1*2d543d20SAndroid Build Coastguard Worker# handle_unknown deny 2*2d543d20SAndroid Build Coastguard Workerclass CLASS1 3*2d543d20SAndroid Build Coastguard Workersid kernel 4*2d543d20SAndroid Build Coastguard Workerclass CLASS1 { PERM1 } 5*2d543d20SAndroid Build Coastguard Workertype TYPE1; 6*2d543d20SAndroid Build Coastguard Workerallow TYPE1 self:CLASS1 { PERM1 }; 7*2d543d20SAndroid Build Coastguard Workerrole ROLE1; 8*2d543d20SAndroid Build Coastguard Workerrole ROLE1 types { TYPE1 }; 9*2d543d20SAndroid Build Coastguard Workeruser USER1 roles ROLE1; 10*2d543d20SAndroid Build Coastguard Workersid kernel USER1:ROLE1:TYPE1 11