(typealias shutdown_var_run_t)
(typealiasactual shutdown_var_run_t shutdown_runtime_t)
(roleattribute shutdown_roles)
(roletype shutdown_roles shutdown_t)
(type shutdown_t)
(roletype object_r shutdown_t)
(type shutdown_exec_t)
(roletype object_r shutdown_exec_t)
(type shutdown_etc_t)
(roletype object_r shutdown_etc_t)
(type shutdown_runtime_t)
(roletype object_r shutdown_runtime_t)
(boolean shutdown_allow_user_exec_domains false)
(roleattributeset cil_gen_require system_r)
(roletype system_r shutdown_t)
(typeattributeset cil_gen_require initrc_t)
(typeattributeset cil_gen_require systemprocess)
(typeattributeset systemprocess (shutdown_t ))
(typeattributeset cil_gen_require application_domain_type)
(typeattributeset application_domain_type (shutdown_t ))
(typeattributeset cil_gen_require domain)
(typeattributeset domain (shutdown_t ))
(typeattributeset cil_gen_require init_t)
(typeattributeset cil_gen_require application_exec_type)
(typeattributeset application_exec_type (shutdown_exec_t ))
(typeattributeset cil_gen_require exec_type)
(typeattributeset exec_type (shutdown_exec_t ))
(typeattributeset cil_gen_require file_type)
(typeattributeset file_type (shutdown_exec_t shutdown_etc_t shutdown_runtime_t ))
(typeattributeset cil_gen_require non_security_file_type)
(typeattributeset non_security_file_type (shutdown_exec_t shutdown_etc_t shutdown_runtime_t ))
(typeattributeset cil_gen_require non_auth_file_type)
(typeattributeset non_auth_file_type (shutdown_exec_t shutdown_etc_t shutdown_runtime_t ))
(typeattributeset cil_gen_require entry_type)
(typeattributeset entry_type (shutdown_exec_t ))
(typeattributeset cil_gen_require configfile)
(typeattributeset configfile (shutdown_etc_t ))
(typeattributeset cil_gen_require pidfile)
(typeattributeset pidfile (shutdown_runtime_t ))
(typeattributeset cil_gen_require etc_t)
(typeattributeset cil_gen_require var_t)
(typeattributeset cil_gen_require var_run_t)
(typeattributeset cil_gen_require proc_t)
(typeattributeset cil_gen_require privfd)
(typeattributeset cil_gen_require root_t)
(typeattributeset cil_gen_require etc_runtime_t)
(typeattributeset cil_gen_require fs_t)
(typeattributeset cil_gen_require mlsfilewritetoclr)
(typeattributeset mlsfilewritetoclr (shutdown_t ))
(typeattributeset cil_gen_require ttynode)
(typeattributeset cil_gen_require ptynode)
(typeattributeset cil_gen_require console_device_t)
(typeattributeset cil_gen_require devpts_t)
(typeattributeset cil_gen_require tty_device_t)
(typeattributeset cil_gen_require device_t)
(typeattributeset cil_gen_require nsswitch_domain)
(typeattributeset nsswitch_domain (shutdown_t ))
(typeattributeset cil_gen_require wtmp_t)
(typeattributeset cil_gen_require init_random_seed_t)
(typeattributeset cil_gen_require var_lib_t)
(typeattributeset cil_gen_require initrc_runtime_t)
(typeattributeset cil_gen_require init_runtime_t)
(typeattributeset cil_gen_require initctl_t)
(typeattributeset cil_gen_require bin_t)
(typeattributeset cil_gen_require usr_t)
(typeattributeset cil_gen_require init_exec_t)
(typeattributeset cil_gen_require var_log_t)
(typeattributeset cil_gen_require syslogd_t)
(typeattributeset cil_gen_require syslogd_runtime_t)
(typeattributeset cil_gen_require devlog_t)
(typeattributeset cil_gen_require locale_t)
(allow shutdown_t shutdown_exec_t (file (entrypoint)))
(allow shutdown_t shutdown_exec_t (file (ioctl read getattr lock map execute open)))
(allow initrc_t shutdown_exec_t (file (ioctl read getattr map execute open)))
(allow initrc_t shutdown_t (process (transition)))
(dontaudit initrc_t shutdown_t (process (noatsecure siginh rlimitinh)))
(typetransition initrc_t shutdown_exec_t process shutdown_t)
(allow shutdown_t initrc_t (fd (use)))
(allow shutdown_t initrc_t (fifo_file (ioctl read write getattr lock append)))
(allow shutdown_t initrc_t (process (sigchld)))
(allow shutdown_t shutdown_exec_t (file (entrypoint)))
(allow shutdown_t shutdown_exec_t (file (ioctl read getattr lock map execute open)))
(allow shutdown_t self (capability (dac_override kill setuid sys_boot sys_nice sys_tty_config)))
(allow shutdown_t self (process (signull signal setsched)))
(allow shutdown_t self (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow shutdown_t self (unix_stream_socket (ioctl read write create getattr setattr append bind connect listen accept getopt setopt shutdown)))
(allow shutdown_t shutdown_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow shutdown_t shutdown_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow shutdown_t etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition shutdown_t etc_t file shutdown_etc_t)
(allow shutdown_t shutdown_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow shutdown_t shutdown_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow shutdown_t var_t (dir (getattr open search)))
(allow shutdown_t var_run_t (lnk_file (read getattr)))
(allow shutdown_t var_run_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition shutdown_t var_run_t file shutdown_runtime_t)
(allow shutdown_t proc_t (dir (getattr open search)))
(allow shutdown_t proc_t (file (ioctl read getattr lock open)))
(allow shutdown_t proc_t (dir (getattr open search)))
(allow shutdown_t proc_t (lnk_file (read getattr)))
(allow shutdown_t proc_t (dir (getattr open search)))
(allow shutdown_t proc_t (dir (ioctl read getattr lock open search)))
(allow shutdown_t domain (process (signal)))
(allow shutdown_t privfd (fd (use)))
(allow shutdown_t root_t (dir (ioctl write getattr lock open remove_name search)))
(allow shutdown_t etc_runtime_t (file (getattr unlink)))
(allow shutdown_t var_run_t (lnk_file (read getattr)))
(allow shutdown_t var_t (dir (getattr open search)))
(allow shutdown_t var_run_t (dir (ioctl read getattr lock open search)))
(allow shutdown_t var_run_t (dir (getattr open search)))
(allow shutdown_t var_run_t (file (ioctl read getattr lock open)))
(allow shutdown_t fs_t (filesystem (getattr)))
(allow shutdown_t device_t (dir (getattr open search)))
(allow shutdown_t device_t (dir (ioctl read getattr lock open search)))
(allow shutdown_t device_t (dir (getattr open search)))
(allow shutdown_t device_t (lnk_file (read getattr)))
(allow shutdown_t devpts_t (dir (ioctl read getattr lock open search)))
(allow shutdown_t ttynode (chr_file (ioctl read write getattr lock append open)))
(allow shutdown_t ptynode (chr_file (ioctl read write getattr lock append open)))
(allow shutdown_t console_device_t (chr_file (ioctl read write getattr lock append open)))
(allow shutdown_t devpts_t (chr_file (ioctl read write getattr lock append open)))
(allow shutdown_t tty_device_t (chr_file (ioctl read write getattr lock append open)))
(allow shutdown_t wtmp_t (file (ioctl write getattr lock append open)))
(allow shutdown_t var_lib_t (dir (getattr open search)))
(allow shutdown_t var_lib_t (dir (ioctl write getattr lock open add_name remove_name search)))
(allow shutdown_t var_run_t (dir (getattr open search)))
(allow shutdown_t var_run_t (dir (ioctl write getattr lock open add_name remove_name search)))
(allow shutdown_t init_random_seed_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow shutdown_t var_run_t (lnk_file (read getattr)))
(allow shutdown_t var_t (dir (getattr open search)))
(allow shutdown_t var_run_t (dir (ioctl read getattr lock open search)))
(allow shutdown_t initrc_runtime_t (file (ioctl read write getattr lock append open)))
(allow shutdown_t init_runtime_t (dir (getattr open search)))
(allow shutdown_t init_runtime_t (sock_file (write getattr append open)))
(allow shutdown_t init_t (unix_stream_socket (connectto)))
(allow shutdown_t var_run_t (lnk_file (read getattr)))
(allow shutdown_t var_t (dir (getattr open search)))
(allow shutdown_t var_run_t (dir (getattr open search)))
(allow shutdown_t init_t (unix_stream_socket (getattr)))
(allow shutdown_t init_t (dir (ioctl read getattr lock open search)))
(allow shutdown_t init_t (file (ioctl read getattr lock open)))
(allow shutdown_t init_t (lnk_file (read getattr)))
(allow shutdown_t init_t (process (getattr)))
(allow shutdown_t init_t (process (signal)))
(allow shutdown_t self (unix_dgram_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow shutdown_t init_t (unix_dgram_socket (sendto)))
(allow shutdown_t init_t (unix_stream_socket (connectto)))
(allow shutdown_t initctl_t (fifo_file (ioctl read write getattr lock append open)))
(allow shutdown_t bin_t (dir (getattr open search)))
(allow shutdown_t bin_t (lnk_file (read getattr)))
(allow shutdown_t usr_t (dir (getattr open search)))
(allow shutdown_t bin_t (dir (getattr open search)))
(allow shutdown_t bin_t (dir (ioctl read getattr lock open search)))
(allow shutdown_t bin_t (file (ioctl read getattr lock map execute open execute_no_trans)))
(allow shutdown_t device_t (dir (getattr open search)))
(allow shutdown_t device_t (dir (ioctl read getattr lock open search)))
(allow shutdown_t device_t (dir (getattr open search)))
(allow shutdown_t device_t (lnk_file (read getattr)))
(allow shutdown_t var_run_t (lnk_file (read getattr)))
(allow shutdown_t var_t (dir (getattr open search)))
(allow shutdown_t var_run_t (dir (getattr open search)))
(allow shutdown_t bin_t (dir (getattr open search)))
(allow shutdown_t bin_t (lnk_file (read getattr)))
(allow shutdown_t usr_t (dir (getattr open search)))
(allow shutdown_t init_exec_t (file (ioctl read getattr lock map execute open execute_no_trans)))
(allow shutdown_t var_t (dir (getattr open search)))
(allow shutdown_t var_log_t (dir (getattr open search)))
(allow shutdown_t var_log_t (lnk_file (read getattr)))
(allow shutdown_t self (capability (audit_write)))
(allow shutdown_t self (netlink_audit_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown nlmsg_read nlmsg_relay)))
(allow shutdown_t devlog_t (sock_file (write getattr append open)))
(allow shutdown_t var_run_t (lnk_file (read getattr)))
(allow shutdown_t var_t (dir (getattr open search)))
(allow shutdown_t var_run_t (dir (getattr open search)))
(allow shutdown_t init_runtime_t (dir (getattr open search)))
(allow shutdown_t syslogd_runtime_t (dir (getattr open search)))
(allow shutdown_t syslogd_t (unix_dgram_socket (sendto)))
(allow shutdown_t syslogd_t (unix_stream_socket (connectto)))
(allow shutdown_t self (unix_dgram_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow shutdown_t self (unix_stream_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow shutdown_t device_t (dir (getattr open search)))
(allow shutdown_t device_t (dir (ioctl read getattr lock open search)))
(allow shutdown_t device_t (dir (getattr open search)))
(allow shutdown_t device_t (lnk_file (read getattr)))
(allow shutdown_t console_device_t (chr_file (ioctl write getattr lock append open)))
(dontaudit shutdown_t console_device_t (chr_file (ioctl read getattr lock open)))
(allow shutdown_t etc_t (dir (getattr open search)))
(allow shutdown_t etc_t (lnk_file (read getattr)))
(allow shutdown_t usr_t (dir (getattr open search)))
(allow shutdown_t locale_t (dir (ioctl read getattr lock open search)))
(allow shutdown_t locale_t (dir (getattr open search)))
(allow shutdown_t locale_t (file (ioctl read getattr lock open)))
(allow shutdown_t locale_t (dir (getattr open search)))
(allow shutdown_t locale_t (lnk_file (read getattr)))
(allow shutdown_t locale_t (file (map)))
(optional shutdown_optional_2
    (typeattributeset cil_gen_require init_t)
    (allow shutdown_t init_t (process (sigchld)))
    (allow shutdown_t init_t (process (signull)))
    (optional shutdown_optional_3
        (typeattributeset cil_gen_require rpm_t)
        (allow shutdown_t rpm_t (fd (use)))
        (allow shutdown_t rpm_t (fifo_file (ioctl read getattr lock open)))
    )
    (optional shutdown_optional_4
        (typeattributeset cil_gen_require security_t)
        (typeattributeset cil_gen_require sysfs_t)
        (dontaudit shutdown_t security_t (filesystem (getattr)))
        (dontaudit shutdown_t sysfs_t (filesystem (getattr)))
        (dontaudit shutdown_t sysfs_t (dir (getattr open search)))
        (dontaudit shutdown_t security_t (dir (getattr open search)))
        (dontaudit shutdown_t security_t (file (ioctl read getattr lock open)))
    )
    (optional shutdown_optional_5
        (typeattributeset cil_gen_require selinux_config_t)
        (dontaudit shutdown_t selinux_config_t (dir (getattr open search)))
        (dontaudit shutdown_t selinux_config_t (file (ioctl read getattr lock open)))
    )
    (optional shutdown_optional_6
        (typeattributeset cil_gen_require init_t)
        (allow shutdown_t init_t (process (sigchld)))
        (allow shutdown_t init_t (process (signull)))
        (optional shutdown_optional_7
            (typeattributeset cil_gen_require rpm_t)
            (allow shutdown_t rpm_t (fd (use)))
            (allow shutdown_t rpm_t (fifo_file (ioctl read getattr lock open)))
        )
        (optional shutdown_optional_8
            (typeattributeset cil_gen_require security_t)
            (typeattributeset cil_gen_require sysfs_t)
            (dontaudit shutdown_t security_t (filesystem (getattr)))
            (dontaudit shutdown_t sysfs_t (filesystem (getattr)))
            (dontaudit shutdown_t sysfs_t (dir (getattr open search)))
            (dontaudit shutdown_t security_t (dir (getattr open search)))
            (dontaudit shutdown_t security_t (file (ioctl read getattr lock open)))
        )
        (optional shutdown_optional_9
            (typeattributeset cil_gen_require selinux_config_t)
            (dontaudit shutdown_t selinux_config_t (dir (getattr open search)))
            (dontaudit shutdown_t selinux_config_t (file (ioctl read getattr lock open)))
        )
        (optional shutdown_optional_10
            (typeattributeset cil_gen_require crond_t)
            (typeattributeset cil_gen_require system_cronjob_t)
            (roleattributeset cil_gen_require system_r)
            (roletype system_r shutdown_t)
            (allow system_cronjob_t shutdown_exec_t (file (ioctl read getattr map execute open)))
            (allow system_cronjob_t shutdown_t (process (transition)))
            (dontaudit system_cronjob_t shutdown_t (process (noatsecure siginh rlimitinh)))
            (typetransition system_cronjob_t shutdown_exec_t process shutdown_t)
            (allow shutdown_t system_cronjob_t (fd (use)))
            (allow shutdown_t system_cronjob_t (fifo_file (ioctl read write getattr lock append)))
            (allow shutdown_t system_cronjob_t (process (sigchld)))
            (allow crond_t shutdown_exec_t (file (ioctl read getattr map execute open)))
            (allow crond_t shutdown_t (process (transition)))
            (dontaudit crond_t shutdown_t (process (noatsecure siginh rlimitinh)))
            (typetransition crond_t shutdown_exec_t process shutdown_t)
            (allow shutdown_t crond_t (fd (use)))
            (allow shutdown_t crond_t (fifo_file (ioctl read write getattr lock append)))
            (allow shutdown_t crond_t (process (sigchld)))
        )
        (optional shutdown_optional_11
            (typeattributeset cil_gen_require var_t)
            (typeattributeset cil_gen_require var_run_t)
            (typeattributeset cil_gen_require var_lib_t)
            (typeattributeset cil_gen_require dbusd_system_bus_client)
            (typeattributeset cil_gen_require system_dbusd_t)
            (typeattributeset cil_gen_require system_dbusd_runtime_t)
            (typeattributeset cil_gen_require system_dbusd_var_lib_t)
            (typeattributeset cil_gen_require session_dbusd_tmp_t)
            (typeattributeset cil_gen_require dbusd_etc_t)
            (typeattributeset cil_gen_require dbusd_system_bus_client)
            (typeattributeset dbusd_system_bus_client (shutdown_t ))
            (allow shutdown_t system_dbusd_t (dbus (send_msg)))
            (allow shutdown_t self (dbus (send_msg)))
            (allow system_dbusd_t shutdown_t (dbus (send_msg)))
            (allow shutdown_t var_t (dir (getattr open search)))
            (allow shutdown_t var_lib_t (dir (getattr open search)))
            (allow shutdown_t system_dbusd_var_lib_t (dir (getattr open search)))
            (allow shutdown_t system_dbusd_var_lib_t (file (ioctl read getattr lock open)))
            (allow shutdown_t system_dbusd_var_lib_t (dir (getattr open search)))
            (allow shutdown_t system_dbusd_var_lib_t (lnk_file (read getattr)))
            (allow shutdown_t session_dbusd_tmp_t (dir (getattr open search)))
            (allow shutdown_t session_dbusd_tmp_t (sock_file (read write getattr append open)))
            (allow shutdown_t var_run_t (lnk_file (read getattr)))
            (allow shutdown_t var_t (dir (getattr open search)))
            (allow shutdown_t var_run_t (dir (getattr open search)))
            (allow shutdown_t system_dbusd_runtime_t (dir (getattr open search)))
            (allow shutdown_t system_dbusd_runtime_t (sock_file (write getattr append open)))
            (allow shutdown_t system_dbusd_t (unix_stream_socket (connectto)))
            (allow shutdown_t dbusd_etc_t (dir (ioctl read getattr lock open search)))
            (allow shutdown_t dbusd_etc_t (file (ioctl read getattr lock open)))
            (allow shutdown_t system_dbusd_runtime_t (dir (ioctl read getattr lock open search)))
            (allow shutdown_t system_dbusd_runtime_t (sock_file (read)))
            (allow shutdown_t system_dbusd_var_lib_t (dir (getattr open search)))
            (allow shutdown_t system_dbusd_var_lib_t (lnk_file (read getattr)))
            (allow shutdown_t system_dbusd_t (dbus (acquire_svc)))
        )
        (optional shutdown_optional_12
            (typeattributeset cil_gen_require oddjob_t)
            (dontaudit shutdown_t oddjob_t (fifo_file (ioctl read write getattr lock append open)))
            (allow shutdown_t oddjob_t (process (sigchld)))
        )
        (optional shutdown_optional_13
            (typeattributeset cil_gen_require xserver_log_t)
            (dontaudit shutdown_t xserver_log_t (file (ioctl write append)))
        )
    )
)
(filecon "/etc/nologin" file (system_u object_r shutdown_etc_t (systemlow systemlow)))
(filecon "/sbin/halt" file (system_u object_r shutdown_exec_t (systemlow systemlow)))
(filecon "/sbin/shutdown" file (system_u object_r shutdown_exec_t (systemlow systemlow)))
(filecon "/usr/lib/upstart/shutdown" file (system_u object_r shutdown_exec_t (systemlow systemlow)))
(filecon "/usr/sbin/halt" file (system_u object_r shutdown_exec_t (systemlow systemlow)))
(filecon "/usr/sbin/shutdown" file (system_u object_r shutdown_exec_t (systemlow systemlow)))
(filecon "/run/shutdown\.pid" file (system_u object_r shutdown_runtime_t (systemlow systemlow)))
(filecon "/usr/bin/halt" file (system_u object_r shutdown_exec_t (systemlow systemlow)))
(filecon "/usr/bin/shutdown" file (system_u object_r shutdown_exec_t (systemlow systemlow)))
