1 (class testing (read open close write exec)) 2 (class fooclass (read open close write exec)) 3 4 (type foo_t) 5 (type typea_t) 6 (type typeb_t) 7 (type typec_t) 8 (role foo_r) 9 (role rolea_r) 10 (role roleb_r) 11 (user foo_u) 12 (user user_u) 13 (userrole foo_u foo_r) 14 15 (sid test_sid) 16 ;(sidcontext test_sid (foo_u foo_r foo_t (s0 (c0)) (s0 (c0)))) 17 ;(sid test_sid_anon_l) 18 19 ;(fsuse xattr ext3 con) 20 ;(fsuse xattr ext3 con_anon_l) 21 22 ;(netifcon eth0 con con_anon_l) 23 24 (ipaddr ip_v4 192.25.35.200) 25 (ipaddr netmask 192.168.1.1) 26 (ipaddr ip_v6 2001:0DB8:AC10:FE01::) 27 (ipaddr netmask_v6 2001:0DE0:DA88:2222::) 28 ; will need anon levels 29 ;(nodecon ip_v4 netmask con) 30 ;(nodecon ip_v6 netmask_v6 con_anon_l) 31 32 ;needs anon levels 33 ;(portcon type 25 con) 34 35 ;(filecon root path file con) 36 37 ;(genfscon type path con) 38 39 ;(netifcon eth0 con con_anon_l) 40 41 (typemember typea_t typeb_t testing typec_t) 42 (typechange typea_t typeb_t testing typec_t) 43 (typetransition typea_t typeb_t testing typec_t) 44 45 (permissionset permset (open close)) 46 (allow typea_t typeb_t testing (write)) 47 (allow typea_t typeb_t testing permset) 48 49 (roleallow rolea_r roleb_r) 50 51 (rolebounds rolea_r roleb_r) 52 53 (roletransition foo_r foo_t testing rolea_r) 54 55 (common fooclass (open)) 56 (classcommon fooclass fooclass) 57 58 59 (nametypetransition string typea_t typeb_t fooclass foo_t) 60 61 (typepermissive foo_t) 62 63 (typebounds typea_t typeb_t) 64 65 (block test_b 66 (typealias .test_b.test typea_t) 67 (type test)) 68 69 (attribute attrs) 70 (attributetypes attrs (foo_t)) 71 72 (roletype foo_r foo_t) 73 74 (userbounds user_u foo_u) 75 76 (userrole user_u foo_r) 77 78 ;(bool foo_b true) 79 ;(bool baz_b false) 80 ;(booleanif (&& foo_b baz_b) 81 ; (allow typea_t typeb_t fooclass(read))) 82 ;(class baz (read)) 83 ;(booleanif (&& foo_b baz_b) 84 ; (allow foo_b baz_b fooclass (read))) 85 86 87