(typealias systemd_logind_var_run_t)
(typealiasactual systemd_logind_var_run_t systemd_logind_runtime_t)
(typealias systemd_logind_inhibit_var_run_t)
(typealiasactual systemd_logind_inhibit_var_run_t systemd_logind_inhibit_runtime_t)
(typealias systemd_resolved_var_run_t)
(typealiasactual systemd_resolved_var_run_t systemd_resolved_runtime_t)
(typealias systemd_machined_var_run_t)
(typealiasactual systemd_machined_var_run_t systemd_machined_runtime_t)
(typealias systemd_nspawn_var_run_t)
(typealiasactual systemd_nspawn_var_run_t systemd_nspawn_runtime_t)
(typealias systemd_passwd_var_run_t)
(typealiasactual systemd_passwd_var_run_t systemd_passwd_runtime_t)
(typealias systemd_userdb_runtime_t)
(typealiasactual systemd_userdb_runtime_t systemd_userdbd_runtime_t)
(typealias systemd_cgroups_var_run_t)
(typealiasactual systemd_cgroups_var_run_t systemd_cgroups_runtime_t)
(typealias systemd_sessions_var_run_t)
(typealiasactual systemd_sessions_var_run_t systemd_sessions_runtime_t)
(typealias systemd_networkd_var_run_t)
(typealiasactual systemd_networkd_var_run_t systemd_networkd_runtime_t)
(roleattribute systemd_sysusers_roles)
(roletype systemd_sysusers_roles systemd_sysusers_t)
(typeattribute systemd_log_parse_env_type)
(typeattributeset systemd_log_parse_env_type (systemd_analyze_t systemd_backlight_t systemd_binfmt_t systemd_cgroups_t systemd_generator_t systemd_homed_t systemd_homework_t systemd_hostnamed_t systemd_locale_t systemd_logind_t systemd_modules_load_t systemd_networkd_t systemd_nsresourced_t systemd_resolved_t systemd_rfkill_t systemd_sessions_t systemd_sysctl_t systemd_sysusers_t systemd_tmpfiles_t systemd_update_done_t systemd_user_runtime_dir_t systemd_userdbd_t ))
(typeattribute systemd_tmpfiles_conf_type)
(typeattributeset systemd_tmpfiles_conf_type (systemd_factory_conf_t ))
(typeattribute systemd_user_session_type)
(typeattribute systemd_user_activated_sock_file_type)
(typeattribute systemd_user_unix_stream_activated_socket_type)
(type systemd_activate_t)
(roletype object_r systemd_activate_t)
(type systemd_activate_exec_t)
(roletype object_r systemd_activate_exec_t)
(type systemd_analyze_t)
(roletype object_r systemd_analyze_t)
(type systemd_analyze_exec_t)
(roletype object_r systemd_analyze_exec_t)
(type systemd_backlight_t)
(roletype object_r systemd_backlight_t)
(type systemd_backlight_exec_t)
(roletype object_r systemd_backlight_exec_t)
(type systemd_backlight_unit_t)
(roletype object_r systemd_backlight_unit_t)
(type systemd_backlight_var_lib_t)
(roletype object_r systemd_backlight_var_lib_t)
(type systemd_binfmt_t)
(roletype object_r systemd_binfmt_t)
(type systemd_binfmt_exec_t)
(roletype object_r systemd_binfmt_exec_t)
(type systemd_binfmt_unit_t)
(roletype object_r systemd_binfmt_unit_t)
(type systemd_conf_t)
(roletype object_r systemd_conf_t)
(type systemd_cgroups_t)
(roletype object_r systemd_cgroups_t)
(type systemd_cgroups_exec_t)
(roletype object_r systemd_cgroups_exec_t)
(type systemd_cgroups_runtime_t)
(roletype object_r systemd_cgroups_runtime_t)
(type systemd_cgtop_t)
(roletype object_r systemd_cgtop_t)
(type systemd_cgtop_exec_t)
(roletype object_r systemd_cgtop_exec_t)
(type systemd_coredump_t)
(roletype object_r systemd_coredump_t)
(type systemd_coredump_exec_t)
(roletype object_r systemd_coredump_exec_t)
(type systemd_coredump_var_lib_t)
(roletype object_r systemd_coredump_var_lib_t)
(type systemd_factory_conf_t)
(roletype object_r systemd_factory_conf_t)
(type systemd_generator_t)
(roletype object_r systemd_generator_t)
(type systemd_generator_exec_t)
(roletype object_r systemd_generator_exec_t)
(type systemd_homed_t)
(roletype object_r systemd_homed_t)
(type systemd_homed_exec_t)
(roletype object_r systemd_homed_exec_t)
(type systemd_homework_t)
(roletype object_r systemd_homework_t)
(type systemd_homework_exec_t)
(roletype object_r systemd_homework_exec_t)
(type systemd_homed_record_t)
(roletype object_r systemd_homed_record_t)
(type systemd_homed_runtime_t)
(roletype object_r systemd_homed_runtime_t)
(type systemd_homed_runtime_work_dir_t)
(roletype object_r systemd_homed_runtime_work_dir_t)
(type systemd_homed_storage_t)
(roletype object_r systemd_homed_storage_t)
(type systemd_homed_tmpfs_t)
(roletype object_r systemd_homed_tmpfs_t)
(type systemd_homed_var_lib_t)
(roletype object_r systemd_homed_var_lib_t)
(type systemd_hostnamed_t)
(roletype object_r systemd_hostnamed_t)
(type systemd_hostnamed_exec_t)
(roletype object_r systemd_hostnamed_exec_t)
(type systemd_hw_t)
(roletype object_r systemd_hw_t)
(type systemd_hw_exec_t)
(roletype object_r systemd_hw_exec_t)
(type systemd_hwdb_t)
(roletype object_r systemd_hwdb_t)
(type systemd_journal_t)
(roletype object_r systemd_journal_t)
(type systemd_journal_init_t)
(roletype object_r systemd_journal_init_t)
(type systemd_journalctl_exec_t)
(roletype object_r systemd_journalctl_exec_t)
(type systemd_locale_t)
(roletype object_r systemd_locale_t)
(type systemd_locale_exec_t)
(roletype object_r systemd_locale_exec_t)
(type systemd_log_t)
(roletype object_r systemd_log_t)
(type systemd_logind_t)
(roletype object_r systemd_logind_t)
(type systemd_logind_exec_t)
(roletype object_r systemd_logind_exec_t)
(type systemd_logind_inhibit_runtime_t)
(roletype object_r systemd_logind_inhibit_runtime_t)
(type systemd_logind_runtime_t)
(roletype object_r systemd_logind_runtime_t)
(type systemd_logind_var_lib_t)
(roletype object_r systemd_logind_var_lib_t)
(type systemd_machined_t)
(roletype object_r systemd_machined_t)
(type systemd_machined_exec_t)
(roletype object_r systemd_machined_exec_t)
(type systemd_machined_devpts_t)
(roletype object_r systemd_machined_devpts_t)
(type systemd_machined_runtime_t)
(roletype object_r systemd_machined_runtime_t)
(type systemd_machine_id_setup_t)
(roletype object_r systemd_machine_id_setup_t)
(type systemd_machine_id_setup_exec_t)
(roletype object_r systemd_machine_id_setup_exec_t)
(type systemd_modules_load_t)
(roletype object_r systemd_modules_load_t)
(type systemd_modules_load_exec_t)
(roletype object_r systemd_modules_load_exec_t)
(type systemd_networkd_t)
(roletype object_r systemd_networkd_t)
(type systemd_networkd_exec_t)
(roletype object_r systemd_networkd_exec_t)
(type systemd_networkd_runtime_t)
(roletype object_r systemd_networkd_runtime_t)
(type systemd_networkd_unit_t)
(roletype object_r systemd_networkd_unit_t)
(type systemd_networkd_var_lib_t)
(roletype object_r systemd_networkd_var_lib_t)
(type systemd_notify_t)
(roletype object_r systemd_notify_t)
(type systemd_notify_exec_t)
(roletype object_r systemd_notify_exec_t)
(type systemd_nspawn_t)
(roletype object_r systemd_nspawn_t)
(type systemd_nspawn_exec_t)
(roletype object_r systemd_nspawn_exec_t)
(type systemd_nspawn_runtime_t)
(roletype object_r systemd_nspawn_runtime_t)
(type systemd_nspawn_tmp_t)
(roletype object_r systemd_nspawn_tmp_t)
(type systemd_nsresourced_t)
(roletype object_r systemd_nsresourced_t)
(type systemd_nsresourced_exec_t)
(roletype object_r systemd_nsresourced_exec_t)
(type systemd_nsresourced_runtime_t)
(roletype object_r systemd_nsresourced_runtime_t)
(type systemd_pcrphase_t)
(roletype object_r systemd_pcrphase_t)
(type systemd_pcrphase_exec_t)
(roletype object_r systemd_pcrphase_exec_t)
(type systemd_pstore_t)
(roletype object_r systemd_pstore_t)
(type systemd_pstore_exec_t)
(roletype object_r systemd_pstore_exec_t)
(type systemd_pstore_var_lib_t)
(roletype object_r systemd_pstore_var_lib_t)
(type systemd_resolved_t)
(roletype object_r systemd_resolved_t)
(type systemd_resolved_exec_t)
(roletype object_r systemd_resolved_exec_t)
(type systemd_resolved_runtime_t)
(roletype object_r systemd_resolved_runtime_t)
(type systemd_stdio_bridge_t)
(roletype object_r systemd_stdio_bridge_t)
(type systemd_stdio_bridge_exec_t)
(roletype object_r systemd_stdio_bridge_exec_t)
(type systemd_passwd_agent_t)
(roletype object_r systemd_passwd_agent_t)
(type systemd_passwd_agent_exec_t)
(roletype object_r systemd_passwd_agent_exec_t)
(type systemd_passwd_runtime_t)
(roletype object_r systemd_passwd_runtime_t)
(type systemd_rfkill_t)
(roletype object_r systemd_rfkill_t)
(type systemd_rfkill_exec_t)
(roletype object_r systemd_rfkill_exec_t)
(type systemd_rfkill_unit_t)
(roletype object_r systemd_rfkill_unit_t)
(type systemd_rfkill_var_lib_t)
(roletype object_r systemd_rfkill_var_lib_t)
(type systemd_sessions_t)
(roletype object_r systemd_sessions_t)
(type systemd_sessions_exec_t)
(roletype object_r systemd_sessions_exec_t)
(type systemd_sessions_runtime_t)
(roletype object_r systemd_sessions_runtime_t)
(type systemd_socket_proxyd_t)
(roletype object_r systemd_socket_proxyd_t)
(type systemd_socket_proxyd_exec_t)
(roletype object_r systemd_socket_proxyd_exec_t)
(type systemd_socket_proxyd_port_t)
(roletype object_r systemd_socket_proxyd_port_t)
(type systemd_socket_proxyd_unit_file_t)
(roletype object_r systemd_socket_proxyd_unit_file_t)
(type systemd_sysctl_t)
(roletype object_r systemd_sysctl_t)
(type systemd_sysctl_exec_t)
(roletype object_r systemd_sysctl_exec_t)
(type systemd_sysusers_t)
(roletype object_r systemd_sysusers_t)
(type systemd_sysusers_exec_t)
(roletype object_r systemd_sysusers_exec_t)
(type systemd_tmpfiles_t)
(roletype object_r systemd_tmpfiles_t)
(type systemd_tmpfiles_exec_t)
(roletype object_r systemd_tmpfiles_exec_t)
(type systemd_tmpfiles_conf_t)
(roletype object_r systemd_tmpfiles_conf_t)
(type systemd_update_done_t)
(roletype object_r systemd_update_done_t)
(type systemd_update_done_exec_t)
(roletype object_r systemd_update_done_exec_t)
(type systemd_update_run_t)
(roletype object_r systemd_update_run_t)
(type systemd_user_manager_unit_t)
(roletype object_r systemd_user_manager_unit_t)
(type systemd_conf_home_t)
(roletype object_r systemd_conf_home_t)
(type systemd_data_home_t)
(roletype object_r systemd_data_home_t)
(type systemd_user_runtime_notify_t)
(roletype object_r systemd_user_runtime_notify_t)
(type systemd_runtime_notify_t)
(roletype object_r systemd_runtime_notify_t)
(type systemd_user_runtime_t)
(roletype object_r systemd_user_runtime_t)
(type systemd_user_runtime_dir_t)
(roletype object_r systemd_user_runtime_dir_t)
(type systemd_user_runtime_dir_exec_t)
(roletype object_r systemd_user_runtime_dir_exec_t)
(type systemd_user_tmpfs_t)
(roletype object_r systemd_user_tmpfs_t)
(type systemd_userdbd_t)
(roletype object_r systemd_userdbd_t)
(type systemd_userdbd_exec_t)
(roletype object_r systemd_userdbd_exec_t)
(type systemd_userdbd_runtime_t)
(roletype object_r systemd_userdbd_runtime_t)
(type systemd_userdbd_unit_t)
(roletype object_r systemd_userdbd_unit_t)
(type systemd_user_unit_t)
(roletype object_r systemd_user_unit_t)
(type systemd_user_runtime_unit_t)
(roletype object_r systemd_user_runtime_unit_t)
(type systemd_user_transient_unit_t)
(roletype object_r systemd_user_transient_unit_t)
(type power_unit_t)
(roletype object_r power_unit_t)
(boolean systemd_tmpfiles_manage_all false)
(boolean systemd_networkd_dhcp_server false)
(boolean systemd_nspawn_labeled_namespace false)
(boolean systemd_logind_get_bootloader false)
(boolean systemd_socket_proxyd_bind_any false)
(boolean systemd_socket_proxyd_connect_any false)
(roleattributeset cil_gen_require system_r)
(roletype system_r systemd_activate_t)
(roletype system_r systemd_analyze_t)
(roletype system_r systemd_backlight_t)
(roletype system_r systemd_binfmt_t)
(roletype system_r systemd_cgroups_t)
(roletype system_r systemd_cgtop_t)
(roletype system_r systemd_coredump_t)
(roletype system_r systemd_generator_t)
(roletype system_r systemd_homed_t)
(roletype system_r systemd_homework_t)
(roletype system_r systemd_hostnamed_t)
(roletype system_r systemd_hw_t)
(roletype system_r systemd_journal_init_t)
(roletype system_r systemd_locale_t)
(roletype system_r systemd_logind_t)
(roletype system_r systemd_machined_t)
(roletype system_r systemd_machine_id_setup_t)
(roletype system_r systemd_modules_load_t)
(roletype system_r systemd_networkd_t)
(roletype system_r systemd_notify_t)
(roletype system_r systemd_nspawn_t)
(roletype system_r systemd_nsresourced_t)
(roletype system_r systemd_pcrphase_t)
(roletype system_r systemd_pstore_t)
(roletype system_r systemd_resolved_t)
(roletype system_r systemd_stdio_bridge_t)
(roletype system_r systemd_passwd_agent_t)
(roletype system_r systemd_rfkill_t)
(roletype system_r systemd_sessions_t)
(roletype system_r systemd_socket_proxyd_t)
(roletype system_r systemd_sysctl_t)
(roletype system_r systemd_sysusers_t)
(roletype system_r systemd_tmpfiles_t)
(roletype system_r systemd_update_done_t)
(roletype system_r systemd_user_runtime_dir_t)
(roletype system_r systemd_userdbd_t)
(typeattributeset cil_gen_require systemd_log_parse_env_type)
(typeattributeset systemd_log_parse_env_type (systemd_analyze_t systemd_backlight_t systemd_binfmt_t systemd_cgroups_t systemd_generator_t systemd_homed_t systemd_homework_t systemd_hostnamed_t systemd_locale_t systemd_logind_t systemd_modules_load_t systemd_networkd_t systemd_nsresourced_t systemd_resolved_t systemd_rfkill_t systemd_sessions_t systemd_sysctl_t systemd_sysusers_t systemd_tmpfiles_t systemd_update_done_t systemd_user_runtime_dir_t systemd_userdbd_t ))
(typeattributeset cil_gen_require systemd_tmpfiles_conf_type)
(typeattributeset systemd_tmpfiles_conf_type (systemd_factory_conf_t ))
(typeattributeset cil_gen_require initrc_t)
(typeattributeset cil_gen_require systemprocess)
(typeattributeset systemprocess (systemd_activate_t systemd_backlight_t systemd_binfmt_t systemd_coredump_t systemd_generator_t systemd_hw_t systemd_journal_init_t systemd_locale_t systemd_machine_id_setup_t systemd_nspawn_t systemd_pcrphase_t systemd_pstore_t systemd_stdio_bridge_t systemd_passwd_agent_t systemd_sessions_t systemd_sysusers_t systemd_update_done_t systemd_user_runtime_dir_t ))
(typeattributeset cil_gen_require application_domain_type)
(typeattributeset application_domain_type (systemd_activate_t systemd_backlight_t systemd_binfmt_t systemd_coredump_t systemd_generator_t systemd_hw_t systemd_journal_init_t systemd_locale_t systemd_machine_id_setup_t systemd_nspawn_t systemd_pcrphase_t systemd_pstore_t systemd_stdio_bridge_t systemd_passwd_agent_t systemd_sessions_t systemd_sysusers_t systemd_update_done_t systemd_user_runtime_dir_t ))
(typeattributeset cil_gen_require domain)
(typeattributeset domain (systemd_activate_t systemd_analyze_t systemd_backlight_t systemd_binfmt_t systemd_cgroups_t systemd_cgtop_t systemd_coredump_t systemd_generator_t systemd_homed_t systemd_homework_t systemd_hostnamed_t systemd_hw_t systemd_journal_init_t systemd_locale_t systemd_logind_t systemd_machined_t systemd_machine_id_setup_t systemd_modules_load_t systemd_networkd_t systemd_notify_t systemd_nspawn_t systemd_nsresourced_t systemd_pcrphase_t systemd_pstore_t systemd_resolved_t systemd_stdio_bridge_t systemd_passwd_agent_t systemd_rfkill_t systemd_sessions_t systemd_socket_proxyd_t systemd_sysctl_t systemd_sysusers_t systemd_tmpfiles_t systemd_update_done_t systemd_user_runtime_dir_t systemd_userdbd_t ))
(typeattributeset cil_gen_require init_t)
(typeattributeset cil_gen_require security_t)
(typeattributeset cil_gen_require sysfs_t)
(typeattributeset cil_gen_require selinux_config_t)
(typeattributeset cil_gen_require application_exec_type)
(typeattributeset application_exec_type (systemd_activate_exec_t systemd_backlight_exec_t systemd_binfmt_exec_t systemd_coredump_exec_t systemd_generator_exec_t systemd_hw_exec_t systemd_journalctl_exec_t systemd_locale_exec_t systemd_machine_id_setup_exec_t systemd_nspawn_exec_t systemd_pcrphase_exec_t systemd_pstore_exec_t systemd_stdio_bridge_exec_t systemd_passwd_agent_exec_t systemd_sessions_exec_t systemd_sysusers_exec_t systemd_update_done_exec_t systemd_user_runtime_dir_exec_t ))
(typeattributeset cil_gen_require exec_type)
(typeattributeset exec_type (systemd_activate_exec_t systemd_analyze_exec_t systemd_backlight_exec_t systemd_binfmt_exec_t systemd_cgroups_exec_t systemd_cgtop_exec_t systemd_coredump_exec_t systemd_generator_exec_t systemd_homed_exec_t systemd_homework_exec_t systemd_hostnamed_exec_t systemd_hw_exec_t systemd_journalctl_exec_t systemd_locale_exec_t systemd_logind_exec_t systemd_machined_exec_t systemd_machine_id_setup_exec_t systemd_modules_load_exec_t systemd_networkd_exec_t systemd_notify_exec_t systemd_nspawn_exec_t systemd_nsresourced_exec_t systemd_pcrphase_exec_t systemd_pstore_exec_t systemd_resolved_exec_t systemd_stdio_bridge_exec_t systemd_passwd_agent_exec_t systemd_rfkill_exec_t systemd_sessions_exec_t systemd_socket_proxyd_exec_t systemd_sysctl_exec_t systemd_sysusers_exec_t systemd_tmpfiles_exec_t systemd_update_done_exec_t systemd_user_runtime_dir_exec_t systemd_userdbd_exec_t bin_t shell_exec_t ))
(typeattributeset cil_gen_require file_type)
(typeattributeset file_type (systemd_activate_exec_t systemd_analyze_exec_t systemd_backlight_exec_t systemd_backlight_unit_t systemd_backlight_var_lib_t systemd_binfmt_exec_t systemd_binfmt_unit_t systemd_conf_t systemd_cgroups_exec_t systemd_cgroups_runtime_t systemd_cgtop_exec_t systemd_coredump_exec_t systemd_coredump_var_lib_t systemd_factory_conf_t systemd_generator_exec_t systemd_homed_exec_t systemd_homework_exec_t systemd_homed_record_t systemd_homed_runtime_t systemd_homed_runtime_work_dir_t systemd_homed_storage_t systemd_homed_tmpfs_t systemd_homed_var_lib_t systemd_hostnamed_exec_t systemd_hw_exec_t systemd_hwdb_t systemd_journal_t systemd_journalctl_exec_t systemd_locale_exec_t systemd_log_t systemd_logind_exec_t systemd_logind_inhibit_runtime_t systemd_logind_runtime_t systemd_logind_var_lib_t systemd_machined_exec_t systemd_machined_runtime_t systemd_machine_id_setup_exec_t systemd_modules_load_exec_t systemd_networkd_exec_t systemd_networkd_runtime_t systemd_networkd_unit_t systemd_networkd_var_lib_t systemd_notify_exec_t systemd_nspawn_exec_t systemd_nspawn_runtime_t systemd_nspawn_tmp_t systemd_nsresourced_exec_t systemd_nsresourced_runtime_t systemd_pcrphase_exec_t systemd_pstore_exec_t systemd_pstore_var_lib_t systemd_resolved_exec_t systemd_resolved_runtime_t systemd_stdio_bridge_exec_t systemd_passwd_agent_exec_t systemd_passwd_runtime_t systemd_rfkill_exec_t systemd_rfkill_unit_t systemd_rfkill_var_lib_t systemd_sessions_exec_t systemd_sessions_runtime_t systemd_socket_proxyd_exec_t systemd_socket_proxyd_unit_file_t systemd_sysctl_exec_t systemd_sysusers_exec_t systemd_tmpfiles_exec_t systemd_tmpfiles_conf_t systemd_update_done_exec_t systemd_update_run_t systemd_user_manager_unit_t systemd_conf_home_t systemd_data_home_t systemd_user_runtime_notify_t systemd_runtime_notify_t systemd_user_runtime_t systemd_user_runtime_dir_exec_t systemd_user_tmpfs_t systemd_userdbd_exec_t systemd_userdbd_runtime_t systemd_userdbd_unit_t systemd_user_unit_t systemd_user_runtime_unit_t systemd_user_transient_unit_t power_unit_t bin_t shell_exec_t ))
(typeattributeset cil_gen_require non_security_file_type)
(typeattributeset non_security_file_type (systemd_activate_exec_t systemd_analyze_exec_t systemd_backlight_exec_t systemd_backlight_unit_t systemd_backlight_var_lib_t systemd_binfmt_exec_t systemd_binfmt_unit_t systemd_conf_t systemd_cgroups_exec_t systemd_cgroups_runtime_t systemd_cgtop_exec_t systemd_coredump_exec_t systemd_coredump_var_lib_t systemd_factory_conf_t systemd_generator_exec_t systemd_homed_exec_t systemd_homework_exec_t systemd_homed_runtime_t systemd_homed_runtime_work_dir_t systemd_homed_storage_t systemd_homed_tmpfs_t systemd_homed_var_lib_t systemd_hostnamed_exec_t systemd_hw_exec_t systemd_hwdb_t systemd_journal_t systemd_journalctl_exec_t systemd_locale_exec_t systemd_log_t systemd_logind_exec_t systemd_logind_inhibit_runtime_t systemd_logind_runtime_t systemd_logind_var_lib_t systemd_machined_exec_t systemd_machined_runtime_t systemd_machine_id_setup_exec_t systemd_modules_load_exec_t systemd_networkd_exec_t systemd_networkd_runtime_t systemd_networkd_unit_t systemd_networkd_var_lib_t systemd_notify_exec_t systemd_nspawn_exec_t systemd_nspawn_runtime_t systemd_nspawn_tmp_t systemd_nsresourced_exec_t systemd_nsresourced_runtime_t systemd_pcrphase_exec_t systemd_pstore_exec_t systemd_pstore_var_lib_t systemd_resolved_exec_t systemd_resolved_runtime_t systemd_stdio_bridge_exec_t systemd_passwd_agent_exec_t systemd_passwd_runtime_t systemd_rfkill_exec_t systemd_rfkill_unit_t systemd_rfkill_var_lib_t systemd_sessions_exec_t systemd_sessions_runtime_t systemd_socket_proxyd_exec_t systemd_socket_proxyd_unit_file_t systemd_sysctl_exec_t systemd_sysusers_exec_t systemd_tmpfiles_exec_t systemd_tmpfiles_conf_t systemd_update_done_exec_t systemd_update_run_t systemd_user_manager_unit_t systemd_conf_home_t systemd_data_home_t systemd_user_runtime_notify_t systemd_runtime_notify_t systemd_user_runtime_t systemd_user_runtime_dir_exec_t systemd_user_tmpfs_t systemd_userdbd_exec_t systemd_userdbd_runtime_t systemd_userdbd_unit_t systemd_user_unit_t systemd_user_runtime_unit_t systemd_user_transient_unit_t power_unit_t bin_t shell_exec_t ))
(typeattributeset cil_gen_require non_auth_file_type)
(typeattributeset non_auth_file_type (systemd_activate_exec_t systemd_analyze_exec_t systemd_backlight_exec_t systemd_backlight_unit_t systemd_backlight_var_lib_t systemd_binfmt_exec_t systemd_binfmt_unit_t systemd_conf_t systemd_cgroups_exec_t systemd_cgroups_runtime_t systemd_cgtop_exec_t systemd_coredump_exec_t systemd_coredump_var_lib_t systemd_factory_conf_t systemd_generator_exec_t systemd_homed_exec_t systemd_homework_exec_t systemd_homed_runtime_t systemd_homed_runtime_work_dir_t systemd_homed_storage_t systemd_homed_tmpfs_t systemd_homed_var_lib_t systemd_hostnamed_exec_t systemd_hw_exec_t systemd_hwdb_t systemd_journal_t systemd_journalctl_exec_t systemd_locale_exec_t systemd_log_t systemd_logind_exec_t systemd_logind_inhibit_runtime_t systemd_logind_runtime_t systemd_logind_var_lib_t systemd_machined_exec_t systemd_machined_runtime_t systemd_machine_id_setup_exec_t systemd_modules_load_exec_t systemd_networkd_exec_t systemd_networkd_runtime_t systemd_networkd_unit_t systemd_networkd_var_lib_t systemd_notify_exec_t systemd_nspawn_exec_t systemd_nspawn_runtime_t systemd_nspawn_tmp_t systemd_nsresourced_exec_t systemd_nsresourced_runtime_t systemd_pcrphase_exec_t systemd_pstore_exec_t systemd_pstore_var_lib_t systemd_resolved_exec_t systemd_resolved_runtime_t systemd_stdio_bridge_exec_t systemd_passwd_agent_exec_t systemd_passwd_runtime_t systemd_rfkill_exec_t systemd_rfkill_unit_t systemd_rfkill_var_lib_t systemd_sessions_exec_t systemd_sessions_runtime_t systemd_socket_proxyd_exec_t systemd_socket_proxyd_unit_file_t systemd_sysctl_exec_t systemd_sysusers_exec_t systemd_tmpfiles_exec_t systemd_tmpfiles_conf_t systemd_update_done_exec_t systemd_update_run_t systemd_user_manager_unit_t systemd_conf_home_t systemd_data_home_t systemd_user_runtime_notify_t systemd_runtime_notify_t systemd_user_runtime_t systemd_user_runtime_dir_exec_t systemd_user_tmpfs_t systemd_userdbd_exec_t systemd_userdbd_runtime_t systemd_userdbd_unit_t systemd_user_unit_t systemd_user_runtime_unit_t systemd_user_transient_unit_t power_unit_t bin_t shell_exec_t ))
(typeattributeset cil_gen_require entry_type)
(typeattributeset entry_type (systemd_activate_exec_t systemd_analyze_exec_t systemd_backlight_exec_t systemd_binfmt_exec_t systemd_cgroups_exec_t systemd_cgtop_exec_t systemd_coredump_exec_t systemd_generator_exec_t systemd_homed_exec_t systemd_homework_exec_t systemd_hostnamed_exec_t systemd_hw_exec_t systemd_journalctl_exec_t systemd_locale_exec_t systemd_logind_exec_t systemd_machined_exec_t systemd_machine_id_setup_exec_t systemd_modules_load_exec_t systemd_networkd_exec_t systemd_notify_exec_t systemd_nspawn_exec_t systemd_nsresourced_exec_t systemd_pcrphase_exec_t systemd_pstore_exec_t systemd_resolved_exec_t systemd_stdio_bridge_exec_t systemd_passwd_agent_exec_t systemd_rfkill_exec_t systemd_sessions_exec_t systemd_socket_proxyd_exec_t systemd_sysctl_exec_t systemd_sysusers_exec_t systemd_tmpfiles_exec_t systemd_update_done_exec_t systemd_user_runtime_dir_exec_t systemd_userdbd_exec_t bin_t shell_exec_t ))
(typeattributeset cil_gen_require daemon)
(typeattributeset daemon (systemd_analyze_t systemd_cgtop_t systemd_homed_t systemd_hostnamed_t systemd_logind_t systemd_machined_t systemd_modules_load_t systemd_networkd_t systemd_notify_t systemd_nsresourced_t systemd_resolved_t systemd_rfkill_t systemd_socket_proxyd_t systemd_sysctl_t systemd_tmpfiles_t systemd_userdbd_t ))
(typeattributeset cil_gen_require systemdunit)
(typeattributeset systemdunit (systemd_backlight_unit_t systemd_binfmt_unit_t systemd_networkd_unit_t systemd_rfkill_unit_t systemd_socket_proxyd_unit_file_t systemd_user_manager_unit_t systemd_conf_home_t systemd_userdbd_unit_t systemd_user_unit_t systemd_user_runtime_unit_t systemd_user_transient_unit_t power_unit_t ))
(typeattributeset cil_gen_require configfile)
(typeattributeset configfile (systemd_conf_t systemd_factory_conf_t systemd_tmpfiles_conf_t ))
(typeattributeset cil_gen_require pidfile)
(typeattributeset pidfile (systemd_cgroups_runtime_t systemd_homed_runtime_t systemd_homed_runtime_work_dir_t systemd_logind_inhibit_runtime_t systemd_logind_runtime_t systemd_machined_runtime_t systemd_networkd_runtime_t systemd_nspawn_runtime_t systemd_nsresourced_runtime_t systemd_resolved_runtime_t systemd_passwd_runtime_t systemd_sessions_runtime_t systemd_runtime_notify_t systemd_userdbd_runtime_t ))
(typeattributeset cil_gen_require daemonpidfile)
(typeattributeset daemonpidfile (systemd_cgroups_runtime_t systemd_logind_runtime_t systemd_machined_runtime_t systemd_sessions_runtime_t ))
(typeattributeset cil_gen_require var_t)
(typeattributeset cil_gen_require var_run_t)
(typeattributeset cil_gen_require security_file_type)
(typeattributeset security_file_type (systemd_homed_record_t ))
(typeattributeset cil_gen_require auth_file_type)
(typeattributeset auth_file_type (systemd_homed_record_t ))
(typeattributeset cil_gen_require mountpoint)
(typeattributeset mountpoint (systemd_homed_runtime_work_dir_t ))
(typeattributeset cil_gen_require init_mountpoint_type)
(typeattributeset init_mountpoint_type (systemd_logind_inhibit_runtime_t systemd_logind_runtime_t systemd_logind_var_lib_t systemd_networkd_runtime_t systemd_sessions_runtime_t ))
(typeattributeset cil_gen_require tmpfsfile)
(typeattributeset tmpfsfile (systemd_homed_tmpfs_t systemd_user_tmpfs_t ))
(typeattributeset cil_gen_require logfile)
(typeattributeset logfile (systemd_journal_t systemd_log_t ))
(typeattributeset cil_gen_require tmp_t)
(typeattributeset cil_gen_require tmpfs_t)
(typeattributeset cil_gen_require systemd_log_t)
(typeattributeset cil_gen_require systemd_logind_t)
(typeattributeset cil_gen_require var_lib_t)
(typeattributeset cil_gen_require userdomain)
(typeattributeset cil_gen_require proc_t)
(typeattributeset cil_gen_require server_ptynode)
(typeattributeset server_ptynode (systemd_machined_devpts_t ))
(typeattributeset cil_gen_require ptynode)
(typeattributeset ptynode (systemd_machined_devpts_t ))
(typeattributeset cil_gen_require devpts_t)
(typeattributeset cil_gen_require device_node)
(typeattributeset device_node (systemd_machined_devpts_t ))
(typeattributeset cil_gen_require systemd_networkd_runtime_t)
(typeattributeset cil_gen_require tmpfile)
(typeattributeset tmpfile (systemd_nspawn_tmp_t ))
(typeattributeset cil_gen_require polymember)
(typeattributeset polymember (systemd_nspawn_tmp_t systemd_data_home_t ))
(typeattributeset cil_gen_require systemd_nsresourced_t)
(typeattributeset cil_gen_require systemd_nsresourced_runtime_t)
(typeattributeset cil_gen_require init_path_unit_loc_type)
(typeattributeset init_path_unit_loc_type (systemd_passwd_runtime_t ))
(typeattributeset cil_gen_require port_type)
(typeattributeset port_type (systemd_socket_proxyd_port_t ))
(typeattributeset cil_gen_require can_change_object_identity)
(typeattributeset can_change_object_identity (systemd_logind_t systemd_sysusers_t systemd_tmpfiles_t systemd_user_runtime_dir_t ))
(typeattributeset cil_gen_require user_home_content_type)
(typeattributeset user_home_content_type (systemd_data_home_t ))
(typeattributeset cil_gen_require user_home_t)
(typeattributeset cil_gen_require ubac_constrained_type)
(typeattributeset ubac_constrained_type (systemd_data_home_t systemd_user_runtime_notify_t systemd_user_runtime_t systemd_user_tmpfs_t systemd_user_runtime_unit_t systemd_user_transient_unit_t ))
(typeattributeset cil_gen_require user_runtime_content_type)
(typeattributeset user_runtime_content_type (systemd_user_runtime_notify_t systemd_user_runtime_t systemd_user_runtime_unit_t systemd_user_transient_unit_t ))
(typeattributeset cil_gen_require power_unit_t)
(typeattributeset cil_gen_require etc_t)
(typeattributeset cil_gen_require init_runtime_t)
(typeattributeset cil_gen_require init_script_file_type)
(typeattributeset cil_gen_require sysctl_t)
(typeattributeset cil_gen_require sysctl_kernel_t)
(typeattributeset cil_gen_require locale_t)
(typeattributeset cil_gen_require usr_t)
(typeattributeset cil_gen_require user_devpts_t)
(typeattributeset cil_gen_require user_tty_device_t)
(typeattributeset cil_gen_require device_t)
(typeattributeset cil_gen_require init_var_lib_t)
(typeattributeset cil_gen_require udev_runtime_t)
(typeattributeset cil_gen_require filesystem_type)
(typeattributeset cil_gen_require cgroup_types)
(typeattributeset cil_gen_require binfmt_misc_fs_t)
(typeattributeset cil_gen_require sysctl_fs_t)
(typeattributeset cil_gen_require nsfs_t)
(typeattributeset cil_gen_require kernel_t)
(typeattributeset cil_gen_require mlsfduse)
(typeattributeset mlsfduse (systemd_cgroups_t ))
(typeattributeset cil_gen_require bin_t)
(typeattributeset cil_gen_require kmsg_device_t)
(typeattributeset cil_gen_require root_t)
(typeattributeset cil_gen_require syslogd_t)
(typeattributeset cil_gen_require syslogd_runtime_t)
(typeattributeset cil_gen_require devlog_t)
(typeattributeset cil_gen_require console_device_t)
(typeattributeset cil_gen_require default_context_t)
(typeattributeset cil_gen_require shell_exec_t)
(typeattributeset cil_gen_require urandom_device_t)
(typeattributeset cil_gen_require vsock_device_t)
(typeattributeset cil_gen_require etc_runtime_t)
(typeattributeset cil_gen_require boot_t)
(typeattributeset cil_gen_require efivarfs_t)
(typeattributeset cil_gen_require systemd_unit_t)
(typeattributeset cil_gen_require initrc_exec_t)
(typeattributeset cil_gen_require unlabeled_t)
(typeattributeset cil_gen_require kmod_t)
(typeattributeset cil_gen_require kmod_exec_t)
(typeattributeset cil_gen_require fixed_disk_raw_read)
(typeattributeset fixed_disk_raw_read (systemd_generator_t systemd_homework_t systemd_logind_t systemd_tmpfiles_t ))
(typeattributeset cil_gen_require fixed_disk_device_t)
(typeattributeset cil_gen_require fixed_disk_raw_write)
(typeattributeset fixed_disk_raw_write (systemd_generator_t systemd_homework_t systemd_tmpfiles_t ))
(typeattributeset cil_gen_require removable_device_t)
(typeattributeset cil_gen_require netlabel_peer_t)
(typeattributeset cil_gen_require netif_t)
(typeattributeset cil_gen_require node_t)
(typeattributeset cil_gen_require dns_port_t)
(typeattributeset cil_gen_require dns_client_packet_t)
(typeattributeset cil_gen_require net_conf_t)
(typeattributeset cil_gen_require tty_device_t)
(typeattributeset cil_gen_require fsadm_exec_t)
(typeattributeset cil_gen_require home_root_t)
(typeattributeset cil_gen_require fs_t)
(typeattributeset cil_gen_require memory_pressure_t)
(typeattributeset cil_gen_require loop_control_device_t)
(typeattributeset cil_gen_require random_device_t)
(typeattributeset cil_gen_require lvm_control_t)
(typeattributeset cil_gen_require file_context_t)
(typeattributeset cil_gen_require wtmp_t)
(typeattributeset cil_gen_require dri_device_t)
(typeattributeset cil_gen_require usb_device_t)
(typeattributeset cil_gen_require kvm_device_t)
(typeattributeset cil_gen_require sound_device_t)
(typeattributeset cil_gen_require v4l_device_t)
(typeattributeset cil_gen_require wireless_device_t)
(typeattributeset cil_gen_require event_device_t)
(typeattributeset cil_gen_require scsi_generic_device_t)
(typeattributeset cil_gen_require faillog_t)
(typeattributeset cil_gen_require var_log_t)
(typeattributeset cil_gen_require nsswitch_domain)
(typeattributeset nsswitch_domain (systemd_logind_t systemd_networkd_t systemd_notify_t systemd_resolved_t systemd_passwd_agent_t systemd_socket_proxyd_t systemd_sysusers_t systemd_tmpfiles_t systemd_userdbd_t ))
(typeattributeset cil_gen_require initrc_runtime_t)
(typeattributeset cil_gen_require local_login_t)
(typeattributeset cil_gen_require user_tmp_t)
(typeattributeset cil_gen_require user_runtime_t)
(typeattributeset cil_gen_require user_runtime_root_t)
(typeattributeset cil_gen_require user_tmpfs_t)
(typeattributeset cil_gen_require nfs_t)
(typeattributeset cil_gen_require cifs_t)
(typeattributeset cil_gen_require dosfs_t)
(typeattributeset cil_gen_require autofs_t)
(typeattributeset cil_gen_require bsdpty_device_t)
(typeattributeset cil_gen_require ptmx_t)
(typeattributeset cil_gen_require systemd_transient_unit_t)
(typeattributeset cil_gen_require can_load_kernmodule)
(typeattributeset can_load_kernmodule (systemd_modules_load_t ))
(typeattributeset cil_gen_require modules_object_t)
(typeattributeset cil_gen_require modules_conf_t)
(typeattributeset cil_gen_require modules_dep_t)
(typeattributeset cil_gen_require proc_net_t)
(typeattributeset cil_gen_require sysctl_net_t)
(typeattributeset cil_gen_require icmp_packet_t)
(typeattributeset cil_gen_require dhcpd_client_packet_t)
(typeattributeset cil_gen_require tun_tap_device_t)
(typeattributeset cil_gen_require dhcpc_port_t)
(typeattributeset cil_gen_require dhcpd_server_packet_t)
(typeattributeset cil_gen_require dhcpd_port_t)
(typeattributeset cil_gen_require privfd)
(typeattributeset cil_gen_require proc_kmsg_t)
(typeattributeset cil_gen_require mnt_t)
(typeattributeset cil_gen_require system_map_t)
(typeattributeset cil_gen_require rc_exec_t)
(typeattributeset cil_gen_require user_home_dir_t)
(typeattributeset cil_gen_require init_exec_t)
(typeattributeset cil_gen_require tpm_device_t)
(typeattributeset cil_gen_require cert_t)
(typeattributeset cil_gen_require pstore_t)
(typeattributeset cil_gen_require llmnr_port_t)
(typeattributeset cil_gen_require howl_port_t)
(typeattributeset cil_gen_require ramfs_t)
(typeattributeset cil_gen_require sysctl_type)
(typeattributeset cil_gen_require can_read_shadow_passwords)
(typeattributeset can_read_shadow_passwords (systemd_sysusers_t systemd_userdbd_t ))
(typeattributeset cil_gen_require can_write_shadow_passwords)
(typeattributeset can_write_shadow_passwords (systemd_sysusers_t ))
(typeattributeset cil_gen_require shadow_t)
(typeattributeset cil_gen_require shadow_history_t)
(typeattributeset cil_gen_require shadow_lock_t)
(typeattributeset cil_gen_require memory_raw_read)
(typeattributeset memory_raw_read (systemd_tmpfiles_t ))
(typeattributeset cil_gen_require memory_raw_write)
(typeattributeset memory_raw_write (systemd_tmpfiles_t ))
(typeattributeset cil_gen_require scsi_generic_read)
(typeattributeset scsi_generic_read (systemd_tmpfiles_t ))
(typeattributeset cil_gen_require scsi_generic_write)
(typeattributeset scsi_generic_write (systemd_tmpfiles_t ))
(typeattributeset cil_gen_require sysfs_types)
(typeattributeset cil_gen_require var_lock_t)
(typeattributeset cil_gen_require lockfile)
(typeattributeset cil_gen_require lastlog_t)
(typeattributeset cil_gen_require var_auth_t)
(typeattributeset cil_gen_require syslogd_tmp_t)
(typeattributeset cil_gen_require man_t)
(typeattributeset cil_gen_require man_cache_t)
(typeattributeset cil_gen_require mount_runtime_t)
(allow systemd_activate_t systemd_activate_exec_t (file (entrypoint)))
(allow systemd_activate_t systemd_activate_exec_t (file (ioctl read getattr lock map execute open)))
(allow initrc_t systemd_activate_exec_t (file (ioctl read getattr map execute open)))
(allow initrc_t systemd_activate_t (process (transition)))
(dontaudit initrc_t systemd_activate_t (process (noatsecure siginh rlimitinh)))
(typetransition initrc_t systemd_activate_exec_t process systemd_activate_t)
(allow systemd_activate_t initrc_t (fd (use)))
(allow systemd_activate_t initrc_t (fifo_file (ioctl read write getattr lock append)))
(allow systemd_activate_t initrc_t (process (sigchld)))
(allow systemd_analyze_t systemd_analyze_exec_t (file (entrypoint)))
(allow systemd_analyze_t systemd_analyze_exec_t (file (ioctl read getattr lock map execute open)))
(allow initrc_t systemd_analyze_exec_t (file (ioctl read getattr map execute open)))
(allow initrc_t systemd_analyze_t (process (transition)))
(dontaudit initrc_t systemd_analyze_t (process (noatsecure siginh rlimitinh)))
(typetransition initrc_t systemd_analyze_exec_t process systemd_analyze_t)
(allow systemd_analyze_t initrc_t (fd (use)))
(allow systemd_analyze_t initrc_t (fifo_file (ioctl read write getattr lock append)))
(allow systemd_analyze_t initrc_t (process (sigchld)))
(allow systemd_backlight_t systemd_backlight_exec_t (file (entrypoint)))
(allow systemd_backlight_t systemd_backlight_exec_t (file (ioctl read getattr lock map execute open)))
(allow initrc_t systemd_backlight_exec_t (file (ioctl read getattr map execute open)))
(allow initrc_t systemd_backlight_t (process (transition)))
(dontaudit initrc_t systemd_backlight_t (process (noatsecure siginh rlimitinh)))
(typetransition initrc_t systemd_backlight_exec_t process systemd_backlight_t)
(allow systemd_backlight_t initrc_t (fd (use)))
(allow systemd_backlight_t initrc_t (fifo_file (ioctl read write getattr lock append)))
(allow systemd_backlight_t initrc_t (process (sigchld)))
(allow systemd_binfmt_t systemd_binfmt_exec_t (file (entrypoint)))
(allow systemd_binfmt_t systemd_binfmt_exec_t (file (ioctl read getattr lock map execute open)))
(allow initrc_t systemd_binfmt_exec_t (file (ioctl read getattr map execute open)))
(allow initrc_t systemd_binfmt_t (process (transition)))
(dontaudit initrc_t systemd_binfmt_t (process (noatsecure siginh rlimitinh)))
(typetransition initrc_t systemd_binfmt_exec_t process systemd_binfmt_t)
(allow systemd_binfmt_t initrc_t (fd (use)))
(allow systemd_binfmt_t initrc_t (fifo_file (ioctl read write getattr lock append)))
(allow systemd_binfmt_t initrc_t (process (sigchld)))
(allow systemd_cgroups_t systemd_cgroups_exec_t (file (entrypoint)))
(allow systemd_cgroups_t systemd_cgroups_exec_t (file (ioctl read getattr lock map execute open)))
(allow initrc_t var_t (dir (getattr open search)))
(allow initrc_t var_run_t (lnk_file (read getattr)))
(allow initrc_t var_run_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_cgtop_t systemd_cgtop_exec_t (file (entrypoint)))
(allow systemd_cgtop_t systemd_cgtop_exec_t (file (ioctl read getattr lock map execute open)))
(allow initrc_t systemd_cgtop_exec_t (file (ioctl read getattr map execute open)))
(allow initrc_t systemd_cgtop_t (process (transition)))
(dontaudit initrc_t systemd_cgtop_t (process (noatsecure siginh rlimitinh)))
(typetransition initrc_t systemd_cgtop_exec_t process systemd_cgtop_t)
(allow systemd_cgtop_t initrc_t (fd (use)))
(allow systemd_cgtop_t initrc_t (fifo_file (ioctl read write getattr lock append)))
(allow systemd_cgtop_t initrc_t (process (sigchld)))
(allow systemd_coredump_t systemd_coredump_exec_t (file (entrypoint)))
(allow systemd_coredump_t systemd_coredump_exec_t (file (ioctl read getattr lock map execute open)))
(allow initrc_t systemd_coredump_exec_t (file (ioctl read getattr map execute open)))
(allow initrc_t systemd_coredump_t (process (transition)))
(dontaudit initrc_t systemd_coredump_t (process (noatsecure siginh rlimitinh)))
(typetransition initrc_t systemd_coredump_exec_t process systemd_coredump_t)
(allow systemd_coredump_t initrc_t (fd (use)))
(allow systemd_coredump_t initrc_t (fifo_file (ioctl read write getattr lock append)))
(allow systemd_coredump_t initrc_t (process (sigchld)))
(allow systemd_generator_t systemd_generator_exec_t (file (entrypoint)))
(allow systemd_generator_t systemd_generator_exec_t (file (ioctl read getattr lock map execute open)))
(allow initrc_t systemd_generator_exec_t (file (ioctl read getattr map execute open)))
(allow initrc_t systemd_generator_t (process (transition)))
(dontaudit initrc_t systemd_generator_t (process (noatsecure siginh rlimitinh)))
(typetransition initrc_t systemd_generator_exec_t process systemd_generator_t)
(allow systemd_generator_t initrc_t (fd (use)))
(allow systemd_generator_t initrc_t (fifo_file (ioctl read write getattr lock append)))
(allow systemd_generator_t initrc_t (process (sigchld)))
(allow systemd_homed_t systemd_homed_exec_t (file (entrypoint)))
(allow systemd_homed_t systemd_homed_exec_t (file (ioctl read getattr lock map execute open)))
(allow initrc_t systemd_homed_exec_t (file (ioctl read getattr map execute open)))
(allow initrc_t systemd_homed_t (process (transition)))
(dontaudit initrc_t systemd_homed_t (process (noatsecure siginh rlimitinh)))
(typetransition initrc_t systemd_homed_exec_t process systemd_homed_t)
(allow systemd_homed_t initrc_t (fd (use)))
(allow systemd_homed_t initrc_t (fifo_file (ioctl read write getattr lock append)))
(allow systemd_homed_t initrc_t (process (sigchld)))
(allow systemd_homework_t systemd_homework_exec_t (file (entrypoint)))
(allow systemd_homework_t systemd_homework_exec_t (file (ioctl read getattr lock map execute open)))
(allow systemd_hostnamed_t systemd_hostnamed_exec_t (file (entrypoint)))
(allow systemd_hostnamed_t systemd_hostnamed_exec_t (file (ioctl read getattr lock map execute open)))
(allow initrc_t systemd_hostnamed_exec_t (file (ioctl read getattr map execute open)))
(allow initrc_t systemd_hostnamed_t (process (transition)))
(dontaudit initrc_t systemd_hostnamed_t (process (noatsecure siginh rlimitinh)))
(typetransition initrc_t systemd_hostnamed_exec_t process systemd_hostnamed_t)
(allow systemd_hostnamed_t initrc_t (fd (use)))
(allow systemd_hostnamed_t initrc_t (fifo_file (ioctl read write getattr lock append)))
(allow systemd_hostnamed_t initrc_t (process (sigchld)))
(allow systemd_hw_t systemd_hw_exec_t (file (entrypoint)))
(allow systemd_hw_t systemd_hw_exec_t (file (ioctl read getattr lock map execute open)))
(allow initrc_t systemd_hw_exec_t (file (ioctl read getattr map execute open)))
(allow initrc_t systemd_hw_t (process (transition)))
(dontaudit initrc_t systemd_hw_t (process (noatsecure siginh rlimitinh)))
(typetransition initrc_t systemd_hw_exec_t process systemd_hw_t)
(allow systemd_hw_t initrc_t (fd (use)))
(allow systemd_hw_t initrc_t (fifo_file (ioctl read write getattr lock append)))
(allow systemd_hw_t initrc_t (process (sigchld)))
(allow systemd_journal_t tmp_t (filesystem (associate)))
(allow systemd_journal_t tmpfs_t (filesystem (associate)))
(allow systemd_journal_init_t systemd_journalctl_exec_t (file (entrypoint)))
(allow systemd_journal_init_t systemd_journalctl_exec_t (file (ioctl read getattr lock map execute open)))
(allow initrc_t systemd_journalctl_exec_t (file (ioctl read getattr map execute open)))
(allow initrc_t systemd_journal_init_t (process (transition)))
(dontaudit initrc_t systemd_journal_init_t (process (noatsecure siginh rlimitinh)))
(typetransition initrc_t systemd_journalctl_exec_t process systemd_journal_init_t)
(allow systemd_journal_init_t initrc_t (fd (use)))
(allow systemd_journal_init_t initrc_t (fifo_file (ioctl read write getattr lock append)))
(allow systemd_journal_init_t initrc_t (process (sigchld)))
(allow systemd_locale_t systemd_locale_exec_t (file (entrypoint)))
(allow systemd_locale_t systemd_locale_exec_t (file (ioctl read getattr lock map execute open)))
(allow initrc_t systemd_locale_exec_t (file (ioctl read getattr map execute open)))
(allow initrc_t systemd_locale_t (process (transition)))
(dontaudit initrc_t systemd_locale_t (process (noatsecure siginh rlimitinh)))
(typetransition initrc_t systemd_locale_exec_t process systemd_locale_t)
(allow systemd_locale_t initrc_t (fd (use)))
(allow systemd_locale_t initrc_t (fifo_file (ioctl read write getattr lock append)))
(allow systemd_locale_t initrc_t (process (sigchld)))
(allow systemd_log_t tmp_t (filesystem (associate)))
(allow systemd_log_t tmpfs_t (filesystem (associate)))
(allow systemd_logind_t systemd_logind_exec_t (file (entrypoint)))
(allow systemd_logind_t systemd_logind_exec_t (file (ioctl read getattr lock map execute open)))
(allow initrc_t systemd_logind_exec_t (file (ioctl read getattr map execute open)))
(allow initrc_t systemd_logind_t (process (transition)))
(dontaudit initrc_t systemd_logind_t (process (noatsecure siginh rlimitinh)))
(typetransition initrc_t systemd_logind_exec_t process systemd_logind_t)
(allow systemd_logind_t initrc_t (fd (use)))
(allow systemd_logind_t initrc_t (fifo_file (ioctl read write getattr lock append)))
(allow systemd_logind_t initrc_t (process (sigchld)))
(allow initrc_t var_t (dir (getattr open search)))
(allow initrc_t var_run_t (lnk_file (read getattr)))
(allow initrc_t var_run_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow initrc_t var_t (dir (getattr open search)))
(allow initrc_t var_run_t (lnk_file (read getattr)))
(allow initrc_t var_run_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_machined_t systemd_machined_exec_t (file (entrypoint)))
(allow systemd_machined_t systemd_machined_exec_t (file (ioctl read getattr lock map execute open)))
(allow initrc_t systemd_machined_exec_t (file (ioctl read getattr map execute open)))
(allow initrc_t systemd_machined_t (process (transition)))
(dontaudit initrc_t systemd_machined_t (process (noatsecure siginh rlimitinh)))
(typetransition initrc_t systemd_machined_exec_t process systemd_machined_t)
(allow systemd_machined_t initrc_t (fd (use)))
(allow systemd_machined_t initrc_t (fifo_file (ioctl read write getattr lock append)))
(allow systemd_machined_t initrc_t (process (sigchld)))
(allow systemd_machined_devpts_t devpts_t (filesystem (associate)))
(allow initrc_t var_t (dir (getattr open search)))
(allow initrc_t var_run_t (lnk_file (read getattr)))
(allow initrc_t var_run_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_machine_id_setup_t systemd_machine_id_setup_exec_t (file (entrypoint)))
(allow systemd_machine_id_setup_t systemd_machine_id_setup_exec_t (file (ioctl read getattr lock map execute open)))
(allow initrc_t systemd_machine_id_setup_exec_t (file (ioctl read getattr map execute open)))
(allow initrc_t systemd_machine_id_setup_t (process (transition)))
(dontaudit initrc_t systemd_machine_id_setup_t (process (noatsecure siginh rlimitinh)))
(typetransition initrc_t systemd_machine_id_setup_exec_t process systemd_machine_id_setup_t)
(allow systemd_machine_id_setup_t initrc_t (fd (use)))
(allow systemd_machine_id_setup_t initrc_t (fifo_file (ioctl read write getattr lock append)))
(allow systemd_machine_id_setup_t initrc_t (process (sigchld)))
(allow systemd_modules_load_t systemd_modules_load_exec_t (file (entrypoint)))
(allow systemd_modules_load_t systemd_modules_load_exec_t (file (ioctl read getattr lock map execute open)))
(allow initrc_t systemd_modules_load_exec_t (file (ioctl read getattr map execute open)))
(allow initrc_t systemd_modules_load_t (process (transition)))
(dontaudit initrc_t systemd_modules_load_t (process (noatsecure siginh rlimitinh)))
(typetransition initrc_t systemd_modules_load_exec_t process systemd_modules_load_t)
(allow systemd_modules_load_t initrc_t (fd (use)))
(allow systemd_modules_load_t initrc_t (fifo_file (ioctl read write getattr lock append)))
(allow systemd_modules_load_t initrc_t (process (sigchld)))
(allow systemd_networkd_t systemd_networkd_exec_t (file (entrypoint)))
(allow systemd_networkd_t systemd_networkd_exec_t (file (ioctl read getattr lock map execute open)))
(allow initrc_t systemd_networkd_exec_t (file (ioctl read getattr map execute open)))
(allow initrc_t systemd_networkd_t (process (transition)))
(dontaudit initrc_t systemd_networkd_t (process (noatsecure siginh rlimitinh)))
(typetransition initrc_t systemd_networkd_exec_t process systemd_networkd_t)
(allow systemd_networkd_t initrc_t (fd (use)))
(allow systemd_networkd_t initrc_t (fifo_file (ioctl read write getattr lock append)))
(allow systemd_networkd_t initrc_t (process (sigchld)))
(allow systemd_notify_t systemd_notify_exec_t (file (entrypoint)))
(allow systemd_notify_t systemd_notify_exec_t (file (ioctl read getattr lock map execute open)))
(allow initrc_t systemd_notify_exec_t (file (ioctl read getattr map execute open)))
(allow initrc_t systemd_notify_t (process (transition)))
(dontaudit initrc_t systemd_notify_t (process (noatsecure siginh rlimitinh)))
(typetransition initrc_t systemd_notify_exec_t process systemd_notify_t)
(allow systemd_notify_t initrc_t (fd (use)))
(allow systemd_notify_t initrc_t (fifo_file (ioctl read write getattr lock append)))
(allow systemd_notify_t initrc_t (process (sigchld)))
(allow systemd_nspawn_t systemd_nspawn_exec_t (file (entrypoint)))
(allow systemd_nspawn_t systemd_nspawn_exec_t (file (ioctl read getattr lock map execute open)))
(allow initrc_t systemd_nspawn_exec_t (file (ioctl read getattr map execute open)))
(allow initrc_t systemd_nspawn_t (process (transition)))
(dontaudit initrc_t systemd_nspawn_t (process (noatsecure siginh rlimitinh)))
(typetransition initrc_t systemd_nspawn_exec_t process systemd_nspawn_t)
(allow systemd_nspawn_t initrc_t (fd (use)))
(allow systemd_nspawn_t initrc_t (fifo_file (ioctl read write getattr lock append)))
(allow systemd_nspawn_t initrc_t (process (sigchld)))
(allow systemd_nsresourced_t systemd_nsresourced_exec_t (file (entrypoint)))
(allow systemd_nsresourced_t systemd_nsresourced_exec_t (file (ioctl read getattr lock map execute open)))
(allow initrc_t systemd_nsresourced_exec_t (file (ioctl read getattr map execute open)))
(allow initrc_t systemd_nsresourced_t (process (transition)))
(dontaudit initrc_t systemd_nsresourced_t (process (noatsecure siginh rlimitinh)))
(typetransition initrc_t systemd_nsresourced_exec_t process systemd_nsresourced_t)
(allow systemd_nsresourced_t initrc_t (fd (use)))
(allow systemd_nsresourced_t initrc_t (fifo_file (ioctl read write getattr lock append)))
(allow systemd_nsresourced_t initrc_t (process (sigchld)))
(allow systemd_pcrphase_t systemd_pcrphase_exec_t (file (entrypoint)))
(allow systemd_pcrphase_t systemd_pcrphase_exec_t (file (ioctl read getattr lock map execute open)))
(allow initrc_t systemd_pcrphase_exec_t (file (ioctl read getattr map execute open)))
(allow initrc_t systemd_pcrphase_t (process (transition)))
(dontaudit initrc_t systemd_pcrphase_t (process (noatsecure siginh rlimitinh)))
(typetransition initrc_t systemd_pcrphase_exec_t process systemd_pcrphase_t)
(allow systemd_pcrphase_t initrc_t (fd (use)))
(allow systemd_pcrphase_t initrc_t (fifo_file (ioctl read write getattr lock append)))
(allow systemd_pcrphase_t initrc_t (process (sigchld)))
(allow systemd_pstore_t systemd_pstore_exec_t (file (entrypoint)))
(allow systemd_pstore_t systemd_pstore_exec_t (file (ioctl read getattr lock map execute open)))
(allow initrc_t systemd_pstore_exec_t (file (ioctl read getattr map execute open)))
(allow initrc_t systemd_pstore_t (process (transition)))
(dontaudit initrc_t systemd_pstore_t (process (noatsecure siginh rlimitinh)))
(typetransition initrc_t systemd_pstore_exec_t process systemd_pstore_t)
(allow systemd_pstore_t initrc_t (fd (use)))
(allow systemd_pstore_t initrc_t (fifo_file (ioctl read write getattr lock append)))
(allow systemd_pstore_t initrc_t (process (sigchld)))
(allow systemd_resolved_t systemd_resolved_exec_t (file (entrypoint)))
(allow systemd_resolved_t systemd_resolved_exec_t (file (ioctl read getattr lock map execute open)))
(allow initrc_t systemd_resolved_exec_t (file (ioctl read getattr map execute open)))
(allow initrc_t systemd_resolved_t (process (transition)))
(dontaudit initrc_t systemd_resolved_t (process (noatsecure siginh rlimitinh)))
(typetransition initrc_t systemd_resolved_exec_t process systemd_resolved_t)
(allow systemd_resolved_t initrc_t (fd (use)))
(allow systemd_resolved_t initrc_t (fifo_file (ioctl read write getattr lock append)))
(allow systemd_resolved_t initrc_t (process (sigchld)))
(allow systemd_stdio_bridge_t systemd_stdio_bridge_exec_t (file (entrypoint)))
(allow systemd_stdio_bridge_t systemd_stdio_bridge_exec_t (file (ioctl read getattr lock map execute open)))
(allow initrc_t systemd_stdio_bridge_exec_t (file (ioctl read getattr map execute open)))
(allow initrc_t systemd_stdio_bridge_t (process (transition)))
(dontaudit initrc_t systemd_stdio_bridge_t (process (noatsecure siginh rlimitinh)))
(typetransition initrc_t systemd_stdio_bridge_exec_t process systemd_stdio_bridge_t)
(allow systemd_stdio_bridge_t initrc_t (fd (use)))
(allow systemd_stdio_bridge_t initrc_t (fifo_file (ioctl read write getattr lock append)))
(allow systemd_stdio_bridge_t initrc_t (process (sigchld)))
(allow systemd_passwd_agent_t systemd_passwd_agent_exec_t (file (entrypoint)))
(allow systemd_passwd_agent_t systemd_passwd_agent_exec_t (file (ioctl read getattr lock map execute open)))
(allow initrc_t systemd_passwd_agent_exec_t (file (ioctl read getattr map execute open)))
(allow initrc_t systemd_passwd_agent_t (process (transition)))
(dontaudit initrc_t systemd_passwd_agent_t (process (noatsecure siginh rlimitinh)))
(typetransition initrc_t systemd_passwd_agent_exec_t process systemd_passwd_agent_t)
(allow systemd_passwd_agent_t initrc_t (fd (use)))
(allow systemd_passwd_agent_t initrc_t (fifo_file (ioctl read write getattr lock append)))
(allow systemd_passwd_agent_t initrc_t (process (sigchld)))
(allow systemd_rfkill_t systemd_rfkill_exec_t (file (entrypoint)))
(allow systemd_rfkill_t systemd_rfkill_exec_t (file (ioctl read getattr lock map execute open)))
(allow initrc_t systemd_rfkill_exec_t (file (ioctl read getattr map execute open)))
(allow initrc_t systemd_rfkill_t (process (transition)))
(dontaudit initrc_t systemd_rfkill_t (process (noatsecure siginh rlimitinh)))
(typetransition initrc_t systemd_rfkill_exec_t process systemd_rfkill_t)
(allow systemd_rfkill_t initrc_t (fd (use)))
(allow systemd_rfkill_t initrc_t (fifo_file (ioctl read write getattr lock append)))
(allow systemd_rfkill_t initrc_t (process (sigchld)))
(allow systemd_sessions_t systemd_sessions_exec_t (file (entrypoint)))
(allow systemd_sessions_t systemd_sessions_exec_t (file (ioctl read getattr lock map execute open)))
(allow initrc_t systemd_sessions_exec_t (file (ioctl read getattr map execute open)))
(allow initrc_t systemd_sessions_t (process (transition)))
(dontaudit initrc_t systemd_sessions_t (process (noatsecure siginh rlimitinh)))
(typetransition initrc_t systemd_sessions_exec_t process systemd_sessions_t)
(allow systemd_sessions_t initrc_t (fd (use)))
(allow systemd_sessions_t initrc_t (fifo_file (ioctl read write getattr lock append)))
(allow systemd_sessions_t initrc_t (process (sigchld)))
(allow initrc_t var_t (dir (getattr open search)))
(allow initrc_t var_run_t (lnk_file (read getattr)))
(allow initrc_t var_run_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_socket_proxyd_t systemd_socket_proxyd_exec_t (file (entrypoint)))
(allow systemd_socket_proxyd_t systemd_socket_proxyd_exec_t (file (ioctl read getattr lock map execute open)))
(allow initrc_t systemd_socket_proxyd_exec_t (file (ioctl read getattr map execute open)))
(allow initrc_t systemd_socket_proxyd_t (process (transition)))
(dontaudit initrc_t systemd_socket_proxyd_t (process (noatsecure siginh rlimitinh)))
(typetransition initrc_t systemd_socket_proxyd_exec_t process systemd_socket_proxyd_t)
(allow systemd_socket_proxyd_t initrc_t (fd (use)))
(allow systemd_socket_proxyd_t initrc_t (fifo_file (ioctl read write getattr lock append)))
(allow systemd_socket_proxyd_t initrc_t (process (sigchld)))
(allow systemd_sysctl_t systemd_sysctl_exec_t (file (entrypoint)))
(allow systemd_sysctl_t systemd_sysctl_exec_t (file (ioctl read getattr lock map execute open)))
(allow initrc_t systemd_sysctl_exec_t (file (ioctl read getattr map execute open)))
(allow initrc_t systemd_sysctl_t (process (transition)))
(dontaudit initrc_t systemd_sysctl_t (process (noatsecure siginh rlimitinh)))
(typetransition initrc_t systemd_sysctl_exec_t process systemd_sysctl_t)
(allow systemd_sysctl_t initrc_t (fd (use)))
(allow systemd_sysctl_t initrc_t (fifo_file (ioctl read write getattr lock append)))
(allow systemd_sysctl_t initrc_t (process (sigchld)))
(allow systemd_sysusers_t systemd_sysusers_exec_t (file (entrypoint)))
(allow systemd_sysusers_t systemd_sysusers_exec_t (file (ioctl read getattr lock map execute open)))
(allow initrc_t systemd_sysusers_exec_t (file (ioctl read getattr map execute open)))
(allow initrc_t systemd_sysusers_t (process (transition)))
(dontaudit initrc_t systemd_sysusers_t (process (noatsecure siginh rlimitinh)))
(typetransition initrc_t systemd_sysusers_exec_t process systemd_sysusers_t)
(allow systemd_sysusers_t initrc_t (fd (use)))
(allow systemd_sysusers_t initrc_t (fifo_file (ioctl read write getattr lock append)))
(allow systemd_sysusers_t initrc_t (process (sigchld)))
(allow systemd_tmpfiles_t systemd_tmpfiles_exec_t (file (entrypoint)))
(allow systemd_tmpfiles_t systemd_tmpfiles_exec_t (file (ioctl read getattr lock map execute open)))
(allow initrc_t systemd_tmpfiles_exec_t (file (ioctl read getattr map execute open)))
(allow initrc_t systemd_tmpfiles_t (process (transition)))
(dontaudit initrc_t systemd_tmpfiles_t (process (noatsecure siginh rlimitinh)))
(typetransition initrc_t systemd_tmpfiles_exec_t process systemd_tmpfiles_t)
(allow systemd_tmpfiles_t initrc_t (fd (use)))
(allow systemd_tmpfiles_t initrc_t (fifo_file (ioctl read write getattr lock append)))
(allow systemd_tmpfiles_t initrc_t (process (sigchld)))
(allow systemd_update_done_t systemd_update_done_exec_t (file (entrypoint)))
(allow systemd_update_done_t systemd_update_done_exec_t (file (ioctl read getattr lock map execute open)))
(allow initrc_t systemd_update_done_exec_t (file (ioctl read getattr map execute open)))
(allow initrc_t systemd_update_done_t (process (transition)))
(dontaudit initrc_t systemd_update_done_t (process (noatsecure siginh rlimitinh)))
(typetransition initrc_t systemd_update_done_exec_t process systemd_update_done_t)
(allow systemd_update_done_t initrc_t (fd (use)))
(allow systemd_update_done_t initrc_t (fifo_file (ioctl read write getattr lock append)))
(allow systemd_update_done_t initrc_t (process (sigchld)))
(allow systemd_data_home_t user_home_t (filesystem (associate)))
(allow systemd_user_runtime_dir_t systemd_user_runtime_dir_exec_t (file (entrypoint)))
(allow systemd_user_runtime_dir_t systemd_user_runtime_dir_exec_t (file (ioctl read getattr lock map execute open)))
(allow initrc_t systemd_user_runtime_dir_exec_t (file (ioctl read getattr map execute open)))
(allow initrc_t systemd_user_runtime_dir_t (process (transition)))
(dontaudit initrc_t systemd_user_runtime_dir_t (process (noatsecure siginh rlimitinh)))
(typetransition initrc_t systemd_user_runtime_dir_exec_t process systemd_user_runtime_dir_t)
(allow systemd_user_runtime_dir_t initrc_t (fd (use)))
(allow systemd_user_runtime_dir_t initrc_t (fifo_file (ioctl read write getattr lock append)))
(allow systemd_user_runtime_dir_t initrc_t (process (sigchld)))
(allow systemd_userdbd_t systemd_userdbd_exec_t (file (entrypoint)))
(allow systemd_userdbd_t systemd_userdbd_exec_t (file (ioctl read getattr lock map execute open)))
(allow initrc_t systemd_userdbd_exec_t (file (ioctl read getattr map execute open)))
(allow initrc_t systemd_userdbd_t (process (transition)))
(dontaudit initrc_t systemd_userdbd_t (process (noatsecure siginh rlimitinh)))
(typetransition initrc_t systemd_userdbd_exec_t process systemd_userdbd_t)
(allow systemd_userdbd_t initrc_t (fd (use)))
(allow systemd_userdbd_t initrc_t (fifo_file (ioctl read write getattr lock append)))
(allow systemd_userdbd_t initrc_t (process (sigchld)))
(allow systemd_analyze_t etc_t (service (status)))
(allow systemd_analyze_t init_runtime_t (dir (getattr open search)))
(allow systemd_analyze_t init_runtime_t (sock_file (write getattr append open)))
(allow systemd_analyze_t init_t (unix_stream_socket (connectto)))
(allow systemd_analyze_t var_run_t (lnk_file (read getattr)))
(allow systemd_analyze_t var_t (dir (getattr open search)))
(allow systemd_analyze_t var_run_t (dir (getattr open search)))
(allow systemd_analyze_t init_t (unix_stream_socket (getattr)))
(allow systemd_analyze_t systemdunit (service (status)))
(allow systemd_analyze_t init_script_file_type (service (status)))
(allow systemd_analyze_t init_t (service (status)))
(allow systemd_analyze_t init_t (system (status)))
(allow systemd_analyze_t proc_t (dir (getattr open search)))
(allow systemd_analyze_t sysctl_t (dir (getattr open search)))
(allow systemd_analyze_t sysctl_kernel_t (dir (getattr open search)))
(allow systemd_analyze_t sysctl_kernel_t (file (ioctl read getattr lock open)))
(allow systemd_analyze_t proc_t (dir (getattr open search)))
(allow systemd_analyze_t sysctl_t (dir (getattr open search)))
(allow systemd_analyze_t sysctl_kernel_t (dir (ioctl read getattr lock open search)))
(dontaudit systemd_analyze_t proc_t (filesystem (getattr)))
(allow systemd_analyze_t etc_t (dir (getattr open search)))
(allow systemd_analyze_t etc_t (lnk_file (read getattr)))
(allow systemd_analyze_t usr_t (dir (getattr open search)))
(allow systemd_analyze_t locale_t (dir (ioctl read getattr lock open search)))
(allow systemd_analyze_t locale_t (dir (getattr open search)))
(allow systemd_analyze_t locale_t (file (ioctl read getattr lock open)))
(allow systemd_analyze_t locale_t (dir (getattr open search)))
(allow systemd_analyze_t locale_t (lnk_file (read getattr)))
(allow systemd_analyze_t locale_t (file (map)))
(allow systemd_analyze_t security_t (filesystem (getattr)))
(allow systemd_analyze_t sysfs_t (filesystem (getattr)))
(allow systemd_analyze_t sysfs_t (dir (getattr open search)))
(allow systemd_analyze_t sysfs_t (dir (getattr open search)))
(allow systemd_analyze_t proc_t (dir (getattr open search)))
(allow systemd_analyze_t proc_t (file (ioctl read getattr lock open)))
(allow systemd_analyze_t proc_t (dir (getattr open search)))
(allow systemd_analyze_t proc_t (lnk_file (read getattr)))
(allow systemd_analyze_t proc_t (dir (getattr open search)))
(allow systemd_analyze_t proc_t (dir (ioctl read getattr lock open search)))
(allow systemd_analyze_t etc_t (dir (getattr open search)))
(allow systemd_analyze_t selinux_config_t (dir (ioctl read getattr lock open search)))
(allow systemd_analyze_t selinux_config_t (dir (getattr open search)))
(allow systemd_analyze_t selinux_config_t (file (ioctl read getattr lock open)))
(allow systemd_analyze_t selinux_config_t (dir (getattr open search)))
(allow systemd_analyze_t selinux_config_t (lnk_file (read getattr)))
(allow systemd_analyze_t device_t (dir (getattr open search)))
(allow systemd_analyze_t device_t (dir (ioctl read getattr lock open search)))
(allow systemd_analyze_t device_t (dir (getattr open search)))
(allow systemd_analyze_t device_t (lnk_file (read getattr)))
(allow systemd_analyze_t devpts_t (dir (ioctl read getattr lock open search)))
(allow systemd_analyze_t user_devpts_t (chr_file (ioctl read write getattr append)))
(allow systemd_analyze_t user_tty_device_t (chr_file (ioctl read write getattr append)))
(allow systemd_backlight_t self (unix_dgram_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow systemd_backlight_t systemd_backlight_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow systemd_backlight_t var_t (dir (getattr open search)))
(allow systemd_backlight_t var_lib_t (dir (getattr open search)))
(allow systemd_backlight_t init_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition systemd_backlight_t init_var_lib_t dir systemd_backlight_var_lib_t)
(allow systemd_backlight_t systemd_backlight_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_backlight_t systemd_backlight_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_backlight_t sysfs_t (dir (getattr open search)))
(allow systemd_backlight_t sysfs_t (file (ioctl read write getattr lock append open)))
(allow systemd_backlight_t sysfs_t (dir (getattr open search)))
(allow systemd_backlight_t sysfs_t (lnk_file (read getattr)))
(allow systemd_backlight_t sysfs_t (dir (getattr open search)))
(allow systemd_backlight_t sysfs_t (dir (ioctl read getattr lock open search)))
(allow systemd_backlight_t proc_t (dir (getattr open search)))
(allow systemd_backlight_t sysctl_t (dir (getattr open search)))
(allow systemd_backlight_t sysctl_kernel_t (dir (getattr open search)))
(allow systemd_backlight_t sysctl_kernel_t (file (ioctl read getattr lock open)))
(allow systemd_backlight_t proc_t (dir (getattr open search)))
(allow systemd_backlight_t sysctl_t (dir (getattr open search)))
(allow systemd_backlight_t sysctl_kernel_t (dir (ioctl read getattr lock open search)))
(allow systemd_backlight_t etc_t (dir (ioctl read getattr lock open search)))
(allow systemd_backlight_t etc_t (dir (getattr open search)))
(allow systemd_backlight_t etc_t (file (ioctl read getattr lock open)))
(allow systemd_backlight_t etc_t (dir (getattr open search)))
(allow systemd_backlight_t etc_t (lnk_file (read getattr)))
(allow systemd_backlight_t var_run_t (lnk_file (read getattr)))
(allow systemd_backlight_t var_t (dir (getattr open search)))
(allow systemd_backlight_t var_run_t (dir (getattr open search)))
(allow systemd_backlight_t udev_runtime_t (dir (getattr open search)))
(allow systemd_backlight_t udev_runtime_t (file (ioctl read getattr lock open)))
(allow systemd_backlight_t udev_runtime_t (dir (getattr open search)))
(allow systemd_backlight_t udev_runtime_t (lnk_file (read getattr)))
(allow systemd_backlight_t var_t (dir (getattr open search)))
(allow systemd_backlight_t var_lib_t (dir (getattr open search)))
(allow systemd_backlight_t filesystem_type (filesystem (getattr)))
(allow systemd_backlight_t file_type (filesystem (getattr)))
(allow systemd_backlight_t cgroup_types (dir (getattr open search)))
(allow systemd_backlight_t cgroup_types (dir (getattr open search)))
(allow systemd_backlight_t sysfs_t (dir (getattr open search)))
(allow systemd_backlight_t sysfs_t (dir (getattr open search)))
(allow systemd_binfmt_t proc_t (dir (getattr open search)))
(allow systemd_binfmt_t sysctl_t (dir (getattr open search)))
(allow systemd_binfmt_t sysctl_kernel_t (dir (getattr open search)))
(allow systemd_binfmt_t sysctl_kernel_t (file (ioctl read getattr lock open)))
(allow systemd_binfmt_t proc_t (dir (getattr open search)))
(allow systemd_binfmt_t sysctl_t (dir (getattr open search)))
(allow systemd_binfmt_t sysctl_kernel_t (dir (ioctl read getattr lock open search)))
(allow systemd_binfmt_t proc_t (filesystem (getattr)))
(allow systemd_binfmt_t etc_t (dir (ioctl read getattr lock open search)))
(allow systemd_binfmt_t etc_t (dir (getattr open search)))
(allow systemd_binfmt_t etc_t (file (ioctl read getattr lock open)))
(allow systemd_binfmt_t etc_t (dir (getattr open search)))
(allow systemd_binfmt_t etc_t (lnk_file (read getattr)))
(allow systemd_binfmt_t proc_t (dir (getattr open search)))
(allow systemd_binfmt_t sysctl_t (dir (getattr open search)))
(allow systemd_binfmt_t sysctl_fs_t (dir (getattr open search)))
(allow systemd_binfmt_t sysctl_fs_t (dir (getattr open search)))
(allow systemd_binfmt_t binfmt_misc_fs_t (dir (getattr open search)))
(allow systemd_binfmt_t binfmt_misc_fs_t (file (ioctl read write getattr lock append open)))
(allow systemd_binfmt_t binfmt_misc_fs_t (filesystem (getattr)))
(allow systemd_binfmt_t binfmt_misc_fs_t (dir (write getattr)))
(allow systemd_binfmt_t cgroup_types (filesystem (getattr)))
(allow systemd_binfmt_t cgroup_types (dir (getattr open search)))
(allow systemd_binfmt_t cgroup_types (dir (getattr open search)))
(allow systemd_binfmt_t sysfs_t (dir (getattr open search)))
(allow systemd_binfmt_t sysfs_t (dir (getattr open search)))
(allow systemd_binfmt_t nsfs_t (file (getattr)))
(allow systemd_cgroups_t self (capability (net_admin)))
(allow kernel_t systemd_cgroups_exec_t (file (ioctl read getattr map execute open)))
(allow kernel_t systemd_cgroups_t (process (transition)))
(dontaudit kernel_t systemd_cgroups_t (process (noatsecure siginh rlimitinh)))
(typetransition kernel_t systemd_cgroups_exec_t process systemd_cgroups_t)
(allow systemd_cgroups_t kernel_t (fd (use)))
(allow systemd_cgroups_t kernel_t (fifo_file (ioctl read write getattr lock append)))
(allow systemd_cgroups_t kernel_t (process (sigchld)))
(allow systemd_cgroups_t proc_t (dir (getattr open search)))
(allow systemd_cgroups_t sysctl_t (dir (getattr open search)))
(allow systemd_cgroups_t sysctl_kernel_t (dir (getattr open search)))
(allow systemd_cgroups_t sysctl_kernel_t (file (ioctl read getattr lock open)))
(allow systemd_cgroups_t proc_t (dir (getattr open search)))
(allow systemd_cgroups_t sysctl_t (dir (getattr open search)))
(allow systemd_cgroups_t sysctl_kernel_t (dir (ioctl read getattr lock open search)))
(dontaudit systemd_cgroups_t proc_t (filesystem (getattr)))
(allow systemd_cgroups_t proc_t (dir (getattr open search)))
(allow systemd_cgroups_t proc_t (file (ioctl read getattr lock open)))
(allow systemd_cgroups_t proc_t (dir (getattr open search)))
(allow systemd_cgroups_t proc_t (lnk_file (read getattr)))
(allow systemd_cgroups_t proc_t (dir (getattr open search)))
(allow systemd_cgroups_t proc_t (dir (ioctl read getattr lock open search)))
(allow systemd_cgroups_t security_t (filesystem (getattr)))
(allow systemd_cgroups_t sysfs_t (filesystem (getattr)))
(allow systemd_cgroups_t sysfs_t (dir (getattr open search)))
(allow systemd_cgroups_t sysfs_t (dir (getattr open search)))
(allow systemd_cgroups_t init_runtime_t (dir (getattr open search)))
(allow systemd_cgroups_t init_runtime_t (sock_file (write getattr append open)))
(allow systemd_cgroups_t init_t (unix_dgram_socket (sendto)))
(allow systemd_cgroups_t var_run_t (lnk_file (read getattr)))
(allow systemd_cgroups_t var_t (dir (getattr open search)))
(allow systemd_cgroups_t var_run_t (dir (getattr open search)))
(allow systemd_cgroups_t init_t (unix_stream_socket (getattr)))
(allow systemd_cgroups_t init_runtime_t (dir (getattr open search)))
(allow systemd_cgroups_t init_runtime_t (sock_file (write getattr append open)))
(allow systemd_cgroups_t init_t (unix_stream_socket (connectto)))
(allow systemd_cgroups_t var_run_t (lnk_file (read getattr)))
(allow systemd_cgroups_t var_t (dir (getattr open search)))
(allow systemd_cgroups_t var_run_t (dir (getattr open search)))
(allow systemd_cgroups_t init_t (unix_stream_socket (getattr)))
(allow systemd_cgroups_t init_t (dir (getattr open search)))
(allow systemd_cgroups_t init_t (file (ioctl read getattr lock open)))
(allow systemd_cgroups_t init_t (lnk_file (read getattr)))
(allow systemd_cgroups_t security_t (filesystem (getattr)))
(allow systemd_cgroups_t sysfs_t (filesystem (getattr)))
(allow systemd_cgroups_t sysfs_t (dir (getattr open search)))
(allow systemd_cgroups_t sysfs_t (dir (getattr open search)))
(allow systemd_cgroups_t proc_t (dir (getattr open search)))
(allow systemd_cgroups_t proc_t (file (ioctl read getattr lock open)))
(allow systemd_cgroups_t proc_t (dir (getattr open search)))
(allow systemd_cgroups_t proc_t (lnk_file (read getattr)))
(allow systemd_cgroups_t proc_t (dir (getattr open search)))
(allow systemd_cgroups_t proc_t (dir (ioctl read getattr lock open search)))
(allow systemd_cgroups_t etc_t (dir (getattr open search)))
(allow systemd_cgroups_t selinux_config_t (dir (ioctl read getattr lock open search)))
(allow systemd_cgroups_t selinux_config_t (dir (getattr open search)))
(allow systemd_cgroups_t selinux_config_t (file (ioctl read getattr lock open)))
(allow systemd_cgroups_t selinux_config_t (dir (getattr open search)))
(allow systemd_cgroups_t selinux_config_t (lnk_file (read getattr)))
(allow systemd_coredump_t self (capability (dac_read_search setgid setuid setpcap sys_ptrace)))
(dontaudit systemd_coredump_t self (capability (dac_override net_admin)))
(allow systemd_coredump_t self (cap_userns (sys_ptrace sys_admin)))
(allow systemd_coredump_t self (process (getcap setcap setfscreate)))
(allow systemd_coredump_t self (user_namespace (create)))
(allow systemd_coredump_t self (unix_dgram_socket (write create connect getopt setopt)))
(allow systemd_coredump_t self (unix_stream_socket (ioctl read write create getattr setattr append bind connect listen accept getopt setopt shutdown connectto)))
(allow systemd_coredump_t self (fifo_file (ioctl read write getattr lock append)))
(allow systemd_coredump_t systemd_coredump_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_coredump_t systemd_coredump_var_lib_t (file (ioctl read write create getattr setattr lock append map unlink link rename open)))
(allow kernel_t systemd_coredump_exec_t (file (ioctl read getattr map execute open)))
(allow kernel_t systemd_coredump_t (process (transition)))
(dontaudit kernel_t systemd_coredump_t (process (noatsecure siginh rlimitinh)))
(typetransition kernel_t systemd_coredump_exec_t process systemd_coredump_t)
(allow systemd_coredump_t kernel_t (fd (use)))
(allow systemd_coredump_t kernel_t (fifo_file (ioctl read write getattr lock append)))
(allow systemd_coredump_t kernel_t (process (sigchld)))
(allow systemd_coredump_t proc_t (dir (getattr open search)))
(allow systemd_coredump_t sysctl_t (dir (getattr open search)))
(allow systemd_coredump_t sysctl_kernel_t (dir (getattr open search)))
(allow systemd_coredump_t sysctl_kernel_t (file (ioctl read getattr lock open)))
(allow systemd_coredump_t proc_t (dir (getattr open search)))
(allow systemd_coredump_t sysctl_t (dir (getattr open search)))
(allow systemd_coredump_t sysctl_kernel_t (dir (ioctl read getattr lock open search)))
(allow systemd_coredump_t proc_t (dir (getattr open search)))
(allow systemd_coredump_t proc_t (file (ioctl read getattr lock open)))
(allow systemd_coredump_t proc_t (dir (getattr open search)))
(allow systemd_coredump_t proc_t (lnk_file (read getattr)))
(allow systemd_coredump_t proc_t (dir (getattr open search)))
(allow systemd_coredump_t proc_t (dir (ioctl read getattr lock open search)))
(allow systemd_coredump_t kernel_t (fifo_file (ioctl read write getattr lock append)))
(allow systemd_coredump_t kernel_t (fd (use)))
(allow systemd_coredump_t bin_t (dir (getattr open search)))
(allow systemd_coredump_t bin_t (lnk_file (read getattr)))
(allow systemd_coredump_t usr_t (dir (getattr open search)))
(allow systemd_coredump_t bin_t (dir (getattr open search)))
(allow systemd_coredump_t bin_t (dir (ioctl read getattr lock open search)))
(allow systemd_coredump_t bin_t (file (ioctl read getattr lock map execute open execute_no_trans)))
(allow systemd_coredump_t bin_t (dir (getattr open search)))
(allow systemd_coredump_t bin_t (lnk_file (read getattr)))
(allow systemd_coredump_t usr_t (dir (getattr open search)))
(allow systemd_coredump_t exec_type (dir (getattr open search)))
(allow systemd_coredump_t exec_type (file (ioctl read getattr map open)))
(allow systemd_coredump_t device_t (dir (getattr open search)))
(allow systemd_coredump_t kmsg_device_t (chr_file (ioctl write getattr lock append open)))
(allow systemd_coredump_t proc_t (dir (getattr open search)))
(allow systemd_coredump_t proc_t (dir (getattr open search)))
(allow systemd_coredump_t domain (dir (ioctl read getattr lock open search)))
(allow systemd_coredump_t domain (dir (getattr open search)))
(allow systemd_coredump_t domain (file (ioctl read getattr lock open)))
(allow systemd_coredump_t domain (dir (getattr open search)))
(allow systemd_coredump_t domain (lnk_file (read getattr)))
(allow systemd_coredump_t mountpoint (dir (getattr)))
(allow systemd_coredump_t etc_t (dir (ioctl read getattr lock open search)))
(allow systemd_coredump_t etc_t (dir (getattr open search)))
(allow systemd_coredump_t etc_t (file (ioctl read getattr lock open)))
(allow systemd_coredump_t etc_t (dir (getattr open search)))
(allow systemd_coredump_t etc_t (lnk_file (read getattr)))
(allow systemd_coredump_t var_t (dir (getattr open search)))
(allow systemd_coredump_t var_lib_t (dir (getattr open search)))
(allow systemd_coredump_t root_t (dir (mounton)))
(allow systemd_coredump_t filesystem_type (filesystem (getattr)))
(allow systemd_coredump_t file_type (filesystem (getattr)))
(allow systemd_coredump_t nsfs_t (file (getattr)))
(allow systemd_coredump_t cgroup_types (dir (getattr open search)))
(allow systemd_coredump_t cgroup_types (dir (getattr open search)))
(allow systemd_coredump_t sysfs_t (dir (getattr open search)))
(allow systemd_coredump_t sysfs_t (dir (getattr open search)))
(allow systemd_coredump_t init_var_lib_t (dir (ioctl read getattr lock open search)))
(allow systemd_coredump_t init_t (dir (getattr open search)))
(allow systemd_coredump_t init_t (file (ioctl read getattr lock open)))
(allow systemd_coredump_t init_t (lnk_file (read getattr)))
(allow systemd_coredump_t init_runtime_t (dir (getattr open search)))
(allow systemd_coredump_t init_runtime_t (sock_file (write)))
(allow systemd_coredump_t devlog_t (sock_file (write getattr append open)))
(allow systemd_coredump_t var_run_t (lnk_file (read getattr)))
(allow systemd_coredump_t var_t (dir (getattr open search)))
(allow systemd_coredump_t var_run_t (dir (getattr open search)))
(allow systemd_coredump_t init_runtime_t (dir (getattr open search)))
(allow systemd_coredump_t syslogd_runtime_t (dir (getattr open search)))
(allow systemd_coredump_t syslogd_t (unix_dgram_socket (sendto)))
(allow systemd_coredump_t syslogd_t (unix_stream_socket (connectto)))
(allow systemd_coredump_t self (unix_dgram_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow systemd_coredump_t self (unix_stream_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow systemd_coredump_t device_t (dir (getattr open search)))
(allow systemd_coredump_t device_t (dir (ioctl read getattr lock open search)))
(allow systemd_coredump_t device_t (dir (getattr open search)))
(allow systemd_coredump_t device_t (lnk_file (read getattr)))
(allow systemd_coredump_t console_device_t (chr_file (ioctl write getattr lock append open)))
(dontaudit systemd_coredump_t console_device_t (chr_file (ioctl read getattr lock open)))
(allow systemd_coredump_t etc_t (dir (getattr open search)))
(allow systemd_coredump_t selinux_config_t (dir (getattr open search)))
(allow systemd_coredump_t default_context_t (dir (getattr open search)))
(allow systemd_generator_t self (fifo_file (ioctl read write getattr lock append open)))
(allow systemd_generator_t self (capability (dac_override sys_admin sys_resource)))
(allow systemd_generator_t self (process (signal getsched getcap setfscreate)))
(allow systemd_generator_t self (vsock_socket (create)))
(allow systemd_generator_t bin_t (dir (getattr open search)))
(allow systemd_generator_t bin_t (lnk_file (read getattr)))
(allow systemd_generator_t usr_t (dir (getattr open search)))
(allow systemd_generator_t bin_t (dir (getattr open search)))
(allow systemd_generator_t bin_t (dir (ioctl read getattr lock open search)))
(allow systemd_generator_t shell_exec_t (file (ioctl read getattr lock map execute open execute_no_trans)))
(allow systemd_generator_t bin_t (dir (getattr open search)))
(allow systemd_generator_t bin_t (lnk_file (read getattr)))
(allow systemd_generator_t usr_t (dir (getattr open search)))
(allow systemd_generator_t bin_t (dir (getattr open search)))
(allow systemd_generator_t bin_t (dir (ioctl read getattr lock open search)))
(allow systemd_generator_t bin_t (file (ioctl read getattr lock map execute open execute_no_trans)))
(allow systemd_generator_t sysfs_t (dir (getattr open search)))
(allow systemd_generator_t sysfs_t (file (ioctl read getattr lock open)))
(allow systemd_generator_t sysfs_t (dir (getattr open search)))
(allow systemd_generator_t sysfs_t (lnk_file (read getattr)))
(allow systemd_generator_t sysfs_t (dir (getattr open search)))
(allow systemd_generator_t sysfs_t (dir (ioctl read getattr lock open search)))
(allow systemd_generator_t device_t (dir (getattr open search)))
(allow systemd_generator_t kmsg_device_t (chr_file (ioctl write getattr lock append open)))
(allow systemd_generator_t sysfs_t (dir (write)))
(allow systemd_generator_t device_t (dir (getattr open search)))
(allow systemd_generator_t urandom_device_t (chr_file (ioctl read getattr lock open)))
(allow systemd_generator_t sysfs_t (dir (ioctl write getattr lock open add_name search)))
(allow systemd_generator_t sysfs_t (file (create getattr open)))
(allow systemd_generator_t sysfs_t (dir (getattr open search)))
(allow systemd_generator_t sysfs_t (dir (ioctl read getattr lock open search)))
(allow systemd_generator_t sysfs_t (dir (getattr open search)))
(allow systemd_generator_t sysfs_t (file (ioctl write getattr lock append open)))
(allow systemd_generator_t device_t (dir (getattr open search)))
(allow systemd_generator_t vsock_device_t (chr_file (ioctl read getattr lock open)))
(allow systemd_generator_t etc_t (dir (ioctl read getattr lock open search)))
(allow systemd_generator_t etc_t (dir (getattr open search)))
(allow systemd_generator_t etc_t (file (ioctl read getattr lock open)))
(allow systemd_generator_t etc_t (dir (getattr open search)))
(allow systemd_generator_t etc_t (lnk_file (read getattr)))
(allow systemd_generator_t etc_t (dir (ioctl read getattr lock open search)))
(allow systemd_generator_t etc_t (dir (getattr open search)))
(allow systemd_generator_t etc_runtime_t (file (ioctl read getattr lock open)))
(allow systemd_generator_t etc_t (dir (getattr open search)))
(allow systemd_generator_t etc_runtime_t (lnk_file (read getattr)))
(allow systemd_generator_t var_run_t (lnk_file (read getattr)))
(allow systemd_generator_t var_t (dir (getattr open search)))
(allow systemd_generator_t var_run_t (dir (getattr open search)))
(allow systemd_generator_t boot_t (dir (ioctl read getattr lock open search)))
(allow systemd_generator_t boot_t (dir (getattr open search)))
(allow systemd_generator_t boot_t (file (ioctl read getattr lock open)))
(allow systemd_generator_t mountpoint (dir (getattr open search)))
(allow systemd_generator_t usr_t (dir (ioctl read getattr lock open search)))
(dontaudit systemd_generator_t file_type (dir (getattr)))
(dontaudit systemd_generator_t etc_runtime_t (file (read getattr)))
(allow systemd_generator_t efivarfs_t (dir (getattr open search)))
(allow systemd_generator_t efivarfs_t (dir (ioctl read getattr lock open search)))
(allow systemd_generator_t filesystem_type (filesystem (getattr)))
(allow systemd_generator_t file_type (filesystem (getattr)))
(allow systemd_generator_t nsfs_t (file (getattr)))
(allow systemd_generator_t init_runtime_t (file (create getattr open)))
(allow systemd_generator_t init_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_generator_t init_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow systemd_generator_t init_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_generator_t init_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
(allow systemd_generator_t init_runtime_t (dir (getattr open search)))
(allow systemd_generator_t init_runtime_t (file (ioctl read getattr lock open)))
(allow systemd_generator_t init_t (dir (getattr open search)))
(allow systemd_generator_t init_t (file (ioctl read getattr lock open)))
(allow systemd_generator_t init_t (lnk_file (read getattr)))
(allow systemd_generator_t init_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_generator_t init_runtime_t (file (getattr rename)))
(allow systemd_generator_t init_runtime_t (dir (getattr open search)))
(allow systemd_generator_t init_runtime_t (dir (getattr open search)))
(allow systemd_generator_t init_runtime_t (file (setattr)))
(allow systemd_generator_t init_runtime_t (file (ioctl write getattr lock append open)))
(allow systemd_generator_t systemd_unit_t (file (ioctl read getattr lock open)))
(allow systemd_generator_t systemd_unit_t (lnk_file (read getattr)))
(allow systemd_generator_t etc_t (dir (getattr open search)))
(allow systemd_generator_t initrc_exec_t (file (ioctl read getattr lock open)))
(allow systemd_generator_t systemdunit (dir (getattr open search)))
(allow systemd_generator_t systemdunit (dir (ioctl read getattr lock open search)))
(allow systemd_generator_t systemdunit (dir (getattr open search)))
(allow systemd_generator_t systemdunit (file (getattr)))
(allow systemd_generator_t systemdunit (dir (getattr open search)))
(allow systemd_generator_t systemdunit (lnk_file (read getattr)))
(allow systemd_generator_t etc_t (dir (ioctl read getattr lock open search)))
(allow systemd_generator_t init_script_file_type (file (getattr)))
(allow systemd_generator_t kernel_t (fd (use)))
(allow systemd_generator_t proc_t (dir (getattr open search)))
(allow systemd_generator_t proc_t (file (ioctl read getattr lock open)))
(allow systemd_generator_t proc_t (dir (getattr open search)))
(allow systemd_generator_t proc_t (lnk_file (read getattr)))
(allow systemd_generator_t proc_t (dir (getattr open search)))
(allow systemd_generator_t proc_t (dir (ioctl read getattr lock open search)))
(allow systemd_generator_t proc_t (dir (getattr open search)))
(allow systemd_generator_t sysctl_t (dir (getattr open search)))
(allow systemd_generator_t sysctl_kernel_t (dir (getattr open search)))
(allow systemd_generator_t sysctl_kernel_t (file (ioctl read getattr lock open)))
(allow systemd_generator_t proc_t (dir (getattr open search)))
(allow systemd_generator_t sysctl_t (dir (getattr open search)))
(allow systemd_generator_t sysctl_kernel_t (dir (ioctl read getattr lock open search)))
(dontaudit systemd_generator_t proc_t (filesystem (getattr)))
(dontaudit systemd_generator_t unlabeled_t (dir (getattr open search)))
(allow systemd_generator_t kernel_t (system (module_request)))
(allow systemd_generator_t bin_t (dir (getattr open search)))
(allow systemd_generator_t bin_t (lnk_file (read getattr)))
(allow systemd_generator_t usr_t (dir (getattr open search)))
(allow systemd_generator_t kmod_exec_t (file (ioctl read getattr map execute open)))
(allow systemd_generator_t kmod_t (process (transition)))
(dontaudit systemd_generator_t kmod_t (process (noatsecure siginh rlimitinh)))
(typetransition systemd_generator_t kmod_exec_t process kmod_t)
(allow kmod_t systemd_generator_t (fd (use)))
(allow kmod_t systemd_generator_t (fifo_file (ioctl read write getattr lock append)))
(allow kmod_t systemd_generator_t (process (sigchld)))
(allow systemd_generator_t device_t (dir (getattr open search)))
(allow systemd_generator_t device_t (dir (ioctl read getattr lock open search)))
(allow systemd_generator_t device_t (dir (getattr open search)))
(allow systemd_generator_t device_t (lnk_file (read getattr)))
(allow systemd_generator_t fixed_disk_device_t (blk_file (ioctl read getattr lock open)))
(allow systemd_generator_t fixed_disk_device_t (chr_file (ioctl read getattr lock open)))
(allow systemd_generator_t device_t (dir (getattr open search)))
(allow systemd_generator_t device_t (dir (ioctl read getattr lock open search)))
(allow systemd_generator_t device_t (dir (getattr open search)))
(allow systemd_generator_t device_t (lnk_file (read getattr)))
(allow systemd_generator_t fixed_disk_device_t (blk_file (ioctl write getattr lock append open)))
(allow systemd_generator_t fixed_disk_device_t (chr_file (ioctl write getattr lock append open)))
(allow systemd_generator_t device_t (dir (getattr open search)))
(allow systemd_generator_t device_t (dir (ioctl read getattr lock open search)))
(allow systemd_generator_t device_t (dir (getattr open search)))
(allow systemd_generator_t device_t (lnk_file (read getattr)))
(allow systemd_generator_t removable_device_t (blk_file (ioctl read getattr lock open)))
(allow systemd_generator_t self (tcp_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow systemd_generator_t self (udp_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow systemd_generator_t self (netlink_route_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown nlmsg_read)))
(allow systemd_generator_t netlabel_peer_t (peer (recv)))
(allow systemd_generator_t netlabel_peer_t (tcp_socket (recvfrom)))
(allow systemd_generator_t netlabel_peer_t (udp_socket (recvfrom)))
(allow systemd_generator_t netlabel_peer_t (rawip_socket (recvfrom)))
(allow systemd_generator_t netif_t (netif (ingress egress)))
(allow systemd_generator_t netif_t (netif (egress)))
(allow systemd_generator_t netif_t (netif (ingress)))
(allow systemd_generator_t node_t (node (recvfrom sendto)))
(allow systemd_generator_t node_t (node (sendto)))
(allow systemd_generator_t node_t (node (recvfrom)))
(allow systemd_generator_t dns_port_t (tcp_socket (name_connect)))
(allow systemd_generator_t dns_client_packet_t (packet (send)))
(allow systemd_generator_t dns_client_packet_t (packet (recv)))
(allow systemd_generator_t etc_t (dir (getattr open search)))
(allow systemd_generator_t var_run_t (lnk_file (read getattr)))
(allow systemd_generator_t var_t (dir (getattr open search)))
(allow systemd_generator_t var_run_t (dir (getattr open search)))
(allow systemd_generator_t net_conf_t (dir (ioctl read getattr lock open search)))
(allow systemd_generator_t net_conf_t (file (ioctl read getattr lock open)))
(allow systemd_generator_t net_conf_t (lnk_file (read getattr)))
(allow systemd_generator_t device_t (dir (getattr open search)))
(allow systemd_generator_t device_t (dir (ioctl read getattr lock open search)))
(allow systemd_generator_t device_t (dir (getattr open search)))
(allow systemd_generator_t device_t (lnk_file (read getattr)))
(allow systemd_generator_t tty_device_t (chr_file (ioctl read write getattr lock append open)))
(allow systemd_generator_t var_run_t (lnk_file (read getattr)))
(allow systemd_generator_t var_t (dir (getattr open search)))
(allow systemd_generator_t var_run_t (dir (getattr open search)))
(allow systemd_generator_t udev_runtime_t (dir (getattr open search)))
(allow systemd_generator_t udev_runtime_t (file (ioctl read getattr lock open)))
(allow systemd_generator_t udev_runtime_t (dir (getattr open search)))
(allow systemd_generator_t udev_runtime_t (lnk_file (read getattr)))
(allow systemd_generator_t shell_exec_t (file (entrypoint)))
(allow systemd_generator_t shell_exec_t (file (ioctl read getattr lock map execute open)))
(dontaudit systemd_homed_t self (capability (sys_admin sys_resource)))
(allow systemd_homed_t self (netlink_kobject_uevent_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow systemd_homed_t systemd_homework_exec_t (file (ioctl read getattr map execute open)))
(allow systemd_homed_t systemd_homework_t (process (transition)))
(dontaudit systemd_homed_t systemd_homework_t (process (noatsecure siginh rlimitinh)))
(typetransition systemd_homed_t systemd_homework_exec_t process systemd_homework_t)
(allow systemd_homework_t systemd_homed_t (fd (use)))
(allow systemd_homework_t systemd_homed_t (fifo_file (ioctl read write getattr lock append)))
(allow systemd_homework_t systemd_homed_t (process (sigchld)))
(allow systemd_homed_t systemd_homework_t (process2 (nnp_transition)))
(allow systemd_homed_t systemd_homed_tmpfs_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_homed_tmpfs_t tmpfs_t (filesystem (associate)))
(allow systemd_homed_t tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition systemd_homed_t tmpfs_t file systemd_homed_tmpfs_t)
(allow systemd_homed_t systemd_userdbd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_homed_t systemd_homed_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_homed_t systemd_homed_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_homed_t systemd_homed_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow systemd_homed_t systemd_userdbd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition systemd_homed_t systemd_userdbd_runtime_t sock_file systemd_homed_runtime_t)
(allow systemd_homed_t var_run_t (lnk_file (read getattr)))
(allow systemd_homed_t var_t (dir (getattr open search)))
(allow systemd_homed_t var_run_t (dir (getattr open search)))
(allow systemd_homed_t init_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition systemd_homed_t init_runtime_t dir systemd_homed_runtime_t)
(allow systemd_homed_t systemd_homed_storage_t (file (ioctl read getattr lock open)))
(allow systemd_homed_t systemd_homed_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow systemd_homed_t systemd_homed_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_homed_t var_t (dir (getattr open search)))
(allow systemd_homed_t var_lib_t (dir (getattr open search)))
(allow systemd_homed_t init_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition systemd_homed_t init_var_lib_t dir systemd_homed_var_lib_t)
(allow systemd_homed_t etc_t (dir (ioctl read getattr lock open search)))
(allow systemd_homed_t etc_t (dir (getattr open search)))
(allow systemd_homed_t etc_runtime_t (file (ioctl read getattr lock open)))
(allow systemd_homed_t etc_t (dir (getattr open search)))
(allow systemd_homed_t etc_runtime_t (lnk_file (read getattr)))
(allow systemd_homed_t sysfs_t (dir (getattr open search)))
(allow systemd_homed_t sysfs_t (file (ioctl read getattr lock open)))
(allow systemd_homed_t sysfs_t (dir (getattr open search)))
(allow systemd_homed_t sysfs_t (lnk_file (read getattr)))
(allow systemd_homed_t sysfs_t (dir (getattr open search)))
(allow systemd_homed_t sysfs_t (dir (ioctl read getattr lock open search)))
(allow systemd_homed_t home_root_t (dir (ioctl read getattr lock open search)))
(allow systemd_homed_t home_root_t (lnk_file (read getattr)))
(allow systemd_homed_t home_root_t (dir (watch)))
(allow systemd_homed_t etc_t (dir (ioctl read getattr lock open search)))
(allow systemd_homed_t etc_t (dir (getattr open search)))
(allow systemd_homed_t etc_t (file (ioctl read getattr lock open)))
(allow systemd_homed_t etc_t (dir (getattr open search)))
(allow systemd_homed_t etc_t (lnk_file (read getattr)))
(allow systemd_homed_t tmp_t (dir (getattr open search)))
(allow systemd_homed_t fs_t (filesystem (quotaget)))
(allow systemd_homed_t filesystem_type (filesystem (getattr)))
(allow systemd_homed_t file_type (filesystem (getattr)))
(allow systemd_homed_t memory_pressure_t (file (ioctl read write getattr setattr lock append open)))
(allow systemd_homed_t proc_t (dir (getattr open search)))
(allow systemd_homed_t sysctl_t (dir (getattr open search)))
(allow systemd_homed_t sysctl_kernel_t (dir (getattr open search)))
(allow systemd_homed_t sysctl_kernel_t (file (ioctl read getattr lock open)))
(allow systemd_homed_t proc_t (dir (getattr open search)))
(allow systemd_homed_t sysctl_t (dir (getattr open search)))
(allow systemd_homed_t sysctl_kernel_t (dir (ioctl read getattr lock open search)))
(allow systemd_homed_t proc_t (dir (getattr open search)))
(allow systemd_homed_t proc_t (file (ioctl read getattr lock open)))
(allow systemd_homed_t proc_t (dir (getattr open search)))
(allow systemd_homed_t proc_t (lnk_file (read getattr)))
(allow systemd_homed_t proc_t (dir (getattr open search)))
(allow systemd_homed_t proc_t (dir (ioctl read getattr lock open search)))
(allow systemd_homed_t var_run_t (lnk_file (read getattr)))
(allow systemd_homed_t var_t (dir (getattr open search)))
(allow systemd_homed_t var_run_t (dir (getattr open search)))
(allow systemd_homed_t udev_runtime_t (dir (getattr open search)))
(allow systemd_homed_t udev_runtime_t (file (ioctl read getattr lock open)))
(allow systemd_homed_t udev_runtime_t (dir (getattr open search)))
(allow systemd_homed_t udev_runtime_t (lnk_file (read getattr)))
(allow systemd_homework_t self (capability (chown fowner fsetid sys_admin)))
(dontaudit systemd_homework_t self (capability (sys_resource)))
(allow systemd_homework_t self (key (write search)))
(allow systemd_homework_t self (process (getsched)))
(allow systemd_homework_t self (sem (create destroy getattr setattr read write associate unix_read unix_write)))
(allow systemd_homework_t systemd_homed_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_homework_t systemd_homed_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow systemd_homework_t var_t (dir (getattr open search)))
(allow systemd_homework_t var_run_t (lnk_file (read getattr)))
(allow systemd_homework_t var_run_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition systemd_homework_t var_run_t file systemd_homed_runtime_t)
(allow systemd_homework_t var_run_t (lnk_file (read getattr)))
(allow systemd_homework_t var_t (dir (getattr open search)))
(allow systemd_homework_t var_run_t (dir (getattr open search)))
(allow systemd_homework_t init_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition systemd_homework_t init_runtime_t dir systemd_homed_runtime_t)
(allow systemd_homework_t systemd_homed_runtime_work_dir_t (dir (getattr open search)))
(allow systemd_homework_t systemd_homed_record_t (file (ioctl read getattr lock open)))
(allow systemd_homework_t systemd_homed_runtime_work_dir_t (dir (ioctl write getattr lock open add_name search)))
(allow systemd_homework_t systemd_homed_record_t (file (create getattr open)))
(allow systemd_homework_t systemd_homed_runtime_work_dir_t (dir (ioctl write getattr lock open remove_name search)))
(allow systemd_homework_t systemd_homed_record_t (file (getattr unlink)))
(allow systemd_homework_t etc_t (dir (ioctl read getattr lock open search)))
(allow systemd_homework_t etc_t (dir (getattr open search)))
(allow systemd_homework_t etc_runtime_t (file (ioctl read getattr lock open)))
(allow systemd_homework_t etc_t (dir (getattr open search)))
(allow systemd_homework_t etc_runtime_t (lnk_file (read getattr)))
(allow systemd_homework_t systemd_homed_runtime_work_dir_t (dir (mounton)))
(allow systemd_homework_t systemd_homed_storage_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_homework_t home_root_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition systemd_homework_t home_root_t file systemd_homed_storage_t)
(allow systemd_homework_t systemd_homed_tmpfs_t (file (ioctl read write getattr lock append)))
(allow systemd_homework_t device_t (dir (getattr open search)))
(allow systemd_homework_t loop_control_device_t (chr_file (ioctl read write getattr lock append open)))
(allow systemd_homework_t device_t (dir (getattr open search)))
(allow systemd_homework_t random_device_t (chr_file (ioctl read getattr lock open)))
(allow systemd_homework_t device_t (dir (getattr open search)))
(allow systemd_homework_t urandom_device_t (chr_file (ioctl read getattr lock open)))
(allow systemd_homework_t device_t (dir (getattr open search)))
(allow systemd_homework_t lvm_control_t (chr_file (ioctl read write getattr lock append open)))
(allow systemd_homework_t sysfs_t (dir (getattr open search)))
(allow systemd_homework_t sysfs_t (file (ioctl read getattr lock open)))
(allow systemd_homework_t sysfs_t (dir (getattr open search)))
(allow systemd_homework_t sysfs_t (lnk_file (read getattr)))
(allow systemd_homework_t sysfs_t (dir (getattr open search)))
(allow systemd_homework_t sysfs_t (dir (ioctl read getattr lock open search)))
(allow systemd_homework_t etc_t (dir (ioctl read getattr lock open search)))
(allow systemd_homework_t etc_t (dir (getattr open search)))
(allow systemd_homework_t etc_t (file (ioctl read getattr lock open)))
(allow systemd_homework_t etc_t (dir (getattr open search)))
(allow systemd_homework_t etc_t (lnk_file (read getattr)))
(allow systemd_homework_t var_run_t (dir (mounton)))
(allow systemd_homework_t filesystem_type (filesystem (getattr)))
(allow systemd_homework_t file_type (filesystem (getattr)))
(allow systemd_homework_t filesystem_type (dir (getattr open search)))
(allow systemd_homework_t fs_t (filesystem (mount)))
(allow systemd_homework_t fs_t (filesystem (unmount)))
(allow systemd_homework_t fsadm_exec_t (file (ioctl read getattr lock map execute open execute_no_trans)))
(allow systemd_homework_t bin_t (dir (getattr open search)))
(allow systemd_homework_t bin_t (lnk_file (read getattr)))
(allow systemd_homework_t usr_t (dir (getattr open search)))
(allow systemd_homework_t init_t (unix_stream_socket (ioctl read write getattr)))
(allow systemd_homework_t init_t (fd (use)))
(dontaudit systemd_homework_t init_t (key (search)))
(allow systemd_homework_t kernel_t (key (write)))
(allow systemd_homework_t kernel_t (system (ipc_info)))
(allow systemd_homework_t kernel_t (system (module_request)))
(allow systemd_homework_t proc_t (dir (getattr open search)))
(allow systemd_homework_t sysctl_t (dir (getattr open search)))
(allow systemd_homework_t sysctl_kernel_t (dir (getattr open search)))
(allow systemd_homework_t sysctl_kernel_t (file (ioctl read getattr lock open)))
(allow systemd_homework_t proc_t (dir (getattr open search)))
(allow systemd_homework_t sysctl_t (dir (getattr open search)))
(allow systemd_homework_t sysctl_kernel_t (dir (ioctl read getattr lock open search)))
(allow systemd_homework_t proc_t (dir (getattr open search)))
(allow systemd_homework_t proc_t (file (ioctl read getattr lock open)))
(allow systemd_homework_t proc_t (dir (getattr open search)))
(allow systemd_homework_t proc_t (lnk_file (read getattr)))
(allow systemd_homework_t proc_t (dir (getattr open search)))
(allow systemd_homework_t proc_t (dir (ioctl read getattr lock open search)))
(allow systemd_homework_t device_t (dir (getattr open search)))
(allow systemd_homework_t device_t (dir (ioctl read getattr lock open search)))
(allow systemd_homework_t device_t (dir (getattr open search)))
(allow systemd_homework_t device_t (lnk_file (read getattr)))
(allow systemd_homework_t fixed_disk_device_t (blk_file (ioctl read getattr lock open)))
(allow systemd_homework_t fixed_disk_device_t (chr_file (ioctl read getattr lock open)))
(allow systemd_homework_t device_t (dir (getattr open search)))
(allow systemd_homework_t device_t (dir (ioctl read getattr lock open search)))
(allow systemd_homework_t device_t (dir (getattr open search)))
(allow systemd_homework_t device_t (lnk_file (read getattr)))
(allow systemd_homework_t fixed_disk_device_t (blk_file (ioctl write getattr lock append open)))
(allow systemd_homework_t fixed_disk_device_t (chr_file (ioctl write getattr lock append open)))
(allow systemd_homework_t var_run_t (lnk_file (read getattr)))
(allow systemd_homework_t var_t (dir (getattr open search)))
(allow systemd_homework_t var_run_t (dir (getattr open search)))
(allow systemd_homework_t udev_runtime_t (dir (getattr open search)))
(allow systemd_homework_t udev_runtime_t (file (ioctl read getattr lock open)))
(allow systemd_homework_t udev_runtime_t (dir (getattr open search)))
(allow systemd_homework_t udev_runtime_t (lnk_file (read getattr)))
(allow systemd_hostnamed_t self (capability (sys_admin)))
(allow systemd_hostnamed_t self (process (setfscreate)))
(allow systemd_hostnamed_t cgroup_types (filesystem (getattr)))
(allow systemd_hostnamed_t fs_t (filesystem (getattr)))
(allow systemd_hostnamed_t proc_t (dir (getattr open search)))
(allow systemd_hostnamed_t sysctl_t (dir (getattr open search)))
(allow systemd_hostnamed_t sysctl_kernel_t (dir (getattr open search)))
(allow systemd_hostnamed_t sysctl_kernel_t (file (ioctl read getattr lock open)))
(allow systemd_hostnamed_t proc_t (dir (getattr open search)))
(allow systemd_hostnamed_t sysctl_t (dir (getattr open search)))
(allow systemd_hostnamed_t sysctl_kernel_t (dir (ioctl read getattr lock open search)))
(dontaudit systemd_hostnamed_t proc_t (filesystem (getattr)))
(allow systemd_hostnamed_t sysfs_t (dir (getattr open search)))
(allow systemd_hostnamed_t sysfs_t (file (ioctl read getattr lock open)))
(allow systemd_hostnamed_t sysfs_t (dir (getattr open search)))
(allow systemd_hostnamed_t sysfs_t (lnk_file (read getattr)))
(allow systemd_hostnamed_t sysfs_t (dir (getattr open search)))
(allow systemd_hostnamed_t sysfs_t (dir (ioctl read getattr lock open search)))
(allow systemd_hostnamed_t device_t (dir (getattr open search)))
(allow systemd_hostnamed_t vsock_device_t (chr_file (ioctl read getattr lock open)))
(allow systemd_hostnamed_t etc_t (dir (ioctl read getattr lock open search)))
(allow systemd_hostnamed_t etc_t (dir (getattr open search)))
(allow systemd_hostnamed_t etc_t (file (ioctl read getattr lock open)))
(allow systemd_hostnamed_t etc_t (dir (getattr open search)))
(allow systemd_hostnamed_t etc_t (lnk_file (read getattr)))
(allow systemd_hostnamed_t etc_t (dir (ioctl read getattr lock open search)))
(allow systemd_hostnamed_t etc_t (dir (getattr open search)))
(allow systemd_hostnamed_t etc_runtime_t (file (ioctl read getattr lock open)))
(allow systemd_hostnamed_t etc_t (dir (getattr open search)))
(allow systemd_hostnamed_t etc_runtime_t (lnk_file (read getattr)))
(allow systemd_hostnamed_t filesystem_type (filesystem (getattr)))
(allow systemd_hostnamed_t file_type (filesystem (getattr)))
(allow systemd_hostnamed_t init_runtime_t (dir (ioctl write getattr lock open remove_name search)))
(allow systemd_hostnamed_t init_runtime_t (file (getattr unlink)))
(allow systemd_hostnamed_t init_runtime_t (dir (getattr open search)))
(allow systemd_hostnamed_t init_runtime_t (file (ioctl read getattr lock open)))
(allow systemd_hostnamed_t init_runtime_t (file (ioctl write getattr lock append open)))
(allow systemd_hostnamed_t etc_t (dir (getattr open search)))
(allow systemd_hostnamed_t etc_t (lnk_file (read getattr)))
(allow systemd_hostnamed_t usr_t (dir (getattr open search)))
(allow systemd_hostnamed_t locale_t (dir (ioctl read getattr lock open search)))
(allow systemd_hostnamed_t locale_t (dir (getattr open search)))
(allow systemd_hostnamed_t locale_t (file (ioctl read getattr lock open)))
(allow systemd_hostnamed_t locale_t (dir (getattr open search)))
(allow systemd_hostnamed_t locale_t (lnk_file (read getattr)))
(allow systemd_hostnamed_t locale_t (file (map)))
(allow systemd_hostnamed_t sysfs_t (dir (getattr open search)))
(allow systemd_hostnamed_t sysfs_t (dir (getattr open search)))
(allow systemd_hostnamed_t security_t (dir (ioctl read getattr lock open search)))
(allow systemd_hostnamed_t security_t (file (ioctl read getattr map open)))
(allow systemd_hostnamed_t etc_t (dir (getattr open search)))
(allow systemd_hostnamed_t selinux_config_t (dir (ioctl read getattr lock open search)))
(allow systemd_hostnamed_t selinux_config_t (dir (getattr open search)))
(allow systemd_hostnamed_t selinux_config_t (file (ioctl read getattr lock open)))
(allow systemd_hostnamed_t selinux_config_t (dir (getattr open search)))
(allow systemd_hostnamed_t selinux_config_t (lnk_file (read getattr)))
(allow systemd_hostnamed_t etc_t (dir (getattr open search)))
(allow systemd_hostnamed_t selinux_config_t (dir (getattr open search)))
(allow systemd_hostnamed_t default_context_t (dir (getattr open search)))
(allow systemd_hostnamed_t file_context_t (dir (getattr open search)))
(allow systemd_hostnamed_t file_context_t (file (ioctl read getattr lock open)))
(allow systemd_hostnamed_t file_context_t (file (map)))
(allow systemd_hostnamed_t etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition systemd_hostnamed_t etc_t file net_conf_t)
(allow systemd_hostnamed_t etc_t (dir (getattr open search)))
(allow systemd_hostnamed_t net_conf_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_hostnamed_t var_run_t (lnk_file (read getattr)))
(allow systemd_hostnamed_t var_t (dir (getattr open search)))
(allow systemd_hostnamed_t var_run_t (dir (getattr open search)))
(allow systemd_hostnamed_t udev_runtime_t (dir (getattr open search)))
(allow systemd_hostnamed_t udev_runtime_t (file (ioctl read getattr lock open)))
(allow systemd_hostnamed_t udev_runtime_t (dir (getattr open search)))
(allow systemd_hostnamed_t udev_runtime_t (lnk_file (read getattr)))
(allow systemd_hw_t proc_t (dir (getattr open search)))
(allow systemd_hw_t sysctl_t (dir (getattr open search)))
(allow systemd_hw_t sysctl_kernel_t (dir (getattr open search)))
(allow systemd_hw_t sysctl_kernel_t (file (ioctl read getattr lock open)))
(allow systemd_hw_t proc_t (dir (getattr open search)))
(allow systemd_hw_t sysctl_t (dir (getattr open search)))
(allow systemd_hw_t sysctl_kernel_t (dir (ioctl read getattr lock open search)))
(allow systemd_hw_t systemd_hwdb_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
(allow systemd_hw_t etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition systemd_hw_t etc_t file systemd_hwdb_t)
(allow systemd_hw_t var_run_t (lnk_file (read getattr)))
(allow systemd_hw_t var_t (dir (getattr open search)))
(allow systemd_hw_t var_run_t (dir (getattr open search)))
(allow systemd_hw_t filesystem_type (filesystem (getattr)))
(allow systemd_hw_t file_type (filesystem (getattr)))
(allow systemd_hw_t cgroup_types (dir (getattr open search)))
(allow systemd_hw_t cgroup_types (dir (getattr open search)))
(allow systemd_hw_t sysfs_t (dir (getattr open search)))
(allow systemd_hw_t sysfs_t (dir (getattr open search)))
(allow systemd_hw_t security_t (filesystem (getattr)))
(allow systemd_hw_t sysfs_t (filesystem (getattr)))
(allow systemd_hw_t sysfs_t (dir (getattr open search)))
(allow systemd_hw_t sysfs_t (dir (getattr open search)))
(allow systemd_hw_t proc_t (dir (getattr open search)))
(allow systemd_hw_t proc_t (file (ioctl read getattr lock open)))
(allow systemd_hw_t proc_t (dir (getattr open search)))
(allow systemd_hw_t proc_t (lnk_file (read getattr)))
(allow systemd_hw_t proc_t (dir (getattr open search)))
(allow systemd_hw_t proc_t (dir (ioctl read getattr lock open search)))
(allow systemd_hw_t sysfs_t (dir (getattr open search)))
(allow systemd_hw_t sysfs_t (dir (getattr open search)))
(allow systemd_hw_t security_t (dir (ioctl read getattr lock open search)))
(allow systemd_hw_t security_t (file (ioctl read getattr map open)))
(allow systemd_hw_t init_t (dir (getattr open search)))
(allow systemd_hw_t init_t (file (ioctl read getattr lock open)))
(allow systemd_hw_t init_t (lnk_file (read getattr)))
(allow systemd_hw_t init_runtime_t (dir (getattr open search)))
(allow systemd_hw_t etc_t (dir (getattr open search)))
(allow systemd_hw_t selinux_config_t (dir (ioctl read getattr lock open search)))
(allow systemd_hw_t selinux_config_t (dir (getattr open search)))
(allow systemd_hw_t selinux_config_t (file (ioctl read getattr lock open)))
(allow systemd_hw_t selinux_config_t (dir (getattr open search)))
(allow systemd_hw_t selinux_config_t (lnk_file (read getattr)))
(allow systemd_hw_t etc_t (dir (getattr open search)))
(allow systemd_hw_t selinux_config_t (dir (getattr open search)))
(allow systemd_hw_t default_context_t (dir (getattr open search)))
(allow systemd_hw_t file_context_t (dir (getattr open search)))
(allow systemd_hw_t file_context_t (file (ioctl read getattr lock open)))
(allow systemd_hw_t file_context_t (file (map)))
(dontaudit systemd_journal_init_t self (capability (net_admin)))
(allow systemd_journal_init_t systemd_journal_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_journal_init_t systemd_journal_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow systemd_journal_init_t systemd_journal_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_journal_init_t systemd_journal_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_journal_init_t filesystem_type (filesystem (getattr)))
(allow systemd_journal_init_t file_type (filesystem (getattr)))
(allow systemd_journal_init_t cgroup_types (dir (getattr open search)))
(allow systemd_journal_init_t cgroup_types (dir (getattr open search)))
(allow systemd_journal_init_t sysfs_t (dir (getattr open search)))
(allow systemd_journal_init_t sysfs_t (dir (getattr open search)))
(allow systemd_journal_init_t nsfs_t (file (getattr)))
(allow systemd_journal_init_t proc_t (filesystem (getattr)))
(allow systemd_journal_init_t proc_t (dir (getattr open search)))
(allow systemd_journal_init_t sysctl_t (dir (getattr open search)))
(allow systemd_journal_init_t sysctl_kernel_t (dir (getattr open search)))
(allow systemd_journal_init_t sysctl_kernel_t (file (ioctl read getattr lock open)))
(allow systemd_journal_init_t proc_t (dir (getattr open search)))
(allow systemd_journal_init_t sysctl_t (dir (getattr open search)))
(allow systemd_journal_init_t sysctl_kernel_t (dir (ioctl read getattr lock open search)))
(allow systemd_journal_init_t proc_t (dir (getattr open search)))
(allow systemd_journal_init_t proc_t (file (ioctl read getattr lock open)))
(allow systemd_journal_init_t proc_t (dir (getattr open search)))
(allow systemd_journal_init_t proc_t (lnk_file (read getattr)))
(allow systemd_journal_init_t proc_t (dir (getattr open search)))
(allow systemd_journal_init_t proc_t (dir (ioctl read getattr lock open search)))
(allow systemd_journal_init_t init_t (dir (getattr open search)))
(allow systemd_journal_init_t init_t (file (ioctl read getattr lock open)))
(allow systemd_journal_init_t init_t (lnk_file (read getattr)))
(allow systemd_journal_init_t var_t (dir (getattr open search)))
(allow systemd_journal_init_t var_lib_t (dir (getattr open search)))
(allow systemd_journal_init_t init_var_lib_t (dir (getattr open search)))
(allow systemd_journal_init_t var_t (dir (getattr open search)))
(allow systemd_journal_init_t var_lib_t (dir (getattr open search)))
(allow systemd_journal_init_t init_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition systemd_journal_init_t init_var_lib_t dir systemd_journal_t)
(allow systemd_journal_init_t devlog_t (sock_file (write getattr append open)))
(allow systemd_journal_init_t var_run_t (lnk_file (read getattr)))
(allow systemd_journal_init_t var_t (dir (getattr open search)))
(allow systemd_journal_init_t var_run_t (dir (getattr open search)))
(allow systemd_journal_init_t init_runtime_t (dir (getattr open search)))
(allow systemd_journal_init_t syslogd_runtime_t (dir (getattr open search)))
(allow systemd_journal_init_t syslogd_t (unix_dgram_socket (sendto)))
(allow systemd_journal_init_t syslogd_t (unix_stream_socket (connectto)))
(allow systemd_journal_init_t self (unix_dgram_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow systemd_journal_init_t self (unix_stream_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow systemd_journal_init_t device_t (dir (getattr open search)))
(allow systemd_journal_init_t device_t (dir (ioctl read getattr lock open search)))
(allow systemd_journal_init_t device_t (dir (getattr open search)))
(allow systemd_journal_init_t device_t (lnk_file (read getattr)))
(allow systemd_journal_init_t console_device_t (chr_file (ioctl write getattr lock append open)))
(dontaudit systemd_journal_init_t console_device_t (chr_file (ioctl read getattr lock open)))
(allow systemd_journal_init_t var_run_t (lnk_file (read getattr)))
(allow systemd_journal_init_t var_t (dir (getattr open search)))
(allow systemd_journal_init_t var_run_t (dir (getattr open search)))
(allow systemd_journal_init_t init_runtime_t (dir (getattr open search)))
(allow systemd_journal_init_t syslogd_runtime_t (dir (getattr open search)))
(allow systemd_journal_init_t syslogd_runtime_t (sock_file (write getattr append open)))
(allow systemd_journal_init_t syslogd_t (unix_stream_socket (connectto)))
(allow systemd_journal_init_t etc_t (dir (getattr open search)))
(allow systemd_journal_init_t etc_t (lnk_file (read getattr)))
(allow systemd_journal_init_t usr_t (dir (getattr open search)))
(allow systemd_journal_init_t locale_t (dir (ioctl read getattr lock open search)))
(allow systemd_journal_init_t locale_t (dir (getattr open search)))
(allow systemd_journal_init_t locale_t (file (ioctl read getattr lock open)))
(allow systemd_journal_init_t locale_t (dir (getattr open search)))
(allow systemd_journal_init_t locale_t (lnk_file (read getattr)))
(allow systemd_journal_init_t locale_t (file (map)))
(allow systemd_locale_t proc_t (dir (getattr open search)))
(allow systemd_locale_t sysctl_t (dir (getattr open search)))
(allow systemd_locale_t sysctl_kernel_t (dir (getattr open search)))
(allow systemd_locale_t sysctl_kernel_t (file (ioctl read getattr lock open)))
(allow systemd_locale_t proc_t (dir (getattr open search)))
(allow systemd_locale_t sysctl_t (dir (getattr open search)))
(allow systemd_locale_t sysctl_kernel_t (dir (ioctl read getattr lock open search)))
(allow systemd_locale_t etc_t (dir (ioctl read getattr lock open search)))
(allow systemd_locale_t etc_t (dir (getattr open search)))
(allow systemd_locale_t etc_t (file (ioctl read getattr lock open)))
(allow systemd_locale_t etc_t (dir (getattr open search)))
(allow systemd_locale_t etc_t (lnk_file (read getattr)))
(allow systemd_locale_t usr_t (dir (ioctl read getattr lock open search)))
(allow systemd_locale_t usr_t (dir (getattr open search)))
(allow systemd_locale_t usr_t (file (ioctl read getattr lock open)))
(allow systemd_locale_t usr_t (dir (getattr open search)))
(allow systemd_locale_t usr_t (lnk_file (read getattr)))
(allow systemd_locale_t filesystem_type (filesystem (getattr)))
(allow systemd_locale_t file_type (filesystem (getattr)))
(allow systemd_locale_t cgroup_types (dir (getattr open search)))
(allow systemd_locale_t cgroup_types (dir (getattr open search)))
(allow systemd_locale_t sysfs_t (dir (getattr open search)))
(allow systemd_locale_t sysfs_t (dir (getattr open search)))
(allow systemd_locale_t nsfs_t (file (getattr)))
(allow systemd_locale_t init_runtime_t (dir (getattr open search)))
(allow systemd_locale_t init_runtime_t (sock_file (write getattr append open)))
(allow systemd_locale_t init_t (unix_stream_socket (connectto)))
(allow systemd_locale_t var_run_t (lnk_file (read getattr)))
(allow systemd_locale_t var_t (dir (getattr open search)))
(allow systemd_locale_t var_run_t (dir (getattr open search)))
(allow systemd_locale_t init_t (unix_stream_socket (getattr)))
(allow systemd_locale_t etc_t (dir (getattr open search)))
(allow systemd_locale_t etc_t (lnk_file (read getattr)))
(allow systemd_locale_t usr_t (dir (getattr open search)))
(allow systemd_locale_t locale_t (dir (ioctl read getattr lock open search)))
(allow systemd_locale_t locale_t (dir (getattr open search)))
(allow systemd_locale_t locale_t (file (ioctl read getattr lock open)))
(allow systemd_locale_t locale_t (dir (getattr open search)))
(allow systemd_locale_t locale_t (lnk_file (read getattr)))
(allow systemd_locale_t locale_t (file (map)))
(allow systemd_locale_t sysfs_t (dir (getattr open search)))
(allow systemd_locale_t sysfs_t (dir (getattr open search)))
(allow systemd_locale_t security_t (dir (ioctl read getattr lock open search)))
(allow systemd_locale_t security_t (file (ioctl read getattr map open)))
(allow systemd_locale_t etc_t (dir (getattr open search)))
(allow systemd_locale_t selinux_config_t (dir (getattr open search)))
(allow systemd_locale_t default_context_t (dir (getattr open search)))
(allow systemd_locale_t file_context_t (dir (getattr open search)))
(allow systemd_locale_t file_context_t (file (ioctl read getattr lock open)))
(allow systemd_locale_t file_context_t (file (map)))
(dontaudit systemd_log_parse_env_type self (capability (net_admin)))
(allow systemd_log_parse_env_type proc_t (dir (getattr open search)))
(allow systemd_log_parse_env_type proc_t (file (ioctl read getattr lock open)))
(allow systemd_log_parse_env_type proc_t (dir (getattr open search)))
(allow systemd_log_parse_env_type proc_t (lnk_file (read getattr)))
(allow systemd_log_parse_env_type proc_t (dir (getattr open search)))
(allow systemd_log_parse_env_type proc_t (dir (ioctl read getattr lock open search)))
(allow systemd_log_parse_env_type device_t (dir (getattr open search)))
(allow systemd_log_parse_env_type kmsg_device_t (chr_file (ioctl write getattr lock append open)))
(allow systemd_log_parse_env_type efivarfs_t (dir (getattr open search)))
(allow systemd_log_parse_env_type efivarfs_t (file (ioctl read getattr lock open)))
(allow systemd_log_parse_env_type device_t (dir (getattr open search)))
(allow systemd_log_parse_env_type device_t (dir (ioctl read getattr lock open search)))
(allow systemd_log_parse_env_type device_t (dir (getattr open search)))
(allow systemd_log_parse_env_type device_t (lnk_file (read getattr)))
(allow systemd_log_parse_env_type console_device_t (chr_file (ioctl read write getattr lock append open)))
(allow systemd_log_parse_env_type init_t (dir (getattr open search)))
(allow systemd_log_parse_env_type init_t (file (ioctl read getattr lock open)))
(allow systemd_log_parse_env_type init_t (lnk_file (read getattr)))
(allow systemd_log_parse_env_type devlog_t (sock_file (write getattr append open)))
(allow systemd_log_parse_env_type var_run_t (lnk_file (read getattr)))
(allow systemd_log_parse_env_type var_t (dir (getattr open search)))
(allow systemd_log_parse_env_type var_run_t (dir (getattr open search)))
(allow systemd_log_parse_env_type init_runtime_t (dir (getattr open search)))
(allow systemd_log_parse_env_type syslogd_runtime_t (dir (getattr open search)))
(allow systemd_log_parse_env_type syslogd_t (unix_dgram_socket (sendto)))
(allow systemd_log_parse_env_type syslogd_t (unix_stream_socket (connectto)))
(allow systemd_log_parse_env_type self (unix_dgram_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow systemd_log_parse_env_type self (unix_stream_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow systemd_log_parse_env_type device_t (dir (getattr open search)))
(allow systemd_log_parse_env_type device_t (dir (ioctl read getattr lock open search)))
(allow systemd_log_parse_env_type device_t (dir (getattr open search)))
(allow systemd_log_parse_env_type device_t (lnk_file (read getattr)))
(allow systemd_log_parse_env_type console_device_t (chr_file (ioctl write getattr lock append open)))
(dontaudit systemd_log_parse_env_type console_device_t (chr_file (ioctl read getattr lock open)))
(allow systemd_logind_t self (capability (chown dac_override dac_read_search fowner fsetid sys_admin sys_resource sys_tty_config)))
(allow systemd_logind_t self (process (getcap setfscreate)))
(allow systemd_logind_t self (netlink_kobject_uevent_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow systemd_logind_t self (unix_dgram_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow systemd_logind_t self (fifo_file (ioctl read write getattr lock append open)))
(allow systemd_logind_t systemd_logind_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow systemd_logind_t systemd_logind_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_logind_t var_t (dir (getattr open search)))
(allow systemd_logind_t var_lib_t (dir (getattr open search)))
(allow systemd_logind_t init_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition systemd_logind_t init_var_lib_t dir systemd_logind_var_lib_t)
(allow systemd_logind_t systemd_logind_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_logind_t systemd_logind_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_logind_t systemd_logind_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_logind_t systemd_logind_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_logind_t systemd_logind_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow systemd_logind_t var_t (dir (getattr open search)))
(allow systemd_logind_t var_run_t (lnk_file (read getattr)))
(allow systemd_logind_t var_run_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition systemd_logind_t var_run_t file systemd_logind_runtime_t)
(allow systemd_logind_t systemd_machined_runtime_t (dir (ioctl write getattr lock open add_name search)))
(allow systemd_logind_t systemd_machined_runtime_t (dir (create getattr)))
(allow systemd_logind_t systemd_logind_inhibit_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_logind_t systemd_logind_inhibit_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow systemd_logind_t systemd_logind_inhibit_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_logind_t systemd_logind_inhibit_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_logind_t systemd_logind_inhibit_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_logind_t systemd_logind_inhibit_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_logind_t var_run_t (lnk_file (read getattr)))
(allow systemd_logind_t var_t (dir (getattr open search)))
(allow systemd_logind_t var_run_t (dir (getattr open search)))
(allow systemd_logind_t init_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_logind_t systemd_machined_t (unix_stream_socket (connectto)))
(allow systemd_logind_t systemd_sessions_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow systemd_logind_t systemd_sessions_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_logind_t systemd_sessions_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_logind_t systemd_userdbd_runtime_t (dir (getattr open search)))
(allow systemd_logind_t systemd_userdbd_runtime_t (sock_file (write getattr append open)))
(allow systemd_logind_t systemd_userdbd_t (unix_stream_socket (connectto)))
(dontaudit systemd_logind_t proc_t (filesystem (getattr)))
(allow systemd_logind_t proc_t (dir (getattr open search)))
(allow systemd_logind_t sysctl_t (dir (getattr open search)))
(allow systemd_logind_t sysctl_kernel_t (dir (getattr open search)))
(allow systemd_logind_t sysctl_kernel_t (file (ioctl read getattr lock open)))
(allow systemd_logind_t proc_t (dir (getattr open search)))
(allow systemd_logind_t sysctl_t (dir (getattr open search)))
(allow systemd_logind_t sysctl_kernel_t (dir (ioctl read getattr lock open search)))
(allow systemd_logind_t wtmp_t (file (ioctl write getattr lock append open)))
(allow systemd_logind_t device_t (dir (getattr open search)))
(allow systemd_logind_t dri_device_t (chr_file (getattr)))
(allow systemd_logind_t device_t (dir (getattr open search)))
(allow systemd_logind_t usb_device_t (chr_file (getattr)))
(allow systemd_logind_t device_t (dir (getattr open search)))
(allow systemd_logind_t kvm_device_t (chr_file (getattr)))
(allow systemd_logind_t device_t (dir (getattr open search)))
(allow systemd_logind_t sound_device_t (chr_file (getattr)))
(allow systemd_logind_t device_t (dir (getattr open search)))
(allow systemd_logind_t v4l_device_t (chr_file (getattr)))
(allow systemd_logind_t self (capability (mknod)))
(allow systemd_logind_t device_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_logind_t wireless_device_t (chr_file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_logind_t device_t (dir (getattr open search)))
(allow systemd_logind_t urandom_device_t (chr_file (ioctl read getattr lock open)))
(allow systemd_logind_t device_t (dir (getattr open search)))
(allow systemd_logind_t dri_device_t (chr_file (ioctl read write getattr lock append open)))
(allow systemd_logind_t dri_device_t (chr_file (map)))
(allow systemd_logind_t device_t (dir (getattr open search)))
(allow systemd_logind_t event_device_t (chr_file (ioctl read write getattr lock append open)))
(allow systemd_logind_t sysfs_t (dir (getattr open search)))
(allow systemd_logind_t sysfs_t (file (ioctl read write getattr lock append open)))
(allow systemd_logind_t sysfs_t (dir (getattr open search)))
(allow systemd_logind_t sysfs_t (lnk_file (read getattr)))
(allow systemd_logind_t sysfs_t (dir (getattr open search)))
(allow systemd_logind_t sysfs_t (dir (ioctl read getattr lock open search)))
(allow systemd_logind_t device_t (dir (getattr open search)))
(allow systemd_logind_t dri_device_t (chr_file (setattr)))
(allow systemd_logind_t device_t (dir (getattr open search)))
(allow systemd_logind_t usb_device_t (chr_file (setattr)))
(allow systemd_logind_t device_t (dir (ioctl read getattr lock open search)))
(allow systemd_logind_t event_device_t (chr_file (setattr)))
(allow systemd_logind_t device_t (dir (getattr open search)))
(allow systemd_logind_t kvm_device_t (chr_file (setattr)))
(allow systemd_logind_t etc_t (dir (ioctl read getattr lock open search)))
(allow systemd_logind_t etc_t (dir (getattr open search)))
(allow systemd_logind_t etc_runtime_t (file (ioctl read getattr lock open)))
(allow systemd_logind_t etc_t (dir (getattr open search)))
(allow systemd_logind_t etc_runtime_t (lnk_file (read getattr)))
(allow systemd_logind_t device_t (dir (getattr open search)))
(allow systemd_logind_t sound_device_t (chr_file (setattr)))
(allow systemd_logind_t device_t (dir (getattr open search)))
(allow systemd_logind_t v4l_device_t (chr_file (setattr)))
(allow systemd_logind_t var_run_t (dir (write)))
(allow systemd_logind_t tmpfile (dir (ioctl read getattr lock open search)))
(allow systemd_logind_t tmpfile (dir (ioctl write getattr lock open remove_name search)))
(allow systemd_logind_t tmpfile (dir (getattr rmdir)))
(allow systemd_logind_t tmpfile (dir (ioctl write getattr lock open remove_name search)))
(allow systemd_logind_t tmpfile (file (getattr unlink)))
(allow systemd_logind_t tmpfile (dir (ioctl write getattr lock open remove_name search)))
(allow systemd_logind_t tmpfile (lnk_file (getattr unlink)))
(allow systemd_logind_t tmpfile (dir (ioctl write getattr lock open remove_name search)))
(allow systemd_logind_t tmpfile (fifo_file (getattr unlink)))
(allow systemd_logind_t tmpfile (dir (ioctl write getattr lock open remove_name search)))
(allow systemd_logind_t tmpfile (sock_file (getattr unlink)))
(allow systemd_logind_t var_run_t (lnk_file (read getattr)))
(allow systemd_logind_t var_t (dir (getattr open search)))
(allow systemd_logind_t var_run_t (dir (getattr open search)))
(allow systemd_logind_t tmpfsfile (dir (getattr open search)))
(allow systemd_logind_t tmpfsfile (file (getattr)))
(allow systemd_logind_t tmpfs_t (dir (getattr open search)))
(allow systemd_logind_t var_run_t (dir (getattr open search)))
(allow systemd_logind_t var_run_t (dir (ioctl write getattr lock open add_name remove_name search)))
(allow systemd_logind_t cgroup_types (filesystem (getattr)))
(allow systemd_logind_t cgroup_types (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_logind_t cgroup_types (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow systemd_logind_t sysfs_t (dir (getattr open search)))
(allow systemd_logind_t sysfs_t (dir (getattr open search)))
(allow systemd_logind_t cgroup_types (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_logind_t cgroup_types (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_logind_t sysfs_t (dir (getattr open search)))
(allow systemd_logind_t sysfs_t (dir (getattr open search)))
(allow systemd_logind_t tmpfs_t (filesystem (getattr)))
(allow systemd_logind_t tmpfs_t (dir (getattr)))
(allow systemd_logind_t tmpfs_t (dir (ioctl read getattr lock open search)))
(allow systemd_logind_t tmpfs_t (filesystem (mount)))
(allow systemd_logind_t cgroup_types (dir (getattr open search)))
(allow systemd_logind_t cgroup_types (file (ioctl read getattr lock open)))
(allow systemd_logind_t cgroup_types (dir (getattr open search)))
(allow systemd_logind_t cgroup_types (lnk_file (read getattr)))
(allow systemd_logind_t sysfs_t (dir (getattr open search)))
(allow systemd_logind_t sysfs_t (dir (getattr open search)))
(allow systemd_logind_t efivarfs_t (dir (getattr open search)))
(allow systemd_logind_t efivarfs_t (file (ioctl read getattr lock open)))
(allow systemd_logind_t tmpfs_t (dir (relabelfrom)))
(allow systemd_logind_t tmpfs_t (filesystem (unmount)))
(allow systemd_logind_t fs_t (filesystem (getattr)))
(allow systemd_logind_t memory_pressure_t (file (ioctl read write getattr setattr lock append open)))
(allow systemd_logind_t nsfs_t (file (getattr)))
(allow systemd_logind_t self (capability (audit_write)))
(allow systemd_logind_t self (netlink_audit_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown nlmsg_read nlmsg_relay)))
(allow systemd_logind_t sysfs_t (dir (getattr open search)))
(allow systemd_logind_t sysfs_t (dir (getattr open search)))
(allow systemd_logind_t security_t (dir (ioctl read getattr lock open search)))
(allow systemd_logind_t security_t (file (ioctl read getattr map open)))
(allow systemd_logind_t device_t (dir (getattr open search)))
(allow systemd_logind_t device_t (dir (ioctl read getattr lock open search)))
(allow systemd_logind_t device_t (dir (getattr open search)))
(allow systemd_logind_t device_t (lnk_file (read getattr)))
(allow systemd_logind_t removable_device_t (blk_file (getattr)))
(allow systemd_logind_t device_t (dir (getattr open search)))
(allow systemd_logind_t device_t (dir (ioctl read getattr lock open search)))
(allow systemd_logind_t device_t (dir (getattr open search)))
(allow systemd_logind_t device_t (lnk_file (read getattr)))
(allow systemd_logind_t scsi_generic_device_t (chr_file (getattr)))
(allow systemd_logind_t device_t (dir (getattr open search)))
(allow systemd_logind_t device_t (dir (ioctl read getattr lock open search)))
(allow systemd_logind_t device_t (dir (getattr open search)))
(allow systemd_logind_t device_t (lnk_file (read getattr)))
(allow systemd_logind_t removable_device_t (blk_file (setattr)))
(allow systemd_logind_t device_t (dir (getattr open search)))
(allow systemd_logind_t device_t (dir (ioctl read getattr lock open search)))
(allow systemd_logind_t device_t (dir (getattr open search)))
(allow systemd_logind_t device_t (lnk_file (read getattr)))
(allow systemd_logind_t scsi_generic_device_t (chr_file (setattr)))
(allow systemd_logind_t device_t (dir (getattr open search)))
(allow systemd_logind_t device_t (dir (ioctl read getattr lock open search)))
(allow systemd_logind_t device_t (dir (getattr open search)))
(allow systemd_logind_t device_t (lnk_file (read getattr)))
(allow systemd_logind_t tty_device_t (chr_file (setattr)))
(allow systemd_logind_t device_t (dir (getattr open search)))
(allow systemd_logind_t device_t (dir (ioctl read getattr lock open search)))
(allow systemd_logind_t device_t (dir (getattr open search)))
(allow systemd_logind_t device_t (lnk_file (read getattr)))
(allow systemd_logind_t tty_device_t (chr_file (ioctl read write getattr lock append open)))
(allow systemd_logind_t faillog_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_logind_t var_t (dir (getattr open search)))
(allow systemd_logind_t var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_logind_t var_log_t (lnk_file (read getattr)))
(allow systemd_logind_t init_runtime_t (dir (ioctl read getattr lock open search)))
(allow systemd_logind_t init_runtime_t (dir (ioctl write getattr lock open add_name search)))
(allow systemd_logind_t init_runtime_t (dir (create getattr)))
(allow systemd_logind_t initrc_t (dbus (send_msg)))
(allow systemd_logind_t systemdunit (service (status)))
(allow systemd_logind_t init_script_file_type (service (status)))
(allow systemd_logind_t init_t (system (status)))
(allow systemd_logind_t var_run_t (lnk_file (read getattr)))
(allow systemd_logind_t var_t (dir (getattr open search)))
(allow systemd_logind_t var_run_t (dir (ioctl read getattr lock open search)))
(allow systemd_logind_t initrc_runtime_t (file (ioctl read getattr lock open)))
(allow systemd_logind_t initrc_runtime_t (file (watch)))
(allow systemd_logind_t init_t (service (start)))
(allow systemd_logind_t init_t (service (status)))
(allow systemd_logind_t systemdunit (service (start)))
(allow systemd_logind_t init_script_file_type (service (start)))
(allow systemd_logind_t systemdunit (service (stop)))
(allow systemd_logind_t init_script_file_type (service (stop)))
(allow systemd_logind_t init_t (system (start)))
(allow systemd_logind_t init_t (system (stop)))
(allow systemd_logind_t etc_t (dir (getattr open search)))
(allow systemd_logind_t etc_t (lnk_file (read getattr)))
(allow systemd_logind_t usr_t (dir (getattr open search)))
(allow systemd_logind_t locale_t (dir (ioctl read getattr lock open search)))
(allow systemd_logind_t locale_t (dir (getattr open search)))
(allow systemd_logind_t locale_t (file (ioctl read getattr lock open)))
(allow systemd_logind_t locale_t (dir (getattr open search)))
(allow systemd_logind_t locale_t (lnk_file (read getattr)))
(allow systemd_logind_t locale_t (file (map)))
(allow systemd_logind_t proc_t (dir (getattr open search)))
(allow systemd_logind_t proc_t (dir (getattr open search)))
(allow systemd_logind_t local_login_t (file (ioctl read getattr lock open)))
(allow systemd_logind_t local_login_t (lnk_file (read getattr)))
(allow systemd_logind_t local_login_t (dir (ioctl read getattr lock open search)))
(allow systemd_logind_t security_t (filesystem (getattr)))
(allow systemd_logind_t sysfs_t (filesystem (getattr)))
(allow systemd_logind_t sysfs_t (dir (getattr open search)))
(allow systemd_logind_t sysfs_t (dir (getattr open search)))
(allow systemd_logind_t proc_t (dir (getattr open search)))
(allow systemd_logind_t proc_t (file (ioctl read getattr lock open)))
(allow systemd_logind_t proc_t (dir (getattr open search)))
(allow systemd_logind_t proc_t (lnk_file (read getattr)))
(allow systemd_logind_t proc_t (dir (getattr open search)))
(allow systemd_logind_t proc_t (dir (ioctl read getattr lock open search)))
(allow systemd_logind_t etc_t (dir (getattr open search)))
(allow systemd_logind_t selinux_config_t (dir (ioctl read getattr lock open search)))
(allow systemd_logind_t selinux_config_t (dir (getattr open search)))
(allow systemd_logind_t selinux_config_t (file (ioctl read getattr lock open)))
(allow systemd_logind_t selinux_config_t (dir (getattr open search)))
(allow systemd_logind_t selinux_config_t (lnk_file (read getattr)))
(allow systemd_logind_t etc_t (dir (getattr open search)))
(allow systemd_logind_t selinux_config_t (dir (getattr open search)))
(allow systemd_logind_t default_context_t (dir (ioctl read getattr lock open search)))
(allow systemd_logind_t default_context_t (dir (getattr open search)))
(allow systemd_logind_t default_context_t (file (ioctl read getattr lock open)))
(allow systemd_logind_t etc_t (dir (getattr open search)))
(allow systemd_logind_t selinux_config_t (dir (getattr open search)))
(allow systemd_logind_t default_context_t (dir (getattr open search)))
(allow systemd_logind_t file_context_t (dir (getattr open search)))
(allow systemd_logind_t file_context_t (file (ioctl read getattr lock open)))
(allow systemd_logind_t file_context_t (file (map)))
(allow systemd_logind_t power_unit_t (service (start)))
(allow systemd_logind_t var_run_t (lnk_file (read getattr)))
(allow systemd_logind_t var_t (dir (getattr open search)))
(allow systemd_logind_t var_run_t (dir (getattr open search)))
(allow systemd_logind_t udev_runtime_t (dir (ioctl read getattr lock open search)))
(allow systemd_logind_t var_run_t (lnk_file (read getattr)))
(allow systemd_logind_t var_t (dir (getattr open search)))
(allow systemd_logind_t var_run_t (dir (getattr open search)))
(allow systemd_logind_t udev_runtime_t (dir (getattr open search)))
(allow systemd_logind_t udev_runtime_t (file (ioctl read getattr lock open)))
(allow systemd_logind_t udev_runtime_t (dir (getattr open search)))
(allow systemd_logind_t udev_runtime_t (lnk_file (read getattr)))
(allow systemd_logind_t user_runtime_content_type (dir (ioctl write getattr lock open remove_name search)))
(allow systemd_logind_t user_runtime_content_type (dir (getattr rmdir)))
(allow systemd_logind_t user_runtime_content_type (dir (ioctl write getattr lock open remove_name search)))
(allow systemd_logind_t user_runtime_content_type (file (getattr unlink)))
(allow systemd_logind_t user_runtime_content_type (dir (ioctl write getattr lock open remove_name search)))
(allow systemd_logind_t user_runtime_content_type (fifo_file (getattr unlink)))
(allow systemd_logind_t user_runtime_content_type (dir (ioctl write getattr lock open remove_name search)))
(allow systemd_logind_t user_runtime_content_type (sock_file (getattr unlink)))
(allow systemd_logind_t user_runtime_content_type (dir (ioctl write getattr lock open remove_name search)))
(allow systemd_logind_t user_runtime_content_type (lnk_file (getattr unlink)))
(allow systemd_logind_t user_tmp_t (dir (ioctl write getattr lock open remove_name search)))
(allow systemd_logind_t user_tmp_t (dir (getattr rmdir)))
(allow systemd_logind_t user_tmp_t (dir (ioctl write getattr lock open remove_name search)))
(allow systemd_logind_t user_tmp_t (file (getattr unlink)))
(allow systemd_logind_t user_tmp_t (dir (ioctl write getattr lock open remove_name search)))
(allow systemd_logind_t user_tmp_t (lnk_file (getattr unlink)))
(allow systemd_logind_t user_tmp_t (dir (ioctl write getattr lock open remove_name search)))
(allow systemd_logind_t user_tmp_t (fifo_file (getattr unlink)))
(allow systemd_logind_t user_tmp_t (dir (ioctl write getattr lock open remove_name search)))
(allow systemd_logind_t user_tmp_t (sock_file (getattr unlink)))
(allow systemd_logind_t user_tmp_t (dir (ioctl read getattr lock open search)))
(allow systemd_logind_t user_runtime_t (dir (ioctl read getattr lock open search)))
(allow systemd_logind_t tmp_t (dir (getattr open search)))
(allow systemd_logind_t user_runtime_t (dir (getattr open search)))
(allow systemd_logind_t user_runtime_root_t (dir (getattr open search)))
(allow systemd_logind_t var_run_t (lnk_file (read getattr)))
(allow systemd_logind_t var_t (dir (getattr open search)))
(allow systemd_logind_t var_run_t (dir (getattr open search)))
(allow systemd_logind_t user_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow systemd_logind_t user_runtime_root_t (dir (getattr open search)))
(allow systemd_logind_t var_run_t (lnk_file (read getattr)))
(allow systemd_logind_t var_t (dir (getattr open search)))
(allow systemd_logind_t var_run_t (dir (getattr open search)))
(allow systemd_logind_t user_runtime_root_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow systemd_logind_t var_run_t (lnk_file (read getattr)))
(allow systemd_logind_t var_t (dir (getattr open search)))
(allow systemd_logind_t var_run_t (dir (getattr open search)))
(allow systemd_logind_t user_runtime_t (dir (mounton)))
(allow systemd_logind_t userdomain (dir (getattr open search)))
(allow systemd_logind_t userdomain (file (ioctl read getattr lock open)))
(allow systemd_logind_t userdomain (dir (getattr open search)))
(allow systemd_logind_t userdomain (lnk_file (read getattr)))
(allow systemd_logind_t proc_t (dir (getattr open search)))
(allow systemd_logind_t proc_t (dir (getattr open search)))
(allow systemd_logind_t user_tmpfs_t (dir (ioctl read getattr lock relabelfrom relabelto open search)))
(allow systemd_logind_t tmpfs_t (dir (getattr open search)))
(allow systemd_logind_t user_tmpfs_t (dir (ioctl read getattr lock open search)))
(allow systemd_logind_t user_tmpfs_t (file (getattr relabelfrom relabelto)))
(allow systemd_logind_t tmpfs_t (dir (getattr open search)))
(allow systemd_logind_t user_runtime_t (dir (relabelfrom)))
(allow systemd_logind_t user_runtime_t (dir (relabelto)))
(allow systemd_logind_t user_tty_device_t (chr_file (setattr)))
(allow systemd_logind_t user_tty_device_t (chr_file (ioctl read write getattr append open)))
(allow systemd_machined_t self (capability (setgid sys_chroot sys_ptrace)))
(allow systemd_machined_t self (cap_userns (sys_chroot)))
(allow systemd_machined_t self (process (setfscreate)))
(allow systemd_machined_t self (unix_dgram_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow systemd_machined_t device_t (dir (getattr open search)))
(allow systemd_machined_t device_t (dir (ioctl read getattr lock open search)))
(allow systemd_machined_t device_t (dir (getattr open search)))
(allow systemd_machined_t device_t (lnk_file (read getattr)))
(allow systemd_machined_t ptmx_t (chr_file (ioctl read write getattr lock append open)))
(allow systemd_machined_t devpts_t (dir (ioctl read getattr lock open search)))
(allow systemd_machined_t devpts_t (filesystem (getattr)))
(dontaudit systemd_machined_t bsdpty_device_t (chr_file (read write getattr)))
(typetransition systemd_machined_t devpts_t chr_file systemd_machined_devpts_t)
(allow systemd_machined_t systemd_machined_devpts_t (chr_file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_machined_t systemd_machined_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_machined_t systemd_machined_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_machined_t systemd_machined_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
(allow systemd_machined_t systemd_userdbd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_machined_t systemd_userdbd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_machined_t proc_t (filesystem (getattr)))
(allow systemd_machined_t proc_t (dir (getattr open search)))
(allow systemd_machined_t sysctl_t (dir (getattr open search)))
(allow systemd_machined_t sysctl_kernel_t (dir (getattr open search)))
(allow systemd_machined_t sysctl_kernel_t (file (ioctl read getattr lock open)))
(allow systemd_machined_t proc_t (dir (getattr open search)))
(allow systemd_machined_t sysctl_t (dir (getattr open search)))
(allow systemd_machined_t sysctl_kernel_t (dir (ioctl read getattr lock open search)))
(allow systemd_machined_t proc_t (dir (getattr open search)))
(allow systemd_machined_t proc_t (file (ioctl read getattr lock open)))
(allow systemd_machined_t proc_t (dir (getattr open search)))
(allow systemd_machined_t proc_t (lnk_file (read getattr)))
(allow systemd_machined_t proc_t (dir (getattr open search)))
(allow systemd_machined_t proc_t (dir (ioctl read getattr lock open search)))
(allow systemd_machined_t device_t (filesystem (getattr)))
(allow systemd_machined_t device_t (dir (getattr open search)))
(allow systemd_machined_t urandom_device_t (chr_file (setattr)))
(allow systemd_machined_t etc_t (dir (ioctl read getattr lock open search)))
(allow systemd_machined_t etc_t (dir (getattr open search)))
(allow systemd_machined_t etc_t (file (ioctl read getattr lock open)))
(allow systemd_machined_t etc_t (dir (getattr open search)))
(allow systemd_machined_t etc_t (lnk_file (read getattr)))
(allow systemd_machined_t cgroup_types (filesystem (getattr)))
(allow systemd_machined_t tmpfs_t (filesystem (getattr)))
(allow systemd_machined_t fs_t (filesystem (getattr)))
(allow systemd_machined_t nsfs_t (file (ioctl read getattr lock open)))
(allow systemd_machined_t memory_pressure_t (file (ioctl read write getattr setattr lock append open)))
(allow systemd_machined_t security_t (filesystem (getattr)))
(allow systemd_machined_t sysfs_t (filesystem (getattr)))
(allow systemd_machined_t sysfs_t (dir (getattr open search)))
(allow systemd_machined_t sysfs_t (dir (getattr open search)))
(allow systemd_machined_t proc_t (dir (getattr open search)))
(allow systemd_machined_t proc_t (dir (getattr open search)))
(allow systemd_machined_t initrc_t (dir (ioctl read getattr lock open search)))
(allow systemd_machined_t initrc_t (file (ioctl read getattr lock open)))
(allow systemd_machined_t initrc_t (lnk_file (read getattr)))
(allow systemd_machined_t initrc_t (process (getattr)))
(allow systemd_machined_t init_t (system (status)))
(allow systemd_machined_t init_t (dir (getattr open search)))
(allow systemd_machined_t init_t (file (ioctl read getattr lock open)))
(allow systemd_machined_t init_t (lnk_file (read getattr)))
(allow systemd_machined_t init_t (service (start)))
(allow systemd_machined_t init_t (service (status)))
(allow systemd_machined_t init_t (system (start)))
(allow systemd_machined_t init_t (system (stop)))
(allow systemd_machined_t systemd_unit_t (service (status)))
(allow systemd_machined_t systemd_unit_t (service (start)))
(allow systemd_machined_t systemd_unit_t (service (stop)))
(allow systemd_machined_t systemd_transient_unit_t (service (status)))
(allow systemd_machined_t systemd_transient_unit_t (service (start)))
(allow systemd_machined_t systemd_transient_unit_t (service (stop)))
(allow systemd_machined_t devlog_t (sock_file (write getattr append open)))
(allow systemd_machined_t var_run_t (lnk_file (read getattr)))
(allow systemd_machined_t var_t (dir (getattr open search)))
(allow systemd_machined_t var_run_t (dir (getattr open search)))
(allow systemd_machined_t init_runtime_t (dir (getattr open search)))
(allow systemd_machined_t syslogd_runtime_t (dir (getattr open search)))
(allow systemd_machined_t syslogd_t (unix_dgram_socket (sendto)))
(allow systemd_machined_t syslogd_t (unix_stream_socket (connectto)))
(allow systemd_machined_t self (unix_dgram_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow systemd_machined_t self (unix_stream_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow systemd_machined_t device_t (dir (getattr open search)))
(allow systemd_machined_t device_t (dir (ioctl read getattr lock open search)))
(allow systemd_machined_t device_t (dir (getattr open search)))
(allow systemd_machined_t device_t (lnk_file (read getattr)))
(allow systemd_machined_t console_device_t (chr_file (ioctl write getattr lock append open)))
(dontaudit systemd_machined_t console_device_t (chr_file (ioctl read getattr lock open)))
(allow systemd_machined_t etc_t (dir (getattr open search)))
(allow systemd_machined_t selinux_config_t (dir (getattr open search)))
(allow systemd_machined_t default_context_t (dir (getattr open search)))
(allow systemd_machined_t devpts_t (filesystem (getattr)))
(allow systemd_machine_id_setup_t self (capability (setgid sys_chroot sys_admin)))
(allow systemd_machine_id_setup_t var_t (dir (ioctl read getattr lock open search)))
(allow systemd_machine_id_setup_t root_t (dir (mounton)))
(allow systemd_machine_id_setup_t etc_t (dir (ioctl read getattr lock open search)))
(allow systemd_machine_id_setup_t etc_t (dir (getattr open search)))
(allow systemd_machine_id_setup_t etc_runtime_t (file (ioctl read write getattr lock append open)))
(allow systemd_machine_id_setup_t cgroup_types (filesystem (getattr)))
(allow systemd_machine_id_setup_t cgroup_types (dir (getattr open search)))
(allow systemd_machine_id_setup_t cgroup_types (dir (getattr open search)))
(allow systemd_machine_id_setup_t sysfs_t (dir (getattr open search)))
(allow systemd_machine_id_setup_t sysfs_t (dir (getattr open search)))
(allow systemd_machine_id_setup_t tmpfs_t (filesystem (getattr)))
(allow systemd_machine_id_setup_t nsfs_t (file (ioctl read getattr lock open)))
(allow systemd_machine_id_setup_t tmpfs_t (filesystem (unmount)))
(dontaudit systemd_machine_id_setup_t proc_t (filesystem (getattr)))
(allow systemd_machine_id_setup_t proc_t (dir (getattr open search)))
(allow systemd_machine_id_setup_t sysctl_t (dir (getattr open search)))
(allow systemd_machine_id_setup_t sysctl_kernel_t (dir (getattr open search)))
(allow systemd_machine_id_setup_t sysctl_kernel_t (file (ioctl read getattr lock open)))
(allow systemd_machine_id_setup_t proc_t (dir (getattr open search)))
(allow systemd_machine_id_setup_t sysctl_t (dir (getattr open search)))
(allow systemd_machine_id_setup_t sysctl_kernel_t (dir (ioctl read getattr lock open search)))
(allow systemd_machine_id_setup_t proc_t (dir (getattr open search)))
(allow systemd_machine_id_setup_t proc_t (file (ioctl read getattr lock open)))
(allow systemd_machine_id_setup_t proc_t (dir (getattr open search)))
(allow systemd_machine_id_setup_t proc_t (lnk_file (read getattr)))
(allow systemd_machine_id_setup_t proc_t (dir (getattr open search)))
(allow systemd_machine_id_setup_t proc_t (dir (ioctl read getattr lock open search)))
(allow systemd_machine_id_setup_t init_runtime_t (dir (getattr open search)))
(allow systemd_machine_id_setup_t init_runtime_t (file (ioctl read getattr lock open)))
(allow systemd_machine_id_setup_t init_t (dir (getattr open search)))
(allow systemd_machine_id_setup_t init_t (file (ioctl read getattr lock open)))
(allow systemd_machine_id_setup_t init_t (lnk_file (read getattr)))
(allow systemd_modules_load_t cgroup_types (filesystem (getattr)))
(allow systemd_modules_load_t fs_t (filesystem (getattr)))
(allow systemd_modules_load_t nsfs_t (file (getattr)))
(allow systemd_modules_load_t proc_t (dir (getattr open search)))
(allow systemd_modules_load_t sysctl_t (dir (getattr open search)))
(allow systemd_modules_load_t sysctl_kernel_t (dir (getattr open search)))
(allow systemd_modules_load_t sysctl_kernel_t (file (ioctl read getattr lock open)))
(allow systemd_modules_load_t proc_t (dir (getattr open search)))
(allow systemd_modules_load_t sysctl_t (dir (getattr open search)))
(allow systemd_modules_load_t sysctl_kernel_t (dir (ioctl read getattr lock open search)))
(allow systemd_modules_load_t kernel_t (system (module_request)))
(dontaudit systemd_modules_load_t proc_t (filesystem (getattr)))
(allow systemd_modules_load_t sysfs_t (dir (getattr open search)))
(allow systemd_modules_load_t sysfs_t (file (ioctl read getattr lock open)))
(allow systemd_modules_load_t sysfs_t (dir (getattr open search)))
(allow systemd_modules_load_t sysfs_t (lnk_file (read getattr)))
(allow systemd_modules_load_t sysfs_t (dir (getattr open search)))
(allow systemd_modules_load_t sysfs_t (dir (ioctl read getattr lock open search)))
(allow systemd_modules_load_t modules_object_t (dir (ioctl read getattr lock open search)))
(allow systemd_modules_load_t modules_object_t (dir (getattr open search)))
(allow systemd_modules_load_t modules_object_t (file (ioctl read getattr lock open)))
(allow systemd_modules_load_t modules_object_t (file (map)))
(allow systemd_modules_load_t modules_object_t (dir (getattr open search)))
(allow systemd_modules_load_t modules_object_t (lnk_file (read getattr)))
(allow systemd_modules_load_t etc_t (dir (ioctl read getattr lock open search)))
(allow systemd_modules_load_t etc_t (dir (getattr open search)))
(allow systemd_modules_load_t etc_t (file (ioctl read getattr lock open)))
(allow systemd_modules_load_t etc_t (dir (getattr open search)))
(allow systemd_modules_load_t etc_t (lnk_file (read getattr)))
(allow systemd_modules_load_t filesystem_type (filesystem (getattr)))
(allow systemd_modules_load_t file_type (filesystem (getattr)))
(allow systemd_modules_load_t filesystem_type (dir (getattr open search)))
(allow systemd_modules_load_t etc_t (dir (getattr open search)))
(allow systemd_modules_load_t boot_t (dir (getattr open search)))
(allow systemd_modules_load_t modules_conf_t (dir (ioctl read getattr lock open search)))
(allow systemd_modules_load_t modules_conf_t (file (ioctl read getattr lock open)))
(allow systemd_modules_load_t modules_conf_t (lnk_file (read getattr)))
(allow systemd_modules_load_t modules_object_t (dir (ioctl read getattr lock open search)))
(allow systemd_modules_load_t modules_object_t (dir (getattr open search)))
(allow systemd_modules_load_t modules_object_t (lnk_file (read getattr)))
(allow systemd_modules_load_t modules_dep_t (file (ioctl read getattr lock map open)))
(allow systemd_networkd_t self (capability (chown dac_override fowner setgid setuid setpcap net_admin net_raw)))
(allow systemd_networkd_t self (netlink_generic_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow systemd_networkd_t self (netlink_kobject_uevent_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow systemd_networkd_t self (netlink_netfilter_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow systemd_networkd_t self (netlink_route_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown nlmsg_read nlmsg_write)))
(allow systemd_networkd_t self (packet_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow systemd_networkd_t self (process (getcap setcap setfscreate)))
(allow systemd_networkd_t self (rawip_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow systemd_networkd_t self (tun_socket (ioctl read write create getattr setattr relabelfrom relabelto append bind connect getopt setopt shutdown)))
(allow systemd_networkd_t self (udp_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow systemd_networkd_t self (unix_dgram_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow systemd_networkd_t systemd_networkd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_networkd_t systemd_networkd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow systemd_networkd_t systemd_networkd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_networkd_t systemd_networkd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_networkd_t systemd_networkd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_networkd_t systemd_networkd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
(allow systemd_networkd_t systemd_networkd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_networkd_t systemd_networkd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_networkd_t var_t (dir (getattr open search)))
(allow systemd_networkd_t var_lib_t (dir (getattr open search)))
(allow systemd_networkd_t init_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition systemd_networkd_t init_var_lib_t dir systemd_networkd_var_lib_t)
(allow systemd_networkd_t systemd_networkd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_networkd_t systemd_networkd_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow systemd_networkd_t systemd_networkd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_networkd_t systemd_networkd_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_networkd_t proc_t (dir (getattr open search)))
(allow systemd_networkd_t proc_t (file (ioctl read getattr lock open)))
(allow systemd_networkd_t proc_t (dir (getattr open search)))
(allow systemd_networkd_t proc_t (lnk_file (read getattr)))
(allow systemd_networkd_t proc_t (dir (getattr open search)))
(allow systemd_networkd_t proc_t (dir (ioctl read getattr lock open search)))
(allow systemd_networkd_t proc_t (dir (getattr open search)))
(allow systemd_networkd_t sysctl_t (dir (getattr open search)))
(allow systemd_networkd_t sysctl_kernel_t (dir (getattr open search)))
(allow systemd_networkd_t sysctl_kernel_t (file (ioctl read getattr lock open)))
(allow systemd_networkd_t proc_t (dir (getattr open search)))
(allow systemd_networkd_t sysctl_t (dir (getattr open search)))
(allow systemd_networkd_t sysctl_kernel_t (dir (ioctl read getattr lock open search)))
(allow systemd_networkd_t proc_t (dir (getattr open search)))
(allow systemd_networkd_t proc_net_t (dir (getattr open search)))
(allow systemd_networkd_t proc_net_t (file (ioctl read getattr lock open)))
(allow systemd_networkd_t proc_t (dir (getattr open search)))
(allow systemd_networkd_t proc_net_t (dir (getattr open search)))
(allow systemd_networkd_t proc_net_t (lnk_file (read getattr)))
(allow systemd_networkd_t proc_t (dir (getattr open search)))
(allow systemd_networkd_t proc_net_t (dir (ioctl read getattr lock open search)))
(allow systemd_networkd_t kernel_t (system (module_request)))
(allow systemd_networkd_t proc_t (dir (getattr open search)))
(allow systemd_networkd_t sysctl_t (dir (getattr open search)))
(allow systemd_networkd_t sysctl_net_t (dir (getattr open search)))
(allow systemd_networkd_t sysctl_net_t (file (ioctl read write getattr lock append open)))
(allow systemd_networkd_t proc_t (dir (getattr open search)))
(allow systemd_networkd_t sysctl_t (dir (getattr open search)))
(allow systemd_networkd_t sysctl_net_t (dir (ioctl read getattr lock open search)))
(dontaudit systemd_networkd_t proc_t (filesystem (getattr)))
(allow systemd_networkd_t bin_t (file (entrypoint)))
(allow systemd_networkd_t bin_t (file (ioctl read getattr lock map execute open)))
(allow systemd_networkd_t bin_t (dir (getattr open search)))
(allow systemd_networkd_t bin_t (lnk_file (read getattr)))
(allow systemd_networkd_t usr_t (dir (getattr open search)))
(allow systemd_networkd_t bin_t (dir (getattr open search)))
(allow systemd_networkd_t bin_t (dir (ioctl read getattr lock open search)))
(allow systemd_networkd_t bin_t (file (ioctl read getattr lock map execute open execute_no_trans)))
(allow systemd_networkd_t icmp_packet_t (packet (send)))
(allow systemd_networkd_t icmp_packet_t (packet (recv)))
(allow systemd_networkd_t dhcpd_client_packet_t (packet (send)))
(allow systemd_networkd_t dhcpd_client_packet_t (packet (recv)))
(allow systemd_networkd_t device_t (dir (getattr open search)))
(allow systemd_networkd_t device_t (dir (ioctl read getattr lock open search)))
(allow systemd_networkd_t device_t (dir (getattr open search)))
(allow systemd_networkd_t device_t (lnk_file (read getattr)))
(allow systemd_networkd_t tun_tap_device_t (chr_file (ioctl read write getattr lock append open)))
(allow systemd_networkd_t dhcpc_port_t (udp_socket (name_bind)))
(allow systemd_networkd_t self (capability (net_bind_service)))
(allow systemd_networkd_t node_t (udp_socket (node_bind)))
(allow systemd_networkd_t device_t (dir (getattr open search)))
(allow systemd_networkd_t urandom_device_t (chr_file (ioctl read getattr lock open)))
(allow systemd_networkd_t sysfs_t (dir (getattr open search)))
(allow systemd_networkd_t sysfs_t (file (ioctl read getattr lock open)))
(allow systemd_networkd_t sysfs_t (dir (getattr open search)))
(allow systemd_networkd_t sysfs_t (lnk_file (read getattr)))
(allow systemd_networkd_t sysfs_t (dir (getattr open search)))
(allow systemd_networkd_t sysfs_t (dir (ioctl read getattr lock open search)))
(allow systemd_networkd_t device_t (dir (getattr open search)))
(allow systemd_networkd_t kmsg_device_t (chr_file (ioctl write getattr lock append open)))
(allow systemd_networkd_t etc_t (dir (ioctl read getattr lock open search)))
(allow systemd_networkd_t etc_t (dir (getattr open search)))
(allow systemd_networkd_t etc_t (file (ioctl read getattr lock open)))
(allow systemd_networkd_t etc_t (dir (getattr open search)))
(allow systemd_networkd_t etc_t (lnk_file (read getattr)))
(allow systemd_networkd_t etc_t (dir (ioctl read getattr lock open search)))
(allow systemd_networkd_t etc_t (dir (getattr open search)))
(allow systemd_networkd_t etc_runtime_t (file (ioctl read getattr lock open)))
(allow systemd_networkd_t etc_t (dir (getattr open search)))
(allow systemd_networkd_t etc_runtime_t (lnk_file (read getattr)))
(allow systemd_networkd_t var_run_t (dir (watch)))
(allow systemd_networkd_t root_t (dir (watch)))
(allow systemd_networkd_t var_run_t (lnk_file (read getattr)))
(allow systemd_networkd_t var_t (dir (getattr open search)))
(allow systemd_networkd_t var_run_t (dir (ioctl read getattr lock open search)))
(allow systemd_networkd_t filesystem_type (filesystem (getattr)))
(allow systemd_networkd_t file_type (filesystem (getattr)))
(allow systemd_networkd_t cgroup_types (dir (getattr open search)))
(allow systemd_networkd_t cgroup_types (dir (getattr open search)))
(allow systemd_networkd_t sysfs_t (dir (getattr open search)))
(allow systemd_networkd_t sysfs_t (dir (getattr open search)))
(allow systemd_networkd_t nsfs_t (file (ioctl read getattr lock open)))
(allow systemd_networkd_t memory_pressure_t (file (ioctl read write getattr setattr lock append open)))
(allow systemd_networkd_t tmpfs_t (dir (ioctl read getattr lock open search)))
(allow systemd_networkd_t cgroup_types (dir (getattr open search)))
(allow systemd_networkd_t cgroup_types (file (ioctl read write getattr lock append open)))
(allow systemd_networkd_t cgroup_types (dir (getattr open search)))
(allow systemd_networkd_t cgroup_types (lnk_file (read getattr)))
(allow systemd_networkd_t sysfs_t (dir (getattr open search)))
(allow systemd_networkd_t sysfs_t (dir (getattr open search)))
(allow systemd_networkd_t init_runtime_t (dir (getattr open search)))
(allow systemd_networkd_t init_runtime_t (sock_file (write getattr append open)))
(allow systemd_networkd_t init_t (unix_dgram_socket (sendto)))
(allow systemd_networkd_t var_run_t (lnk_file (read getattr)))
(allow systemd_networkd_t var_t (dir (getattr open search)))
(allow systemd_networkd_t var_run_t (dir (getattr open search)))
(allow systemd_networkd_t init_t (unix_stream_socket (getattr)))
(allow systemd_networkd_t init_t (dir (getattr open search)))
(allow systemd_networkd_t init_t (file (ioctl read getattr lock open)))
(allow systemd_networkd_t init_t (lnk_file (read getattr)))
(allow systemd_networkd_t init_runtime_t (dir (getattr open search)))
(allow systemd_networkd_t init_runtime_t (file (ioctl read getattr lock open)))
(allow systemd_networkd_t var_run_t (lnk_file (read getattr)))
(allow systemd_networkd_t var_t (dir (getattr open search)))
(allow systemd_networkd_t var_run_t (dir (getattr open search)))
(allow systemd_networkd_t init_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition systemd_networkd_t init_runtime_t dir systemd_networkd_runtime_t)
(typetransition systemd_networkd_t init_runtime_t file systemd_networkd_runtime_t)
(allow systemd_networkd_t devlog_t (sock_file (write getattr append open)))
(allow systemd_networkd_t var_run_t (lnk_file (read getattr)))
(allow systemd_networkd_t var_t (dir (getattr open search)))
(allow systemd_networkd_t var_run_t (dir (getattr open search)))
(allow systemd_networkd_t init_runtime_t (dir (getattr open search)))
(allow systemd_networkd_t syslogd_runtime_t (dir (getattr open search)))
(allow systemd_networkd_t syslogd_t (unix_dgram_socket (sendto)))
(allow systemd_networkd_t syslogd_t (unix_stream_socket (connectto)))
(allow systemd_networkd_t self (unix_dgram_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow systemd_networkd_t self (unix_stream_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow systemd_networkd_t device_t (dir (getattr open search)))
(allow systemd_networkd_t device_t (dir (ioctl read getattr lock open search)))
(allow systemd_networkd_t device_t (dir (getattr open search)))
(allow systemd_networkd_t device_t (lnk_file (read getattr)))
(allow systemd_networkd_t console_device_t (chr_file (ioctl write getattr lock append open)))
(dontaudit systemd_networkd_t console_device_t (chr_file (ioctl read getattr lock open)))
(allow systemd_networkd_t etc_t (dir (getattr open search)))
(allow systemd_networkd_t etc_t (lnk_file (read getattr)))
(allow systemd_networkd_t usr_t (dir (getattr open search)))
(allow systemd_networkd_t locale_t (dir (ioctl read getattr lock open search)))
(allow systemd_networkd_t locale_t (dir (getattr open search)))
(allow systemd_networkd_t locale_t (file (ioctl read getattr lock open)))
(allow systemd_networkd_t locale_t (dir (getattr open search)))
(allow systemd_networkd_t locale_t (lnk_file (read getattr)))
(allow systemd_networkd_t locale_t (file (map)))
(allow systemd_networkd_t etc_t (dir (getattr open search)))
(allow systemd_networkd_t var_run_t (lnk_file (read getattr)))
(allow systemd_networkd_t var_t (dir (getattr open search)))
(allow systemd_networkd_t var_run_t (dir (getattr open search)))
(allow systemd_networkd_t net_conf_t (dir (ioctl read getattr lock open search)))
(allow systemd_networkd_t net_conf_t (file (ioctl read getattr lock open)))
(allow systemd_networkd_t net_conf_t (lnk_file (read getattr)))
(allow systemd_notify_t self (capability (chown)))
(allow systemd_notify_t self (process (setfscreate setsockcreate)))
(allow systemd_notify_t self (fifo_file (ioctl read write getattr lock append open)))
(allow systemd_notify_t self (unix_stream_socket (ioctl read write create getattr setattr append bind connect listen accept getopt setopt shutdown)))
(allow systemd_notify_t privfd (fd (use)))
(allow systemd_notify_t etc_t (dir (ioctl read getattr lock open search)))
(allow systemd_notify_t etc_t (dir (getattr open search)))
(allow systemd_notify_t etc_t (file (ioctl read getattr lock open)))
(allow systemd_notify_t etc_t (dir (getattr open search)))
(allow systemd_notify_t etc_t (lnk_file (read getattr)))
(allow systemd_notify_t usr_t (dir (ioctl read getattr lock open search)))
(allow systemd_notify_t usr_t (dir (getattr open search)))
(allow systemd_notify_t usr_t (file (ioctl read getattr lock open)))
(allow systemd_notify_t usr_t (dir (getattr open search)))
(allow systemd_notify_t usr_t (lnk_file (read getattr)))
(allow systemd_notify_t cgroup_types (dir (getattr open search)))
(allow systemd_notify_t cgroup_types (file (getattr)))
(allow systemd_notify_t tmpfs_t (dir (getattr open search)))
(allow systemd_notify_t sysfs_t (dir (getattr open search)))
(allow systemd_notify_t sysfs_t (dir (getattr open search)))
(allow systemd_notify_t init_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
(allow systemd_notify_t etc_t (dir (getattr open search)))
(allow systemd_notify_t etc_t (lnk_file (read getattr)))
(allow systemd_notify_t usr_t (dir (getattr open search)))
(allow systemd_notify_t locale_t (dir (ioctl read getattr lock open search)))
(allow systemd_notify_t locale_t (dir (getattr open search)))
(allow systemd_notify_t locale_t (file (ioctl read getattr lock open)))
(allow systemd_notify_t locale_t (dir (getattr open search)))
(allow systemd_notify_t locale_t (lnk_file (read getattr)))
(allow systemd_notify_t locale_t (file (map)))
(allow systemd_nspawn_t self (process (sigkill signal getcap setcap setfscreate setrlimit)))
(allow systemd_nspawn_t self (capability (dac_override dac_read_search fsetid setgid setuid setpcap net_admin sys_chroot sys_admin mknod)))
(allow systemd_nspawn_t self (capability2 (wake_alarm)))
(allow systemd_nspawn_t self (user_namespace (create)))
(allow systemd_nspawn_t self (unix_dgram_socket (ioctl read write create getattr setattr append bind getopt setopt shutdown)))
(allow systemd_nspawn_t self (unix_stream_socket (ioctl read write create getattr setattr append bind connect listen accept getopt setopt shutdown)))
(allow systemd_nspawn_t self (netlink_route_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown nlmsg_read nlmsg_write)))
(allow systemd_nspawn_t self (netlink_generic_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow systemd_nspawn_t self (udp_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow systemd_nspawn_t systemd_journal_t (dir (search)))
(allow systemd_nspawn_t systemd_nspawn_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow systemd_nspawn_t systemd_nspawn_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_nspawn_t var_run_t (lnk_file (read getattr)))
(allow systemd_nspawn_t var_t (dir (getattr open search)))
(allow systemd_nspawn_t var_run_t (dir (getattr open search)))
(allow systemd_nspawn_t init_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition systemd_nspawn_t init_runtime_t dir systemd_nspawn_runtime_t)
(allow systemd_nspawn_t tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition systemd_nspawn_t tmp_t dir systemd_nspawn_tmp_t)
(typetransition systemd_nspawn_t tmp_t file systemd_nspawn_tmp_t)
(allow systemd_nspawn_t systemd_nspawn_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow systemd_nspawn_t systemd_nspawn_tmp_t (dir (mounton)))
(allow systemd_nspawn_t systemd_nspawn_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_nspawn_t systemd_nspawn_runtime_t (dir (mounton)))
(allow systemd_nspawn_t proc_t (filesystem (mount)))
(allow systemd_nspawn_t proc_t (dir (ioctl read getattr lock open search)))
(allow systemd_nspawn_t sysctl_t (dir (getattr mounton)))
(allow systemd_nspawn_t proc_t (dir (ioctl read getattr lock open search)))
(allow systemd_nspawn_t sysctl_t (dir (ioctl read getattr lock open search)))
(allow systemd_nspawn_t sysctl_kernel_t (dir (ioctl read getattr lock open search)))
(allow systemd_nspawn_t sysctl_kernel_t (file (getattr mounton)))
(allow systemd_nspawn_t proc_t (dir (ioctl read getattr lock open search)))
(allow systemd_nspawn_t proc_kmsg_t (file (getattr mounton)))
(allow systemd_nspawn_t proc_t (dir (mounton)))
(allow systemd_nspawn_t proc_t (dir (getattr open search)))
(allow systemd_nspawn_t sysctl_t (dir (getattr open search)))
(allow systemd_nspawn_t sysctl_kernel_t (dir (getattr open search)))
(allow systemd_nspawn_t sysctl_kernel_t (file (ioctl read getattr lock open)))
(allow systemd_nspawn_t proc_t (dir (getattr open search)))
(allow systemd_nspawn_t sysctl_t (dir (getattr open search)))
(allow systemd_nspawn_t sysctl_kernel_t (dir (ioctl read getattr lock open search)))
(allow systemd_nspawn_t proc_t (dir (getattr open search)))
(allow systemd_nspawn_t proc_t (file (ioctl read getattr lock open)))
(allow systemd_nspawn_t proc_t (dir (getattr open search)))
(allow systemd_nspawn_t proc_t (lnk_file (read getattr)))
(allow systemd_nspawn_t proc_t (dir (getattr open search)))
(allow systemd_nspawn_t proc_t (dir (ioctl read getattr lock open search)))
(allow systemd_nspawn_t proc_t (filesystem (remount)))
(allow systemd_nspawn_t bin_t (dir (getattr open search)))
(allow systemd_nspawn_t bin_t (lnk_file (read getattr)))
(allow systemd_nspawn_t usr_t (dir (getattr open search)))
(allow systemd_nspawn_t bin_t (dir (getattr open search)))
(allow systemd_nspawn_t bin_t (dir (ioctl read getattr lock open search)))
(allow systemd_nspawn_t shell_exec_t (file (ioctl read getattr lock map execute open execute_no_trans)))
(allow systemd_nspawn_t bin_t (dir (getattr open search)))
(allow systemd_nspawn_t bin_t (lnk_file (read getattr)))
(allow systemd_nspawn_t usr_t (dir (getattr open search)))
(allow systemd_nspawn_t device_t (dir (getattr open search)))
(allow systemd_nspawn_t device_t (dir (ioctl read getattr lock open search)))
(allow systemd_nspawn_t device_t (dir (getattr open search)))
(allow systemd_nspawn_t device_t (lnk_file (read getattr)))
(allow systemd_nspawn_t tun_tap_device_t (chr_file (ioctl read write getattr lock append open)))
(allow systemd_nspawn_t device_t (filesystem (getattr)))
(allow systemd_nspawn_t sysfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_nspawn_t sysfs_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow systemd_nspawn_t sysfs_t (dir (mounton)))
(allow systemd_nspawn_t sysfs_t (filesystem (mount)))
(allow systemd_nspawn_t sysfs_t (filesystem (remount)))
(allow systemd_nspawn_t sysfs_t (filesystem (unmount)))
(allow systemd_nspawn_t sysfs_t (dir (getattr open search)))
(allow systemd_nspawn_t sysfs_t (file (ioctl read getattr lock open)))
(allow systemd_nspawn_t sysfs_t (dir (getattr open search)))
(allow systemd_nspawn_t sysfs_t (lnk_file (read getattr)))
(allow systemd_nspawn_t sysfs_t (dir (getattr open search)))
(allow systemd_nspawn_t sysfs_t (dir (ioctl read getattr lock open search)))
(allow systemd_nspawn_t device_t (dir (getattr open search)))
(allow systemd_nspawn_t random_device_t (chr_file (ioctl read getattr lock open)))
(allow systemd_nspawn_t device_t (dir (getattr open search)))
(allow systemd_nspawn_t urandom_device_t (chr_file (ioctl read getattr lock open)))
(allow systemd_nspawn_t tmp_t (dir (getattr)))
(allow systemd_nspawn_t etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_nspawn_t etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_nspawn_t etc_t (dir (getattr open search)))
(allow systemd_nspawn_t etc_t (lnk_file (read getattr)))
(allow systemd_nspawn_t mnt_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow systemd_nspawn_t mnt_t (dir (getattr mounton open search)))
(allow systemd_nspawn_t root_t (dir (mounton)))
(allow systemd_nspawn_t tmp_t (dir (mounton)))
(allow systemd_nspawn_t boot_t (dir (ioctl read getattr lock open search)))
(allow systemd_nspawn_t boot_t (dir (getattr open search)))
(allow systemd_nspawn_t system_map_t (file (ioctl read getattr lock open)))
(allow systemd_nspawn_t var_run_t (lnk_file (read getattr)))
(allow systemd_nspawn_t var_run_t (dir (setattr)))
(allow systemd_nspawn_t cgroup_types (filesystem (getattr)))
(allow systemd_nspawn_t tmpfs_t (filesystem (getattr)))
(allow systemd_nspawn_t self (capability (mknod)))
(allow systemd_nspawn_t tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_nspawn_t tmpfs_t (chr_file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_nspawn_t tmpfs_t (filesystem (mount)))
(allow systemd_nspawn_t tmpfs_t (filesystem (remount)))
(allow systemd_nspawn_t fs_t (filesystem (remount)))
(allow systemd_nspawn_t cgroup_types (dir (getattr open search)))
(allow systemd_nspawn_t cgroup_types (file (ioctl read getattr lock open)))
(allow systemd_nspawn_t cgroup_types (dir (getattr open search)))
(allow systemd_nspawn_t cgroup_types (lnk_file (read getattr)))
(allow systemd_nspawn_t sysfs_t (dir (getattr open search)))
(allow systemd_nspawn_t sysfs_t (dir (getattr open search)))
(allow systemd_nspawn_t memory_pressure_t (file (ioctl read write getattr setattr lock append open)))
(allow systemd_nspawn_t devpts_t (chr_file (getattr)))
(allow systemd_nspawn_t devpts_t (filesystem (getattr)))
(allow systemd_nspawn_t devpts_t (filesystem (mount)))
(allow systemd_nspawn_t device_t (dir (getattr open search)))
(allow systemd_nspawn_t device_t (dir (ioctl read getattr lock open search)))
(allow systemd_nspawn_t device_t (dir (getattr open search)))
(allow systemd_nspawn_t device_t (lnk_file (read getattr)))
(allow systemd_nspawn_t devpts_t (dir (getattr open search)))
(allow systemd_nspawn_t devpts_t (chr_file (setattr)))
(allow systemd_nspawn_t device_t (dir (getattr open search)))
(allow systemd_nspawn_t device_t (dir (ioctl read getattr lock open search)))
(allow systemd_nspawn_t device_t (dir (getattr open search)))
(allow systemd_nspawn_t device_t (lnk_file (read getattr)))
(allow systemd_nspawn_t ptmx_t (chr_file (ioctl read write getattr lock append open)))
(allow systemd_nspawn_t etc_t (dir (ioctl read getattr lock open search)))
(allow systemd_nspawn_t initrc_exec_t (file (ioctl read getattr map execute open)))
(allow systemd_nspawn_t initrc_t (process (transition)))
(dontaudit systemd_nspawn_t initrc_t (process (noatsecure siginh rlimitinh)))
(typetransition systemd_nspawn_t initrc_exec_t process initrc_t)
(allow initrc_t systemd_nspawn_t (fd (use)))
(allow initrc_t systemd_nspawn_t (fifo_file (ioctl read write getattr lock append)))
(allow initrc_t systemd_nspawn_t (process (sigchld)))
(allow systemd_nspawn_t rc_exec_t (file (ioctl read getattr map execute open)))
(allow systemd_nspawn_t initrc_t (process (transition)))
(dontaudit systemd_nspawn_t initrc_t (process (noatsecure siginh rlimitinh)))
(typetransition systemd_nspawn_t rc_exec_t process initrc_t)
(allow initrc_t systemd_nspawn_t (fd (use)))
(allow initrc_t systemd_nspawn_t (fifo_file (ioctl read write getattr lock append)))
(allow initrc_t systemd_nspawn_t (process (sigchld)))
(allow systemd_nspawn_t init_t (process (getrlimit)))
(allow systemd_nspawn_t initrc_t (process (sigkill)))
(allow systemd_nspawn_t init_t (dir (getattr open search)))
(allow systemd_nspawn_t init_t (file (ioctl read getattr lock open)))
(allow systemd_nspawn_t init_t (lnk_file (read getattr)))
(allow systemd_nspawn_t var_run_t (lnk_file (read getattr)))
(allow systemd_nspawn_t var_t (dir (getattr open search)))
(allow systemd_nspawn_t var_run_t (dir (getattr open search)))
(allow systemd_nspawn_t init_runtime_t (dir (getattr open search)))
(allow systemd_nspawn_t init_runtime_t (sock_file (write)))
(allow systemd_nspawn_t etc_t (dir (ioctl read getattr lock open search)))
(allow systemd_nspawn_t self (process (setexec)))
(allow systemd_nspawn_t initrc_exec_t (file (ioctl read getattr map execute open)))
(allow systemd_nspawn_t initrc_t (process (transition)))
(dontaudit systemd_nspawn_t initrc_t (process (noatsecure siginh rlimitinh)))
(allow initrc_t systemd_nspawn_t (fd (use)))
(allow initrc_t systemd_nspawn_t (fifo_file (ioctl read write getattr lock append)))
(allow initrc_t systemd_nspawn_t (process (sigchld)))
(allow systemd_nspawn_t locale_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_nspawn_t locale_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow systemd_nspawn_t locale_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_nspawn_t locale_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_nspawn_t locale_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_nspawn_t locale_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
(allow systemd_nspawn_t etc_t (dir (getattr open search)))
(allow systemd_nspawn_t net_conf_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_nspawn_t var_run_t (lnk_file (read getattr)))
(allow systemd_nspawn_t var_t (dir (getattr open search)))
(allow systemd_nspawn_t var_run_t (dir (getattr open search)))
(allow systemd_nspawn_t udev_runtime_t (dir (getattr open search)))
(allow systemd_nspawn_t udev_runtime_t (file (ioctl read getattr lock open)))
(allow systemd_nspawn_t udev_runtime_t (dir (getattr open search)))
(allow systemd_nspawn_t udev_runtime_t (lnk_file (read getattr)))
(allow systemd_nspawn_t user_home_dir_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow systemd_nsresourced_t self (capability (sys_resource)))
(allow systemd_nsresourced_t self (process (signal getcap)))
(allow systemd_nsresourced_t systemd_nsresourced_exec_t (file (execute_no_trans)))
(allow systemd_nsresourced_t systemd_nsresourced_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_nsresourced_t systemd_nsresourced_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow systemd_nsresourced_t systemd_nsresourced_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_nsresourced_t systemd_nsresourced_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_nsresourced_t systemd_nsresourced_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_nsresourced_t systemd_nsresourced_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_nsresourced_t var_run_t (lnk_file (read getattr)))
(allow systemd_nsresourced_t var_t (dir (getattr open search)))
(allow systemd_nsresourced_t var_run_t (dir (getattr open search)))
(allow systemd_nsresourced_t init_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition systemd_nsresourced_t init_runtime_t dir systemd_nsresourced_runtime_t)
(allow systemd_nsresourced_t cgroup_types (filesystem (getattr)))
(allow systemd_nsresourced_t nsfs_t (file (getattr)))
(allow systemd_nsresourced_t init_t (dir (getattr open search)))
(allow systemd_nsresourced_t init_t (file (ioctl read getattr lock open)))
(allow systemd_nsresourced_t init_t (lnk_file (read getattr)))
(allow systemd_nsresourced_t proc_t (dir (getattr open search)))
(allow systemd_nsresourced_t sysctl_t (dir (getattr open search)))
(allow systemd_nsresourced_t sysctl_kernel_t (dir (getattr open search)))
(allow systemd_nsresourced_t sysctl_kernel_t (file (ioctl read getattr lock open)))
(allow systemd_nsresourced_t proc_t (dir (getattr open search)))
(allow systemd_nsresourced_t sysctl_t (dir (getattr open search)))
(allow systemd_nsresourced_t sysctl_kernel_t (dir (ioctl read getattr lock open search)))
(allow systemd_nsresourced_t proc_t (dir (getattr open search)))
(allow systemd_nsresourced_t proc_t (file (ioctl read getattr lock open)))
(allow systemd_nsresourced_t proc_t (dir (getattr open search)))
(allow systemd_nsresourced_t proc_t (lnk_file (read getattr)))
(allow systemd_nsresourced_t proc_t (dir (getattr open search)))
(allow systemd_nsresourced_t proc_t (dir (ioctl read getattr lock open search)))
(allow systemd_passwd_agent_t self (capability (chown dac_override sys_tty_config)))
(allow systemd_passwd_agent_t self (process (signal setfscreate setsockcreate)))
(allow systemd_passwd_agent_t self (unix_dgram_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow systemd_passwd_agent_t systemd_passwd_runtime_t (file (watch)))
(allow systemd_passwd_agent_t systemd_passwd_runtime_t (dir (watch)))
(allow systemd_passwd_agent_t systemd_passwd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_passwd_agent_t systemd_passwd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow systemd_passwd_agent_t systemd_passwd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_passwd_agent_t systemd_passwd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_passwd_agent_t systemd_passwd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_passwd_agent_t systemd_passwd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_passwd_agent_t systemd_passwd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_passwd_agent_t systemd_passwd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_passwd_agent_t var_run_t (lnk_file (read getattr)))
(allow systemd_passwd_agent_t var_t (dir (getattr open search)))
(allow systemd_passwd_agent_t var_run_t (dir (getattr open search)))
(allow systemd_passwd_agent_t init_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition systemd_passwd_agent_t init_runtime_t fifo_file systemd_passwd_runtime_t)
(typetransition systemd_passwd_agent_t init_runtime_t dir systemd_passwd_runtime_t)
(typetransition systemd_passwd_agent_t init_runtime_t file systemd_passwd_runtime_t)
(allow systemd_passwd_agent_t proc_t (dir (getattr open search)))
(allow systemd_passwd_agent_t proc_t (file (ioctl read getattr lock open)))
(allow systemd_passwd_agent_t proc_t (dir (getattr open search)))
(allow systemd_passwd_agent_t proc_t (lnk_file (read getattr)))
(allow systemd_passwd_agent_t proc_t (dir (getattr open search)))
(allow systemd_passwd_agent_t proc_t (dir (ioctl read getattr lock open search)))
(allow systemd_passwd_agent_t kernel_t (unix_stream_socket (connectto)))
(allow systemd_passwd_agent_t device_t (dir (ioctl read getattr lock open search)))
(allow systemd_passwd_agent_t device_t (dir (ioctl write getattr lock open add_name search)))
(allow systemd_passwd_agent_t device_t (dir (create getattr)))
(allow systemd_passwd_agent_t device_t (dir (getattr open search)))
(allow systemd_passwd_agent_t device_t (file (ioctl read getattr lock open)))
(allow systemd_passwd_agent_t device_t (dir (getattr open search)))
(allow systemd_passwd_agent_t device_t (sock_file (write getattr append open)))
(allow systemd_passwd_agent_t device_t (dir (getattr open search)))
(allow systemd_passwd_agent_t kmsg_device_t (chr_file (ioctl write getattr lock append open)))
(allow systemd_passwd_agent_t etc_t (dir (ioctl read getattr lock open search)))
(allow systemd_passwd_agent_t etc_t (dir (getattr open search)))
(allow systemd_passwd_agent_t etc_t (file (ioctl read getattr lock open)))
(allow systemd_passwd_agent_t etc_t (dir (getattr open search)))
(allow systemd_passwd_agent_t etc_t (lnk_file (read getattr)))
(allow systemd_passwd_agent_t fs_t (filesystem (getattr)))
(allow systemd_passwd_agent_t sysfs_t (dir (getattr open search)))
(allow systemd_passwd_agent_t sysfs_t (dir (getattr open search)))
(allow systemd_passwd_agent_t security_t (dir (ioctl read getattr lock open search)))
(allow systemd_passwd_agent_t security_t (file (ioctl read getattr map open)))
(allow systemd_passwd_agent_t security_t (filesystem (getattr)))
(allow systemd_passwd_agent_t sysfs_t (filesystem (getattr)))
(allow systemd_passwd_agent_t sysfs_t (dir (getattr open search)))
(allow systemd_passwd_agent_t sysfs_t (dir (getattr open search)))
(allow systemd_passwd_agent_t device_t (dir (getattr open search)))
(allow systemd_passwd_agent_t device_t (dir (ioctl read getattr lock open search)))
(allow systemd_passwd_agent_t device_t (dir (getattr open search)))
(allow systemd_passwd_agent_t device_t (lnk_file (read getattr)))
(allow systemd_passwd_agent_t console_device_t (chr_file (ioctl read getattr lock open)))
(allow systemd_passwd_agent_t init_runtime_t (dir (ioctl read getattr lock open search)))
(allow systemd_passwd_agent_t init_runtime_t (dir (ioctl write getattr lock open add_name search)))
(allow systemd_passwd_agent_t init_runtime_t (dir (create getattr)))
(allow systemd_passwd_agent_t init_runtime_t (dir (getattr open search)))
(allow systemd_passwd_agent_t init_runtime_t (fifo_file (ioctl read getattr lock open)))
(allow systemd_passwd_agent_t init_t (dir (getattr open search)))
(allow systemd_passwd_agent_t init_t (file (ioctl read getattr lock open)))
(allow systemd_passwd_agent_t init_t (lnk_file (read getattr)))
(allow systemd_passwd_agent_t var_run_t (lnk_file (read getattr)))
(allow systemd_passwd_agent_t var_t (dir (getattr open search)))
(allow systemd_passwd_agent_t var_run_t (dir (ioctl read getattr lock open search)))
(allow systemd_passwd_agent_t initrc_runtime_t (file (ioctl read getattr lock open)))
(allow systemd_passwd_agent_t init_runtime_t (dir (getattr open search)))
(allow systemd_passwd_agent_t init_runtime_t (sock_file (write getattr append open)))
(allow systemd_passwd_agent_t init_t (unix_stream_socket (connectto)))
(allow systemd_passwd_agent_t var_run_t (lnk_file (read getattr)))
(allow systemd_passwd_agent_t var_t (dir (getattr open search)))
(allow systemd_passwd_agent_t var_run_t (dir (getattr open search)))
(allow systemd_passwd_agent_t init_t (unix_stream_socket (getattr)))
(allow systemd_passwd_agent_t devlog_t (sock_file (write getattr append open)))
(allow systemd_passwd_agent_t var_run_t (lnk_file (read getattr)))
(allow systemd_passwd_agent_t var_t (dir (getattr open search)))
(allow systemd_passwd_agent_t var_run_t (dir (getattr open search)))
(allow systemd_passwd_agent_t init_runtime_t (dir (getattr open search)))
(allow systemd_passwd_agent_t syslogd_runtime_t (dir (getattr open search)))
(allow systemd_passwd_agent_t syslogd_t (unix_dgram_socket (sendto)))
(allow systemd_passwd_agent_t syslogd_t (unix_stream_socket (connectto)))
(allow systemd_passwd_agent_t self (unix_dgram_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow systemd_passwd_agent_t self (unix_stream_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow systemd_passwd_agent_t device_t (dir (getattr open search)))
(allow systemd_passwd_agent_t device_t (dir (ioctl read getattr lock open search)))
(allow systemd_passwd_agent_t device_t (dir (getattr open search)))
(allow systemd_passwd_agent_t device_t (lnk_file (read getattr)))
(allow systemd_passwd_agent_t console_device_t (chr_file (ioctl write getattr lock append open)))
(dontaudit systemd_passwd_agent_t console_device_t (chr_file (ioctl read getattr lock open)))
(allow systemd_passwd_agent_t etc_t (dir (getattr open search)))
(allow systemd_passwd_agent_t etc_t (lnk_file (read getattr)))
(allow systemd_passwd_agent_t usr_t (dir (getattr open search)))
(allow systemd_passwd_agent_t locale_t (dir (ioctl read getattr lock open search)))
(allow systemd_passwd_agent_t locale_t (dir (getattr open search)))
(allow systemd_passwd_agent_t locale_t (file (ioctl read getattr lock open)))
(allow systemd_passwd_agent_t locale_t (dir (getattr open search)))
(allow systemd_passwd_agent_t locale_t (lnk_file (read getattr)))
(allow systemd_passwd_agent_t locale_t (file (map)))
(allow systemd_passwd_agent_t etc_t (dir (getattr open search)))
(allow systemd_passwd_agent_t selinux_config_t (dir (getattr open search)))
(allow systemd_passwd_agent_t default_context_t (dir (getattr open search)))
(allow systemd_passwd_agent_t device_t (dir (getattr open search)))
(allow systemd_passwd_agent_t device_t (dir (ioctl read getattr lock open search)))
(allow systemd_passwd_agent_t device_t (dir (getattr open search)))
(allow systemd_passwd_agent_t device_t (lnk_file (read getattr)))
(allow systemd_passwd_agent_t devpts_t (dir (ioctl read getattr lock open search)))
(allow systemd_passwd_agent_t user_devpts_t (chr_file (ioctl read write getattr append open)))
(allow systemd_passwd_agent_t user_tty_device_t (chr_file (ioctl read write getattr append open)))
(allow systemd_pcrphase_t self (capability (dac_override)))
(dontaudit systemd_pcrphase_t self (capability (net_admin)))
(allow systemd_pcrphase_t sysfs_t (dir (getattr open search)))
(allow systemd_pcrphase_t sysfs_t (file (ioctl read getattr lock open)))
(allow systemd_pcrphase_t sysfs_t (dir (getattr open search)))
(allow systemd_pcrphase_t sysfs_t (lnk_file (read getattr)))
(allow systemd_pcrphase_t sysfs_t (dir (getattr open search)))
(allow systemd_pcrphase_t sysfs_t (dir (ioctl read getattr lock open search)))
(allow systemd_pcrphase_t device_t (dir (getattr open search)))
(allow systemd_pcrphase_t tpm_device_t (chr_file (ioctl read write getattr lock append open)))
(allow systemd_pcrphase_t device_t (dir (getattr open search)))
(allow systemd_pcrphase_t kmsg_device_t (chr_file (ioctl write getattr lock append open)))
(allow systemd_pcrphase_t etc_t (dir (ioctl read getattr lock open search)))
(allow systemd_pcrphase_t etc_t (dir (getattr open search)))
(allow systemd_pcrphase_t etc_runtime_t (file (ioctl read getattr lock open)))
(allow systemd_pcrphase_t etc_t (dir (getattr open search)))
(allow systemd_pcrphase_t etc_runtime_t (lnk_file (read getattr)))
(allow systemd_pcrphase_t var_t (dir (getattr open search)))
(allow systemd_pcrphase_t var_lib_t (dir (getattr open search)))
(allow systemd_pcrphase_t efivarfs_t (dir (getattr open search)))
(allow systemd_pcrphase_t efivarfs_t (file (ioctl read getattr lock open)))
(allow systemd_pcrphase_t cgroup_types (filesystem (getattr)))
(allow systemd_pcrphase_t cgroup_types (dir (getattr open search)))
(allow systemd_pcrphase_t cgroup_types (dir (getattr open search)))
(allow systemd_pcrphase_t sysfs_t (dir (getattr open search)))
(allow systemd_pcrphase_t sysfs_t (dir (getattr open search)))
(dontaudit systemd_pcrphase_t proc_t (filesystem (getattr)))
(allow systemd_pcrphase_t proc_t (dir (getattr open search)))
(allow systemd_pcrphase_t sysctl_t (dir (getattr open search)))
(allow systemd_pcrphase_t sysctl_kernel_t (dir (getattr open search)))
(allow systemd_pcrphase_t sysctl_kernel_t (file (ioctl read getattr lock open)))
(allow systemd_pcrphase_t proc_t (dir (getattr open search)))
(allow systemd_pcrphase_t sysctl_t (dir (getattr open search)))
(allow systemd_pcrphase_t sysctl_kernel_t (dir (ioctl read getattr lock open search)))
(allow systemd_pcrphase_t proc_t (dir (getattr open search)))
(allow systemd_pcrphase_t proc_t (file (ioctl read getattr lock open)))
(allow systemd_pcrphase_t proc_t (dir (getattr open search)))
(allow systemd_pcrphase_t proc_t (lnk_file (read getattr)))
(allow systemd_pcrphase_t proc_t (dir (getattr open search)))
(allow systemd_pcrphase_t proc_t (dir (ioctl read getattr lock open search)))
(allow systemd_pcrphase_t init_t (dir (getattr open search)))
(allow systemd_pcrphase_t init_t (file (ioctl read getattr lock open)))
(allow systemd_pcrphase_t init_t (lnk_file (read getattr)))
(allow systemd_pcrphase_t init_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_pcrphase_t init_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_pcrphase_t init_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_pcrphase_t init_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_pcrphase_t var_t (dir (getattr open search)))
(allow systemd_pcrphase_t var_lib_t (dir (getattr open search)))
(allow systemd_pcrphase_t systemd_log_t (dir (ioctl read getattr lock open search)))
(allow systemd_pcrphase_t var_t (dir (getattr open search)))
(allow systemd_pcrphase_t var_log_t (dir (getattr open search)))
(allow systemd_pcrphase_t var_log_t (lnk_file (read getattr)))
(allow systemd_pcrphase_t systemd_log_t (dir (create getattr)))
(allow systemd_pcrphase_t var_t (dir (getattr open search)))
(allow systemd_pcrphase_t var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_pcrphase_t var_log_t (lnk_file (read getattr)))
(allow systemd_pcrphase_t systemd_log_t (dir (ioctl write getattr lock open add_name search)))
(allow systemd_pcrphase_t systemd_log_t (file (create getattr open)))
(allow systemd_pcrphase_t var_t (dir (getattr open search)))
(allow systemd_pcrphase_t var_log_t (dir (getattr open search)))
(allow systemd_pcrphase_t var_log_t (lnk_file (read getattr)))
(allow systemd_pcrphase_t systemd_log_t (dir (getattr open search)))
(allow systemd_pcrphase_t systemd_log_t (file (ioctl write getattr lock append open)))
(allow systemd_pcrphase_t var_t (dir (getattr open search)))
(allow systemd_pcrphase_t var_log_t (dir (getattr open search)))
(allow systemd_pcrphase_t var_log_t (lnk_file (read getattr)))
(allow systemd_pcrphase_t systemd_log_t (file (setattr)))
(allow systemd_pcrphase_t devlog_t (sock_file (write getattr append open)))
(allow systemd_pcrphase_t var_run_t (lnk_file (read getattr)))
(allow systemd_pcrphase_t var_t (dir (getattr open search)))
(allow systemd_pcrphase_t var_run_t (dir (getattr open search)))
(allow systemd_pcrphase_t init_runtime_t (dir (getattr open search)))
(allow systemd_pcrphase_t syslogd_runtime_t (dir (getattr open search)))
(allow systemd_pcrphase_t syslogd_t (unix_dgram_socket (sendto)))
(allow systemd_pcrphase_t syslogd_t (unix_stream_socket (connectto)))
(allow systemd_pcrphase_t self (unix_dgram_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow systemd_pcrphase_t self (unix_stream_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow systemd_pcrphase_t device_t (dir (getattr open search)))
(allow systemd_pcrphase_t device_t (dir (ioctl read getattr lock open search)))
(allow systemd_pcrphase_t device_t (dir (getattr open search)))
(allow systemd_pcrphase_t device_t (lnk_file (read getattr)))
(allow systemd_pcrphase_t console_device_t (chr_file (ioctl write getattr lock append open)))
(dontaudit systemd_pcrphase_t console_device_t (chr_file (ioctl read getattr lock open)))
(allow systemd_pcrphase_t cert_t (dir (ioctl read getattr lock open search)))
(allow systemd_pcrphase_t cert_t (dir (getattr open search)))
(allow systemd_pcrphase_t cert_t (file (ioctl read getattr lock open)))
(allow systemd_pcrphase_t cert_t (dir (getattr open search)))
(allow systemd_pcrphase_t cert_t (lnk_file (read getattr)))
(dontaudit systemd_pstore_t self (capability (net_admin)))
(allow systemd_pstore_t systemd_pstore_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_pstore_t systemd_pstore_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_pstore_t etc_t (dir (ioctl read getattr lock open search)))
(allow systemd_pstore_t etc_t (dir (getattr open search)))
(allow systemd_pstore_t etc_t (file (ioctl read getattr lock open)))
(allow systemd_pstore_t etc_t (dir (getattr open search)))
(allow systemd_pstore_t etc_t (lnk_file (read getattr)))
(allow systemd_pstore_t var_t (dir (getattr open search)))
(allow systemd_pstore_t var_lib_t (dir (getattr open search)))
(allow systemd_pstore_t pstore_t (dir (ioctl read getattr lock open search)))
(allow systemd_pstore_t sysfs_t (dir (getattr open search)))
(allow systemd_pstore_t sysfs_t (dir (getattr open search)))
(allow systemd_pstore_t pstore_t (file (ioctl read getattr lock open)))
(allow systemd_pstore_t pstore_t (dir (ioctl write getattr lock open remove_name search)))
(allow systemd_pstore_t pstore_t (file (getattr unlink)))
(allow systemd_pstore_t sysfs_t (dir (getattr open search)))
(allow systemd_pstore_t sysfs_t (dir (getattr open search)))
(allow systemd_pstore_t var_run_t (lnk_file (read getattr)))
(allow systemd_pstore_t var_t (dir (getattr open search)))
(allow systemd_pstore_t var_run_t (dir (getattr open search)))
(allow systemd_pstore_t init_runtime_t (dir (getattr open search)))
(allow systemd_pstore_t init_var_lib_t (dir (ioctl read getattr lock open search)))
(allow systemd_pstore_t proc_t (dir (getattr open search)))
(allow systemd_pstore_t proc_t (file (ioctl read getattr lock open)))
(allow systemd_pstore_t proc_t (dir (getattr open search)))
(allow systemd_pstore_t proc_t (lnk_file (read getattr)))
(allow systemd_pstore_t proc_t (dir (getattr open search)))
(allow systemd_pstore_t proc_t (dir (ioctl read getattr lock open search)))
(allow systemd_pstore_t devlog_t (sock_file (write getattr append open)))
(allow systemd_pstore_t var_run_t (lnk_file (read getattr)))
(allow systemd_pstore_t var_t (dir (getattr open search)))
(allow systemd_pstore_t var_run_t (dir (getattr open search)))
(allow systemd_pstore_t init_runtime_t (dir (getattr open search)))
(allow systemd_pstore_t syslogd_runtime_t (dir (getattr open search)))
(allow systemd_pstore_t syslogd_t (unix_dgram_socket (sendto)))
(allow systemd_pstore_t syslogd_t (unix_stream_socket (connectto)))
(allow systemd_pstore_t self (unix_dgram_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow systemd_pstore_t self (unix_stream_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow systemd_pstore_t device_t (dir (getattr open search)))
(allow systemd_pstore_t device_t (dir (ioctl read getattr lock open search)))
(allow systemd_pstore_t device_t (dir (getattr open search)))
(allow systemd_pstore_t device_t (lnk_file (read getattr)))
(allow systemd_pstore_t console_device_t (chr_file (ioctl write getattr lock append open)))
(dontaudit systemd_pstore_t console_device_t (chr_file (ioctl read getattr lock open)))
(allow systemd_rfkill_t self (netlink_kobject_uevent_socket (read create getattr bind getopt setopt)))
(allow systemd_rfkill_t systemd_rfkill_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_rfkill_t systemd_rfkill_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow systemd_rfkill_t systemd_rfkill_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_rfkill_t systemd_rfkill_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_rfkill_t var_t (dir (getattr open search)))
(allow systemd_rfkill_t var_lib_t (dir (getattr open search)))
(allow systemd_rfkill_t init_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition systemd_rfkill_t init_var_lib_t dir systemd_rfkill_var_lib_t)
(allow systemd_rfkill_t filesystem_type (filesystem (getattr)))
(allow systemd_rfkill_t file_type (filesystem (getattr)))
(allow systemd_rfkill_t proc_t (filesystem (getattr)))
(allow systemd_rfkill_t proc_t (dir (getattr open search)))
(allow systemd_rfkill_t sysctl_t (dir (getattr open search)))
(allow systemd_rfkill_t sysctl_kernel_t (dir (getattr open search)))
(allow systemd_rfkill_t sysctl_kernel_t (file (ioctl read getattr lock open)))
(allow systemd_rfkill_t proc_t (dir (getattr open search)))
(allow systemd_rfkill_t sysctl_t (dir (getattr open search)))
(allow systemd_rfkill_t sysctl_kernel_t (dir (ioctl read getattr lock open search)))
(allow systemd_rfkill_t sysfs_t (dir (getattr open search)))
(allow systemd_rfkill_t sysfs_t (file (ioctl read getattr lock open)))
(allow systemd_rfkill_t sysfs_t (dir (getattr open search)))
(allow systemd_rfkill_t sysfs_t (lnk_file (read getattr)))
(allow systemd_rfkill_t sysfs_t (dir (getattr open search)))
(allow systemd_rfkill_t sysfs_t (dir (ioctl read getattr lock open search)))
(allow systemd_rfkill_t device_t (dir (getattr open search)))
(allow systemd_rfkill_t wireless_device_t (chr_file (ioctl read write getattr lock append open)))
(allow systemd_rfkill_t etc_t (dir (ioctl read getattr lock open search)))
(allow systemd_rfkill_t etc_t (dir (getattr open search)))
(allow systemd_rfkill_t etc_t (file (ioctl read getattr lock open)))
(allow systemd_rfkill_t etc_t (dir (getattr open search)))
(allow systemd_rfkill_t etc_t (lnk_file (read getattr)))
(allow systemd_rfkill_t var_run_t (lnk_file (read getattr)))
(allow systemd_rfkill_t var_t (dir (getattr open search)))
(allow systemd_rfkill_t var_run_t (dir (getattr open search)))
(allow systemd_rfkill_t udev_runtime_t (dir (getattr open search)))
(allow systemd_rfkill_t udev_runtime_t (file (ioctl read getattr lock open)))
(allow systemd_rfkill_t udev_runtime_t (dir (getattr open search)))
(allow systemd_rfkill_t udev_runtime_t (lnk_file (read getattr)))
(allow systemd_resolved_t self (capability (chown setgid setuid setpcap net_raw)))
(allow systemd_resolved_t self (process (signal getcap setcap setfscreate)))
(allow systemd_resolved_t self (unix_stream_socket (ioctl read write create getattr setattr append bind connect listen accept getopt setopt shutdown)))
(allow systemd_resolved_t self (tcp_socket (ioctl read write create getattr setattr append bind connect listen accept getopt setopt shutdown)))
(allow systemd_resolved_t systemd_networkd_runtime_t (dir (watch)))
(allow systemd_resolved_t systemd_resolved_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_resolved_t systemd_resolved_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow systemd_resolved_t systemd_resolved_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_resolved_t systemd_resolved_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_resolved_t systemd_resolved_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_resolved_t systemd_resolved_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
(allow systemd_resolved_t systemd_resolved_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_resolved_t systemd_resolved_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_resolved_t var_run_t (lnk_file (read getattr)))
(allow systemd_resolved_t var_t (dir (getattr open search)))
(allow systemd_resolved_t var_run_t (dir (getattr open search)))
(allow systemd_resolved_t init_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition systemd_resolved_t init_runtime_t dir systemd_resolved_runtime_t)
(allow systemd_resolved_t sysfs_t (dir (getattr open search)))
(allow systemd_resolved_t sysfs_t (file (ioctl read getattr lock open)))
(allow systemd_resolved_t sysfs_t (dir (getattr open search)))
(allow systemd_resolved_t sysfs_t (lnk_file (read getattr)))
(allow systemd_resolved_t sysfs_t (dir (getattr open search)))
(allow systemd_resolved_t sysfs_t (dir (ioctl read getattr lock open search)))
(allow systemd_resolved_t proc_t (dir (getattr open search)))
(allow systemd_resolved_t sysctl_t (dir (getattr open search)))
(allow systemd_resolved_t sysctl_kernel_t (dir (getattr open search)))
(allow systemd_resolved_t sysctl_kernel_t (file (ioctl read getattr lock open)))
(allow systemd_resolved_t proc_t (dir (getattr open search)))
(allow systemd_resolved_t sysctl_t (dir (getattr open search)))
(allow systemd_resolved_t sysctl_kernel_t (dir (ioctl read getattr lock open search)))
(allow systemd_resolved_t proc_t (dir (getattr open search)))
(allow systemd_resolved_t sysctl_t (dir (getattr open search)))
(allow systemd_resolved_t sysctl_net_t (dir (getattr open search)))
(allow systemd_resolved_t sysctl_net_t (file (ioctl read getattr lock open)))
(allow systemd_resolved_t proc_t (dir (getattr open search)))
(allow systemd_resolved_t sysctl_t (dir (getattr open search)))
(allow systemd_resolved_t sysctl_net_t (dir (ioctl read getattr lock open search)))
(dontaudit systemd_resolved_t proc_t (filesystem (getattr)))
(allow systemd_resolved_t node_t (tcp_socket (node_bind)))
(allow systemd_resolved_t dns_port_t (tcp_socket (name_bind)))
(allow systemd_resolved_t self (capability (net_bind_service)))
(allow systemd_resolved_t llmnr_port_t (tcp_socket (name_bind)))
(allow systemd_resolved_t node_t (udp_socket (node_bind)))
(allow systemd_resolved_t dns_port_t (udp_socket (name_bind)))
(allow systemd_resolved_t self (capability (net_bind_service)))
(allow systemd_resolved_t llmnr_port_t (udp_socket (name_bind)))
(allow systemd_resolved_t howl_port_t (udp_socket (name_bind)))
(allow systemd_resolved_t sysfs_t (dir (getattr open search)))
(allow systemd_resolved_t sysfs_t (dir (getattr open search)))
(allow systemd_resolved_t security_t (dir (ioctl read getattr lock open search)))
(allow systemd_resolved_t security_t (file (ioctl read getattr map open)))
(allow systemd_resolved_t root_t (dir (watch)))
(allow systemd_resolved_t var_run_t (dir (watch)))
(allow systemd_resolved_t var_run_t (lnk_file (read getattr)))
(allow systemd_resolved_t var_t (dir (getattr open search)))
(allow systemd_resolved_t var_run_t (dir (ioctl read getattr lock open search)))
(allow systemd_resolved_t filesystem_type (filesystem (getattr)))
(allow systemd_resolved_t file_type (filesystem (getattr)))
(allow systemd_resolved_t nsfs_t (file (getattr)))
(allow systemd_resolved_t cgroup_types (dir (getattr open search)))
(allow systemd_resolved_t cgroup_types (dir (getattr open search)))
(allow systemd_resolved_t sysfs_t (dir (getattr open search)))
(allow systemd_resolved_t sysfs_t (dir (getattr open search)))
(allow systemd_resolved_t tmpfs_t (dir (getattr open search)))
(allow systemd_resolved_t ramfs_t (dir (getattr open search)))
(allow systemd_resolved_t memory_pressure_t (file (ioctl read write getattr setattr lock append open)))
(allow systemd_resolved_t init_runtime_t (dir (getattr open search)))
(allow systemd_resolved_t init_runtime_t (sock_file (write getattr append open)))
(allow systemd_resolved_t init_t (unix_dgram_socket (sendto)))
(allow systemd_resolved_t var_run_t (lnk_file (read getattr)))
(allow systemd_resolved_t var_t (dir (getattr open search)))
(allow systemd_resolved_t var_run_t (dir (getattr open search)))
(allow systemd_resolved_t init_t (unix_stream_socket (getattr)))
(allow systemd_resolved_t init_runtime_t (dir (watch)))
(allow systemd_resolved_t cert_t (dir (ioctl read getattr lock open search)))
(allow systemd_resolved_t cert_t (dir (getattr open search)))
(allow systemd_resolved_t cert_t (file (ioctl read getattr lock open)))
(allow systemd_resolved_t cert_t (dir (getattr open search)))
(allow systemd_resolved_t cert_t (lnk_file (read getattr)))
(allow systemd_resolved_t security_t (filesystem (getattr)))
(allow systemd_resolved_t sysfs_t (filesystem (getattr)))
(allow systemd_resolved_t sysfs_t (dir (getattr open search)))
(allow systemd_resolved_t sysfs_t (dir (getattr open search)))
(allow systemd_resolved_t proc_t (dir (getattr open search)))
(allow systemd_resolved_t proc_t (file (ioctl read getattr lock open)))
(allow systemd_resolved_t proc_t (dir (getattr open search)))
(allow systemd_resolved_t proc_t (lnk_file (read getattr)))
(allow systemd_resolved_t proc_t (dir (getattr open search)))
(allow systemd_resolved_t proc_t (dir (ioctl read getattr lock open search)))
(allow systemd_resolved_t etc_t (dir (getattr open search)))
(allow systemd_resolved_t selinux_config_t (dir (ioctl read getattr lock open search)))
(allow systemd_resolved_t selinux_config_t (dir (getattr open search)))
(allow systemd_resolved_t selinux_config_t (file (ioctl read getattr lock open)))
(allow systemd_resolved_t selinux_config_t (dir (getattr open search)))
(allow systemd_resolved_t selinux_config_t (lnk_file (read getattr)))
(allow systemd_resolved_t etc_t (dir (getattr open search)))
(allow systemd_resolved_t selinux_config_t (dir (getattr open search)))
(allow systemd_resolved_t default_context_t (dir (getattr open search)))
(allow systemd_resolved_t file_context_t (dir (getattr open search)))
(allow systemd_resolved_t file_context_t (file (ioctl read getattr lock open)))
(allow systemd_resolved_t file_context_t (file (map)))
(allow systemd_resolved_t systemd_networkd_runtime_t (dir (getattr open search)))
(allow systemd_resolved_t systemd_networkd_runtime_t (dir (ioctl read getattr lock open search)))
(allow systemd_resolved_t systemd_networkd_runtime_t (dir (getattr open search)))
(allow systemd_resolved_t systemd_networkd_runtime_t (file (ioctl read getattr lock open)))
(allow systemd_socket_proxyd_t self (unix_dgram_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown sendto)))
(allow systemd_socket_proxyd_t self (tcp_socket (accept)))
(allow systemd_socket_proxyd_t proc_t (dir (getattr open search)))
(allow systemd_socket_proxyd_t proc_t (file (ioctl read getattr lock open)))
(allow systemd_socket_proxyd_t proc_t (dir (getattr open search)))
(allow systemd_socket_proxyd_t proc_t (lnk_file (read getattr)))
(allow systemd_socket_proxyd_t proc_t (dir (getattr open search)))
(allow systemd_socket_proxyd_t proc_t (dir (ioctl read getattr lock open search)))
(allow systemd_socket_proxyd_t self (tcp_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow systemd_socket_proxyd_t self (udp_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow systemd_socket_proxyd_t self (netlink_route_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown nlmsg_read)))
(allow systemd_socket_proxyd_t netlabel_peer_t (peer (recv)))
(allow systemd_socket_proxyd_t netlabel_peer_t (tcp_socket (recvfrom)))
(allow systemd_socket_proxyd_t netlabel_peer_t (udp_socket (recvfrom)))
(allow systemd_socket_proxyd_t netlabel_peer_t (rawip_socket (recvfrom)))
(allow systemd_socket_proxyd_t netif_t (netif (ingress egress)))
(allow systemd_socket_proxyd_t netif_t (netif (egress)))
(allow systemd_socket_proxyd_t netif_t (netif (ingress)))
(allow systemd_socket_proxyd_t node_t (node (recvfrom sendto)))
(allow systemd_socket_proxyd_t node_t (node (sendto)))
(allow systemd_socket_proxyd_t node_t (node (recvfrom)))
(allow systemd_socket_proxyd_t dns_port_t (tcp_socket (name_connect)))
(allow systemd_socket_proxyd_t dns_client_packet_t (packet (send)))
(allow systemd_socket_proxyd_t dns_client_packet_t (packet (recv)))
(allow systemd_socket_proxyd_t etc_t (dir (getattr open search)))
(allow systemd_socket_proxyd_t var_run_t (lnk_file (read getattr)))
(allow systemd_socket_proxyd_t var_t (dir (getattr open search)))
(allow systemd_socket_proxyd_t var_run_t (dir (getattr open search)))
(allow systemd_socket_proxyd_t net_conf_t (dir (ioctl read getattr lock open search)))
(allow systemd_socket_proxyd_t net_conf_t (file (ioctl read getattr lock open)))
(allow systemd_socket_proxyd_t net_conf_t (lnk_file (read getattr)))
(allow systemd_sessions_t self (process (setfscreate)))
(allow systemd_sessions_t systemd_sessions_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_sessions_t var_t (dir (getattr open search)))
(allow systemd_sessions_t var_run_t (lnk_file (read getattr)))
(allow systemd_sessions_t var_run_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition systemd_sessions_t var_run_t file systemd_sessions_runtime_t)
(allow systemd_sessions_t filesystem_type (filesystem (getattr)))
(allow systemd_sessions_t file_type (filesystem (getattr)))
(allow systemd_sessions_t cgroup_types (dir (getattr open search)))
(allow systemd_sessions_t cgroup_types (dir (getattr open search)))
(allow systemd_sessions_t sysfs_t (dir (getattr open search)))
(allow systemd_sessions_t sysfs_t (dir (getattr open search)))
(allow systemd_sessions_t tmpfs_t (dir (getattr open search)))
(allow systemd_sessions_t ramfs_t (dir (getattr open search)))
(allow systemd_sessions_t nsfs_t (file (getattr)))
(allow systemd_sessions_t proc_t (dir (getattr open search)))
(allow systemd_sessions_t sysctl_t (dir (getattr open search)))
(allow systemd_sessions_t sysctl_kernel_t (dir (getattr open search)))
(allow systemd_sessions_t sysctl_kernel_t (file (ioctl read getattr lock open)))
(allow systemd_sessions_t proc_t (dir (getattr open search)))
(allow systemd_sessions_t sysctl_t (dir (getattr open search)))
(allow systemd_sessions_t sysctl_kernel_t (dir (ioctl read getattr lock open search)))
(dontaudit systemd_sessions_t proc_t (filesystem (getattr)))
(allow systemd_sessions_t security_t (filesystem (getattr)))
(allow systemd_sessions_t sysfs_t (filesystem (getattr)))
(allow systemd_sessions_t sysfs_t (dir (getattr open search)))
(allow systemd_sessions_t sysfs_t (dir (getattr open search)))
(allow systemd_sessions_t proc_t (dir (getattr open search)))
(allow systemd_sessions_t proc_t (file (ioctl read getattr lock open)))
(allow systemd_sessions_t proc_t (dir (getattr open search)))
(allow systemd_sessions_t proc_t (lnk_file (read getattr)))
(allow systemd_sessions_t proc_t (dir (getattr open search)))
(allow systemd_sessions_t proc_t (dir (ioctl read getattr lock open search)))
(allow systemd_sessions_t sysfs_t (dir (getattr open search)))
(allow systemd_sessions_t sysfs_t (dir (getattr open search)))
(allow systemd_sessions_t security_t (dir (ioctl read getattr lock open search)))
(allow systemd_sessions_t security_t (file (ioctl read getattr map open)))
(allow systemd_sessions_t etc_t (dir (getattr open search)))
(allow systemd_sessions_t selinux_config_t (dir (ioctl read getattr lock open search)))
(allow systemd_sessions_t selinux_config_t (dir (getattr open search)))
(allow systemd_sessions_t selinux_config_t (file (ioctl read getattr lock open)))
(allow systemd_sessions_t selinux_config_t (dir (getattr open search)))
(allow systemd_sessions_t selinux_config_t (lnk_file (read getattr)))
(allow systemd_sessions_t etc_t (dir (getattr open search)))
(allow systemd_sessions_t selinux_config_t (dir (getattr open search)))
(allow systemd_sessions_t default_context_t (dir (ioctl read getattr lock open search)))
(allow systemd_sessions_t default_context_t (dir (getattr open search)))
(allow systemd_sessions_t default_context_t (file (ioctl read getattr lock open)))
(allow systemd_sessions_t etc_t (dir (getattr open search)))
(allow systemd_sessions_t selinux_config_t (dir (getattr open search)))
(allow systemd_sessions_t default_context_t (dir (getattr open search)))
(allow systemd_sessions_t file_context_t (dir (getattr open search)))
(allow systemd_sessions_t file_context_t (file (ioctl read getattr lock open)))
(allow systemd_sessions_t file_context_t (file (map)))
(allow systemd_sysctl_t self (capability (net_admin sys_ptrace sys_admin)))
(allow systemd_sysctl_t proc_t (dir (getattr open search)))
(allow systemd_sysctl_t sysctl_t (dir (getattr open search)))
(allow systemd_sysctl_t sysctl_kernel_t (dir (getattr open search)))
(allow systemd_sysctl_t sysctl_kernel_t (file (ioctl read getattr lock open)))
(allow systemd_sysctl_t proc_t (dir (getattr open search)))
(allow systemd_sysctl_t sysctl_t (dir (getattr open search)))
(allow systemd_sysctl_t sysctl_kernel_t (dir (ioctl read getattr lock open search)))
(allow systemd_sysctl_t kernel_t (system (module_request)))
(allow systemd_sysctl_t proc_t (dir (getattr open search)))
(allow systemd_sysctl_t proc_net_t (dir (getattr open search)))
(allow systemd_sysctl_t sysctl_type (dir (getattr open search)))
(allow systemd_sysctl_t sysctl_type (file (ioctl read write getattr lock append open)))
(allow systemd_sysctl_t sysctl_type (dir (ioctl read getattr lock open search)))
(allow systemd_sysctl_t sysctl_type (file (setattr)))
(dontaudit systemd_sysctl_t proc_t (filesystem (getattr)))
(allow systemd_sysctl_t etc_t (dir (ioctl read getattr lock open search)))
(allow systemd_sysctl_t etc_t (dir (getattr open search)))
(allow systemd_sysctl_t etc_t (file (ioctl read getattr lock open)))
(allow systemd_sysctl_t etc_t (dir (getattr open search)))
(allow systemd_sysctl_t etc_t (lnk_file (read getattr)))
(allow systemd_sysctl_t filesystem_type (filesystem (getattr)))
(allow systemd_sysctl_t file_type (filesystem (getattr)))
(allow systemd_sysctl_t cgroup_types (dir (getattr open search)))
(allow systemd_sysctl_t cgroup_types (dir (getattr open search)))
(allow systemd_sysctl_t sysfs_t (dir (getattr open search)))
(allow systemd_sysctl_t sysfs_t (dir (getattr open search)))
(allow systemd_sysctl_t ramfs_t (dir (getattr open search)))
(allow systemd_sysctl_t tmpfs_t (dir (getattr open search)))
(allow systemd_sysctl_t nsfs_t (file (getattr)))
(allow systemd_sysusers_t self (capability (chown dac_read_search fsetid)))
(allow systemd_sysusers_t self (process (setfscreate)))
(allow systemd_sysusers_t self (unix_dgram_socket (sendto)))
(allow systemd_sysusers_t etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_sysusers_t etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_sysusers_t etc_t (dir (getattr open search)))
(allow systemd_sysusers_t etc_t (lnk_file (read getattr)))
(allow systemd_sysusers_t filesystem_type (filesystem (getattr)))
(allow systemd_sysusers_t file_type (filesystem (getattr)))
(allow systemd_sysusers_t nsfs_t (file (getattr)))
(allow systemd_sysusers_t filesystem_type (dir (getattr open search)))
(allow systemd_sysusers_t proc_t (dir (getattr open search)))
(allow systemd_sysusers_t sysctl_t (dir (getattr open search)))
(allow systemd_sysusers_t sysctl_kernel_t (dir (getattr open search)))
(allow systemd_sysusers_t sysctl_kernel_t (file (ioctl read getattr lock open)))
(allow systemd_sysusers_t proc_t (dir (getattr open search)))
(allow systemd_sysusers_t sysctl_t (dir (getattr open search)))
(allow systemd_sysusers_t sysctl_kernel_t (dir (ioctl read getattr lock open search)))
(allow systemd_sysusers_t sysfs_t (dir (getattr open search)))
(allow systemd_sysusers_t sysfs_t (dir (getattr open search)))
(allow systemd_sysusers_t security_t (dir (ioctl read getattr lock open search)))
(allow systemd_sysusers_t security_t (file (ioctl read getattr map open)))
(allow systemd_sysusers_t etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_sysusers_t etc_t (dir (getattr open search)))
(allow systemd_sysusers_t shadow_history_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_sysusers_t shadow_lock_t (dir (getattr open search)))
(allow systemd_sysusers_t shadow_lock_t (file (ioctl read write getattr lock append open)))
(allow systemd_sysusers_t shadow_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_sysusers_t etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition systemd_sysusers_t etc_t file shadow_t)
(allow systemd_sysusers_t security_t (filesystem (getattr)))
(allow systemd_sysusers_t sysfs_t (filesystem (getattr)))
(allow systemd_sysusers_t sysfs_t (dir (getattr open search)))
(allow systemd_sysusers_t sysfs_t (dir (getattr open search)))
(allow systemd_sysusers_t proc_t (dir (getattr open search)))
(allow systemd_sysusers_t proc_t (file (ioctl read getattr lock open)))
(allow systemd_sysusers_t proc_t (dir (getattr open search)))
(allow systemd_sysusers_t proc_t (lnk_file (read getattr)))
(allow systemd_sysusers_t proc_t (dir (getattr open search)))
(allow systemd_sysusers_t proc_t (dir (ioctl read getattr lock open search)))
(allow systemd_sysusers_t etc_t (dir (getattr open search)))
(allow systemd_sysusers_t selinux_config_t (dir (ioctl read getattr lock open search)))
(allow systemd_sysusers_t selinux_config_t (dir (getattr open search)))
(allow systemd_sysusers_t selinux_config_t (file (ioctl read getattr lock open)))
(allow systemd_sysusers_t selinux_config_t (dir (getattr open search)))
(allow systemd_sysusers_t selinux_config_t (lnk_file (read getattr)))
(allow systemd_sysusers_t etc_t (dir (getattr open search)))
(allow systemd_sysusers_t selinux_config_t (dir (getattr open search)))
(allow systemd_sysusers_t default_context_t (dir (getattr open search)))
(allow systemd_sysusers_t file_context_t (dir (getattr open search)))
(allow systemd_sysusers_t file_context_t (file (ioctl read getattr lock open)))
(allow systemd_sysusers_t file_context_t (file (map)))
(allow systemd_sysusers_t init_runtime_t (dir (getattr open search)))
(allow systemd_sysusers_t systemd_nsresourced_runtime_t (dir (getattr open search)))
(allow systemd_sysusers_t systemd_nsresourced_runtime_t (sock_file (write getattr append open)))
(allow systemd_sysusers_t systemd_nsresourced_t (unix_stream_socket (connectto)))
(allow systemd_sysusers_t userdomain (fd (use)))
(allow systemd_sysusers_t device_t (dir (getattr open search)))
(allow systemd_sysusers_t device_t (dir (ioctl read getattr lock open search)))
(allow systemd_sysusers_t device_t (dir (getattr open search)))
(allow systemd_sysusers_t device_t (lnk_file (read getattr)))
(allow systemd_sysusers_t devpts_t (dir (ioctl read getattr lock open search)))
(allow systemd_sysusers_t user_devpts_t (chr_file (ioctl read write getattr append)))
(allow systemd_sysusers_t user_tty_device_t (chr_file (ioctl read write getattr append)))
(allow systemd_tmpfiles_t self (capability (chown dac_override dac_read_search fowner fsetid net_admin sys_admin mknod)))
(allow systemd_tmpfiles_t self (process (getcap setfscreate)))
(allow systemd_tmpfiles_t systemd_coredump_var_lib_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
(allow systemd_tmpfiles_t systemd_coredump_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_tmpfiles_t systemd_factory_conf_t (dir (ioctl read getattr lock open search)))
(allow systemd_tmpfiles_t systemd_factory_conf_t (file (ioctl read getattr lock open)))
(allow systemd_tmpfiles_t systemd_pstore_var_lib_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
(allow systemd_tmpfiles_t systemd_pstore_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_tmpfiles_t systemd_sessions_runtime_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
(allow systemd_tmpfiles_t systemd_journal_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_tmpfiles_t systemd_journal_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow systemd_tmpfiles_t systemd_journal_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_tmpfiles_t systemd_journal_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_tmpfiles_t systemd_journal_t (dir (getattr relabelfrom relabelto)))
(allow systemd_tmpfiles_t systemd_journal_t (file (getattr relabelfrom relabelto)))
(allow systemd_tmpfiles_t systemd_tmpfiles_conf_t (dir (ioctl read getattr lock open search)))
(allow systemd_tmpfiles_t systemd_tmpfiles_conf_type (dir (getattr open search)))
(allow systemd_tmpfiles_t systemd_tmpfiles_conf_type (file (ioctl read getattr lock open)))
(allow systemd_tmpfiles_t proc_t (filesystem (getattr)))
(allow systemd_tmpfiles_t proc_t (dir (getattr open search)))
(allow systemd_tmpfiles_t sysctl_t (dir (getattr open search)))
(allow systemd_tmpfiles_t sysctl_kernel_t (dir (getattr open search)))
(allow systemd_tmpfiles_t sysctl_kernel_t (file (ioctl read getattr lock open)))
(allow systemd_tmpfiles_t proc_t (dir (getattr open search)))
(allow systemd_tmpfiles_t sysctl_t (dir (getattr open search)))
(allow systemd_tmpfiles_t sysctl_kernel_t (dir (ioctl read getattr lock open search)))
(allow systemd_tmpfiles_t proc_t (dir (getattr open search)))
(allow systemd_tmpfiles_t proc_net_t (dir (getattr open search)))
(allow systemd_tmpfiles_t proc_net_t (file (ioctl read getattr lock open)))
(allow systemd_tmpfiles_t proc_t (dir (getattr open search)))
(allow systemd_tmpfiles_t proc_net_t (dir (getattr open search)))
(allow systemd_tmpfiles_t proc_net_t (lnk_file (read getattr)))
(allow systemd_tmpfiles_t proc_t (dir (getattr open search)))
(allow systemd_tmpfiles_t proc_net_t (dir (ioctl read getattr lock open search)))
(allow systemd_tmpfiles_t device_t (filesystem (getattr)))
(allow systemd_tmpfiles_t device_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_tmpfiles_t device_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow systemd_tmpfiles_t device_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_tmpfiles_t device_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_tmpfiles_t device_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_tmpfiles_t device_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
(allow systemd_tmpfiles_t self (capability (mknod)))
(allow systemd_tmpfiles_t device_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_tmpfiles_t device_node (chr_file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_tmpfiles_t device_t (chr_file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_tmpfiles_t self (capability (mknod)))
(allow systemd_tmpfiles_t device_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_tmpfiles_t device_node (blk_file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_tmpfiles_t device_t (blk_file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_tmpfiles_t device_t (dir (getattr open search)))
(allow systemd_tmpfiles_t device_t (dir (getattr relabelfrom relabelto)))
(allow systemd_tmpfiles_t device_t (dir (getattr open search)))
(allow systemd_tmpfiles_t device_node (chr_file (getattr relabelfrom relabelto)))
(allow systemd_tmpfiles_t device_t (chr_file (getattr relabelfrom relabelto)))
(allow systemd_tmpfiles_t device_t (dir (getattr open search)))
(allow systemd_tmpfiles_t device_node (blk_file (getattr relabelfrom relabelto)))
(allow systemd_tmpfiles_t device_t (blk_file (getattr relabelfrom relabelto)))
(allow systemd_tmpfiles_t device_node (dir (watch)))
(allow systemd_tmpfiles_t device_t (dir (watch)))
(allow systemd_tmpfiles_t device_node (sock_file (watch)))
(allow systemd_tmpfiles_t device_t (sock_file (watch)))
(allow systemd_tmpfiles_t device_node (lnk_file (watch)))
(allow systemd_tmpfiles_t device_t (lnk_file (watch)))
(allow systemd_tmpfiles_t device_node (chr_file (watch)))
(allow systemd_tmpfiles_t device_t (chr_file (watch)))
(allow systemd_tmpfiles_t device_node (blk_file (watch)))
(allow systemd_tmpfiles_t device_t (blk_file (watch)))
(allow systemd_tmpfiles_t device_t (dir (getattr open search)))
(allow systemd_tmpfiles_t device_t (dir (ioctl read getattr lock open search)))
(allow systemd_tmpfiles_t device_t (dir (getattr open search)))
(allow systemd_tmpfiles_t device_t (lnk_file (read getattr)))
(allow systemd_tmpfiles_t fixed_disk_device_t (blk_file (ioctl read getattr lock open)))
(allow systemd_tmpfiles_t fixed_disk_device_t (chr_file (ioctl read getattr lock open)))
(allow systemd_tmpfiles_t device_t (dir (getattr open search)))
(allow systemd_tmpfiles_t device_t (dir (ioctl read getattr lock open search)))
(allow systemd_tmpfiles_t device_t (dir (getattr open search)))
(allow systemd_tmpfiles_t device_t (lnk_file (read getattr)))
(allow systemd_tmpfiles_t fixed_disk_device_t (blk_file (ioctl write getattr lock append open)))
(allow systemd_tmpfiles_t fixed_disk_device_t (chr_file (ioctl write getattr lock append open)))
(allow systemd_tmpfiles_t device_t (dir (getattr open search)))
(allow systemd_tmpfiles_t device_t (dir (ioctl read getattr lock open search)))
(allow systemd_tmpfiles_t device_t (dir (getattr open search)))
(allow systemd_tmpfiles_t device_t (lnk_file (read getattr)))
(allow systemd_tmpfiles_t scsi_generic_device_t (chr_file (ioctl read getattr lock open)))
(allow systemd_tmpfiles_t device_t (dir (getattr open search)))
(allow systemd_tmpfiles_t device_t (dir (ioctl read getattr lock open search)))
(allow systemd_tmpfiles_t device_t (dir (getattr open search)))
(allow systemd_tmpfiles_t device_t (lnk_file (read getattr)))
(allow systemd_tmpfiles_t scsi_generic_device_t (chr_file (ioctl write getattr lock append open)))
(allow systemd_tmpfiles_t device_t (dir (getattr open search)))
(allow systemd_tmpfiles_t urandom_device_t (chr_file (ioctl read getattr lock open)))
(allow systemd_tmpfiles_t sysfs_types (dir (ioctl read getattr lock relabelfrom relabelto open search)))
(allow systemd_tmpfiles_t sysfs_types (file (getattr relabelfrom relabelto)))
(allow systemd_tmpfiles_t sysfs_types (lnk_file (getattr relabelfrom relabelto)))
(allow systemd_tmpfiles_t sysfs_types (dir (getattr setattr open search)))
(allow systemd_tmpfiles_t sysfs_types (file (setattr)))
(allow systemd_tmpfiles_t sysfs_types (lnk_file (read getattr setattr)))
(allow systemd_tmpfiles_t sysfs_t (dir (getattr open search)))
(allow systemd_tmpfiles_t sysfs_t (dir (ioctl read getattr lock open search)))
(allow systemd_tmpfiles_t sysfs_t (dir (getattr open search)))
(allow systemd_tmpfiles_t sysfs_t (file (ioctl write getattr lock append open)))
(allow systemd_tmpfiles_t var_t (dir (getattr open search)))
(allow systemd_tmpfiles_t var_lock_t (lnk_file (read getattr)))
(allow systemd_tmpfiles_t var_lock_t (dir (ioctl write getattr lock open add_name search)))
(allow systemd_tmpfiles_t var_lock_t (dir (create getattr)))
(dontaudit systemd_tmpfiles_t file_type (dir (getattr)))
(allow systemd_tmpfiles_t pidfile (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_tmpfiles_t pidfile (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow systemd_tmpfiles_t usr_t (dir (ioctl write getattr lock open remove_name search)))
(allow systemd_tmpfiles_t usr_t (file (getattr unlink)))
(allow systemd_tmpfiles_t home_root_t (dir (ioctl read getattr lock open search)))
(allow systemd_tmpfiles_t home_root_t (lnk_file (read getattr)))
(allow systemd_tmpfiles_t var_lock_t (lnk_file (read getattr)))
(allow systemd_tmpfiles_t var_t (dir (getattr open search)))
(allow systemd_tmpfiles_t var_lock_t (dir (ioctl read getattr lock open search)))
(allow systemd_tmpfiles_t configfile (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_tmpfiles_t configfile (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow systemd_tmpfiles_t configfile (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_tmpfiles_t configfile (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_tmpfiles_t tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_tmpfiles_t tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow systemd_tmpfiles_t var_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow systemd_tmpfiles_t var_t (dir (getattr open search)))
(allow systemd_tmpfiles_t var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow systemd_tmpfiles_t var_lock_t (lnk_file (read getattr)))
(allow systemd_tmpfiles_t var_t (dir (getattr open search)))
(allow systemd_tmpfiles_t var_lock_t (dir (getattr open search)))
(allow systemd_tmpfiles_t lockfile (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_tmpfiles_t lockfile (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow systemd_tmpfiles_t lockfile (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_tmpfiles_t lockfile (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_tmpfiles_t lockfile (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_tmpfiles_t lockfile (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
(allow systemd_tmpfiles_t tmpfile (dir (ioctl read getattr lock open search)))
(allow systemd_tmpfiles_t tmpfile (dir (ioctl write getattr lock open remove_name search)))
(allow systemd_tmpfiles_t tmpfile (dir (getattr rmdir)))
(allow systemd_tmpfiles_t tmpfile (dir (ioctl write getattr lock open remove_name search)))
(allow systemd_tmpfiles_t tmpfile (file (getattr unlink)))
(allow systemd_tmpfiles_t tmpfile (dir (ioctl write getattr lock open remove_name search)))
(allow systemd_tmpfiles_t tmpfile (lnk_file (getattr unlink)))
(allow systemd_tmpfiles_t tmpfile (dir (ioctl write getattr lock open remove_name search)))
(allow systemd_tmpfiles_t tmpfile (fifo_file (getattr unlink)))
(allow systemd_tmpfiles_t tmpfile (dir (ioctl write getattr lock open remove_name search)))
(allow systemd_tmpfiles_t tmpfile (sock_file (getattr unlink)))
(allow systemd_tmpfiles_t etc_t (dir (ioctl read getattr lock open search)))
(allow systemd_tmpfiles_t etc_t (dir (getattr open search)))
(allow systemd_tmpfiles_t etc_t (file (ioctl read getattr lock open)))
(allow systemd_tmpfiles_t etc_t (dir (getattr open search)))
(allow systemd_tmpfiles_t etc_t (lnk_file (read getattr)))
(allow systemd_tmpfiles_t etc_t (dir (ioctl read getattr lock open search)))
(allow systemd_tmpfiles_t etc_t (dir (getattr open search)))
(allow systemd_tmpfiles_t etc_runtime_t (file (ioctl read getattr lock open)))
(allow systemd_tmpfiles_t etc_t (dir (getattr open search)))
(allow systemd_tmpfiles_t etc_runtime_t (lnk_file (read getattr)))
(allow systemd_tmpfiles_t configfile (dir (getattr open search)))
(allow systemd_tmpfiles_t configfile (dir (getattr relabelfrom relabelto)))
(allow systemd_tmpfiles_t configfile (dir (getattr open search)))
(allow systemd_tmpfiles_t configfile (file (getattr relabelfrom relabelto)))
(allow systemd_tmpfiles_t configfile (dir (getattr open search)))
(allow systemd_tmpfiles_t configfile (lnk_file (getattr relabelfrom relabelto)))
(allow systemd_tmpfiles_t var_lock_t (lnk_file (read getattr)))
(allow systemd_tmpfiles_t var_t (dir (getattr open search)))
(allow systemd_tmpfiles_t var_lock_t (dir (getattr open search)))
(allow systemd_tmpfiles_t lockfile (dir (getattr open search)))
(allow systemd_tmpfiles_t lockfile (dir (getattr relabelfrom relabelto)))
(allow systemd_tmpfiles_t lockfile (dir (getattr open search)))
(allow systemd_tmpfiles_t lockfile (file (getattr relabelfrom relabelto)))
(allow systemd_tmpfiles_t lockfile (dir (getattr open search)))
(allow systemd_tmpfiles_t lockfile (lnk_file (getattr relabelfrom relabelto)))
(allow systemd_tmpfiles_t pidfile (dir (getattr open search)))
(allow systemd_tmpfiles_t pidfile (dir (getattr relabelfrom relabelto)))
(allow systemd_tmpfiles_t var_t (dir (getattr open search)))
(allow systemd_tmpfiles_t tmpfile (dir (getattr open search)))
(allow systemd_tmpfiles_t tmpfile (dir (getattr relabelfrom relabelto)))
(allow systemd_tmpfiles_t var_t (dir (getattr relabelfrom relabelto)))
(allow systemd_tmpfiles_t var_t (dir (getattr open search)))
(allow systemd_tmpfiles_t var_lib_t (dir (getattr relabelfrom relabelto)))
(allow systemd_tmpfiles_t home_root_t (dir (relabelfrom)))
(allow systemd_tmpfiles_t home_root_t (dir (relabelto)))
(allow systemd_tmpfiles_t etc_t (dir (relabelto)))
(allow systemd_tmpfiles_t var_t (dir (getattr open search)))
(allow systemd_tmpfiles_t var_lock_t (dir (setattr)))
(allow systemd_tmpfiles_t etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_tmpfiles_t etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
(allow systemd_tmpfiles_t tmpfs_t (dir (ioctl read getattr lock open search)))
(allow systemd_tmpfiles_t tmpfs_t (dir (relabelfrom)))
(allow systemd_tmpfiles_t filesystem_type (filesystem (getattr)))
(allow systemd_tmpfiles_t file_type (filesystem (getattr)))
(allow systemd_tmpfiles_t cgroup_types (dir (getattr open search)))
(allow systemd_tmpfiles_t cgroup_types (dir (getattr open search)))
(allow systemd_tmpfiles_t sysfs_t (dir (getattr open search)))
(allow systemd_tmpfiles_t sysfs_t (dir (getattr open search)))
(allow systemd_tmpfiles_t nsfs_t (file (getattr)))
(allow systemd_tmpfiles_t security_t (filesystem (getattr)))
(allow systemd_tmpfiles_t sysfs_t (filesystem (getattr)))
(allow systemd_tmpfiles_t sysfs_t (dir (getattr open search)))
(allow systemd_tmpfiles_t sysfs_t (dir (getattr open search)))
(allow systemd_tmpfiles_t proc_t (dir (getattr open search)))
(allow systemd_tmpfiles_t proc_t (file (ioctl read getattr lock open)))
(allow systemd_tmpfiles_t proc_t (dir (getattr open search)))
(allow systemd_tmpfiles_t proc_t (lnk_file (read getattr)))
(allow systemd_tmpfiles_t proc_t (dir (getattr open search)))
(allow systemd_tmpfiles_t proc_t (dir (ioctl read getattr lock open search)))
(allow systemd_tmpfiles_t sysfs_t (dir (getattr open search)))
(allow systemd_tmpfiles_t sysfs_t (dir (getattr open search)))
(allow systemd_tmpfiles_t security_t (dir (ioctl read getattr lock open search)))
(allow systemd_tmpfiles_t security_t (file (ioctl read getattr map open)))
(allow systemd_tmpfiles_t var_t (dir (getattr open search)))
(allow systemd_tmpfiles_t var_log_t (dir (getattr open search)))
(allow systemd_tmpfiles_t var_log_t (lnk_file (read getattr)))
(allow systemd_tmpfiles_t lastlog_t (file (ioctl getattr lock append open)))
(allow systemd_tmpfiles_t faillog_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_tmpfiles_t var_t (dir (getattr open search)))
(allow systemd_tmpfiles_t var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_tmpfiles_t var_log_t (lnk_file (read getattr)))
(allow systemd_tmpfiles_t lastlog_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_tmpfiles_t var_t (dir (getattr open search)))
(allow systemd_tmpfiles_t var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_tmpfiles_t var_log_t (lnk_file (read getattr)))
(allow systemd_tmpfiles_t var_t (dir (getattr open search)))
(allow systemd_tmpfiles_t var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_tmpfiles_t var_log_t (lnk_file (read getattr)))
(allow systemd_tmpfiles_t wtmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_tmpfiles_t var_t (dir (getattr open search)))
(allow systemd_tmpfiles_t var_auth_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow systemd_tmpfiles_t var_auth_t (file (ioctl read write getattr lock append open)))
(allow systemd_tmpfiles_t var_auth_t (lnk_file (ioctl read write getattr lock append)))
(allow systemd_tmpfiles_t var_t (dir (getattr open search)))
(allow systemd_tmpfiles_t var_log_t (dir (getattr open search)))
(allow systemd_tmpfiles_t var_log_t (lnk_file (read getattr)))
(allow systemd_tmpfiles_t lastlog_t (file (getattr relabelfrom relabelto)))
(allow systemd_tmpfiles_t wtmp_t (file (getattr relabelfrom relabelto)))
(allow systemd_tmpfiles_t wtmp_t (file (setattr)))
(allow systemd_tmpfiles_t var_t (dir (getattr open search)))
(allow systemd_tmpfiles_t var_log_t (dir (getattr open search)))
(allow systemd_tmpfiles_t var_log_t (lnk_file (read getattr)))
(allow systemd_tmpfiles_t var_run_t (lnk_file (read getattr)))
(allow systemd_tmpfiles_t var_t (dir (getattr open search)))
(allow systemd_tmpfiles_t var_run_t (dir (getattr open search)))
(allow systemd_tmpfiles_t initrc_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_tmpfiles_t init_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_tmpfiles_t init_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_tmpfiles_t var_t (dir (getattr open search)))
(allow systemd_tmpfiles_t var_lib_t (dir (getattr open search)))
(allow systemd_tmpfiles_t init_t (dir (getattr open search)))
(allow systemd_tmpfiles_t init_t (file (ioctl read getattr lock open)))
(allow systemd_tmpfiles_t init_t (lnk_file (read getattr)))
(allow systemd_tmpfiles_t initrc_runtime_t (file (getattr relabelfrom relabelto)))
(allow systemd_tmpfiles_t init_var_lib_t (dir (getattr relabelfrom relabelto)))
(allow systemd_tmpfiles_t init_runtime_t (dir (getattr open search)))
(allow systemd_tmpfiles_t init_runtime_t (file (ioctl read getattr lock open)))
(allow systemd_tmpfiles_t var_t (dir (getattr open search)))
(allow systemd_tmpfiles_t var_log_t (dir (getattr relabelfrom relabelto)))
(allow systemd_tmpfiles_t syslogd_tmp_t (file (getattr relabelfrom relabelto)))
(allow systemd_tmpfiles_t syslogd_tmp_t (dir (getattr relabelfrom relabelto)))
(allow systemd_tmpfiles_t syslogd_tmp_t (file (setattr)))
(allow systemd_tmpfiles_t syslogd_tmp_t (dir (setattr)))
(allow systemd_tmpfiles_t usr_t (dir (getattr open search)))
(allow systemd_tmpfiles_t man_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_tmpfiles_t man_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_tmpfiles_t man_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow systemd_tmpfiles_t man_cache_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow systemd_tmpfiles_t man_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_tmpfiles_t man_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_tmpfiles_t man_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_tmpfiles_t man_cache_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_tmpfiles_t man_t (dir (getattr open search)))
(allow systemd_tmpfiles_t man_cache_t (dir (getattr open search)))
(allow systemd_tmpfiles_t man_t (lnk_file (read getattr)))
(allow systemd_tmpfiles_t man_cache_t (lnk_file (read getattr)))
(allow systemd_tmpfiles_t man_cache_t (dir (getattr open search)))
(allow systemd_tmpfiles_t man_cache_t (dir (getattr relabelfrom relabelto)))
(allow systemd_tmpfiles_t man_cache_t (dir (getattr open search)))
(allow systemd_tmpfiles_t man_cache_t (file (getattr relabelfrom relabelto)))
(allow systemd_tmpfiles_t usr_t (dir (getattr open search)))
(allow systemd_tmpfiles_t locale_t (dir (ioctl read getattr lock open search)))
(allow systemd_tmpfiles_t locale_t (file (getattr)))
(allow systemd_tmpfiles_t etc_t (dir (getattr open search)))
(allow systemd_tmpfiles_t selinux_config_t (dir (ioctl read getattr lock open search)))
(allow systemd_tmpfiles_t selinux_config_t (dir (getattr open search)))
(allow systemd_tmpfiles_t selinux_config_t (file (ioctl read getattr lock open)))
(allow systemd_tmpfiles_t selinux_config_t (dir (getattr open search)))
(allow systemd_tmpfiles_t selinux_config_t (lnk_file (read getattr)))
(allow systemd_tmpfiles_t etc_t (dir (getattr open search)))
(allow systemd_tmpfiles_t selinux_config_t (dir (getattr open search)))
(allow systemd_tmpfiles_t default_context_t (dir (getattr open search)))
(allow systemd_tmpfiles_t file_context_t (dir (getattr open search)))
(allow systemd_tmpfiles_t file_context_t (file (ioctl read getattr lock open)))
(allow systemd_tmpfiles_t file_context_t (file (map)))
(allow systemd_tmpfiles_t etc_t (dir (getattr open search)))
(allow systemd_tmpfiles_t net_conf_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_tmpfiles_t etc_t (dir (getattr open search)))
(allow systemd_tmpfiles_t net_conf_t (file (getattr relabelfrom relabelto)))
(allow systemd_tmpfiles_t user_runtime_root_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow systemd_tmpfiles_t var_run_t (lnk_file (read getattr)))
(allow systemd_tmpfiles_t var_t (dir (getattr open search)))
(allow systemd_tmpfiles_t var_run_t (dir (getattr open search)))
(allow systemd_tmpfiles_t user_runtime_root_t (dir (getattr relabelfrom relabelto)))
(allow systemd_update_done_t self (process (setfscreate)))
(allow systemd_update_done_t systemd_update_run_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_update_done_t etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition systemd_update_done_t etc_t file systemd_update_run_t)
(allow systemd_update_done_t var_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition systemd_update_done_t var_t file systemd_update_run_t)
(allow systemd_update_done_t filesystem_type (filesystem (getattr)))
(allow systemd_update_done_t file_type (filesystem (getattr)))
(allow systemd_update_done_t nsfs_t (file (getattr)))
(allow systemd_update_done_t cgroup_types (dir (getattr open search)))
(allow systemd_update_done_t cgroup_types (dir (getattr open search)))
(allow systemd_update_done_t sysfs_t (dir (getattr open search)))
(allow systemd_update_done_t sysfs_t (dir (getattr open search)))
(allow systemd_update_done_t proc_t (dir (getattr open search)))
(allow systemd_update_done_t sysctl_t (dir (getattr open search)))
(allow systemd_update_done_t sysctl_kernel_t (dir (getattr open search)))
(allow systemd_update_done_t sysctl_kernel_t (file (ioctl read getattr lock open)))
(allow systemd_update_done_t proc_t (dir (getattr open search)))
(allow systemd_update_done_t sysctl_t (dir (getattr open search)))
(allow systemd_update_done_t sysctl_kernel_t (dir (ioctl read getattr lock open search)))
(allow systemd_update_done_t sysfs_t (dir (getattr open search)))
(allow systemd_update_done_t sysfs_t (dir (getattr open search)))
(allow systemd_update_done_t security_t (dir (ioctl read getattr lock open search)))
(allow systemd_update_done_t security_t (file (ioctl read getattr map open)))
(allow systemd_update_done_t etc_t (dir (getattr open search)))
(allow systemd_update_done_t selinux_config_t (dir (ioctl read getattr lock open search)))
(allow systemd_update_done_t selinux_config_t (dir (getattr open search)))
(allow systemd_update_done_t selinux_config_t (file (ioctl read getattr lock open)))
(allow systemd_update_done_t selinux_config_t (dir (getattr open search)))
(allow systemd_update_done_t selinux_config_t (lnk_file (read getattr)))
(allow systemd_update_done_t etc_t (dir (getattr open search)))
(allow systemd_update_done_t selinux_config_t (dir (getattr open search)))
(allow systemd_update_done_t default_context_t (dir (getattr open search)))
(allow systemd_update_done_t file_context_t (dir (getattr open search)))
(allow systemd_update_done_t file_context_t (file (ioctl read getattr lock open)))
(allow systemd_update_done_t file_context_t (file (map)))
(allow systemd_user_session_type self (bpf (prog_load prog_run)))
(allow systemd_user_session_type self (capability (dac_read_search sys_resource)))
(dontaudit systemd_user_session_type self (capability (dac_override)))
(allow systemd_user_session_type self (fifo_file (ioctl read write getattr lock append open)))
(allow systemd_user_session_type self (process (getcap setcap setfscreate setsockcreate)))
(allow systemd_user_session_type self (udp_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow systemd_user_session_type self (unix_stream_socket (ioctl read write create getattr setattr append bind connect listen accept getopt setopt shutdown)))
(allow systemd_user_session_type self (netlink_kobject_uevent_socket (read create getattr bind setopt)))
(allow systemd_user_session_type systemd_user_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow systemd_user_session_type systemd_user_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
(allow systemd_user_session_type systemd_user_runtime_t (sock_file (write create)))
(allow systemd_user_session_type user_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition systemd_user_session_type user_runtime_t dir systemd_user_runtime_t)
(allow systemd_user_session_type user_runtime_root_t (dir (getattr open search)))
(allow systemd_user_session_type var_run_t (lnk_file (read getattr)))
(allow systemd_user_session_type var_t (dir (getattr open search)))
(allow systemd_user_session_type var_run_t (dir (getattr open search)))
(allow systemd_user_session_type systemd_user_runtime_notify_t (sock_file (create)))
(allow systemd_user_session_type systemd_user_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_user_session_type systemd_user_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_user_session_type systemd_user_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_user_session_type systemd_user_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_user_session_type systemd_user_tmpfs_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_user_tmpfs_t tmpfs_t (filesystem (associate)))
(allow systemd_user_session_type tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition systemd_user_session_type tmpfs_t file systemd_user_tmpfs_t)
(allow systemd_user_session_type systemd_generator_exec_t (file (ioctl read getattr lock map execute open execute_no_trans)))
(allow systemd_user_session_type sysfs_t (dir (write)))
(allow systemd_user_session_type sysfs_t (dir (getattr open search)))
(allow systemd_user_session_type sysfs_t (file (ioctl read getattr lock open)))
(allow systemd_user_session_type sysfs_t (dir (getattr open search)))
(allow systemd_user_session_type sysfs_t (lnk_file (read getattr)))
(allow systemd_user_session_type sysfs_t (dir (getattr open search)))
(allow systemd_user_session_type sysfs_t (dir (ioctl read getattr lock open search)))
(allow systemd_user_session_type entry_type (lnk_file (read getattr)))
(allow systemd_user_session_type entry_type (file (getattr)))
(allow systemd_user_session_type etc_t (dir (ioctl read getattr lock open search)))
(allow systemd_user_session_type etc_t (dir (getattr open search)))
(allow systemd_user_session_type etc_t (file (ioctl read getattr lock open)))
(allow systemd_user_session_type etc_t (dir (getattr open search)))
(allow systemd_user_session_type etc_t (lnk_file (read getattr)))
(allow systemd_user_session_type usr_t (dir (ioctl read getattr lock open search)))
(allow systemd_user_session_type etc_t (lnk_file (watch)))
(allow systemd_user_session_type cgroup_types (filesystem (getattr)))
(allow systemd_user_session_type tmpfs_t (filesystem (getattr)))
(allow systemd_user_session_type cgroup_types (dir (getattr open search)))
(allow systemd_user_session_type cgroup_types (file (ioctl read write getattr lock append open)))
(allow systemd_user_session_type cgroup_types (dir (getattr open search)))
(allow systemd_user_session_type cgroup_types (lnk_file (read getattr)))
(allow systemd_user_session_type sysfs_t (dir (getattr open search)))
(allow systemd_user_session_type sysfs_t (dir (getattr open search)))
(allow systemd_user_session_type cgroup_types (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_user_session_type cgroup_types (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow systemd_user_session_type sysfs_t (dir (getattr open search)))
(allow systemd_user_session_type sysfs_t (dir (getattr open search)))
(allow systemd_user_session_type proc_t (dir (getattr open search)))
(allow systemd_user_session_type sysctl_t (dir (getattr open search)))
(allow systemd_user_session_type sysctl_fs_t (dir (getattr open search)))
(allow systemd_user_session_type sysctl_fs_t (file (ioctl read getattr lock open)))
(allow systemd_user_session_type proc_t (dir (getattr open search)))
(allow systemd_user_session_type sysctl_t (dir (getattr open search)))
(allow systemd_user_session_type sysctl_fs_t (dir (ioctl read getattr lock open search)))
(allow systemd_user_session_type proc_t (dir (getattr open search)))
(allow systemd_user_session_type sysctl_t (dir (getattr open search)))
(allow systemd_user_session_type sysctl_kernel_t (dir (getattr open search)))
(allow systemd_user_session_type sysctl_kernel_t (file (ioctl read getattr lock open)))
(allow systemd_user_session_type proc_t (dir (getattr open search)))
(allow systemd_user_session_type sysctl_t (dir (getattr open search)))
(allow systemd_user_session_type sysctl_kernel_t (dir (ioctl read getattr lock open search)))
(allow systemd_user_session_type sysfs_t (dir (getattr open search)))
(allow systemd_user_session_type sysfs_t (dir (getattr open search)))
(allow systemd_user_session_type self (netlink_selinux_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow systemd_user_session_type security_t (dir (ioctl read getattr lock open search)))
(allow systemd_user_session_type security_t (file (ioctl read write getattr map open)))
(allow systemd_user_session_type security_t (security (compute_av)))
(allow systemd_user_session_type sysfs_t (dir (getattr open search)))
(allow systemd_user_session_type sysfs_t (dir (getattr open search)))
(allow systemd_user_session_type security_t (dir (ioctl read getattr lock open search)))
(allow systemd_user_session_type security_t (file (ioctl read write getattr map open)))
(allow systemd_user_session_type security_t (security (compute_create)))
(allow systemd_user_session_type device_t (dir (getattr open search)))
(allow systemd_user_session_type device_t (dir (ioctl read getattr lock open search)))
(allow systemd_user_session_type device_t (dir (getattr open search)))
(allow systemd_user_session_type device_t (lnk_file (read getattr)))
(allow systemd_user_session_type fixed_disk_device_t (blk_file (getattr)))
(allow systemd_user_session_type fixed_disk_device_t (chr_file (getattr)))
(allow systemd_user_session_type bin_t (dir (getattr open search)))
(allow systemd_user_session_type bin_t (lnk_file (read getattr)))
(allow systemd_user_session_type usr_t (dir (getattr open search)))
(allow systemd_user_session_type init_exec_t (file (ioctl read getattr lock map execute open execute_no_trans)))
(allow systemd_user_session_type init_runtime_t (dir (getattr open search)))
(allow systemd_user_session_type init_runtime_t (sock_file (write getattr append open)))
(allow systemd_user_session_type init_t (unix_dgram_socket (sendto)))
(allow systemd_user_session_type var_run_t (lnk_file (read getattr)))
(allow systemd_user_session_type var_t (dir (getattr open search)))
(allow systemd_user_session_type var_run_t (dir (getattr open search)))
(allow systemd_user_session_type init_t (unix_stream_socket (getattr)))
(allow systemd_user_session_type init_t (process (signal)))
(allow systemd_user_session_type self (capability (audit_write)))
(allow systemd_user_session_type self (netlink_audit_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown nlmsg_read nlmsg_relay)))
(allow systemd_user_session_type etc_t (dir (getattr open search)))
(allow systemd_user_session_type etc_t (lnk_file (read getattr)))
(allow systemd_user_session_type usr_t (dir (getattr open search)))
(allow systemd_user_session_type locale_t (dir (ioctl read getattr lock open search)))
(allow systemd_user_session_type locale_t (dir (getattr open search)))
(allow systemd_user_session_type locale_t (file (ioctl read getattr lock open)))
(allow systemd_user_session_type locale_t (dir (getattr open search)))
(allow systemd_user_session_type locale_t (lnk_file (read getattr)))
(allow systemd_user_session_type locale_t (file (map)))
(allow systemd_user_session_type mount_runtime_t (dir (ioctl read getattr lock open search)))
(allow systemd_user_session_type mount_runtime_t (dir (watch)))
(allow systemd_user_session_type var_run_t (lnk_file (read getattr)))
(allow systemd_user_session_type var_t (dir (getattr open search)))
(allow systemd_user_session_type var_run_t (dir (getattr open search)))
(allow systemd_user_session_type udev_runtime_t (dir (getattr open search)))
(allow systemd_user_session_type udev_runtime_t (file (ioctl read getattr lock open)))
(allow systemd_user_session_type udev_runtime_t (dir (getattr open search)))
(allow systemd_user_session_type udev_runtime_t (lnk_file (read getattr)))
(allow systemd_user_session_type var_run_t (lnk_file (read getattr)))
(allow systemd_user_session_type var_t (dir (getattr open search)))
(allow systemd_user_session_type var_run_t (dir (getattr open search)))
(allow systemd_user_session_type udev_runtime_t (dir (ioctl read getattr lock open search)))
(allow systemd_user_session_type security_t (filesystem (getattr)))
(allow systemd_user_session_type sysfs_t (filesystem (getattr)))
(allow systemd_user_session_type sysfs_t (dir (getattr open search)))
(allow systemd_user_session_type sysfs_t (dir (getattr open search)))
(allow systemd_user_session_type proc_t (dir (getattr open search)))
(allow systemd_user_session_type proc_t (file (ioctl read getattr lock open)))
(allow systemd_user_session_type proc_t (dir (getattr open search)))
(allow systemd_user_session_type proc_t (lnk_file (read getattr)))
(allow systemd_user_session_type proc_t (dir (getattr open search)))
(allow systemd_user_session_type proc_t (dir (ioctl read getattr lock open search)))
(allow systemd_user_session_type etc_t (dir (getattr open search)))
(allow systemd_user_session_type selinux_config_t (dir (ioctl read getattr lock open search)))
(allow systemd_user_session_type selinux_config_t (dir (getattr open search)))
(allow systemd_user_session_type selinux_config_t (file (ioctl read getattr lock open)))
(allow systemd_user_session_type selinux_config_t (dir (getattr open search)))
(allow systemd_user_session_type selinux_config_t (lnk_file (read getattr)))
(allow systemd_userdbd_t self (capability (dac_read_search sys_resource)))
(allow systemd_userdbd_t self (process (signal getcap)))
(allow systemd_userdbd_t self (unix_stream_socket (ioctl read write create getattr setattr append bind connect listen accept getopt setopt shutdown)))
(allow systemd_userdbd_t systemd_homed_runtime_t (dir (getattr open search)))
(allow systemd_userdbd_t systemd_homed_runtime_t (sock_file (write getattr append open)))
(allow systemd_userdbd_t systemd_homed_t (unix_stream_socket (connectto)))
(allow systemd_userdbd_t systemd_userdbd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_userdbd_t systemd_userdbd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow systemd_userdbd_t systemd_userdbd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_userdbd_t systemd_userdbd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_userdbd_t systemd_userdbd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_userdbd_t systemd_userdbd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_userdbd_t var_run_t (lnk_file (read getattr)))
(allow systemd_userdbd_t var_t (dir (getattr open search)))
(allow systemd_userdbd_t var_run_t (dir (getattr open search)))
(allow systemd_userdbd_t init_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition systemd_userdbd_t init_runtime_t dir systemd_userdbd_runtime_t)
(allow systemd_userdbd_t systemd_userdbd_exec_t (file (ioctl read getattr lock map execute open execute_no_trans)))
(allow systemd_userdbd_t etc_t (dir (getattr open search)))
(allow systemd_userdbd_t shadow_history_t (file (ioctl read getattr lock open)))
(allow systemd_userdbd_t etc_t (dir (ioctl read getattr lock open search)))
(allow systemd_userdbd_t shadow_t (file (ioctl read getattr lock open)))
(allow systemd_userdbd_t device_t (dir (getattr open search)))
(allow systemd_userdbd_t urandom_device_t (chr_file (ioctl read getattr lock open)))
(allow systemd_userdbd_t etc_t (dir (ioctl read getattr lock open search)))
(allow systemd_userdbd_t etc_t (dir (getattr open search)))
(allow systemd_userdbd_t etc_t (file (ioctl read getattr lock open)))
(allow systemd_userdbd_t etc_t (dir (getattr open search)))
(allow systemd_userdbd_t etc_t (lnk_file (read getattr)))
(allow systemd_userdbd_t etc_t (dir (ioctl read getattr lock open search)))
(allow systemd_userdbd_t etc_t (dir (getattr open search)))
(allow systemd_userdbd_t etc_runtime_t (file (ioctl read getattr lock open)))
(allow systemd_userdbd_t etc_t (dir (getattr open search)))
(allow systemd_userdbd_t etc_runtime_t (lnk_file (read getattr)))
(allow systemd_userdbd_t usr_t (dir (ioctl read getattr lock open search)))
(allow systemd_userdbd_t usr_t (dir (getattr open search)))
(allow systemd_userdbd_t usr_t (file (ioctl read getattr lock open)))
(allow systemd_userdbd_t usr_t (dir (getattr open search)))
(allow systemd_userdbd_t usr_t (lnk_file (read getattr)))
(allow systemd_userdbd_t filesystem_type (filesystem (getattr)))
(allow systemd_userdbd_t file_type (filesystem (getattr)))
(allow systemd_userdbd_t nsfs_t (file (getattr)))
(allow systemd_userdbd_t cgroup_types (dir (getattr open search)))
(allow systemd_userdbd_t cgroup_types (dir (getattr open search)))
(allow systemd_userdbd_t sysfs_t (dir (getattr open search)))
(allow systemd_userdbd_t sysfs_t (dir (getattr open search)))
(allow systemd_userdbd_t efivarfs_t (dir (getattr open search)))
(allow systemd_userdbd_t efivarfs_t (file (ioctl read getattr lock open)))
(allow systemd_userdbd_t memory_pressure_t (file (ioctl read write getattr setattr lock append open)))
(allow systemd_userdbd_t proc_t (dir (getattr open search)))
(allow systemd_userdbd_t proc_t (file (ioctl read getattr lock open)))
(allow systemd_userdbd_t proc_t (dir (getattr open search)))
(allow systemd_userdbd_t proc_t (lnk_file (read getattr)))
(allow systemd_userdbd_t proc_t (dir (getattr open search)))
(allow systemd_userdbd_t proc_t (dir (ioctl read getattr lock open search)))
(allow systemd_userdbd_t init_runtime_t (dir (getattr open search)))
(allow systemd_userdbd_t init_runtime_t (sock_file (write getattr append open)))
(allow systemd_userdbd_t init_t (unix_stream_socket (connectto)))
(allow systemd_userdbd_t var_run_t (lnk_file (read getattr)))
(allow systemd_userdbd_t var_t (dir (getattr open search)))
(allow systemd_userdbd_t var_run_t (dir (getattr open search)))
(allow systemd_userdbd_t init_t (unix_stream_socket (getattr)))
(allow systemd_userdbd_t init_runtime_t (dir (getattr open search)))
(allow systemd_userdbd_t init_t (dir (getattr open search)))
(allow systemd_userdbd_t init_t (file (ioctl read getattr lock open)))
(allow systemd_userdbd_t init_t (lnk_file (read getattr)))
(allow systemd_userdbd_t proc_t (dir (getattr open search)))
(allow systemd_userdbd_t sysctl_t (dir (getattr open search)))
(allow systemd_userdbd_t sysctl_kernel_t (dir (getattr open search)))
(allow systemd_userdbd_t sysctl_kernel_t (file (ioctl read getattr lock open)))
(allow systemd_userdbd_t proc_t (dir (getattr open search)))
(allow systemd_userdbd_t sysctl_t (dir (getattr open search)))
(allow systemd_userdbd_t sysctl_kernel_t (dir (ioctl read getattr lock open search)))
(allow systemd_userdbd_t etc_t (dir (getattr open search)))
(allow systemd_userdbd_t selinux_config_t (dir (getattr open search)))
(allow systemd_userdbd_t default_context_t (dir (getattr open search)))
(allow systemd_userdbd_t init_runtime_t (dir (getattr open search)))
(allow systemd_userdbd_t systemd_nsresourced_runtime_t (dir (getattr open search)))
(allow systemd_userdbd_t systemd_nsresourced_runtime_t (sock_file (write getattr append open)))
(allow systemd_userdbd_t systemd_nsresourced_t (unix_stream_socket (connectto)))
(allow systemd_user_runtime_dir_t self (capability (chown dac_override dac_read_search fowner sys_admin)))
(allow systemd_user_runtime_dir_t self (process (setfscreate)))
(allow systemd_user_runtime_dir_t systemd_user_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow systemd_user_runtime_dir_t systemd_user_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_user_runtime_dir_t etc_t (dir (ioctl read getattr lock open search)))
(allow systemd_user_runtime_dir_t etc_t (dir (getattr open search)))
(allow systemd_user_runtime_dir_t etc_t (file (ioctl read getattr lock open)))
(allow systemd_user_runtime_dir_t etc_t (dir (getattr open search)))
(allow systemd_user_runtime_dir_t etc_t (lnk_file (read getattr)))
(allow systemd_user_runtime_dir_t tmpfs_t (filesystem (mount)))
(allow systemd_user_runtime_dir_t tmpfs_t (filesystem (getattr)))
(allow systemd_user_runtime_dir_t tmpfs_t (dir (ioctl read getattr lock open search)))
(allow systemd_user_runtime_dir_t tmpfs_t (filesystem (unmount)))
(allow systemd_user_runtime_dir_t tmpfs_t (dir (relabelfrom)))
(allow systemd_user_runtime_dir_t cgroup_types (dir (getattr open search)))
(allow systemd_user_runtime_dir_t cgroup_types (file (ioctl read getattr lock open)))
(allow systemd_user_runtime_dir_t cgroup_types (dir (getattr open search)))
(allow systemd_user_runtime_dir_t cgroup_types (lnk_file (read getattr)))
(allow systemd_user_runtime_dir_t sysfs_t (dir (getattr open search)))
(allow systemd_user_runtime_dir_t sysfs_t (dir (getattr open search)))
(allow systemd_user_runtime_dir_t cgroup_types (filesystem (getattr)))
(allow systemd_user_runtime_dir_t cgroup_types (dir (getattr open search)))
(allow systemd_user_runtime_dir_t cgroup_types (dir (getattr open search)))
(allow systemd_user_runtime_dir_t sysfs_t (dir (getattr open search)))
(allow systemd_user_runtime_dir_t sysfs_t (dir (getattr open search)))
(allow systemd_user_runtime_dir_t fs_t (filesystem (getattr)))
(allow systemd_user_runtime_dir_t nsfs_t (file (getattr)))
(allow systemd_user_runtime_dir_t proc_t (dir (getattr open search)))
(allow systemd_user_runtime_dir_t sysctl_t (dir (getattr open search)))
(allow systemd_user_runtime_dir_t sysctl_kernel_t (dir (getattr open search)))
(allow systemd_user_runtime_dir_t sysctl_kernel_t (file (ioctl read getattr lock open)))
(allow systemd_user_runtime_dir_t proc_t (dir (getattr open search)))
(allow systemd_user_runtime_dir_t sysctl_t (dir (getattr open search)))
(allow systemd_user_runtime_dir_t sysctl_kernel_t (dir (ioctl read getattr lock open search)))
(dontaudit systemd_user_runtime_dir_t proc_t (filesystem (getattr)))
(allow systemd_user_runtime_dir_t sysfs_t (dir (getattr open search)))
(allow systemd_user_runtime_dir_t sysfs_t (dir (getattr open search)))
(allow systemd_user_runtime_dir_t security_t (dir (ioctl read getattr lock open search)))
(allow systemd_user_runtime_dir_t security_t (file (ioctl read getattr map open)))
(allow systemd_user_runtime_dir_t systemd_logind_t (dbus (send_msg)))
(allow systemd_logind_t systemd_user_runtime_dir_t (dbus (send_msg)))
(allow systemd_user_runtime_dir_t etc_t (dir (getattr open search)))
(allow systemd_user_runtime_dir_t selinux_config_t (dir (getattr open search)))
(allow systemd_user_runtime_dir_t default_context_t (dir (getattr open search)))
(allow systemd_user_runtime_dir_t file_context_t (dir (getattr open search)))
(allow systemd_user_runtime_dir_t file_context_t (file (ioctl read getattr lock open)))
(allow systemd_user_runtime_dir_t file_context_t (file (map)))
(allow systemd_user_runtime_dir_t security_t (filesystem (getattr)))
(allow systemd_user_runtime_dir_t sysfs_t (filesystem (getattr)))
(allow systemd_user_runtime_dir_t sysfs_t (dir (getattr open search)))
(allow systemd_user_runtime_dir_t sysfs_t (dir (getattr open search)))
(allow systemd_user_runtime_dir_t proc_t (dir (getattr open search)))
(allow systemd_user_runtime_dir_t proc_t (file (ioctl read getattr lock open)))
(allow systemd_user_runtime_dir_t proc_t (dir (getattr open search)))
(allow systemd_user_runtime_dir_t proc_t (lnk_file (read getattr)))
(allow systemd_user_runtime_dir_t proc_t (dir (getattr open search)))
(allow systemd_user_runtime_dir_t proc_t (dir (ioctl read getattr lock open search)))
(allow systemd_user_runtime_dir_t etc_t (dir (getattr open search)))
(allow systemd_user_runtime_dir_t selinux_config_t (dir (ioctl read getattr lock open search)))
(allow systemd_user_runtime_dir_t selinux_config_t (dir (getattr open search)))
(allow systemd_user_runtime_dir_t selinux_config_t (file (ioctl read getattr lock open)))
(allow systemd_user_runtime_dir_t selinux_config_t (dir (getattr open search)))
(allow systemd_user_runtime_dir_t selinux_config_t (lnk_file (read getattr)))
(allow systemd_user_runtime_dir_t user_runtime_content_type (dir (ioctl read getattr lock open search)))
(allow systemd_user_runtime_dir_t user_runtime_t (dir (getattr open search)))
(allow systemd_user_runtime_dir_t user_runtime_root_t (dir (getattr open search)))
(allow systemd_user_runtime_dir_t var_run_t (lnk_file (read getattr)))
(allow systemd_user_runtime_dir_t var_t (dir (getattr open search)))
(allow systemd_user_runtime_dir_t var_run_t (dir (getattr open search)))
(allow systemd_user_runtime_dir_t user_runtime_content_type (dir (ioctl write getattr lock open remove_name search)))
(allow systemd_user_runtime_dir_t user_runtime_content_type (dir (getattr rmdir)))
(allow systemd_user_runtime_dir_t user_runtime_content_type (dir (ioctl write getattr lock open remove_name search)))
(allow systemd_user_runtime_dir_t user_runtime_content_type (file (getattr unlink)))
(allow systemd_user_runtime_dir_t user_runtime_content_type (dir (ioctl write getattr lock open remove_name search)))
(allow systemd_user_runtime_dir_t user_runtime_content_type (lnk_file (getattr unlink)))
(allow systemd_user_runtime_dir_t user_runtime_content_type (dir (ioctl write getattr lock open remove_name search)))
(allow systemd_user_runtime_dir_t user_runtime_content_type (fifo_file (getattr unlink)))
(allow systemd_user_runtime_dir_t user_runtime_content_type (dir (ioctl write getattr lock open remove_name search)))
(allow systemd_user_runtime_dir_t user_runtime_content_type (sock_file (getattr unlink)))
(allow systemd_user_runtime_dir_t user_runtime_content_type (dir (ioctl write getattr lock open remove_name search)))
(allow systemd_user_runtime_dir_t user_runtime_content_type (blk_file (getattr unlink)))
(allow systemd_user_runtime_dir_t user_runtime_content_type (dir (ioctl write getattr lock open remove_name search)))
(allow systemd_user_runtime_dir_t user_runtime_content_type (chr_file (getattr unlink)))
(allow systemd_user_runtime_dir_t user_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_user_runtime_dir_t user_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow systemd_user_runtime_dir_t tmp_t (dir (getattr open search)))
(allow systemd_user_runtime_dir_t user_runtime_t (dir (getattr open search)))
(allow systemd_user_runtime_dir_t user_runtime_root_t (dir (getattr open search)))
(allow systemd_user_runtime_dir_t var_run_t (lnk_file (read getattr)))
(allow systemd_user_runtime_dir_t var_t (dir (getattr open search)))
(allow systemd_user_runtime_dir_t var_run_t (dir (getattr open search)))
(allow systemd_user_runtime_dir_t user_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow systemd_user_runtime_dir_t user_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow systemd_user_runtime_dir_t tmp_t (dir (getattr open search)))
(allow systemd_user_runtime_dir_t user_runtime_t (dir (getattr open search)))
(allow systemd_user_runtime_dir_t user_runtime_root_t (dir (getattr open search)))
(allow systemd_user_runtime_dir_t var_run_t (lnk_file (read getattr)))
(allow systemd_user_runtime_dir_t var_t (dir (getattr open search)))
(allow systemd_user_runtime_dir_t var_run_t (dir (getattr open search)))
(allow systemd_user_runtime_dir_t user_runtime_root_t (dir (getattr open search)))
(allow systemd_user_runtime_dir_t var_run_t (lnk_file (read getattr)))
(allow systemd_user_runtime_dir_t var_t (dir (getattr open search)))
(allow systemd_user_runtime_dir_t var_run_t (dir (getattr open search)))
(allow systemd_user_runtime_dir_t user_runtime_root_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition systemd_user_runtime_dir_t user_runtime_root_t dir user_runtime_t)
(allow systemd_user_runtime_dir_t var_run_t (lnk_file (read getattr)))
(allow systemd_user_runtime_dir_t var_t (dir (getattr open search)))
(allow systemd_user_runtime_dir_t var_run_t (dir (getattr open search)))
(allow systemd_user_runtime_dir_t user_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow systemd_user_runtime_dir_t user_runtime_root_t (dir (getattr open search)))
(allow systemd_user_runtime_dir_t var_run_t (lnk_file (read getattr)))
(allow systemd_user_runtime_dir_t var_t (dir (getattr open search)))
(allow systemd_user_runtime_dir_t var_run_t (dir (getattr open search)))
(allow systemd_user_runtime_dir_t user_runtime_t (dir (mounton)))
(allow systemd_user_runtime_dir_t user_runtime_t (dir (relabelto)))
(typetransition systemd_user_session_type systemd_user_runtime_t dir "user" systemd_user_runtime_unit_t)
(typetransition systemd_user_session_type systemd_user_runtime_t dir "transient" systemd_user_transient_unit_t)
(typetransition systemd_user_session_type systemd_user_runtime_t dir "generator.late" systemd_user_runtime_unit_t)
(typetransition systemd_user_session_type systemd_user_runtime_t dir "generator.early" systemd_user_runtime_unit_t)
(typetransition systemd_user_session_type systemd_user_runtime_t sock_file "notify" systemd_user_runtime_notify_t)
(typetransition systemd_pcrphase_t var_log_t dir "systemd" systemd_log_t)
(typetransition systemd_logind_t init_runtime_t dir "inhibit" systemd_logind_inhibit_runtime_t)
(typetransition initrc_t var_run_t dir "systemd_sessions" systemd_sessions_runtime_t)
(typetransition initrc_t var_run_t dir "machines" systemd_machined_runtime_t)
(typetransition initrc_t var_run_t file "elogind.pid" systemd_logind_runtime_t)
(typetransition initrc_t var_run_t dir "systemd_logind" systemd_logind_runtime_t)
(typetransition initrc_t var_run_t dir "systemd_cgroups" systemd_cgroups_runtime_t)
(booleanif (systemd_tmpfiles_manage_all)
    (true
        (allow systemd_tmpfiles_t non_security_file_type (file (getattr relabelfrom relabelto)))
        (allow systemd_tmpfiles_t non_security_file_type (dir (getattr open search)))
        (allow systemd_tmpfiles_t non_security_file_type (dir (getattr relabelfrom relabelto)))
        (allow systemd_tmpfiles_t non_security_file_type (dir (getattr open search)))
        (allow systemd_tmpfiles_t non_security_file_type (file (ioctl read write create getattr setattr lock append unlink link rename open)))
        (allow systemd_tmpfiles_t non_security_file_type (dir (ioctl read write getattr lock open add_name remove_name search)))
        (allow systemd_tmpfiles_t non_security_file_type (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
    )
)
(booleanif (systemd_socket_proxyd_connect_any)
    (true
        (allow systemd_socket_proxyd_t port_type (tcp_socket (name_connect)))
    )
    (false
        (allow systemd_socket_proxyd_t systemd_socket_proxyd_port_t (tcp_socket (name_connect)))
    )
)
(booleanif (systemd_socket_proxyd_bind_any)
    (true
        (allow systemd_socket_proxyd_t self (capability (net_bind_service)))
        (allow systemd_socket_proxyd_t port_type (tcp_socket (name_bind)))
    )
    (false
        (allow systemd_socket_proxyd_t systemd_socket_proxyd_port_t (tcp_socket (name_bind)))
    )
)
(booleanif (systemd_nspawn_labeled_namespace)
    (true
        (allow systemd_nspawn_t default_context_t (dir (getattr open search)))
        (allow systemd_nspawn_t selinux_config_t (dir (getattr open search)))
        (allow systemd_nspawn_t etc_t (dir (getattr open search)))
        (allow systemd_nspawn_t var_log_t (lnk_file (read getattr)))
        (allow systemd_nspawn_t var_log_t (dir (getattr open search)))
        (allow systemd_nspawn_t var_t (dir (getattr open search)))
        (allow init_t systemd_nspawn_t (process (sigchld)))
        (allow init_t systemd_nspawn_t (fifo_file (ioctl read write getattr lock append)))
        (allow init_t systemd_nspawn_t (fd (use)))
        (typetransition systemd_nspawn_t init_exec_t process init_t)
        (dontaudit systemd_nspawn_t init_t (process (noatsecure siginh rlimitinh)))
        (allow systemd_nspawn_t init_t (process (transition)))
        (allow systemd_nspawn_t init_exec_t (file (ioctl read getattr map execute open)))
        (allow systemd_nspawn_t security_t (dir (getattr mounton)))
        (allow systemd_nspawn_t security_t (dir (getattr open search)))
        (allow systemd_nspawn_t sysfs_t (dir (getattr open search)))
        (allow systemd_nspawn_t sysfs_t (dir (getattr open search)))
        (allow systemd_nspawn_t security_t (filesystem (remount)))
        (allow systemd_nspawn_t sysfs_t (dir (getattr open search)))
        (allow systemd_nspawn_t sysfs_t (dir (getattr open search)))
        (allow systemd_nspawn_t sysfs_t (filesystem (getattr)))
        (allow systemd_nspawn_t security_t (filesystem (getattr)))
        (allow systemd_nspawn_t sysfs_t (dir (getattr open search)))
        (allow systemd_nspawn_t sysfs_t (dir (getattr open search)))
        (allow systemd_nspawn_t cgroup_types (file (ioctl write getattr lock append open)))
        (allow systemd_nspawn_t cgroup_types (dir (getattr open search)))
        (allow systemd_nspawn_t cgroup_types (filesystem (unmount)))
        (allow systemd_nspawn_t tmpfs_t (dir (getattr open search)))
        (allow systemd_nspawn_t cgroup_types (filesystem (remount)))
        (allow systemd_nspawn_t tmpfs_t (file (mounton)))
        (allow systemd_nspawn_t tmpfs_t (dir (mounton)))
        (allow systemd_nspawn_t cgroup_types (dir (mounton)))
        (allow systemd_nspawn_t cgroup_types (filesystem (mount)))
        (allow systemd_nspawn_t tmpfs_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
        (allow systemd_nspawn_t tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
        (allow systemd_nspawn_t tmpfs_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
        (allow systemd_nspawn_t tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
        (allow systemd_nspawn_t tmpfs_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
        (allow systemd_nspawn_t sysfs_t (dir (getattr open search)))
        (allow systemd_nspawn_t sysfs_t (dir (getattr open search)))
        (allow systemd_nspawn_t cgroup_types (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
        (allow systemd_nspawn_t cgroup_types (dir (ioctl read write getattr lock open add_name remove_name search)))
        (allow systemd_nspawn_t cgroup_types (filesystem (getattr)))
        (allow systemd_nspawn_t home_root_t (lnk_file (read getattr)))
        (allow systemd_nspawn_t home_root_t (dir (getattr open search)))
        (allow systemd_nspawn_t system_map_t (file (getattr mounton)))
        (allow systemd_nspawn_t boot_t (dir (getattr open search)))
        (allow systemd_nspawn_t var_run_t (dir (mounton)))
        (allow systemd_nspawn_t etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
        (allow systemd_nspawn_t etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
        (allow systemd_nspawn_t device_t (dir (setattr)))
        (allow systemd_nspawn_t device_t (dir (getattr open search)))
        (allow systemd_nspawn_t device_t (dir (mounton)))
        (allow systemd_nspawn_t shell_exec_t (file (ioctl read getattr lock map execute open execute_no_trans)))
        (allow systemd_nspawn_t bin_t (dir (ioctl read getattr lock open search)))
        (allow systemd_nspawn_t bin_t (dir (getattr open search)))
        (allow systemd_nspawn_t usr_t (dir (getattr open search)))
        (allow systemd_nspawn_t bin_t (lnk_file (read getattr)))
        (allow systemd_nspawn_t bin_t (dir (getattr open search)))
        (allow systemd_nspawn_t bin_t (file (ioctl read getattr lock map execute open execute_no_trans)))
        (allow systemd_nspawn_t bin_t (dir (ioctl read getattr lock open search)))
        (allow systemd_nspawn_t bin_t (dir (getattr open search)))
        (allow systemd_nspawn_t usr_t (dir (getattr open search)))
        (allow systemd_nspawn_t bin_t (lnk_file (read getattr)))
        (allow systemd_nspawn_t bin_t (dir (getattr open search)))
        (typetransition systemd_nspawn_t tmpfs_t sock_file systemd_nspawn_runtime_t)
        (allow systemd_nspawn_t tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
        (allow systemd_nspawn_runtime_t tmpfs_t (filesystem (associate)))
        (allow systemd_nspawn_t systemd_nspawn_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
        (typetransition systemd_nspawn_t tmp_t fifo_file systemd_nspawn_runtime_t)
        (allow systemd_nspawn_t tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
        (allow systemd_nspawn_t systemd_nspawn_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
    )
)
(booleanif (systemd_networkd_dhcp_server)
    (true
        (allow systemd_networkd_t self (capability (net_bind_service)))
        (allow systemd_networkd_t dhcpd_port_t (udp_socket (name_bind)))
        (allow systemd_networkd_t dhcpd_server_packet_t (packet (recv)))
        (allow systemd_networkd_t dhcpd_server_packet_t (packet (send)))
    )
)
(booleanif (systemd_logind_get_bootloader)
    (true
        (allow systemd_logind_t boot_t (dir (getattr open search)))
        (allow systemd_logind_t autofs_t (filesystem (getattr)))
        (allow systemd_logind_t dosfs_t (file (ioctl read getattr lock open)))
        (allow systemd_logind_t dosfs_t (dir (getattr open search)))
        (allow systemd_logind_t dosfs_t (dir (ioctl read getattr lock open search)))
        (allow systemd_logind_t dosfs_t (dir (getattr open search)))
        (allow systemd_logind_t dosfs_t (filesystem (getattr)))
        (allow systemd_logind_t fixed_disk_device_t (chr_file (ioctl read getattr lock open)))
        (allow systemd_logind_t fixed_disk_device_t (blk_file (ioctl read getattr lock open)))
        (allow systemd_logind_t device_t (lnk_file (read getattr)))
        (allow systemd_logind_t device_t (dir (getattr open search)))
        (allow systemd_logind_t device_t (dir (ioctl read getattr lock open search)))
        (allow systemd_logind_t device_t (dir (getattr open search)))
    )
)
(booleanif (use_samba_home_dirs)
    (true
        (allow systemd_logind_t cifs_t (file (ioctl read getattr lock open)))
        (allow systemd_logind_t cifs_t (dir (getattr open search)))
        (allow systemd_logind_t cifs_t (dir (ioctl read getattr lock open search)))
    )
)
(booleanif (use_nfs_home_dirs)
    (true
        (allow systemd_logind_t nfs_t (file (ioctl read getattr lock open)))
        (allow systemd_logind_t nfs_t (dir (getattr open search)))
        (allow systemd_logind_t nfs_t (dir (ioctl read getattr lock open search)))
    )
)
(optional systemd_optional_2
    (typeattributeset cil_gen_require init_t)
    (allow systemd_activate_t init_t (process (sigchld)))
    (allow systemd_activate_t init_t (process (signull)))
    (optional systemd_optional_3
        (typeattributeset cil_gen_require rpm_t)
        (allow systemd_activate_t rpm_t (fd (use)))
        (allow systemd_activate_t rpm_t (fifo_file (ioctl read getattr lock open)))
    )
    (optional systemd_optional_4
        (typeattributeset cil_gen_require security_t)
        (typeattributeset cil_gen_require sysfs_t)
        (dontaudit systemd_activate_t security_t (filesystem (getattr)))
        (dontaudit systemd_activate_t sysfs_t (filesystem (getattr)))
        (dontaudit systemd_activate_t sysfs_t (dir (getattr open search)))
        (dontaudit systemd_activate_t security_t (dir (getattr open search)))
        (dontaudit systemd_activate_t security_t (file (ioctl read getattr lock open)))
        (optional systemd_optional_5
            (typeattributeset cil_gen_require selinux_config_t)
            (dontaudit systemd_activate_t selinux_config_t (dir (getattr open search)))
            (dontaudit systemd_activate_t selinux_config_t (file (ioctl read getattr lock open)))
            (optional systemd_optional_6
                (typeattributeset cil_gen_require init_t)
                (allow systemd_analyze_t init_t (process (sigchld)))
                (allow systemd_analyze_t init_t (process (signull)))
                (optional systemd_optional_7
                    (typeattributeset cil_gen_require rpm_t)
                    (allow systemd_analyze_t rpm_t (fd (use)))
                    (allow systemd_analyze_t rpm_t (fifo_file (ioctl read getattr lock open)))
                )
                (optional systemd_optional_8
                    (typeattributeset cil_gen_require security_t)
                    (typeattributeset cil_gen_require sysfs_t)
                    (dontaudit systemd_analyze_t security_t (filesystem (getattr)))
                    (dontaudit systemd_analyze_t sysfs_t (filesystem (getattr)))
                    (dontaudit systemd_analyze_t sysfs_t (dir (getattr open search)))
                    (dontaudit systemd_analyze_t security_t (dir (getattr open search)))
                    (dontaudit systemd_analyze_t security_t (file (ioctl read getattr lock open)))
                    (optional systemd_optional_9
                        (typeattributeset cil_gen_require selinux_config_t)
                        (dontaudit systemd_analyze_t selinux_config_t (dir (getattr open search)))
                        (dontaudit systemd_analyze_t selinux_config_t (file (ioctl read getattr lock open)))
                        (optional systemd_optional_10
                            (typeattributeset cil_gen_require init_t)
                            (allow systemd_backlight_t init_t (process (sigchld)))
                            (allow systemd_backlight_t init_t (process (signull)))
                            (optional systemd_optional_11
                                (typeattributeset cil_gen_require rpm_t)
                                (allow systemd_backlight_t rpm_t (fd (use)))
                                (allow systemd_backlight_t rpm_t (fifo_file (ioctl read getattr lock open)))
                            )
                            (optional systemd_optional_12
                                (typeattributeset cil_gen_require security_t)
                                (typeattributeset cil_gen_require sysfs_t)
                                (dontaudit systemd_backlight_t security_t (filesystem (getattr)))
                                (dontaudit systemd_backlight_t sysfs_t (filesystem (getattr)))
                                (dontaudit systemd_backlight_t sysfs_t (dir (getattr open search)))
                                (dontaudit systemd_backlight_t security_t (dir (getattr open search)))
                                (dontaudit systemd_backlight_t security_t (file (ioctl read getattr lock open)))
                                (optional systemd_optional_13
                                    (typeattributeset cil_gen_require selinux_config_t)
                                    (dontaudit systemd_backlight_t selinux_config_t (dir (getattr open search)))
                                    (dontaudit systemd_backlight_t selinux_config_t (file (ioctl read getattr lock open)))
                                    (optional systemd_optional_14
                                        (typeattributeset cil_gen_require init_t)
                                        (allow systemd_binfmt_t init_t (process (sigchld)))
                                        (allow systemd_binfmt_t init_t (process (signull)))
                                        (optional systemd_optional_15
                                            (typeattributeset cil_gen_require rpm_t)
                                            (allow systemd_binfmt_t rpm_t (fd (use)))
                                            (allow systemd_binfmt_t rpm_t (fifo_file (ioctl read getattr lock open)))
                                        )
                                        (optional systemd_optional_16
                                            (typeattributeset cil_gen_require security_t)
                                            (typeattributeset cil_gen_require sysfs_t)
                                            (dontaudit systemd_binfmt_t security_t (filesystem (getattr)))
                                            (dontaudit systemd_binfmt_t sysfs_t (filesystem (getattr)))
                                            (dontaudit systemd_binfmt_t sysfs_t (dir (getattr open search)))
                                            (dontaudit systemd_binfmt_t security_t (dir (getattr open search)))
                                            (dontaudit systemd_binfmt_t security_t (file (ioctl read getattr lock open)))
                                            (optional systemd_optional_17
                                                (typeattributeset cil_gen_require selinux_config_t)
                                                (dontaudit systemd_binfmt_t selinux_config_t (dir (getattr open search)))
                                                (dontaudit systemd_binfmt_t selinux_config_t (file (ioctl read getattr lock open)))
                                                (optional systemd_optional_18
                                                    (typeattributeset cil_gen_require init_t)
                                                    (allow systemd_cgroups_t init_t (process (sigchld)))
                                                    (allow systemd_cgroups_t init_t (process (signull)))
                                                    (optional systemd_optional_19
                                                        (typeattributeset cil_gen_require rpm_t)
                                                        (allow systemd_cgroups_t rpm_t (fd (use)))
                                                        (allow systemd_cgroups_t rpm_t (fifo_file (ioctl read getattr lock open)))
                                                    )
                                                    (optional systemd_optional_20
                                                        (typeattributeset cil_gen_require security_t)
                                                        (typeattributeset cil_gen_require sysfs_t)
                                                        (dontaudit systemd_cgroups_t security_t (filesystem (getattr)))
                                                        (dontaudit systemd_cgroups_t sysfs_t (filesystem (getattr)))
                                                        (dontaudit systemd_cgroups_t sysfs_t (dir (getattr open search)))
                                                        (dontaudit systemd_cgroups_t security_t (dir (getattr open search)))
                                                        (dontaudit systemd_cgroups_t security_t (file (ioctl read getattr lock open)))
                                                        (optional systemd_optional_21
                                                            (typeattributeset cil_gen_require selinux_config_t)
                                                            (dontaudit systemd_cgroups_t selinux_config_t (dir (getattr open search)))
                                                            (dontaudit systemd_cgroups_t selinux_config_t (file (ioctl read getattr lock open)))
                                                            (optional systemd_optional_22
                                                                (typeattributeset cil_gen_require init_t)
                                                                (allow systemd_cgtop_t init_t (process (sigchld)))
                                                                (allow systemd_cgtop_t init_t (process (signull)))
                                                                (optional systemd_optional_23
                                                                    (typeattributeset cil_gen_require rpm_t)
                                                                    (allow systemd_cgtop_t rpm_t (fd (use)))
                                                                    (allow systemd_cgtop_t rpm_t (fifo_file (ioctl read getattr lock open)))
                                                                )
                                                                (optional systemd_optional_24
                                                                    (typeattributeset cil_gen_require security_t)
                                                                    (typeattributeset cil_gen_require sysfs_t)
                                                                    (dontaudit systemd_cgtop_t security_t (filesystem (getattr)))
                                                                    (dontaudit systemd_cgtop_t sysfs_t (filesystem (getattr)))
                                                                    (dontaudit systemd_cgtop_t sysfs_t (dir (getattr open search)))
                                                                    (dontaudit systemd_cgtop_t security_t (dir (getattr open search)))
                                                                    (dontaudit systemd_cgtop_t security_t (file (ioctl read getattr lock open)))
                                                                    (optional systemd_optional_25
                                                                        (typeattributeset cil_gen_require selinux_config_t)
                                                                        (dontaudit systemd_cgtop_t selinux_config_t (dir (getattr open search)))
                                                                        (dontaudit systemd_cgtop_t selinux_config_t (file (ioctl read getattr lock open)))
                                                                        (optional systemd_optional_26
                                                                            (typeattributeset cil_gen_require init_t)
                                                                            (allow systemd_coredump_t init_t (process (sigchld)))
                                                                            (allow systemd_coredump_t init_t (process (signull)))
                                                                            (optional systemd_optional_27
                                                                                (typeattributeset cil_gen_require rpm_t)
                                                                                (allow systemd_coredump_t rpm_t (fd (use)))
                                                                                (allow systemd_coredump_t rpm_t (fifo_file (ioctl read getattr lock open)))
                                                                            )
                                                                            (optional systemd_optional_28
                                                                                (typeattributeset cil_gen_require security_t)
                                                                                (typeattributeset cil_gen_require sysfs_t)
                                                                                (dontaudit systemd_coredump_t security_t (filesystem (getattr)))
                                                                                (dontaudit systemd_coredump_t sysfs_t (filesystem (getattr)))
                                                                                (dontaudit systemd_coredump_t sysfs_t (dir (getattr open search)))
                                                                                (dontaudit systemd_coredump_t security_t (dir (getattr open search)))
                                                                                (dontaudit systemd_coredump_t security_t (file (ioctl read getattr lock open)))
                                                                                (optional systemd_optional_29
                                                                                    (typeattributeset cil_gen_require selinux_config_t)
                                                                                    (dontaudit systemd_coredump_t selinux_config_t (dir (getattr open search)))
                                                                                    (dontaudit systemd_coredump_t selinux_config_t (file (ioctl read getattr lock open)))
                                                                                    (optional systemd_optional_30
                                                                                        (typeattributeset cil_gen_require init_t)
                                                                                        (allow systemd_generator_t init_t (process (sigchld)))
                                                                                        (allow systemd_generator_t init_t (process (signull)))
                                                                                        (optional systemd_optional_31
                                                                                            (typeattributeset cil_gen_require rpm_t)
                                                                                            (allow systemd_generator_t rpm_t (fd (use)))
                                                                                            (allow systemd_generator_t rpm_t (fifo_file (ioctl read getattr lock open)))
                                                                                        )
                                                                                        (optional systemd_optional_32
                                                                                            (typeattributeset cil_gen_require security_t)
                                                                                            (typeattributeset cil_gen_require sysfs_t)
                                                                                            (dontaudit systemd_generator_t security_t (filesystem (getattr)))
                                                                                            (dontaudit systemd_generator_t sysfs_t (filesystem (getattr)))
                                                                                            (dontaudit systemd_generator_t sysfs_t (dir (getattr open search)))
                                                                                            (dontaudit systemd_generator_t security_t (dir (getattr open search)))
                                                                                            (dontaudit systemd_generator_t security_t (file (ioctl read getattr lock open)))
                                                                                            (optional systemd_optional_33
                                                                                                (typeattributeset cil_gen_require selinux_config_t)
                                                                                                (dontaudit systemd_generator_t selinux_config_t (dir (getattr open search)))
                                                                                                (dontaudit systemd_generator_t selinux_config_t (file (ioctl read getattr lock open)))
                                                                                                (optional systemd_optional_34
                                                                                                    (typeattributeset cil_gen_require init_t)
                                                                                                    (allow systemd_homed_t init_t (process (sigchld)))
                                                                                                    (allow systemd_homed_t init_t (process (signull)))
                                                                                                    (optional systemd_optional_35
                                                                                                        (typeattributeset cil_gen_require rpm_t)
                                                                                                        (allow systemd_homed_t rpm_t (fd (use)))
                                                                                                        (allow systemd_homed_t rpm_t (fifo_file (ioctl read getattr lock open)))
                                                                                                    )
                                                                                                    (optional systemd_optional_36
                                                                                                        (typeattributeset cil_gen_require security_t)
                                                                                                        (typeattributeset cil_gen_require sysfs_t)
                                                                                                        (dontaudit systemd_homed_t security_t (filesystem (getattr)))
                                                                                                        (dontaudit systemd_homed_t sysfs_t (filesystem (getattr)))
                                                                                                        (dontaudit systemd_homed_t sysfs_t (dir (getattr open search)))
                                                                                                        (dontaudit systemd_homed_t security_t (dir (getattr open search)))
                                                                                                        (dontaudit systemd_homed_t security_t (file (ioctl read getattr lock open)))
                                                                                                        (optional systemd_optional_37
                                                                                                            (typeattributeset cil_gen_require selinux_config_t)
                                                                                                            (dontaudit systemd_homed_t selinux_config_t (dir (getattr open search)))
                                                                                                            (dontaudit systemd_homed_t selinux_config_t (file (ioctl read getattr lock open)))
                                                                                                            (optional systemd_optional_38
                                                                                                                (typeattributeset cil_gen_require init_t)
                                                                                                                (allow systemd_homework_t init_t (process (sigchld)))
                                                                                                                (allow systemd_homework_t init_t (process (signull)))
                                                                                                                (optional systemd_optional_39
                                                                                                                    (typeattributeset cil_gen_require rpm_t)
                                                                                                                    (allow systemd_homework_t rpm_t (fd (use)))
                                                                                                                    (allow systemd_homework_t rpm_t (fifo_file (ioctl read getattr lock open)))
                                                                                                                )
                                                                                                                (optional systemd_optional_40
                                                                                                                    (typeattributeset cil_gen_require security_t)
                                                                                                                    (typeattributeset cil_gen_require sysfs_t)
                                                                                                                    (dontaudit systemd_homework_t security_t (filesystem (getattr)))
                                                                                                                    (dontaudit systemd_homework_t sysfs_t (filesystem (getattr)))
                                                                                                                    (dontaudit systemd_homework_t sysfs_t (dir (getattr open search)))
                                                                                                                    (dontaudit systemd_homework_t security_t (dir (getattr open search)))
                                                                                                                    (dontaudit systemd_homework_t security_t (file (ioctl read getattr lock open)))
                                                                                                                    (optional systemd_optional_41
                                                                                                                        (typeattributeset cil_gen_require selinux_config_t)
                                                                                                                        (dontaudit systemd_homework_t selinux_config_t (dir (getattr open search)))
                                                                                                                        (dontaudit systemd_homework_t selinux_config_t (file (ioctl read getattr lock open)))
                                                                                                                        (optional systemd_optional_42
                                                                                                                            (typeattributeset cil_gen_require init_mountpoint_type)
                                                                                                                            (typeattributeset init_mountpoint_type (systemd_logind_inhibit_runtime_t systemd_logind_runtime_t systemd_logind_var_lib_t systemd_networkd_runtime_t systemd_sessions_runtime_t ))
                                                                                                                            (typeattributeset cil_gen_require init_mountpoint_type)
                                                                                                                            (typeattributeset init_mountpoint_type (systemd_homed_runtime_work_dir_t ))
                                                                                                                            (optional systemd_optional_43
                                                                                                                                (typeattributeset cil_gen_require init_t)
                                                                                                                                (allow systemd_hostnamed_t init_t (process (sigchld)))
                                                                                                                                (allow systemd_hostnamed_t init_t (process (signull)))
                                                                                                                                (optional systemd_optional_44
                                                                                                                                    (typeattributeset cil_gen_require rpm_t)
                                                                                                                                    (allow systemd_hostnamed_t rpm_t (fd (use)))
                                                                                                                                    (allow systemd_hostnamed_t rpm_t (fifo_file (ioctl read getattr lock open)))
                                                                                                                                )
                                                                                                                                (optional systemd_optional_45
                                                                                                                                    (typeattributeset cil_gen_require security_t)
                                                                                                                                    (typeattributeset cil_gen_require sysfs_t)
                                                                                                                                    (dontaudit systemd_hostnamed_t security_t (filesystem (getattr)))
                                                                                                                                    (dontaudit systemd_hostnamed_t sysfs_t (filesystem (getattr)))
                                                                                                                                    (dontaudit systemd_hostnamed_t sysfs_t (dir (getattr open search)))
                                                                                                                                    (dontaudit systemd_hostnamed_t security_t (dir (getattr open search)))
                                                                                                                                    (dontaudit systemd_hostnamed_t security_t (file (ioctl read getattr lock open)))
                                                                                                                                    (optional systemd_optional_46
                                                                                                                                        (typeattributeset cil_gen_require selinux_config_t)
                                                                                                                                        (dontaudit systemd_hostnamed_t selinux_config_t (dir (getattr open search)))
                                                                                                                                        (dontaudit systemd_hostnamed_t selinux_config_t (file (ioctl read getattr lock open)))
                                                                                                                                        (optional systemd_optional_47
                                                                                                                                            (typeattributeset cil_gen_require init_t)
                                                                                                                                            (allow systemd_hw_t init_t (process (sigchld)))
                                                                                                                                            (allow systemd_hw_t init_t (process (signull)))
                                                                                                                                            (optional systemd_optional_48
                                                                                                                                                (typeattributeset cil_gen_require rpm_t)
                                                                                                                                                (allow systemd_hw_t rpm_t (fd (use)))
                                                                                                                                                (allow systemd_hw_t rpm_t (fifo_file (ioctl read getattr lock open)))
                                                                                                                                            )
                                                                                                                                            (optional systemd_optional_49
                                                                                                                                                (typeattributeset cil_gen_require security_t)
                                                                                                                                                (typeattributeset cil_gen_require sysfs_t)
                                                                                                                                                (dontaudit systemd_hw_t security_t (filesystem (getattr)))
                                                                                                                                                (dontaudit systemd_hw_t sysfs_t (filesystem (getattr)))
                                                                                                                                                (dontaudit systemd_hw_t sysfs_t (dir (getattr open search)))
                                                                                                                                                (dontaudit systemd_hw_t security_t (dir (getattr open search)))
                                                                                                                                                (dontaudit systemd_hw_t security_t (file (ioctl read getattr lock open)))
                                                                                                                                                (optional systemd_optional_50
                                                                                                                                                    (typeattributeset cil_gen_require selinux_config_t)
                                                                                                                                                    (dontaudit systemd_hw_t selinux_config_t (dir (getattr open search)))
                                                                                                                                                    (dontaudit systemd_hw_t selinux_config_t (file (ioctl read getattr lock open)))
                                                                                                                                                    (optional systemd_optional_51
                                                                                                                                                        (typeattributeset cil_gen_require init_t)
                                                                                                                                                        (allow systemd_journal_init_t init_t (process (sigchld)))
                                                                                                                                                        (allow systemd_journal_init_t init_t (process (signull)))
                                                                                                                                                        (optional systemd_optional_52
                                                                                                                                                            (typeattributeset cil_gen_require rpm_t)
                                                                                                                                                            (allow systemd_journal_init_t rpm_t (fd (use)))
                                                                                                                                                            (allow systemd_journal_init_t rpm_t (fifo_file (ioctl read getattr lock open)))
                                                                                                                                                        )
                                                                                                                                                        (optional systemd_optional_53
                                                                                                                                                            (typeattributeset cil_gen_require security_t)
                                                                                                                                                            (typeattributeset cil_gen_require sysfs_t)
                                                                                                                                                            (dontaudit systemd_journal_init_t security_t (filesystem (getattr)))
                                                                                                                                                            (dontaudit systemd_journal_init_t sysfs_t (filesystem (getattr)))
                                                                                                                                                            (dontaudit systemd_journal_init_t sysfs_t (dir (getattr open search)))
                                                                                                                                                            (dontaudit systemd_journal_init_t security_t (dir (getattr open search)))
                                                                                                                                                            (dontaudit systemd_journal_init_t security_t (file (ioctl read getattr lock open)))
                                                                                                                                                            (optional systemd_optional_54
                                                                                                                                                                (typeattributeset cil_gen_require selinux_config_t)
                                                                                                                                                                (dontaudit systemd_journal_init_t selinux_config_t (dir (getattr open search)))
                                                                                                                                                                (dontaudit systemd_journal_init_t selinux_config_t (file (ioctl read getattr lock open)))
                                                                                                                                                                (optional systemd_optional_55
                                                                                                                                                                    (typeattributeset cil_gen_require init_t)
                                                                                                                                                                    (allow systemd_locale_t init_t (process (sigchld)))
                                                                                                                                                                    (allow systemd_locale_t init_t (process (signull)))
                                                                                                                                                                    (optional systemd_optional_56
                                                                                                                                                                        (typeattributeset cil_gen_require rpm_t)
                                                                                                                                                                        (allow systemd_locale_t rpm_t (fd (use)))
                                                                                                                                                                        (allow systemd_locale_t rpm_t (fifo_file (ioctl read getattr lock open)))
                                                                                                                                                                    )
                                                                                                                                                                    (optional systemd_optional_57
                                                                                                                                                                        (typeattributeset cil_gen_require security_t)
                                                                                                                                                                        (typeattributeset cil_gen_require sysfs_t)
                                                                                                                                                                        (dontaudit systemd_locale_t security_t (filesystem (getattr)))
                                                                                                                                                                        (dontaudit systemd_locale_t sysfs_t (filesystem (getattr)))
                                                                                                                                                                        (dontaudit systemd_locale_t sysfs_t (dir (getattr open search)))
                                                                                                                                                                        (dontaudit systemd_locale_t security_t (dir (getattr open search)))
                                                                                                                                                                        (dontaudit systemd_locale_t security_t (file (ioctl read getattr lock open)))
                                                                                                                                                                        (optional systemd_optional_58
                                                                                                                                                                            (typeattributeset cil_gen_require selinux_config_t)
                                                                                                                                                                            (dontaudit systemd_locale_t selinux_config_t (dir (getattr open search)))
                                                                                                                                                                            (dontaudit systemd_locale_t selinux_config_t (file (ioctl read getattr lock open)))
                                                                                                                                                                            (optional systemd_optional_59
                                                                                                                                                                                (roleattributeset cil_gen_require system_r)
                                                                                                                                                                                (roletype system_r systemd_activate_t)
                                                                                                                                                                                (roletype system_r systemd_analyze_t)
                                                                                                                                                                                (roletype system_r systemd_backlight_t)
                                                                                                                                                                                (roletype system_r systemd_binfmt_t)
                                                                                                                                                                                (roletype system_r systemd_cgroups_t)
                                                                                                                                                                                (roletype system_r systemd_cgtop_t)
                                                                                                                                                                                (roletype system_r systemd_coredump_t)
                                                                                                                                                                                (roletype system_r systemd_generator_t)
                                                                                                                                                                                (roletype system_r systemd_homed_t)
                                                                                                                                                                                (roletype system_r systemd_homework_t)
                                                                                                                                                                                (roletype system_r systemd_hostnamed_t)
                                                                                                                                                                                (roletype system_r systemd_hw_t)
                                                                                                                                                                                (roletype system_r systemd_journal_init_t)
                                                                                                                                                                                (roletype system_r systemd_locale_t)
                                                                                                                                                                                (roletype system_r systemd_logind_t)
                                                                                                                                                                                (roletype system_r systemd_machined_t)
                                                                                                                                                                                (roletype system_r systemd_machine_id_setup_t)
                                                                                                                                                                                (roletype system_r systemd_modules_load_t)
                                                                                                                                                                                (roletype system_r systemd_networkd_t)
                                                                                                                                                                                (roletype system_r systemd_notify_t)
                                                                                                                                                                                (roletype system_r systemd_nspawn_t)
                                                                                                                                                                                (roletype system_r systemd_nsresourced_t)
                                                                                                                                                                                (roletype system_r systemd_pcrphase_t)
                                                                                                                                                                                (roletype system_r systemd_pstore_t)
                                                                                                                                                                                (roletype system_r systemd_resolved_t)
                                                                                                                                                                                (roletype system_r systemd_stdio_bridge_t)
                                                                                                                                                                                (roletype system_r systemd_passwd_agent_t)
                                                                                                                                                                                (roletype system_r systemd_rfkill_t)
                                                                                                                                                                                (roletype system_r systemd_sessions_t)
                                                                                                                                                                                (roletype system_r systemd_socket_proxyd_t)
                                                                                                                                                                                (roletype system_r systemd_sysctl_t)
                                                                                                                                                                                (roletype system_r systemd_sysusers_t)
                                                                                                                                                                                (roletype system_r systemd_tmpfiles_t)
                                                                                                                                                                                (roletype system_r systemd_update_done_t)
                                                                                                                                                                                (roletype system_r systemd_user_runtime_dir_t)
                                                                                                                                                                                (roletype system_r systemd_userdbd_t)
                                                                                                                                                                                (typeattributeset cil_gen_require domain)
                                                                                                                                                                                (typeattributeset domain (systemd_activate_t systemd_analyze_t systemd_backlight_t systemd_binfmt_t systemd_cgroups_t systemd_cgtop_t systemd_coredump_t systemd_generator_t systemd_homed_t systemd_homework_t systemd_hostnamed_t systemd_hw_t systemd_journal_init_t systemd_locale_t systemd_logind_t systemd_machined_t systemd_machine_id_setup_t systemd_modules_load_t systemd_networkd_t systemd_notify_t systemd_nspawn_t systemd_nsresourced_t systemd_pcrphase_t systemd_pstore_t systemd_resolved_t systemd_stdio_bridge_t systemd_passwd_agent_t systemd_rfkill_t systemd_sessions_t systemd_socket_proxyd_t systemd_sysctl_t systemd_sysusers_t systemd_tmpfiles_t systemd_update_done_t systemd_user_runtime_dir_t systemd_userdbd_t ))
                                                                                                                                                                                (typeattributeset cil_gen_require exec_type)
                                                                                                                                                                                (typeattributeset exec_type (systemd_activate_exec_t systemd_analyze_exec_t systemd_backlight_exec_t systemd_binfmt_exec_t systemd_cgroups_exec_t systemd_cgtop_exec_t systemd_coredump_exec_t systemd_generator_exec_t systemd_homed_exec_t systemd_homework_exec_t systemd_hostnamed_exec_t systemd_hw_exec_t systemd_journalctl_exec_t systemd_locale_exec_t systemd_logind_exec_t systemd_machined_exec_t systemd_machine_id_setup_exec_t systemd_modules_load_exec_t systemd_networkd_exec_t systemd_notify_exec_t systemd_nspawn_exec_t systemd_nsresourced_exec_t systemd_pcrphase_exec_t systemd_pstore_exec_t systemd_resolved_exec_t systemd_stdio_bridge_exec_t systemd_passwd_agent_exec_t systemd_rfkill_exec_t systemd_sessions_exec_t systemd_socket_proxyd_exec_t systemd_sysctl_exec_t systemd_sysusers_exec_t systemd_tmpfiles_exec_t systemd_update_done_exec_t systemd_user_runtime_dir_exec_t systemd_userdbd_exec_t bin_t shell_exec_t ))
                                                                                                                                                                                (typeattributeset cil_gen_require file_type)
                                                                                                                                                                                (typeattributeset file_type (systemd_activate_exec_t systemd_analyze_exec_t systemd_backlight_exec_t systemd_backlight_unit_t systemd_backlight_var_lib_t systemd_binfmt_exec_t systemd_binfmt_unit_t systemd_conf_t systemd_cgroups_exec_t systemd_cgroups_runtime_t systemd_cgtop_exec_t systemd_coredump_exec_t systemd_coredump_var_lib_t systemd_factory_conf_t systemd_generator_exec_t systemd_homed_exec_t systemd_homework_exec_t systemd_homed_record_t systemd_homed_runtime_t systemd_homed_runtime_work_dir_t systemd_homed_storage_t systemd_homed_tmpfs_t systemd_homed_var_lib_t systemd_hostnamed_exec_t systemd_hw_exec_t systemd_hwdb_t systemd_journal_t systemd_journalctl_exec_t systemd_locale_exec_t systemd_log_t systemd_logind_exec_t systemd_logind_inhibit_runtime_t systemd_logind_runtime_t systemd_logind_var_lib_t systemd_machined_exec_t systemd_machined_runtime_t systemd_machine_id_setup_exec_t systemd_modules_load_exec_t systemd_networkd_exec_t systemd_networkd_runtime_t systemd_networkd_unit_t systemd_networkd_var_lib_t systemd_notify_exec_t systemd_nspawn_exec_t systemd_nspawn_runtime_t systemd_nspawn_tmp_t systemd_nsresourced_exec_t systemd_nsresourced_runtime_t systemd_pcrphase_exec_t systemd_pstore_exec_t systemd_pstore_var_lib_t systemd_resolved_exec_t systemd_resolved_runtime_t systemd_stdio_bridge_exec_t systemd_passwd_agent_exec_t systemd_passwd_runtime_t systemd_rfkill_exec_t systemd_rfkill_unit_t systemd_rfkill_var_lib_t systemd_sessions_exec_t systemd_sessions_runtime_t systemd_socket_proxyd_exec_t systemd_socket_proxyd_unit_file_t systemd_sysctl_exec_t systemd_sysusers_exec_t systemd_tmpfiles_exec_t systemd_tmpfiles_conf_t systemd_update_done_exec_t systemd_update_run_t systemd_user_manager_unit_t systemd_conf_home_t systemd_data_home_t systemd_user_runtime_notify_t systemd_runtime_notify_t systemd_user_runtime_t systemd_user_runtime_dir_exec_t systemd_user_tmpfs_t systemd_userdbd_exec_t systemd_userdbd_runtime_t systemd_userdbd_unit_t systemd_user_unit_t systemd_user_runtime_unit_t systemd_user_transient_unit_t power_unit_t bin_t shell_exec_t ))
                                                                                                                                                                                (typeattributeset cil_gen_require non_security_file_type)
                                                                                                                                                                                (typeattributeset non_security_file_type (systemd_activate_exec_t systemd_analyze_exec_t systemd_backlight_exec_t systemd_backlight_unit_t systemd_backlight_var_lib_t systemd_binfmt_exec_t systemd_binfmt_unit_t systemd_conf_t systemd_cgroups_exec_t systemd_cgroups_runtime_t systemd_cgtop_exec_t systemd_coredump_exec_t systemd_coredump_var_lib_t systemd_factory_conf_t systemd_generator_exec_t systemd_homed_exec_t systemd_homework_exec_t systemd_homed_runtime_t systemd_homed_runtime_work_dir_t systemd_homed_storage_t systemd_homed_tmpfs_t systemd_homed_var_lib_t systemd_hostnamed_exec_t systemd_hw_exec_t systemd_hwdb_t systemd_journal_t systemd_journalctl_exec_t systemd_locale_exec_t systemd_log_t systemd_logind_exec_t systemd_logind_inhibit_runtime_t systemd_logind_runtime_t systemd_logind_var_lib_t systemd_machined_exec_t systemd_machined_runtime_t systemd_machine_id_setup_exec_t systemd_modules_load_exec_t systemd_networkd_exec_t systemd_networkd_runtime_t systemd_networkd_unit_t systemd_networkd_var_lib_t systemd_notify_exec_t systemd_nspawn_exec_t systemd_nspawn_runtime_t systemd_nspawn_tmp_t systemd_nsresourced_exec_t systemd_nsresourced_runtime_t systemd_pcrphase_exec_t systemd_pstore_exec_t systemd_pstore_var_lib_t systemd_resolved_exec_t systemd_resolved_runtime_t systemd_stdio_bridge_exec_t systemd_passwd_agent_exec_t systemd_passwd_runtime_t systemd_rfkill_exec_t systemd_rfkill_unit_t systemd_rfkill_var_lib_t systemd_sessions_exec_t systemd_sessions_runtime_t systemd_socket_proxyd_exec_t systemd_socket_proxyd_unit_file_t systemd_sysctl_exec_t systemd_sysusers_exec_t systemd_tmpfiles_exec_t systemd_tmpfiles_conf_t systemd_update_done_exec_t systemd_update_run_t systemd_user_manager_unit_t systemd_conf_home_t systemd_data_home_t systemd_user_runtime_notify_t systemd_runtime_notify_t systemd_user_runtime_t systemd_user_runtime_dir_exec_t systemd_user_tmpfs_t systemd_userdbd_exec_t systemd_userdbd_runtime_t systemd_userdbd_unit_t systemd_user_unit_t systemd_user_runtime_unit_t systemd_user_transient_unit_t power_unit_t bin_t shell_exec_t ))
                                                                                                                                                                                (typeattributeset cil_gen_require non_auth_file_type)
                                                                                                                                                                                (typeattributeset non_auth_file_type (systemd_activate_exec_t systemd_analyze_exec_t systemd_backlight_exec_t systemd_backlight_unit_t systemd_backlight_var_lib_t systemd_binfmt_exec_t systemd_binfmt_unit_t systemd_conf_t systemd_cgroups_exec_t systemd_cgroups_runtime_t systemd_cgtop_exec_t systemd_coredump_exec_t systemd_coredump_var_lib_t systemd_factory_conf_t systemd_generator_exec_t systemd_homed_exec_t systemd_homework_exec_t systemd_homed_runtime_t systemd_homed_runtime_work_dir_t systemd_homed_storage_t systemd_homed_tmpfs_t systemd_homed_var_lib_t systemd_hostnamed_exec_t systemd_hw_exec_t systemd_hwdb_t systemd_journal_t systemd_journalctl_exec_t systemd_locale_exec_t systemd_log_t systemd_logind_exec_t systemd_logind_inhibit_runtime_t systemd_logind_runtime_t systemd_logind_var_lib_t systemd_machined_exec_t systemd_machined_runtime_t systemd_machine_id_setup_exec_t systemd_modules_load_exec_t systemd_networkd_exec_t systemd_networkd_runtime_t systemd_networkd_unit_t systemd_networkd_var_lib_t systemd_notify_exec_t systemd_nspawn_exec_t systemd_nspawn_runtime_t systemd_nspawn_tmp_t systemd_nsresourced_exec_t systemd_nsresourced_runtime_t systemd_pcrphase_exec_t systemd_pstore_exec_t systemd_pstore_var_lib_t systemd_resolved_exec_t systemd_resolved_runtime_t systemd_stdio_bridge_exec_t systemd_passwd_agent_exec_t systemd_passwd_runtime_t systemd_rfkill_exec_t systemd_rfkill_unit_t systemd_rfkill_var_lib_t systemd_sessions_exec_t systemd_sessions_runtime_t systemd_socket_proxyd_exec_t systemd_socket_proxyd_unit_file_t systemd_sysctl_exec_t systemd_sysusers_exec_t systemd_tmpfiles_exec_t systemd_tmpfiles_conf_t systemd_update_done_exec_t systemd_update_run_t systemd_user_manager_unit_t systemd_conf_home_t systemd_data_home_t systemd_user_runtime_notify_t systemd_runtime_notify_t systemd_user_runtime_t systemd_user_runtime_dir_exec_t systemd_user_tmpfs_t systemd_userdbd_exec_t systemd_userdbd_runtime_t systemd_userdbd_unit_t systemd_user_unit_t systemd_user_runtime_unit_t systemd_user_transient_unit_t power_unit_t bin_t shell_exec_t ))
                                                                                                                                                                                (typeattributeset cil_gen_require entry_type)
                                                                                                                                                                                (typeattributeset entry_type (systemd_activate_exec_t systemd_analyze_exec_t systemd_backlight_exec_t systemd_binfmt_exec_t systemd_cgroups_exec_t systemd_cgtop_exec_t systemd_coredump_exec_t systemd_generator_exec_t systemd_homed_exec_t systemd_homework_exec_t systemd_hostnamed_exec_t systemd_hw_exec_t systemd_journalctl_exec_t systemd_locale_exec_t systemd_logind_exec_t systemd_machined_exec_t systemd_machine_id_setup_exec_t systemd_modules_load_exec_t systemd_networkd_exec_t systemd_notify_exec_t systemd_nspawn_exec_t systemd_nsresourced_exec_t systemd_pcrphase_exec_t systemd_pstore_exec_t systemd_resolved_exec_t systemd_stdio_bridge_exec_t systemd_passwd_agent_exec_t systemd_rfkill_exec_t systemd_sessions_exec_t systemd_socket_proxyd_exec_t systemd_sysctl_exec_t systemd_sysusers_exec_t systemd_tmpfiles_exec_t systemd_update_done_exec_t systemd_user_runtime_dir_exec_t systemd_userdbd_exec_t bin_t shell_exec_t ))
                                                                                                                                                                                (typeattributeset cil_gen_require var_t)
                                                                                                                                                                                (typeattributeset cil_gen_require var_run_t)
                                                                                                                                                                                (typeattributeset cil_gen_require system_dbusd_t)
                                                                                                                                                                                (typeattributeset cil_gen_require dbusd_system_bus_client)
                                                                                                                                                                                (typeattributeset cil_gen_require system_dbusd_runtime_t)
                                                                                                                                                                                (typeattributeset cil_gen_require system_dbusd_var_lib_t)
                                                                                                                                                                                (typeattributeset cil_gen_require var_lib_t)
                                                                                                                                                                                (typeattributeset cil_gen_require session_dbusd_tmp_t)
                                                                                                                                                                                (typeattributeset cil_gen_require dbusd_etc_t)
                                                                                                                                                                                (typeattributeset cil_gen_require userdomain)
                                                                                                                                                                                (typeattributeset cil_gen_require proc_t)
                                                                                                                                                                                (roleattributeset cil_gen_require system_r)
                                                                                                                                                                                (roletype system_r systemd_logind_t)
                                                                                                                                                                                (typeattributeset cil_gen_require non_auth_file_type)
                                                                                                                                                                                (typeattributeset non_auth_file_type (systemd_logind_exec_t ))
                                                                                                                                                                                (typeattributeset cil_gen_require file_type)
                                                                                                                                                                                (typeattributeset file_type (systemd_logind_exec_t ))
                                                                                                                                                                                (typeattributeset cil_gen_require domain)
                                                                                                                                                                                (typeattributeset domain (systemd_logind_t ))
                                                                                                                                                                                (typeattributeset cil_gen_require dbusd_system_bus_client)
                                                                                                                                                                                (typeattributeset dbusd_system_bus_client (systemd_logind_t ))
                                                                                                                                                                                (typeattributeset cil_gen_require entry_type)
                                                                                                                                                                                (typeattributeset entry_type (systemd_logind_exec_t ))
                                                                                                                                                                                (typeattributeset cil_gen_require exec_type)
                                                                                                                                                                                (typeattributeset exec_type (systemd_logind_exec_t ))
                                                                                                                                                                                (typeattributeset cil_gen_require non_security_file_type)
                                                                                                                                                                                (typeattributeset non_security_file_type (systemd_logind_exec_t ))
                                                                                                                                                                                (allow systemd_logind_t systemd_logind_exec_t (file (entrypoint)))
                                                                                                                                                                                (allow systemd_logind_t systemd_logind_exec_t (file (ioctl read getattr lock map execute open)))
                                                                                                                                                                                (dontaudit systemd_logind_t system_dbusd_t (netlink_selinux_socket (read write)))
                                                                                                                                                                                (allow system_dbusd_t systemd_logind_exec_t (file (ioctl read getattr map execute open)))
                                                                                                                                                                                (allow system_dbusd_t systemd_logind_t (process (transition)))
                                                                                                                                                                                (dontaudit system_dbusd_t systemd_logind_t (process (noatsecure siginh rlimitinh)))
                                                                                                                                                                                (typetransition system_dbusd_t systemd_logind_exec_t process systemd_logind_t)
                                                                                                                                                                                (allow systemd_logind_t system_dbusd_t (fd (use)))
                                                                                                                                                                                (allow systemd_logind_t system_dbusd_t (fifo_file (ioctl read write getattr lock append)))
                                                                                                                                                                                (allow systemd_logind_t system_dbusd_t (process (sigchld)))
                                                                                                                                                                                (allow systemd_logind_t system_dbusd_t (dbus (send_msg)))
                                                                                                                                                                                (allow systemd_logind_t self (dbus (send_msg)))
                                                                                                                                                                                (allow system_dbusd_t systemd_logind_t (dbus (send_msg)))
                                                                                                                                                                                (allow systemd_logind_t var_t (dir (getattr open search)))
                                                                                                                                                                                (allow systemd_logind_t var_lib_t (dir (getattr open search)))
                                                                                                                                                                                (allow systemd_logind_t system_dbusd_var_lib_t (dir (getattr open search)))
                                                                                                                                                                                (allow systemd_logind_t system_dbusd_var_lib_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                (allow systemd_logind_t system_dbusd_var_lib_t (dir (getattr open search)))
                                                                                                                                                                                (allow systemd_logind_t system_dbusd_var_lib_t (lnk_file (read getattr)))
                                                                                                                                                                                (allow systemd_logind_t session_dbusd_tmp_t (dir (getattr open search)))
                                                                                                                                                                                (allow systemd_logind_t session_dbusd_tmp_t (sock_file (read write getattr append open)))
                                                                                                                                                                                (allow systemd_logind_t var_run_t (lnk_file (read getattr)))
                                                                                                                                                                                (allow systemd_logind_t var_t (dir (getattr open search)))
                                                                                                                                                                                (allow systemd_logind_t var_run_t (dir (getattr open search)))
                                                                                                                                                                                (allow systemd_logind_t system_dbusd_runtime_t (dir (getattr open search)))
                                                                                                                                                                                (allow systemd_logind_t system_dbusd_runtime_t (sock_file (write getattr append open)))
                                                                                                                                                                                (allow systemd_logind_t system_dbusd_t (unix_stream_socket (connectto)))
                                                                                                                                                                                (allow systemd_logind_t dbusd_etc_t (dir (ioctl read getattr lock open search)))
                                                                                                                                                                                (allow systemd_logind_t dbusd_etc_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                (allow systemd_logind_t system_dbusd_runtime_t (dir (ioctl read getattr lock open search)))
                                                                                                                                                                                (allow systemd_logind_t system_dbusd_runtime_t (sock_file (read)))
                                                                                                                                                                                (allow systemd_logind_t system_dbusd_var_lib_t (dir (getattr open search)))
                                                                                                                                                                                (allow systemd_logind_t system_dbusd_var_lib_t (lnk_file (read getattr)))
                                                                                                                                                                                (allow systemd_logind_t system_dbusd_t (dbus (acquire_svc)))
                                                                                                                                                                                (allow system_dbusd_t systemd_logind_t (dir (ioctl read getattr lock open search)))
                                                                                                                                                                                (allow system_dbusd_t systemd_logind_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                (allow system_dbusd_t systemd_logind_t (lnk_file (read getattr)))
                                                                                                                                                                                (allow system_dbusd_t systemd_logind_t (process (getattr)))
                                                                                                                                                                                (allow systemd_logind_t userdomain (dir (getattr open search)))
                                                                                                                                                                                (allow systemd_logind_t userdomain (file (ioctl read getattr lock open)))
                                                                                                                                                                                (allow systemd_logind_t userdomain (dir (getattr open search)))
                                                                                                                                                                                (allow systemd_logind_t userdomain (lnk_file (read getattr)))
                                                                                                                                                                                (allow systemd_logind_t proc_t (dir (getattr open search)))
                                                                                                                                                                                (allow systemd_logind_t proc_t (dir (getattr open search)))
                                                                                                                                                                                (optional systemd_optional_60
                                                                                                                                                                                    (typeattributeset cil_gen_require init_t)
                                                                                                                                                                                    (allow systemd_logind_t init_t (process (sigchld)))
                                                                                                                                                                                    (allow systemd_logind_t init_t (process (signull)))
                                                                                                                                                                                    (optional systemd_optional_61
                                                                                                                                                                                        (typeattributeset cil_gen_require rpm_t)
                                                                                                                                                                                        (allow systemd_logind_t rpm_t (fd (use)))
                                                                                                                                                                                        (allow systemd_logind_t rpm_t (fifo_file (ioctl read getattr lock open)))
                                                                                                                                                                                    )
                                                                                                                                                                                    (optional systemd_optional_62
                                                                                                                                                                                        (typeattributeset cil_gen_require security_t)
                                                                                                                                                                                        (typeattributeset cil_gen_require sysfs_t)
                                                                                                                                                                                        (dontaudit systemd_logind_t security_t (filesystem (getattr)))
                                                                                                                                                                                        (dontaudit systemd_logind_t sysfs_t (filesystem (getattr)))
                                                                                                                                                                                        (dontaudit systemd_logind_t sysfs_t (dir (getattr open search)))
                                                                                                                                                                                        (dontaudit systemd_logind_t security_t (dir (getattr open search)))
                                                                                                                                                                                        (dontaudit systemd_logind_t security_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                        (optional systemd_optional_63
                                                                                                                                                                                            (typeattributeset cil_gen_require selinux_config_t)
                                                                                                                                                                                            (dontaudit systemd_logind_t selinux_config_t (dir (getattr open search)))
                                                                                                                                                                                            (dontaudit systemd_logind_t selinux_config_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                        )
                                                                                                                                                                                    )
                                                                                                                                                                                )
                                                                                                                                                                            )
                                                                                                                                                                            (optional systemd_optional_64
                                                                                                                                                                                (typeattributeset cil_gen_require init_t)
                                                                                                                                                                                (allow systemd_logind_t init_t (process (sigchld)))
                                                                                                                                                                                (allow systemd_logind_t init_t (process (signull)))
                                                                                                                                                                                (optional systemd_optional_65
                                                                                                                                                                                    (typeattributeset cil_gen_require rpm_t)
                                                                                                                                                                                    (allow systemd_logind_t rpm_t (fd (use)))
                                                                                                                                                                                    (allow systemd_logind_t rpm_t (fifo_file (ioctl read getattr lock open)))
                                                                                                                                                                                )
                                                                                                                                                                                (optional systemd_optional_66
                                                                                                                                                                                    (typeattributeset cil_gen_require security_t)
                                                                                                                                                                                    (typeattributeset cil_gen_require sysfs_t)
                                                                                                                                                                                    (dontaudit systemd_logind_t security_t (filesystem (getattr)))
                                                                                                                                                                                    (dontaudit systemd_logind_t sysfs_t (filesystem (getattr)))
                                                                                                                                                                                    (dontaudit systemd_logind_t sysfs_t (dir (getattr open search)))
                                                                                                                                                                                    (dontaudit systemd_logind_t security_t (dir (getattr open search)))
                                                                                                                                                                                    (dontaudit systemd_logind_t security_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                    (optional systemd_optional_67
                                                                                                                                                                                        (typeattributeset cil_gen_require selinux_config_t)
                                                                                                                                                                                        (dontaudit systemd_logind_t selinux_config_t (dir (getattr open search)))
                                                                                                                                                                                        (dontaudit systemd_logind_t selinux_config_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                        (optional systemd_optional_68
                                                                                                                                                                                            (typeattributeset cil_gen_require init_t)
                                                                                                                                                                                            (allow systemd_machined_t init_t (process (sigchld)))
                                                                                                                                                                                            (allow systemd_machined_t init_t (process (signull)))
                                                                                                                                                                                            (optional systemd_optional_69
                                                                                                                                                                                                (typeattributeset cil_gen_require rpm_t)
                                                                                                                                                                                                (allow systemd_machined_t rpm_t (fd (use)))
                                                                                                                                                                                                (allow systemd_machined_t rpm_t (fifo_file (ioctl read getattr lock open)))
                                                                                                                                                                                            )
                                                                                                                                                                                            (optional systemd_optional_70
                                                                                                                                                                                                (typeattributeset cil_gen_require security_t)
                                                                                                                                                                                                (typeattributeset cil_gen_require sysfs_t)
                                                                                                                                                                                                (dontaudit systemd_machined_t security_t (filesystem (getattr)))
                                                                                                                                                                                                (dontaudit systemd_machined_t sysfs_t (filesystem (getattr)))
                                                                                                                                                                                                (dontaudit systemd_machined_t sysfs_t (dir (getattr open search)))
                                                                                                                                                                                                (dontaudit systemd_machined_t security_t (dir (getattr open search)))
                                                                                                                                                                                                (dontaudit systemd_machined_t security_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                (optional systemd_optional_71
                                                                                                                                                                                                    (typeattributeset cil_gen_require selinux_config_t)
                                                                                                                                                                                                    (dontaudit systemd_machined_t selinux_config_t (dir (getattr open search)))
                                                                                                                                                                                                    (dontaudit systemd_machined_t selinux_config_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                    (optional systemd_optional_72
                                                                                                                                                                                                        (typeattributeset cil_gen_require init_t)
                                                                                                                                                                                                        (allow systemd_machine_id_setup_t init_t (process (sigchld)))
                                                                                                                                                                                                        (allow systemd_machine_id_setup_t init_t (process (signull)))
                                                                                                                                                                                                        (optional systemd_optional_73
                                                                                                                                                                                                            (typeattributeset cil_gen_require rpm_t)
                                                                                                                                                                                                            (allow systemd_machine_id_setup_t rpm_t (fd (use)))
                                                                                                                                                                                                            (allow systemd_machine_id_setup_t rpm_t (fifo_file (ioctl read getattr lock open)))
                                                                                                                                                                                                        )
                                                                                                                                                                                                        (optional systemd_optional_74
                                                                                                                                                                                                            (typeattributeset cil_gen_require security_t)
                                                                                                                                                                                                            (typeattributeset cil_gen_require sysfs_t)
                                                                                                                                                                                                            (dontaudit systemd_machine_id_setup_t security_t (filesystem (getattr)))
                                                                                                                                                                                                            (dontaudit systemd_machine_id_setup_t sysfs_t (filesystem (getattr)))
                                                                                                                                                                                                            (dontaudit systemd_machine_id_setup_t sysfs_t (dir (getattr open search)))
                                                                                                                                                                                                            (dontaudit systemd_machine_id_setup_t security_t (dir (getattr open search)))
                                                                                                                                                                                                            (dontaudit systemd_machine_id_setup_t security_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                            (optional systemd_optional_75
                                                                                                                                                                                                                (typeattributeset cil_gen_require selinux_config_t)
                                                                                                                                                                                                                (dontaudit systemd_machine_id_setup_t selinux_config_t (dir (getattr open search)))
                                                                                                                                                                                                                (dontaudit systemd_machine_id_setup_t selinux_config_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                (optional systemd_optional_76
                                                                                                                                                                                                                    (typeattributeset cil_gen_require init_t)
                                                                                                                                                                                                                    (allow systemd_modules_load_t init_t (process (sigchld)))
                                                                                                                                                                                                                    (allow systemd_modules_load_t init_t (process (signull)))
                                                                                                                                                                                                                    (optional systemd_optional_77
                                                                                                                                                                                                                        (typeattributeset cil_gen_require rpm_t)
                                                                                                                                                                                                                        (allow systemd_modules_load_t rpm_t (fd (use)))
                                                                                                                                                                                                                        (allow systemd_modules_load_t rpm_t (fifo_file (ioctl read getattr lock open)))
                                                                                                                                                                                                                    )
                                                                                                                                                                                                                    (optional systemd_optional_78
                                                                                                                                                                                                                        (typeattributeset cil_gen_require security_t)
                                                                                                                                                                                                                        (typeattributeset cil_gen_require sysfs_t)
                                                                                                                                                                                                                        (dontaudit systemd_modules_load_t security_t (filesystem (getattr)))
                                                                                                                                                                                                                        (dontaudit systemd_modules_load_t sysfs_t (filesystem (getattr)))
                                                                                                                                                                                                                        (dontaudit systemd_modules_load_t sysfs_t (dir (getattr open search)))
                                                                                                                                                                                                                        (dontaudit systemd_modules_load_t security_t (dir (getattr open search)))
                                                                                                                                                                                                                        (dontaudit systemd_modules_load_t security_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                        (optional systemd_optional_79
                                                                                                                                                                                                                            (typeattributeset cil_gen_require selinux_config_t)
                                                                                                                                                                                                                            (dontaudit systemd_modules_load_t selinux_config_t (dir (getattr open search)))
                                                                                                                                                                                                                            (dontaudit systemd_modules_load_t selinux_config_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                            (optional systemd_optional_80
                                                                                                                                                                                                                                (typeattributeset cil_gen_require init_t)
                                                                                                                                                                                                                                (allow systemd_networkd_t init_t (process (sigchld)))
                                                                                                                                                                                                                                (allow systemd_networkd_t init_t (process (signull)))
                                                                                                                                                                                                                                (optional systemd_optional_81
                                                                                                                                                                                                                                    (typeattributeset cil_gen_require rpm_t)
                                                                                                                                                                                                                                    (allow systemd_networkd_t rpm_t (fd (use)))
                                                                                                                                                                                                                                    (allow systemd_networkd_t rpm_t (fifo_file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                )
                                                                                                                                                                                                                                (optional systemd_optional_82
                                                                                                                                                                                                                                    (typeattributeset cil_gen_require security_t)
                                                                                                                                                                                                                                    (typeattributeset cil_gen_require sysfs_t)
                                                                                                                                                                                                                                    (dontaudit systemd_networkd_t security_t (filesystem (getattr)))
                                                                                                                                                                                                                                    (dontaudit systemd_networkd_t sysfs_t (filesystem (getattr)))
                                                                                                                                                                                                                                    (dontaudit systemd_networkd_t sysfs_t (dir (getattr open search)))
                                                                                                                                                                                                                                    (dontaudit systemd_networkd_t security_t (dir (getattr open search)))
                                                                                                                                                                                                                                    (dontaudit systemd_networkd_t security_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                    (optional systemd_optional_83
                                                                                                                                                                                                                                        (typeattributeset cil_gen_require selinux_config_t)
                                                                                                                                                                                                                                        (dontaudit systemd_networkd_t selinux_config_t (dir (getattr open search)))
                                                                                                                                                                                                                                        (dontaudit systemd_networkd_t selinux_config_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                        (optional systemd_optional_84
                                                                                                                                                                                                                                            (typeattributeset cil_gen_require init_t)
                                                                                                                                                                                                                                            (allow systemd_notify_t init_t (process (sigchld)))
                                                                                                                                                                                                                                            (allow systemd_notify_t init_t (process (signull)))
                                                                                                                                                                                                                                            (optional systemd_optional_85
                                                                                                                                                                                                                                                (typeattributeset cil_gen_require rpm_t)
                                                                                                                                                                                                                                                (allow systemd_notify_t rpm_t (fd (use)))
                                                                                                                                                                                                                                                (allow systemd_notify_t rpm_t (fifo_file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                            )
                                                                                                                                                                                                                                            (optional systemd_optional_86
                                                                                                                                                                                                                                                (typeattributeset cil_gen_require security_t)
                                                                                                                                                                                                                                                (typeattributeset cil_gen_require sysfs_t)
                                                                                                                                                                                                                                                (dontaudit systemd_notify_t security_t (filesystem (getattr)))
                                                                                                                                                                                                                                                (dontaudit systemd_notify_t sysfs_t (filesystem (getattr)))
                                                                                                                                                                                                                                                (dontaudit systemd_notify_t sysfs_t (dir (getattr open search)))
                                                                                                                                                                                                                                                (dontaudit systemd_notify_t security_t (dir (getattr open search)))
                                                                                                                                                                                                                                                (dontaudit systemd_notify_t security_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                (optional systemd_optional_87
                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require selinux_config_t)
                                                                                                                                                                                                                                                    (dontaudit systemd_notify_t selinux_config_t (dir (getattr open search)))
                                                                                                                                                                                                                                                    (dontaudit systemd_notify_t selinux_config_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                    (optional systemd_optional_88
                                                                                                                                                                                                                                                        (typeattributeset cil_gen_require init_t)
                                                                                                                                                                                                                                                        (allow systemd_nspawn_t init_t (process (sigchld)))
                                                                                                                                                                                                                                                        (allow systemd_nspawn_t init_t (process (signull)))
                                                                                                                                                                                                                                                        (optional systemd_optional_89
                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require rpm_t)
                                                                                                                                                                                                                                                            (allow systemd_nspawn_t rpm_t (fd (use)))
                                                                                                                                                                                                                                                            (allow systemd_nspawn_t rpm_t (fifo_file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                        )
                                                                                                                                                                                                                                                        (optional systemd_optional_90
                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require security_t)
                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require sysfs_t)
                                                                                                                                                                                                                                                            (dontaudit systemd_nspawn_t security_t (filesystem (getattr)))
                                                                                                                                                                                                                                                            (dontaudit systemd_nspawn_t sysfs_t (filesystem (getattr)))
                                                                                                                                                                                                                                                            (dontaudit systemd_nspawn_t sysfs_t (dir (getattr open search)))
                                                                                                                                                                                                                                                            (dontaudit systemd_nspawn_t security_t (dir (getattr open search)))
                                                                                                                                                                                                                                                            (dontaudit systemd_nspawn_t security_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                            (optional systemd_optional_91
                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require selinux_config_t)
                                                                                                                                                                                                                                                                (dontaudit systemd_nspawn_t selinux_config_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                (dontaudit systemd_nspawn_t selinux_config_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                (optional systemd_optional_92
                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require init_t)
                                                                                                                                                                                                                                                                    (allow systemd_nsresourced_t init_t (process (sigchld)))
                                                                                                                                                                                                                                                                    (allow systemd_nsresourced_t init_t (process (signull)))
                                                                                                                                                                                                                                                                    (optional systemd_optional_93
                                                                                                                                                                                                                                                                        (typeattributeset cil_gen_require rpm_t)
                                                                                                                                                                                                                                                                        (allow systemd_nsresourced_t rpm_t (fd (use)))
                                                                                                                                                                                                                                                                        (allow systemd_nsresourced_t rpm_t (fifo_file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                    )
                                                                                                                                                                                                                                                                    (optional systemd_optional_94
                                                                                                                                                                                                                                                                        (typeattributeset cil_gen_require security_t)
                                                                                                                                                                                                                                                                        (typeattributeset cil_gen_require sysfs_t)
                                                                                                                                                                                                                                                                        (dontaudit systemd_nsresourced_t security_t (filesystem (getattr)))
                                                                                                                                                                                                                                                                        (dontaudit systemd_nsresourced_t sysfs_t (filesystem (getattr)))
                                                                                                                                                                                                                                                                        (dontaudit systemd_nsresourced_t sysfs_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                        (dontaudit systemd_nsresourced_t security_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                        (dontaudit systemd_nsresourced_t security_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                        (optional systemd_optional_95
                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require selinux_config_t)
                                                                                                                                                                                                                                                                            (dontaudit systemd_nsresourced_t selinux_config_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                            (dontaudit systemd_nsresourced_t selinux_config_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                            (optional systemd_optional_96
                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require init_t)
                                                                                                                                                                                                                                                                                (allow systemd_pcrphase_t init_t (process (sigchld)))
                                                                                                                                                                                                                                                                                (allow systemd_pcrphase_t init_t (process (signull)))
                                                                                                                                                                                                                                                                                (optional systemd_optional_97
                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require rpm_t)
                                                                                                                                                                                                                                                                                    (allow systemd_pcrphase_t rpm_t (fd (use)))
                                                                                                                                                                                                                                                                                    (allow systemd_pcrphase_t rpm_t (fifo_file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                )
                                                                                                                                                                                                                                                                                (optional systemd_optional_98
                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require security_t)
                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require sysfs_t)
                                                                                                                                                                                                                                                                                    (dontaudit systemd_pcrphase_t security_t (filesystem (getattr)))
                                                                                                                                                                                                                                                                                    (dontaudit systemd_pcrphase_t sysfs_t (filesystem (getattr)))
                                                                                                                                                                                                                                                                                    (dontaudit systemd_pcrphase_t sysfs_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                    (dontaudit systemd_pcrphase_t security_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                    (dontaudit systemd_pcrphase_t security_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                    (optional systemd_optional_99
                                                                                                                                                                                                                                                                                        (typeattributeset cil_gen_require selinux_config_t)
                                                                                                                                                                                                                                                                                        (dontaudit systemd_pcrphase_t selinux_config_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                        (dontaudit systemd_pcrphase_t selinux_config_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                        (optional systemd_optional_100
                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require init_t)
                                                                                                                                                                                                                                                                                            (allow systemd_pstore_t init_t (process (sigchld)))
                                                                                                                                                                                                                                                                                            (allow systemd_pstore_t init_t (process (signull)))
                                                                                                                                                                                                                                                                                            (optional systemd_optional_101
                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require rpm_t)
                                                                                                                                                                                                                                                                                                (allow systemd_pstore_t rpm_t (fd (use)))
                                                                                                                                                                                                                                                                                                (allow systemd_pstore_t rpm_t (fifo_file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                            )
                                                                                                                                                                                                                                                                                            (optional systemd_optional_102
                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require security_t)
                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require sysfs_t)
                                                                                                                                                                                                                                                                                                (dontaudit systemd_pstore_t security_t (filesystem (getattr)))
                                                                                                                                                                                                                                                                                                (dontaudit systemd_pstore_t sysfs_t (filesystem (getattr)))
                                                                                                                                                                                                                                                                                                (dontaudit systemd_pstore_t sysfs_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                (dontaudit systemd_pstore_t security_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                (dontaudit systemd_pstore_t security_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                (optional systemd_optional_103
                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require selinux_config_t)
                                                                                                                                                                                                                                                                                                    (dontaudit systemd_pstore_t selinux_config_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                    (dontaudit systemd_pstore_t selinux_config_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                    (optional systemd_optional_104
                                                                                                                                                                                                                                                                                                        (typeattributeset cil_gen_require init_t)
                                                                                                                                                                                                                                                                                                        (allow systemd_resolved_t init_t (process (sigchld)))
                                                                                                                                                                                                                                                                                                        (allow systemd_resolved_t init_t (process (signull)))
                                                                                                                                                                                                                                                                                                        (optional systemd_optional_105
                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require rpm_t)
                                                                                                                                                                                                                                                                                                            (allow systemd_resolved_t rpm_t (fd (use)))
                                                                                                                                                                                                                                                                                                            (allow systemd_resolved_t rpm_t (fifo_file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                        )
                                                                                                                                                                                                                                                                                                        (optional systemd_optional_106
                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require security_t)
                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require sysfs_t)
                                                                                                                                                                                                                                                                                                            (dontaudit systemd_resolved_t security_t (filesystem (getattr)))
                                                                                                                                                                                                                                                                                                            (dontaudit systemd_resolved_t sysfs_t (filesystem (getattr)))
                                                                                                                                                                                                                                                                                                            (dontaudit systemd_resolved_t sysfs_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                            (dontaudit systemd_resolved_t security_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                            (dontaudit systemd_resolved_t security_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                            (optional systemd_optional_107
                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require selinux_config_t)
                                                                                                                                                                                                                                                                                                                (dontaudit systemd_resolved_t selinux_config_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                (dontaudit systemd_resolved_t selinux_config_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                (optional systemd_optional_108
                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require init_t)
                                                                                                                                                                                                                                                                                                                    (allow systemd_stdio_bridge_t init_t (process (sigchld)))
                                                                                                                                                                                                                                                                                                                    (allow systemd_stdio_bridge_t init_t (process (signull)))
                                                                                                                                                                                                                                                                                                                    (optional systemd_optional_109
                                                                                                                                                                                                                                                                                                                        (typeattributeset cil_gen_require rpm_t)
                                                                                                                                                                                                                                                                                                                        (allow systemd_stdio_bridge_t rpm_t (fd (use)))
                                                                                                                                                                                                                                                                                                                        (allow systemd_stdio_bridge_t rpm_t (fifo_file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                    )
                                                                                                                                                                                                                                                                                                                    (optional systemd_optional_110
                                                                                                                                                                                                                                                                                                                        (typeattributeset cil_gen_require security_t)
                                                                                                                                                                                                                                                                                                                        (typeattributeset cil_gen_require sysfs_t)
                                                                                                                                                                                                                                                                                                                        (dontaudit systemd_stdio_bridge_t security_t (filesystem (getattr)))
                                                                                                                                                                                                                                                                                                                        (dontaudit systemd_stdio_bridge_t sysfs_t (filesystem (getattr)))
                                                                                                                                                                                                                                                                                                                        (dontaudit systemd_stdio_bridge_t sysfs_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                        (dontaudit systemd_stdio_bridge_t security_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                        (dontaudit systemd_stdio_bridge_t security_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                        (optional systemd_optional_111
                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require selinux_config_t)
                                                                                                                                                                                                                                                                                                                            (dontaudit systemd_stdio_bridge_t selinux_config_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                            (dontaudit systemd_stdio_bridge_t selinux_config_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                            (optional systemd_optional_112
                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require init_t)
                                                                                                                                                                                                                                                                                                                                (allow systemd_passwd_agent_t init_t (process (sigchld)))
                                                                                                                                                                                                                                                                                                                                (allow systemd_passwd_agent_t init_t (process (signull)))
                                                                                                                                                                                                                                                                                                                                (optional systemd_optional_113
                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require rpm_t)
                                                                                                                                                                                                                                                                                                                                    (allow systemd_passwd_agent_t rpm_t (fd (use)))
                                                                                                                                                                                                                                                                                                                                    (allow systemd_passwd_agent_t rpm_t (fifo_file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                )
                                                                                                                                                                                                                                                                                                                                (optional systemd_optional_114
                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require security_t)
                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require sysfs_t)
                                                                                                                                                                                                                                                                                                                                    (dontaudit systemd_passwd_agent_t security_t (filesystem (getattr)))
                                                                                                                                                                                                                                                                                                                                    (dontaudit systemd_passwd_agent_t sysfs_t (filesystem (getattr)))
                                                                                                                                                                                                                                                                                                                                    (dontaudit systemd_passwd_agent_t sysfs_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                    (dontaudit systemd_passwd_agent_t security_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                    (dontaudit systemd_passwd_agent_t security_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                    (optional systemd_optional_115
                                                                                                                                                                                                                                                                                                                                        (typeattributeset cil_gen_require selinux_config_t)
                                                                                                                                                                                                                                                                                                                                        (dontaudit systemd_passwd_agent_t selinux_config_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                        (dontaudit systemd_passwd_agent_t selinux_config_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                        (optional systemd_optional_116
                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require init_t)
                                                                                                                                                                                                                                                                                                                                            (allow systemd_rfkill_t init_t (process (sigchld)))
                                                                                                                                                                                                                                                                                                                                            (allow systemd_rfkill_t init_t (process (signull)))
                                                                                                                                                                                                                                                                                                                                            (optional systemd_optional_117
                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require rpm_t)
                                                                                                                                                                                                                                                                                                                                                (allow systemd_rfkill_t rpm_t (fd (use)))
                                                                                                                                                                                                                                                                                                                                                (allow systemd_rfkill_t rpm_t (fifo_file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                            )
                                                                                                                                                                                                                                                                                                                                            (optional systemd_optional_118
                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require security_t)
                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require sysfs_t)
                                                                                                                                                                                                                                                                                                                                                (dontaudit systemd_rfkill_t security_t (filesystem (getattr)))
                                                                                                                                                                                                                                                                                                                                                (dontaudit systemd_rfkill_t sysfs_t (filesystem (getattr)))
                                                                                                                                                                                                                                                                                                                                                (dontaudit systemd_rfkill_t sysfs_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                (dontaudit systemd_rfkill_t security_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                (dontaudit systemd_rfkill_t security_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                (optional systemd_optional_119
                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require selinux_config_t)
                                                                                                                                                                                                                                                                                                                                                    (dontaudit systemd_rfkill_t selinux_config_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                    (dontaudit systemd_rfkill_t selinux_config_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                    (optional systemd_optional_120
                                                                                                                                                                                                                                                                                                                                                        (typeattributeset cil_gen_require init_t)
                                                                                                                                                                                                                                                                                                                                                        (allow systemd_sessions_t init_t (process (sigchld)))
                                                                                                                                                                                                                                                                                                                                                        (allow systemd_sessions_t init_t (process (signull)))
                                                                                                                                                                                                                                                                                                                                                        (optional systemd_optional_121
                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require rpm_t)
                                                                                                                                                                                                                                                                                                                                                            (allow systemd_sessions_t rpm_t (fd (use)))
                                                                                                                                                                                                                                                                                                                                                            (allow systemd_sessions_t rpm_t (fifo_file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                        )
                                                                                                                                                                                                                                                                                                                                                        (optional systemd_optional_122
                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require security_t)
                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require sysfs_t)
                                                                                                                                                                                                                                                                                                                                                            (dontaudit systemd_sessions_t security_t (filesystem (getattr)))
                                                                                                                                                                                                                                                                                                                                                            (dontaudit systemd_sessions_t sysfs_t (filesystem (getattr)))
                                                                                                                                                                                                                                                                                                                                                            (dontaudit systemd_sessions_t sysfs_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                            (dontaudit systemd_sessions_t security_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                            (dontaudit systemd_sessions_t security_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                            (optional systemd_optional_123
                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require selinux_config_t)
                                                                                                                                                                                                                                                                                                                                                                (dontaudit systemd_sessions_t selinux_config_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                (dontaudit systemd_sessions_t selinux_config_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                                (optional systemd_optional_124
                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require init_t)
                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_socket_proxyd_t init_t (process (sigchld)))
                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_socket_proxyd_t init_t (process (signull)))
                                                                                                                                                                                                                                                                                                                                                                    (optional systemd_optional_125
                                                                                                                                                                                                                                                                                                                                                                        (typeattributeset cil_gen_require rpm_t)
                                                                                                                                                                                                                                                                                                                                                                        (allow systemd_socket_proxyd_t rpm_t (fd (use)))
                                                                                                                                                                                                                                                                                                                                                                        (allow systemd_socket_proxyd_t rpm_t (fifo_file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                                    )
                                                                                                                                                                                                                                                                                                                                                                    (optional systemd_optional_126
                                                                                                                                                                                                                                                                                                                                                                        (typeattributeset cil_gen_require security_t)
                                                                                                                                                                                                                                                                                                                                                                        (typeattributeset cil_gen_require sysfs_t)
                                                                                                                                                                                                                                                                                                                                                                        (dontaudit systemd_socket_proxyd_t security_t (filesystem (getattr)))
                                                                                                                                                                                                                                                                                                                                                                        (dontaudit systemd_socket_proxyd_t sysfs_t (filesystem (getattr)))
                                                                                                                                                                                                                                                                                                                                                                        (dontaudit systemd_socket_proxyd_t sysfs_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                        (dontaudit systemd_socket_proxyd_t security_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                        (dontaudit systemd_socket_proxyd_t security_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                                        (optional systemd_optional_127
                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require selinux_config_t)
                                                                                                                                                                                                                                                                                                                                                                            (dontaudit systemd_socket_proxyd_t selinux_config_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                            (dontaudit systemd_socket_proxyd_t selinux_config_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                                            (optional systemd_optional_128
                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require init_t)
                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_sysctl_t init_t (process (sigchld)))
                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_sysctl_t init_t (process (signull)))
                                                                                                                                                                                                                                                                                                                                                                                (optional systemd_optional_129
                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require rpm_t)
                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_sysctl_t rpm_t (fd (use)))
                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_sysctl_t rpm_t (fifo_file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                                                )
                                                                                                                                                                                                                                                                                                                                                                                (optional systemd_optional_130
                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require security_t)
                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require sysfs_t)
                                                                                                                                                                                                                                                                                                                                                                                    (dontaudit systemd_sysctl_t security_t (filesystem (getattr)))
                                                                                                                                                                                                                                                                                                                                                                                    (dontaudit systemd_sysctl_t sysfs_t (filesystem (getattr)))
                                                                                                                                                                                                                                                                                                                                                                                    (dontaudit systemd_sysctl_t sysfs_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                    (dontaudit systemd_sysctl_t security_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                    (dontaudit systemd_sysctl_t security_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                                                    (optional systemd_optional_131
                                                                                                                                                                                                                                                                                                                                                                                        (typeattributeset cil_gen_require selinux_config_t)
                                                                                                                                                                                                                                                                                                                                                                                        (dontaudit systemd_sysctl_t selinux_config_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                        (dontaudit systemd_sysctl_t selinux_config_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                                                        (optional systemd_optional_132
                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require init_t)
                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_sysusers_t init_t (process (sigchld)))
                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_sysusers_t init_t (process (signull)))
                                                                                                                                                                                                                                                                                                                                                                                            (optional systemd_optional_133
                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require rpm_t)
                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_sysusers_t rpm_t (fd (use)))
                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_sysusers_t rpm_t (fifo_file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                                                            )
                                                                                                                                                                                                                                                                                                                                                                                            (optional systemd_optional_134
                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require security_t)
                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require sysfs_t)
                                                                                                                                                                                                                                                                                                                                                                                                (dontaudit systemd_sysusers_t security_t (filesystem (getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                (dontaudit systemd_sysusers_t sysfs_t (filesystem (getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                (dontaudit systemd_sysusers_t sysfs_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                (dontaudit systemd_sysusers_t security_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                (dontaudit systemd_sysusers_t security_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                                                                (optional systemd_optional_135
                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require selinux_config_t)
                                                                                                                                                                                                                                                                                                                                                                                                    (dontaudit systemd_sysusers_t selinux_config_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                    (dontaudit systemd_sysusers_t selinux_config_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                                                                    (optional systemd_optional_136
                                                                                                                                                                                                                                                                                                                                                                                                        (typeattributeset cil_gen_require init_t)
                                                                                                                                                                                                                                                                                                                                                                                                        (allow systemd_tmpfiles_t init_t (process (sigchld)))
                                                                                                                                                                                                                                                                                                                                                                                                        (allow systemd_tmpfiles_t init_t (process (signull)))
                                                                                                                                                                                                                                                                                                                                                                                                        (optional systemd_optional_137
                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require rpm_t)
                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_tmpfiles_t rpm_t (fd (use)))
                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_tmpfiles_t rpm_t (fifo_file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                                                                        )
                                                                                                                                                                                                                                                                                                                                                                                                        (optional systemd_optional_138
                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require security_t)
                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require sysfs_t)
                                                                                                                                                                                                                                                                                                                                                                                                            (dontaudit systemd_tmpfiles_t security_t (filesystem (getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                            (dontaudit systemd_tmpfiles_t sysfs_t (filesystem (getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                            (dontaudit systemd_tmpfiles_t sysfs_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                            (dontaudit systemd_tmpfiles_t security_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                            (dontaudit systemd_tmpfiles_t security_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                                                                            (optional systemd_optional_139
                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require selinux_config_t)
                                                                                                                                                                                                                                                                                                                                                                                                                (dontaudit systemd_tmpfiles_t selinux_config_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                (dontaudit systemd_tmpfiles_t selinux_config_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                                                                                (optional systemd_optional_140
                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require init_t)
                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_update_done_t init_t (process (sigchld)))
                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_update_done_t init_t (process (signull)))
                                                                                                                                                                                                                                                                                                                                                                                                                    (optional systemd_optional_141
                                                                                                                                                                                                                                                                                                                                                                                                                        (typeattributeset cil_gen_require rpm_t)
                                                                                                                                                                                                                                                                                                                                                                                                                        (allow systemd_update_done_t rpm_t (fd (use)))
                                                                                                                                                                                                                                                                                                                                                                                                                        (allow systemd_update_done_t rpm_t (fifo_file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                                                                                    )
                                                                                                                                                                                                                                                                                                                                                                                                                    (optional systemd_optional_142
                                                                                                                                                                                                                                                                                                                                                                                                                        (typeattributeset cil_gen_require security_t)
                                                                                                                                                                                                                                                                                                                                                                                                                        (typeattributeset cil_gen_require sysfs_t)
                                                                                                                                                                                                                                                                                                                                                                                                                        (dontaudit systemd_update_done_t security_t (filesystem (getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                        (dontaudit systemd_update_done_t sysfs_t (filesystem (getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                        (dontaudit systemd_update_done_t sysfs_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                        (dontaudit systemd_update_done_t security_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                        (dontaudit systemd_update_done_t security_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                                                                                        (optional systemd_optional_143
                                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require selinux_config_t)
                                                                                                                                                                                                                                                                                                                                                                                                                            (dontaudit systemd_update_done_t selinux_config_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                            (dontaudit systemd_update_done_t selinux_config_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                                                                                            (optional systemd_optional_144
                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require file_type)
                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset file_type (systemd_activate_exec_t systemd_analyze_exec_t systemd_backlight_exec_t systemd_backlight_unit_t systemd_backlight_var_lib_t systemd_binfmt_exec_t systemd_binfmt_unit_t systemd_conf_t systemd_cgroups_exec_t systemd_cgroups_runtime_t systemd_cgtop_exec_t systemd_coredump_exec_t systemd_coredump_var_lib_t systemd_factory_conf_t systemd_generator_exec_t systemd_homed_exec_t systemd_homework_exec_t systemd_homed_record_t systemd_homed_runtime_t systemd_homed_runtime_work_dir_t systemd_homed_storage_t systemd_homed_tmpfs_t systemd_homed_var_lib_t systemd_hostnamed_exec_t systemd_hw_exec_t systemd_hwdb_t systemd_journal_t systemd_journalctl_exec_t systemd_locale_exec_t systemd_log_t systemd_logind_exec_t systemd_logind_inhibit_runtime_t systemd_logind_runtime_t systemd_logind_var_lib_t systemd_machined_exec_t systemd_machined_runtime_t systemd_machine_id_setup_exec_t systemd_modules_load_exec_t systemd_networkd_exec_t systemd_networkd_runtime_t systemd_networkd_unit_t systemd_networkd_var_lib_t systemd_notify_exec_t systemd_nspawn_exec_t systemd_nspawn_runtime_t systemd_nspawn_tmp_t systemd_nsresourced_exec_t systemd_nsresourced_runtime_t systemd_pcrphase_exec_t systemd_pstore_exec_t systemd_pstore_var_lib_t systemd_resolved_exec_t systemd_resolved_runtime_t systemd_stdio_bridge_exec_t systemd_passwd_agent_exec_t systemd_passwd_runtime_t systemd_rfkill_exec_t systemd_rfkill_unit_t systemd_rfkill_var_lib_t systemd_sessions_exec_t systemd_sessions_runtime_t systemd_socket_proxyd_exec_t systemd_socket_proxyd_unit_file_t systemd_sysctl_exec_t systemd_sysusers_exec_t systemd_tmpfiles_exec_t systemd_tmpfiles_conf_t systemd_update_done_exec_t systemd_update_run_t systemd_user_manager_unit_t systemd_conf_home_t systemd_data_home_t systemd_user_runtime_notify_t systemd_runtime_notify_t systemd_user_runtime_t systemd_user_runtime_dir_exec_t systemd_user_tmpfs_t systemd_userdbd_exec_t systemd_userdbd_runtime_t systemd_userdbd_unit_t systemd_user_unit_t systemd_user_runtime_unit_t systemd_user_transient_unit_t power_unit_t bin_t shell_exec_t ))
                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require non_security_file_type)
                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset non_security_file_type (systemd_activate_exec_t systemd_analyze_exec_t systemd_backlight_exec_t systemd_backlight_unit_t systemd_backlight_var_lib_t systemd_binfmt_exec_t systemd_binfmt_unit_t systemd_conf_t systemd_cgroups_exec_t systemd_cgroups_runtime_t systemd_cgtop_exec_t systemd_coredump_exec_t systemd_coredump_var_lib_t systemd_factory_conf_t systemd_generator_exec_t systemd_homed_exec_t systemd_homework_exec_t systemd_homed_runtime_t systemd_homed_runtime_work_dir_t systemd_homed_storage_t systemd_homed_tmpfs_t systemd_homed_var_lib_t systemd_hostnamed_exec_t systemd_hw_exec_t systemd_hwdb_t systemd_journal_t systemd_journalctl_exec_t systemd_locale_exec_t systemd_log_t systemd_logind_exec_t systemd_logind_inhibit_runtime_t systemd_logind_runtime_t systemd_logind_var_lib_t systemd_machined_exec_t systemd_machined_runtime_t systemd_machine_id_setup_exec_t systemd_modules_load_exec_t systemd_networkd_exec_t systemd_networkd_runtime_t systemd_networkd_unit_t systemd_networkd_var_lib_t systemd_notify_exec_t systemd_nspawn_exec_t systemd_nspawn_runtime_t systemd_nspawn_tmp_t systemd_nsresourced_exec_t systemd_nsresourced_runtime_t systemd_pcrphase_exec_t systemd_pstore_exec_t systemd_pstore_var_lib_t systemd_resolved_exec_t systemd_resolved_runtime_t systemd_stdio_bridge_exec_t systemd_passwd_agent_exec_t systemd_passwd_runtime_t systemd_rfkill_exec_t systemd_rfkill_unit_t systemd_rfkill_var_lib_t systemd_sessions_exec_t systemd_sessions_runtime_t systemd_socket_proxyd_exec_t systemd_socket_proxyd_unit_file_t systemd_sysctl_exec_t systemd_sysusers_exec_t systemd_tmpfiles_exec_t systemd_tmpfiles_conf_t systemd_update_done_exec_t systemd_update_run_t systemd_user_manager_unit_t systemd_conf_home_t systemd_data_home_t systemd_user_runtime_notify_t systemd_runtime_notify_t systemd_user_runtime_t systemd_user_runtime_dir_exec_t systemd_user_tmpfs_t systemd_userdbd_exec_t systemd_userdbd_runtime_t systemd_userdbd_unit_t systemd_user_unit_t systemd_user_runtime_unit_t systemd_user_transient_unit_t power_unit_t bin_t shell_exec_t ))
                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require non_auth_file_type)
                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset non_auth_file_type (systemd_activate_exec_t systemd_analyze_exec_t systemd_backlight_exec_t systemd_backlight_unit_t systemd_backlight_var_lib_t systemd_binfmt_exec_t systemd_binfmt_unit_t systemd_conf_t systemd_cgroups_exec_t systemd_cgroups_runtime_t systemd_cgtop_exec_t systemd_coredump_exec_t systemd_coredump_var_lib_t systemd_factory_conf_t systemd_generator_exec_t systemd_homed_exec_t systemd_homework_exec_t systemd_homed_runtime_t systemd_homed_runtime_work_dir_t systemd_homed_storage_t systemd_homed_tmpfs_t systemd_homed_var_lib_t systemd_hostnamed_exec_t systemd_hw_exec_t systemd_hwdb_t systemd_journal_t systemd_journalctl_exec_t systemd_locale_exec_t systemd_log_t systemd_logind_exec_t systemd_logind_inhibit_runtime_t systemd_logind_runtime_t systemd_logind_var_lib_t systemd_machined_exec_t systemd_machined_runtime_t systemd_machine_id_setup_exec_t systemd_modules_load_exec_t systemd_networkd_exec_t systemd_networkd_runtime_t systemd_networkd_unit_t systemd_networkd_var_lib_t systemd_notify_exec_t systemd_nspawn_exec_t systemd_nspawn_runtime_t systemd_nspawn_tmp_t systemd_nsresourced_exec_t systemd_nsresourced_runtime_t systemd_pcrphase_exec_t systemd_pstore_exec_t systemd_pstore_var_lib_t systemd_resolved_exec_t systemd_resolved_runtime_t systemd_stdio_bridge_exec_t systemd_passwd_agent_exec_t systemd_passwd_runtime_t systemd_rfkill_exec_t systemd_rfkill_unit_t systemd_rfkill_var_lib_t systemd_sessions_exec_t systemd_sessions_runtime_t systemd_socket_proxyd_exec_t systemd_socket_proxyd_unit_file_t systemd_sysctl_exec_t systemd_sysusers_exec_t systemd_tmpfiles_exec_t systemd_tmpfiles_conf_t systemd_update_done_exec_t systemd_update_run_t systemd_user_manager_unit_t systemd_conf_home_t systemd_data_home_t systemd_user_runtime_notify_t systemd_runtime_notify_t systemd_user_runtime_t systemd_user_runtime_dir_exec_t systemd_user_tmpfs_t systemd_userdbd_exec_t systemd_userdbd_runtime_t systemd_userdbd_unit_t systemd_user_unit_t systemd_user_runtime_unit_t systemd_user_transient_unit_t power_unit_t bin_t shell_exec_t ))
                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require polymember)
                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset polymember (systemd_nspawn_tmp_t systemd_data_home_t ))
                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require xdg_config_type)
                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require user_home_content_type)
                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset user_home_content_type (systemd_data_home_t ))
                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require user_home_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require ubac_constrained_type)
                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset ubac_constrained_type (systemd_data_home_t systemd_user_runtime_notify_t systemd_user_runtime_t systemd_user_tmpfs_t systemd_user_runtime_unit_t systemd_user_transient_unit_t ))
                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require non_auth_file_type)
                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset non_auth_file_type (systemd_conf_home_t ))
                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require file_type)
                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset file_type (systemd_conf_home_t ))
                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require xdg_config_type)
                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset xdg_config_type (systemd_conf_home_t ))
                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require user_home_content_type)
                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset user_home_content_type (systemd_conf_home_t ))
                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require ubac_constrained_type)
                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset ubac_constrained_type (systemd_conf_home_t ))
                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require non_security_file_type)
                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset non_security_file_type (systemd_conf_home_t ))
                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require polymember)
                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset polymember (systemd_conf_home_t ))
                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_conf_home_t user_home_t (filesystem (associate)))
                                                                                                                                                                                                                                                                                                                                                                                                                            )
                                                                                                                                                                                                                                                                                                                                                                                                                            (optional systemd_optional_145
                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require file_type)
                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset file_type (systemd_activate_exec_t systemd_analyze_exec_t systemd_backlight_exec_t systemd_backlight_unit_t systemd_backlight_var_lib_t systemd_binfmt_exec_t systemd_binfmt_unit_t systemd_conf_t systemd_cgroups_exec_t systemd_cgroups_runtime_t systemd_cgtop_exec_t systemd_coredump_exec_t systemd_coredump_var_lib_t systemd_factory_conf_t systemd_generator_exec_t systemd_homed_exec_t systemd_homework_exec_t systemd_homed_record_t systemd_homed_runtime_t systemd_homed_runtime_work_dir_t systemd_homed_storage_t systemd_homed_tmpfs_t systemd_homed_var_lib_t systemd_hostnamed_exec_t systemd_hw_exec_t systemd_hwdb_t systemd_journal_t systemd_journalctl_exec_t systemd_locale_exec_t systemd_log_t systemd_logind_exec_t systemd_logind_inhibit_runtime_t systemd_logind_runtime_t systemd_logind_var_lib_t systemd_machined_exec_t systemd_machined_runtime_t systemd_machine_id_setup_exec_t systemd_modules_load_exec_t systemd_networkd_exec_t systemd_networkd_runtime_t systemd_networkd_unit_t systemd_networkd_var_lib_t systemd_notify_exec_t systemd_nspawn_exec_t systemd_nspawn_runtime_t systemd_nspawn_tmp_t systemd_nsresourced_exec_t systemd_nsresourced_runtime_t systemd_pcrphase_exec_t systemd_pstore_exec_t systemd_pstore_var_lib_t systemd_resolved_exec_t systemd_resolved_runtime_t systemd_stdio_bridge_exec_t systemd_passwd_agent_exec_t systemd_passwd_runtime_t systemd_rfkill_exec_t systemd_rfkill_unit_t systemd_rfkill_var_lib_t systemd_sessions_exec_t systemd_sessions_runtime_t systemd_socket_proxyd_exec_t systemd_socket_proxyd_unit_file_t systemd_sysctl_exec_t systemd_sysusers_exec_t systemd_tmpfiles_exec_t systemd_tmpfiles_conf_t systemd_update_done_exec_t systemd_update_run_t systemd_user_manager_unit_t systemd_conf_home_t systemd_data_home_t systemd_user_runtime_notify_t systemd_runtime_notify_t systemd_user_runtime_t systemd_user_runtime_dir_exec_t systemd_user_tmpfs_t systemd_userdbd_exec_t systemd_userdbd_runtime_t systemd_userdbd_unit_t systemd_user_unit_t systemd_user_runtime_unit_t systemd_user_transient_unit_t power_unit_t bin_t shell_exec_t ))
                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require non_security_file_type)
                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset non_security_file_type (systemd_activate_exec_t systemd_analyze_exec_t systemd_backlight_exec_t systemd_backlight_unit_t systemd_backlight_var_lib_t systemd_binfmt_exec_t systemd_binfmt_unit_t systemd_conf_t systemd_cgroups_exec_t systemd_cgroups_runtime_t systemd_cgtop_exec_t systemd_coredump_exec_t systemd_coredump_var_lib_t systemd_factory_conf_t systemd_generator_exec_t systemd_homed_exec_t systemd_homework_exec_t systemd_homed_runtime_t systemd_homed_runtime_work_dir_t systemd_homed_storage_t systemd_homed_tmpfs_t systemd_homed_var_lib_t systemd_hostnamed_exec_t systemd_hw_exec_t systemd_hwdb_t systemd_journal_t systemd_journalctl_exec_t systemd_locale_exec_t systemd_log_t systemd_logind_exec_t systemd_logind_inhibit_runtime_t systemd_logind_runtime_t systemd_logind_var_lib_t systemd_machined_exec_t systemd_machined_runtime_t systemd_machine_id_setup_exec_t systemd_modules_load_exec_t systemd_networkd_exec_t systemd_networkd_runtime_t systemd_networkd_unit_t systemd_networkd_var_lib_t systemd_notify_exec_t systemd_nspawn_exec_t systemd_nspawn_runtime_t systemd_nspawn_tmp_t systemd_nsresourced_exec_t systemd_nsresourced_runtime_t systemd_pcrphase_exec_t systemd_pstore_exec_t systemd_pstore_var_lib_t systemd_resolved_exec_t systemd_resolved_runtime_t systemd_stdio_bridge_exec_t systemd_passwd_agent_exec_t systemd_passwd_runtime_t systemd_rfkill_exec_t systemd_rfkill_unit_t systemd_rfkill_var_lib_t systemd_sessions_exec_t systemd_sessions_runtime_t systemd_socket_proxyd_exec_t systemd_socket_proxyd_unit_file_t systemd_sysctl_exec_t systemd_sysusers_exec_t systemd_tmpfiles_exec_t systemd_tmpfiles_conf_t systemd_update_done_exec_t systemd_update_run_t systemd_user_manager_unit_t systemd_conf_home_t systemd_data_home_t systemd_user_runtime_notify_t systemd_runtime_notify_t systemd_user_runtime_t systemd_user_runtime_dir_exec_t systemd_user_tmpfs_t systemd_userdbd_exec_t systemd_userdbd_runtime_t systemd_userdbd_unit_t systemd_user_unit_t systemd_user_runtime_unit_t systemd_user_transient_unit_t power_unit_t bin_t shell_exec_t ))
                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require non_auth_file_type)
                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset non_auth_file_type (systemd_activate_exec_t systemd_analyze_exec_t systemd_backlight_exec_t systemd_backlight_unit_t systemd_backlight_var_lib_t systemd_binfmt_exec_t systemd_binfmt_unit_t systemd_conf_t systemd_cgroups_exec_t systemd_cgroups_runtime_t systemd_cgtop_exec_t systemd_coredump_exec_t systemd_coredump_var_lib_t systemd_factory_conf_t systemd_generator_exec_t systemd_homed_exec_t systemd_homework_exec_t systemd_homed_runtime_t systemd_homed_runtime_work_dir_t systemd_homed_storage_t systemd_homed_tmpfs_t systemd_homed_var_lib_t systemd_hostnamed_exec_t systemd_hw_exec_t systemd_hwdb_t systemd_journal_t systemd_journalctl_exec_t systemd_locale_exec_t systemd_log_t systemd_logind_exec_t systemd_logind_inhibit_runtime_t systemd_logind_runtime_t systemd_logind_var_lib_t systemd_machined_exec_t systemd_machined_runtime_t systemd_machine_id_setup_exec_t systemd_modules_load_exec_t systemd_networkd_exec_t systemd_networkd_runtime_t systemd_networkd_unit_t systemd_networkd_var_lib_t systemd_notify_exec_t systemd_nspawn_exec_t systemd_nspawn_runtime_t systemd_nspawn_tmp_t systemd_nsresourced_exec_t systemd_nsresourced_runtime_t systemd_pcrphase_exec_t systemd_pstore_exec_t systemd_pstore_var_lib_t systemd_resolved_exec_t systemd_resolved_runtime_t systemd_stdio_bridge_exec_t systemd_passwd_agent_exec_t systemd_passwd_runtime_t systemd_rfkill_exec_t systemd_rfkill_unit_t systemd_rfkill_var_lib_t systemd_sessions_exec_t systemd_sessions_runtime_t systemd_socket_proxyd_exec_t systemd_socket_proxyd_unit_file_t systemd_sysctl_exec_t systemd_sysusers_exec_t systemd_tmpfiles_exec_t systemd_tmpfiles_conf_t systemd_update_done_exec_t systemd_update_run_t systemd_user_manager_unit_t systemd_conf_home_t systemd_data_home_t systemd_user_runtime_notify_t systemd_runtime_notify_t systemd_user_runtime_t systemd_user_runtime_dir_exec_t systemd_user_tmpfs_t systemd_userdbd_exec_t systemd_userdbd_runtime_t systemd_userdbd_unit_t systemd_user_unit_t systemd_user_runtime_unit_t systemd_user_transient_unit_t power_unit_t bin_t shell_exec_t ))
                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require polymember)
                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset polymember (systemd_nspawn_tmp_t systemd_data_home_t ))
                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require user_home_content_type)
                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset user_home_content_type (systemd_data_home_t ))
                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require user_home_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require ubac_constrained_type)
                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset ubac_constrained_type (systemd_data_home_t systemd_user_runtime_notify_t systemd_user_runtime_t systemd_user_tmpfs_t systemd_user_runtime_unit_t systemd_user_transient_unit_t ))
                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require xdg_data_type)
                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require non_auth_file_type)
                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset non_auth_file_type (systemd_data_home_t ))
                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require file_type)
                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset file_type (systemd_data_home_t ))
                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require user_home_content_type)
                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset user_home_content_type (systemd_data_home_t ))
                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require xdg_data_type)
                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset xdg_data_type (systemd_data_home_t ))
                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require ubac_constrained_type)
                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset ubac_constrained_type (systemd_data_home_t ))
                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require non_security_file_type)
                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset non_security_file_type (systemd_data_home_t ))
                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require polymember)
                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset polymember (systemd_data_home_t ))
                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_data_home_t user_home_t (filesystem (associate)))
                                                                                                                                                                                                                                                                                                                                                                                                                            )
                                                                                                                                                                                                                                                                                                                                                                                                                            (optional systemd_optional_146
                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require init_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_user_runtime_dir_t init_t (process (sigchld)))
                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_user_runtime_dir_t init_t (process (signull)))
                                                                                                                                                                                                                                                                                                                                                                                                                                (optional systemd_optional_147
                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require rpm_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_user_runtime_dir_t rpm_t (fd (use)))
                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_user_runtime_dir_t rpm_t (fifo_file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                )
                                                                                                                                                                                                                                                                                                                                                                                                                                (optional systemd_optional_148
                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require security_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require sysfs_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                    (dontaudit systemd_user_runtime_dir_t security_t (filesystem (getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                    (dontaudit systemd_user_runtime_dir_t sysfs_t (filesystem (getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                    (dontaudit systemd_user_runtime_dir_t sysfs_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                    (dontaudit systemd_user_runtime_dir_t security_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                    (dontaudit systemd_user_runtime_dir_t security_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                    (optional systemd_optional_149
                                                                                                                                                                                                                                                                                                                                                                                                                                        (typeattributeset cil_gen_require selinux_config_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                        (dontaudit systemd_user_runtime_dir_t selinux_config_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                        (dontaudit systemd_user_runtime_dir_t selinux_config_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                        (optional systemd_optional_150
                                                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require init_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_userdbd_t init_t (process (sigchld)))
                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_userdbd_t init_t (process (signull)))
                                                                                                                                                                                                                                                                                                                                                                                                                                            (optional systemd_optional_151
                                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require rpm_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_userdbd_t rpm_t (fd (use)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_userdbd_t rpm_t (fifo_file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                            )
                                                                                                                                                                                                                                                                                                                                                                                                                                            (optional systemd_optional_152
                                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require security_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require sysfs_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                (dontaudit systemd_userdbd_t security_t (filesystem (getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                (dontaudit systemd_userdbd_t sysfs_t (filesystem (getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                (dontaudit systemd_userdbd_t sysfs_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                (dontaudit systemd_userdbd_t security_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                (dontaudit systemd_userdbd_t security_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                (optional systemd_optional_153
                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require selinux_config_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                    (dontaudit systemd_userdbd_t selinux_config_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                    (dontaudit systemd_userdbd_t selinux_config_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                    (optional systemd_optional_154
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (typeattributeset cil_gen_require var_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (typeattributeset cil_gen_require var_run_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (typeattributeset cil_gen_require avahi_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (typeattributeset cil_gen_require avahi_runtime_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (allow systemd_generator_t var_run_t (lnk_file (read getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (allow systemd_generator_t var_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (allow systemd_generator_t var_run_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (allow systemd_generator_t avahi_runtime_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (allow systemd_generator_t avahi_runtime_t (sock_file (write getattr append open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (allow systemd_generator_t avahi_t (unix_stream_socket (connectto)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                    )
                                                                                                                                                                                                                                                                                                                                                                                                                                                    (optional systemd_optional_155
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (typeattributeset cil_gen_require var_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (typeattributeset cil_gen_require var_run_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (typeattributeset cil_gen_require NetworkManager_runtime_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (allow systemd_generator_t var_run_t (lnk_file (read getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (allow systemd_generator_t var_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (allow systemd_generator_t var_run_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (allow systemd_generator_t NetworkManager_runtime_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (allow systemd_generator_t NetworkManager_runtime_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                    )
                                                                                                                                                                                                                                                                                                                                                                                                                                                    (optional systemd_optional_156
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (typeattributeset cil_gen_require var_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (typeattributeset cil_gen_require var_run_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (typeattributeset cil_gen_require nscd_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (typeattributeset cil_gen_require nscd_runtime_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (booleanif (nscd_use_shm)
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (true
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_generator_t nscd_runtime_t (sock_file (read getattr open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_generator_t nscd_runtime_t (dir (ioctl read getattr lock open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (dontaudit systemd_generator_t nscd_runtime_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_generator_t nscd_t (unix_stream_socket (connectto)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_generator_t nscd_runtime_t (sock_file (write getattr append open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_generator_t nscd_runtime_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_generator_t var_run_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_generator_t var_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_generator_t var_run_t (lnk_file (read getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_generator_t nscd_t (fd (use)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_generator_t nscd_t (nscd (getgrp gethost getpwd shmemgrp shmemhost shmempwd)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_generator_t self (unix_stream_socket (ioctl read write create getattr setattr append bind connect listen accept getopt setopt shutdown)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            )
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (false
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow nscd_t systemd_generator_t (process (getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow nscd_t systemd_generator_t (lnk_file (read getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow nscd_t systemd_generator_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow nscd_t systemd_generator_t (dir (ioctl read getattr lock open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (dontaudit systemd_generator_t nscd_runtime_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_generator_t nscd_t (unix_stream_socket (connectto)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_generator_t nscd_runtime_t (sock_file (write getattr append open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_generator_t nscd_runtime_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_generator_t var_run_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_generator_t var_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_generator_t var_run_t (lnk_file (read getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (dontaudit systemd_generator_t nscd_t (nscd (shmemgrp shmemhost shmempwd getserv shmemserv)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (dontaudit systemd_generator_t nscd_t (fd (use)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_generator_t nscd_t (nscd (getgrp gethost getpwd)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_generator_t self (unix_stream_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            )
                                                                                                                                                                                                                                                                                                                                                                                                                                                        )
                                                                                                                                                                                                                                                                                                                                                                                                                                                    )
                                                                                                                                                                                                                                                                                                                                                                                                                                                    (optional systemd_optional_157
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (typeattributeset cil_gen_require var_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (typeattributeset cil_gen_require var_run_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (typeattributeset cil_gen_require var_lib_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (typeattributeset cil_gen_require cloud_init_runtime_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (typeattributeset cil_gen_require cloud_init_state_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (allow systemd_generator_t var_run_t (lnk_file (read getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (allow systemd_generator_t var_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (allow systemd_generator_t var_run_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (allow systemd_generator_t cloud_init_runtime_t (dir (create getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (allow systemd_generator_t var_run_t (lnk_file (read getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (allow systemd_generator_t var_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (allow systemd_generator_t var_run_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (allow systemd_generator_t cloud_init_runtime_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (allow systemd_generator_t cloud_init_runtime_t (file (ioctl read write getattr lock append open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (allow systemd_generator_t var_run_t (lnk_file (read getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (allow systemd_generator_t var_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (allow systemd_generator_t var_run_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (allow systemd_generator_t cloud_init_runtime_t (dir (ioctl write getattr lock open add_name search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (allow systemd_generator_t cloud_init_runtime_t (file (create getattr open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (allow systemd_generator_t var_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (allow systemd_generator_t var_run_t (lnk_file (read getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (allow systemd_generator_t var_run_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (allow systemd_generator_t var_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (allow systemd_generator_t var_lib_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (allow systemd_generator_t cloud_init_state_t (dir (ioctl read getattr lock open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (allow systemd_generator_t cloud_init_state_t (lnk_file (read getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (allow systemd_generator_t cloud_init_state_t (file (getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (typetransition systemd_generator_t var_run_t dir "cloud-init" cloud_init_runtime_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                    )
                                                                                                                                                                                                                                                                                                                                                                                                                                                    (optional systemd_optional_158
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (typeattributeset cil_gen_require etc_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (typeattributeset cil_gen_require container_config_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (allow systemd_generator_t etc_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (allow systemd_generator_t container_config_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                    )
                                                                                                                                                                                                                                                                                                                                                                                                                                                    (optional systemd_optional_159
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (typeattributeset cil_gen_require usr_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (typeattributeset cil_gen_require bin_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (typeattributeset cil_gen_require fsadm_exec_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (allow systemd_generator_t fsadm_exec_t (file (ioctl read getattr lock map execute open execute_no_trans)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (allow systemd_generator_t bin_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (allow systemd_generator_t bin_t (lnk_file (read getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (allow systemd_generator_t usr_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (optional systemd_optional_160
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require etc_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require locale_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require usr_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require bin_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require lvm_exec_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require lvm_etc_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_generator_t bin_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_generator_t bin_t (lnk_file (read getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_generator_t usr_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_generator_t lvm_exec_t (file (ioctl read getattr lock map execute open execute_no_trans)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_generator_t lvm_etc_t (file (map)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_generator_t etc_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_generator_t lvm_etc_t (dir (ioctl read getattr lock open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_generator_t lvm_etc_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_generator_t lvm_etc_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_generator_t etc_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_generator_t etc_t (lnk_file (read getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_generator_t usr_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_generator_t locale_t (dir (ioctl read getattr lock open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_generator_t locale_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_generator_t locale_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_generator_t locale_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_generator_t locale_t (lnk_file (read getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_generator_t locale_t (file (map)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                        )
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (optional systemd_optional_161
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require nfsd_fs_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require exports_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_generator_t nfsd_fs_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_generator_t nfsd_fs_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_generator_t nfsd_fs_t (file (ioctl read write getattr lock append open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_generator_t exports_t (dir (ioctl read getattr lock open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_generator_t exports_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                        )
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (optional systemd_optional_162
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require usr_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require bin_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require sshd_exec_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_generator_t bin_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_generator_t bin_t (lnk_file (read getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_generator_t usr_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_generator_t sshd_exec_t (file (ioctl read getattr lock map execute open execute_no_trans)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                        )
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (optional systemd_optional_163
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require etc_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require zfs_config_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_generator_t etc_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_generator_t zfs_config_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_generator_t zfs_config_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_generator_t zfs_config_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_generator_t zfs_config_t (lnk_file (read getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                        )
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (optional systemd_optional_164
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require init_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require var_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require var_run_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require system_dbusd_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require dbusd_system_bus_client)
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require system_dbusd_runtime_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require system_dbusd_var_lib_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require var_lib_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require session_dbusd_tmp_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require dbusd_etc_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require dbusd_system_bus_client)
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset dbusd_system_bus_client (systemd_homed_t ))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_homed_t system_dbusd_t (dbus (send_msg)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_homed_t self (dbus (send_msg)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow system_dbusd_t systemd_homed_t (dbus (send_msg)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_homed_t var_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_homed_t var_lib_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_homed_t system_dbusd_var_lib_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_homed_t system_dbusd_var_lib_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_homed_t system_dbusd_var_lib_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_homed_t system_dbusd_var_lib_t (lnk_file (read getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_homed_t session_dbusd_tmp_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_homed_t session_dbusd_tmp_t (sock_file (read write getattr append open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_homed_t var_run_t (lnk_file (read getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_homed_t var_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_homed_t var_run_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_homed_t system_dbusd_runtime_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_homed_t system_dbusd_runtime_t (sock_file (write getattr append open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_homed_t system_dbusd_t (unix_stream_socket (connectto)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_homed_t dbusd_etc_t (dir (ioctl read getattr lock open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_homed_t dbusd_etc_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_homed_t system_dbusd_runtime_t (dir (ioctl read getattr lock open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_homed_t system_dbusd_runtime_t (sock_file (read)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_homed_t system_dbusd_var_lib_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_homed_t system_dbusd_var_lib_t (lnk_file (read getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_homed_t system_dbusd_t (dbus (acquire_svc)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_homed_t init_t (dbus (send_msg)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow init_t systemd_homed_t (dbus (send_msg)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                        )
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (optional systemd_optional_165
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require var_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require mail_spool_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require var_spool_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_homed_t mail_spool_t (dir (ioctl read getattr lock open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_homed_t var_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_homed_t var_spool_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                        )
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (optional systemd_optional_166
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require unconfined_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_homed_t unconfined_t (dbus (send_msg)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                        )
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (optional systemd_optional_167
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require lvm_runtime_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_homework_t lvm_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_homework_t lvm_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_homework_t lvm_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_homework_t lvm_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                        )
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (optional systemd_optional_168
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require init_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require var_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require var_run_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require system_dbusd_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require dbusd_system_bus_client)
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require system_dbusd_runtime_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require system_dbusd_var_lib_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require var_lib_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require session_dbusd_tmp_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require dbusd_etc_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require dbusd_system_bus_client)
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset dbusd_system_bus_client (systemd_hostnamed_t ))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_hostnamed_t system_dbusd_t (dbus (acquire_svc)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_hostnamed_t system_dbusd_t (dbus (send_msg)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_hostnamed_t self (dbus (send_msg)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow system_dbusd_t systemd_hostnamed_t (dbus (send_msg)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_hostnamed_t var_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_hostnamed_t var_lib_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_hostnamed_t system_dbusd_var_lib_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_hostnamed_t system_dbusd_var_lib_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_hostnamed_t system_dbusd_var_lib_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_hostnamed_t system_dbusd_var_lib_t (lnk_file (read getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_hostnamed_t session_dbusd_tmp_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_hostnamed_t session_dbusd_tmp_t (sock_file (read write getattr append open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_hostnamed_t var_run_t (lnk_file (read getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_hostnamed_t var_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_hostnamed_t var_run_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_hostnamed_t system_dbusd_runtime_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_hostnamed_t system_dbusd_runtime_t (sock_file (write getattr append open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_hostnamed_t system_dbusd_t (unix_stream_socket (connectto)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_hostnamed_t dbusd_etc_t (dir (ioctl read getattr lock open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_hostnamed_t dbusd_etc_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_hostnamed_t system_dbusd_runtime_t (dir (ioctl read getattr lock open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_hostnamed_t system_dbusd_runtime_t (sock_file (read)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_hostnamed_t system_dbusd_var_lib_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_hostnamed_t system_dbusd_var_lib_t (lnk_file (read getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_hostnamed_t init_t (dbus (send_msg)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow init_t systemd_hostnamed_t (dbus (send_msg)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                        )
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (optional systemd_optional_169
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require NetworkManager_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_hostnamed_t NetworkManager_t (dbus (send_msg)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow NetworkManager_t systemd_hostnamed_t (dbus (send_msg)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                        )
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (optional systemd_optional_170
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require var_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require var_run_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require system_dbusd_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require dbusd_system_bus_client)
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require system_dbusd_runtime_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require system_dbusd_var_lib_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require var_lib_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require session_dbusd_tmp_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require dbusd_etc_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require dbusd_system_bus_client)
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset dbusd_system_bus_client (systemd_locale_t ))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_locale_t system_dbusd_t (dbus (acquire_svc)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_locale_t system_dbusd_t (dbus (send_msg)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_locale_t self (dbus (send_msg)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow system_dbusd_t systemd_locale_t (dbus (send_msg)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_locale_t var_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_locale_t var_lib_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_locale_t system_dbusd_var_lib_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_locale_t system_dbusd_var_lib_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_locale_t system_dbusd_var_lib_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_locale_t system_dbusd_var_lib_t (lnk_file (read getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_locale_t session_dbusd_tmp_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_locale_t session_dbusd_tmp_t (sock_file (read write getattr append open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_locale_t var_run_t (lnk_file (read getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_locale_t var_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_locale_t var_run_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_locale_t system_dbusd_runtime_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_locale_t system_dbusd_runtime_t (sock_file (write getattr append open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_locale_t system_dbusd_t (unix_stream_socket (connectto)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_locale_t dbusd_etc_t (dir (ioctl read getattr lock open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_locale_t dbusd_etc_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_locale_t system_dbusd_runtime_t (dir (ioctl read getattr lock open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_locale_t system_dbusd_runtime_t (sock_file (read)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_locale_t system_dbusd_var_lib_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_locale_t system_dbusd_var_lib_t (lnk_file (read getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (optional systemd_optional_171
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require var_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require var_run_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require system_dbusd_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require dbusd_system_bus_client)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require system_dbusd_runtime_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require system_dbusd_var_lib_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require var_lib_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require session_dbusd_tmp_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require dbusd_etc_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require dbusd_system_bus_client)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset dbusd_system_bus_client (systemd_logind_t ))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_logind_t system_dbusd_t (dbus (acquire_svc)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_logind_t system_dbusd_t (dbus (send_msg)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_logind_t self (dbus (send_msg)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow system_dbusd_t systemd_logind_t (dbus (send_msg)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_logind_t var_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_logind_t var_lib_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_logind_t system_dbusd_var_lib_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_logind_t system_dbusd_var_lib_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_logind_t system_dbusd_var_lib_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_logind_t system_dbusd_var_lib_t (lnk_file (read getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_logind_t session_dbusd_tmp_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_logind_t session_dbusd_tmp_t (sock_file (read write getattr append open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_logind_t var_run_t (lnk_file (read getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_logind_t var_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_logind_t var_run_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_logind_t system_dbusd_runtime_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_logind_t system_dbusd_runtime_t (sock_file (write getattr append open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_logind_t system_dbusd_t (unix_stream_socket (connectto)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_logind_t dbusd_etc_t (dir (ioctl read getattr lock open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_logind_t dbusd_etc_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_logind_t system_dbusd_runtime_t (dir (ioctl read getattr lock open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_logind_t system_dbusd_runtime_t (sock_file (read)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_logind_t system_dbusd_var_lib_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_logind_t system_dbusd_var_lib_t (lnk_file (read getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_logind_t system_dbusd_t (fd (use)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            )
                                                                                                                                                                                                                                                                                                                                                                                                                                                        )
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (optional systemd_optional_172
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require devicekit_disk_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require devicekit_power_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_logind_t devicekit_disk_t (dbus (send_msg)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow devicekit_disk_t systemd_logind_t (dbus (send_msg)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_logind_t devicekit_power_t (dbus (send_msg)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow devicekit_power_t systemd_logind_t (dbus (send_msg)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                        )
                                                                                                                                                                                                                                                                                                                                                                                                                                                        (optional systemd_optional_173
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (typeattributeset cil_gen_require local_login_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_logind_t local_login_t (fd (use)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (optional systemd_optional_174
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require modemmanager_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_logind_t modemmanager_t (dbus (send_msg)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow modemmanager_t systemd_logind_t (dbus (send_msg)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            )
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (optional systemd_optional_175
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require NetworkManager_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_logind_t NetworkManager_t (dbus (send_msg)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow NetworkManager_t systemd_logind_t (dbus (send_msg)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            )
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (optional systemd_optional_176
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require policykit_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_logind_t policykit_t (dbus (send_msg)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow policykit_t systemd_logind_t (dbus (send_msg)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            )
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (optional systemd_optional_177
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require usr_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require bin_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require shutdown_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require shutdown_exec_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_logind_t bin_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_logind_t bin_t (lnk_file (read getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_logind_t usr_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_logind_t shutdown_exec_t (file (ioctl read getattr map execute open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_logind_t shutdown_t (process (transition)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (dontaudit systemd_logind_t shutdown_t (process (noatsecure siginh rlimitinh)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (typetransition systemd_logind_t shutdown_exec_t process shutdown_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow shutdown_t systemd_logind_t (fd (use)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow shutdown_t systemd_logind_t (fifo_file (ioctl read write getattr lock append)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow shutdown_t systemd_logind_t (process (sigchld)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            )
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (optional systemd_optional_178
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require proc_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require xserver_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require xdm_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_logind_t xserver_t (dir (search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_logind_t xserver_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_logind_t xserver_t (dbus (send_msg)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow xserver_t systemd_logind_t (dbus (send_msg)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_logind_t xdm_t (dbus (send_msg)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow xdm_t systemd_logind_t (dbus (send_msg)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_logind_t proc_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_logind_t proc_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_logind_t xdm_t (dir (ioctl read getattr lock open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_logind_t xdm_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_logind_t xdm_t (lnk_file (read getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            )
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (optional systemd_optional_179
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require unconfined_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_logind_t unconfined_t (dbus (send_msg)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                            )
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (optional systemd_optional_180
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require initrc_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require init_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require var_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require var_run_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require system_dbusd_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require dbusd_system_bus_client)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require system_dbusd_runtime_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require system_dbusd_var_lib_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require var_lib_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require session_dbusd_tmp_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require dbusd_etc_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require dbusd_system_bus_client)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset dbusd_system_bus_client (systemd_machined_t ))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_machined_t init_t (dbus (send_msg)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow init_t systemd_machined_t (dbus (send_msg)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_machined_t initrc_t (dbus (send_msg)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_machined_t system_dbusd_t (dbus (acquire_svc)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_machined_t system_dbusd_t (dbus (send_msg)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_machined_t self (dbus (send_msg)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow system_dbusd_t systemd_machined_t (dbus (send_msg)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_machined_t var_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_machined_t var_lib_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_machined_t system_dbusd_var_lib_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_machined_t system_dbusd_var_lib_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_machined_t system_dbusd_var_lib_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_machined_t system_dbusd_var_lib_t (lnk_file (read getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_machined_t session_dbusd_tmp_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_machined_t session_dbusd_tmp_t (sock_file (read write getattr append open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_machined_t var_run_t (lnk_file (read getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_machined_t var_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_machined_t var_run_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_machined_t system_dbusd_runtime_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_machined_t system_dbusd_runtime_t (sock_file (write getattr append open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_machined_t system_dbusd_t (unix_stream_socket (connectto)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_machined_t dbusd_etc_t (dir (ioctl read getattr lock open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_machined_t dbusd_etc_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_machined_t system_dbusd_runtime_t (dir (ioctl read getattr lock open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_machined_t system_dbusd_runtime_t (sock_file (read)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_machined_t system_dbusd_var_lib_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_machined_t system_dbusd_var_lib_t (lnk_file (read getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (optional systemd_optional_181
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require unconfined_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_machined_t unconfined_t (dbus (send_msg)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                )
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (optional systemd_optional_182
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require var_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require var_run_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require systemd_hostnamed_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (roletype system_r systemd_hostnamed_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require system_dbusd_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require dbusd_system_bus_client)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require system_dbusd_runtime_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require system_dbusd_var_lib_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require var_lib_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require session_dbusd_tmp_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require dbusd_etc_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require dbusd_system_bus_client)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset dbusd_system_bus_client (systemd_networkd_t ))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_networkd_t system_dbusd_t (dbus (send_msg)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_networkd_t self (dbus (send_msg)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow system_dbusd_t systemd_networkd_t (dbus (send_msg)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_networkd_t var_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_networkd_t var_lib_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_networkd_t system_dbusd_var_lib_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_networkd_t system_dbusd_var_lib_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_networkd_t system_dbusd_var_lib_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_networkd_t system_dbusd_var_lib_t (lnk_file (read getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_networkd_t session_dbusd_tmp_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_networkd_t session_dbusd_tmp_t (sock_file (read write getattr append open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_networkd_t var_run_t (lnk_file (read getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_networkd_t var_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_networkd_t var_run_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_networkd_t system_dbusd_runtime_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_networkd_t system_dbusd_runtime_t (sock_file (write getattr append open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_networkd_t system_dbusd_t (unix_stream_socket (connectto)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_networkd_t dbusd_etc_t (dir (ioctl read getattr lock open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_networkd_t dbusd_etc_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_networkd_t system_dbusd_runtime_t (dir (ioctl read getattr lock open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_networkd_t system_dbusd_runtime_t (sock_file (read)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_networkd_t system_dbusd_var_lib_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_networkd_t system_dbusd_var_lib_t (lnk_file (read getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_networkd_t system_dbusd_t (dbus (acquire_svc)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_networkd_t system_dbusd_runtime_t (dir (watch)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_networkd_t system_dbusd_runtime_t (sock_file (watch)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_networkd_t systemd_hostnamed_t (dbus (send_msg)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_hostnamed_t systemd_networkd_t (dbus (send_msg)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                )
                                                                                                                                                                                                                                                                                                                                                                                                                                                            )
                                                                                                                                                                                                                                                                                                                                                                                                                                                            (optional systemd_optional_183
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require var_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require var_run_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (typeattributeset cil_gen_require udev_runtime_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_networkd_t var_run_t (lnk_file (read getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_networkd_t var_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_networkd_t var_run_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_networkd_t udev_runtime_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_networkd_t udev_runtime_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_networkd_t udev_runtime_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (allow systemd_networkd_t udev_runtime_t (lnk_file (read getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (optional systemd_optional_184
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require var_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require var_run_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require system_dbusd_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require dbusd_system_bus_client)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require system_dbusd_runtime_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require system_dbusd_var_lib_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require var_lib_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require session_dbusd_tmp_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require dbusd_etc_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require systemd_machined_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (roletype system_r systemd_machined_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require dbusd_system_bus_client)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset dbusd_system_bus_client (systemd_nspawn_t ))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_nspawn_t system_dbusd_t (dbus (send_msg)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_nspawn_t self (dbus (send_msg)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow system_dbusd_t systemd_nspawn_t (dbus (send_msg)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_nspawn_t var_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_nspawn_t var_lib_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_nspawn_t system_dbusd_var_lib_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_nspawn_t system_dbusd_var_lib_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_nspawn_t system_dbusd_var_lib_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_nspawn_t system_dbusd_var_lib_t (lnk_file (read getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_nspawn_t session_dbusd_tmp_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_nspawn_t session_dbusd_tmp_t (sock_file (read write getattr append open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_nspawn_t var_run_t (lnk_file (read getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_nspawn_t var_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_nspawn_t var_run_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_nspawn_t system_dbusd_runtime_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_nspawn_t system_dbusd_runtime_t (sock_file (write getattr append open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_nspawn_t system_dbusd_t (unix_stream_socket (connectto)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_nspawn_t dbusd_etc_t (dir (ioctl read getattr lock open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_nspawn_t dbusd_etc_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_nspawn_t system_dbusd_runtime_t (dir (ioctl read getattr lock open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_nspawn_t system_dbusd_runtime_t (sock_file (read)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_nspawn_t system_dbusd_var_lib_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_nspawn_t system_dbusd_var_lib_t (lnk_file (read getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_nspawn_t systemd_machined_t (dbus (send_msg)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_machined_t systemd_nspawn_t (dbus (send_msg)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                )
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (optional systemd_optional_185
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require home_root_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require nfs_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require cifs_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require user_home_dir_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require virt_content_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_nspawn_t user_home_dir_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_nspawn_t home_root_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_nspawn_t home_root_t (lnk_file (read getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_nspawn_t virt_content_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_nspawn_t virt_content_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_nspawn_t virt_content_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_nspawn_t virt_content_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_nspawn_t virt_content_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_nspawn_t virt_content_t (blk_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (booleanif (virt_use_samba)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        (true
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_nspawn_t cifs_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_nspawn_t cifs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_nspawn_t cifs_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_nspawn_t cifs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_nspawn_t cifs_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        )
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    )
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (booleanif (virt_use_nfs)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        (true
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_nspawn_t nfs_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_nspawn_t nfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_nspawn_t nfs_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_nspawn_t nfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_nspawn_t nfs_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        )
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    )
                                                                                                                                                                                                                                                                                                                                                                                                                                                                )
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (optional systemd_optional_186
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require getty_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_passwd_agent_t getty_t (fd (use)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                )
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (optional systemd_optional_187
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require lvm_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_passwd_agent_t lvm_t (process (signull)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                )
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (optional systemd_optional_188
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require var_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require var_spool_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require plymouthd_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require plymouthd_spool_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_passwd_agent_t var_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_passwd_agent_t var_spool_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_passwd_agent_t plymouthd_spool_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_passwd_agent_t plymouthd_spool_t (sock_file (write getattr append open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_passwd_agent_t plymouthd_t (unix_stream_socket (connectto)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                )
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (optional systemd_optional_189
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require var_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require var_run_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require system_dbusd_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require dbusd_system_bus_client)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require system_dbusd_runtime_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require system_dbusd_var_lib_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require var_lib_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require session_dbusd_tmp_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require dbusd_etc_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require dbusd_system_bus_client)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset dbusd_system_bus_client (systemd_resolved_t ))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_resolved_t system_dbusd_t (dbus (acquire_svc)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_resolved_t system_dbusd_t (dbus (send_msg)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_resolved_t self (dbus (send_msg)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow system_dbusd_t systemd_resolved_t (dbus (send_msg)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_resolved_t var_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_resolved_t var_lib_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_resolved_t system_dbusd_var_lib_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_resolved_t system_dbusd_var_lib_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_resolved_t system_dbusd_var_lib_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_resolved_t system_dbusd_var_lib_t (lnk_file (read getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_resolved_t session_dbusd_tmp_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_resolved_t session_dbusd_tmp_t (sock_file (read write getattr append open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_resolved_t var_run_t (lnk_file (read getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_resolved_t var_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_resolved_t var_run_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_resolved_t system_dbusd_runtime_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_resolved_t system_dbusd_runtime_t (sock_file (write getattr append open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_resolved_t system_dbusd_t (unix_stream_socket (connectto)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_resolved_t dbusd_etc_t (dir (ioctl read getattr lock open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_resolved_t dbusd_etc_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_resolved_t system_dbusd_runtime_t (dir (ioctl read getattr lock open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_resolved_t system_dbusd_runtime_t (sock_file (read)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_resolved_t system_dbusd_var_lib_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_resolved_t system_dbusd_var_lib_t (lnk_file (read getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_resolved_t system_dbusd_runtime_t (dir (watch)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_resolved_t system_dbusd_runtime_t (sock_file (watch)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                )
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (optional systemd_optional_190
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require var_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require var_run_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require avahi_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require avahi_runtime_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_socket_proxyd_t var_run_t (lnk_file (read getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_socket_proxyd_t var_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_socket_proxyd_t var_run_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_socket_proxyd_t avahi_runtime_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_socket_proxyd_t avahi_runtime_t (sock_file (write getattr append open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_socket_proxyd_t avahi_t (unix_stream_socket (connectto)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                )
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (optional systemd_optional_191
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require var_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require var_run_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require NetworkManager_runtime_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_socket_proxyd_t var_run_t (lnk_file (read getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_socket_proxyd_t var_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_socket_proxyd_t var_run_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_socket_proxyd_t NetworkManager_runtime_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_socket_proxyd_t NetworkManager_runtime_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                )
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (optional systemd_optional_192
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require var_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require var_run_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require nscd_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require nscd_runtime_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (booleanif (nscd_use_shm)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        (true
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_socket_proxyd_t nscd_runtime_t (sock_file (read getattr open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_socket_proxyd_t nscd_runtime_t (dir (ioctl read getattr lock open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            (dontaudit systemd_socket_proxyd_t nscd_runtime_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_socket_proxyd_t nscd_t (unix_stream_socket (connectto)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_socket_proxyd_t nscd_runtime_t (sock_file (write getattr append open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_socket_proxyd_t nscd_runtime_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_socket_proxyd_t var_run_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_socket_proxyd_t var_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_socket_proxyd_t var_run_t (lnk_file (read getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_socket_proxyd_t nscd_t (fd (use)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_socket_proxyd_t nscd_t (nscd (getgrp gethost getpwd shmemgrp shmemhost shmempwd)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_socket_proxyd_t self (unix_stream_socket (ioctl read write create getattr setattr append bind connect listen accept getopt setopt shutdown)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        )
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        (false
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow nscd_t systemd_socket_proxyd_t (process (getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow nscd_t systemd_socket_proxyd_t (lnk_file (read getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow nscd_t systemd_socket_proxyd_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow nscd_t systemd_socket_proxyd_t (dir (ioctl read getattr lock open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            (dontaudit systemd_socket_proxyd_t nscd_runtime_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_socket_proxyd_t nscd_t (unix_stream_socket (connectto)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_socket_proxyd_t nscd_runtime_t (sock_file (write getattr append open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_socket_proxyd_t nscd_runtime_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_socket_proxyd_t var_run_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_socket_proxyd_t var_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_socket_proxyd_t var_run_t (lnk_file (read getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            (dontaudit systemd_socket_proxyd_t nscd_t (nscd (shmemgrp shmemhost shmempwd getserv shmemserv)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            (dontaudit systemd_socket_proxyd_t nscd_t (fd (use)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_socket_proxyd_t nscd_t (nscd (getgrp gethost getpwd)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            (allow systemd_socket_proxyd_t self (unix_stream_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        )
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    )
                                                                                                                                                                                                                                                                                                                                                                                                                                                                )
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (optional systemd_optional_193
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require var_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require system_dbusd_var_lib_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require var_lib_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_tmpfiles_t var_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_tmpfiles_t var_lib_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_tmpfiles_t system_dbusd_var_lib_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_tmpfiles_t system_dbusd_var_lib_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_tmpfiles_t system_dbusd_var_lib_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_tmpfiles_t system_dbusd_var_lib_t (lnk_file (read getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_tmpfiles_t var_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_tmpfiles_t var_lib_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_tmpfiles_t system_dbusd_var_lib_t (dir (getattr relabelfrom relabelto)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                )
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (optional systemd_optional_194
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require apt_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require dpkg_script_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_tmpfiles_t apt_t (fd (use)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_tmpfiles_t dpkg_script_t (fd (use)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_tmpfiles_t dpkg_script_t (fifo_file (ioctl read write getattr lock append)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                )
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (optional systemd_optional_195
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require screen_runtime_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (dontaudit systemd_tmpfiles_t screen_runtime_t (sock_file (getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                )
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (optional systemd_optional_196
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require tmp_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require xfs_tmp_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_tmpfiles_t tmp_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_tmpfiles_t xfs_tmp_t (dir (create)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                )
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (optional systemd_optional_197
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require xconsole_device_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require xdm_tmp_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_tmpfiles_t xconsole_device_t (fifo_file (create)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_tmpfiles_t xdm_tmp_t (dir (create)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_tmpfiles_t xconsole_device_t (fifo_file (getattr relabelfrom relabelto)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_tmpfiles_t xconsole_device_t (fifo_file (setattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                )
                                                                                                                                                                                                                                                                                                                                                                                                                                                                (optional systemd_optional_198
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require var_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require var_run_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require system_dbusd_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require dbusd_system_bus_client)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require system_dbusd_runtime_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require system_dbusd_var_lib_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require var_lib_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require session_dbusd_tmp_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require dbusd_etc_t)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset cil_gen_require dbusd_system_bus_client)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (typeattributeset dbusd_system_bus_client (systemd_user_runtime_dir_t ))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_user_runtime_dir_t system_dbusd_t (dbus (send_msg)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_user_runtime_dir_t self (dbus (send_msg)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow system_dbusd_t systemd_user_runtime_dir_t (dbus (send_msg)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_user_runtime_dir_t var_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_user_runtime_dir_t var_lib_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_user_runtime_dir_t system_dbusd_var_lib_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_user_runtime_dir_t system_dbusd_var_lib_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_user_runtime_dir_t system_dbusd_var_lib_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_user_runtime_dir_t system_dbusd_var_lib_t (lnk_file (read getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_user_runtime_dir_t session_dbusd_tmp_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_user_runtime_dir_t session_dbusd_tmp_t (sock_file (read write getattr append open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_user_runtime_dir_t var_run_t (lnk_file (read getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_user_runtime_dir_t var_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_user_runtime_dir_t var_run_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_user_runtime_dir_t system_dbusd_runtime_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_user_runtime_dir_t system_dbusd_runtime_t (sock_file (write getattr append open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_user_runtime_dir_t system_dbusd_t (unix_stream_socket (connectto)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_user_runtime_dir_t dbusd_etc_t (dir (ioctl read getattr lock open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_user_runtime_dir_t dbusd_etc_t (file (ioctl read getattr lock open)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_user_runtime_dir_t system_dbusd_runtime_t (dir (ioctl read getattr lock open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_user_runtime_dir_t system_dbusd_runtime_t (sock_file (read)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_user_runtime_dir_t system_dbusd_var_lib_t (dir (getattr open search)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    (allow systemd_user_runtime_dir_t system_dbusd_var_lib_t (lnk_file (read getattr)))
                                                                                                                                                                                                                                                                                                                                                                                                                                                                )
                                                                                                                                                                                                                                                                                                                                                                                                                                                            )
                                                                                                                                                                                                                                                                                                                                                                                                                                                        )
                                                                                                                                                                                                                                                                                                                                                                                                                                                    )
                                                                                                                                                                                                                                                                                                                                                                                                                                                )
                                                                                                                                                                                                                                                                                                                                                                                                                                            )
                                                                                                                                                                                                                                                                                                                                                                                                                                        )
                                                                                                                                                                                                                                                                                                                                                                                                                                    )
                                                                                                                                                                                                                                                                                                                                                                                                                                )
                                                                                                                                                                                                                                                                                                                                                                                                                            )
                                                                                                                                                                                                                                                                                                                                                                                                                        )
                                                                                                                                                                                                                                                                                                                                                                                                                    )
                                                                                                                                                                                                                                                                                                                                                                                                                )
                                                                                                                                                                                                                                                                                                                                                                                                            )
                                                                                                                                                                                                                                                                                                                                                                                                        )
                                                                                                                                                                                                                                                                                                                                                                                                    )
                                                                                                                                                                                                                                                                                                                                                                                                )
                                                                                                                                                                                                                                                                                                                                                                                            )
                                                                                                                                                                                                                                                                                                                                                                                        )
                                                                                                                                                                                                                                                                                                                                                                                    )
                                                                                                                                                                                                                                                                                                                                                                                )
                                                                                                                                                                                                                                                                                                                                                                            )
                                                                                                                                                                                                                                                                                                                                                                        )
                                                                                                                                                                                                                                                                                                                                                                    )
                                                                                                                                                                                                                                                                                                                                                                )
                                                                                                                                                                                                                                                                                                                                                            )
                                                                                                                                                                                                                                                                                                                                                        )
                                                                                                                                                                                                                                                                                                                                                    )
                                                                                                                                                                                                                                                                                                                                                )
                                                                                                                                                                                                                                                                                                                                            )
                                                                                                                                                                                                                                                                                                                                        )
                                                                                                                                                                                                                                                                                                                                    )
                                                                                                                                                                                                                                                                                                                                )
                                                                                                                                                                                                                                                                                                                            )
                                                                                                                                                                                                                                                                                                                        )
                                                                                                                                                                                                                                                                                                                    )
                                                                                                                                                                                                                                                                                                                )
                                                                                                                                                                                                                                                                                                            )
                                                                                                                                                                                                                                                                                                        )
                                                                                                                                                                                                                                                                                                    )
                                                                                                                                                                                                                                                                                                )
                                                                                                                                                                                                                                                                                            )
                                                                                                                                                                                                                                                                                        )
                                                                                                                                                                                                                                                                                    )
                                                                                                                                                                                                                                                                                )
                                                                                                                                                                                                                                                                            )
                                                                                                                                                                                                                                                                        )
                                                                                                                                                                                                                                                                    )
                                                                                                                                                                                                                                                                )
                                                                                                                                                                                                                                                            )
                                                                                                                                                                                                                                                        )
                                                                                                                                                                                                                                                    )
                                                                                                                                                                                                                                                )
                                                                                                                                                                                                                                            )
                                                                                                                                                                                                                                        )
                                                                                                                                                                                                                                    )
                                                                                                                                                                                                                                )
                                                                                                                                                                                                                            )
                                                                                                                                                                                                                        )
                                                                                                                                                                                                                    )
                                                                                                                                                                                                                )
                                                                                                                                                                                                            )
                                                                                                                                                                                                        )
                                                                                                                                                                                                    )
                                                                                                                                                                                                )
                                                                                                                                                                                            )
                                                                                                                                                                                        )
                                                                                                                                                                                    )
                                                                                                                                                                                )
                                                                                                                                                                            )
                                                                                                                                                                        )
                                                                                                                                                                    )
                                                                                                                                                                )
                                                                                                                                                            )
                                                                                                                                                        )
                                                                                                                                                    )
                                                                                                                                                )
                                                                                                                                            )
                                                                                                                                        )
                                                                                                                                    )
                                                                                                                                )
                                                                                                                            )
                                                                                                                        )
                                                                                                                    )
                                                                                                                )
                                                                                                            )
                                                                                                        )
                                                                                                    )
                                                                                                )
                                                                                            )
                                                                                        )
                                                                                    )
                                                                                )
                                                                            )
                                                                        )
                                                                    )
                                                                )
                                                            )
                                                        )
                                                    )
                                                )
                                            )
                                        )
                                    )
                                )
                            )
                        )
                    )
                )
            )
        )
    )
)
(filecon "/etc/\.updated" file (system_u object_r systemd_update_run_t (systemlow systemlow)))
(filecon "/etc/systemd/dont-synthesize-nobody" file (system_u object_r systemd_conf_t (systemlow systemlow)))
(filecon "/etc/udev/hwdb\.bin" file (system_u object_r systemd_hwdb_t (systemlow systemlow)))
(filecon "/run/log/systemd(/.*)?" any (system_u object_r systemd_log_t (systemlow systemlow)))
(filecon "/usr/bin/journalctl" file (system_u object_r systemd_journalctl_exec_t (systemlow systemlow)))
(filecon "/usr/bin/systemd-analyze" file (system_u object_r systemd_analyze_exec_t (systemlow systemlow)))
(filecon "/usr/bin/systemd-cgtop" file (system_u object_r systemd_cgtop_exec_t (systemlow systemlow)))
(filecon "/usr/bin/systemd-coredump" file (system_u object_r systemd_coredump_exec_t (systemlow systemlow)))
(filecon "/usr/bin/systemd-hwdb" file (system_u object_r systemd_hw_exec_t (systemlow systemlow)))
(filecon "/usr/bin/systemd-machine-id-setup" file (system_u object_r systemd_machine_id_setup_exec_t (systemlow systemlow)))
(filecon "/usr/bin/systemd-nspawn" file (system_u object_r systemd_nspawn_exec_t (systemlow systemlow)))
(filecon "/usr/bin/systemd-stdio-bridge" file (system_u object_r systemd_stdio_bridge_exec_t (systemlow systemlow)))
(filecon "/usr/bin/systemd-sysusers" file (system_u object_r systemd_sysusers_exec_t (systemlow systemlow)))
(filecon "/usr/bin/systemd-tmpfiles" file (system_u object_r systemd_tmpfiles_exec_t (systemlow systemlow)))
(filecon "/usr/bin/systemd-tty-ask-password-agent" file (system_u object_r systemd_passwd_agent_exec_t (systemlow systemlow)))
(filecon "/usr/bin/systemd-notify" file (system_u object_r systemd_notify_exec_t (systemlow systemlow)))
(filecon "/usr/lib/elogind/elogind" file (system_u object_r systemd_logind_exec_t (systemlow systemlow)))
(filecon "/usr/lib/elogind/elogind-cgroups-agent" file (system_u object_r systemd_logind_exec_t (systemlow systemlow)))
(filecon "/usr/lib/elogind/elogind-uaccess-command" file (system_u object_r systemd_logind_exec_t (systemlow systemlow)))
(filecon "/usr/lib/systemd/system-environment-generators/.*" file (system_u object_r systemd_generator_exec_t (systemlow systemlow)))
(filecon "/usr/lib/systemd/system-generators/.*" file (system_u object_r systemd_generator_exec_t (systemlow systemlow)))
(filecon "/usr/lib/systemd/user-environment-generators/.*" file (system_u object_r systemd_generator_exec_t (systemlow systemlow)))
(filecon "/usr/lib/systemd/user-generators/.*" file (system_u object_r systemd_generator_exec_t (systemlow systemlow)))
(filecon "/usr/libexec/podman/quadlet" file (system_u object_r systemd_generator_exec_t (systemlow systemlow)))
(filecon "/usr/lib/systemd/systemd-activate" file (system_u object_r systemd_activate_exec_t (systemlow systemlow)))
(filecon "/usr/lib/systemd/systemd-backlight" file (system_u object_r systemd_backlight_exec_t (systemlow systemlow)))
(filecon "/usr/lib/systemd/systemd-binfmt" file (system_u object_r systemd_binfmt_exec_t (systemlow systemlow)))
(filecon "/usr/lib/systemd/systemd-cgroups-agent" file (system_u object_r systemd_cgroups_exec_t (systemlow systemlow)))
(filecon "/usr/lib/systemd/systemd-coredump" file (system_u object_r systemd_coredump_exec_t (systemlow systemlow)))
(filecon "/usr/lib/systemd/systemd-homed" file (system_u object_r systemd_homed_exec_t (systemlow systemlow)))
(filecon "/usr/lib/systemd/systemd-homework" file (system_u object_r systemd_homework_exec_t (systemlow systemlow)))
(filecon "/usr/lib/systemd/systemd-hostnamed" file (system_u object_r systemd_hostnamed_exec_t (systemlow systemlow)))
(filecon "/usr/lib/systemd/systemd-localed" file (system_u object_r systemd_locale_exec_t (systemlow systemlow)))
(filecon "/usr/lib/systemd/systemd-logind" file (system_u object_r systemd_logind_exec_t (systemlow systemlow)))
(filecon "/usr/lib/systemd/systemd-machined" file (system_u object_r systemd_machined_exec_t (systemlow systemlow)))
(filecon "/usr/lib/systemd/systemd-modules-load" file (system_u object_r systemd_modules_load_exec_t (systemlow systemlow)))
(filecon "/usr/lib/systemd/systemd-networkd" file (system_u object_r systemd_networkd_exec_t (systemlow systemlow)))
(filecon "/usr/lib/systemd/systemd-network-generator" file (system_u object_r systemd_networkd_exec_t (systemlow systemlow)))
(filecon "/usr/lib/systemd/systemd-nsresourced" file (system_u object_r systemd_nsresourced_exec_t (systemlow systemlow)))
(filecon "/usr/lib/systemd/systemd-nsresourcework" file (system_u object_r systemd_nsresourced_exec_t (systemlow systemlow)))
(filecon "/usr/lib/systemd/systemd-pcrextend" file (system_u object_r systemd_pcrphase_exec_t (systemlow systemlow)))
(filecon "/usr/lib/systemd/systemd-pcrlock" file (system_u object_r systemd_pcrphase_exec_t (systemlow systemlow)))
(filecon "/usr/lib/systemd/systemd-pcrphase" file (system_u object_r systemd_pcrphase_exec_t (systemlow systemlow)))
(filecon "/usr/lib/systemd/systemd-pstore" file (system_u object_r systemd_pstore_exec_t (systemlow systemlow)))
(filecon "/usr/lib/systemd/systemd-resolved" file (system_u object_r systemd_resolved_exec_t (systemlow systemlow)))
(filecon "/usr/lib/systemd/systemd-rfkill" file (system_u object_r systemd_rfkill_exec_t (systemlow systemlow)))
(filecon "/usr/lib/systemd/systemd-socket-proxyd" file (system_u object_r systemd_socket_proxyd_exec_t (systemlow systemlow)))
(filecon "/usr/lib/systemd/systemd-sysctl" file (system_u object_r systemd_sysctl_exec_t (systemlow systemlow)))
(filecon "/usr/lib/systemd/systemd-tpm2-setup" file (system_u object_r systemd_pcrphase_exec_t (systemlow systemlow)))
(filecon "/usr/lib/systemd/systemd-update-done" file (system_u object_r systemd_update_done_exec_t (systemlow systemlow)))
(filecon "/usr/lib/systemd/systemd-user-runtime-dir" file (system_u object_r systemd_user_runtime_dir_exec_t (systemlow systemlow)))
(filecon "/usr/lib/systemd/systemd-user-sessions" file (system_u object_r systemd_sessions_exec_t (systemlow systemlow)))
(filecon "/usr/lib/systemd/systemd-userdbd" file (system_u object_r systemd_userdbd_exec_t (systemlow systemlow)))
(filecon "/usr/lib/systemd/systemd-userwork" file (system_u object_r systemd_userdbd_exec_t (systemlow systemlow)))
(filecon "HOME_DIR/\.config/containers/systemd(/.*)?" any (system_u object_r systemd_conf_home_t (systemlow systemlow)))
(filecon "HOME_DIR/\.config/systemd(/.*)?" any (system_u object_r systemd_conf_home_t (systemlow systemlow)))
(filecon "HOME_DIR/\.local/share/systemd(/.*)?" any (system_u object_r systemd_data_home_t (systemlow systemlow)))
(filecon "HOME_DIR/\.identity" file (system_u object_r systemd_homed_record_t (systemlow systemlow)))
(filecon "HOME_DIR/\.identity-blob(/.*)?" any (system_u object_r systemd_homed_record_t (systemlow systemlow)))
(filecon "HOME_ROOT/.+\.home" file (system_u object_r systemd_homed_storage_t (systemlow systemlow)))
(filecon "/usr/lib/systemd/user(/.*)?" any (system_u object_r systemd_user_unit_t (systemlow systemlow)))
(filecon "/usr/lib/systemd/system/[^/]*halt.*" file (system_u object_r power_unit_t (systemlow systemlow)))
(filecon "/usr/lib/systemd/system/[^/]*hibernate.*" file (system_u object_r power_unit_t (systemlow systemlow)))
(filecon "/usr/lib/systemd/system/[^/]*power.*" file (system_u object_r power_unit_t (systemlow systemlow)))
(filecon "/usr/lib/systemd/system/[^/]*reboot.*" file (system_u object_r power_unit_t (systemlow systemlow)))
(filecon "/usr/lib/systemd/system/[^/]*shutdown.*" file (system_u object_r power_unit_t (systemlow systemlow)))
(filecon "/usr/lib/systemd/system/[^/]*sleep.*" file (system_u object_r power_unit_t (systemlow systemlow)))
(filecon "/usr/lib/systemd/system/[^/]*suspend.*" file (system_u object_r power_unit_t (systemlow systemlow)))
(filecon "/usr/lib/systemd/system/systemd-backlight.*" file (system_u object_r systemd_backlight_unit_t (systemlow systemlow)))
(filecon "/usr/lib/systemd/system/systemd-binfmt.*" file (system_u object_r systemd_binfmt_unit_t (systemlow systemlow)))
(filecon "/usr/lib/systemd/system/systemd-networkd.*" any (system_u object_r systemd_networkd_unit_t (systemlow systemlow)))
(filecon "/usr/lib/systemd/system/systemd-network-generator.*" any (system_u object_r systemd_networkd_unit_t (systemlow systemlow)))
(filecon "/usr/lib/systemd/system/systemd-rfkill.*" file (system_u object_r systemd_rfkill_unit_t (systemlow systemlow)))
(filecon "/usr/lib/systemd/system/systemd-socket-proxyd\.service" file (system_u object_r systemd_socket_proxyd_unit_file_t (systemlow systemlow)))
(filecon "/usr/lib/systemd/system/systemd-userdbd\.(service|socket)" file (system_u object_r systemd_userdbd_unit_t (systemlow systemlow)))
(filecon "/usr/lib/systemd/system/user@\.service" file (system_u object_r systemd_user_manager_unit_t (systemlow systemlow)))
(filecon "/usr/share/factory(/.*)?" any (system_u object_r systemd_factory_conf_t (systemlow systemlow)))
(filecon "/var/\.updated" file (system_u object_r systemd_update_run_t (systemlow systemlow)))
(filecon "/var/lib/systemd/catalog(/.*)?" any (system_u object_r systemd_journal_t (systemlow systemlow)))
(filecon "/var/lib/systemd/backlight(/.*)?" any (system_u object_r systemd_backlight_var_lib_t (systemlow systemlow)))
(filecon "/var/lib/systemd/coredump(/.*)?" any (system_u object_r systemd_coredump_var_lib_t (systemlow systemlow)))
(filecon "/var/lib/systemd/home(/.*)?" any (system_u object_r systemd_homed_var_lib_t (systemlow systemlow)))
(filecon "/var/lib/systemd/linger(/.*)?" any (system_u object_r systemd_logind_var_lib_t (systemlow systemlow)))
(filecon "/var/lib/systemd/network(/.*)?" any (system_u object_r systemd_networkd_var_lib_t (systemlow systemlow)))
(filecon "/var/lib/systemd/pstore(/.*)?" any (system_u object_r systemd_pstore_var_lib_t (systemlow systemlow)))
(filecon "/var/lib/systemd/rfkill(/.*)?" any (system_u object_r systemd_rfkill_var_lib_t (systemlow systemlow)))
(filecon "/run/\.nologin[^/]*" file (system_u object_r systemd_sessions_runtime_t (systemlow systemlow)))
(filecon "/run/elogind\.pid" file (system_u object_r systemd_logind_runtime_t (systemlow systemlow)))
(filecon "/run/nologin" file (system_u object_r systemd_sessions_runtime_t (systemlow systemlow)))
(filecon "/run/user/%{USERID}/systemd" dir (system_u object_r systemd_user_runtime_t (systemlow systemlow)))
(filecon "/run/user/%{USERID}/systemd/generator(/.*)?" any (system_u object_r systemd_user_runtime_unit_t (systemlow systemlow)))
(filecon "/run/user/%{USERID}/systemd/generator\.early(/.*)?" any (system_u object_r systemd_user_runtime_unit_t (systemlow systemlow)))
(filecon "/run/user/%{USERID}/systemd/generator\.late(/.*)?" any (system_u object_r systemd_user_runtime_unit_t (systemlow systemlow)))
(filecon "/run/user/%{USERID}/systemd/transient(/.*)?" any (system_u object_r systemd_user_transient_unit_t (systemlow systemlow)))
(filecon "/run/user/%{USERID}/systemd/user(/.*)?" any (system_u object_r systemd_user_runtime_unit_t (systemlow systemlow)))
(filecon "/run/systemd/ask-password(/.*)?" any (system_u object_r systemd_passwd_runtime_t (systemlow systemlow)))
(filecon "/run/systemd/ask-password-block(/.*)?" any (system_u object_r systemd_passwd_runtime_t (systemlow systemlow)))
(filecon "/run/systemd/home(/.*)?" any (system_u object_r systemd_homed_runtime_t (systemlow systemlow)))
(filecon "/run/systemd/user-home-mount" dir (system_u object_r systemd_homed_runtime_work_dir_t (systemlow systemlow)))
(filecon "/run/systemd/network(/.*)?" any (system_u object_r systemd_networkd_runtime_t (systemlow systemlow)))
(filecon "/run/systemd/notify" socket (system_u object_r systemd_runtime_notify_t (systemlow systemlow)))
(filecon "/run/systemd/resolve(/.*)?" any (system_u object_r systemd_resolved_runtime_t (systemlow systemlow)))
(filecon "/run/systemd/seats(/.*)?" any (system_u object_r systemd_sessions_runtime_t (systemlow systemlow)))
(filecon "/run/systemd/sessions(/.*)?" any (system_u object_r systemd_sessions_runtime_t (systemlow systemlow)))
(filecon "/run/systemd/shutdown(/.*)?" any (system_u object_r systemd_logind_runtime_t (systemlow systemlow)))
(filecon "/run/systemd/users(/.*)?" any (system_u object_r systemd_logind_runtime_t (systemlow systemlow)))
(filecon "/run/systemd/userdb(/.*)?" any (system_u object_r systemd_userdbd_runtime_t (systemlow systemlow)))
(filecon "/run/systemd/inhibit(/.*)?" any (system_u object_r systemd_logind_inhibit_runtime_t (systemlow systemlow)))
(filecon "/run/systemd/nspawn(/.*)?" any (system_u object_r systemd_nspawn_runtime_t (systemlow systemlow)))
(filecon "/run/systemd/machines(/.*)?" any (system_u object_r systemd_machined_runtime_t (systemlow systemlow)))
(filecon "/run/systemd/netif(/.*)?" any (system_u object_r systemd_networkd_runtime_t (systemlow systemlow)))
(filecon "/run/systemd/nsresource(/.*)?" any (system_u object_r systemd_nsresourced_runtime_t (systemlow systemlow)))
(filecon "/run/systemd/io\.systemd\.NamespaceResource" socket (system_u object_r systemd_nsresourced_runtime_t (systemlow systemlow)))
(filecon "/var/log/journal(/.*)?" any (system_u object_r systemd_journal_t (systemlow systemlow)))
(filecon "/run/log/journal(/.*)?" any (system_u object_r systemd_journal_t (systemlow systemlow)))
