u object_r xserver_misc_device_t (systemlow systemlow)))
(filecon "/sys/fs/cgroup/.*/memory\.pressure" file (system_u object_r memory_pressure_t (systemlow systemlow)))
(filecon "/tmp/lost\+found/.*" any ())
(filecon "/usr/lost\+found/.*" any ())
(filecon "/var/lost\+found/.*" any ())
(filecon "/usr/lib/rc/bin/.*" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/dev/infiniband/.*" char (system_u object_r infiniband_device_t (systemlow systemlow)))
(filecon "/dev/input/event.*" char (system_u object_r event_device_t (systemlow systemlow)))
(filecon "/dev/usb/scanner.*" char (system_u object_r scanner_device_t (systemlow systemlow)))
(filecon "/etc/\.fstab\.hal\..+" file (system_u object_r etc_runtime_t (systemlow systemlow)))
(filecon "/etc/cron\.hourly(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/etc/cron\.weekly(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/etc/xen/scripts(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/courier(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/getconf(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/upstart(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/var/mailman/bin(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/modules(/.*)?" any (system_u object_r modules_object_t (systemlow systemlow)))
(filecon "/etc/portage/bin(/.*)?" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/boot/System\.map(-.*)?" file (system_u object_r system_map_t (systemlow systemlow)))
(filecon "/usr/lib/dovecot/.+" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/boot/lost\+found/.*" any ())
(filecon "/etc/cipe/ip-down.*" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/etc/ppp/ip-down\..*" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/etc/ppp/ipv6-up\..*" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/rc/sbin/.*" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/git-core(/.*)" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/etc/acpi/actions(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/etc/cron\.monthly(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/etc/kde/shutdown(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/etc/vmware-tools(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/news/bin(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/pm-utils(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/etc/pki/tls/misc(/.*)?" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/src/kernels/.+/lib(/.*)?" any (system_u object_r usr_t (systemlow systemlow)))
(filecon "/usr/lib/jvm/java.*/lib/jspawnhelper" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/sys/kernel/debug/.*" any ())
(filecon "/usr/lib/gvfs/gvfs.*" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/etc/update-motd\.d(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/readahead(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/local/Brother(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/local/Printer(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/debug/bin(/.*)?" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/etc/ppp/ipv6-down\..*" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/bluetooth/.*" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/debconf/.+" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/dev/input/keyboard.*" char (system_u object_r event_device_t (systemlow systemlow)))
(filecon "/usr/share/cluster/.*\.sh" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/sectool/.*\.py" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/etc/racoon/scripts(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/ccache/bin(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/cloud-init(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/e16/misc(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/resolvconf(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/sys/kernel/tracing(/.*)?" any ())
(filecon "/usr/lib/debug/sbin(/.*)?" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/build-1/[^/]+\.sh" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/xulrunner-.*/plugin-container" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/var/log/lost\+found/.*" any ())
(filecon "/var/tmp/lost\+found/.*" any ())
(filecon "/usr/lib/apt/methods.+" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/ConsoleKit/.*" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/mc/extfs/.*" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/chkrootkit/.*" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/etc/dhcp/dhclient\.d(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/mailman/bin(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/mon/alert\.d(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/portage/bin(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/selinux/hll(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/thunderbird.*/mozilla-xremote-client" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "HOME_ROOT/lost\+found/.*" any ())
(filecon "/usr/lib/cyrus-imapd/.*" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/dev/biometric/sensor.*" char (system_u object_r event_device_t (systemlow systemlow)))
(filecon "/tmp/systemd-private-[^/]+" dir (system_u object_r tmp_t (systemlow systemlow)))
(filecon "/usr/lib/at-spi2-core(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/mailman/mail(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/rcscripts/sh(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/udev/devices(/.*)?" any (system_u object_r device_t (systemlow systemlow)))
(filecon "/etc/ipsec\.d/examples(/.*)?" any (system_u object_r etc_t (systemlow systemlow)))
(filecon "/tmp/systemd-private-[^/]+/tmp" dir (system_u object_r tmp_t (systemlow systemlow)))
(filecon "/tmp/systemd-private-[^/]+/tmp/.*" any ())
(filecon "/usr/share/maven-bin-[^/]*/bin/m2\.conf" file (system_u object_r usr_t (systemlow systemlow)))
(filecon "/usr/local/lost\+found/.*" any ())
(filecon "/usr/lib/courier-imap/.*" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/kde4/libexec/.*" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/bridge-utils/.*\.sh" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/etc/PackageKit/events(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/opt/google/talkplugin(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/hal/scripts(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/var/spool/postfix/etc(/.*)?" any (system_u object_r etc_t (systemlow systemlow)))
(filecon "/usr/lib/debug/usr/bin(/.*)?" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/opt/brother/Printers/[^/]+/lpd(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/opt/brother/Printers/[^/]+/cupswrapper(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/opt/RealPlayer/postint(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/nagios/plugins(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/Modules/init(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/smolt/client(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/var/lib/nfs/rpc_pipefs(/.*)?" any ())
(filecon "/usr/lib/debug/usr/sbin(/.*)?" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/emacsen-common/.*" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/systemd/systemd.*" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/udev/devices/lp.*" char (system_u object_r printer_device_t (systemlow systemlow)))
(filecon "/usr/share/mysql/scripts(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/opt/RealPlayer/realplay(\.bin)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/smartmontools/.*" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/var/tmp/systemd-private-[^/]+" dir (system_u object_r tmp_t (systemlow systemlow)))
(filecon "/usr/lib/netsaint/plugins(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/rcscripts/addons(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/shorewall-perl(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/shorewall-lite(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/var/lib/asterisk/agi-bin(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/turboprint/lib(/.*)?" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/var/tmp/systemd-private-[^/]+/tmp" dir (system_u object_r tmp_t (systemlow systemlow)))
(filecon "/var/tmp/systemd-private-[^/]+/tmp/.*" any ())
(filecon "/var/log/audit/lost\+found/.*" any ())
(filecon "/usr/lib/udev/devices/shm/.*" any ())
(filecon "/usr/lib/udev/devices/net/.*" char (system_u object_r tun_tap_device_t (systemlow systemlow)))
(filecon "/etc/ConsoleKit/run-seat\.d(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/libalpm/scripts(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/vhostmd/scripts(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/shorewall-shell(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/shorewall6-lite(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/nspluginwrapper/np.*" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/NetworkManager/nm-.*" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/networkmanager/nm-.*" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/ajaxterm/qweb\.py.*" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/python-exec/python.*/.*" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/ConsoleKit/scripts(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/misc/glibc/getconf/.*" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/pgsql/test/regress/.*\.sh" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/denyhosts/scripts(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/denyhosts/plugins(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/mediawiki/math/texvc.*" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/etc/ConsoleKit/run-session\.d(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/systemd/system-sleep(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/PackageKit/helpers(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/texmf-dist/scripts(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/docbook2X/xslt/man(/.*)?" any (system_u object_r usr_t (systemlow systemlow)))
(filecon "/usr/share/GNUstep/Makefiles/[^/]*\.sh" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/etc/hotplug\.d/default/default.*" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/ConsoleKit/run-seat\.d(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/gnome-settings-daemon/.*" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/ajaxterm/ajaxterm\.py.*" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/opt/gutenprint/cups/lib/filter(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/local/linuxprinter/filters(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/udev/devices/hugepages/.*" any ())
(filecon "/usr/lib/systemd/system-shutdown(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/ConsoleKit/run-session\.d(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/etc/sysconfig/network-scripts/net.*" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/couchdb/erlang/lib/couch-[0-9.]+/priv/couchspawnkillable" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/etc/sysconfig/network-scripts/ifup.*" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/etc/sysconfig/network-scripts/init.*" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/etc/sysconfig/network-scripts/ifdown.*" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/opt/OpenPrinting-Gutenprint/cups/lib/filter(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/gedit/plugins/externaltools/tools(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/gedit-2/plugins/externaltools/tools(/.*)?" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/rcscripts/net\.modules\.d/helpers\.d/udhcpc-.*" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/rcscripts/net\.modules\.d/helpers\.d/dhclient-.*" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/" dir (system_u object_r root_t (systemlow systemlow)))
(filecon "/dev" dir (system_u object_r device_t (systemlow systemlow)))
(filecon "/afs" dir (system_u object_r mnt_t (systemlow systemlow)))
(filecon "/etc" dir (system_u object_r etc_t (systemlow systemlow)))
(filecon "/net" dir (system_u object_r mnt_t (systemlow systemlow)))
(filecon "/opt" dir (system_u object_r usr_t (systemlow systemlow)))
(filecon "/run" dir (system_u object_r var_run_t (systemlow systemlow)))
(filecon "/run" symlink (system_u object_r var_run_t (systemlow systemlow)))
(filecon "/srv" dir (system_u object_r var_t (systemlow systemlow)))
(filecon "/srv" symlink (system_u object_r var_t (systemlow systemlow)))
(filecon "/tmp" dir (system_u object_r tmp_t (systemlow systemlow)))
(filecon "/usr" dir (system_u object_r usr_t (systemlow systemlow)))
(filecon "/var" dir (system_u object_r var_t (systemlow systemlow)))
(filecon "/boot" dir (system_u object_r boot_t (systemlow systemlow)))
(filecon "/emul" dir (system_u object_r usr_t (systemlow systemlow)))
(filecon "/misc" dir (system_u object_r mnt_t (systemlow systemlow)))
(filecon "/proc" dir ())
(filecon "/initrd" dir (system_u object_r root_t (systemlow systemlow)))
(filecon "/cgroup" dir (system_u object_r cgroup_t (systemlow systemlow)))
(filecon "/dev/ppp" char (system_u object_r ppp_device_t (systemlow systemlow)))
(filecon "/dev/gfx" char (system_u object_r xserver_misc_device_t (systemlow systemlow)))
(filecon "/dev/jbm" char (system_u object_r mouse_device_t (systemlow systemlow)))
(filecon "/dev/ksm" char (system_u object_r ksm_device_t (systemlow systemlow)))
(filecon "/dev/kvm" char (system_u object_r kvm_device_t (systemlow systemlow)))
(filecon "/dev/mem" char (system_u object_r memory_device_t (systemlow systemlow)))
(filecon "/dev/pmu" char (system_u object_r power_device_t (systemlow systemlow)))
(filecon "/dev/smu" char (system_u object_r power_device_t (systemlow systemlow)))
(filecon "/run/shm" symlink (system_u object_r var_run_t (systemlow systemlow)))
(filecon "/selinux" dir ())
(filecon "/usr/tmp" dir (system_u object_r tmp_t (systemlow systemlow)))
(filecon "/var/run" symlink (system_u object_r var_run_t (systemlow systemlow)))
(filecon "/var/tmp" dir (system_u object_r tmp_t (systemlow systemlow)))
(filecon "/var/tmp" symlink (system_u object_r tmp_t (systemlow systemlow)))
(filecon "/dev/shm" dir (system_u object_r tmpfs_t (systemlow systemlow)))
(filecon "/dev/tty" char (system_u object_r devtty_t (systemlow systemlow)))
(filecon "/dev/pts" dir (system_u object_r devpts_t (systemlow systemlow)))
(filecon "/\.journal" any ())
(filecon "/dev/3dfx" char (system_u object_r xserver_misc_device_t (systemlow systemlow)))
(filecon "/dev/beep" char (system_u object_r sound_device_t (systemlow systemlow)))
(filecon "/dev/dmfm" char (system_u object_r sound_device_t (systemlow systemlow)))
(filecon "/dev/full" char (system_u object_r null_device_t (systemlow systemlow)))
(filecon "/dev/hpet" char (system_u object_r clock_device_t (systemlow systemlow)))
(filecon "/dev/i915" char (system_u object_r dri_device_t (systemlow systemlow)))
(filecon "/dev/kmem" char (system_u object_r memory_device_t (systemlow systemlow)))
(filecon "/dev/kmsg" char (system_u object_r kmsg_device_t (systemlow systemlow)))
(filecon "/dev/mice" char (system_u object_r mouse_device_t (systemlow systemlow)))
(filecon "/dev/null" char (system_u object_r null_device_t (systemlow systemlow)))
(filecon "/dev/port" char (system_u object_r memory_device_t (systemlow systemlow)))
(filecon "/dev/uhid" char (system_u object_r uhid_device_t (systemlow systemlow)))
(filecon "/dev/vhci" char (system_u object_r vhost_device_t (systemlow systemlow)))
(filecon "/dev/vmci" char (system_u object_r vmware_device_t (systemlow systemlow)))
(filecon "/dev/zero" char (system_u object_r zero_device_t (systemlow systemlow)))
(filecon "/etc/mtab" file (system_u object_r etc_runtime_t (systemlow systemlow)))
(filecon "HOME_ROOT" dir (system_u object_r home_root_t (systemlow systemlow)))
(filecon "HOME_ROOT" symlink (system_u object_r home_root_t (systemlow systemlow)))
(filecon "/var/lock" dir (system_u object_r var_lock_t (systemlow systemlow)))
(filecon "/var/lock" symlink (system_u object_r var_lock_t (systemlow systemlow)))
(filecon "/dev/ptmx" char (system_u object_r ptmx_t (systemlow systemlow)))
(filecon "/dev/atibm" char (system_u object_r mouse_device_t (systemlow systemlow)))
(filecon "/dev/crash" char (system_u object_r crash_device_t (systemlow systemlow)))
(filecon "/dev/hwrng" char (system_u object_r random_device_t (systemlow systemlow)))
(filecon "/dev/kqemu" char (system_u object_r qemu_device_t (systemlow systemlow)))
(filecon "/dev/lircm" char (system_u object_r mouse_device_t (systemlow systemlow)))
(filecon "/dev/modem" char (system_u object_r modem_device_t (systemlow systemlow)))
(filecon "/dev/nvram" char (system_u object_r nvram_device_t (systemlow systemlow)))
(filecon "/dev/vsock" char (system_u object_r vsock_device_t (systemlow systemlow)))
(filecon "/dev/vmmon" char (system_u object_r vmware_device_t (systemlow systemlow)))
(filecon "/etc/cmtab" file (system_u object_r etc_runtime_t (systemlow systemlow)))
(filecon "/usr/bin/sh" file (system_u object_r shell_exec_t (systemlow systemlow)))
(filecon "/dev/efirtc" char (system_u object_r clock_device_t (systemlow systemlow)))
(filecon "/dev/evtchn" char (system_u object_r xen_device_t (systemlow systemlow)))
(filecon "/dev/logibm" char (system_u object_r mouse_device_t (systemlow systemlow)))
(filecon "/dev/mcelog" char (system_u object_r kmsg_device_t (systemlow systemlow)))
(filecon "/dev/oldmem" char (system_u object_r memory_device_t (systemlow systemlow)))
(filecon "/dev/opengl" char (system_u object_r xserver_misc_device_t (systemlow systemlow)))
(filecon "/dev/radeon" char (system_u object_r dri_device_t (systemlow systemlow)))
(filecon "/dev/random" char (system_u object_r random_device_t (systemlow systemlow)))
(filecon "/dev/rfkill" char (system_u object_r wireless_device_t (systemlow systemlow)))
(filecon "/dev/sonypi" char (system_u object_r v4l_device_t (systemlow systemlow)))
(filecon "/dev/uinput" char (system_u object_r event_device_t (systemlow systemlow)))
(filecon "/lost\+found" dir (system_u object_r lost_found_t (systemlow systemlow)))
(filecon "/dev/MAKEDEV" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/dev/hfmodem" char (system_u object_r sound_device_t (systemlow systemlow)))
(filecon "/dev/sndstat" char (system_u object_r sound_device_t (systemlow systemlow)))
(filecon "/dev/udmabuf" char (system_u object_r dma_device_t (systemlow systemlow)))
(filecon "/dev/urandom" char (system_u object_r urandom_device_t (systemlow systemlow)))
(filecon "/dev/vttuner" char (system_u object_r v4l_device_t (systemlow systemlow)))
(filecon "/etc/csh\.env" file (system_u object_r etc_runtime_t (systemlow systemlow)))
(filecon "/dev/console" char (system_u object_r console_device_t (systemlow systemlow)))
(filecon "/tmp/\.journal" any ())
(filecon "/usr/\.journal" any ())
(filecon "/var/\.journal" any ())
(filecon "/usr/bin/bash" file (system_u object_r shell_exec_t (systemlow systemlow)))
(filecon "/usr/bin/fish" file (system_u object_r shell_exec_t (systemlow systemlow)))
(filecon "/usr/bin/mksh" file (system_u object_r shell_exec_t (systemlow systemlow)))
(filecon "/usr/bin/sash" file (system_u object_r shell_exec_t (systemlow systemlow)))
(filecon "/usr/bin/sesh" file (system_u object_r shell_exec_t (systemlow systemlow)))
(filecon "/usr/bin/tcsh" file (system_u object_r shell_exec_t (systemlow systemlow)))
(filecon "/usr/bin/yash" file (system_u object_r shell_exec_t (systemlow systemlow)))
(filecon "/var/qmail/rc" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/dev/apm_bios" char (system_u object_r acpi_bios_t (systemlow systemlow)))
(filecon "/dev/freefall" char (system_u object_r freefall_device_t (systemlow systemlow)))
(filecon "/dev/graphics" char (system_u object_r xserver_misc_device_t (systemlow systemlow)))
(filecon "/dev/inportbm" char (system_u object_r mouse_device_t (systemlow systemlow)))
(filecon "/dev/mergemem" char (system_u object_r memory_device_t (systemlow systemlow)))
(filecon "/dev/pc110pad" char (system_u object_r mouse_device_t (systemlow systemlow)))
(filecon "/dev/snapshot" char (system_u object_r acpi_bios_t (systemlow systemlow)))
(filecon "/dev/vrtpanel" char (system_u object_r mouse_device_t (systemlow systemlow)))
(filecon "/dev/z90crypt" char (system_u object_r crypt_device_t (systemlow systemlow)))
(filecon "/dev/cpu/mtrr" char (system_u object_r mtrr_device_t (systemlow systemlow)))
(filecon "/etc/mtab\.tmp" file (system_u object_r etc_runtime_t (systemlow systemlow)))
(filecon "/dev/pts/ptmx" char (system_u object_r ptmx_t (systemlow systemlow)))
(filecon "/boot/\.journal" any ())
(filecon "/etc/mail/make" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/bin/bash2" file (system_u object_r shell_exec_t (systemlow systemlow)))
(filecon "/usr/bin/smrsh" file (system_u object_r shell_exec_t (systemlow systemlow)))
(filecon "/usr/sbin/sesh" file (system_u object_r shell_exec_t (systemlow systemlow)))
(filecon "/var/qmail/bin" dir (system_u object_r bin_t (systemlow systemlow)))
(filecon "/dev/hw_random" char (system_u object_r random_device_t (systemlow systemlow)))
(filecon "/dev/microcode" char (system_u object_r cpu_device_t (systemlow systemlow)))
(filecon "/dev/mmetfgrab" char (system_u object_r scanner_device_t (systemlow systemlow)))
(filecon "/dev/net/vhost" char (system_u object_r vhost_device_t (systemlow systemlow)))
(filecon "/dev/sequencer" char (system_u object_r sound_device_t (systemlow systemlow)))
(filecon "/dev/vhost-net" char (system_u object_r vhost_device_t (systemlow systemlow)))
(filecon "/var/empty/dev" dir (system_u object_r device_t (systemlow systemlow)))
(filecon "/etc/killpower" file (system_u object_r etc_runtime_t (systemlow systemlow)))
(filecon "/etc/localtime" symlink (system_u object_r etc_t (systemlow systemlow)))
(filecon "/etc/nohotplug" file (system_u object_r etc_runtime_t (systemlow systemlow)))
(filecon "/dev/hugepages" dir (system_u object_r hugetlbfs_t (systemlow systemlow)))
(filecon "/sys/fs/cgroup" dir (system_u object_r cgroup_t (systemlow systemlow)))
(filecon "/sys/fs/pstore" dir (system_u object_r pstore_t (systemlow systemlow)))
(filecon "/usr/sbin/smrsh" file (system_u object_r shell_exec_t (systemlow systemlow)))
(filecon "/dev/cachefiles" char (system_u object_r cachefiles_device_t (systemlow systemlow)))
(filecon "/dev/controlD64" char (system_u object_r xserver_misc_device_t (systemlow systemlow)))
(filecon "/dev/sequencer2" char (system_u object_r sound_device_t (systemlow systemlow)))
(filecon "/dev/vhost-scsi" char (system_u object_r vhost_device_t (systemlow systemlow)))
(filecon "/dev/input/mice" char (system_u object_r mouse_device_t (systemlow systemlow)))
(filecon "/dev/xen/evtchn" char (system_u object_r xen_device_t (systemlow systemlow)))
(filecon "/dev/xen/gntdev" char (system_u object_r xen_device_t (systemlow systemlow)))
(filecon "/dev/xen/xenbus" char (system_u object_r xen_device_t (systemlow systemlow)))
(filecon "/etc/ioctl\.save" file (system_u object_r etc_runtime_t (systemlow systemlow)))
(filecon "/etc/machine-id" file (system_u object_r etc_runtime_t (systemlow systemlow)))
(filecon "/tmp/lost\+found" dir (system_u object_r lost_found_t (systemlow systemlow)))
(filecon "/usr/lost\+found" dir (system_u object_r lost_found_t (systemlow systemlow)))
(filecon "/var/lost\+found" dir (system_u object_r lost_found_t (systemlow systemlow)))
(filecon "/usr/bin/nologin" file (system_u object_r shell_exec_t (systemlow systemlow)))
(filecon "/usr/bin/scponly" file (system_u object_r shell_exec_t (systemlow systemlow)))
(filecon "/dev/vga_arbiter" char (system_u object_r xserver_misc_device_t (systemlow systemlow)))
(filecon "/dev/vhost-vsock" char (system_u object_r vhost_device_t (systemlow systemlow)))
(filecon "/dev/userfaultfd" char (system_u object_r userfaultfd_device_t (systemlow systemlow)))
(filecon "/dev/xen/privcmd" char (system_u object_r xen_device_t (systemlow systemlow)))
(filecon "/boot/lost\+found" dir (system_u object_r lost_found_t (systemlow systemlow)))
(filecon "/etc/profile\.env" file (system_u object_r etc_runtime_t (systemlow systemlow)))
(filecon "/var/lock/subsys" dir (system_u object_r var_lock_t (systemlow systemlow)))
(filecon "/usr/bin/scponlyc" file (system_u object_r shell_exec_t (systemlow systemlow)))
(filecon "/usr/lib/rpm/rpmd" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/rpm/rpmk" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/rpm/rpmq" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/rpm/rpmv" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/libexec/sesh" file (system_u object_r shell_exec_t (systemlow systemlow)))
(filecon "/usr/sbin/nologin" file (system_u object_r shell_exec_t (systemlow systemlow)))
(filecon "/dev/loop-control" char (system_u object_r loop_control_device_t (systemlow systemlow)))
(filecon "/dev/input/uinput" char (system_u object_r event_device_t (systemlow systemlow)))
(filecon "/dev/vmbus/hv_kvp" char (system_u object_r hyperv_kvp_device_t (systemlow systemlow)))
(filecon "/dev/vmbus/hv_vss" char (system_u object_r hyperv_vss_device_t (systemlow systemlow)))
(filecon "/dev/xen/gntalloc" char (system_u object_r xen_device_t (systemlow systemlow)))
(filecon "/etc/udev/devices" dir (system_u object_r device_t (systemlow systemlow)))
(filecon "/etc/fstab\.REVOKE" file (system_u object_r etc_runtime_t (systemlow systemlow)))
(filecon "/sys/kernel/debug" dir (system_u object_r debugfs_t (systemlow systemlow)))
(filecon "HOME_ROOT/\.journal" any ())
(filecon "/etc/xen/qemu-ifup" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/bin/git-shell" file (system_u object_r shell_exec_t (systemlow systemlow)))
(filecon "/usr/lib/sudo/sesh" file (system_u object_r shell_exec_t (systemlow systemlow)))
(filecon "/usr/sbin/scponlyc" file (system_u object_r shell_exec_t (systemlow systemlow)))
(filecon "/dev/btrfs-control" char (system_u object_r lvm_control_t (systemlow systemlow)))
(filecon "/dev/xen/hypercall" char (system_u object_r xen_device_t (systemlow systemlow)))
(filecon "/etc/mtab\.fuselock" file (system_u object_r etc_runtime_t (systemlow systemlow)))
(filecon "/usr/local/\.journal" any ())
(filecon "/etc/apcupsd/commok" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/etc/sysconfig/init" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/bin/mountpoint" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/dev/mapper/control" char (system_u object_r lvm_control_t (systemlow systemlow)))
(filecon "/var/log/lost\+found" dir (system_u object_r lost_found_t (systemlow systemlow)))
(filecon "/var/tmp/lost\+found" dir (system_u object_r lost_found_t (systemlow systemlow)))
(filecon "/var/tmp/vi\.recover" dir (system_u object_r tmp_t (systemlow systemlow)))
(filecon "/etc/sysconfig/crond" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/bin/mkfs\.cramfs" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/sftp-server" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/dev/network_latency" char (system_u object_r pmqos_device_t (systemlow systemlow)))
(filecon "/dev/cpu_dma_latency" char (system_u object_r pmqos_device_t (systemlow systemlow)))
(filecon "/dev/wmi/dell-smbios" char (system_u object_r acpi_bios_t (systemlow systemlow)))
(filecon "/etc/network/ifstate" file (system_u object_r etc_runtime_t (systemlow systemlow)))
(filecon "HOME_ROOT/lost\+found" dir (system_u object_r lost_found_t (systemlow systemlow)))
(filecon "/etc/apcupsd/changeme" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/etc/X11/xdm/Xsetup_0" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/atril/atrild" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/udev/scsi_id" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/sbin/mkfs\.cramfs" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/dev/memory_bandwidth" char (system_u object_r pmqos_device_t (systemlow systemlow)))
(filecon "/etc/cups/client\.conf" file (system_u object_r etc_t (systemlow systemlow)))
(filecon "/etc/sysconfig/hwconf" file (system_u object_r etc_runtime_t (systemlow systemlow)))
(filecon "/usr/local/lost\+found" dir (system_u object_r lost_found_t (systemlow systemlow)))
(filecon "/etc/apcupsd/onbattery" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/etc/zfs/zfs-functions" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/libexec/sudo/sesh" file (system_u object_r shell_exec_t (systemlow systemlow)))
(filecon "/dev/elographics/e2201" char (system_u object_r mouse_device_t (systemlow systemlow)))
(filecon "/dev/touchscreen/mk712" char (system_u object_r mouse_device_t (systemlow systemlow)))
(filecon "/var/spool/postfix/pid" dir (system_u object_r var_run_t (systemlow systemlow)))
(filecon "/etc/apcupsd/apccontrol" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/etc/apcupsd/offbattery" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/apt/apt-helper" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/evince/evinced" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/selinux/hll/pp" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/dev/network_throughput" char (system_u object_r pmqos_device_t (systemlow systemlow)))
(filecon "/dev/xen/xenbus_backend" char (system_u object_r xen_device_t (systemlow systemlow)))
(filecon "/etc/apcupsd/commfailure" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/etc/X11/xdm/GiveConsole" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/etc/X11/xdm/TakeConsole" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/wicd/monitor\.py" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/dev/touchscreen/ucb1x00" char (system_u object_r mouse_device_t (systemlow systemlow)))
(filecon "/etc/sysconfig/firstboot" file (system_u object_r etc_runtime_t (systemlow systemlow)))
(filecon "/etc/sysconfig/netconsole" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/misc/sftp-server" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/udev/devices/ppp" char (system_u object_r ppp_device_t (systemlow systemlow)))
(filecon "/var/log/audit/lost\+found" dir (system_u object_r lost_found_t (systemlow systemlow)))
(filecon "/usr/lib/udev/devices/shm" dir (system_u object_r tmpfs_t (systemlow systemlow)))
(filecon "/etc/apcupsd/masterconnect" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/etc/apcupsd/mastertimeout" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/etc/rc\.d/init\.d/functions" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/crda/setregdomain" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/build-1/libtool" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/udev/devices/null" char (system_u object_r null_device_t (systemlow systemlow)))
(filecon "/usr/lib/udev/devices/zero" char (system_u object_r zero_device_t (systemlow systemlow)))
(filecon "/etc/ptal/ptal-printd-like" file (system_u object_r etc_runtime_t (systemlow systemlow)))
(filecon "/etc/mgetty\+sendfax/new_fax" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/git-core/git-shell" file (system_u object_r shell_exec_t (systemlow systemlow)))
(filecon "/usr/lib/tumbler-1/tumblerd" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/build-1/mkdir\.sh" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/portage/bin/ebuild" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/etc/security/namespace\.init" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/etc/sysconfig/readonly-root" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/dconf/dconf-service" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/xfce4/panel/migrate" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/xfce4/panel/wrapper" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/dput/execute-dput" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/etc/sysconfig/iptables\.save" file (system_u object_r etc_runtime_t (systemlow systemlow)))
(filecon "/usr/lib/vte/gnome-pty-helper" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/xfce4/xfconf/xfconfd" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/etc/hotplug/hotplug\.functions" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/etc/wpa_supplicant/wpa_cli\.sh" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/bin/insmod_ksymoops_clean" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/apt/apt\.systemd\.daily" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/cvs/contrib/rcs2log" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/sandbox/sandboxX\.sh" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/portage/bin/ebuild\.sh" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/shorewall/getparams" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/shorewall/wait4ifup" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/sys/devices/system/cpu/online" file (system_u object_r cpu_online_t (systemlow systemlow)))
(filecon "/usr/lib/rsyslog/rsyslog-rotate" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/libexec/git-core/git-shell" file (system_u object_r shell_exec_t (systemlow systemlow)))
(filecon "/usr/sbin/insmod_ksymoops_clean" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/texmf/web2c/mktexdir" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/shorewall/configpath" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/udev/devices/hugepages" dir (system_u object_r hugetlbfs_t (systemlow systemlow)))
(filecon "/usr/lib/xfce4/panel/wrapper-1\.0" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/xfce4/panel/wrapper-2\.0" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/libexec/openssh/sftp-server" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/dayplanner/dayplanner" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/ifupdown2/__main__\.py" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/shorewall/compiler\.pl" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/xfce4/exo-1/exo-helper-1" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/xfce4/exo-2/exo-helper-2" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/cluster/ocf-shellfuncs" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/cluster/svclib_nfslock" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/python-exec/python-exec2" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/etc/pki/tls/certs/make-dummy-cert" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/xfce4/xfwm4/helper-dialog" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/printconf/util/print\.py" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/munin/plugins/plugin\.sh" file (system_u object_r usr_t (systemlow systemlow)))
(filecon "/usr/share/cockpit/motd/update-motd" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/python-exec/python-exec2-c" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/xfce4/notifyd/xfce4-notifyd" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/reportbug/handle_bugscript" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/spamassassin/sa-update\.cron" any (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/postfix/configure-instance\.sh" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/gnucash/finance-quote-check" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/selinux/devel/policygentool" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/xfce4/exo-1/exo-compose-mail-1" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/gitolite/hooks/common/update" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/gnucash/finance-quote-helper" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/avahi/avahi-daemon-check-dns\.sh" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/xfce4/session/balou-export-theme" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/xfce4/session/balou-install-theme" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/GNUstep/Makefiles/mkinstalldirs" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/PackageKit/pk-upgrade-distro\.sh" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/system-config-printer/applet\.py" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/xfce4/session/xfsm-shutdown-helper" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/security/pam_krb5/pam_krb5_storetmp" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/nspluginwrapper/i386/linux/npviewer" file (system_u object_r shell_exec_t (systemlow systemlow)))
(filecon "/opt/vmware/workstation/lib/lib/wrapper-gtk24\.sh" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/lib/nspluginwrapper/i386/linux/npviewer\.bin" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/hal/device-manager/hal-device-manager" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/texlive/texmf-dist/scripts/yplan/yplan" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/gitolite/hooks/gitolite-admin/post-update" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/gnome-sound-recorder/org\.gnome\.SoundRecorder" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/texlive/texmf-dist/scripts/fontools/autoinst" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/org\.gnome\.Weather/org\.gnome\.Weather\.Application" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/texlive/texmf-dist/scripts/checkcites/checkcites\.lua" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/texlive/texmf-dist/scripts/match_parens/match_parens" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/org\.gnome\.Weather/org\.gnome\.Weather\.BackgroundService" file (system_u object_r bin_t (systemlow systemlow)))
(filecon "/usr/share/texlive/texmf-dist/scripts/checklistings/checklistings\.sh" file (system_u object_r bin_t (systemlow systemlow)))
