1module modreq_perm_opt 1.0; 2 3require { 4 class file { read write }; 5} 6 7type mod_global_t; 8 9optional { 10 require { 11 class msg { send receive }; 12 } 13 14 type mod_opt_t; 15 type a_mod_t; 16 type b_mod_t; 17 allow a_mod_t b_mod_t: msg { send receive }; 18} 19