1 type su, domain; 2 permissive su; 3 type su_exec, file_type; 4 domain_auto_trans(shell, su_exec, su) 5 6 # su is unconfined. 7 unconfined_domain(su) 8