1 module modreq_role_opt 1.0; 2 3 require { 4 class file {read write}; 5 6 } 7 8 type mod_global_t; 9 10 optional { 11 require { 12 role role_req_r, user_r; 13 } 14 type mod_opt_t; 15 16 allow role_req_r user_r; 17 } 18