1 # Life begins with the kernel. 2 type kernel, domain; 3 # The kernel is unconfined. 4 unconfined_domain(kernel) 5