1 module modreq_perm_opt 1.0; 2 3 require { 4 class file { read write }; 5 } 6 7 type mod_global_t; 8 9 optional { 10 require { 11 class msg { send receive }; 12 } 13 14 type mod_opt_t; 15 type a_mod_t; 16 type b_mod_t; 17 allow a_mod_t b_mod_t: msg { send receive }; 18 } 19
