(typealias ada_t)
(typealiasactual ada_t unconfined_execmem_t)
(typealias ada_exec_t)
(typealiasactual ada_exec_t unconfined_execmem_exec_t)
(role unconfined_r)
(roletype unconfined_r unconfined_t)
(roletype unconfined_r unconfined_execmem_t)
(roletype unconfined_r ldconfig_t)
(roletype unconfined_r auditctl_t)
(roletype unconfined_r unconfined_mount_t)
(roletype unconfined_r setfiles_t)
(typeattribute unconfined_file_type)
(typeattribute unconfined_application_exec_domain)
(typeattributeset unconfined_application_exec_domain (unconfined_t ))
(type unconfined_t)
(roletype object_r unconfined_t)
(type unconfined_exec_t)
(roletype object_r unconfined_exec_t)
(type unconfined_execmem_t)
(roletype object_r unconfined_execmem_t)
(type unconfined_execmem_exec_t)
(roletype object_r unconfined_execmem_exec_t)
(user unconfined_u)
(userrole unconfined_u object_r)
(userrole unconfined_u unconfined_r)
(userlevel unconfined_u systemlow)
(userrange unconfined_u (systemlow systemlow))
(roleattributeset cil_gen_require system_r)
(roletype system_r unconfined_t)
(roletype system_r unconfined_execmem_t)
(roleattributeset cil_gen_require unconfined_r)
(roletype unconfined_r unconfined_t)
(roletype unconfined_r unconfined_execmem_t)
(roletype unconfined_r ldconfig_t)
(roletype unconfined_r auditctl_t)
(roletype unconfined_r unconfined_mount_t)
(roletype unconfined_r setfiles_t)
(roleattributeset cil_gen_require semanage_roles)
(roleattributeset semanage_roles (unconfined_r ))
(roleattributeset cil_gen_require run_init_roles)
(roleattributeset run_init_roles (unconfined_r ))
(typeattributeset cil_gen_require userdomain)
(typeattributeset userdomain (unconfined_t ))
(typeattributeset cil_gen_require user_devpts_t)
(typeattributeset cil_gen_require user_tty_device_t)
(typeattributeset cil_gen_require unconfined_t)
(typeattributeset cil_gen_require domain)
(typeattributeset domain (unconfined_t unconfined_execmem_t ))
(typeattributeset cil_gen_require init_t)
(typeattributeset cil_gen_require shell_exec_t)
(typeattributeset cil_gen_require entry_type)
(typeattributeset entry_type (shell_exec_t bin_t unconfined_exec_t unconfined_execmem_exec_t ))
(typeattributeset cil_gen_require exec_type)
(typeattributeset exec_type (shell_exec_t bin_t unconfined_exec_t unconfined_execmem_exec_t ))
(typeattributeset cil_gen_require file_type)
(typeattributeset file_type (shell_exec_t bin_t unconfined_exec_t unconfined_execmem_exec_t ))
(typeattributeset cil_gen_require non_security_file_type)
(typeattributeset non_security_file_type (shell_exec_t bin_t unconfined_exec_t unconfined_execmem_exec_t ))
(typeattributeset cil_gen_require non_auth_file_type)
(typeattributeset non_auth_file_type (shell_exec_t bin_t unconfined_exec_t unconfined_execmem_exec_t ))
(typeattributeset cil_gen_require bin_t)
(typeattributeset cil_gen_require process_user_target)
(typeattributeset process_user_target (unconfined_t ))
(typeattributeset cil_gen_require ubac_constrained_type)
(typeattributeset ubac_constrained_type (unconfined_t ))
(typeattributeset cil_gen_require server_ptynode)
(typeattributeset cil_gen_require ptynode)
(typeattributeset ptynode (user_devpts_t ))
(typeattributeset cil_gen_require devpts_t)
(typeattributeset cil_gen_require device_node)
(typeattributeset device_node (user_devpts_t user_tty_device_t ))
(typeattributeset cil_gen_require ttynode)
(typeattributeset ttynode (user_tty_device_t ))
(typeattributeset cil_gen_require console_device_t)
(typeattributeset cil_gen_require tty_device_t)
(typeattributeset cil_gen_require serial_device)
(typeattributeset serial_device (user_tty_device_t ))
(typeattributeset cil_gen_require bsdpty_device_t)
(typeattributeset cil_gen_require ptmx_t)
(typeattributeset cil_gen_require device_t)
(typeattributeset cil_gen_require proc_t)
(typeattributeset cil_gen_require sysctl_t)
(typeattributeset cil_gen_require sysctl_kernel_t)
(typeattributeset cil_gen_require sysctl_crypto_t)
(typeattributeset cil_gen_require sysctl_fs_t)
(typeattributeset cil_gen_require sysctl_vm_overcommit_t)
(typeattributeset cil_gen_require sysctl_vm_t)
(typeattributeset cil_gen_require unlabeled_t)
(typeattributeset cil_gen_require null_device_t)
(typeattributeset cil_gen_require etc_t)
(typeattributeset cil_gen_require etc_runtime_t)
(typeattributeset cil_gen_require usr_t)
(typeattributeset cil_gen_require var_run_t)
(typeattributeset cil_gen_require readable_t)
(typeattributeset cil_gen_require lib_t)
(typeattributeset cil_gen_require ld_so_t)
(typeattributeset cil_gen_require locale_t)
(typeattributeset cil_gen_require cert_t)
(typeattributeset cil_gen_require fonts_t)
(typeattributeset cil_gen_require net_conf_t)
(typeattributeset cil_gen_require var_t)
(typeattributeset cil_gen_require syslogd_t)
(typeattributeset cil_gen_require syslogd_runtime_t)
(typeattributeset cil_gen_require devlog_t)
(typeattributeset cil_gen_require init_runtime_t)
(typeattributeset cil_gen_require user_home_t)
(typeattributeset cil_gen_require user_home_dir_t)
(typeattributeset cil_gen_require user_bin_t)
(typeattributeset cil_gen_require user_cert_t)
(typeattributeset cil_gen_require home_root_t)
(typeattributeset cil_gen_require nfs_t)
(typeattributeset cil_gen_require cifs_t)
(typeattributeset cil_gen_require user_tmp_t)
(typeattributeset cil_gen_require tmp_t)
(typeattributeset cil_gen_require user_runtime_t)
(typeattributeset cil_gen_require user_runtime_root_t)
(typeattributeset cil_gen_require user_tmpfs_t)
(typeattributeset cil_gen_require tmpfs_t)
(typeattributeset cil_gen_require initrc_t)
(typeattributeset cil_gen_require systemprocess)
(typeattributeset systemprocess (unconfined_t unconfined_execmem_t ))
(typeattributeset cil_gen_require application_domain_type)
(typeattributeset application_domain_type (unconfined_t unconfined_execmem_t ))
(typeattributeset cil_gen_require application_exec_type)
(typeattributeset application_exec_type (unconfined_exec_t unconfined_execmem_exec_t ))
(typeattributeset cil_gen_require root_t)
(typeattributeset cil_gen_require ldconfig_t)
(typeattributeset cil_gen_require ldconfig_exec_t)
(typeattributeset cil_gen_require auditctl_t)
(typeattributeset cil_gen_require auditctl_exec_t)
(typeattributeset cil_gen_require unconfined_mount_t)
(typeattributeset cil_gen_require mount_exec_t)
(typeattributeset cil_gen_require setfiles_t)
(typeattributeset cil_gen_require setfiles_exec_t)
(typeattributeset cil_gen_require semanage_t)
(typeattributeset cil_gen_require semanage_exec_t)
(typeattributeset cil_gen_require kern_unconfined)
(typeattributeset kern_unconfined (unconfined_t unconfined_execmem_t ))
(typeattributeset cil_gen_require can_load_kernmodule)
(typeattributeset can_load_kernmodule (unconfined_t unconfined_execmem_t ))
(typeattributeset cil_gen_require corenet_unconfined_type)
(typeattributeset corenet_unconfined_type (unconfined_t unconfined_execmem_t ))
(typeattributeset cil_gen_require devices_unconfined_type)
(typeattributeset devices_unconfined_type (unconfined_t unconfined_execmem_t ))
(typeattributeset cil_gen_require set_curr_context)
(typeattributeset set_curr_context (unconfined_t unconfined_execmem_t ))
(typeattributeset cil_gen_require can_change_object_identity)
(typeattributeset can_change_object_identity (unconfined_t unconfined_execmem_t ))
(typeattributeset cil_gen_require unconfined_domain_type)
(typeattributeset unconfined_domain_type (unconfined_t unconfined_execmem_t ))
(typeattributeset cil_gen_require process_uncond_exempt)
(typeattributeset process_uncond_exempt (unconfined_t unconfined_execmem_t ))
(typeattributeset cil_gen_require files_unconfined_type)
(typeattributeset files_unconfined_type (unconfined_t unconfined_execmem_t ))
(typeattributeset cil_gen_require filesystem_unconfined_type)
(typeattributeset filesystem_unconfined_type (unconfined_t unconfined_execmem_t ))
(typeattributeset cil_gen_require selinux_unconfined_type)
(typeattributeset selinux_unconfined_type (unconfined_t unconfined_execmem_t ))
(typeattributeset cil_gen_require run_init_t)
(typeattributeset cil_gen_require run_init_exec_t)
(typeattributeset cil_gen_require initrc_exec_t)
(allow unconfined_t shell_exec_t (file (entrypoint)))
(allow unconfined_t shell_exec_t (file (ioctl read getattr lock map execute open)))
(allow unconfined_t bin_t (file (entrypoint)))
(allow unconfined_t bin_t (file (ioctl read getattr lock map execute open)))
(allow user_devpts_t devpts_t (filesystem (associate)))
(typechange unconfined_t server_ptynode chr_file user_devpts_t)
(typechange unconfined_t tty_device_t chr_file user_tty_device_t)
(allow unconfined_t self (process (sigchld sigkill sigstop signull signal getsched setsched getsession getpgid setpgid setcap share getattr)))
(allow unconfined_t self (fd (use)))
(allow unconfined_t self (key (view read write search link setattr create)))
(allow unconfined_t self (fifo_file (ioctl read write getattr lock append open)))
(allow unconfined_t self (unix_dgram_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown sendto)))
(allow unconfined_t self (unix_stream_socket (ioctl read write create getattr setattr append bind connect listen accept getopt setopt shutdown connectto)))
(allow unconfined_t self (shm (create destroy getattr setattr read write associate unix_read unix_write lock)))
(allow unconfined_t self (sem (create destroy getattr setattr read write associate unix_read unix_write)))
(allow unconfined_t self (msgq (create destroy getattr setattr read write associate unix_read unix_write enqueue)))
(allow unconfined_t self (msg (send receive)))
(allow unconfined_t self (context (contains)))
(dontaudit unconfined_t self (socket (create)))
(allow unconfined_t user_devpts_t (chr_file (ioctl read write getattr setattr lock append open)))
(allow unconfined_t device_t (dir (getattr open search)))
(allow unconfined_t device_t (dir (ioctl read getattr lock open search)))
(allow unconfined_t device_t (dir (getattr open search)))
(allow unconfined_t device_t (lnk_file (read getattr)))
(allow unconfined_t ptmx_t (chr_file (ioctl read write getattr lock append open)))
(allow unconfined_t devpts_t (dir (ioctl read getattr lock open search)))
(allow unconfined_t devpts_t (filesystem (getattr)))
(dontaudit unconfined_t bsdpty_device_t (chr_file (read write getattr)))
(typetransition unconfined_t devpts_t chr_file user_devpts_t)
(dontaudit unconfined_t user_devpts_t (chr_file (ioctl)))
(allow unconfined_t user_tty_device_t (chr_file (ioctl read write getattr setattr lock append open)))
(dontaudit unconfined_t user_tty_device_t (chr_file (ioctl)))
(allow unconfined_t proc_t (dir (getattr open search)))
(allow unconfined_t sysctl_t (dir (getattr open search)))
(allow unconfined_t sysctl_kernel_t (dir (getattr open search)))
(allow unconfined_t sysctl_kernel_t (file (ioctl read getattr lock open)))
(allow unconfined_t proc_t (dir (getattr open search)))
(allow unconfined_t sysctl_t (dir (getattr open search)))
(allow unconfined_t sysctl_kernel_t (dir (ioctl read getattr lock open search)))
(allow unconfined_t proc_t (dir (getattr open search)))
(allow unconfined_t sysctl_t (dir (getattr open search)))
(allow unconfined_t sysctl_crypto_t (dir (getattr open search)))
(allow unconfined_t sysctl_crypto_t (file (ioctl read getattr lock open)))
(allow unconfined_t proc_t (dir (getattr open search)))
(allow unconfined_t sysctl_t (dir (getattr open search)))
(allow unconfined_t sysctl_crypto_t (dir (ioctl read getattr lock open search)))
(allow unconfined_t proc_t (dir (getattr open search)))
(allow unconfined_t sysctl_t (dir (getattr open search)))
(allow unconfined_t sysctl_fs_t (dir (getattr open search)))
(allow unconfined_t sysctl_fs_t (file (ioctl read getattr lock open)))
(allow unconfined_t proc_t (dir (getattr open search)))
(allow unconfined_t sysctl_t (dir (getattr open search)))
(allow unconfined_t sysctl_fs_t (dir (ioctl read getattr lock open search)))
(allow unconfined_t proc_t (dir (getattr open search)))
(allow unconfined_t sysctl_t (dir (getattr open search)))
(allow unconfined_t sysctl_vm_t (dir (getattr open search)))
(allow unconfined_t sysctl_vm_overcommit_t (file (ioctl read getattr lock open)))
(dontaudit unconfined_t unlabeled_t (dir (ioctl read getattr lock open search)))
(dontaudit unconfined_t unlabeled_t (file (getattr)))
(dontaudit unconfined_t unlabeled_t (lnk_file (getattr)))
(dontaudit unconfined_t unlabeled_t (fifo_file (getattr)))
(dontaudit unconfined_t unlabeled_t (sock_file (getattr)))
(dontaudit unconfined_t unlabeled_t (blk_file (getattr)))
(dontaudit unconfined_t unlabeled_t (chr_file (getattr)))
(dontaudit unconfined_t device_node (blk_file (getattr)))
(dontaudit unconfined_t device_t (blk_file (getattr)))
(dontaudit unconfined_t device_node (chr_file (getattr)))
(dontaudit unconfined_t device_t (chr_file (getattr)))
(dontaudit unconfined_t null_device_t (chr_file (setattr)))
(allow unconfined_t self (netlink_audit_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown nlmsg_relay)))
(allow unconfined_t self (netlink_kobject_uevent_socket (ioctl read write create getattr setattr append bind getopt setopt shutdown)))
(dontaudit unconfined_t domain (dir (ioctl read getattr lock open search)))
(dontaudit unconfined_t domain (lnk_file (read getattr)))
(dontaudit unconfined_t domain (file (ioctl read getattr lock open)))
(dontaudit unconfined_t domain (sock_file (read getattr open)))
(dontaudit unconfined_t domain (fifo_file (ioctl read getattr lock open)))
(dontaudit unconfined_t domain (process (getattr)))
(dontaudit unconfined_t domain (process (getsession)))
(allow unconfined_t etc_t (dir (ioctl read getattr lock open search)))
(allow unconfined_t etc_t (dir (getattr open search)))
(allow unconfined_t etc_t (file (ioctl read getattr lock open)))
(allow unconfined_t etc_t (dir (getattr open search)))
(allow unconfined_t etc_t (lnk_file (read getattr)))
(allow unconfined_t etc_t (dir (watch)))
(allow unconfined_t etc_t (dir (ioctl read getattr lock open search)))
(allow unconfined_t etc_t (dir (getattr open search)))
(allow unconfined_t etc_runtime_t (file (ioctl read getattr lock open)))
(allow unconfined_t etc_t (dir (getattr open search)))
(allow unconfined_t etc_runtime_t (lnk_file (read getattr)))
(allow unconfined_t usr_t (dir (ioctl read getattr lock open search)))
(allow unconfined_t usr_t (dir (getattr open search)))
(allow unconfined_t usr_t (file (ioctl read getattr lock open)))
(allow unconfined_t usr_t (dir (getattr open search)))
(allow unconfined_t usr_t (lnk_file (read getattr)))
(allow unconfined_t usr_t (dir (watch)))
(allow unconfined_t var_run_t (dir (watch)))
(allow unconfined_t readable_t (dir (ioctl read getattr lock open search)))
(allow unconfined_t readable_t (file (ioctl read getattr lock open)))
(allow unconfined_t readable_t (lnk_file (read getattr)))
(allow unconfined_t readable_t (fifo_file (ioctl read getattr lock open)))
(allow unconfined_t readable_t (sock_file (read getattr open)))
(dontaudit unconfined_t non_security_file_type (dir (ioctl read getattr lock open search)))
(dontaudit unconfined_t non_security_file_type (file (getattr)))
(dontaudit unconfined_t non_security_file_type (lnk_file (getattr)))
(dontaudit unconfined_t non_security_file_type (fifo_file (getattr)))
(dontaudit unconfined_t non_security_file_type (sock_file (getattr)))
(allow unconfined_t lib_t (dir (ioctl read getattr lock open search)))
(allow unconfined_t lib_t (dir (getattr open search)))
(allow unconfined_t lib_t (lnk_file (read getattr)))
(allow unconfined_t ld_so_t (lnk_file (read getattr)))
(allow unconfined_t lib_t (dir (getattr open search)))
(allow unconfined_t ld_so_t (file (ioctl read getattr map execute open execute_no_trans)))
(allow unconfined_t etc_t (dir (getattr open search)))
(allow unconfined_t etc_t (lnk_file (read getattr)))
(allow unconfined_t usr_t (dir (getattr open search)))
(allow unconfined_t locale_t (dir (ioctl read getattr lock open search)))
(allow unconfined_t locale_t (dir (getattr open search)))
(allow unconfined_t locale_t (file (ioctl read getattr lock open)))
(allow unconfined_t locale_t (dir (getattr open search)))
(allow unconfined_t locale_t (lnk_file (read getattr)))
(allow unconfined_t locale_t (file (map)))
(allow unconfined_t cert_t (dir (ioctl read getattr lock open search)))
(allow unconfined_t cert_t (dir (getattr open search)))
(allow unconfined_t cert_t (file (ioctl read getattr lock open)))
(allow unconfined_t cert_t (dir (getattr open search)))
(allow unconfined_t cert_t (lnk_file (read getattr)))
(allow unconfined_t fonts_t (dir (watch)))
(allow unconfined_t etc_t (dir (getattr open search)))
(allow unconfined_t var_run_t (lnk_file (read getattr)))
(allow unconfined_t var_t (dir (getattr open search)))
(allow unconfined_t var_run_t (dir (getattr open search)))
(allow unconfined_t net_conf_t (dir (ioctl read getattr lock open search)))
(allow unconfined_t net_conf_t (file (ioctl read getattr lock open)))
(allow unconfined_t net_conf_t (lnk_file (read getattr)))
(allow unconfined_t init_t (system (status)))
(typemember unconfined_t user_home_dir_t dir user_home_dir_t)
(allow unconfined_t user_home_dir_t (lnk_file (read getattr)))
(allow unconfined_t user_home_t (file (entrypoint)))
(allow unconfined_t user_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow unconfined_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow unconfined_t user_home_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow unconfined_t user_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow unconfined_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow unconfined_t user_home_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow unconfined_t user_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow unconfined_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow unconfined_t user_home_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
(allow unconfined_t user_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow unconfined_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow unconfined_t user_home_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow unconfined_t user_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow unconfined_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow unconfined_t user_home_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow unconfined_t user_home_t (dir (getattr open search)))
(allow unconfined_t user_home_dir_t (dir (getattr open search)))
(allow unconfined_t user_home_t (dir (getattr relabelfrom relabelto)))
(allow unconfined_t user_home_t (dir (getattr open search)))
(allow unconfined_t user_home_dir_t (dir (getattr open search)))
(allow unconfined_t user_home_t (file (getattr relabelfrom relabelto)))
(allow unconfined_t user_home_t (dir (getattr open search)))
(allow unconfined_t user_home_dir_t (dir (getattr open search)))
(allow unconfined_t user_home_t (lnk_file (getattr relabelfrom relabelto)))
(allow unconfined_t user_home_t (dir (getattr open search)))
(allow unconfined_t user_home_dir_t (dir (getattr open search)))
(allow unconfined_t user_home_t (sock_file (getattr relabelfrom relabelto)))
(allow unconfined_t user_home_t (dir (getattr open search)))
(allow unconfined_t user_home_dir_t (dir (getattr open search)))
(allow unconfined_t user_home_t (fifo_file (getattr relabelfrom relabelto)))
(allow unconfined_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition unconfined_t user_home_dir_t fifo_file user_home_t)
(typetransition unconfined_t user_home_dir_t sock_file user_home_t)
(typetransition unconfined_t user_home_dir_t lnk_file user_home_t)
(typetransition unconfined_t user_home_dir_t dir user_home_t)
(typetransition unconfined_t user_home_dir_t file user_home_t)
(allow unconfined_t home_root_t (dir (ioctl read getattr lock open search)))
(allow unconfined_t home_root_t (lnk_file (read getattr)))
(allow unconfined_t user_home_dir_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
(allow unconfined_t user_home_t (dir (watch watch_mount watch_sb watch_with_perm watch_reads)))
(allow unconfined_t user_home_dir_t (dir (watch watch_mount watch_sb watch_with_perm watch_reads)))
(allow unconfined_t user_home_t (file (watch watch_mount watch_sb watch_with_perm watch_reads)))
(allow unconfined_t user_home_t (lnk_file (watch watch_mount watch_sb watch_with_perm watch_reads)))
(allow unconfined_t user_home_t (sock_file (watch watch_mount watch_sb watch_with_perm watch_reads)))
(allow unconfined_t user_home_t (fifo_file (watch watch_mount watch_sb watch_with_perm watch_reads)))
(allow unconfined_t user_bin_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
(allow unconfined_t user_bin_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
(allow unconfined_t user_bin_t (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename)))
(allow unconfined_t home_root_t (dir (getattr open search)))
(allow unconfined_t home_root_t (lnk_file (read getattr)))
(allow unconfined_t user_bin_t (dir (getattr open search)))
(allow unconfined_t user_bin_t (file (ioctl read getattr map execute open execute_no_trans)))
(allow unconfined_t user_bin_t (dir (getattr open search)))
(allow unconfined_t user_bin_t (lnk_file (read getattr)))
(allow unconfined_t home_root_t (dir (getattr open search)))
(allow unconfined_t home_root_t (lnk_file (read getattr)))
(allow unconfined_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow unconfined_t home_root_t (dir (getattr open search)))
(allow unconfined_t home_root_t (lnk_file (read getattr)))
(allow unconfined_t user_cert_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow unconfined_t user_cert_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow unconfined_t user_cert_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow unconfined_t user_cert_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow unconfined_t user_cert_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow unconfined_t user_cert_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
(allow unconfined_t home_root_t (dir (getattr open search)))
(allow unconfined_t home_root_t (lnk_file (read getattr)))
(allow unconfined_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow unconfined_t home_root_t (dir (getattr open search)))
(allow unconfined_t home_root_t (lnk_file (read getattr)))
(typemember unconfined_t tmp_t dir user_tmp_t)
(allow unconfined_t user_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow unconfined_t user_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow unconfined_t user_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow unconfined_t user_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow unconfined_t user_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow unconfined_t user_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
(allow unconfined_t user_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow unconfined_t user_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow unconfined_t user_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow unconfined_t user_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow unconfined_t tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition unconfined_t tmp_t fifo_file user_tmp_t)
(typetransition unconfined_t tmp_t sock_file user_tmp_t)
(typetransition unconfined_t tmp_t lnk_file user_tmp_t)
(typetransition unconfined_t tmp_t dir user_tmp_t)
(typetransition unconfined_t tmp_t file user_tmp_t)
(allow unconfined_t user_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition unconfined_t user_runtime_t fifo_file user_tmp_t)
(typetransition unconfined_t user_runtime_t sock_file user_tmp_t)
(typetransition unconfined_t user_runtime_t lnk_file user_tmp_t)
(typetransition unconfined_t user_runtime_t dir user_tmp_t)
(typetransition unconfined_t user_runtime_t file user_tmp_t)
(allow unconfined_t user_runtime_root_t (dir (getattr open search)))
(allow unconfined_t var_run_t (lnk_file (read getattr)))
(allow unconfined_t var_t (dir (getattr open search)))
(allow unconfined_t var_run_t (dir (getattr open search)))
(allow unconfined_t user_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow unconfined_t user_tmpfs_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow unconfined_t user_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow unconfined_t user_tmpfs_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow unconfined_t user_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow unconfined_t user_tmpfs_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
(allow unconfined_t user_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow unconfined_t user_tmpfs_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow unconfined_t user_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow unconfined_t user_tmpfs_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow user_tmpfs_t tmpfs_t (filesystem (associate)))
(allow unconfined_t tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition unconfined_t tmpfs_t fifo_file user_tmpfs_t)
(typetransition unconfined_t tmpfs_t sock_file user_tmpfs_t)
(typetransition unconfined_t tmpfs_t lnk_file user_tmpfs_t)
(typetransition unconfined_t tmpfs_t dir user_tmpfs_t)
(typetransition unconfined_t tmpfs_t file user_tmpfs_t)
(allow unconfined_t unconfined_exec_t (file (entrypoint)))
(allow unconfined_t unconfined_exec_t (file (ioctl read getattr lock map execute open)))
(allow initrc_t unconfined_exec_t (file (ioctl read getattr map execute open)))
(allow initrc_t unconfined_t (process (transition)))
(dontaudit initrc_t unconfined_t (process (noatsecure siginh rlimitinh)))
(typetransition initrc_t unconfined_exec_t process unconfined_t)
(allow unconfined_t initrc_t (fd (use)))
(allow unconfined_t initrc_t (fifo_file (ioctl read write getattr lock append)))
(allow unconfined_t initrc_t (process (sigchld)))
(allow unconfined_execmem_t unconfined_execmem_exec_t (file (entrypoint)))
(allow unconfined_execmem_t unconfined_execmem_exec_t (file (ioctl read getattr lock map execute open)))
(allow initrc_t unconfined_execmem_exec_t (file (ioctl read getattr map execute open)))
(allow initrc_t unconfined_execmem_t (process (transition)))
(dontaudit initrc_t unconfined_execmem_t (process (noatsecure siginh rlimitinh)))
(typetransition initrc_t unconfined_execmem_exec_t process unconfined_execmem_t)
(allow unconfined_execmem_t initrc_t (fd (use)))
(allow unconfined_execmem_t initrc_t (fifo_file (ioctl read write getattr lock append)))
(allow unconfined_execmem_t initrc_t (process (sigchld)))
(allow unconfined_t unconfined_execmem_exec_t (file (ioctl read getattr map execute open)))
(allow unconfined_t unconfined_execmem_t (process (transition)))
(dontaudit unconfined_t unconfined_execmem_t (process (noatsecure siginh rlimitinh)))
(typetransition unconfined_t unconfined_execmem_exec_t process unconfined_execmem_t)
(allow unconfined_execmem_t unconfined_t (fd (use)))
(allow unconfined_execmem_t unconfined_t (fifo_file (ioctl read write getattr lock append)))
(allow unconfined_execmem_t unconfined_t (process (sigchld)))
(allow unconfined_t etc_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow unconfined_t root_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition unconfined_t root_t file etc_runtime_t)
(allow unconfined_t bin_t (dir (getattr open search)))
(allow unconfined_t bin_t (lnk_file (read getattr)))
(allow unconfined_t usr_t (dir (getattr open search)))
(allow unconfined_t ldconfig_exec_t (file (ioctl read getattr map execute open)))
(allow unconfined_t ldconfig_t (process (transition)))
(dontaudit unconfined_t ldconfig_t (process (noatsecure siginh rlimitinh)))
(typetransition unconfined_t ldconfig_exec_t process ldconfig_t)
(allow ldconfig_t unconfined_t (fd (use)))
(allow ldconfig_t unconfined_t (fifo_file (ioctl read write getattr lock append)))
(allow ldconfig_t unconfined_t (process (sigchld)))
(allow unconfined_t devlog_t (sock_file (write getattr append open)))
(allow unconfined_t var_run_t (lnk_file (read getattr)))
(allow unconfined_t var_t (dir (getattr open search)))
(allow unconfined_t var_run_t (dir (getattr open search)))
(allow unconfined_t init_runtime_t (dir (getattr open search)))
(allow unconfined_t syslogd_runtime_t (dir (getattr open search)))
(allow unconfined_t syslogd_t (unix_dgram_socket (sendto)))
(allow unconfined_t syslogd_t (unix_stream_socket (connectto)))
(allow unconfined_t self (unix_dgram_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow unconfined_t self (unix_stream_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow unconfined_t device_t (dir (getattr open search)))
(allow unconfined_t device_t (dir (ioctl read getattr lock open search)))
(allow unconfined_t device_t (dir (getattr open search)))
(allow unconfined_t device_t (lnk_file (read getattr)))
(allow unconfined_t console_device_t (chr_file (ioctl write getattr lock append open)))
(dontaudit unconfined_t console_device_t (chr_file (ioctl read getattr lock open)))
(allow unconfined_t auditctl_exec_t (file (ioctl read getattr map execute open)))
(allow unconfined_t auditctl_t (process (transition)))
(dontaudit unconfined_t auditctl_t (process (noatsecure siginh rlimitinh)))
(typetransition unconfined_t auditctl_exec_t process auditctl_t)
(allow auditctl_t unconfined_t (fd (use)))
(allow auditctl_t unconfined_t (fifo_file (ioctl read write getattr lock append)))
(allow auditctl_t unconfined_t (process (sigchld)))
(allow unconfined_t mount_exec_t (file (ioctl read getattr map execute open)))
(allow unconfined_t unconfined_mount_t (process (transition)))
(dontaudit unconfined_t unconfined_mount_t (process (noatsecure siginh rlimitinh)))
(typetransition unconfined_t mount_exec_t process unconfined_mount_t)
(allow unconfined_mount_t unconfined_t (fd (use)))
(allow unconfined_mount_t unconfined_t (fifo_file (ioctl read write getattr lock append)))
(allow unconfined_mount_t unconfined_t (process (sigchld)))
(allow unconfined_t usr_t (dir (getattr open search)))
(allow unconfined_t bin_t (dir (getattr open search)))
(allow unconfined_t bin_t (lnk_file (read getattr)))
(allow unconfined_t usr_t (dir (getattr open search)))
(allow unconfined_t setfiles_exec_t (file (ioctl read getattr map execute open)))
(allow unconfined_t setfiles_t (process (transition)))
(dontaudit unconfined_t setfiles_t (process (noatsecure siginh rlimitinh)))
(typetransition unconfined_t setfiles_exec_t process setfiles_t)
(allow setfiles_t unconfined_t (fd (use)))
(allow setfiles_t unconfined_t (fifo_file (ioctl read write getattr lock append)))
(allow setfiles_t unconfined_t (process (sigchld)))
(allow unconfined_t usr_t (dir (getattr open search)))
(allow unconfined_t bin_t (dir (getattr open search)))
(allow unconfined_t bin_t (lnk_file (read getattr)))
(allow unconfined_t usr_t (dir (getattr open search)))
(allow unconfined_t semanage_exec_t (file (ioctl read getattr map execute open)))
(allow unconfined_t semanage_t (process (transition)))
(dontaudit unconfined_t semanage_t (process (noatsecure siginh rlimitinh)))
(typetransition unconfined_t semanage_exec_t process semanage_t)
(allow semanage_t unconfined_t (fd (use)))
(allow semanage_t unconfined_t (fifo_file (ioctl read write getattr lock append)))
(allow semanage_t unconfined_t (process (sigchld)))
(allow unconfined_t self (capability (chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap)))
(allow unconfined_t self (cap_userns (chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap)))
(allow unconfined_t self (capability2 (syslog wake_alarm perfmon bpf)))
(allow unconfined_t self (cap2_userns (syslog wake_alarm perfmon bpf)))
(allow unconfined_t self (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow unconfined_t self (cap_userns (chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write setfcap)))
(allow unconfined_t self (cap2_userns (mac_override mac_admin syslog wake_alarm block_suspend audit_read perfmon bpf)))
(allow unconfined_t self (process (transition)))
(allow unconfined_t self (file (ioctl read write getattr lock append open)))
(allow unconfined_t self (anon_inode (read write create map)))
(allow unconfined_t self (nscd (getpwd getgrp gethost getstat admin shmempwd shmemgrp shmemhost getserv shmemserv)))
(allow unconfined_t self (dbus (send_msg acquire_svc)))
(allow unconfined_t self (passwd (passwd chfn chsh rootok crontab)))
(allow unconfined_t self (association (sendto recvfrom setcontext polmatch)))
(dontaudit unconfined_t domain (dir (ioctl read getattr lock open search)))
(dontaudit unconfined_t domain (lnk_file (read getattr)))
(dontaudit unconfined_t domain (file (ioctl read getattr lock open)))
(dontaudit unconfined_t domain (sock_file (read getattr open)))
(dontaudit unconfined_t domain (fifo_file (ioctl read getattr lock open)))
(dontaudit unconfined_t domain (process (ptrace)))
(allow unconfined_t etc_t (service (status)))
(allow unconfined_t etc_t (service (start)))
(allow unconfined_t etc_t (service (stop)))
(allow unconfined_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition unconfined_t user_home_dir_t fifo_file user_home_t)
(typetransition unconfined_t user_home_dir_t sock_file user_home_t)
(typetransition unconfined_t user_home_dir_t lnk_file user_home_t)
(typetransition unconfined_t user_home_dir_t dir user_home_t)
(typetransition unconfined_t user_home_dir_t file user_home_t)
(allow unconfined_t home_root_t (dir (getattr open search)))
(allow unconfined_t home_root_t (lnk_file (read getattr)))
(allow unconfined_t usr_t (dir (getattr open search)))
(allow unconfined_t bin_t (dir (getattr open search)))
(allow unconfined_t bin_t (lnk_file (read getattr)))
(allow unconfined_t usr_t (dir (getattr open search)))
(allow unconfined_t run_init_exec_t (file (ioctl read getattr map execute open)))
(allow unconfined_t run_init_t (process (transition)))
(dontaudit unconfined_t run_init_t (process (noatsecure siginh rlimitinh)))
(typetransition unconfined_t run_init_exec_t process run_init_t)
(allow run_init_t unconfined_t (fd (use)))
(allow run_init_t unconfined_t (fifo_file (ioctl read write getattr lock append)))
(allow run_init_t unconfined_t (process (sigchld)))
(allow unconfined_t etc_t (dir (ioctl read getattr lock open search)))
(allow unconfined_t initrc_exec_t (file (ioctl read getattr map execute open)))
(allow unconfined_t run_init_t (process (transition)))
(dontaudit unconfined_t run_init_t (process (noatsecure siginh rlimitinh)))
(typetransition unconfined_t initrc_exec_t process run_init_t)
(allow run_init_t unconfined_t (fd (use)))
(allow run_init_t unconfined_t (fifo_file (ioctl read write getattr lock append)))
(allow run_init_t unconfined_t (process (sigchld)))
(allow unconfined_execmem_t self (process (execmem execstack)))
(allow unconfined_execmem_t self (capability (chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap)))
(allow unconfined_execmem_t self (cap_userns (chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write audit_control setfcap)))
(allow unconfined_execmem_t self (capability2 (syslog wake_alarm perfmon bpf)))
(allow unconfined_execmem_t self (cap2_userns (syslog wake_alarm perfmon bpf)))
(allow unconfined_execmem_t self (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow unconfined_execmem_t self (cap_userns (chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_admin net_raw ipc_lock ipc_owner sys_module sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease audit_write setfcap)))
(allow unconfined_execmem_t self (cap2_userns (mac_override mac_admin syslog wake_alarm block_suspend audit_read perfmon bpf)))
(allow unconfined_execmem_t self (process (transition)))
(allow unconfined_execmem_t self (file (ioctl read write getattr lock append open)))
(allow unconfined_execmem_t self (anon_inode (read write create map)))
(allow unconfined_execmem_t self (nscd (getpwd getgrp gethost getstat admin shmempwd shmemgrp shmemhost getserv shmemserv)))
(allow unconfined_execmem_t self (dbus (send_msg acquire_svc)))
(allow unconfined_execmem_t self (passwd (passwd chfn chsh rootok crontab)))
(allow unconfined_execmem_t self (association (sendto recvfrom setcontext polmatch)))
(dontaudit unconfined_execmem_t domain (dir (ioctl read getattr lock open search)))
(dontaudit unconfined_execmem_t domain (lnk_file (read getattr)))
(dontaudit unconfined_execmem_t domain (file (ioctl read getattr lock open)))
(dontaudit unconfined_execmem_t domain (sock_file (read getattr open)))
(dontaudit unconfined_execmem_t domain (fifo_file (ioctl read getattr lock open)))
(dontaudit unconfined_execmem_t domain (process (ptrace)))
(allow unconfined_execmem_t etc_t (service (status)))
(allow unconfined_execmem_t etc_t (service (start)))
(allow unconfined_execmem_t etc_t (service (stop)))
(roleallow system_r unconfined_r)
(typetransition unconfined_t user_home_dir_t dir ".pki" user_cert_t)
(typetransition unconfined_t user_home_dir_t dir "bin" user_bin_t)
(booleanif (allow_execstack)
    (true
        (allow unconfined_t self (process (execmem execstack)))
        (allow unconfined_execmem_t self (process (execmem execstack)))
    )
)
(booleanif (allow_execheap)
    (true
        (allow unconfined_t self (process (execheap)))
        (auditallow unconfined_t self (process (execheap)))
        (allow unconfined_execmem_t self (process (execheap)))
    )
)
(booleanif (use_samba_home_dirs)
    (true
        (allow unconfined_t cifs_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
        (allow unconfined_t cifs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
        (allow unconfined_t cifs_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
        (allow unconfined_t cifs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
        (allow unconfined_t cifs_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
        (allow unconfined_t cifs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
        (allow unconfined_t cifs_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
        (allow unconfined_t cifs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
        (allow unconfined_t cifs_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
    )
    (false
        (dontaudit unconfined_t cifs_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
        (dontaudit unconfined_t cifs_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
    )
)
(booleanif (use_nfs_home_dirs)
    (true
        (allow unconfined_t nfs_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
        (allow unconfined_t nfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
        (allow unconfined_t nfs_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
        (allow unconfined_t nfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
        (allow unconfined_t nfs_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
        (allow unconfined_t nfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
        (allow unconfined_t nfs_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
        (allow unconfined_t nfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
        (allow unconfined_t nfs_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
    )
    (false
        (dontaudit unconfined_t nfs_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
        (dontaudit unconfined_t nfs_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
    )
)
(booleanif (user_all_users_send_syslog)
    (true
        (dontaudit unconfined_t console_device_t (chr_file (ioctl read getattr lock open)))
        (allow unconfined_t console_device_t (chr_file (ioctl write getattr lock append open)))
        (allow unconfined_t device_t (lnk_file (read getattr)))
        (allow unconfined_t device_t (dir (getattr open search)))
        (allow unconfined_t device_t (dir (ioctl read getattr lock open search)))
        (allow unconfined_t device_t (dir (getattr open search)))
        (allow unconfined_t self (unix_stream_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
        (allow unconfined_t self (unix_dgram_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
        (allow unconfined_t syslogd_t (unix_stream_socket (connectto)))
        (allow unconfined_t syslogd_t (unix_dgram_socket (sendto)))
        (allow unconfined_t syslogd_runtime_t (dir (getattr open search)))
        (allow unconfined_t init_runtime_t (dir (getattr open search)))
        (allow unconfined_t var_run_t (dir (getattr open search)))
        (allow unconfined_t var_t (dir (getattr open search)))
        (allow unconfined_t var_run_t (lnk_file (read getattr)))
        (allow unconfined_t devlog_t (sock_file (write getattr append open)))
    )
)
(booleanif (and (allow_execmem) (allow_execstack))
    (true
        (allow unconfined_t self (process (execstack)))
    )
)
(booleanif (allow_execmem)
    (true
        (allow unconfined_t self (process (execmem)))
        (allow unconfined_t self (process (execmem)))
        (allow unconfined_execmem_t self (process (execmem)))
    )
)
(booleanif (console_login)
    (true
        (typechange unconfined_t console_device_t chr_file user_tty_device_t)
    )
)
(optional unconfined_optional_2
    (typeattributeset cil_gen_require init_t)
    (allow unconfined_t init_t (process (sigchld)))
    (allow unconfined_t init_t (process (signull)))
    (optional unconfined_optional_3
        (typeattributeset cil_gen_require rpm_t)
        (allow unconfined_t rpm_t (fd (use)))
        (allow unconfined_t rpm_t (fifo_file (ioctl read getattr lock open)))
    )
    (optional unconfined_optional_4
        (typeattributeset cil_gen_require security_t)
        (typeattributeset cil_gen_require sysfs_t)
        (dontaudit unconfined_t security_t (filesystem (getattr)))
        (dontaudit unconfined_t sysfs_t (filesystem (getattr)))
        (dontaudit unconfined_t sysfs_t (dir (getattr open search)))
        (dontaudit unconfined_t security_t (dir (getattr open search)))
        (dontaudit unconfined_t security_t (file (ioctl read getattr lock open)))
    )
    (optional unconfined_optional_5
        (typeattributeset cil_gen_require selinux_config_t)
        (dontaudit unconfined_t selinux_config_t (dir (getattr open search)))
        (dontaudit unconfined_t selinux_config_t (file (ioctl read getattr lock open)))
    )
    (optional unconfined_optional_6
        (typeattributeset cil_gen_require var_t)
        (typeattributeset cil_gen_require apt_var_cache_t)
        (typeattributeset cil_gen_require apt_var_lib_t)
        (typeattributeset cil_gen_require var_lib_t)
        (allow unconfined_t var_t (dir (getattr open search)))
        (allow unconfined_t apt_var_cache_t (dir (ioctl read getattr lock open search)))
        (allow unconfined_t apt_var_cache_t (file (ioctl read getattr map open)))
        (allow unconfined_t var_t (dir (getattr open search)))
        (allow unconfined_t var_lib_t (dir (getattr open search)))
        (allow unconfined_t apt_var_lib_t (dir (ioctl read getattr lock open search)))
        (allow unconfined_t apt_var_lib_t (dir (getattr open search)))
        (allow unconfined_t apt_var_lib_t (file (ioctl read getattr lock open)))
        (allow unconfined_t apt_var_lib_t (dir (getattr open search)))
        (allow unconfined_t apt_var_lib_t (lnk_file (read getattr)))
    )
    (optional unconfined_optional_7
        (typeattributeset cil_gen_require devicekit_disk_t)
        (typeattributeset cil_gen_require devicekit_power_t)
        (allow unconfined_t devicekit_disk_t (dbus (send_msg)))
        (allow devicekit_disk_t unconfined_t (dbus (send_msg)))
        (allow unconfined_t devicekit_power_t (dbus (send_msg)))
        (allow devicekit_power_t unconfined_t (dbus (send_msg)))
    )
    (optional unconfined_optional_8
        (typeattributeset cil_gen_require kerneloops_t)
        (allow unconfined_t kerneloops_t (dbus (send_msg)))
        (allow kerneloops_t unconfined_t (dbus (send_msg)))
    )
    (optional unconfined_optional_9
        (typeattributeset cil_gen_require flash_home_t)
        (allow unconfined_t flash_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
        (allow unconfined_t flash_home_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
        (allow unconfined_t flash_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
        (allow unconfined_t flash_home_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
        (allow unconfined_t flash_home_t (dir (getattr open search)))
        (allow unconfined_t flash_home_t (file (getattr relabelfrom relabelto)))
        (allow unconfined_t flash_home_t (dir (getattr open search)))
        (allow unconfined_t flash_home_t (dir (getattr relabelfrom relabelto)))
    )
    (optional unconfined_optional_10
        (typeattributeset cil_gen_require user_home_dir_t)
        (typeattributeset cil_gen_require home_root_t)
        (typeattributeset cil_gen_require xdg_data_t)
        (allow unconfined_t user_home_dir_t (dir (getattr open search)))
        (allow unconfined_t home_root_t (dir (getattr open search)))
        (allow unconfined_t home_root_t (lnk_file (read getattr)))
        (allow unconfined_t xdg_data_t (dir (ioctl read write getattr lock open add_name remove_name search)))
        (allow unconfined_t xdg_data_t (dir (create getattr)))
        (typetransition unconfined_t xdg_data_t dir "bin" user_bin_t)
    )
    (optional unconfined_optional_11
        (typeattributeset cil_gen_require init_t)
        (allow unconfined_t init_t (process (sigchld)))
        (allow unconfined_t init_t (process (signull)))
        (optional unconfined_optional_12
            (typeattributeset cil_gen_require rpm_t)
            (allow unconfined_t rpm_t (fd (use)))
            (allow unconfined_t rpm_t (fifo_file (ioctl read getattr lock open)))
        )
        (optional unconfined_optional_13
            (typeattributeset cil_gen_require security_t)
            (typeattributeset cil_gen_require sysfs_t)
            (dontaudit unconfined_t security_t (filesystem (getattr)))
            (dontaudit unconfined_t sysfs_t (filesystem (getattr)))
            (dontaudit unconfined_t sysfs_t (dir (getattr open search)))
            (dontaudit unconfined_t security_t (dir (getattr open search)))
            (dontaudit unconfined_t security_t (file (ioctl read getattr lock open)))
        )
        (optional unconfined_optional_14
            (typeattributeset cil_gen_require selinux_config_t)
            (dontaudit unconfined_t selinux_config_t (dir (getattr open search)))
            (dontaudit unconfined_t selinux_config_t (file (ioctl read getattr lock open)))
        )
        (optional unconfined_optional_15
            (typeattributeset cil_gen_require init_t)
            (allow unconfined_execmem_t init_t (process (sigchld)))
            (allow unconfined_execmem_t init_t (process (signull)))
            (optional unconfined_optional_16
                (typeattributeset cil_gen_require rpm_t)
                (allow unconfined_execmem_t rpm_t (fd (use)))
                (allow unconfined_execmem_t rpm_t (fifo_file (ioctl read getattr lock open)))
            )
            (optional unconfined_optional_17
                (typeattributeset cil_gen_require security_t)
                (typeattributeset cil_gen_require sysfs_t)
                (dontaudit unconfined_execmem_t security_t (filesystem (getattr)))
                (dontaudit unconfined_execmem_t sysfs_t (filesystem (getattr)))
                (dontaudit unconfined_execmem_t sysfs_t (dir (getattr open search)))
                (dontaudit unconfined_execmem_t security_t (dir (getattr open search)))
                (dontaudit unconfined_execmem_t security_t (file (ioctl read getattr lock open)))
            )
            (optional unconfined_optional_18
                (typeattributeset cil_gen_require selinux_config_t)
                (dontaudit unconfined_execmem_t selinux_config_t (dir (getattr open search)))
                (dontaudit unconfined_execmem_t selinux_config_t (file (ioctl read getattr lock open)))
            )
            (optional unconfined_optional_19
                (typeattributeset cil_gen_require can_read_shadow_passwords)
                (typeattributeset cil_gen_require can_write_shadow_passwords)
                (typeattributeset cil_gen_require can_relabelto_shadow_passwords)
                (typeattributeset cil_gen_require can_write_shadow_passwords)
                (typeattributeset can_write_shadow_passwords (unconfined_t ))
                (typeattributeset cil_gen_require can_read_shadow_passwords)
                (typeattributeset can_read_shadow_passwords (unconfined_t ))
                (typeattributeset cil_gen_require can_relabelto_shadow_passwords)
                (typeattributeset can_relabelto_shadow_passwords (unconfined_t ))
            )
            (optional unconfined_optional_20
                (typeattributeset cil_gen_require dbusd_unconfined)
                (typeattributeset cil_gen_require dbusd_unconfined)
                (typeattributeset dbusd_unconfined (unconfined_t ))
            )
            (optional unconfined_optional_21
                (typeattributeset cil_gen_require ipsec_spd_t)
                (allow unconfined_t ipsec_spd_t (association (setcontext)))
                (allow unconfined_t ipsec_spd_t (association (polmatch)))
                (allow unconfined_t self (association (sendto)))
            )
            (optional unconfined_optional_22
                (typeattributeset cil_gen_require nscd_t)
                (allow unconfined_t nscd_t (nscd (getpwd getgrp gethost getstat admin shmempwd shmemgrp shmemhost getserv shmemserv)))
            )
            (optional unconfined_optional_23
                (typeattributeset cil_gen_require sepgsql_unconfined_type)
                (typeattributeset cil_gen_require sepgsql_unconfined_type)
                (typeattributeset sepgsql_unconfined_type (unconfined_t ))
            )
            (optional unconfined_optional_24
                (typeattributeset cil_gen_require selinux_config_t)
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require policy_config_t)
                (typeattributeset cil_gen_require can_relabelto_binary_policy)
                (typeattributeset cil_gen_require can_relabelto_binary_policy)
                (typeattributeset can_relabelto_binary_policy (unconfined_t ))
                (allow unconfined_t etc_t (dir (getattr open search)))
                (allow unconfined_t selinux_config_t (dir (getattr open search)))
                (allow unconfined_t policy_config_t (dir (ioctl write getattr lock open add_name search)))
                (allow unconfined_t policy_config_t (file (create getattr open)))
                (allow unconfined_t policy_config_t (dir (getattr open search)))
                (allow unconfined_t policy_config_t (file (ioctl write getattr lock append open)))
                (allow unconfined_t policy_config_t (file (relabelto)))
            )
            (optional unconfined_optional_25
                (typeattributeset cil_gen_require storage_unconfined_type)
                (typeattributeset cil_gen_require storage_unconfined_type)
                (typeattributeset storage_unconfined_type (unconfined_t ))
            )
            (optional unconfined_optional_26
                (typeattributeset cil_gen_require x_domain)
                (typeattributeset cil_gen_require xserver_unconfined_type)
                (typeattributeset cil_gen_require x_domain)
                (typeattributeset x_domain (unconfined_t ))
                (typeattributeset cil_gen_require xserver_unconfined_type)
                (typeattributeset xserver_unconfined_type (unconfined_t ))
            )
            (optional unconfined_optional_27
                (roleattributeset cil_gen_require httpd_helper_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require user_home_dir_t)
                (typeattributeset cil_gen_require home_root_t)
                (typeattributeset cil_gen_require httpd_helper_t)
                (typeattributeset cil_gen_require httpd_helper_exec_t)
                (typeattributeset cil_gen_require httpdcontent)
                (typeattributeset cil_gen_require httpd_user_content_t)
                (typeattributeset cil_gen_require httpd_user_htaccess_t)
                (typeattributeset cil_gen_require httpd_user_script_t)
                (typeattributeset cil_gen_require httpd_user_script_exec_t)
                (typeattributeset cil_gen_require httpd_user_ra_content_t)
                (typeattributeset cil_gen_require httpd_user_rw_content_t)
                (roleattributeset cil_gen_require httpd_helper_roles)
                (roleattributeset httpd_helper_roles (unconfined_r ))
                (roleattributeset cil_gen_require unconfined_r)
                (roletype unconfined_r httpd_user_script_t)
                (allow unconfined_t bin_t (dir (getattr open search)))
                (allow unconfined_t bin_t (lnk_file (read getattr)))
                (allow unconfined_t usr_t (dir (getattr open search)))
                (allow unconfined_t httpd_helper_exec_t (file (ioctl read getattr map execute open)))
                (allow unconfined_t httpd_helper_t (process (transition)))
                (dontaudit unconfined_t httpd_helper_t (process (noatsecure siginh rlimitinh)))
                (typetransition unconfined_t httpd_helper_exec_t process httpd_helper_t)
                (allow httpd_helper_t unconfined_t (fd (use)))
                (allow httpd_helper_t unconfined_t (fifo_file (ioctl read write getattr lock append)))
                (allow httpd_helper_t unconfined_t (process (sigchld)))
                (allow unconfined_t httpd_user_htaccess_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow unconfined_t httpd_user_content_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow unconfined_t httpd_user_content_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow unconfined_t httpd_user_content_t (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename)))
                (allow unconfined_t httpd_user_ra_content_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow unconfined_t httpd_user_ra_content_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow unconfined_t httpd_user_ra_content_t (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename)))
                (allow unconfined_t httpd_user_rw_content_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow unconfined_t httpd_user_rw_content_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow unconfined_t httpd_user_rw_content_t (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename)))
                (allow unconfined_t httpd_user_script_exec_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow unconfined_t httpd_user_script_exec_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow unconfined_t httpd_user_script_exec_t (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename)))
                (allow unconfined_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow unconfined_t home_root_t (dir (getattr open search)))
                (allow unconfined_t home_root_t (lnk_file (read getattr)))
                (allow unconfined_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow unconfined_t home_root_t (dir (getattr open search)))
                (allow unconfined_t home_root_t (lnk_file (read getattr)))
                (allow unconfined_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow unconfined_t home_root_t (dir (getattr open search)))
                (allow unconfined_t home_root_t (lnk_file (read getattr)))
                (allow unconfined_t httpd_user_content_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow unconfined_t httpd_user_content_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow unconfined_t httpd_user_content_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (typetransition unconfined_t httpd_user_content_t dir "logs" httpd_user_ra_content_t)
                (typetransition unconfined_t httpd_user_content_t dir "cgi-bin" httpd_user_script_exec_t)
                (typetransition unconfined_t httpd_user_content_t file ".htaccess" httpd_user_htaccess_t)
                (typetransition unconfined_t user_home_dir_t dir "www" httpd_user_content_t)
                (typetransition unconfined_t user_home_dir_t dir "web" httpd_user_content_t)
                (typetransition unconfined_t user_home_dir_t dir "public_html" httpd_user_content_t)
                (booleanif (and (httpd_enable_cgi) (httpd_unified))
                    (true
                        (allow httpd_user_script_t unconfined_application_exec_domain (process (sigchld)))
                        (allow httpd_user_script_t unconfined_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                        (allow httpd_user_script_t unconfined_application_exec_domain (fd (use)))
                        (typetransition unconfined_application_exec_domain httpdcontent process httpd_user_script_t)
                        (dontaudit unconfined_application_exec_domain httpd_user_script_t (process (noatsecure siginh rlimitinh)))
                        (allow unconfined_application_exec_domain httpd_user_script_t (process (transition)))
                        (allow unconfined_application_exec_domain httpdcontent (file (ioctl read getattr map execute open)))
                    )
                )
                (booleanif (httpd_enable_cgi)
                    (true
                        (allow httpd_user_script_t unconfined_application_exec_domain (process (sigchld)))
                        (allow httpd_user_script_t unconfined_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                        (allow httpd_user_script_t unconfined_application_exec_domain (fd (use)))
                        (typetransition unconfined_application_exec_domain httpd_user_script_exec_t process httpd_user_script_t)
                        (dontaudit unconfined_application_exec_domain httpd_user_script_t (process (noatsecure siginh rlimitinh)))
                        (allow unconfined_application_exec_domain httpd_user_script_t (process (transition)))
                        (allow unconfined_application_exec_domain httpd_user_script_exec_t (file (ioctl read getattr map execute open)))
                    )
                )
                (optional unconfined_optional_28
                    (typeattributeset cil_gen_require unconfined_systemd_t)
                    (allow unconfined_systemd_t httpd_user_script_t (dir (ioctl read getattr lock open search)))
                    (allow unconfined_systemd_t httpd_user_script_t (file (ioctl read getattr lock open)))
                    (allow unconfined_systemd_t httpd_user_script_t (lnk_file (read getattr)))
                    (allow unconfined_systemd_t httpd_user_script_t (process (getattr)))
                    (allow unconfined_systemd_t httpd_user_script_t (process (sigchld sigkill sigstop signull signal)))
                    (allow httpd_user_script_t unconfined_systemd_t (fd (use)))
                    (allow httpd_user_script_t unconfined_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                    (allow httpd_user_script_t unconfined_systemd_t (dir (ioctl read getattr lock open search)))
                    (allow httpd_user_script_t unconfined_systemd_t (file (ioctl read getattr lock open)))
                    (allow httpd_user_script_t unconfined_systemd_t (lnk_file (read getattr)))
                    (allow httpd_user_script_t unconfined_systemd_t (process (getattr)))
                    (allow httpd_user_script_t unconfined_systemd_t (process (sigchld)))
                )
            )
            (optional unconfined_optional_29
                (roleattributeset cil_gen_require ndc_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require ndc_t)
                (typeattributeset cil_gen_require ndc_exec_t)
                (roleattributeset cil_gen_require ndc_roles)
                (roleattributeset ndc_roles (unconfined_r ))
                (allow unconfined_t bin_t (dir (getattr open search)))
                (allow unconfined_t bin_t (lnk_file (read getattr)))
                (allow unconfined_t usr_t (dir (getattr open search)))
                (allow unconfined_t ndc_exec_t (file (ioctl read getattr map execute open)))
                (allow unconfined_t ndc_t (process (transition)))
                (dontaudit unconfined_t ndc_t (process (noatsecure siginh rlimitinh)))
                (typetransition unconfined_t ndc_exec_t process ndc_t)
                (allow ndc_t unconfined_t (fd (use)))
                (allow ndc_t unconfined_t (fifo_file (ioctl read write getattr lock append)))
                (allow ndc_t unconfined_t (process (sigchld)))
            )
            (optional unconfined_optional_30
                (typeattributeset cil_gen_require bluetooth_t)
                (allow unconfined_t bluetooth_t (dbus (send_msg)))
                (allow bluetooth_t unconfined_t (dbus (send_msg)))
            )
            (optional unconfined_optional_31
                (roleattributeset cil_gen_require bootloader_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require bootloader_t)
                (typeattributeset cil_gen_require bootloader_exec_t)
                (roleattributeset cil_gen_require bootloader_roles)
                (roleattributeset bootloader_roles (unconfined_r ))
                (allow unconfined_t bin_t (dir (getattr open search)))
                (allow unconfined_t bin_t (lnk_file (read getattr)))
                (allow unconfined_t usr_t (dir (getattr open search)))
                (allow unconfined_t bootloader_exec_t (file (ioctl read getattr map execute open)))
                (allow unconfined_t bootloader_t (process (transition)))
                (dontaudit unconfined_t bootloader_t (process (noatsecure siginh rlimitinh)))
                (typetransition unconfined_t bootloader_exec_t process bootloader_t)
                (allow bootloader_t unconfined_t (fd (use)))
                (allow bootloader_t unconfined_t (fifo_file (ioctl read write getattr lock append)))
                (allow bootloader_t unconfined_t (process (sigchld)))
            )
            (optional unconfined_optional_32
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require user_home_dir_t)
                (typeattributeset cil_gen_require home_root_t)
                (typeattributeset cil_gen_require xdg_data_t)
                (typeattributeset cil_gen_require container_domain)
                (typeattributeset cil_gen_require container_config_t)
                (typeattributeset cil_gen_require container_file_t)
                (typeattributeset cil_gen_require container_ro_file_t)
                (typeattributeset cil_gen_require container_user_runtime_t)
                (typeattributeset cil_gen_require container_cache_home_t)
                (typeattributeset cil_gen_require container_conf_home_t)
                (typeattributeset cil_gen_require container_data_home_t)
                (typeattributeset cil_gen_require xdg_cache_t)
                (typeattributeset cil_gen_require xdg_config_t)
                (roleattributeset cil_gen_require unconfined_r)
                (roletype unconfined_r container_domain)
                (allow unconfined_application_exec_domain container_domain (process (transition)))
                (allow unconfined_application_exec_domain container_domain (process2 (nnp_transition nosuid_transition)))
                (allow container_domain unconfined_application_exec_domain (fd (use)))
                (allow container_domain unconfined_application_exec_domain (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                (allow unconfined_application_exec_domain self (cap_userns (kill sys_ptrace)))
                (allow unconfined_application_exec_domain container_domain (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow unconfined_application_exec_domain container_domain (dir (ioctl read getattr lock open search)))
                (allow unconfined_application_exec_domain container_domain (file (ioctl read getattr lock open)))
                (allow unconfined_application_exec_domain container_domain (lnk_file (read getattr)))
                (allow unconfined_application_exec_domain container_domain (process (getattr)))
                (allow unconfined_t etc_t (dir (getattr open search)))
                (allow unconfined_t container_config_t (dir (getattr open search)))
                (allow unconfined_t container_config_t (file (ioctl read getattr lock open)))
                (allow unconfined_t container_file_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow unconfined_t container_file_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow unconfined_t container_file_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow unconfined_t container_file_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow unconfined_t container_file_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow unconfined_t container_file_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow unconfined_t container_file_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow unconfined_t container_file_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow unconfined_t container_file_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow unconfined_t container_file_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow unconfined_t container_file_t (dir (getattr open search)))
                (allow unconfined_t container_file_t (dir (getattr relabelfrom relabelto)))
                (allow unconfined_t container_file_t (dir (getattr open search)))
                (allow unconfined_t container_file_t (file (getattr relabelfrom relabelto)))
                (allow unconfined_t container_file_t (dir (getattr open search)))
                (allow unconfined_t container_file_t (lnk_file (getattr relabelfrom relabelto)))
                (allow unconfined_t container_file_t (dir (getattr open search)))
                (allow unconfined_t container_file_t (fifo_file (getattr relabelfrom relabelto)))
                (allow unconfined_t container_file_t (dir (getattr open search)))
                (allow unconfined_t container_file_t (sock_file (getattr relabelfrom relabelto)))
                (allow unconfined_t container_file_t (chr_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow unconfined_t container_file_t (blk_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow unconfined_t container_ro_file_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow unconfined_t container_ro_file_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow unconfined_t container_ro_file_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow unconfined_t container_ro_file_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow unconfined_t container_ro_file_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow unconfined_t container_ro_file_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow unconfined_t container_ro_file_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow unconfined_t container_ro_file_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow unconfined_t container_ro_file_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow unconfined_t container_ro_file_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow unconfined_t container_ro_file_t (dir (getattr open search)))
                (allow unconfined_t container_ro_file_t (dir (getattr relabelfrom relabelto)))
                (allow unconfined_t container_ro_file_t (dir (getattr open search)))
                (allow unconfined_t container_ro_file_t (file (getattr relabelfrom relabelto)))
                (allow unconfined_t container_ro_file_t (dir (getattr open search)))
                (allow unconfined_t container_ro_file_t (lnk_file (getattr relabelfrom relabelto)))
                (allow unconfined_t container_ro_file_t (dir (getattr open search)))
                (allow unconfined_t container_ro_file_t (fifo_file (getattr relabelfrom relabelto)))
                (allow unconfined_t container_ro_file_t (dir (getattr open search)))
                (allow unconfined_t container_ro_file_t (sock_file (getattr relabelfrom relabelto)))
                (allow unconfined_t container_ro_file_t (chr_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow unconfined_t container_ro_file_t (blk_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow unconfined_t container_user_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow unconfined_t container_user_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow unconfined_t container_user_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow unconfined_t container_user_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow unconfined_t container_user_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow unconfined_t container_user_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow unconfined_t container_user_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow unconfined_t container_user_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow unconfined_t container_user_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow unconfined_t container_user_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow unconfined_t container_user_runtime_t (dir (getattr open search)))
                (allow unconfined_t container_user_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow unconfined_t container_user_runtime_t (dir (getattr open search)))
                (allow unconfined_t container_user_runtime_t (file (getattr relabelfrom relabelto)))
                (allow unconfined_t container_user_runtime_t (dir (getattr open search)))
                (allow unconfined_t container_user_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow unconfined_t container_user_runtime_t (dir (getattr open search)))
                (allow unconfined_t container_user_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow unconfined_t container_user_runtime_t (dir (getattr open search)))
                (allow unconfined_t container_user_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow unconfined_t container_cache_home_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow unconfined_t container_cache_home_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow unconfined_t user_home_dir_t (dir (getattr open search)))
                (allow unconfined_t home_root_t (dir (getattr open search)))
                (allow unconfined_t home_root_t (lnk_file (read getattr)))
                (allow unconfined_t xdg_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow unconfined_t xdg_cache_t (dir (create getattr)))
                (allow unconfined_t container_conf_home_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow unconfined_t container_conf_home_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow unconfined_t user_home_dir_t (dir (getattr open search)))
                (allow unconfined_t home_root_t (dir (getattr open search)))
                (allow unconfined_t home_root_t (lnk_file (read getattr)))
                (allow unconfined_t xdg_config_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow unconfined_t xdg_config_t (dir (create getattr)))
                (allow unconfined_t container_data_home_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow unconfined_t container_data_home_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow unconfined_t container_data_home_t (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename)))
                (allow unconfined_t container_data_home_t (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow unconfined_t container_data_home_t (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow unconfined_t container_data_home_t (chr_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow unconfined_t container_data_home_t (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow unconfined_t user_home_dir_t (dir (getattr open search)))
                (allow unconfined_t home_root_t (dir (getattr open search)))
                (allow unconfined_t home_root_t (lnk_file (read getattr)))
                (allow unconfined_t xdg_data_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow unconfined_t xdg_data_t (dir (create getattr)))
                (allow unconfined_t container_data_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow unconfined_t container_data_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow unconfined_t container_data_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow unconfined_t container_data_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow unconfined_t container_data_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow unconfined_t container_data_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow unconfined_t container_data_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (typetransition unconfined_t container_data_home_t dir "volumes" container_file_t)
                (typetransition unconfined_t container_data_home_t dir "overlay2-layers" container_ro_file_t)
                (typetransition unconfined_t container_data_home_t dir "overlay2-images" container_ro_file_t)
                (typetransition unconfined_t container_data_home_t dir "overlay2" container_ro_file_t)
                (typetransition unconfined_t container_data_home_t dir "overlay-layers" container_ro_file_t)
                (typetransition unconfined_t container_data_home_t dir "overlay-images" container_ro_file_t)
                (typetransition unconfined_t container_data_home_t dir "overlay" container_ro_file_t)
                (typetransition unconfined_t xdg_data_t dir "containers" container_data_home_t)
                (typetransition unconfined_t xdg_config_t dir "containers" container_conf_home_t)
                (typetransition unconfined_t xdg_cache_t dir "containers" container_cache_home_t)
            )
            (optional unconfined_optional_33
                (typeattributeset cil_gen_require shell_exec_t)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require unconfined_cronjob_t)
                (typeattributeset cil_gen_require crontab_t)
                (typeattributeset cil_gen_require crontab_exec_t)
                (typeattributeset cil_gen_require crond_t)
                (typeattributeset cil_gen_require user_cron_spool_t)
                (roleattributeset cil_gen_require unconfined_r)
                (roletype unconfined_r unconfined_cronjob_t)
                (roletype unconfined_r crontab_t)
                (allow unconfined_t crontab_exec_t (file (ioctl read getattr map execute open)))
                (allow unconfined_t crontab_t (process (transition)))
                (dontaudit unconfined_t crontab_t (process (noatsecure siginh rlimitinh)))
                (typetransition unconfined_t crontab_exec_t process crontab_t)
                (allow crontab_t unconfined_t (fd (use)))
                (allow crontab_t unconfined_t (fifo_file (ioctl read write getattr lock append)))
                (allow crontab_t unconfined_t (process (sigchld)))
                (dontaudit crond_t unconfined_t (process (noatsecure siginh rlimitinh)))
                (allow unconfined_t crond_t (process (sigchld)))
                (allow unconfined_t user_cron_spool_t (file (ioctl read write getattr lock append)))
                (allow unconfined_t crontab_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow unconfined_t crontab_t (dir (ioctl read getattr lock open search)))
                (allow unconfined_t crontab_t (file (ioctl read getattr lock open)))
                (allow unconfined_t crontab_t (lnk_file (read getattr)))
                (allow unconfined_t crontab_t (process (getattr)))
                (allow crontab_t bin_t (dir (getattr open search)))
                (allow crontab_t bin_t (lnk_file (read getattr)))
                (allow crontab_t usr_t (dir (getattr open search)))
                (allow crontab_t bin_t (dir (getattr open search)))
                (allow crontab_t bin_t (dir (ioctl read getattr lock open search)))
                (allow crontab_t bin_t (file (ioctl read getattr lock map execute open execute_no_trans)))
                (allow crontab_t bin_t (dir (getattr open search)))
                (allow crontab_t bin_t (lnk_file (read getattr)))
                (allow crontab_t usr_t (dir (getattr open search)))
                (allow crontab_t bin_t (dir (getattr open search)))
                (allow crontab_t bin_t (dir (ioctl read getattr lock open search)))
                (allow crontab_t shell_exec_t (file (ioctl read getattr lock map execute open execute_no_trans)))
                (booleanif (cron_userdomain_transition)
                    (true
                        (allow unconfined_t unconfined_cronjob_t (process (getattr)))
                        (allow unconfined_t unconfined_cronjob_t (lnk_file (read getattr)))
                        (allow unconfined_t unconfined_cronjob_t (file (ioctl read getattr lock open)))
                        (allow unconfined_t unconfined_cronjob_t (dir (ioctl read getattr lock open search)))
                        (allow unconfined_t unconfined_cronjob_t (process (sigchld sigkill sigstop signull signal ptrace)))
                        (allow unconfined_t crond_t (fifo_file (ioctl read write getattr lock append open)))
                        (allow unconfined_t user_cron_spool_t (file (entrypoint)))
                        (allow crond_t unconfined_t (key (view read write search link setattr create)))
                        (allow crond_t unconfined_t (fd (use)))
                        (allow crond_t unconfined_t (process (transition)))
                    )
                    (false
                        (dontaudit unconfined_t unconfined_cronjob_t (process (sigchld sigkill sigstop signull signal ptrace)))
                        (dontaudit unconfined_t crond_t (fifo_file (ioctl read write getattr lock append open)))
                        (dontaudit unconfined_t user_cron_spool_t (file (entrypoint)))
                        (dontaudit crond_t unconfined_t (key (view read write search link setattr create)))
                        (dontaudit crond_t unconfined_t (fd (use)))
                        (dontaudit crond_t unconfined_t (process (transition)))
                    )
                )
                (optional unconfined_optional_34
                    (typeattributeset cil_gen_require system_dbusd_t)
                    (allow unconfined_cronjob_t unconfined_t (dbus (send_msg)))
                )
            )
            (optional unconfined_optional_35
                (roleattributeset cil_gen_require dpkg_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require dpkg_t)
                (typeattributeset cil_gen_require dpkg_exec_t)
                (roleattributeset cil_gen_require dpkg_roles)
                (roleattributeset dpkg_roles (unconfined_r ))
                (allow unconfined_t bin_t (dir (getattr open search)))
                (allow unconfined_t bin_t (lnk_file (read getattr)))
                (allow unconfined_t usr_t (dir (getattr open search)))
                (allow unconfined_t dpkg_exec_t (file (ioctl read getattr map execute open)))
                (allow unconfined_t dpkg_t (process (transition)))
                (dontaudit unconfined_t dpkg_t (process (noatsecure siginh rlimitinh)))
                (typetransition unconfined_t dpkg_exec_t process dpkg_t)
                (allow dpkg_t unconfined_t (fd (use)))
                (allow dpkg_t unconfined_t (fifo_file (ioctl read write getattr lock append)))
                (allow dpkg_t unconfined_t (process (sigchld)))
                (allow unconfined_t dpkg_t (process2 (nnp_transition)))
                (allow unconfined_t bin_t (dir (getattr open search)))
                (allow unconfined_t bin_t (lnk_file (read getattr)))
                (allow unconfined_t usr_t (dir (getattr open search)))
                (allow unconfined_t dpkg_exec_t (file (ioctl read getattr map execute open)))
                (allow unconfined_t dpkg_t (process (transition)))
                (dontaudit unconfined_t dpkg_t (process (noatsecure siginh rlimitinh)))
                (typetransition unconfined_t dpkg_exec_t process dpkg_t)
                (allow dpkg_t unconfined_t (fd (use)))
                (allow dpkg_t unconfined_t (fifo_file (ioctl read write getattr lock append)))
                (allow dpkg_t unconfined_t (process (sigchld)))
            )
            (optional unconfined_optional_36
                (roleattributeset cil_gen_require firstboot_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require firstboot_t)
                (typeattributeset cil_gen_require firstboot_exec_t)
                (roleattributeset cil_gen_require firstboot_roles)
                (roleattributeset firstboot_roles (unconfined_r ))
                (allow unconfined_t bin_t (dir (getattr open search)))
                (allow unconfined_t bin_t (lnk_file (read getattr)))
                (allow unconfined_t usr_t (dir (getattr open search)))
                (allow unconfined_t firstboot_exec_t (file (ioctl read getattr map execute open)))
                (allow unconfined_t firstboot_t (process (transition)))
                (dontaudit unconfined_t firstboot_t (process (noatsecure siginh rlimitinh)))
                (typetransition unconfined_t firstboot_exec_t process firstboot_t)
                (allow firstboot_t unconfined_t (fd (use)))
                (allow firstboot_t unconfined_t (fifo_file (ioctl read write getattr lock append)))
                (allow firstboot_t unconfined_t (process (sigchld)))
            )
            (optional unconfined_optional_37
                (roleattributeset cil_gen_require ftpdctl_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require ftpdctl_t)
                (typeattributeset cil_gen_require ftpdctl_exec_t)
                (roleattributeset cil_gen_require ftpdctl_roles)
                (roleattributeset ftpdctl_roles (unconfined_r ))
                (allow unconfined_t bin_t (dir (getattr open search)))
                (allow unconfined_t bin_t (lnk_file (read getattr)))
                (allow unconfined_t usr_t (dir (getattr open search)))
                (allow unconfined_t ftpdctl_exec_t (file (ioctl read getattr map execute open)))
                (allow unconfined_t ftpdctl_t (process (transition)))
                (dontaudit unconfined_t ftpdctl_t (process (noatsecure siginh rlimitinh)))
                (typetransition unconfined_t ftpdctl_exec_t process ftpdctl_t)
                (allow ftpdctl_t unconfined_t (fd (use)))
                (allow ftpdctl_t unconfined_t (fifo_file (ioctl read write getattr lock append)))
                (allow ftpdctl_t unconfined_t (process (sigchld)))
            )
            (optional unconfined_optional_38
                (roleattributeset cil_gen_require hadoop_roles)
                (roleattributeset cil_gen_require zookeeper_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require hadoop_t)
                (typeattributeset cil_gen_require zookeeper_t)
                (typeattributeset cil_gen_require hadoop_home_t)
                (typeattributeset cil_gen_require hadoop_tmp_t)
                (typeattributeset cil_gen_require hadoop_hsperfdata_t)
                (typeattributeset cil_gen_require zookeeper_tmp_t)
                (typeattributeset cil_gen_require hadoop_exec_t)
                (typeattributeset cil_gen_require zookeeper_exec_t)
                (roleattributeset cil_gen_require hadoop_roles)
                (roleattributeset hadoop_roles (unconfined_r ))
                (roleattributeset cil_gen_require zookeeper_roles)
                (roleattributeset zookeeper_roles (unconfined_r ))
                (allow unconfined_application_exec_domain bin_t (dir (getattr open search)))
                (allow unconfined_application_exec_domain bin_t (lnk_file (read getattr)))
                (allow unconfined_application_exec_domain usr_t (dir (getattr open search)))
                (allow unconfined_application_exec_domain hadoop_exec_t (file (ioctl read getattr map execute open)))
                (allow unconfined_application_exec_domain hadoop_t (process (transition)))
                (dontaudit unconfined_application_exec_domain hadoop_t (process (noatsecure siginh rlimitinh)))
                (typetransition unconfined_application_exec_domain hadoop_exec_t process hadoop_t)
                (allow hadoop_t unconfined_application_exec_domain (fd (use)))
                (allow hadoop_t unconfined_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                (allow hadoop_t unconfined_application_exec_domain (process (sigchld)))
                (allow unconfined_application_exec_domain bin_t (dir (getattr open search)))
                (allow unconfined_application_exec_domain bin_t (lnk_file (read getattr)))
                (allow unconfined_application_exec_domain usr_t (dir (getattr open search)))
                (allow unconfined_application_exec_domain zookeeper_exec_t (file (ioctl read getattr map execute open)))
                (allow unconfined_application_exec_domain zookeeper_t (process (transition)))
                (dontaudit unconfined_application_exec_domain zookeeper_t (process (noatsecure siginh rlimitinh)))
                (typetransition unconfined_application_exec_domain zookeeper_exec_t process zookeeper_t)
                (allow zookeeper_t unconfined_application_exec_domain (fd (use)))
                (allow zookeeper_t unconfined_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                (allow zookeeper_t unconfined_application_exec_domain (process (sigchld)))
                (allow unconfined_application_exec_domain hadoop_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow unconfined_application_exec_domain zookeeper_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow unconfined_application_exec_domain hadoop_t (dir (ioctl read getattr lock open search)))
                (allow unconfined_application_exec_domain zookeeper_t (dir (ioctl read getattr lock open search)))
                (allow unconfined_application_exec_domain hadoop_t (file (ioctl read getattr lock open)))
                (allow unconfined_application_exec_domain zookeeper_t (file (ioctl read getattr lock open)))
                (allow unconfined_application_exec_domain hadoop_t (lnk_file (read getattr)))
                (allow unconfined_application_exec_domain zookeeper_t (lnk_file (read getattr)))
                (allow unconfined_application_exec_domain hadoop_t (process (getattr)))
                (allow unconfined_application_exec_domain zookeeper_t (process (getattr)))
                (allow unconfined_t hadoop_home_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow unconfined_t hadoop_tmp_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow unconfined_t hadoop_hsperfdata_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow unconfined_t hadoop_home_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow unconfined_t hadoop_tmp_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow unconfined_t zookeeper_tmp_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow unconfined_t hadoop_home_t (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename)))
                (optional unconfined_optional_39
                    (typeattributeset cil_gen_require unconfined_systemd_t)
                    (allow unconfined_systemd_t hadoop_t (dir (ioctl read getattr lock open search)))
                    (allow unconfined_systemd_t hadoop_t (file (ioctl read getattr lock open)))
                    (allow unconfined_systemd_t hadoop_t (lnk_file (read getattr)))
                    (allow unconfined_systemd_t hadoop_t (process (getattr)))
                    (allow unconfined_systemd_t hadoop_t (process (sigchld sigkill sigstop signull signal)))
                    (allow hadoop_t unconfined_systemd_t (fd (use)))
                    (allow hadoop_t unconfined_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                    (allow hadoop_t unconfined_systemd_t (dir (ioctl read getattr lock open search)))
                    (allow hadoop_t unconfined_systemd_t (file (ioctl read getattr lock open)))
                    (allow hadoop_t unconfined_systemd_t (lnk_file (read getattr)))
                    (allow hadoop_t unconfined_systemd_t (process (getattr)))
                    (allow hadoop_t unconfined_systemd_t (process (sigchld)))
                    (allow unconfined_systemd_t zookeeper_t (dir (ioctl read getattr lock open search)))
                    (allow unconfined_systemd_t zookeeper_t (file (ioctl read getattr lock open)))
                    (allow unconfined_systemd_t zookeeper_t (lnk_file (read getattr)))
                    (allow unconfined_systemd_t zookeeper_t (process (getattr)))
                    (allow unconfined_systemd_t zookeeper_t (process (sigchld sigkill sigstop signull signal)))
                    (allow zookeeper_t unconfined_systemd_t (fd (use)))
                    (allow zookeeper_t unconfined_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                    (allow zookeeper_t unconfined_systemd_t (dir (ioctl read getattr lock open search)))
                    (allow zookeeper_t unconfined_systemd_t (file (ioctl read getattr lock open)))
                    (allow zookeeper_t unconfined_systemd_t (lnk_file (read getattr)))
                    (allow zookeeper_t unconfined_systemd_t (process (getattr)))
                    (allow zookeeper_t unconfined_systemd_t (process (sigchld)))
                )
            )
            (optional unconfined_optional_40
                (typeattributeset cil_gen_require init_t)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require device_t)
                (typeattributeset cil_gen_require null_device_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require initrc_exec_t)
                (typeattributeset cil_gen_require init_script_file_type)
                (typeattributeset cil_gen_require systemdunit)
                (typeattributeset cil_gen_require systemd_unit_t)
                (typeattributeset cil_gen_require initctl_t)
                (typeattributeset cil_gen_require init_exec_t)
                (allow unconfined_t null_device_t (service (status start stop reload)))
                (allow unconfined_t init_t (system (disable)))
                (allow unconfined_t init_t (system (enable)))
                (allow unconfined_t init_script_file_type (service (status)))
                (allow unconfined_t systemdunit (service (status)))
                (allow unconfined_t systemd_unit_t (service (status)))
                (allow unconfined_t init_t (system (status)))
                (allow unconfined_t systemdunit (service (status start stop reload enable disable)))
                (allow unconfined_t systemdunit (file (getattr)))
                (allow unconfined_t initrc_exec_t (service (status start stop)))
                (allow unconfined_t init_t (system (reboot)))
                (allow unconfined_t init_t (system (reload)))
                (allow unconfined_t init_script_file_type (service (reload)))
                (allow unconfined_t systemdunit (service (reload)))
                (allow unconfined_t init_t (system (halt)))
                (allow unconfined_t init_t (system (start)))
                (allow unconfined_t init_script_file_type (service (start)))
                (allow unconfined_t systemdunit (service (start)))
                (allow unconfined_t systemd_unit_t (service (start)))
                (allow unconfined_t init_script_file_type (service (stop)))
                (allow unconfined_t systemdunit (service (stop)))
                (allow unconfined_t systemd_unit_t (service (stop)))
                (allow unconfined_t init_t (system (stop)))
                (allow unconfined_t init_t (dir (ioctl read getattr lock open search)))
                (allow unconfined_t init_t (file (ioctl read getattr lock open)))
                (allow unconfined_t init_t (lnk_file (read getattr)))
                (allow unconfined_t init_t (process (getattr)))
                (allow unconfined_t init_t (process (signal)))
                (allow unconfined_t self (unix_dgram_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
                (allow unconfined_t init_t (unix_dgram_socket (sendto)))
                (allow unconfined_t init_t (unix_stream_socket (connectto)))
                (allow unconfined_t initctl_t (fifo_file (ioctl read write getattr lock append open)))
                (allow unconfined_t bin_t (dir (getattr open search)))
                (allow unconfined_t bin_t (lnk_file (read getattr)))
                (allow unconfined_t usr_t (dir (getattr open search)))
                (allow unconfined_t bin_t (dir (getattr open search)))
                (allow unconfined_t bin_t (dir (ioctl read getattr lock open search)))
                (allow unconfined_t bin_t (file (ioctl read getattr lock map execute open execute_no_trans)))
                (allow unconfined_t device_t (dir (getattr open search)))
                (allow unconfined_t device_t (dir (ioctl read getattr lock open search)))
                (allow unconfined_t device_t (dir (getattr open search)))
                (allow unconfined_t device_t (lnk_file (read getattr)))
                (allow unconfined_t var_run_t (lnk_file (read getattr)))
                (allow unconfined_t var_t (dir (getattr open search)))
                (allow unconfined_t var_run_t (dir (getattr open search)))
                (allow unconfined_t bin_t (dir (getattr open search)))
                (allow unconfined_t bin_t (lnk_file (read getattr)))
                (allow unconfined_t usr_t (dir (getattr open search)))
                (allow unconfined_t init_exec_t (file (ioctl read getattr lock map execute open execute_no_trans)))
            )
            (optional unconfined_optional_41
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require innd_t)
                (typeattributeset cil_gen_require innd_exec_t)
                (allow unconfined_t bin_t (dir (getattr open search)))
                (allow unconfined_t bin_t (lnk_file (read getattr)))
                (allow unconfined_t usr_t (dir (getattr open search)))
                (allow unconfined_t innd_exec_t (file (ioctl read getattr map execute open)))
                (allow unconfined_t innd_t (process (transition)))
                (dontaudit unconfined_t innd_t (process (noatsecure siginh rlimitinh)))
                (typetransition unconfined_t innd_exec_t process innd_t)
                (allow innd_t unconfined_t (fd (use)))
                (allow innd_t unconfined_t (fifo_file (ioctl read write getattr lock append)))
                (allow innd_t unconfined_t (process (sigchld)))
            )
            (optional unconfined_optional_42
                (roleattributeset cil_gen_require unconfined_java_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require unconfined_java_t)
                (typeattributeset cil_gen_require java_exec_t)
                (roleattributeset cil_gen_require unconfined_java_roles)
                (roleattributeset unconfined_java_roles (unconfined_r ))
                (allow unconfined_application_exec_domain bin_t (dir (getattr open search)))
                (allow unconfined_application_exec_domain bin_t (lnk_file (read getattr)))
                (allow unconfined_application_exec_domain usr_t (dir (getattr open search)))
                (allow unconfined_application_exec_domain java_exec_t (file (ioctl read getattr map execute open)))
                (allow unconfined_application_exec_domain unconfined_java_t (process (transition)))
                (dontaudit unconfined_application_exec_domain unconfined_java_t (process (noatsecure siginh rlimitinh)))
                (typetransition unconfined_application_exec_domain java_exec_t process unconfined_java_t)
                (allow unconfined_java_t unconfined_application_exec_domain (fd (use)))
                (allow unconfined_java_t unconfined_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                (allow unconfined_java_t unconfined_application_exec_domain (process (sigchld)))
            )
            (optional unconfined_optional_43
                (roleattributeset cil_gen_require checkpc_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require checkpc_t)
                (typeattributeset cil_gen_require checkpc_exec_t)
                (roleattributeset cil_gen_require checkpc_roles)
                (roleattributeset checkpc_roles (unconfined_r ))
                (allow unconfined_t bin_t (dir (getattr open search)))
                (allow unconfined_t bin_t (lnk_file (read getattr)))
                (allow unconfined_t usr_t (dir (getattr open search)))
                (allow unconfined_t checkpc_exec_t (file (ioctl read getattr map execute open)))
                (allow unconfined_t checkpc_t (process (transition)))
                (dontaudit unconfined_t checkpc_t (process (noatsecure siginh rlimitinh)))
                (typetransition unconfined_t checkpc_exec_t process checkpc_t)
                (allow checkpc_t unconfined_t (fd (use)))
                (allow checkpc_t unconfined_t (fifo_file (ioctl read write getattr lock append)))
                (allow checkpc_t unconfined_t (process (sigchld)))
            )
            (optional unconfined_optional_44
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require lvm_t)
                (typeattributeset cil_gen_require lvm_exec_t)
                (roleattributeset cil_gen_require unconfined_r)
                (roletype unconfined_r lvm_t)
                (allow unconfined_t bin_t (dir (getattr open search)))
                (allow unconfined_t bin_t (lnk_file (read getattr)))
                (allow unconfined_t usr_t (dir (getattr open search)))
                (allow unconfined_t lvm_exec_t (file (ioctl read getattr map execute open)))
                (allow unconfined_t lvm_t (process (transition)))
                (dontaudit unconfined_t lvm_t (process (noatsecure siginh rlimitinh)))
                (typetransition unconfined_t lvm_exec_t process lvm_t)
                (allow lvm_t unconfined_t (fd (use)))
                (allow lvm_t unconfined_t (fifo_file (ioctl read write getattr lock append)))
                (allow lvm_t unconfined_t (process (sigchld)))
            )
            (optional unconfined_optional_45
                (typeattributeset cil_gen_require modemmanager_t)
                (allow unconfined_t modemmanager_t (dbus (send_msg)))
                (allow modemmanager_t unconfined_t (dbus (send_msg)))
            )
            (optional unconfined_optional_46
                (roleattributeset cil_gen_require kmod_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require kmod_t)
                (typeattributeset cil_gen_require kmod_exec_t)
                (roleattributeset cil_gen_require kmod_roles)
                (roleattributeset kmod_roles (unconfined_r ))
                (allow unconfined_t bin_t (dir (getattr open search)))
                (allow unconfined_t bin_t (lnk_file (read getattr)))
                (allow unconfined_t usr_t (dir (getattr open search)))
                (allow unconfined_t kmod_exec_t (file (ioctl read getattr map execute open)))
                (allow unconfined_t kmod_t (process (transition)))
                (dontaudit unconfined_t kmod_t (process (noatsecure siginh rlimitinh)))
                (typetransition unconfined_t kmod_exec_t process kmod_t)
                (allow kmod_t unconfined_t (fd (use)))
                (allow kmod_t unconfined_t (fifo_file (ioctl read write getattr lock append)))
                (allow kmod_t unconfined_t (process (sigchld)))
            )
            (optional unconfined_optional_47
                (roleattributeset cil_gen_require mono_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require mono_t)
                (typeattributeset cil_gen_require mono_exec_t)
                (roleattributeset cil_gen_require mono_roles)
                (roleattributeset mono_roles (unconfined_r ))
                (allow unconfined_t bin_t (dir (getattr open search)))
                (allow unconfined_t bin_t (lnk_file (read getattr)))
                (allow unconfined_t usr_t (dir (getattr open search)))
                (allow unconfined_t mono_exec_t (file (ioctl read getattr map execute open)))
                (allow unconfined_t mono_t (process (transition)))
                (dontaudit unconfined_t mono_t (process (noatsecure siginh rlimitinh)))
                (typetransition unconfined_t mono_exec_t process mono_t)
                (allow mono_t unconfined_t (fd (use)))
                (allow mono_t unconfined_t (fifo_file (ioctl read write getattr lock append)))
                (allow mono_t unconfined_t (process (sigchld)))
            )
            (optional unconfined_optional_48
                (roleattributeset cil_gen_require user_mail_roles)
                (typeattributeset cil_gen_require user_home_dir_t)
                (typeattributeset cil_gen_require home_root_t)
                (typeattributeset cil_gen_require mta_user_agent)
                (typeattributeset cil_gen_require user_mail_t)
                (typeattributeset cil_gen_require sendmail_exec_t)
                (typeattributeset cil_gen_require mail_home_t)
                (typeattributeset cil_gen_require user_mail_tmp_t)
                (typeattributeset cil_gen_require mail_home_rw_t)
                (roleattributeset cil_gen_require unconfined_r)
                (roletype unconfined_r mta_user_agent)
                (roleattributeset cil_gen_require user_mail_roles)
                (roleattributeset user_mail_roles (unconfined_r ))
                (allow unconfined_application_exec_domain sendmail_exec_t (file (ioctl read getattr map execute open)))
                (allow unconfined_application_exec_domain user_mail_t (process (transition)))
                (dontaudit unconfined_application_exec_domain user_mail_t (process (noatsecure siginh rlimitinh)))
                (typetransition unconfined_application_exec_domain sendmail_exec_t process user_mail_t)
                (allow user_mail_t unconfined_application_exec_domain (fd (use)))
                (allow user_mail_t unconfined_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                (allow user_mail_t unconfined_application_exec_domain (process (sigchld)))
                (allow unconfined_application_exec_domain sendmail_exec_t (lnk_file (read getattr)))
                (allow unconfined_application_exec_domain mta_user_agent (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow unconfined_application_exec_domain user_mail_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow unconfined_application_exec_domain mta_user_agent (dir (ioctl read getattr lock open search)))
                (allow unconfined_application_exec_domain user_mail_t (dir (ioctl read getattr lock open search)))
                (allow unconfined_application_exec_domain mta_user_agent (file (ioctl read getattr lock open)))
                (allow unconfined_application_exec_domain user_mail_t (file (ioctl read getattr lock open)))
                (allow unconfined_application_exec_domain mta_user_agent (lnk_file (read getattr)))
                (allow unconfined_application_exec_domain user_mail_t (lnk_file (read getattr)))
                (allow unconfined_application_exec_domain mta_user_agent (process (getattr)))
                (allow unconfined_application_exec_domain user_mail_t (process (getattr)))
                (allow unconfined_t mail_home_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow unconfined_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow unconfined_t home_root_t (dir (getattr open search)))
                (allow unconfined_t home_root_t (lnk_file (read getattr)))
                (allow unconfined_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow unconfined_t home_root_t (dir (getattr open search)))
                (allow unconfined_t home_root_t (lnk_file (read getattr)))
                (allow unconfined_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow unconfined_t home_root_t (dir (getattr open search)))
                (allow unconfined_t home_root_t (lnk_file (read getattr)))
                (allow unconfined_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow unconfined_t home_root_t (dir (getattr open search)))
                (allow unconfined_t home_root_t (lnk_file (read getattr)))
                (allow unconfined_t mail_home_rw_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow unconfined_t mail_home_rw_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow unconfined_t mail_home_rw_t (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename)))
                (allow unconfined_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow unconfined_t home_root_t (dir (getattr open search)))
                (allow unconfined_t home_root_t (lnk_file (read getattr)))
                (allow unconfined_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow unconfined_t home_root_t (dir (getattr open search)))
                (allow unconfined_t home_root_t (lnk_file (read getattr)))
                (allow unconfined_t user_mail_tmp_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow unconfined_t user_mail_tmp_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (typetransition unconfined_t user_home_dir_t dir ".maildir" mail_home_rw_t)
                (typetransition unconfined_t user_home_dir_t dir "Maildir" mail_home_rw_t)
                (typetransition unconfined_t user_home_dir_t file "dead.letter" mail_home_t)
                (typetransition unconfined_t user_home_dir_t file ".mailrc" mail_home_t)
                (typetransition unconfined_t user_home_dir_t file ".forward" mail_home_t)
                (typetransition unconfined_t user_home_dir_t file ".esmtp_queue" mail_home_t)
                (optional unconfined_optional_49
                    (roleattributeset cil_gen_require exim_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require exim_t)
                    (typeattributeset cil_gen_require exim_exec_t)
                    (roleattributeset cil_gen_require exim_roles)
                    (roleattributeset exim_roles (unconfined_r ))
                    (allow unconfined_application_exec_domain bin_t (dir (getattr open search)))
                    (allow unconfined_application_exec_domain bin_t (lnk_file (read getattr)))
                    (allow unconfined_application_exec_domain usr_t (dir (getattr open search)))
                    (allow unconfined_application_exec_domain exim_exec_t (file (ioctl read getattr map execute open)))
                    (allow unconfined_application_exec_domain exim_t (process (transition)))
                    (dontaudit unconfined_application_exec_domain exim_t (process (noatsecure siginh rlimitinh)))
                    (typetransition unconfined_application_exec_domain exim_exec_t process exim_t)
                    (allow exim_t unconfined_application_exec_domain (fd (use)))
                    (allow exim_t unconfined_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                    (allow exim_t unconfined_application_exec_domain (process (sigchld)))
                )
                (optional unconfined_optional_50
                    (roleattributeset cil_gen_require mailman_roles)
                    (typeattributeset cil_gen_require lib_t)
                    (typeattributeset cil_gen_require mailman_mail_exec_t)
                    (typeattributeset cil_gen_require mailman_mail_t)
                    (roleattributeset cil_gen_require mailman_roles)
                    (roleattributeset mailman_roles (unconfined_r ))
                    (allow unconfined_application_exec_domain lib_t (dir (getattr open search)))
                    (allow unconfined_application_exec_domain mailman_mail_exec_t (file (ioctl read getattr map execute open)))
                    (allow unconfined_application_exec_domain mailman_mail_t (process (transition)))
                    (dontaudit unconfined_application_exec_domain mailman_mail_t (process (noatsecure siginh rlimitinh)))
                    (typetransition unconfined_application_exec_domain mailman_mail_exec_t process mailman_mail_t)
                    (allow mailman_mail_t unconfined_application_exec_domain (fd (use)))
                    (allow mailman_mail_t unconfined_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                    (allow mailman_mail_t unconfined_application_exec_domain (process (sigchld)))
                )
                (optional unconfined_optional_51
                    (typeattributeset cil_gen_require unconfined_systemd_t)
                    (allow unconfined_systemd_t user_mail_t (dir (ioctl read getattr lock open search)))
                    (allow unconfined_systemd_t user_mail_t (file (ioctl read getattr lock open)))
                    (allow unconfined_systemd_t user_mail_t (lnk_file (read getattr)))
                    (allow unconfined_systemd_t user_mail_t (process (getattr)))
                    (allow unconfined_systemd_t user_mail_t (process (sigchld sigkill sigstop signull signal)))
                    (allow user_mail_t unconfined_systemd_t (fd (use)))
                    (allow user_mail_t unconfined_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                    (allow user_mail_t unconfined_systemd_t (dir (ioctl read getattr lock open search)))
                    (allow user_mail_t unconfined_systemd_t (file (ioctl read getattr lock open)))
                    (allow user_mail_t unconfined_systemd_t (lnk_file (read getattr)))
                    (allow user_mail_t unconfined_systemd_t (process (getattr)))
                    (allow user_mail_t unconfined_systemd_t (process (sigchld)))
                )
            )
            (optional unconfined_optional_52
                (roleattributeset cil_gen_require oddjob_mkhomedir_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require oddjob_mkhomedir_t)
                (typeattributeset cil_gen_require oddjob_mkhomedir_exec_t)
                (roleattributeset cil_gen_require oddjob_mkhomedir_roles)
                (roleattributeset oddjob_mkhomedir_roles (unconfined_r ))
                (allow unconfined_t bin_t (dir (getattr open search)))
                (allow unconfined_t bin_t (lnk_file (read getattr)))
                (allow unconfined_t usr_t (dir (getattr open search)))
                (allow unconfined_t oddjob_mkhomedir_exec_t (file (ioctl read getattr map execute open)))
                (allow unconfined_t oddjob_mkhomedir_t (process (transition)))
                (dontaudit unconfined_t oddjob_mkhomedir_t (process (noatsecure siginh rlimitinh)))
                (typetransition unconfined_t oddjob_mkhomedir_exec_t process oddjob_mkhomedir_t)
                (allow oddjob_mkhomedir_t unconfined_t (fd (use)))
                (allow oddjob_mkhomedir_t unconfined_t (fifo_file (ioctl read write getattr lock append)))
                (allow oddjob_mkhomedir_t unconfined_t (process (sigchld)))
            )
            (optional unconfined_optional_53
                (roleattributeset cil_gen_require portage_roles)
                (roleattributeset cil_gen_require portage_fetch_roles)
                (roleattributeset cil_gen_require gcc_config_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require portage_t)
                (typeattributeset cil_gen_require portage_exec_t)
                (typeattributeset cil_gen_require portage_tmp_t)
                (typeattributeset cil_gen_require portage_fetch_t)
                (typeattributeset cil_gen_require portage_fetch_exec_t)
                (typeattributeset cil_gen_require gcc_config_t)
                (typeattributeset cil_gen_require gcc_config_exec_t)
                (roleattributeset cil_gen_require portage_fetch_roles)
                (roleattributeset portage_fetch_roles (unconfined_r ))
                (roleattributeset cil_gen_require gcc_config_roles)
                (roleattributeset gcc_config_roles (unconfined_r ))
                (roleattributeset cil_gen_require portage_roles)
                (roleattributeset portage_roles (unconfined_r ))
                (allow unconfined_t bin_t (dir (getattr open search)))
                (allow unconfined_t bin_t (lnk_file (read getattr)))
                (allow unconfined_t usr_t (dir (getattr open search)))
                (allow unconfined_t portage_exec_t (file (ioctl read getattr map execute open)))
                (allow unconfined_t portage_t (process (transition)))
                (dontaudit unconfined_t portage_t (process (noatsecure siginh rlimitinh)))
                (typetransition unconfined_t portage_exec_t process portage_t)
                (allow portage_t unconfined_t (fd (use)))
                (allow portage_t unconfined_t (fifo_file (ioctl read write getattr lock append)))
                (allow portage_t unconfined_t (process (sigchld)))
                (allow unconfined_t portage_tmp_t (file (ioctl read getattr lock map execute open execute_no_trans)))
                (allow unconfined_t bin_t (dir (getattr open search)))
                (allow unconfined_t bin_t (lnk_file (read getattr)))
                (allow unconfined_t usr_t (dir (getattr open search)))
                (allow unconfined_t portage_fetch_exec_t (file (ioctl read getattr map execute open)))
                (allow unconfined_t portage_fetch_t (process (transition)))
                (dontaudit unconfined_t portage_fetch_t (process (noatsecure siginh rlimitinh)))
                (typetransition unconfined_t portage_fetch_exec_t process portage_fetch_t)
                (allow portage_fetch_t unconfined_t (fd (use)))
                (allow portage_fetch_t unconfined_t (fifo_file (ioctl read write getattr lock append)))
                (allow portage_fetch_t unconfined_t (process (sigchld)))
                (allow unconfined_t bin_t (dir (getattr open search)))
                (allow unconfined_t bin_t (lnk_file (read getattr)))
                (allow unconfined_t usr_t (dir (getattr open search)))
                (allow unconfined_t gcc_config_exec_t (file (ioctl read getattr map execute open)))
                (allow unconfined_t gcc_config_t (process (transition)))
                (dontaudit unconfined_t gcc_config_t (process (noatsecure siginh rlimitinh)))
                (typetransition unconfined_t gcc_config_exec_t process gcc_config_t)
                (allow gcc_config_t unconfined_t (fd (use)))
                (allow gcc_config_t unconfined_t (fifo_file (ioctl read write getattr lock append)))
                (allow gcc_config_t unconfined_t (process (sigchld)))
                (allow unconfined_t gcc_config_t (process2 (nnp_transition)))
            )
            (optional unconfined_optional_54
                (roleattributeset cil_gen_require prelink_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require prelink_t)
                (typeattributeset cil_gen_require prelink_exec_t)
                (roleattributeset cil_gen_require prelink_roles)
                (roleattributeset prelink_roles (unconfined_r ))
                (allow unconfined_t bin_t (dir (getattr open search)))
                (allow unconfined_t bin_t (lnk_file (read getattr)))
                (allow unconfined_t usr_t (dir (getattr open search)))
                (allow unconfined_t prelink_exec_t (file (ioctl read getattr map execute open)))
                (allow unconfined_t prelink_t (process (transition)))
                (dontaudit unconfined_t prelink_t (process (noatsecure siginh rlimitinh)))
                (typetransition unconfined_t prelink_exec_t process prelink_t)
                (allow prelink_t unconfined_t (fd (use)))
                (allow prelink_t unconfined_t (fifo_file (ioctl read write getattr lock append)))
                (allow prelink_t unconfined_t (process (sigchld)))
                (dontaudit prelink_t unconfined_t (tcp_socket (read write)))
                (dontaudit prelink_t unconfined_t (udp_socket (read write)))
                (dontaudit prelink_t unconfined_t (rawip_socket (read write)))
                (dontaudit prelink_t unconfined_t (netlink_socket (read write)))
                (dontaudit prelink_t unconfined_t (packet_socket (read write)))
                (dontaudit prelink_t unconfined_t (unix_stream_socket (read write)))
                (dontaudit prelink_t unconfined_t (unix_dgram_socket (read write)))
                (dontaudit prelink_t unconfined_t (netlink_route_socket (read write)))
                (dontaudit prelink_t unconfined_t (netlink_tcpdiag_socket (read write)))
                (dontaudit prelink_t unconfined_t (netlink_nflog_socket (read write)))
                (dontaudit prelink_t unconfined_t (netlink_xfrm_socket (read write)))
                (dontaudit prelink_t unconfined_t (netlink_selinux_socket (read write)))
                (dontaudit prelink_t unconfined_t (netlink_audit_socket (read write)))
                (dontaudit prelink_t unconfined_t (netlink_dnrt_socket (read write)))
                (dontaudit prelink_t unconfined_t (netlink_kobject_uevent_socket (read write)))
                (dontaudit prelink_t unconfined_t (appletalk_socket (read write)))
                (dontaudit prelink_t unconfined_t (tun_socket (read write)))
                (dontaudit prelink_t unconfined_t (netlink_iscsi_socket (read write)))
                (dontaudit prelink_t unconfined_t (netlink_fib_lookup_socket (read write)))
                (dontaudit prelink_t unconfined_t (netlink_connector_socket (read write)))
                (dontaudit prelink_t unconfined_t (netlink_netfilter_socket (read write)))
                (dontaudit prelink_t unconfined_t (netlink_generic_socket (read write)))
                (dontaudit prelink_t unconfined_t (netlink_scsitransport_socket (read write)))
                (dontaudit prelink_t unconfined_t (netlink_rdma_socket (read write)))
                (dontaudit prelink_t unconfined_t (netlink_crypto_socket (read write)))
                (dontaudit prelink_t unconfined_t (sctp_socket (read write)))
                (dontaudit prelink_t unconfined_t (icmp_socket (read write)))
                (dontaudit prelink_t unconfined_t (ax25_socket (read write)))
                (dontaudit prelink_t unconfined_t (ipx_socket (read write)))
                (dontaudit prelink_t unconfined_t (netrom_socket (read write)))
                (dontaudit prelink_t unconfined_t (atmpvc_socket (read write)))
                (dontaudit prelink_t unconfined_t (x25_socket (read write)))
                (dontaudit prelink_t unconfined_t (rose_socket (read write)))
                (dontaudit prelink_t unconfined_t (decnet_socket (read write)))
                (dontaudit prelink_t unconfined_t (atmsvc_socket (read write)))
                (dontaudit prelink_t unconfined_t (rds_socket (read write)))
                (dontaudit prelink_t unconfined_t (irda_socket (read write)))
                (dontaudit prelink_t unconfined_t (pppox_socket (read write)))
                (dontaudit prelink_t unconfined_t (llc_socket (read write)))
                (dontaudit prelink_t unconfined_t (can_socket (read write)))
                (dontaudit prelink_t unconfined_t (tipc_socket (read write)))
                (dontaudit prelink_t unconfined_t (bluetooth_socket (read write)))
                (dontaudit prelink_t unconfined_t (iucv_socket (read write)))
                (dontaudit prelink_t unconfined_t (rxrpc_socket (read write)))
                (dontaudit prelink_t unconfined_t (isdn_socket (read write)))
                (dontaudit prelink_t unconfined_t (phonet_socket (read write)))
                (dontaudit prelink_t unconfined_t (ieee802154_socket (read write)))
                (dontaudit prelink_t unconfined_t (caif_socket (read write)))
                (dontaudit prelink_t unconfined_t (alg_socket (read write)))
                (dontaudit prelink_t unconfined_t (nfc_socket (read write)))
                (dontaudit prelink_t unconfined_t (vsock_socket (read write)))
                (dontaudit prelink_t unconfined_t (kcm_socket (read write)))
                (dontaudit prelink_t unconfined_t (qipcrtr_socket (read write)))
                (dontaudit prelink_t unconfined_t (smc_socket (read write)))
                (dontaudit prelink_t unconfined_t (xdp_socket (read write)))
                (dontaudit prelink_t unconfined_t (fifo_file (setattr)))
            )
            (optional unconfined_optional_55
                (roleattributeset cil_gen_require portmap_helper_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require portmap_helper_t)
                (typeattributeset cil_gen_require portmap_helper_exec_t)
                (roleattributeset cil_gen_require portmap_helper_roles)
                (roleattributeset portmap_helper_roles (unconfined_r ))
                (allow unconfined_t bin_t (dir (getattr open search)))
                (allow unconfined_t bin_t (lnk_file (read getattr)))
                (allow unconfined_t usr_t (dir (getattr open search)))
                (allow unconfined_t portmap_helper_exec_t (file (ioctl read getattr map execute open)))
                (allow unconfined_t portmap_helper_t (process (transition)))
                (dontaudit unconfined_t portmap_helper_t (process (noatsecure siginh rlimitinh)))
                (typetransition unconfined_t portmap_helper_exec_t process portmap_helper_t)
                (allow portmap_helper_t unconfined_t (fd (use)))
                (allow portmap_helper_t unconfined_t (fifo_file (ioctl read write getattr lock append)))
                (allow portmap_helper_t unconfined_t (process (sigchld)))
            )
            (optional unconfined_optional_56
                (roleattributeset cil_gen_require postfix_map_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require postfix_map_t)
                (typeattributeset cil_gen_require postfix_map_exec_t)
                (typeattributeset cil_gen_require postfix_master_t)
                (typeattributeset cil_gen_require postfix_master_exec_t)
                (roleattributeset cil_gen_require postfix_map_roles)
                (roleattributeset postfix_map_roles (unconfined_r ))
                (allow unconfined_t bin_t (dir (getattr open search)))
                (allow unconfined_t bin_t (lnk_file (read getattr)))
                (allow unconfined_t usr_t (dir (getattr open search)))
                (allow unconfined_t postfix_map_exec_t (file (ioctl read getattr map execute open)))
                (allow unconfined_t postfix_map_t (process (transition)))
                (dontaudit unconfined_t postfix_map_t (process (noatsecure siginh rlimitinh)))
                (typetransition unconfined_t postfix_map_exec_t process postfix_map_t)
                (allow postfix_map_t unconfined_t (fd (use)))
                (allow postfix_map_t unconfined_t (fifo_file (ioctl read write getattr lock append)))
                (allow postfix_map_t unconfined_t (process (sigchld)))
                (allow unconfined_t bin_t (dir (getattr open search)))
                (allow unconfined_t bin_t (lnk_file (read getattr)))
                (allow unconfined_t usr_t (dir (getattr open search)))
                (allow unconfined_t postfix_master_exec_t (file (ioctl read getattr map execute open)))
                (allow unconfined_t postfix_master_t (process (transition)))
                (dontaudit unconfined_t postfix_master_t (process (noatsecure siginh rlimitinh)))
                (typetransition unconfined_t postfix_master_exec_t process postfix_master_t)
                (allow postfix_master_t unconfined_t (fd (use)))
                (allow postfix_master_t unconfined_t (fifo_file (ioctl read write getattr lock append)))
                (allow postfix_master_t unconfined_t (process (sigchld)))
            )
            (optional unconfined_optional_57
                (roleattributeset cil_gen_require pyzor_roles)
                (typeattributeset cil_gen_require user_home_dir_t)
                (typeattributeset cil_gen_require home_root_t)
                (typeattributeset cil_gen_require pyzor_t)
                (typeattributeset cil_gen_require pyzor_exec_t)
                (typeattributeset cil_gen_require pyzor_home_t)
                (typeattributeset cil_gen_require pyzor_tmp_t)
                (roleattributeset cil_gen_require pyzor_roles)
                (roleattributeset pyzor_roles (unconfined_r ))
                (allow unconfined_application_exec_domain pyzor_exec_t (file (ioctl read getattr map execute open)))
                (allow unconfined_application_exec_domain pyzor_t (process (transition)))
                (dontaudit unconfined_application_exec_domain pyzor_t (process (noatsecure siginh rlimitinh)))
                (typetransition unconfined_application_exec_domain pyzor_exec_t process pyzor_t)
                (allow pyzor_t unconfined_application_exec_domain (fd (use)))
                (allow pyzor_t unconfined_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                (allow pyzor_t unconfined_application_exec_domain (process (sigchld)))
                (allow unconfined_application_exec_domain pyzor_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow unconfined_application_exec_domain pyzor_t (dir (ioctl read getattr lock open search)))
                (allow unconfined_application_exec_domain pyzor_t (file (ioctl read getattr lock open)))
                (allow unconfined_application_exec_domain pyzor_t (lnk_file (read getattr)))
                (allow unconfined_application_exec_domain pyzor_t (process (getattr)))
                (allow unconfined_t pyzor_home_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow unconfined_t pyzor_tmp_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow unconfined_t pyzor_home_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow unconfined_t pyzor_tmp_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow unconfined_t pyzor_home_t (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename)))
                (allow unconfined_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow unconfined_t home_root_t (dir (getattr open search)))
                (allow unconfined_t home_root_t (lnk_file (read getattr)))
                (typetransition unconfined_t user_home_dir_t dir ".pyzor" pyzor_home_t)
                (optional unconfined_optional_58
                    (typeattributeset cil_gen_require unconfined_systemd_t)
                    (allow unconfined_systemd_t pyzor_t (dir (ioctl read getattr lock open search)))
                    (allow unconfined_systemd_t pyzor_t (file (ioctl read getattr lock open)))
                    (allow unconfined_systemd_t pyzor_t (lnk_file (read getattr)))
                    (allow unconfined_systemd_t pyzor_t (process (getattr)))
                    (allow unconfined_systemd_t pyzor_t (process (sigchld sigkill sigstop signull signal)))
                    (allow pyzor_t unconfined_systemd_t (fd (use)))
                    (allow pyzor_t unconfined_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                    (allow pyzor_t unconfined_systemd_t (dir (ioctl read getattr lock open search)))
                    (allow pyzor_t unconfined_systemd_t (file (ioctl read getattr lock open)))
                    (allow pyzor_t unconfined_systemd_t (lnk_file (read getattr)))
                    (allow pyzor_t unconfined_systemd_t (process (getattr)))
                    (allow pyzor_t unconfined_systemd_t (process (sigchld)))
                )
            )
            (optional unconfined_optional_59
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require nfsd_t)
                (typeattributeset cil_gen_require nfsd_exec_t)
                (allow unconfined_t bin_t (dir (getattr open search)))
                (allow unconfined_t bin_t (lnk_file (read getattr)))
                (allow unconfined_t usr_t (dir (getattr open search)))
                (allow unconfined_t nfsd_exec_t (file (ioctl read getattr map execute open)))
                (allow unconfined_t nfsd_t (process (transition)))
                (dontaudit unconfined_t nfsd_t (process (noatsecure siginh rlimitinh)))
                (typetransition unconfined_t nfsd_exec_t process nfsd_t)
                (allow nfsd_t unconfined_t (fd (use)))
                (allow nfsd_t unconfined_t (fifo_file (ioctl read write getattr lock append)))
                (allow nfsd_t unconfined_t (process (sigchld)))
            )
            (optional unconfined_optional_60
                (typeattributeset cil_gen_require proc_t)
                (typeattributeset cil_gen_require rtkit_daemon_t)
                (allow rtkit_daemon_t unconfined_t (process (getsched setsched)))
                (allow unconfined_t proc_t (dir (getattr open search)))
                (allow unconfined_t proc_t (dir (getattr open search)))
                (allow rtkit_daemon_t unconfined_t (dir (ioctl read getattr lock open search)))
                (allow rtkit_daemon_t unconfined_t (file (ioctl read getattr lock open)))
                (allow rtkit_daemon_t unconfined_t (lnk_file (read getattr)))
                (allow rtkit_daemon_t unconfined_t (process (getattr)))
                (optional unconfined_optional_61
                    (typeattributeset cil_gen_require rtkit_daemon_t)
                    (allow unconfined_t rtkit_daemon_t (dbus (send_msg)))
                    (allow rtkit_daemon_t unconfined_t (dbus (send_msg)))
                )
            )
            (optional unconfined_optional_62
                (roleattributeset cil_gen_require rpm_roles)
                (typeattributeset cil_gen_require rpm_t)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require rpm_exec_t)
                (roleattributeset cil_gen_require rpm_roles)
                (roleattributeset rpm_roles (unconfined_r ))
                (allow unconfined_t bin_t (dir (getattr open search)))
                (allow unconfined_t bin_t (lnk_file (read getattr)))
                (allow unconfined_t usr_t (dir (getattr open search)))
                (allow unconfined_t rpm_exec_t (file (ioctl read getattr map execute open)))
                (allow unconfined_t rpm_t (process (transition)))
                (dontaudit unconfined_t rpm_t (process (noatsecure siginh rlimitinh)))
                (typetransition unconfined_t rpm_exec_t process rpm_t)
                (allow rpm_t unconfined_t (fd (use)))
                (allow rpm_t unconfined_t (fifo_file (ioctl read write getattr lock append)))
                (allow rpm_t unconfined_t (process (sigchld)))
            )
            (optional unconfined_optional_63
                (roleattributeset cil_gen_require samba_net_roles)
                (roleattributeset cil_gen_require winbind_helper_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require samba_net_t)
                (typeattributeset cil_gen_require samba_net_exec_t)
                (typeattributeset cil_gen_require winbind_helper_t)
                (typeattributeset cil_gen_require winbind_helper_exec_t)
                (roleattributeset cil_gen_require samba_net_roles)
                (roleattributeset samba_net_roles (unconfined_r ))
                (roleattributeset cil_gen_require winbind_helper_roles)
                (roleattributeset winbind_helper_roles (unconfined_r ))
                (allow unconfined_t bin_t (dir (getattr open search)))
                (allow unconfined_t bin_t (lnk_file (read getattr)))
                (allow unconfined_t usr_t (dir (getattr open search)))
                (allow unconfined_t samba_net_exec_t (file (ioctl read getattr map execute open)))
                (allow unconfined_t samba_net_t (process (transition)))
                (dontaudit unconfined_t samba_net_t (process (noatsecure siginh rlimitinh)))
                (typetransition unconfined_t samba_net_exec_t process samba_net_t)
                (allow samba_net_t unconfined_t (fd (use)))
                (allow samba_net_t unconfined_t (fifo_file (ioctl read write getattr lock append)))
                (allow samba_net_t unconfined_t (process (sigchld)))
                (allow unconfined_t bin_t (dir (getattr open search)))
                (allow unconfined_t bin_t (lnk_file (read getattr)))
                (allow unconfined_t usr_t (dir (getattr open search)))
                (allow unconfined_t winbind_helper_exec_t (file (ioctl read getattr map execute open)))
                (allow unconfined_t winbind_helper_t (process (transition)))
                (dontaudit unconfined_t winbind_helper_t (process (noatsecure siginh rlimitinh)))
                (typetransition unconfined_t winbind_helper_exec_t process winbind_helper_t)
                (allow winbind_helper_t unconfined_t (fd (use)))
                (allow winbind_helper_t unconfined_t (fifo_file (ioctl read write getattr lock append)))
                (allow winbind_helper_t unconfined_t (process (sigchld)))
            )
            (optional unconfined_optional_64
                (typeattributeset cil_gen_require user_home_dir_t)
                (typeattributeset cil_gen_require home_root_t)
                (typeattributeset cil_gen_require spamc_t)
                (typeattributeset cil_gen_require spamc_exec_t)
                (typeattributeset cil_gen_require spamc_tmp_t)
                (typeattributeset cil_gen_require spamassassin_t)
                (typeattributeset cil_gen_require spamassassin_exec_t)
                (typeattributeset cil_gen_require spamd_home_t)
                (typeattributeset cil_gen_require spamd_update_t)
                (typeattributeset cil_gen_require spamd_update_exec_t)
                (typeattributeset cil_gen_require spamassassin_home_t)
                (typeattributeset cil_gen_require spamassassin_tmp_t)
                (roleattributeset cil_gen_require unconfined_r)
                (roletype unconfined_r spamc_t)
                (roletype unconfined_r spamassassin_t)
                (roletype unconfined_r spamd_update_t)
                (allow unconfined_application_exec_domain spamassassin_exec_t (file (ioctl read getattr map execute open)))
                (allow unconfined_application_exec_domain spamassassin_t (process (transition)))
                (dontaudit unconfined_application_exec_domain spamassassin_t (process (noatsecure siginh rlimitinh)))
                (typetransition unconfined_application_exec_domain spamassassin_exec_t process spamassassin_t)
                (allow spamassassin_t unconfined_application_exec_domain (fd (use)))
                (allow spamassassin_t unconfined_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                (allow spamassassin_t unconfined_application_exec_domain (process (sigchld)))
                (allow unconfined_application_exec_domain spamc_exec_t (file (ioctl read getattr map execute open)))
                (allow unconfined_application_exec_domain spamc_t (process (transition)))
                (dontaudit unconfined_application_exec_domain spamc_t (process (noatsecure siginh rlimitinh)))
                (typetransition unconfined_application_exec_domain spamc_exec_t process spamc_t)
                (allow spamc_t unconfined_application_exec_domain (fd (use)))
                (allow spamc_t unconfined_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                (allow spamc_t unconfined_application_exec_domain (process (sigchld)))
                (allow unconfined_application_exec_domain spamd_update_exec_t (file (ioctl read getattr map execute open)))
                (allow unconfined_application_exec_domain spamd_update_t (process (transition)))
                (dontaudit unconfined_application_exec_domain spamd_update_t (process (noatsecure siginh rlimitinh)))
                (typetransition unconfined_application_exec_domain spamd_update_exec_t process spamd_update_t)
                (allow spamd_update_t unconfined_application_exec_domain (fd (use)))
                (allow spamd_update_t unconfined_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                (allow spamd_update_t unconfined_application_exec_domain (process (sigchld)))
                (allow unconfined_application_exec_domain spamc_t (dir (ioctl read getattr lock open search)))
                (allow unconfined_application_exec_domain spamassassin_t (dir (ioctl read getattr lock open search)))
                (allow unconfined_application_exec_domain spamd_update_t (dir (ioctl read getattr lock open search)))
                (allow unconfined_application_exec_domain spamc_t (file (ioctl read getattr lock open)))
                (allow unconfined_application_exec_domain spamassassin_t (file (ioctl read getattr lock open)))
                (allow unconfined_application_exec_domain spamd_update_t (file (ioctl read getattr lock open)))
                (allow unconfined_application_exec_domain spamc_t (lnk_file (read getattr)))
                (allow unconfined_application_exec_domain spamassassin_t (lnk_file (read getattr)))
                (allow unconfined_application_exec_domain spamd_update_t (lnk_file (read getattr)))
                (allow unconfined_application_exec_domain spamc_t (process (getattr)))
                (allow unconfined_application_exec_domain spamassassin_t (process (getattr)))
                (allow unconfined_application_exec_domain spamd_update_t (process (getattr)))
                (allow unconfined_application_exec_domain spamc_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow unconfined_application_exec_domain spamassassin_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow unconfined_application_exec_domain spamd_update_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow unconfined_t spamc_tmp_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow unconfined_t spamd_home_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow unconfined_t spamassassin_home_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow unconfined_t spamassassin_tmp_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow unconfined_t spamc_tmp_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow unconfined_t spamd_home_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow unconfined_t spamassassin_home_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow unconfined_t spamassassin_tmp_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow unconfined_t spamc_tmp_t (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename)))
                (allow unconfined_t spamd_home_t (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename)))
                (allow unconfined_t spamassassin_home_t (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename)))
                (allow unconfined_t spamassassin_tmp_t (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename)))
                (allow unconfined_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow unconfined_t home_root_t (dir (getattr open search)))
                (allow unconfined_t home_root_t (lnk_file (read getattr)))
                (allow unconfined_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow unconfined_t home_root_t (dir (getattr open search)))
                (allow unconfined_t home_root_t (lnk_file (read getattr)))
                (typetransition unconfined_t user_home_dir_t dir ".spamd" spamd_home_t)
                (typetransition unconfined_t user_home_dir_t dir ".spamassassin" spamassassin_home_t)
                (optional unconfined_optional_65
                    (typeattributeset cil_gen_require unconfined_systemd_t)
                    (allow unconfined_systemd_t spamassassin_t (dir (ioctl read getattr lock open search)))
                    (allow unconfined_systemd_t spamassassin_t (file (ioctl read getattr lock open)))
                    (allow unconfined_systemd_t spamassassin_t (lnk_file (read getattr)))
                    (allow unconfined_systemd_t spamassassin_t (process (getattr)))
                    (allow unconfined_systemd_t spamassassin_t (process (sigchld sigkill sigstop signull signal)))
                    (allow spamassassin_t unconfined_systemd_t (fd (use)))
                    (allow spamassassin_t unconfined_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                    (allow spamassassin_t unconfined_systemd_t (dir (ioctl read getattr lock open search)))
                    (allow spamassassin_t unconfined_systemd_t (file (ioctl read getattr lock open)))
                    (allow spamassassin_t unconfined_systemd_t (lnk_file (read getattr)))
                    (allow spamassassin_t unconfined_systemd_t (process (getattr)))
                    (allow spamassassin_t unconfined_systemd_t (process (sigchld)))
                    (allow unconfined_systemd_t spamc_t (dir (ioctl read getattr lock open search)))
                    (allow unconfined_systemd_t spamc_t (file (ioctl read getattr lock open)))
                    (allow unconfined_systemd_t spamc_t (lnk_file (read getattr)))
                    (allow unconfined_systemd_t spamc_t (process (getattr)))
                    (allow unconfined_systemd_t spamc_t (process (sigchld sigkill sigstop signull signal)))
                    (allow spamc_t unconfined_systemd_t (fd (use)))
                    (allow spamc_t unconfined_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                    (allow spamc_t unconfined_systemd_t (dir (ioctl read getattr lock open search)))
                    (allow spamc_t unconfined_systemd_t (file (ioctl read getattr lock open)))
                    (allow spamc_t unconfined_systemd_t (lnk_file (read getattr)))
                    (allow spamc_t unconfined_systemd_t (process (getattr)))
                    (allow spamc_t unconfined_systemd_t (process (sigchld)))
                )
            )
            (optional unconfined_optional_66
                (roleattributeset cil_gen_require syncthing_roles)
                (typeattributeset cil_gen_require syncthing_t)
                (typeattributeset cil_gen_require syncthing_exec_t)
                (typeattributeset cil_gen_require syncthing_xdg_config_t)
                (roleattributeset cil_gen_require syncthing_roles)
                (roleattributeset syncthing_roles (unconfined_r ))
                (allow unconfined_application_exec_domain syncthing_exec_t (file (ioctl read getattr map execute open)))
                (allow unconfined_application_exec_domain syncthing_t (process (transition)))
                (dontaudit unconfined_application_exec_domain syncthing_t (process (noatsecure siginh rlimitinh)))
                (typetransition unconfined_application_exec_domain syncthing_exec_t process syncthing_t)
                (allow syncthing_t unconfined_application_exec_domain (fd (use)))
                (allow syncthing_t unconfined_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                (allow syncthing_t unconfined_application_exec_domain (process (sigchld)))
                (allow unconfined_t syncthing_xdg_config_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow unconfined_t syncthing_xdg_config_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow unconfined_t syncthing_xdg_config_t (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename)))
                (optional unconfined_optional_67
                    (typeattributeset cil_gen_require unconfined_systemd_t)
                    (allow unconfined_systemd_t syncthing_t (dir (ioctl read getattr lock open search)))
                    (allow unconfined_systemd_t syncthing_t (file (ioctl read getattr lock open)))
                    (allow unconfined_systemd_t syncthing_t (lnk_file (read getattr)))
                    (allow unconfined_systemd_t syncthing_t (process (getattr)))
                    (allow unconfined_systemd_t syncthing_t (process (sigchld sigkill sigstop signull signal)))
                    (allow syncthing_t unconfined_systemd_t (fd (use)))
                    (allow syncthing_t unconfined_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                    (allow syncthing_t unconfined_systemd_t (dir (ioctl read getattr lock open search)))
                    (allow syncthing_t unconfined_systemd_t (file (ioctl read getattr lock open)))
                    (allow syncthing_t unconfined_systemd_t (lnk_file (read getattr)))
                    (allow syncthing_t unconfined_systemd_t (process (getattr)))
                    (allow syncthing_t unconfined_systemd_t (process (sigchld)))
                )
            )
            (optional unconfined_optional_68
                (roleattributeset cil_gen_require dhcpc_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require dhcpc_t)
                (typeattributeset cil_gen_require dhcpc_exec_t)
                (roleattributeset cil_gen_require dhcpc_roles)
                (roleattributeset dhcpc_roles (unconfined_r ))
                (allow unconfined_t bin_t (dir (getattr open search)))
                (allow unconfined_t bin_t (lnk_file (read getattr)))
                (allow unconfined_t usr_t (dir (getattr open search)))
                (allow unconfined_t dhcpc_exec_t (file (ioctl read getattr map execute open)))
                (allow unconfined_t dhcpc_t (process (transition)))
                (dontaudit unconfined_t dhcpc_t (process (noatsecure siginh rlimitinh)))
                (typetransition unconfined_t dhcpc_exec_t process dhcpc_t)
                (allow dhcpc_t unconfined_t (fd (use)))
                (allow dhcpc_t unconfined_t (fifo_file (ioctl read write getattr lock append)))
                (allow dhcpc_t unconfined_t (process (sigchld)))
                (allow unconfined_t dhcpc_t (dbus (send_msg)))
                (allow dhcpc_t unconfined_t (dbus (send_msg)))
            )
            (optional unconfined_optional_69
                (roleattributeset cil_gen_require tzdata_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require tzdata_t)
                (typeattributeset cil_gen_require tzdata_exec_t)
                (roleattributeset cil_gen_require tzdata_roles)
                (roleattributeset tzdata_roles (unconfined_r ))
                (allow unconfined_t bin_t (dir (getattr open search)))
                (allow unconfined_t bin_t (lnk_file (read getattr)))
                (allow unconfined_t usr_t (dir (getattr open search)))
                (allow unconfined_t tzdata_exec_t (file (ioctl read getattr map execute open)))
                (allow unconfined_t tzdata_t (process (transition)))
                (dontaudit unconfined_t tzdata_t (process (noatsecure siginh rlimitinh)))
                (typetransition unconfined_t tzdata_exec_t process tzdata_t)
                (allow tzdata_t unconfined_t (fd (use)))
                (allow tzdata_t unconfined_t (fifo_file (ioctl read write getattr lock append)))
                (allow tzdata_t unconfined_t (process (sigchld)))
            )
            (optional unconfined_optional_70
                (typeattributeset cil_gen_require unconfined_t)
                (roletype system_r unconfined_t)
                (roletype unconfined_r unconfined_t)
                (allow unconfined_t unconfined_t (dbus (send_msg)))
                (allow unconfined_t unconfined_t (dbus (send_msg)))
                (optional unconfined_optional_71
                    (roleattributeset cil_gen_require sysadm_passwd_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require sysadm_passwd_t)
                    (typeattributeset cil_gen_require admin_passwd_exec_t)
                    (roleattributeset cil_gen_require sysadm_passwd_roles)
                    (roleattributeset sysadm_passwd_roles (unconfined_r ))
                    (allow unconfined_t bin_t (dir (getattr open search)))
                    (allow unconfined_t bin_t (lnk_file (read getattr)))
                    (allow unconfined_t usr_t (dir (getattr open search)))
                    (allow unconfined_t admin_passwd_exec_t (file (ioctl read getattr map execute open)))
                    (allow unconfined_t sysadm_passwd_t (process (transition)))
                    (dontaudit unconfined_t sysadm_passwd_t (process (noatsecure siginh rlimitinh)))
                    (typetransition unconfined_t admin_passwd_exec_t process sysadm_passwd_t)
                    (allow sysadm_passwd_t unconfined_t (fd (use)))
                    (allow sysadm_passwd_t unconfined_t (fifo_file (ioctl read write getattr lock append)))
                    (allow sysadm_passwd_t unconfined_t (process (sigchld)))
                )
                (optional unconfined_optional_72
                    (roleattributeset cil_gen_require vpnc_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require vpnc_t)
                    (typeattributeset cil_gen_require vpnc_exec_t)
                    (roleattributeset cil_gen_require vpnc_roles)
                    (roleattributeset vpnc_roles (unconfined_r ))
                    (allow unconfined_t bin_t (dir (getattr open search)))
                    (allow unconfined_t bin_t (lnk_file (read getattr)))
                    (allow unconfined_t usr_t (dir (getattr open search)))
                    (allow unconfined_t vpnc_exec_t (file (ioctl read getattr map execute open)))
                    (allow unconfined_t vpnc_t (process (transition)))
                    (dontaudit unconfined_t vpnc_t (process (noatsecure siginh rlimitinh)))
                    (typetransition unconfined_t vpnc_exec_t process vpnc_t)
                    (allow vpnc_t unconfined_t (fd (use)))
                    (allow vpnc_t unconfined_t (fifo_file (ioctl read write getattr lock append)))
                    (allow vpnc_t unconfined_t (process (sigchld)))
                )
                (optional unconfined_optional_73
                    (roleattributeset cil_gen_require webalizer_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require webalizer_t)
                    (typeattributeset cil_gen_require webalizer_exec_t)
                    (roleattributeset cil_gen_require webalizer_roles)
                    (roleattributeset webalizer_roles (unconfined_r ))
                    (allow unconfined_t bin_t (dir (getattr open search)))
                    (allow unconfined_t bin_t (lnk_file (read getattr)))
                    (allow unconfined_t usr_t (dir (getattr open search)))
                    (allow unconfined_t webalizer_exec_t (file (ioctl read getattr map execute open)))
                    (allow unconfined_t webalizer_t (process (transition)))
                    (dontaudit unconfined_t webalizer_t (process (noatsecure siginh rlimitinh)))
                    (typetransition unconfined_t webalizer_exec_t process webalizer_t)
                    (allow webalizer_t unconfined_t (fd (use)))
                    (allow webalizer_t unconfined_t (fifo_file (ioctl read write getattr lock append)))
                    (allow webalizer_t unconfined_t (process (sigchld)))
                )
                (optional unconfined_optional_74
                    (roleattributeset cil_gen_require wine_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require wine_t)
                    (typeattributeset cil_gen_require wine_exec_t)
                    (roleattributeset cil_gen_require wine_roles)
                    (roleattributeset wine_roles (unconfined_r ))
                    (allow unconfined_t bin_t (dir (getattr open search)))
                    (allow unconfined_t bin_t (lnk_file (read getattr)))
                    (allow unconfined_t usr_t (dir (getattr open search)))
                    (allow unconfined_t wine_exec_t (file (ioctl read getattr map execute open)))
                    (allow unconfined_t wine_t (process (transition)))
                    (dontaudit unconfined_t wine_t (process (noatsecure siginh rlimitinh)))
                    (typetransition unconfined_t wine_exec_t process wine_t)
                    (allow wine_t unconfined_t (fd (use)))
                    (allow wine_t unconfined_t (fifo_file (ioctl read write getattr lock append)))
                    (allow wine_t unconfined_t (process (sigchld)))
                )
                (optional unconfined_optional_75
                    (typeattributeset cil_gen_require entry_type)
                    (typeattributeset entry_type (shell_exec_t bin_t unconfined_exec_t unconfined_execmem_exec_t ))
                    (typeattributeset cil_gen_require exec_type)
                    (typeattributeset exec_type (shell_exec_t bin_t unconfined_exec_t unconfined_execmem_exec_t ))
                    (typeattributeset cil_gen_require file_type)
                    (typeattributeset file_type (shell_exec_t bin_t unconfined_exec_t unconfined_execmem_exec_t ))
                    (typeattributeset cil_gen_require non_security_file_type)
                    (typeattributeset non_security_file_type (shell_exec_t bin_t unconfined_exec_t unconfined_execmem_exec_t ))
                    (typeattributeset cil_gen_require non_auth_file_type)
                    (typeattributeset non_auth_file_type (shell_exec_t bin_t unconfined_exec_t unconfined_execmem_exec_t ))
                    (typeattributeset cil_gen_require device_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require var_run_t)
                    (typeattributeset cil_gen_require lib_t)
                    (typeattributeset cil_gen_require fonts_t)
                    (typeattributeset cil_gen_require var_t)
                    (typeattributeset cil_gen_require var_lib_t)
                    (typeattributeset cil_gen_require user_home_dir_t)
                    (typeattributeset cil_gen_require home_root_t)
                    (typeattributeset cil_gen_require tmp_t)
                    (typeattributeset cil_gen_require x_domain)
                    (typeattributeset cil_gen_require xserver_unconfined_type)
                    (typeattributeset cil_gen_require xdg_cache_t)
                    (typeattributeset cil_gen_require iceauth_home_t)
                    (typeattributeset cil_gen_require xserver_t)
                    (typeattributeset cil_gen_require xserver_tmp_t)
                    (typeattributeset cil_gen_require xserver_tmpfs_t)
                    (typeattributeset cil_gen_require xauth_home_t)
                    (typeattributeset cil_gen_require user_fonts_t)
                    (typeattributeset cil_gen_require user_fonts_cache_t)
                    (typeattributeset cil_gen_require user_fonts_config_t)
                    (typeattributeset cil_gen_require mesa_shader_cache_t)
                    (typeattributeset cil_gen_require xdm_t)
                    (typeattributeset cil_gen_require iceauth_t)
                    (typeattributeset cil_gen_require iceauth_exec_t)
                    (typeattributeset cil_gen_require xauth_t)
                    (typeattributeset cil_gen_require xauth_exec_t)
                    (typeattributeset cil_gen_require xdm_tmp_t)
                    (typeattributeset cil_gen_require xserver_misc_device_t)
                    (typeattributeset cil_gen_require power_device_t)
                    (typeattributeset cil_gen_require event_device_t)
                    (typeattributeset cil_gen_require misc_device_t)
                    (typeattributeset cil_gen_require agp_device_t)
                    (typeattributeset cil_gen_require dri_device_t)
                    (typeattributeset cil_gen_require usbfs_t)
                    (typeattributeset cil_gen_require fonts_cache_t)
                    (typeattributeset cil_gen_require root_xdrawable_t)
                    (typeattributeset cil_gen_require xevent_t)
                    (typeattributeset cil_gen_require client_xevent_t)
                    (typeattributeset cil_gen_require input_xevent_t)
                    (typeattributeset cil_gen_require user_input_xevent_t)
                    (typeattributeset cil_gen_require xdrawable_type)
                    (typeattributeset cil_gen_require xcolormap_type)
                    (typeattributeset cil_gen_require input_xevent_type)
                    (typeattributeset cil_gen_require xserver_exec_t)
                    (typeattributeset cil_gen_require xsession_exec_t)
                    (typeattributeset cil_gen_require xserver_log_t)
                    (typeattributeset cil_gen_require xdm_var_run_t)
                    (typeattributeset cil_gen_require xsession_log_t)
                    (typeattributeset cil_gen_require xkb_var_lib_t)
                    (roleattributeset cil_gen_require unconfined_r)
                    (roletype unconfined_r xserver_t)
                    (roletype unconfined_r iceauth_t)
                    (roletype unconfined_r xauth_t)
                    (typeattributeset cil_gen_require x_domain)
                    (typeattributeset x_domain (unconfined_t ))
                    (typeattributeset cil_gen_require non_auth_file_type)
                    (typeattributeset non_auth_file_type (xsession_exec_t ))
                    (typeattributeset cil_gen_require file_type)
                    (typeattributeset file_type (xsession_exec_t ))
                    (typeattributeset cil_gen_require xdrawable_type)
                    (typeattributeset xdrawable_type (unconfined_t ))
                    (typeattributeset cil_gen_require entry_type)
                    (typeattributeset entry_type (xsession_exec_t ))
                    (typeattributeset cil_gen_require exec_type)
                    (typeattributeset exec_type (xsession_exec_t ))
                    (typeattributeset cil_gen_require xserver_unconfined_type)
                    (typeattributeset xserver_unconfined_type (unconfined_t ))
                    (typeattributeset cil_gen_require xcolormap_type)
                    (typeattributeset xcolormap_type (unconfined_t ))
                    (typeattributeset cil_gen_require non_security_file_type)
                    (typeattributeset non_security_file_type (xsession_exec_t ))
                    (allow xserver_t unconfined_t (fd (use)))
                    (allow xserver_t unconfined_t (shm (getattr read write associate unix_read unix_write lock)))
                    (allow xserver_t unconfined_t (process (signal)))
                    (allow unconfined_t user_fonts_t (dir (ioctl read getattr lock open search)))
                    (allow unconfined_t user_fonts_t (file (ioctl read getattr lock open)))
                    (allow unconfined_t user_fonts_config_t (dir (ioctl read getattr lock open search)))
                    (allow unconfined_t user_fonts_config_t (file (ioctl read getattr lock open)))
                    (allow unconfined_t user_fonts_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                    (allow unconfined_t user_fonts_cache_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                    (allow unconfined_t user_fonts_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                    (allow unconfined_t user_fonts_cache_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                    (allow unconfined_t xserver_tmp_t (dir (getattr open search)))
                    (allow unconfined_t xserver_tmp_t (sock_file (write getattr append open)))
                    (allow unconfined_t xserver_t (unix_stream_socket (connectto)))
                    (allow unconfined_t tmp_t (dir (getattr open search)))
                    (allow unconfined_t xserver_t (fd (use)))
                    (allow unconfined_t xserver_t (shm (getattr read associate unix_read)))
                    (allow unconfined_t xserver_tmpfs_t (file (ioctl read getattr lock map open)))
                    (allow unconfined_t iceauth_t (dir (ioctl read getattr lock open search)))
                    (allow unconfined_t iceauth_t (file (ioctl read getattr lock open)))
                    (allow unconfined_t iceauth_t (lnk_file (read getattr)))
                    (allow unconfined_t iceauth_t (process (getattr)))
                    (allow unconfined_t iceauth_exec_t (file (ioctl read getattr map execute open)))
                    (allow unconfined_t iceauth_t (process (transition)))
                    (dontaudit unconfined_t iceauth_t (process (noatsecure siginh rlimitinh)))
                    (typetransition unconfined_t iceauth_exec_t process iceauth_t)
                    (allow iceauth_t unconfined_t (fd (use)))
                    (allow iceauth_t unconfined_t (fifo_file (ioctl read write getattr lock append)))
                    (allow iceauth_t unconfined_t (process (sigchld)))
                    (allow unconfined_t iceauth_home_t (file (ioctl read getattr lock open)))
                    (allow unconfined_t xauth_exec_t (file (ioctl read getattr map execute open)))
                    (allow unconfined_t xauth_t (process (transition)))
                    (dontaudit unconfined_t xauth_t (process (noatsecure siginh rlimitinh)))
                    (typetransition unconfined_t xauth_exec_t process xauth_t)
                    (allow xauth_t unconfined_t (fd (use)))
                    (allow xauth_t unconfined_t (fifo_file (ioctl read write getattr lock append)))
                    (allow xauth_t unconfined_t (process (sigchld)))
                    (allow unconfined_t xauth_t (process (signal)))
                    (allow unconfined_t xauth_t (dir (ioctl read getattr lock open search)))
                    (allow unconfined_t xauth_t (file (ioctl read getattr lock open)))
                    (allow unconfined_t xauth_t (lnk_file (read getattr)))
                    (allow unconfined_t xauth_t (process (getattr)))
                    (allow unconfined_t xserver_t (process (signal)))
                    (allow unconfined_t xauth_home_t (file (ioctl read getattr lock open)))
                    (allow unconfined_t xdm_t (fd (use)))
                    (allow unconfined_t xdm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow unconfined_t xdm_tmp_t (dir (search)))
                    (allow unconfined_t xdm_tmp_t (sock_file (read write)))
                    (dontaudit unconfined_t xdm_t (tcp_socket (read write)))
                    (allow unconfined_t xserver_tmp_t (file (ioctl read getattr lock)))
                    (allow unconfined_t device_t (dir (getattr open search)))
                    (allow unconfined_t xserver_misc_device_t (chr_file (ioctl read write getattr lock append open)))
                    (allow unconfined_t xserver_misc_device_t (chr_file (map)))
                    (allow unconfined_t device_t (dir (getattr open search)))
                    (allow unconfined_t power_device_t (chr_file (ioctl read write getattr lock append open)))
                    (allow unconfined_t device_t (dir (getattr open search)))
                    (allow unconfined_t event_device_t (chr_file (ioctl read getattr lock open)))
                    (allow unconfined_t device_t (dir (getattr open search)))
                    (allow unconfined_t misc_device_t (chr_file (ioctl read getattr lock open)))
                    (allow unconfined_t device_t (dir (getattr open search)))
                    (allow unconfined_t misc_device_t (chr_file (ioctl write getattr lock append open)))
                    (allow unconfined_t device_t (dir (getattr open search)))
                    (allow unconfined_t agp_device_t (chr_file (getattr)))
                    (dontaudit unconfined_t dri_device_t (chr_file (ioctl read write getattr lock append open)))
                    (allow unconfined_t usbfs_t (dir (getattr open search)))
                    (allow unconfined_t usbfs_t (dir (ioctl read getattr lock open search)))
                    (allow unconfined_t usbfs_t (dir (getattr open search)))
                    (allow unconfined_t usbfs_t (file (ioctl read write getattr lock append open)))
                    (allow unconfined_t usbfs_t (dir (getattr open search)))
                    (allow unconfined_t usbfs_t (lnk_file (read getattr)))
                    (allow unconfined_t usr_t (dir (getattr open search)))
                    (allow unconfined_t lib_t (dir (getattr open search)))
                    (allow unconfined_t fonts_t (dir (ioctl read getattr lock open search)))
                    (allow unconfined_t fonts_t (dir (getattr open search)))
                    (allow unconfined_t fonts_t (file (ioctl read getattr lock open)))
                    (allow unconfined_t fonts_t (file (map)))
                    (allow unconfined_t fonts_t (dir (getattr open search)))
                    (allow unconfined_t fonts_t (lnk_file (read getattr)))
                    (allow unconfined_t fonts_cache_t (dir (ioctl read getattr lock open search)))
                    (allow unconfined_t fonts_cache_t (dir (getattr open search)))
                    (allow unconfined_t fonts_cache_t (file (ioctl read getattr lock open)))
                    (allow unconfined_t fonts_cache_t (file (map)))
                    (allow unconfined_t fonts_cache_t (dir (getattr open search)))
                    (allow unconfined_t fonts_cache_t (lnk_file (read getattr)))
                    (allow unconfined_t fonts_t (dir (watch)))
                    (typetransition unconfined_t root_xdrawable_t x_drawable unconfined_t)
                    (typetransition unconfined_t input_xevent_t x_event user_input_xevent_t)
                    (allow unconfined_t user_input_xevent_t (x_event (send)))
                    (allow unconfined_t user_input_xevent_t (x_synthetic_event (send)))
                    (allow unconfined_t user_input_xevent_t (x_event (receive)))
                    (allow unconfined_t user_input_xevent_t (x_synthetic_event (receive)))
                    (allow unconfined_t client_xevent_t (x_event (receive)))
                    (allow unconfined_t client_xevent_t (x_synthetic_event (receive)))
                    (allow unconfined_t xevent_t (x_event (receive)))
                    (allow unconfined_t xevent_t (x_synthetic_event (receive)))
                    (dontaudit unconfined_t input_xevent_type (x_event (send)))
                    (allow unconfined_t xserver_t (process (siginh)))
                    (allow unconfined_t xserver_exec_t (file (ioctl read getattr map execute open)))
                    (allow unconfined_t xserver_t (process (transition)))
                    (dontaudit unconfined_t xserver_t (process (noatsecure siginh rlimitinh)))
                    (typetransition unconfined_t xserver_exec_t process xserver_t)
                    (allow xserver_t unconfined_t (fd (use)))
                    (allow xserver_t unconfined_t (fifo_file (ioctl read write getattr lock append)))
                    (allow xserver_t unconfined_t (process (sigchld)))
                    (allow unconfined_t xsession_exec_t (file (entrypoint)))
                    (allow unconfined_t xsession_exec_t (file (ioctl read getattr lock map execute open)))
                    (dontaudit unconfined_t xserver_log_t (file (ioctl write append)))
                    (allow unconfined_t tmp_t (dir (getattr open search)))
                    (allow unconfined_t xdm_tmp_t (dir (getattr open search)))
                    (allow unconfined_t xdm_tmp_t (sock_file (write getattr append open)))
                    (allow unconfined_t xdm_t (unix_stream_socket (connectto)))
                    (allow unconfined_t user_fonts_t (dir (ioctl read getattr lock open watch search)))
                    (allow unconfined_t user_fonts_t (file (ioctl read getattr lock map open)))
                    (allow unconfined_t user_fonts_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                    (allow unconfined_t user_fonts_cache_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                    (allow unconfined_t user_fonts_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                    (allow unconfined_t user_fonts_cache_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                    (allow unconfined_t user_fonts_cache_t (file (ioctl read getattr lock map open)))
                    (allow unconfined_t user_fonts_config_t (dir (ioctl read getattr lock open search)))
                    (allow unconfined_t user_fonts_config_t (file (ioctl read getattr lock open)))
                    (allow unconfined_t user_home_dir_t (dir (getattr open search)))
                    (allow unconfined_t home_root_t (dir (getattr open search)))
                    (allow unconfined_t home_root_t (lnk_file (read getattr)))
                    (allow unconfined_t xdg_cache_t (dir (getattr open search)))
                    (allow unconfined_t xdg_cache_t (dir (getattr open search)))
                    (allow unconfined_t user_home_dir_t (dir (getattr open search)))
                    (allow unconfined_t home_root_t (dir (getattr open search)))
                    (allow unconfined_t home_root_t (lnk_file (read getattr)))
                    (allow unconfined_t var_run_t (lnk_file (read getattr)))
                    (allow unconfined_t var_t (dir (getattr open search)))
                    (allow unconfined_t var_run_t (dir (getattr open search)))
                    (allow unconfined_t xdm_var_run_t (dir (getattr open search)))
                    (allow unconfined_t xdm_var_run_t (file (ioctl read getattr lock open)))
                    (allow unconfined_t tmp_t (dir (getattr open search)))
                    (allow unconfined_t xdm_tmp_t (dir (ioctl read getattr lock open search)))
                    (allow unconfined_t xdm_tmp_t (dir (ioctl write getattr lock open add_name search)))
                    (allow unconfined_t xdm_tmp_t (sock_file (create getattr open)))
                    (allow unconfined_t xdm_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                    (allow unconfined_t xdm_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                    (allow unconfined_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                    (allow unconfined_t home_root_t (dir (getattr open search)))
                    (allow unconfined_t home_root_t (lnk_file (read getattr)))
                    (allow unconfined_t xsession_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                    (allow unconfined_t xserver_tmp_t (file (ioctl read write getattr lock append open)))
                    (allow unconfined_t iceauth_home_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                    (allow unconfined_t iceauth_home_t (file (getattr relabelfrom relabelto)))
                    (allow unconfined_t xauth_home_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                    (allow unconfined_t xauth_home_t (file (getattr relabelfrom relabelto)))
                    (allow unconfined_t user_fonts_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                    (allow unconfined_t user_fonts_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                    (allow unconfined_t user_fonts_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                    (allow unconfined_t user_fonts_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                    (allow unconfined_t user_fonts_t (dir (getattr open search)))
                    (allow unconfined_t user_fonts_t (dir (getattr relabelfrom relabelto)))
                    (allow unconfined_t user_fonts_t (dir (getattr open search)))
                    (allow unconfined_t user_fonts_t (file (getattr relabelfrom relabelto)))
                    (allow unconfined_t user_fonts_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                    (allow unconfined_t user_fonts_cache_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                    (allow unconfined_t user_fonts_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                    (allow unconfined_t user_fonts_cache_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                    (allow unconfined_t user_fonts_cache_t (dir (getattr open search)))
                    (allow unconfined_t user_fonts_cache_t (dir (getattr relabelfrom relabelto)))
                    (allow unconfined_t user_fonts_cache_t (dir (getattr open search)))
                    (allow unconfined_t user_fonts_cache_t (file (getattr relabelfrom relabelto)))
                    (allow unconfined_t user_fonts_config_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                    (allow unconfined_t user_fonts_config_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                    (allow unconfined_t user_fonts_config_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                    (allow unconfined_t user_fonts_config_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                    (allow unconfined_t user_fonts_config_t (dir (getattr open search)))
                    (allow unconfined_t user_fonts_config_t (dir (getattr relabelfrom relabelto)))
                    (allow unconfined_t user_fonts_config_t (dir (getattr open search)))
                    (allow unconfined_t user_fonts_config_t (file (getattr relabelfrom relabelto)))
                    (allow unconfined_t mesa_shader_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                    (allow unconfined_t mesa_shader_cache_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                    (allow unconfined_t mesa_shader_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                    (allow unconfined_t mesa_shader_cache_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                    (allow unconfined_t mesa_shader_cache_t (file (map)))
                    (allow unconfined_t mesa_shader_cache_t (dir (getattr open search)))
                    (allow unconfined_t mesa_shader_cache_t (dir (getattr relabelfrom relabelto)))
                    (allow unconfined_t mesa_shader_cache_t (dir (getattr open search)))
                    (allow unconfined_t mesa_shader_cache_t (file (getattr relabelfrom relabelto)))
                    (allow unconfined_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                    (allow unconfined_t home_root_t (dir (getattr open search)))
                    (allow unconfined_t home_root_t (lnk_file (read getattr)))
                    (allow unconfined_t var_t (dir (getattr open search)))
                    (allow unconfined_t var_lib_t (dir (getattr open search)))
                    (allow unconfined_t xkb_var_lib_t (dir (ioctl read getattr lock open search)))
                    (allow unconfined_t xkb_var_lib_t (dir (getattr open search)))
                    (allow unconfined_t xkb_var_lib_t (file (ioctl read getattr lock open)))
                    (allow unconfined_t xkb_var_lib_t (dir (getattr open search)))
                    (allow unconfined_t xkb_var_lib_t (lnk_file (read getattr)))
                    (allow unconfined_t xkb_var_lib_t (file (map)))
                    (allow unconfined_t xdm_t (unix_stream_socket (accept)))
                    (allow unconfined_t xdm_t (dbus (send_msg)))
                    (allow xdm_t unconfined_t (dbus (send_msg)))
                    (typetransition unconfined_t user_home_dir_t file ".ICEauthority" iceauth_home_t)
                    (typetransition unconfined_t user_home_dir_t file ".xsession-errors" xsession_log_t)
                    (booleanif (xserver_allow_dri)
                        (true
                            (allow unconfined_t dri_device_t (chr_file (map)))
                            (allow unconfined_t dri_device_t (chr_file (ioctl read write getattr lock append open)))
                            (allow unconfined_t device_t (dir (getattr open search)))
                        )
                    )
                    (booleanif (or (allow_write_xshm) (xserver_client_writes_xserver_tmpfs))
                        (true
                            (allow unconfined_t xserver_tmpfs_t (file (ioctl read write getattr lock append open)))
                            (allow unconfined_t xserver_tmpfs_t (file (ioctl read write getattr lock append open)))
                        )
                    )
                    (booleanif (allow_write_xshm)
                        (true
                            (allow unconfined_t xserver_t (shm (getattr read write associate unix_read unix_write lock)))
                            (allow unconfined_t xserver_t (shm (getattr read write associate unix_read unix_write lock)))
                        )
                    )
                    (optional unconfined_optional_76
                        (typeattributeset cil_gen_require unconfined_systemd_t)
                        (allow unconfined_systemd_t iceauth_t (dir (ioctl read getattr lock open search)))
                        (allow unconfined_systemd_t iceauth_t (file (ioctl read getattr lock open)))
                        (allow unconfined_systemd_t iceauth_t (lnk_file (read getattr)))
                        (allow unconfined_systemd_t iceauth_t (process (getattr)))
                        (allow unconfined_systemd_t iceauth_t (process (sigchld sigkill sigstop signull signal)))
                        (allow iceauth_t unconfined_systemd_t (fd (use)))
                        (allow iceauth_t unconfined_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                        (allow iceauth_t unconfined_systemd_t (dir (ioctl read getattr lock open search)))
                        (allow iceauth_t unconfined_systemd_t (file (ioctl read getattr lock open)))
                        (allow iceauth_t unconfined_systemd_t (lnk_file (read getattr)))
                        (allow iceauth_t unconfined_systemd_t (process (getattr)))
                        (allow iceauth_t unconfined_systemd_t (process (sigchld)))
                        (allow unconfined_systemd_t xauth_t (dir (ioctl read getattr lock open search)))
                        (allow unconfined_systemd_t xauth_t (file (ioctl read getattr lock open)))
                        (allow unconfined_systemd_t xauth_t (lnk_file (read getattr)))
                        (allow unconfined_systemd_t xauth_t (process (getattr)))
                        (allow unconfined_systemd_t xauth_t (process (sigchld sigkill sigstop signull signal)))
                        (allow xauth_t unconfined_systemd_t (fd (use)))
                        (allow xauth_t unconfined_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                        (allow xauth_t unconfined_systemd_t (dir (ioctl read getattr lock open search)))
                        (allow xauth_t unconfined_systemd_t (file (ioctl read getattr lock open)))
                        (allow xauth_t unconfined_systemd_t (lnk_file (read getattr)))
                        (allow xauth_t unconfined_systemd_t (process (getattr)))
                        (allow xauth_t unconfined_systemd_t (process (sigchld)))
                        (allow unconfined_systemd_t xserver_t (dir (ioctl read getattr lock open search)))
                        (allow unconfined_systemd_t xserver_t (file (ioctl read getattr lock open)))
                        (allow unconfined_systemd_t xserver_t (lnk_file (read getattr)))
                        (allow unconfined_systemd_t xserver_t (process (getattr)))
                        (allow unconfined_systemd_t xserver_t (process (sigchld sigkill sigstop signull signal)))
                        (allow xserver_t unconfined_systemd_t (fd (use)))
                        (allow xserver_t unconfined_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                        (allow xserver_t unconfined_systemd_t (dir (ioctl read getattr lock open search)))
                        (allow xserver_t unconfined_systemd_t (file (ioctl read getattr lock open)))
                        (allow xserver_t unconfined_systemd_t (lnk_file (read getattr)))
                        (allow xserver_t unconfined_systemd_t (process (getattr)))
                        (allow xserver_t unconfined_systemd_t (process (sigchld)))
                        (optional unconfined_optional_77
                            (typeattributeset cil_gen_require unconfined_systemd_t)
                            (allow unconfined_systemd_t xserver_t (dir (ioctl read getattr lock open search)))
                            (allow unconfined_systemd_t xserver_t (file (ioctl read getattr lock open)))
                            (allow unconfined_systemd_t xserver_t (lnk_file (read getattr)))
                            (allow unconfined_systemd_t xserver_t (process (getattr)))
                            (allow unconfined_systemd_t xserver_t (process (sigchld sigkill sigstop signull signal)))
                            (allow xserver_t unconfined_systemd_t (fd (use)))
                            (allow xserver_t unconfined_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                            (allow xserver_t unconfined_systemd_t (dir (ioctl read getattr lock open search)))
                            (allow xserver_t unconfined_systemd_t (file (ioctl read getattr lock open)))
                            (allow xserver_t unconfined_systemd_t (lnk_file (read getattr)))
                            (allow xserver_t unconfined_systemd_t (process (getattr)))
                            (allow xserver_t unconfined_systemd_t (process (sigchld)))
                        )
                    )
                    (optional unconfined_optional_78
                        (typeattributeset cil_gen_require user_home_dir_t)
                        (typeattributeset cil_gen_require home_root_t)
                        (typeattributeset cil_gen_require xdg_cache_t)
                        (allow unconfined_t user_home_dir_t (dir (getattr open search)))
                        (allow unconfined_t home_root_t (dir (getattr open search)))
                        (allow unconfined_t home_root_t (lnk_file (read getattr)))
                        (allow unconfined_t xdg_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                        (allow unconfined_t xdg_cache_t (dir (create getattr)))
                        (typetransition unconfined_t xdg_cache_t dir "mesa_shader_cache" mesa_shader_cache_t)
                    )
                )
                (optional unconfined_optional_79
                    (typeattributeset cil_gen_require can_read_shadow_passwords)
                    (typeattributeset cil_gen_require can_write_shadow_passwords)
                    (typeattributeset cil_gen_require can_relabelto_shadow_passwords)
                    (typeattributeset cil_gen_require can_write_shadow_passwords)
                    (typeattributeset can_write_shadow_passwords (unconfined_execmem_t ))
                    (typeattributeset cil_gen_require can_read_shadow_passwords)
                    (typeattributeset can_read_shadow_passwords (unconfined_execmem_t ))
                    (typeattributeset cil_gen_require can_relabelto_shadow_passwords)
                    (typeattributeset can_relabelto_shadow_passwords (unconfined_execmem_t ))
                )
                (optional unconfined_optional_80
                    (typeattributeset cil_gen_require dbusd_unconfined)
                    (typeattributeset cil_gen_require dbusd_unconfined)
                    (typeattributeset dbusd_unconfined (unconfined_execmem_t ))
                )
                (optional unconfined_optional_81
                    (typeattributeset cil_gen_require ipsec_spd_t)
                    (allow unconfined_execmem_t ipsec_spd_t (association (setcontext)))
                    (allow unconfined_execmem_t ipsec_spd_t (association (polmatch)))
                    (allow unconfined_execmem_t self (association (sendto)))
                )
                (optional unconfined_optional_82
                    (typeattributeset cil_gen_require nscd_t)
                    (allow unconfined_execmem_t nscd_t (nscd (getpwd getgrp gethost getstat admin shmempwd shmemgrp shmemhost getserv shmemserv)))
                )
                (optional unconfined_optional_83
                    (typeattributeset cil_gen_require sepgsql_unconfined_type)
                    (typeattributeset cil_gen_require sepgsql_unconfined_type)
                    (typeattributeset sepgsql_unconfined_type (unconfined_execmem_t ))
                )
                (optional unconfined_optional_84
                    (typeattributeset cil_gen_require selinux_config_t)
                    (typeattributeset cil_gen_require etc_t)
                    (typeattributeset cil_gen_require policy_config_t)
                    (typeattributeset cil_gen_require can_relabelto_binary_policy)
                    (typeattributeset cil_gen_require can_relabelto_binary_policy)
                    (typeattributeset can_relabelto_binary_policy (unconfined_execmem_t ))
                    (allow unconfined_execmem_t etc_t (dir (getattr open search)))
                    (allow unconfined_execmem_t selinux_config_t (dir (getattr open search)))
                    (allow unconfined_execmem_t policy_config_t (dir (ioctl write getattr lock open add_name search)))
                    (allow unconfined_execmem_t policy_config_t (file (create getattr open)))
                    (allow unconfined_execmem_t policy_config_t (dir (getattr open search)))
                    (allow unconfined_execmem_t policy_config_t (file (ioctl write getattr lock append open)))
                    (allow unconfined_execmem_t policy_config_t (file (relabelto)))
                )
                (optional unconfined_optional_85
                    (typeattributeset cil_gen_require storage_unconfined_type)
                    (typeattributeset cil_gen_require storage_unconfined_type)
                    (typeattributeset storage_unconfined_type (unconfined_execmem_t ))
                )
                (optional unconfined_optional_86
                    (typeattributeset cil_gen_require x_domain)
                    (typeattributeset cil_gen_require xserver_unconfined_type)
                    (typeattributeset cil_gen_require x_domain)
                    (typeattributeset x_domain (unconfined_execmem_t ))
                    (typeattributeset cil_gen_require xserver_unconfined_type)
                    (typeattributeset xserver_unconfined_type (unconfined_execmem_t ))
                )
                (optional unconfined_optional_87
                    (typeattributeset cil_gen_require unconfined_t)
                    (roletype system_r unconfined_t)
                    (roletype unconfined_r unconfined_t)
                    (allow unconfined_execmem_t unconfined_t (dbus (send_msg)))
                    (allow unconfined_t unconfined_execmem_t (dbus (send_msg)))
                    (optional unconfined_optional_88
                        (typeattributeset cil_gen_require bin_t)
                        (typeattributeset cil_gen_require usr_t)
                        (typeattributeset cil_gen_require chromium_t)
                        (typeattributeset cil_gen_require chromium_renderer_t)
                        (typeattributeset cil_gen_require chromium_sandbox_t)
                        (typeattributeset cil_gen_require chromium_naclhelper_t)
                        (typeattributeset cil_gen_require chromium_exec_t)
                        (roleattributeset cil_gen_require unconfined_r)
                        (roletype unconfined_r chromium_t)
                        (roletype unconfined_r chromium_renderer_t)
                        (roletype unconfined_r chromium_sandbox_t)
                        (roletype unconfined_r chromium_naclhelper_t)
                        (allow unconfined_application_exec_domain bin_t (dir (getattr open search)))
                        (allow unconfined_application_exec_domain bin_t (lnk_file (read getattr)))
                        (allow unconfined_application_exec_domain usr_t (dir (getattr open search)))
                        (allow unconfined_application_exec_domain chromium_exec_t (file (ioctl read getattr map execute open)))
                        (allow unconfined_application_exec_domain chromium_t (process (transition)))
                        (dontaudit unconfined_application_exec_domain chromium_t (process (noatsecure siginh rlimitinh)))
                        (typetransition unconfined_application_exec_domain chromium_exec_t process chromium_t)
                        (allow chromium_t unconfined_application_exec_domain (fd (use)))
                        (allow chromium_t unconfined_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                        (allow chromium_t unconfined_application_exec_domain (process (sigchld)))
                        (allow unconfined_application_exec_domain chromium_t (dir (ioctl read getattr lock open search)))
                        (allow unconfined_application_exec_domain chromium_t (file (ioctl read getattr lock open)))
                        (allow unconfined_application_exec_domain chromium_t (lnk_file (read getattr)))
                        (allow unconfined_application_exec_domain chromium_t (process (getattr)))
                        (allow unconfined_application_exec_domain chromium_renderer_t (dir (ioctl read getattr lock open search)))
                        (allow unconfined_application_exec_domain chromium_renderer_t (file (ioctl read getattr lock open)))
                        (allow unconfined_application_exec_domain chromium_renderer_t (lnk_file (read getattr)))
                        (allow unconfined_application_exec_domain chromium_renderer_t (process (getattr)))
                        (allow unconfined_application_exec_domain chromium_t (process (sigchld sigkill sigstop signull signal)))
                        (allow unconfined_application_exec_domain chromium_renderer_t (process (sigchld sigkill sigstop signull signal)))
                        (allow unconfined_application_exec_domain chromium_sandbox_t (process (sigchld sigkill sigstop signull signal)))
                        (allow unconfined_application_exec_domain chromium_naclhelper_t (process (sigchld sigkill sigstop signull signal)))
                        (allow chromium_t unconfined_application_exec_domain (process (signull signal)))
                        (allow unconfined_application_exec_domain chromium_t (unix_stream_socket (connectto)))
                        (allow chromium_t unconfined_application_exec_domain (unix_stream_socket (connectto)))
                        (allow chromium_sandbox_t unconfined_application_exec_domain (fd (use)))
                        (allow chromium_naclhelper_t unconfined_application_exec_domain (fd (use)))
                        (allow unconfined_application_exec_domain chromium_t (dbus (send_msg)))
                        (allow chromium_t unconfined_application_exec_domain (dbus (send_msg)))
                        (optional unconfined_optional_89
                            (typeattributeset cil_gen_require unconfined_systemd_t)
                            (allow unconfined_systemd_t chromium_t (dir (ioctl read getattr lock open search)))
                            (allow unconfined_systemd_t chromium_t (file (ioctl read getattr lock open)))
                            (allow unconfined_systemd_t chromium_t (lnk_file (read getattr)))
                            (allow unconfined_systemd_t chromium_t (process (getattr)))
                            (allow unconfined_systemd_t chromium_t (process (sigchld sigkill sigstop signull signal)))
                            (allow chromium_t unconfined_systemd_t (fd (use)))
                            (allow chromium_t unconfined_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                            (allow chromium_t unconfined_systemd_t (dir (ioctl read getattr lock open search)))
                            (allow chromium_t unconfined_systemd_t (file (ioctl read getattr lock open)))
                            (allow chromium_t unconfined_systemd_t (lnk_file (read getattr)))
                            (allow chromium_t unconfined_systemd_t (process (getattr)))
                            (allow chromium_t unconfined_systemd_t (process (sigchld)))
                        )
                    )
                    (optional unconfined_optional_90
                        (typeattributeset cil_gen_require rtorrent_t)
                        (typeattributeset cil_gen_require rtorrent_exec_t)
                        (typeattributeset cil_gen_require rtorrent_home_t)
                        (typeattributeset cil_gen_require rtorrent_session_t)
                        (roleattributeset cil_gen_require unconfined_r)
                        (roletype unconfined_r rtorrent_t)
                        (allow unconfined_t rtorrent_exec_t (file (ioctl read getattr map execute open)))
                        (allow unconfined_t rtorrent_t (process (transition)))
                        (dontaudit unconfined_t rtorrent_t (process (noatsecure siginh rlimitinh)))
                        (typetransition unconfined_t rtorrent_exec_t process rtorrent_t)
                        (allow rtorrent_t unconfined_t (fd (use)))
                        (allow rtorrent_t unconfined_t (fifo_file (ioctl read write getattr lock append)))
                        (allow rtorrent_t unconfined_t (process (sigchld)))
                        (allow unconfined_t rtorrent_t (process (sigchld sigkill sigstop signull signal)))
                        (allow unconfined_t rtorrent_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                        (allow unconfined_t rtorrent_home_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                        (allow unconfined_t rtorrent_session_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                        (allow unconfined_t rtorrent_session_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                        (allow unconfined_t rtorrent_session_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                        (allow unconfined_t rtorrent_session_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                        (allow unconfined_t rtorrent_t (dir (ioctl read getattr lock open search)))
                        (allow unconfined_t rtorrent_t (file (ioctl read getattr lock open)))
                        (allow unconfined_t rtorrent_t (lnk_file (read getattr)))
                        (allow unconfined_t rtorrent_t (process (getattr)))
                    )
                )
            )
        )
    )
)
(filecon "/usr/bin/gnatbind" file (system_u object_r unconfined_execmem_exec_t (systemlow systemlow)))
(filecon "/usr/bin/gnatls" file (system_u object_r unconfined_execmem_exec_t (systemlow systemlow)))
(filecon "/usr/bin/gnatmake" file (system_u object_r unconfined_execmem_exec_t (systemlow systemlow)))
(filecon "/usr/bin/valgrind" file (system_u object_r unconfined_execmem_exec_t (systemlow systemlow)))
(filecon "/usr/bin/vncserver" file (system_u object_r unconfined_exec_t (systemlow systemlow)))
(filecon "/usr/lib/ia32el/ia32x_loader" file (system_u object_r unconfined_execmem_exec_t (systemlow systemlow)))
(filecon "/usr/libexec/gcc(/.*)?/gnat1" file (system_u object_r unconfined_execmem_exec_t (systemlow systemlow)))
(filecon "/usr/local/RealPlayer/realplay\.bin" file (system_u object_r unconfined_execmem_exec_t (systemlow systemlow)))
(filecon "/usr/lib/openoffice/program/[^/]+\.bin" file (system_u object_r unconfined_execmem_exec_t (systemlow systemlow)))
