1 # Restricted domain for shell processes spawned by init 2 type init_shell, domain; 3 permissive init_shell; 4 domain_auto_trans(init, shell_exec, init_shell) 5 unconfined_domain(init_shell) 6
