1*2d543d20SAndroid Build Coastguard Worker# handle_unknown deny 2*2d543d20SAndroid Build Coastguard Workerclass CLASS1 3*2d543d20SAndroid Build Coastguard Workersid kernel 4*2d543d20SAndroid Build Coastguard Workerclass CLASS1 { PERM1 } 5*2d543d20SAndroid Build Coastguard Workersensitivity s0; 6*2d543d20SAndroid Build Coastguard Workerdominance { s0 } 7*2d543d20SAndroid Build Coastguard Workercategory c0; 8*2d543d20SAndroid Build Coastguard Workerlevel s0:c0; 9*2d543d20SAndroid Build Coastguard Workermlsconstrain CLASS1 { PERM1 } l1 == l2; 10*2d543d20SAndroid Build Coastguard Workertype TYPE1; 11*2d543d20SAndroid Build Coastguard Workerallow TYPE1 self:CLASS1 { PERM1 }; 12*2d543d20SAndroid Build Coastguard Workerrole ROLE1; 13*2d543d20SAndroid Build Coastguard Workerrole ROLE1 types { TYPE1 }; 14*2d543d20SAndroid Build Coastguard Workeruser USER1 roles ROLE1 level s0 range s0 - s0:c0; 15*2d543d20SAndroid Build Coastguard Workersid kernel USER1:ROLE1:TYPE1:s0 - s0 16