(typeattribute sysadm_file_type)
(typeattribute sysadm_application_exec_domain)
(typeattributeset sysadm_application_exec_domain (sysadm_t ))
(type sysadm_t)
(roletype object_r sysadm_t)
(boolean allow_ptrace false)
(boolean sysadm_allow_rw_inherited_fifo false)
(roleattributeset cil_gen_require system_r)
(roletype system_r sysadm_t)
(roleattributeset cil_gen_require sysadm_r)
(roletype sysadm_r sysadm_t)
(roletype sysadm_r pam_t)
(roletype sysadm_r utempter_t)
(roleattributeset cil_gen_require newrole_roles)
(roleattributeset newrole_roles (sysadm_r ))
(typeattributeset cil_gen_require admindomain)
(typeattributeset admindomain (sysadm_t ))
(typeattributeset cil_gen_require userdomain)
(typeattributeset userdomain (sysadm_t ))
(typeattributeset cil_gen_require user_devpts_t)
(typeattributeset cil_gen_require user_tty_device_t)
(typeattributeset cil_gen_require sysadm_t)
(typeattributeset cil_gen_require domain)
(typeattributeset domain (sysadm_t ))
(typeattributeset cil_gen_require init_t)
(typeattributeset cil_gen_require security_t)
(typeattributeset cil_gen_require sysfs_t)
(typeattributeset cil_gen_require selinux_config_t)
(typeattributeset cil_gen_require shell_exec_t)
(typeattributeset cil_gen_require entry_type)
(typeattributeset entry_type (shell_exec_t bin_t ))
(typeattributeset cil_gen_require exec_type)
(typeattributeset exec_type (shell_exec_t bin_t ))
(typeattributeset cil_gen_require file_type)
(typeattributeset file_type (shell_exec_t bin_t ))
(typeattributeset cil_gen_require non_security_file_type)
(typeattributeset non_security_file_type (shell_exec_t bin_t ))
(typeattributeset cil_gen_require non_auth_file_type)
(typeattributeset non_auth_file_type (shell_exec_t bin_t ))
(typeattributeset cil_gen_require bin_t)
(typeattributeset cil_gen_require process_user_target)
(typeattributeset process_user_target (sysadm_t ))
(typeattributeset cil_gen_require ubac_constrained_type)
(typeattributeset ubac_constrained_type (sysadm_t ))
(typeattributeset cil_gen_require server_ptynode)
(typeattributeset cil_gen_require ptynode)
(typeattributeset ptynode (user_devpts_t ))
(typeattributeset cil_gen_require devpts_t)
(typeattributeset cil_gen_require device_node)
(typeattributeset device_node (user_devpts_t user_tty_device_t ))
(typeattributeset cil_gen_require ttynode)
(typeattributeset ttynode (user_tty_device_t ))
(typeattributeset cil_gen_require console_device_t)
(typeattributeset cil_gen_require tty_device_t)
(typeattributeset cil_gen_require serial_device)
(typeattributeset serial_device (user_tty_device_t ))
(typeattributeset cil_gen_require bsdpty_device_t)
(typeattributeset cil_gen_require ptmx_t)
(typeattributeset cil_gen_require device_t)
(typeattributeset cil_gen_require proc_t)
(typeattributeset cil_gen_require sysctl_t)
(typeattributeset cil_gen_require sysctl_kernel_t)
(typeattributeset cil_gen_require sysctl_crypto_t)
(typeattributeset cil_gen_require sysctl_fs_t)
(typeattributeset cil_gen_require sysctl_vm_overcommit_t)
(typeattributeset cil_gen_require sysctl_vm_t)
(typeattributeset cil_gen_require unlabeled_t)
(typeattributeset cil_gen_require null_device_t)
(typeattributeset cil_gen_require etc_t)
(typeattributeset cil_gen_require etc_runtime_t)
(typeattributeset cil_gen_require usr_t)
(typeattributeset cil_gen_require var_run_t)
(typeattributeset cil_gen_require readable_t)
(typeattributeset cil_gen_require lib_t)
(typeattributeset cil_gen_require ld_so_t)
(typeattributeset cil_gen_require locale_t)
(typeattributeset cil_gen_require cert_t)
(typeattributeset cil_gen_require fonts_t)
(typeattributeset cil_gen_require net_conf_t)
(typeattributeset cil_gen_require var_t)
(typeattributeset cil_gen_require var_lib_t)
(typeattributeset cil_gen_require syslogd_t)
(typeattributeset cil_gen_require syslogd_runtime_t)
(typeattributeset cil_gen_require devlog_t)
(typeattributeset cil_gen_require init_runtime_t)
(typeattributeset cil_gen_require user_home_t)
(typeattributeset cil_gen_require user_home_dir_t)
(typeattributeset cil_gen_require user_bin_t)
(typeattributeset cil_gen_require user_cert_t)
(typeattributeset cil_gen_require home_root_t)
(typeattributeset cil_gen_require nfs_t)
(typeattributeset cil_gen_require cifs_t)
(typeattributeset cil_gen_require user_tmp_t)
(typeattributeset cil_gen_require tmp_t)
(typeattributeset cil_gen_require user_runtime_t)
(typeattributeset cil_gen_require user_runtime_root_t)
(typeattributeset cil_gen_require user_tmpfs_t)
(typeattributeset cil_gen_require tmpfs_t)
(typeattributeset cil_gen_require urandom_device_t)
(typeattributeset cil_gen_require privfd)
(typeattributeset cil_gen_require default_t)
(typeattributeset cil_gen_require lost_found_t)
(typeattributeset cil_gen_require filesystem_type)
(typeattributeset cil_gen_require autofs_t)
(typeattributeset cil_gen_require cgroup_types)
(typeattributeset cil_gen_require inotifyfs_t)
(typeattributeset cil_gen_require anon_inodefs_t)
(typeattributeset cil_gen_require wtmp_t)
(typeattributeset cil_gen_require chroot_exec_t)
(typeattributeset cil_gen_require application_exec_type)
(typeattributeset cil_gen_require initrc_runtime_t)
(typeattributeset cil_gen_require initrc_t)
(typeattributeset cil_gen_require logfile)
(typeattributeset cil_gen_require man_t)
(typeattributeset cil_gen_require man_cache_t)
(typeattributeset cil_gen_require public_content_t)
(typeattributeset cil_gen_require public_content_rw_t)
(typeattributeset cil_gen_require tetex_data_t)
(typeattributeset cil_gen_require default_context_t)
(typeattributeset cil_gen_require file_context_t)
(typeattributeset cil_gen_require netlabel_peer_t)
(typeattributeset cil_gen_require netif_t)
(typeattributeset cil_gen_require node_t)
(typeattributeset cil_gen_require unpriv_userdomain)
(typeattributeset cil_gen_require port_type)
(typeattributeset cil_gen_require client_packet_type)
(typeattributeset cil_gen_require proc_net_t)
(typeattributeset cil_gen_require sysctl_net_t)
(typeattributeset cil_gen_require kernel_t)
(typeattributeset cil_gen_require sysctl_dev_t)
(typeattributeset cil_gen_require port_t)
(typeattributeset cil_gen_require defined_port_type)
(typeattributeset cil_gen_require random_device_t)
(typeattributeset cil_gen_require sound_device_t)
(typeattributeset cil_gen_require wireless_device_t)
(typeattributeset cil_gen_require var_lock_t)
(typeattributeset cil_gen_require mnt_t)
(typeattributeset cil_gen_require var_spool_t)
(typeattributeset cil_gen_require fixed_disk_device_t)
(typeattributeset cil_gen_require nsswitch_domain)
(typeattributeset nsswitch_domain (sysadm_t ))
(typeattributeset cil_gen_require var_log_t)
(typeattributeset cil_gen_require pam_var_console_t)
(typeattributeset cil_gen_require pam_t)
(typeattributeset cil_gen_require pam_exec_t)
(typeattributeset cil_gen_require utempter_t)
(typeattributeset cil_gen_require utempter_exec_t)
(typeattributeset cil_gen_require newrole_t)
(typeattributeset cil_gen_require newrole_exec_t)
(typeattributeset cil_gen_require checkpolicy_exec_t)
(typeattributeset cil_gen_require setfiles_exec_t)
(typeattributeset cil_gen_require mouse_device_t)
(typeattributeset cil_gen_require noxattrfs)
(typeattributeset cil_gen_require usb_device_t)
(typeattributeset cil_gen_require init_exec_t)
(typeattributeset cil_gen_require systemd_unit_t)
(typeattributeset cil_gen_require can_change_object_identity)
(typeattributeset can_change_object_identity (sysadm_t ))
(typeattributeset cil_gen_require proc_mdstat_t)
(typeattributeset cil_gen_require proc_kcore_t)
(typeattributeset cil_gen_require proc_kmsg_t)
(typeattributeset cil_gen_require proc_psi_t)
(typeattributeset cil_gen_require sysctl_type)
(typeattributeset cil_gen_require tun_tap_device_t)
(typeattributeset cil_gen_require mtrr_device_t)
(typeattributeset cil_gen_require src_t)
(typeattributeset cil_gen_require tape_device_t)
(typeattributeset cil_gen_require removable_device_t)
(typeattributeset cil_gen_require shadow_t)
(typeattributeset cil_gen_require shadow_history_t)
(typeattributeset cil_gen_require initctl_t)
(typeattributeset cil_gen_require kmod_t)
(typeattributeset cil_gen_require kmod_exec_t)
(typeattributeset cil_gen_require policy_src_t)
(typeattributeset cil_gen_require can_write_binary_policy)
(typeattributeset can_write_binary_policy (sysadm_t ))
(typeattributeset cil_gen_require policy_config_t)
(typeattributeset cil_gen_require can_relabelto_binary_policy)
(typeattributeset can_relabelto_binary_policy (sysadm_t ))
(typeattributeset cil_gen_require kmsg_device_t)
(typeattributeset cil_gen_require ipmi_device_t)
(typeattributeset cil_gen_require auditd_log_t)
(typeattributeset cil_gen_require mlsprocread)
(typeattributeset mlsprocread (sysadm_t ))
(typeattributeset cil_gen_require ubacproc)
(typeattributeset ubacproc (sysadm_t ))
(typeattributeset cil_gen_require ubacfile)
(typeattributeset ubacfile (sysadm_t ))
(typeattributeset cil_gen_require ubacfd)
(typeattributeset ubacfd (sysadm_t ))
(typeattributeset cil_gen_require init_script_file_type)
(typeattributeset cil_gen_require systemdunit)
(typeattributeset cil_gen_require initrc_exec_t)
(typeattributeset cil_gen_require rc_exec_t)
(typeattributeset cil_gen_require cpu_device_t)
(allow sysadm_t shell_exec_t (file (entrypoint)))
(allow sysadm_t shell_exec_t (file (ioctl read getattr lock map execute open)))
(allow sysadm_t bin_t (file (entrypoint)))
(allow sysadm_t bin_t (file (ioctl read getattr lock map execute open)))
(allow user_devpts_t devpts_t (filesystem (associate)))
(typechange sysadm_t server_ptynode chr_file user_devpts_t)
(typechange sysadm_t tty_device_t chr_file user_tty_device_t)
(allow sysadm_t self (process (sigchld sigkill sigstop signull signal getsched setsched getsession getpgid setpgid setcap share getattr)))
(allow sysadm_t self (fd (use)))
(allow sysadm_t self (key (view read write search link setattr create)))
(allow sysadm_t self (fifo_file (ioctl read write getattr lock append open)))
(allow sysadm_t self (unix_dgram_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown sendto)))
(allow sysadm_t self (unix_stream_socket (ioctl read write create getattr setattr append bind connect listen accept getopt setopt shutdown connectto)))
(allow sysadm_t self (shm (create destroy getattr setattr read write associate unix_read unix_write lock)))
(allow sysadm_t self (sem (create destroy getattr setattr read write associate unix_read unix_write)))
(allow sysadm_t self (msgq (create destroy getattr setattr read write associate unix_read unix_write enqueue)))
(allow sysadm_t self (msg (send receive)))
(allow sysadm_t self (context (contains)))
(dontaudit sysadm_t self (socket (create)))
(allow sysadm_t user_devpts_t (chr_file (ioctl read write getattr setattr lock append open)))
(allow sysadm_t device_t (dir (getattr open search)))
(allow sysadm_t device_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t device_t (dir (getattr open search)))
(allow sysadm_t device_t (lnk_file (read getattr)))
(allow sysadm_t ptmx_t (chr_file (ioctl read write getattr lock append open)))
(allow sysadm_t devpts_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t devpts_t (filesystem (getattr)))
(dontaudit sysadm_t bsdpty_device_t (chr_file (read write getattr)))
(typetransition sysadm_t devpts_t chr_file user_devpts_t)
(dontaudit sysadm_t user_devpts_t (chr_file (ioctl)))
(allow sysadm_t user_tty_device_t (chr_file (ioctl read write getattr setattr lock append open)))
(dontaudit sysadm_t user_tty_device_t (chr_file (ioctl)))
(allow sysadm_t proc_t (dir (getattr open search)))
(allow sysadm_t sysctl_t (dir (getattr open search)))
(allow sysadm_t sysctl_kernel_t (dir (getattr open search)))
(allow sysadm_t sysctl_kernel_t (file (ioctl read getattr lock open)))
(allow sysadm_t proc_t (dir (getattr open search)))
(allow sysadm_t sysctl_t (dir (getattr open search)))
(allow sysadm_t sysctl_kernel_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t proc_t (dir (getattr open search)))
(allow sysadm_t sysctl_t (dir (getattr open search)))
(allow sysadm_t sysctl_crypto_t (dir (getattr open search)))
(allow sysadm_t sysctl_crypto_t (file (ioctl read getattr lock open)))
(allow sysadm_t proc_t (dir (getattr open search)))
(allow sysadm_t sysctl_t (dir (getattr open search)))
(allow sysadm_t sysctl_crypto_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t proc_t (dir (getattr open search)))
(allow sysadm_t sysctl_t (dir (getattr open search)))
(allow sysadm_t sysctl_fs_t (dir (getattr open search)))
(allow sysadm_t sysctl_fs_t (file (ioctl read getattr lock open)))
(allow sysadm_t proc_t (dir (getattr open search)))
(allow sysadm_t sysctl_t (dir (getattr open search)))
(allow sysadm_t sysctl_fs_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t proc_t (dir (getattr open search)))
(allow sysadm_t sysctl_t (dir (getattr open search)))
(allow sysadm_t sysctl_vm_t (dir (getattr open search)))
(allow sysadm_t sysctl_vm_overcommit_t (file (ioctl read getattr lock open)))
(dontaudit sysadm_t unlabeled_t (dir (ioctl read getattr lock open search)))
(dontaudit sysadm_t unlabeled_t (file (getattr)))
(dontaudit sysadm_t unlabeled_t (lnk_file (getattr)))
(dontaudit sysadm_t unlabeled_t (fifo_file (getattr)))
(dontaudit sysadm_t unlabeled_t (sock_file (getattr)))
(dontaudit sysadm_t unlabeled_t (blk_file (getattr)))
(dontaudit sysadm_t unlabeled_t (chr_file (getattr)))
(dontaudit sysadm_t device_node (blk_file (getattr)))
(dontaudit sysadm_t device_t (blk_file (getattr)))
(dontaudit sysadm_t device_node (chr_file (getattr)))
(dontaudit sysadm_t device_t (chr_file (getattr)))
(dontaudit sysadm_t null_device_t (chr_file (setattr)))
(allow sysadm_t self (netlink_audit_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown nlmsg_relay)))
(allow sysadm_t self (netlink_kobject_uevent_socket (ioctl read write create getattr setattr append bind getopt setopt shutdown)))
(dontaudit sysadm_t domain (dir (ioctl read getattr lock open search)))
(dontaudit sysadm_t domain (lnk_file (read getattr)))
(dontaudit sysadm_t domain (file (ioctl read getattr lock open)))
(dontaudit sysadm_t domain (sock_file (read getattr open)))
(dontaudit sysadm_t domain (fifo_file (ioctl read getattr lock open)))
(dontaudit sysadm_t domain (process (getattr)))
(dontaudit sysadm_t domain (process (getsession)))
(allow sysadm_t etc_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t etc_t (dir (getattr open search)))
(allow sysadm_t etc_t (file (ioctl read getattr lock open)))
(allow sysadm_t etc_t (dir (getattr open search)))
(allow sysadm_t etc_t (lnk_file (read getattr)))
(allow sysadm_t etc_t (dir (watch)))
(allow sysadm_t etc_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t etc_t (dir (getattr open search)))
(allow sysadm_t etc_runtime_t (file (ioctl read getattr lock open)))
(allow sysadm_t etc_t (dir (getattr open search)))
(allow sysadm_t etc_runtime_t (lnk_file (read getattr)))
(allow sysadm_t usr_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t usr_t (dir (getattr open search)))
(allow sysadm_t usr_t (file (ioctl read getattr lock open)))
(allow sysadm_t usr_t (dir (getattr open search)))
(allow sysadm_t usr_t (lnk_file (read getattr)))
(allow sysadm_t usr_t (dir (watch)))
(allow sysadm_t var_run_t (dir (watch)))
(allow sysadm_t readable_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t readable_t (file (ioctl read getattr lock open)))
(allow sysadm_t readable_t (lnk_file (read getattr)))
(allow sysadm_t readable_t (fifo_file (ioctl read getattr lock open)))
(allow sysadm_t readable_t (sock_file (read getattr open)))
(dontaudit sysadm_t non_security_file_type (dir (ioctl read getattr lock open search)))
(dontaudit sysadm_t non_security_file_type (file (getattr)))
(dontaudit sysadm_t non_security_file_type (lnk_file (getattr)))
(dontaudit sysadm_t non_security_file_type (fifo_file (getattr)))
(dontaudit sysadm_t non_security_file_type (sock_file (getattr)))
(allow sysadm_t lib_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t lib_t (dir (getattr open search)))
(allow sysadm_t lib_t (lnk_file (read getattr)))
(allow sysadm_t ld_so_t (lnk_file (read getattr)))
(allow sysadm_t lib_t (dir (getattr open search)))
(allow sysadm_t ld_so_t (file (ioctl read getattr map execute open execute_no_trans)))
(allow sysadm_t etc_t (dir (getattr open search)))
(allow sysadm_t etc_t (lnk_file (read getattr)))
(allow sysadm_t usr_t (dir (getattr open search)))
(allow sysadm_t locale_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t locale_t (dir (getattr open search)))
(allow sysadm_t locale_t (file (ioctl read getattr lock open)))
(allow sysadm_t locale_t (dir (getattr open search)))
(allow sysadm_t locale_t (lnk_file (read getattr)))
(allow sysadm_t locale_t (file (map)))
(allow sysadm_t cert_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t cert_t (dir (getattr open search)))
(allow sysadm_t cert_t (file (ioctl read getattr lock open)))
(allow sysadm_t cert_t (dir (getattr open search)))
(allow sysadm_t cert_t (lnk_file (read getattr)))
(allow sysadm_t fonts_t (dir (watch)))
(allow sysadm_t etc_t (dir (getattr open search)))
(allow sysadm_t var_run_t (lnk_file (read getattr)))
(allow sysadm_t var_t (dir (getattr open search)))
(allow sysadm_t var_run_t (dir (getattr open search)))
(allow sysadm_t net_conf_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t net_conf_t (file (ioctl read getattr lock open)))
(allow sysadm_t net_conf_t (lnk_file (read getattr)))
(allow sysadm_t init_t (system (status)))
(typemember sysadm_t user_home_dir_t dir user_home_dir_t)
(allow sysadm_t user_home_dir_t (lnk_file (read getattr)))
(allow sysadm_t user_home_t (file (entrypoint)))
(allow sysadm_t user_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow sysadm_t user_home_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow sysadm_t user_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow sysadm_t user_home_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow sysadm_t user_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow sysadm_t user_home_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
(allow sysadm_t user_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow sysadm_t user_home_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow sysadm_t user_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow sysadm_t user_home_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow sysadm_t user_home_t (dir (getattr open search)))
(allow sysadm_t user_home_dir_t (dir (getattr open search)))
(allow sysadm_t user_home_t (dir (getattr relabelfrom relabelto)))
(allow sysadm_t user_home_t (dir (getattr open search)))
(allow sysadm_t user_home_dir_t (dir (getattr open search)))
(allow sysadm_t user_home_t (file (getattr relabelfrom relabelto)))
(allow sysadm_t user_home_t (dir (getattr open search)))
(allow sysadm_t user_home_dir_t (dir (getattr open search)))
(allow sysadm_t user_home_t (lnk_file (getattr relabelfrom relabelto)))
(allow sysadm_t user_home_t (dir (getattr open search)))
(allow sysadm_t user_home_dir_t (dir (getattr open search)))
(allow sysadm_t user_home_t (sock_file (getattr relabelfrom relabelto)))
(allow sysadm_t user_home_t (dir (getattr open search)))
(allow sysadm_t user_home_dir_t (dir (getattr open search)))
(allow sysadm_t user_home_t (fifo_file (getattr relabelfrom relabelto)))
(allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition sysadm_t user_home_dir_t fifo_file user_home_t)
(typetransition sysadm_t user_home_dir_t sock_file user_home_t)
(typetransition sysadm_t user_home_dir_t lnk_file user_home_t)
(typetransition sysadm_t user_home_dir_t dir user_home_t)
(typetransition sysadm_t user_home_dir_t file user_home_t)
(allow sysadm_t home_root_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t home_root_t (lnk_file (read getattr)))
(allow sysadm_t user_home_dir_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
(allow sysadm_t user_home_t (dir (watch watch_mount watch_sb watch_with_perm watch_reads)))
(allow sysadm_t user_home_dir_t (dir (watch watch_mount watch_sb watch_with_perm watch_reads)))
(allow sysadm_t user_home_t (file (watch watch_mount watch_sb watch_with_perm watch_reads)))
(allow sysadm_t user_home_t (lnk_file (watch watch_mount watch_sb watch_with_perm watch_reads)))
(allow sysadm_t user_home_t (sock_file (watch watch_mount watch_sb watch_with_perm watch_reads)))
(allow sysadm_t user_home_t (fifo_file (watch watch_mount watch_sb watch_with_perm watch_reads)))
(allow sysadm_t user_bin_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
(allow sysadm_t user_bin_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
(allow sysadm_t user_bin_t (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename)))
(allow sysadm_t home_root_t (dir (getattr open search)))
(allow sysadm_t home_root_t (lnk_file (read getattr)))
(allow sysadm_t user_bin_t (dir (getattr open search)))
(allow sysadm_t user_bin_t (file (ioctl read getattr map execute open execute_no_trans)))
(allow sysadm_t user_bin_t (dir (getattr open search)))
(allow sysadm_t user_bin_t (lnk_file (read getattr)))
(allow sysadm_t home_root_t (dir (getattr open search)))
(allow sysadm_t home_root_t (lnk_file (read getattr)))
(allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow sysadm_t home_root_t (dir (getattr open search)))
(allow sysadm_t home_root_t (lnk_file (read getattr)))
(allow sysadm_t user_cert_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow sysadm_t user_cert_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow sysadm_t user_cert_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow sysadm_t user_cert_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow sysadm_t user_cert_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow sysadm_t user_cert_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
(allow sysadm_t home_root_t (dir (getattr open search)))
(allow sysadm_t home_root_t (lnk_file (read getattr)))
(allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow sysadm_t home_root_t (dir (getattr open search)))
(allow sysadm_t home_root_t (lnk_file (read getattr)))
(typemember sysadm_t tmp_t dir user_tmp_t)
(allow sysadm_t user_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow sysadm_t user_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow sysadm_t user_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow sysadm_t user_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow sysadm_t user_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow sysadm_t user_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
(allow sysadm_t user_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow sysadm_t user_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow sysadm_t user_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow sysadm_t user_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow sysadm_t tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition sysadm_t tmp_t fifo_file user_tmp_t)
(typetransition sysadm_t tmp_t sock_file user_tmp_t)
(typetransition sysadm_t tmp_t lnk_file user_tmp_t)
(typetransition sysadm_t tmp_t dir user_tmp_t)
(typetransition sysadm_t tmp_t file user_tmp_t)
(allow sysadm_t user_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition sysadm_t user_runtime_t fifo_file user_tmp_t)
(typetransition sysadm_t user_runtime_t sock_file user_tmp_t)
(typetransition sysadm_t user_runtime_t lnk_file user_tmp_t)
(typetransition sysadm_t user_runtime_t dir user_tmp_t)
(typetransition sysadm_t user_runtime_t file user_tmp_t)
(allow sysadm_t user_runtime_root_t (dir (getattr open search)))
(allow sysadm_t var_run_t (lnk_file (read getattr)))
(allow sysadm_t var_t (dir (getattr open search)))
(allow sysadm_t var_run_t (dir (getattr open search)))
(allow sysadm_t user_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow sysadm_t user_tmpfs_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow sysadm_t user_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow sysadm_t user_tmpfs_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow sysadm_t user_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow sysadm_t user_tmpfs_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
(allow sysadm_t user_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow sysadm_t user_tmpfs_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow sysadm_t user_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow sysadm_t user_tmpfs_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow user_tmpfs_t tmpfs_t (filesystem (associate)))
(allow sysadm_t tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition sysadm_t tmpfs_t fifo_file user_tmpfs_t)
(typetransition sysadm_t tmpfs_t sock_file user_tmpfs_t)
(typetransition sysadm_t tmpfs_t lnk_file user_tmpfs_t)
(typetransition sysadm_t tmpfs_t dir user_tmpfs_t)
(typetransition sysadm_t tmpfs_t file user_tmpfs_t)
(allow sysadm_t user_tmp_t (dir (getattr open search)))
(allow sysadm_t user_tmp_t (file (ioctl read getattr map execute open execute_no_trans)))
(allow sysadm_t tmp_t (dir (getattr open search)))
(allow sysadm_t user_runtime_t (dir (getattr open search)))
(allow sysadm_t user_runtime_root_t (dir (getattr open search)))
(allow sysadm_t var_run_t (lnk_file (read getattr)))
(allow sysadm_t var_t (dir (getattr open search)))
(allow sysadm_t var_run_t (dir (getattr open search)))
(allow sysadm_t home_root_t (dir (getattr open search)))
(allow sysadm_t home_root_t (lnk_file (read getattr)))
(allow sysadm_t user_home_t (dir (getattr open search)))
(allow sysadm_t user_home_dir_t (dir (getattr open search)))
(allow sysadm_t user_home_t (file (ioctl read getattr map execute open execute_no_trans)))
(allow sysadm_t user_tmpfs_t (file (map)))
(allow sysadm_t self (capability (chown fowner setgid)))
(dontaudit sysadm_t self (capability (fsetid sys_nice)))
(allow sysadm_t self (process (transition sigchld sigkill sigstop signull signal ptrace getsched setsched getsession getpgid setpgid getcap setcap share getattr setfscreate noatsecure siginh rlimitinh dyntransition setkeycreate setsockcreate getrlimit)))
(dontaudit sysadm_t self (process (setrlimit)))
(dontaudit sysadm_t self (netlink_route_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown nlmsg_read nlmsg_write)))
(allow sysadm_t self (context (contains)))
(dontaudit sysadm_t proc_t (file (ioctl read getattr lock open)))
(allow sysadm_t sysfs_t (dir (getattr open search)))
(allow sysadm_t sysfs_t (file (ioctl read getattr lock open)))
(allow sysadm_t sysfs_t (dir (getattr open search)))
(allow sysadm_t sysfs_t (lnk_file (read getattr)))
(allow sysadm_t sysfs_t (dir (getattr open search)))
(allow sysadm_t sysfs_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t device_t (dir (getattr open search)))
(allow sysadm_t urandom_device_t (chr_file (ioctl read getattr lock open)))
(allow sysadm_t privfd (fd (use)))
(dontaudit sysadm_t entry_type (file (ioctl read getattr map execute open execute_no_trans)))
(dontaudit sysadm_t default_t (dir (ioctl read getattr lock open search)))
(dontaudit sysadm_t default_t (file (ioctl read getattr lock open)))
(allow sysadm_t lost_found_t (dir (getattr)))
(allow sysadm_t filesystem_type (filesystem (quotaget)))
(allow sysadm_t filesystem_type (filesystem (getattr)))
(allow sysadm_t file_type (filesystem (getattr)))
(allow sysadm_t filesystem_type (dir (getattr)))
(allow sysadm_t autofs_t (dir (getattr open search)))
(allow sysadm_t cgroup_types (dir (getattr open search)))
(allow sysadm_t cgroup_types (dir (ioctl read getattr lock open search)))
(allow sysadm_t sysfs_t (dir (getattr open search)))
(allow sysadm_t sysfs_t (dir (getattr open search)))
(allow sysadm_t inotifyfs_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t anon_inodefs_t (dir (getattr open search)))
(allow sysadm_t anon_inodefs_t (file (ioctl read write getattr lock append open)))
(dontaudit sysadm_t cgroup_types (file (ioctl read write getattr lock append open)))
(dontaudit sysadm_t wtmp_t (file (write)))
(dontaudit sysadm_t exec_type (file (execute execute_no_trans)))
(allow sysadm_t bin_t (dir (getattr open search)))
(allow sysadm_t bin_t (lnk_file (read getattr)))
(allow sysadm_t usr_t (dir (getattr open search)))
(allow sysadm_t bin_t (dir (getattr open search)))
(allow sysadm_t bin_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t bin_t (file (ioctl read getattr lock map execute open execute_no_trans)))
(allow sysadm_t bin_t (dir (getattr open search)))
(allow sysadm_t bin_t (lnk_file (read getattr)))
(allow sysadm_t usr_t (dir (getattr open search)))
(allow sysadm_t bin_t (dir (getattr open search)))
(allow sysadm_t bin_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t shell_exec_t (file (ioctl read getattr lock map execute open execute_no_trans)))
(allow sysadm_t bin_t (dir (getattr open search)))
(allow sysadm_t bin_t (lnk_file (read getattr)))
(allow sysadm_t usr_t (dir (getattr open search)))
(allow sysadm_t chroot_exec_t (file (ioctl read getattr lock map execute open execute_no_trans)))
(allow sysadm_t self (capability (sys_chroot)))
(allow sysadm_t application_exec_type (file (ioctl read getattr lock map execute open execute_no_trans)))
(dontaudit sysadm_t initrc_runtime_t (file (ioctl read write getattr lock append open)))
(dontaudit sysadm_t init_t (fd (use)))
(dontaudit sysadm_t initrc_t (fd (use)))
(allow sysadm_t lib_t (dir (watch)))
(allow sysadm_t usr_t (dir (getattr open search)))
(allow sysadm_t lib_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t lib_t (dir (getattr open search)))
(allow sysadm_t lib_t (lnk_file (read getattr)))
(allow sysadm_t lib_t (dir (getattr open search)))
(allow sysadm_t lib_t (file (ioctl read getattr map execute open execute_no_trans)))
(dontaudit sysadm_t logfile (file (getattr)))
(allow sysadm_t usr_t (dir (getattr open search)))
(allow sysadm_t man_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t man_cache_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t man_t (dir (getattr open search)))
(allow sysadm_t man_cache_t (dir (getattr open search)))
(allow sysadm_t man_t (file (ioctl read getattr lock open)))
(allow sysadm_t man_cache_t (file (ioctl read getattr lock open)))
(allow sysadm_t man_t (dir (getattr open search)))
(allow sysadm_t man_cache_t (dir (getattr open search)))
(allow sysadm_t man_t (lnk_file (read getattr)))
(allow sysadm_t man_cache_t (lnk_file (read getattr)))
(allow sysadm_t man_cache_t (file (map)))
(allow sysadm_t public_content_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t public_content_rw_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t public_content_t (dir (getattr open search)))
(allow sysadm_t public_content_rw_t (dir (getattr open search)))
(allow sysadm_t public_content_t (file (ioctl read getattr lock open)))
(allow sysadm_t public_content_rw_t (file (ioctl read getattr lock open)))
(allow sysadm_t public_content_t (dir (getattr open search)))
(allow sysadm_t public_content_rw_t (dir (getattr open search)))
(allow sysadm_t public_content_t (lnk_file (read getattr)))
(allow sysadm_t public_content_rw_t (lnk_file (read getattr)))
(allow sysadm_t var_t (dir (getattr open search)))
(allow sysadm_t var_t (dir (getattr open search)))
(allow sysadm_t var_lib_t (dir (getattr open search)))
(allow sysadm_t tetex_data_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t tetex_data_t (dir (getattr open search)))
(allow sysadm_t tetex_data_t (file (ioctl read getattr lock open)))
(allow sysadm_t tetex_data_t (dir (getattr open search)))
(allow sysadm_t tetex_data_t (lnk_file (read getattr)))
(allow sysadm_t var_t (dir (getattr open search)))
(allow sysadm_t var_t (dir (getattr open search)))
(allow sysadm_t var_lib_t (dir (getattr open search)))
(allow sysadm_t tetex_data_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t tetex_data_t (dir (getattr open search)))
(allow sysadm_t tetex_data_t (file (ioctl read getattr map execute open execute_no_trans)))
(allow sysadm_t etc_t (dir (getattr open search)))
(allow sysadm_t selinux_config_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t selinux_config_t (dir (getattr open search)))
(allow sysadm_t selinux_config_t (file (ioctl read getattr lock open)))
(allow sysadm_t selinux_config_t (dir (getattr open search)))
(allow sysadm_t selinux_config_t (lnk_file (read getattr)))
(allow sysadm_t self (tcp_socket (ioctl read write create getattr setattr append bind connect listen accept getopt setopt shutdown)))
(allow sysadm_t self (udp_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow sysadm_t netlabel_peer_t (peer (recv)))
(allow sysadm_t netlabel_peer_t (tcp_socket (recvfrom)))
(allow sysadm_t netlabel_peer_t (udp_socket (recvfrom)))
(allow sysadm_t netlabel_peer_t (rawip_socket (recvfrom)))
(allow sysadm_t netif_t (netif (ingress egress)))
(allow sysadm_t netif_t (netif (egress)))
(allow sysadm_t netif_t (netif (ingress)))
(allow sysadm_t node_t (node (recvfrom sendto)))
(allow sysadm_t node_t (node (sendto)))
(allow sysadm_t node_t (node (recvfrom)))
(allow sysadm_t port_type (tcp_socket (name_connect)))
(allow sysadm_t client_packet_type (packet (send)))
(allow sysadm_t client_packet_type (packet (recv)))
(allow sysadm_t self (association (sendto)))
(allow sysadm_t sysadm_t (association (recvfrom)))
(allow sysadm_t sysadm_t (association (recvfrom)))
(allow sysadm_t sysadm_t (peer (recv)))
(allow sysadm_t sysadm_t (peer (recv)))
(allow sysadm_t netlabel_peer_t (peer (recv)))
(allow sysadm_t netlabel_peer_t (peer (recv)))
(allow sysadm_t self (association (sendto)))
(allow sysadm_t sysadm_t (tcp_socket (recvfrom)))
(allow sysadm_t sysadm_t (association (recvfrom)))
(allow sysadm_t sysadm_t (tcp_socket (recvfrom)))
(allow sysadm_t sysadm_t (association (recvfrom)))
(allow sysadm_t sysadm_t (peer (recv)))
(allow sysadm_t sysadm_t (peer (recv)))
(allow sysadm_t netlabel_peer_t (peer (recv)))
(allow sysadm_t netlabel_peer_t (tcp_socket (recvfrom)))
(allow sysadm_t netlabel_peer_t (peer (recv)))
(allow sysadm_t netlabel_peer_t (tcp_socket (recvfrom)))
(allow sysadm_t self (association (sendto)))
(allow sysadm_t sysadm_t (udp_socket (recvfrom)))
(allow sysadm_t sysadm_t (association (recvfrom)))
(allow sysadm_t sysadm_t (peer (recv)))
(allow sysadm_t netlabel_peer_t (peer (recv)))
(allow sysadm_t netlabel_peer_t (udp_socket (recvfrom)))
(allow sysadm_t self (association (sendto)))
(allow sysadm_t sysadm_t (rawip_socket (recvfrom)))
(allow sysadm_t sysadm_t (association (recvfrom)))
(allow sysadm_t sysadm_t (peer (recv)))
(allow sysadm_t netlabel_peer_t (peer (recv)))
(allow sysadm_t netlabel_peer_t (rawip_socket (recvfrom)))
(dontaudit sysadm_t self (netlink_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(dontaudit sysadm_t self (netlink_route_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown nlmsg_read nlmsg_write)))
(allow sysadm_t self (netlink_kobject_uevent_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow sysadm_t unpriv_userdomain (fd (use)))
(allow sysadm_t proc_t (dir (getattr open search)))
(allow sysadm_t proc_t (file (ioctl read getattr lock open)))
(allow sysadm_t proc_t (dir (getattr open search)))
(allow sysadm_t proc_t (lnk_file (read getattr)))
(allow sysadm_t proc_t (dir (getattr open search)))
(allow sysadm_t proc_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t proc_t (dir (getattr open search)))
(allow sysadm_t proc_net_t (dir (getattr open search)))
(allow sysadm_t proc_net_t (file (ioctl read getattr lock open)))
(allow sysadm_t proc_t (dir (getattr open search)))
(allow sysadm_t proc_net_t (dir (getattr open search)))
(allow sysadm_t proc_net_t (lnk_file (read getattr)))
(allow sysadm_t proc_t (dir (getattr open search)))
(allow sysadm_t proc_net_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t proc_t (dir (getattr open search)))
(allow sysadm_t sysctl_t (dir (getattr open search)))
(allow sysadm_t sysctl_net_t (dir (getattr open search)))
(allow sysadm_t sysctl_net_t (file (ioctl read getattr lock open)))
(allow sysadm_t proc_t (dir (getattr open search)))
(allow sysadm_t sysctl_t (dir (getattr open search)))
(allow sysadm_t sysctl_net_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t kernel_t (system (ipc_info)))
(allow sysadm_t proc_t (dir (getattr open search)))
(allow sysadm_t sysctl_t (dir (getattr open search)))
(allow sysadm_t sysctl_dev_t (dir (getattr open search)))
(allow sysadm_t sysctl_dev_t (file (ioctl read getattr lock open)))
(allow sysadm_t proc_t (dir (getattr open search)))
(allow sysadm_t sysctl_t (dir (getattr open search)))
(allow sysadm_t sysctl_dev_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t bin_t (dir (getattr open search)))
(allow sysadm_t bin_t (lnk_file (read getattr)))
(allow sysadm_t usr_t (dir (getattr open search)))
(allow sysadm_t bin_t (dir (getattr open search)))
(allow sysadm_t bin_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t bin_t (file (ioctl read getattr lock map execute open execute_no_trans)))
(allow sysadm_t node_t (udp_socket (node_bind)))
(allow sysadm_t port_t (udp_socket (name_bind)))
(dontaudit sysadm_t defined_port_type (udp_socket (name_bind)))
(allow sysadm_t device_t (dir (getattr open search)))
(allow sysadm_t random_device_t (chr_file (ioctl read getattr lock open)))
(allow sysadm_t device_t (dir (getattr open search)))
(allow sysadm_t sound_device_t (chr_file (ioctl write getattr lock append open)))
(allow sysadm_t sound_device_t (chr_file (map)))
(allow sysadm_t device_t (dir (getattr open search)))
(allow sysadm_t sound_device_t (chr_file (ioctl read getattr lock open)))
(allow sysadm_t sound_device_t (chr_file (map)))
(allow sysadm_t device_t (dir (getattr open search)))
(allow sysadm_t sound_device_t (chr_file (ioctl read getattr lock open)))
(allow sysadm_t sound_device_t (chr_file (map)))
(allow sysadm_t device_t (dir (getattr open search)))
(allow sysadm_t sound_device_t (chr_file (ioctl write getattr lock append open)))
(allow sysadm_t sound_device_t (chr_file (map)))
(allow sysadm_t device_t (dir (getattr open search)))
(allow sysadm_t wireless_device_t (chr_file (ioctl read getattr lock open)))
(allow sysadm_t etc_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t etc_t (dir (getattr open search)))
(allow sysadm_t etc_t (lnk_file (read getattr)))
(allow sysadm_t etc_t (dir (getattr open search)))
(allow sysadm_t etc_t (file (ioctl read getattr map execute open execute_no_trans)))
(allow sysadm_t var_lock_t (lnk_file (read getattr)))
(allow sysadm_t var_t (dir (getattr open search)))
(allow sysadm_t var_lock_t (dir (getattr open search)))
(allow sysadm_t mnt_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t var_t (dir (getattr open search)))
(allow sysadm_t var_t (file (ioctl read getattr lock open)))
(allow sysadm_t var_t (dir (getattr open search)))
(allow sysadm_t var_t (lnk_file (read getattr)))
(allow sysadm_t var_t (dir (getattr open search)))
(allow sysadm_t var_spool_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t var_spool_t (dir (getattr open search)))
(allow sysadm_t var_spool_t (file (ioctl read getattr lock open)))
(allow sysadm_t var_lib_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t var_t (dir (getattr open search)))
(allow sysadm_t var_lib_t (dir (getattr open search)))
(allow sysadm_t var_lib_t (file (ioctl read getattr lock open)))
(allow sysadm_t lost_found_t (dir (getattr)))
(allow sysadm_t etc_t (dir (watch)))
(allow sysadm_t usr_t (dir (watch)))
(allow sysadm_t cgroup_types (dir (getattr open search)))
(allow sysadm_t cgroup_types (file (ioctl read getattr lock open)))
(allow sysadm_t cgroup_types (dir (getattr open search)))
(allow sysadm_t cgroup_types (lnk_file (read getattr)))
(allow sysadm_t sysfs_t (dir (getattr open search)))
(allow sysadm_t sysfs_t (dir (getattr open search)))
(allow sysadm_t security_t (filesystem (getattr)))
(allow sysadm_t sysfs_t (filesystem (getattr)))
(allow sysadm_t sysfs_t (dir (getattr open search)))
(allow sysadm_t sysfs_t (dir (getattr open search)))
(allow sysadm_t proc_t (dir (getattr open search)))
(allow sysadm_t proc_t (file (ioctl read getattr lock open)))
(allow sysadm_t proc_t (dir (getattr open search)))
(allow sysadm_t proc_t (lnk_file (read getattr)))
(allow sysadm_t proc_t (dir (getattr open search)))
(allow sysadm_t proc_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t sysfs_t (dir (getattr open search)))
(allow sysadm_t sysfs_t (dir (getattr open search)))
(allow sysadm_t security_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t security_t (file (ioctl read write getattr map open)))
(allow sysadm_t security_t (security (check_context)))
(allow sysadm_t sysfs_t (dir (getattr open search)))
(allow sysadm_t sysfs_t (dir (getattr open search)))
(allow sysadm_t self (netlink_selinux_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow sysadm_t security_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t security_t (file (ioctl read write getattr map open)))
(allow sysadm_t security_t (security (compute_av)))
(allow sysadm_t sysfs_t (dir (getattr open search)))
(allow sysadm_t sysfs_t (dir (getattr open search)))
(allow sysadm_t security_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t security_t (file (ioctl read write getattr map open)))
(allow sysadm_t security_t (security (compute_create)))
(allow sysadm_t sysfs_t (dir (getattr open search)))
(allow sysadm_t sysfs_t (dir (getattr open search)))
(allow sysadm_t security_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t security_t (file (ioctl read write getattr map open)))
(allow sysadm_t security_t (security (compute_relabel)))
(allow sysadm_t sysfs_t (dir (getattr open search)))
(allow sysadm_t sysfs_t (dir (getattr open search)))
(allow sysadm_t security_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t security_t (file (ioctl read write getattr map open)))
(allow sysadm_t security_t (security (compute_user)))
(allow sysadm_t device_t (dir (getattr open search)))
(allow sysadm_t device_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t device_t (dir (getattr open search)))
(allow sysadm_t device_t (lnk_file (read getattr)))
(allow sysadm_t fixed_disk_device_t (blk_file (getattr)))
(allow sysadm_t fixed_disk_device_t (chr_file (getattr)))
(allow sysadm_t var_t (dir (getattr open search)))
(allow sysadm_t var_log_t (dir (getattr open search)))
(allow sysadm_t var_log_t (lnk_file (read getattr)))
(allow sysadm_t wtmp_t (file (ioctl read getattr lock open)))
(allow sysadm_t var_run_t (lnk_file (read getattr)))
(allow sysadm_t var_t (dir (getattr open search)))
(allow sysadm_t var_run_t (dir (getattr open search)))
(allow sysadm_t pam_var_console_t (dir (getattr open search)))
(allow sysadm_t pam_exec_t (file (ioctl read getattr map execute open)))
(allow sysadm_t pam_t (process (transition)))
(dontaudit sysadm_t pam_t (process (noatsecure siginh rlimitinh)))
(typetransition sysadm_t pam_exec_t process pam_t)
(allow pam_t sysadm_t (fd (use)))
(allow pam_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
(allow pam_t sysadm_t (process (sigchld)))
(allow sysadm_t utempter_exec_t (file (ioctl read getattr map execute open)))
(allow sysadm_t utempter_t (process (transition)))
(dontaudit sysadm_t utempter_t (process (noatsecure siginh rlimitinh)))
(typetransition sysadm_t utempter_exec_t process utempter_t)
(allow utempter_t sysadm_t (fd (use)))
(allow utempter_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
(allow utempter_t sysadm_t (process (sigchld)))
(allow sysadm_t var_run_t (lnk_file (read getattr)))
(allow sysadm_t var_t (dir (getattr open search)))
(allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t initrc_runtime_t (file (ioctl read getattr lock open)))
(allow sysadm_t etc_t (dir (getattr open search)))
(allow sysadm_t selinux_config_t (dir (getattr open search)))
(allow sysadm_t default_context_t (dir (getattr open search)))
(allow sysadm_t file_context_t (dir (getattr open search)))
(allow sysadm_t file_context_t (file (ioctl read getattr lock open)))
(allow sysadm_t file_context_t (file (map)))
(allow sysadm_t etc_t (dir (getattr open search)))
(allow sysadm_t selinux_config_t (dir (getattr open search)))
(allow sysadm_t default_context_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t default_context_t (dir (getattr open search)))
(allow sysadm_t default_context_t (file (ioctl read getattr lock open)))
(allow sysadm_t usr_t (dir (getattr open search)))
(allow sysadm_t bin_t (dir (getattr open search)))
(allow sysadm_t bin_t (lnk_file (read getattr)))
(allow sysadm_t usr_t (dir (getattr open search)))
(allow sysadm_t newrole_exec_t (file (ioctl read getattr map execute open)))
(allow sysadm_t newrole_t (process (transition)))
(dontaudit sysadm_t newrole_t (process (noatsecure siginh rlimitinh)))
(typetransition sysadm_t newrole_exec_t process newrole_t)
(allow newrole_t sysadm_t (fd (use)))
(allow newrole_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
(allow newrole_t sysadm_t (process (sigchld)))
(allow sysadm_t usr_t (dir (getattr open search)))
(allow sysadm_t bin_t (dir (getattr open search)))
(allow sysadm_t bin_t (lnk_file (read getattr)))
(allow sysadm_t usr_t (dir (getattr open search)))
(allow sysadm_t checkpolicy_exec_t (file (ioctl read getattr lock map execute open execute_no_trans)))
(allow sysadm_t usr_t (dir (getattr open search)))
(allow sysadm_t bin_t (dir (getattr open search)))
(allow sysadm_t bin_t (lnk_file (read getattr)))
(allow sysadm_t usr_t (dir (getattr open search)))
(allow sysadm_t setfiles_exec_t (file (ioctl read getattr lock map execute open execute_no_trans)))
(dontaudit sysadm_t newrole_t (process (signal)))
(dontaudit sysadm_t domain (process (getsched)))
(allow sysadm_t self (capability (chown dac_override dac_read_search fowner fsetid kill setgid setuid setpcap linux_immutable net_bind_service net_broadcast net_admin net_raw ipc_lock ipc_owner sys_rawio sys_chroot sys_ptrace sys_pacct sys_admin sys_boot sys_nice sys_resource sys_time sys_tty_config mknod lease setfcap)))
(allow sysadm_t self (cap_userns (sys_ptrace)))
(allow sysadm_t self (process (setexec setfscreate)))
(allow sysadm_t self (netlink_audit_socket (nlmsg_readpriv)))
(allow sysadm_t self (netlink_tcpdiag_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown nlmsg_read nlmsg_write)))
(allow sysadm_t self (tun_socket (create)))
(allow sysadm_t self (passwd (chfn chsh passwd)))
(allow sysadm_t self (passwd (rootok)))
(allow sysadm_t proc_t (dir (getattr open search)))
(allow sysadm_t proc_mdstat_t (file (ioctl read getattr lock open)))
(allow sysadm_t proc_t (dir (getattr open search)))
(allow sysadm_t proc_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t proc_t (dir (getattr open search)))
(allow sysadm_t proc_kcore_t (file (getattr)))
(allow sysadm_t proc_t (dir (getattr open search)))
(allow sysadm_t proc_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t proc_t (dir (getattr open search)))
(allow sysadm_t proc_kmsg_t (file (getattr)))
(allow sysadm_t self (capability2 (syslog)))
(allow sysadm_t kernel_t (system (syslog_console)))
(allow sysadm_t self (capability2 (syslog)))
(allow sysadm_t kernel_t (system (syslog_mod)))
(allow sysadm_t self (capability2 (syslog)))
(allow sysadm_t kernel_t (system (syslog_read)))
(allow sysadm_t proc_t (dir (getattr open search)))
(allow sysadm_t proc_psi_t (dir (getattr open search)))
(allow sysadm_t proc_psi_t (file (ioctl read getattr lock open)))
(allow sysadm_t proc_t (dir (getattr open search)))
(allow sysadm_t proc_psi_t (dir (getattr open search)))
(allow sysadm_t proc_psi_t (lnk_file (read getattr)))
(allow sysadm_t proc_t (dir (getattr open search)))
(allow sysadm_t proc_psi_t (dir (getattr open search)))
(allow sysadm_t proc_psi_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t kernel_t (system (ipc_info)))
(allow sysadm_t proc_t (dir (getattr open search)))
(allow sysadm_t proc_net_t (dir (getattr open search)))
(allow sysadm_t sysctl_type (dir (getattr open search)))
(allow sysadm_t sysctl_type (file (ioctl read write getattr lock append open)))
(allow sysadm_t sysctl_type (dir (ioctl read getattr lock open search)))
(allow sysadm_t sysctl_type (file (setattr)))
(allow sysadm_t unlabeled_t (process (sigkill)))
(allow sysadm_t unlabeled_t (process (signal)))
(allow sysadm_t unlabeled_t (process (sigstop)))
(allow sysadm_t unlabeled_t (process (signull)))
(allow sysadm_t unlabeled_t (process (sigchld)))
(allow sysadm_t port_t (tcp_socket (name_bind)))
(dontaudit sysadm_t defined_port_type (tcp_socket (name_bind)))
(allow sysadm_t device_t (dir (getattr open search)))
(allow sysadm_t device_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t device_t (dir (getattr open search)))
(allow sysadm_t device_t (lnk_file (read getattr)))
(allow sysadm_t tun_tap_device_t (chr_file (ioctl read write getattr lock append open)))
(allow sysadm_t device_t (dir (getattr open search)))
(allow sysadm_t device_t (blk_file (getattr)))
(allow sysadm_t device_t (dir (getattr open search)))
(allow sysadm_t device_t (chr_file (getattr)))
(allow sysadm_t device_t (dir (getattr open search)))
(allow sysadm_t mtrr_device_t (file (getattr)))
(allow sysadm_t device_t (dir (getattr open search)))
(allow sysadm_t mtrr_device_t (chr_file (getattr)))
(allow sysadm_t self (capability (mknod)))
(allow sysadm_t device_t (dir (ioctl write getattr lock open add_name search)))
(allow sysadm_t device_node (blk_file (create getattr)))
(allow sysadm_t self (capability (mknod)))
(allow sysadm_t device_t (dir (ioctl write getattr lock open add_name search)))
(allow sysadm_t device_node (chr_file (create getattr)))
(allow sysadm_t device_t (dir (ioctl write getattr lock open remove_name search)))
(allow sysadm_t device_node (blk_file (getattr unlink)))
(allow sysadm_t device_t (dir (ioctl write getattr lock open remove_name search)))
(allow sysadm_t device_node (chr_file (getattr unlink)))
(allow sysadm_t device_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow sysadm_t device_node (blk_file (getattr rename)))
(allow sysadm_t device_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow sysadm_t device_node (chr_file (getattr rename)))
(allow sysadm_t device_t (dir (ioctl write getattr lock open add_name search)))
(allow sysadm_t device_t (lnk_file (create getattr)))
(allow sysadm_t device_t (dir (getattr open search)))
(allow sysadm_t wireless_device_t (chr_file (ioctl read write getattr lock append open)))
(allow sysadm_t domain (process (setsched)))
(allow sysadm_t proc_t (dir (getattr open search)))
(allow sysadm_t proc_t (dir (getattr open search)))
(allow sysadm_t domain (dir (ioctl read getattr lock open search)))
(allow sysadm_t domain (dir (getattr open search)))
(allow sysadm_t domain (file (ioctl read getattr lock open)))
(allow sysadm_t domain (dir (getattr open search)))
(allow sysadm_t domain (lnk_file (read getattr)))
(allow sysadm_t domain (process (getattr)))
(dontaudit sysadm_t domain (process (ptrace)))
(allow sysadm_t domain (process (sigkill)))
(allow sysadm_t self (capability (kill)))
(allow sysadm_t domain (process (signal)))
(allow sysadm_t domain (process (signull)))
(allow sysadm_t domain (process (sigstop)))
(allow sysadm_t domain (process (sigstop)))
(allow sysadm_t domain (process (sigchld)))
(allow sysadm_t domain (tcp_socket (getattr)))
(allow sysadm_t domain (udp_socket (getattr)))
(allow sysadm_t domain (rawip_socket (getattr)))
(allow sysadm_t domain (netlink_socket (getattr)))
(allow sysadm_t domain (packet_socket (getattr)))
(allow sysadm_t domain (unix_stream_socket (getattr)))
(allow sysadm_t domain (unix_dgram_socket (getattr)))
(allow sysadm_t domain (netlink_route_socket (getattr)))
(allow sysadm_t domain (netlink_tcpdiag_socket (getattr)))
(allow sysadm_t domain (netlink_nflog_socket (getattr)))
(allow sysadm_t domain (netlink_xfrm_socket (getattr)))
(allow sysadm_t domain (netlink_selinux_socket (getattr)))
(allow sysadm_t domain (netlink_audit_socket (getattr)))
(allow sysadm_t domain (netlink_dnrt_socket (getattr)))
(allow sysadm_t domain (netlink_kobject_uevent_socket (getattr)))
(allow sysadm_t domain (appletalk_socket (getattr)))
(allow sysadm_t domain (tun_socket (getattr)))
(allow sysadm_t domain (netlink_iscsi_socket (getattr)))
(allow sysadm_t domain (netlink_fib_lookup_socket (getattr)))
(allow sysadm_t domain (netlink_connector_socket (getattr)))
(allow sysadm_t domain (netlink_netfilter_socket (getattr)))
(allow sysadm_t domain (netlink_generic_socket (getattr)))
(allow sysadm_t domain (netlink_scsitransport_socket (getattr)))
(allow sysadm_t domain (netlink_rdma_socket (getattr)))
(allow sysadm_t domain (netlink_crypto_socket (getattr)))
(allow sysadm_t domain (sctp_socket (getattr)))
(allow sysadm_t domain (icmp_socket (getattr)))
(allow sysadm_t domain (ax25_socket (getattr)))
(allow sysadm_t domain (ipx_socket (getattr)))
(allow sysadm_t domain (netrom_socket (getattr)))
(allow sysadm_t domain (atmpvc_socket (getattr)))
(allow sysadm_t domain (x25_socket (getattr)))
(allow sysadm_t domain (rose_socket (getattr)))
(allow sysadm_t domain (decnet_socket (getattr)))
(allow sysadm_t domain (atmsvc_socket (getattr)))
(allow sysadm_t domain (rds_socket (getattr)))
(allow sysadm_t domain (irda_socket (getattr)))
(allow sysadm_t domain (pppox_socket (getattr)))
(allow sysadm_t domain (llc_socket (getattr)))
(allow sysadm_t domain (can_socket (getattr)))
(allow sysadm_t domain (tipc_socket (getattr)))
(allow sysadm_t domain (bluetooth_socket (getattr)))
(allow sysadm_t domain (iucv_socket (getattr)))
(allow sysadm_t domain (rxrpc_socket (getattr)))
(allow sysadm_t domain (isdn_socket (getattr)))
(allow sysadm_t domain (phonet_socket (getattr)))
(allow sysadm_t domain (ieee802154_socket (getattr)))
(allow sysadm_t domain (caif_socket (getattr)))
(allow sysadm_t domain (alg_socket (getattr)))
(allow sysadm_t domain (nfc_socket (getattr)))
(allow sysadm_t domain (vsock_socket (getattr)))
(allow sysadm_t domain (kcm_socket (getattr)))
(allow sysadm_t domain (qipcrtr_socket (getattr)))
(allow sysadm_t domain (smc_socket (getattr)))
(allow sysadm_t domain (xdp_socket (getattr)))
(allow sysadm_t usr_t (dir (getattr open search)))
(allow sysadm_t src_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t src_t (dir (getattr open search)))
(allow sysadm_t src_t (file (ioctl read getattr map execute open execute_no_trans)))
(allow sysadm_t src_t (dir (getattr open search)))
(allow sysadm_t src_t (lnk_file (read getattr)))
(allow sysadm_t filesystem_type (filesystem (getattr)))
(allow sysadm_t file_type (filesystem (getattr)))
(allow sysadm_t filesystem_type (filesystem (quotamod)))
(allow sysadm_t noxattrfs (file (ioctl read getattr lock map execute open execute_no_trans)))
(allow sysadm_t device_t (dir (getattr open search)))
(allow sysadm_t device_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t device_t (dir (getattr open search)))
(allow sysadm_t device_t (lnk_file (read getattr)))
(allow sysadm_t tape_device_t (chr_file (ioctl read getattr lock open)))
(allow sysadm_t device_t (dir (getattr open search)))
(allow sysadm_t device_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t device_t (dir (getattr open search)))
(allow sysadm_t device_t (lnk_file (read getattr)))
(allow sysadm_t tape_device_t (chr_file (ioctl write getattr lock append open)))
(allow sysadm_t device_t (dir (getattr open search)))
(allow sysadm_t device_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t device_t (dir (getattr open search)))
(allow sysadm_t device_t (lnk_file (read getattr)))
(allow sysadm_t removable_device_t (blk_file (ioctl read getattr lock open)))
(allow sysadm_t device_t (dir (getattr open search)))
(allow sysadm_t device_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t device_t (dir (getattr open search)))
(allow sysadm_t device_t (lnk_file (read getattr)))
(allow sysadm_t removable_device_t (blk_file (ioctl write getattr lock append open)))
(allow sysadm_t device_t (dir (getattr open search)))
(allow sysadm_t device_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t device_t (dir (getattr open search)))
(allow sysadm_t device_t (lnk_file (read getattr)))
(allow sysadm_t devpts_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t ptynode (chr_file (ioctl read write getattr lock append open)))
(allow sysadm_t devpts_t (chr_file (ioctl read write getattr lock append open)))
(allow sysadm_t ttynode (chr_file (ioctl read write getattr lock append open)))
(allow sysadm_t console_device_t (chr_file (ioctl read write getattr lock append open)))
(allow sysadm_t tty_device_t (chr_file (ioctl read write getattr lock append open)))
(allow sysadm_t etc_t (dir (getattr open search)))
(allow sysadm_t shadow_t (file (getattr)))
(allow sysadm_t etc_t (dir (getattr open search)))
(allow sysadm_t shadow_history_t (file (getattr)))
(allow sysadm_t non_auth_file_type (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow sysadm_t non_auth_file_type (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow sysadm_t non_auth_file_type (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow sysadm_t non_auth_file_type (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow sysadm_t non_auth_file_type (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow sysadm_t non_auth_file_type (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
(allow sysadm_t non_auth_file_type (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow sysadm_t non_auth_file_type (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow sysadm_t non_auth_file_type (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow sysadm_t non_auth_file_type (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow sysadm_t non_auth_file_type (file (map)))
(allow sysadm_t non_auth_file_type (dir (ioctl read getattr lock open search)))
(allow sysadm_t non_auth_file_type (dir (getattr open search)))
(allow sysadm_t non_auth_file_type (dir (getattr relabelfrom relabelto)))
(allow sysadm_t non_auth_file_type (dir (getattr open search)))
(allow sysadm_t non_auth_file_type (file (getattr relabelfrom relabelto)))
(allow sysadm_t non_auth_file_type (dir (getattr open search)))
(allow sysadm_t non_auth_file_type (lnk_file (getattr relabelfrom relabelto)))
(allow sysadm_t non_auth_file_type (dir (getattr open search)))
(allow sysadm_t non_auth_file_type (fifo_file (getattr relabelfrom relabelto)))
(allow sysadm_t non_auth_file_type (dir (getattr open search)))
(allow sysadm_t non_auth_file_type (sock_file (getattr relabelfrom relabelto)))
(allow sysadm_t non_auth_file_type (dir (getattr open search)))
(allow sysadm_t non_auth_file_type (blk_file (getattr relabelfrom)))
(allow sysadm_t non_auth_file_type (dir (getattr open search)))
(allow sysadm_t non_auth_file_type (chr_file (getattr relabelfrom)))
(allow sysadm_t init_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t init_t (file (ioctl read getattr lock open)))
(allow sysadm_t init_t (lnk_file (read getattr)))
(allow sysadm_t init_t (process (getattr)))
(allow sysadm_t init_t (process (signal)))
(allow sysadm_t self (unix_dgram_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow sysadm_t init_t (unix_dgram_socket (sendto)))
(allow sysadm_t init_t (unix_stream_socket (connectto)))
(allow sysadm_t initctl_t (fifo_file (ioctl read write getattr lock append open)))
(allow sysadm_t bin_t (dir (getattr open search)))
(allow sysadm_t bin_t (lnk_file (read getattr)))
(allow sysadm_t usr_t (dir (getattr open search)))
(allow sysadm_t bin_t (dir (getattr open search)))
(allow sysadm_t bin_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t bin_t (file (ioctl read getattr lock map execute open execute_no_trans)))
(allow sysadm_t device_t (dir (getattr open search)))
(allow sysadm_t device_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t device_t (dir (getattr open search)))
(allow sysadm_t device_t (lnk_file (read getattr)))
(allow sysadm_t var_run_t (lnk_file (read getattr)))
(allow sysadm_t var_t (dir (getattr open search)))
(allow sysadm_t var_run_t (dir (getattr open search)))
(allow sysadm_t bin_t (dir (getattr open search)))
(allow sysadm_t bin_t (lnk_file (read getattr)))
(allow sysadm_t usr_t (dir (getattr open search)))
(allow sysadm_t init_exec_t (file (ioctl read getattr lock map execute open execute_no_trans)))
(allow sysadm_t devlog_t (sock_file (write getattr append open)))
(allow sysadm_t var_run_t (lnk_file (read getattr)))
(allow sysadm_t var_t (dir (getattr open search)))
(allow sysadm_t var_run_t (dir (getattr open search)))
(allow sysadm_t init_runtime_t (dir (getattr open search)))
(allow sysadm_t syslogd_runtime_t (dir (getattr open search)))
(allow sysadm_t syslogd_t (unix_dgram_socket (sendto)))
(allow sysadm_t syslogd_t (unix_stream_socket (connectto)))
(allow sysadm_t self (unix_dgram_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow sysadm_t self (unix_stream_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow sysadm_t device_t (dir (getattr open search)))
(allow sysadm_t device_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t device_t (dir (getattr open search)))
(allow sysadm_t device_t (lnk_file (read getattr)))
(allow sysadm_t console_device_t (chr_file (ioctl write getattr lock append open)))
(dontaudit sysadm_t console_device_t (chr_file (ioctl read getattr lock open)))
(allow sysadm_t bin_t (dir (getattr open search)))
(allow sysadm_t bin_t (lnk_file (read getattr)))
(allow sysadm_t usr_t (dir (getattr open search)))
(allow sysadm_t kmod_exec_t (file (ioctl read getattr map execute open)))
(allow sysadm_t kmod_t (process (transition)))
(dontaudit sysadm_t kmod_t (process (noatsecure siginh rlimitinh)))
(typetransition sysadm_t kmod_exec_t process kmod_t)
(allow kmod_t sysadm_t (fd (use)))
(allow kmod_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
(allow kmod_t sysadm_t (process (sigchld)))
(allow sysadm_t etc_t (dir (getattr open search)))
(allow sysadm_t selinux_config_t (dir (getattr open search)))
(allow sysadm_t policy_src_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow sysadm_t policy_src_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow sysadm_t policy_src_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow sysadm_t policy_src_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow sysadm_t etc_t (dir (getattr open search)))
(allow sysadm_t selinux_config_t (dir (getattr open search)))
(allow sysadm_t policy_config_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow sysadm_t policy_config_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow sysadm_t user_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow sysadm_t user_home_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow sysadm_t home_root_t (dir (getattr open search)))
(allow sysadm_t home_root_t (lnk_file (read getattr)))
(allow sysadm_t user_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow sysadm_t user_home_t (file (ioctl read write create getattr setattr lock append map unlink link rename open)))
(allow sysadm_t user_home_dir_t (dir (getattr open search)))
(allow sysadm_t home_root_t (dir (getattr open search)))
(allow sysadm_t home_root_t (lnk_file (read getattr)))
(allow sysadm_t user_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow sysadm_t user_home_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
(allow sysadm_t user_home_dir_t (dir (getattr open search)))
(allow sysadm_t home_root_t (dir (getattr open search)))
(allow sysadm_t home_root_t (lnk_file (read getattr)))
(allow sysadm_t user_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow sysadm_t user_home_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow sysadm_t user_home_dir_t (dir (getattr open search)))
(allow sysadm_t home_root_t (dir (getattr open search)))
(allow sysadm_t home_root_t (lnk_file (read getattr)))
(allow sysadm_t user_home_dir_t (dir (getattr open search)))
(allow sysadm_t user_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow sysadm_t user_home_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow sysadm_t home_root_t (dir (getattr open search)))
(allow sysadm_t home_root_t (lnk_file (read getattr)))
(allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition sysadm_t user_home_dir_t fifo_file user_home_t)
(typetransition sysadm_t user_home_dir_t sock_file user_home_t)
(typetransition sysadm_t user_home_dir_t lnk_file user_home_t)
(typetransition sysadm_t user_home_dir_t dir user_home_t)
(typetransition sysadm_t user_home_dir_t file user_home_t)
(allow sysadm_t home_root_t (dir (getattr open search)))
(allow sysadm_t home_root_t (lnk_file (read getattr)))
(allow sysadm_t self (capability2 (block_suspend)))
(allow sysadm_t self (netlink_kobject_uevent_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow sysadm_t policy_config_t (file (relabelto)))
(allow sysadm_t self (capability (mknod)))
(allow sysadm_t user_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow sysadm_t user_tmp_t (chr_file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow sysadm_t user_runtime_t (dir (getattr open search)))
(allow sysadm_t user_runtime_root_t (dir (getattr open search)))
(allow sysadm_t var_run_t (lnk_file (read getattr)))
(allow sysadm_t var_t (dir (getattr open search)))
(allow sysadm_t var_run_t (dir (getattr open search)))
(allow sysadm_t tmp_t (dir (getattr open search)))
(allow sysadm_t self (tun_socket (relabelfrom relabelto)))
(allow sysadm_t self (netlink_route_socket (ioctl read write getattr setattr append bind connect getopt setopt shutdown nlmsg_read nlmsg_write)))
(allow sysadm_t bin_t (dir (getattr open search)))
(allow sysadm_t bin_t (lnk_file (read getattr)))
(allow sysadm_t usr_t (dir (getattr open search)))
(allow sysadm_t bin_t (dir (getattr open search)))
(allow sysadm_t bin_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t shell_exec_t (file (ioctl read getattr lock map execute open execute_no_trans)))
(allow sysadm_t unlabeled_t (infiniband_pkey (access)))
(allow sysadm_t unlabeled_t (infiniband_endport (manage_subnet)))
(allow sysadm_t device_t (dir (getattr open search)))
(allow sysadm_t kmsg_device_t (chr_file (ioctl read getattr lock open)))
(allow sysadm_t device_t (dir (getattr open search)))
(allow sysadm_t ipmi_device_t (chr_file (ioctl read write getattr lock append open)))
(allow sysadm_t logfile (file (watch)))
(allow sysadm_t auditd_log_t (file (watch)))
(allow sysadm_t sysfs_t (dir (getattr open search)))
(allow sysadm_t sysfs_t (dir (getattr open search)))
(allow sysadm_t security_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t security_t (file (ioctl read getattr map open)))
(allow sysadm_t security_t (security (read_policy)))
(allow sysadm_t bin_t (dir (getattr open search)))
(allow sysadm_t bin_t (lnk_file (read getattr)))
(allow sysadm_t usr_t (dir (getattr open search)))
(allow sysadm_t init_exec_t (file (ioctl read getattr lock map execute open execute_no_trans)))
(allow sysadm_t null_device_t (service (reload start status stop)))
(allow sysadm_t init_t (system (disable)))
(allow sysadm_t init_t (system (enable)))
(allow sysadm_t init_script_file_type (service (status)))
(allow sysadm_t systemdunit (service (status)))
(allow sysadm_t systemd_unit_t (service (status)))
(allow sysadm_t init_t (system (status)))
(allow sysadm_t systemdunit (service (reload start status stop enable disable)))
(allow sysadm_t systemdunit (file (getattr)))
(allow sysadm_t initrc_exec_t (service (start status stop)))
(allow sysadm_t init_t (system (reboot)))
(allow sysadm_t init_t (system (reload)))
(allow sysadm_t init_script_file_type (service (reload)))
(allow sysadm_t systemdunit (service (reload)))
(allow sysadm_t init_t (system (halt)))
(allow sysadm_t init_t (system (start)))
(allow sysadm_t init_script_file_type (service (start)))
(allow sysadm_t systemdunit (service (start)))
(allow sysadm_t systemd_unit_t (service (start)))
(allow sysadm_t init_script_file_type (service (stop)))
(allow sysadm_t systemdunit (service (stop)))
(allow sysadm_t systemd_unit_t (service (stop)))
(allow sysadm_t init_t (system (stop)))
(allow sysadm_t init_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t init_t (file (ioctl read getattr lock open)))
(allow sysadm_t init_t (lnk_file (read getattr)))
(allow sysadm_t init_t (process (getattr)))
(allow sysadm_t init_t (process (signal)))
(allow sysadm_t self (unix_dgram_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow sysadm_t init_t (unix_dgram_socket (sendto)))
(allow sysadm_t init_t (unix_stream_socket (connectto)))
(allow sysadm_t initctl_t (fifo_file (ioctl read write getattr lock append open)))
(allow sysadm_t bin_t (dir (getattr open search)))
(allow sysadm_t bin_t (lnk_file (read getattr)))
(allow sysadm_t usr_t (dir (getattr open search)))
(allow sysadm_t bin_t (dir (getattr open search)))
(allow sysadm_t bin_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t bin_t (file (ioctl read getattr lock map execute open execute_no_trans)))
(allow sysadm_t device_t (dir (getattr open search)))
(allow sysadm_t device_t (dir (ioctl read getattr lock open search)))
(allow sysadm_t device_t (dir (getattr open search)))
(allow sysadm_t device_t (lnk_file (read getattr)))
(allow sysadm_t var_run_t (lnk_file (read getattr)))
(allow sysadm_t var_t (dir (getattr open search)))
(allow sysadm_t var_run_t (dir (getattr open search)))
(allow sysadm_t bin_t (dir (getattr open search)))
(allow sysadm_t bin_t (lnk_file (read getattr)))
(allow sysadm_t usr_t (dir (getattr open search)))
(allow sysadm_t init_exec_t (file (ioctl read getattr lock map execute open execute_no_trans)))
(allow sysadm_t user_home_dir_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow sysadm_t home_root_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition sysadm_t home_root_t dir user_home_dir_t)
(allow sysadm_t bin_t (dir (getattr open search)))
(allow sysadm_t bin_t (lnk_file (read getattr)))
(allow sysadm_t usr_t (dir (getattr open search)))
(allow sysadm_t rc_exec_t (file (ioctl read getattr lock map execute open execute_no_trans)))
(allow sysadm_t self (rawip_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow sysadm_t device_t (dir (getattr open search)))
(allow sysadm_t cpu_device_t (chr_file (ioctl read getattr lock open)))
(roleallow system_r sysadm_r)
(typetransition sysadm_t user_home_dir_t dir ".pki" user_cert_t)
(typetransition sysadm_t user_home_dir_t dir "bin" user_bin_t)
(booleanif (allow_ptrace)
    (true
        (allow domain sysadm_t (process (sigchld)))
        (allow sysadm_t domain (process (ptrace)))
    )
)
(booleanif (user_write_removable)
    (true
        (allow sysadm_t usb_device_t (chr_file (ioctl read write getattr lock append open)))
        (allow sysadm_t device_t (dir (getattr open search)))
    )
    (false
        (allow sysadm_t usb_device_t (chr_file (ioctl read getattr lock open)))
        (allow sysadm_t device_t (dir (getattr open search)))
    )
)
(booleanif (user_ttyfile_stat)
    (true
        (allow sysadm_t ttynode (chr_file (getattr)))
        (allow sysadm_t device_t (lnk_file (read getattr)))
        (allow sysadm_t device_t (dir (getattr open search)))
        (allow sysadm_t device_t (dir (ioctl read getattr lock open search)))
        (allow sysadm_t device_t (dir (getattr open search)))
    )
)
(booleanif (user_rw_noexattrfile)
    (true
        (allow sysadm_t noxattrfs (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
        (allow sysadm_t noxattrfs (dir (ioctl read write getattr lock open add_name remove_name search)))
        (allow sysadm_t noxattrfs (dir (ioctl read getattr lock open search)))
        (allow sysadm_t noxattrfs (file (ioctl read write create getattr setattr lock append unlink link rename open)))
        (allow sysadm_t noxattrfs (dir (ioctl read write getattr lock open add_name remove_name search)))
        (allow sysadm_t noxattrfs (dir (ioctl read getattr lock open search)))
        (allow sysadm_t noxattrfs (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
    )
    (false
        (allow sysadm_t noxattrfs (lnk_file (read getattr)))
        (allow sysadm_t noxattrfs (dir (getattr open search)))
        (allow sysadm_t noxattrfs (dir (ioctl read getattr lock open search)))
        (allow sysadm_t noxattrfs (file (ioctl read getattr lock open)))
        (allow sysadm_t noxattrfs (dir (getattr open search)))
        (allow sysadm_t noxattrfs (dir (ioctl read getattr lock open search)))
    )
)
(booleanif (user_direct_mouse)
    (true
        (allow sysadm_t mouse_device_t (chr_file (ioctl read getattr lock open)))
        (allow sysadm_t device_t (dir (getattr open search)))
    )
)
(booleanif (use_samba_home_dirs)
    (true
        (allow sysadm_t cifs_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
        (allow sysadm_t cifs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
        (allow sysadm_t cifs_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
        (allow sysadm_t cifs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
        (allow sysadm_t cifs_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
        (allow sysadm_t cifs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
        (allow sysadm_t cifs_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
        (allow sysadm_t cifs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
        (allow sysadm_t cifs_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
        (allow sysadm_t cifs_t (file (ioctl read getattr map execute open execute_no_trans)))
        (allow sysadm_t cifs_t (dir (getattr open search)))
        (allow sysadm_t cifs_t (dir (ioctl read getattr lock open search)))
    )
    (false
        (dontaudit sysadm_t cifs_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
        (dontaudit sysadm_t cifs_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
    )
)
(booleanif (use_nfs_home_dirs)
    (true
        (allow sysadm_t nfs_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
        (allow sysadm_t nfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
        (allow sysadm_t nfs_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
        (allow sysadm_t nfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
        (allow sysadm_t nfs_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
        (allow sysadm_t nfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
        (allow sysadm_t nfs_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
        (allow sysadm_t nfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
        (allow sysadm_t nfs_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
        (allow sysadm_t nfs_t (file (ioctl read getattr map execute open execute_no_trans)))
        (allow sysadm_t nfs_t (dir (getattr open search)))
        (allow sysadm_t nfs_t (dir (ioctl read getattr lock open search)))
    )
    (false
        (dontaudit sysadm_t nfs_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
        (dontaudit sysadm_t nfs_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
    )
)
(booleanif (user_all_users_send_syslog)
    (true
        (dontaudit sysadm_t console_device_t (chr_file (ioctl read getattr lock open)))
        (allow sysadm_t console_device_t (chr_file (ioctl write getattr lock append open)))
        (allow sysadm_t device_t (lnk_file (read getattr)))
        (allow sysadm_t device_t (dir (getattr open search)))
        (allow sysadm_t device_t (dir (ioctl read getattr lock open search)))
        (allow sysadm_t device_t (dir (getattr open search)))
        (allow sysadm_t self (unix_stream_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
        (allow sysadm_t self (unix_dgram_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
        (allow sysadm_t syslogd_t (unix_stream_socket (connectto)))
        (allow sysadm_t syslogd_t (unix_dgram_socket (sendto)))
        (allow sysadm_t syslogd_runtime_t (dir (getattr open search)))
        (allow sysadm_t init_runtime_t (dir (getattr open search)))
        (allow sysadm_t var_run_t (dir (getattr open search)))
        (allow sysadm_t var_t (dir (getattr open search)))
        (allow sysadm_t var_run_t (lnk_file (read getattr)))
        (allow sysadm_t devlog_t (sock_file (write getattr append open)))
    )
)
(booleanif (and (allow_execmem) (allow_execstack))
    (true
        (allow sysadm_t self (process (execstack)))
    )
)
(booleanif (allow_execmem)
    (true
        (allow sysadm_t self (process (execmem)))
    )
)
(booleanif (console_login)
    (true
        (typechange sysadm_t console_device_t chr_file user_tty_device_t)
    )
)
(optional sysadm_optional_2
    (typeattributeset cil_gen_require init_t)
    (allow sysadm_t init_t (process (sigchld)))
    (allow sysadm_t init_t (process (signull)))
    (optional sysadm_optional_3
        (typeattributeset cil_gen_require rpm_t)
        (allow sysadm_t rpm_t (fd (use)))
        (allow sysadm_t rpm_t (fifo_file (ioctl read getattr lock open)))
    )
    (optional sysadm_optional_4
        (typeattributeset cil_gen_require security_t)
        (typeattributeset cil_gen_require sysfs_t)
        (dontaudit sysadm_t security_t (filesystem (getattr)))
        (dontaudit sysadm_t sysfs_t (filesystem (getattr)))
        (dontaudit sysadm_t sysfs_t (dir (getattr open search)))
        (dontaudit sysadm_t security_t (dir (getattr open search)))
        (dontaudit sysadm_t security_t (file (ioctl read getattr lock open)))
        (optional sysadm_optional_5
            (typeattributeset cil_gen_require selinux_config_t)
            (dontaudit sysadm_t selinux_config_t (dir (getattr open search)))
            (dontaudit sysadm_t selinux_config_t (file (ioctl read getattr lock open)))
            (optional sysadm_optional_6
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require apt_var_cache_t)
                (typeattributeset cil_gen_require apt_var_lib_t)
                (typeattributeset cil_gen_require var_lib_t)
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t apt_var_cache_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t apt_var_cache_t (file (ioctl read getattr map open)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t apt_var_lib_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t apt_var_lib_t (dir (getattr open search)))
                (allow sysadm_t apt_var_lib_t (file (ioctl read getattr lock open)))
                (allow sysadm_t apt_var_lib_t (dir (getattr open search)))
                (allow sysadm_t apt_var_lib_t (lnk_file (read getattr)))
            )
            (optional sysadm_optional_7
                (typeattributeset cil_gen_require devicekit_disk_t)
                (typeattributeset cil_gen_require devicekit_power_t)
                (allow sysadm_t devicekit_disk_t (dbus (send_msg)))
                (allow devicekit_disk_t sysadm_t (dbus (send_msg)))
                (allow sysadm_t devicekit_power_t (dbus (send_msg)))
                (allow devicekit_power_t sysadm_t (dbus (send_msg)))
            )
            (optional sysadm_optional_8
                (typeattributeset cil_gen_require kerneloops_t)
                (allow sysadm_t kerneloops_t (dbus (send_msg)))
                (allow kerneloops_t sysadm_t (dbus (send_msg)))
            )
            (optional sysadm_optional_9
                (typeattributeset cil_gen_require flash_home_t)
                (allow sysadm_t flash_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t flash_home_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t flash_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t flash_home_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t flash_home_t (dir (getattr open search)))
                (allow sysadm_t flash_home_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t flash_home_t (dir (getattr open search)))
                (allow sysadm_t flash_home_t (dir (getattr relabelfrom relabelto)))
            )
            (optional sysadm_optional_10
                (typeattributeset cil_gen_require user_home_dir_t)
                (typeattributeset cil_gen_require home_root_t)
                (typeattributeset cil_gen_require xdg_data_t)
                (allow sysadm_t user_home_dir_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_t xdg_data_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t xdg_data_t (dir (create getattr)))
                (typetransition sysadm_t xdg_data_t dir "bin" user_bin_t)
            )
            (optional sysadm_optional_11
                (roleattributeset cil_gen_require chfn_roles)
                (roleattributeset cil_gen_require passwd_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require chfn_t)
                (typeattributeset cil_gen_require chfn_exec_t)
                (typeattributeset cil_gen_require passwd_t)
                (typeattributeset cil_gen_require passwd_exec_t)
                (roleattributeset cil_gen_require chfn_roles)
                (roleattributeset chfn_roles (sysadm_r ))
                (roleattributeset cil_gen_require passwd_roles)
                (roleattributeset passwd_roles (sysadm_r ))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t chfn_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t chfn_t (process (transition)))
                (dontaudit sysadm_t chfn_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t chfn_exec_t process chfn_t)
                (allow chfn_t sysadm_t (fd (use)))
                (allow chfn_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow chfn_t sysadm_t (process (sigchld)))
                (dontaudit chfn_t sysadm_t (tcp_socket (read write)))
                (dontaudit chfn_t sysadm_t (udp_socket (read write)))
                (dontaudit chfn_t sysadm_t (rawip_socket (read write)))
                (dontaudit chfn_t sysadm_t (netlink_socket (read write)))
                (dontaudit chfn_t sysadm_t (packet_socket (read write)))
                (dontaudit chfn_t sysadm_t (unix_stream_socket (read write)))
                (dontaudit chfn_t sysadm_t (unix_dgram_socket (read write)))
                (dontaudit chfn_t sysadm_t (netlink_route_socket (read write)))
                (dontaudit chfn_t sysadm_t (netlink_tcpdiag_socket (read write)))
                (dontaudit chfn_t sysadm_t (netlink_nflog_socket (read write)))
                (dontaudit chfn_t sysadm_t (netlink_xfrm_socket (read write)))
                (dontaudit chfn_t sysadm_t (netlink_selinux_socket (read write)))
                (dontaudit chfn_t sysadm_t (netlink_audit_socket (read write)))
                (dontaudit chfn_t sysadm_t (netlink_dnrt_socket (read write)))
                (dontaudit chfn_t sysadm_t (netlink_kobject_uevent_socket (read write)))
                (dontaudit chfn_t sysadm_t (appletalk_socket (read write)))
                (dontaudit chfn_t sysadm_t (tun_socket (read write)))
                (dontaudit chfn_t sysadm_t (netlink_iscsi_socket (read write)))
                (dontaudit chfn_t sysadm_t (netlink_fib_lookup_socket (read write)))
                (dontaudit chfn_t sysadm_t (netlink_connector_socket (read write)))
                (dontaudit chfn_t sysadm_t (netlink_netfilter_socket (read write)))
                (dontaudit chfn_t sysadm_t (netlink_generic_socket (read write)))
                (dontaudit chfn_t sysadm_t (netlink_scsitransport_socket (read write)))
                (dontaudit chfn_t sysadm_t (netlink_rdma_socket (read write)))
                (dontaudit chfn_t sysadm_t (netlink_crypto_socket (read write)))
                (dontaudit chfn_t sysadm_t (sctp_socket (read write)))
                (dontaudit chfn_t sysadm_t (icmp_socket (read write)))
                (dontaudit chfn_t sysadm_t (ax25_socket (read write)))
                (dontaudit chfn_t sysadm_t (ipx_socket (read write)))
                (dontaudit chfn_t sysadm_t (netrom_socket (read write)))
                (dontaudit chfn_t sysadm_t (atmpvc_socket (read write)))
                (dontaudit chfn_t sysadm_t (x25_socket (read write)))
                (dontaudit chfn_t sysadm_t (rose_socket (read write)))
                (dontaudit chfn_t sysadm_t (decnet_socket (read write)))
                (dontaudit chfn_t sysadm_t (atmsvc_socket (read write)))
                (dontaudit chfn_t sysadm_t (rds_socket (read write)))
                (dontaudit chfn_t sysadm_t (irda_socket (read write)))
                (dontaudit chfn_t sysadm_t (pppox_socket (read write)))
                (dontaudit chfn_t sysadm_t (llc_socket (read write)))
                (dontaudit chfn_t sysadm_t (can_socket (read write)))
                (dontaudit chfn_t sysadm_t (tipc_socket (read write)))
                (dontaudit chfn_t sysadm_t (bluetooth_socket (read write)))
                (dontaudit chfn_t sysadm_t (iucv_socket (read write)))
                (dontaudit chfn_t sysadm_t (rxrpc_socket (read write)))
                (dontaudit chfn_t sysadm_t (isdn_socket (read write)))
                (dontaudit chfn_t sysadm_t (phonet_socket (read write)))
                (dontaudit chfn_t sysadm_t (ieee802154_socket (read write)))
                (dontaudit chfn_t sysadm_t (caif_socket (read write)))
                (dontaudit chfn_t sysadm_t (alg_socket (read write)))
                (dontaudit chfn_t sysadm_t (nfc_socket (read write)))
                (dontaudit chfn_t sysadm_t (vsock_socket (read write)))
                (dontaudit chfn_t sysadm_t (kcm_socket (read write)))
                (dontaudit chfn_t sysadm_t (qipcrtr_socket (read write)))
                (dontaudit chfn_t sysadm_t (smc_socket (read write)))
                (dontaudit chfn_t sysadm_t (xdp_socket (read write)))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t passwd_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t passwd_t (process (transition)))
                (dontaudit sysadm_t passwd_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t passwd_exec_t process passwd_t)
                (allow passwd_t sysadm_t (fd (use)))
                (allow passwd_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow passwd_t sysadm_t (process (sigchld)))
                (dontaudit passwd_t sysadm_t (tcp_socket (read write)))
                (dontaudit passwd_t sysadm_t (udp_socket (read write)))
                (dontaudit passwd_t sysadm_t (rawip_socket (read write)))
                (dontaudit passwd_t sysadm_t (netlink_socket (read write)))
                (dontaudit passwd_t sysadm_t (packet_socket (read write)))
                (dontaudit passwd_t sysadm_t (unix_stream_socket (read write)))
                (dontaudit passwd_t sysadm_t (unix_dgram_socket (read write)))
                (dontaudit passwd_t sysadm_t (netlink_route_socket (read write)))
                (dontaudit passwd_t sysadm_t (netlink_tcpdiag_socket (read write)))
                (dontaudit passwd_t sysadm_t (netlink_nflog_socket (read write)))
                (dontaudit passwd_t sysadm_t (netlink_xfrm_socket (read write)))
                (dontaudit passwd_t sysadm_t (netlink_selinux_socket (read write)))
                (dontaudit passwd_t sysadm_t (netlink_audit_socket (read write)))
                (dontaudit passwd_t sysadm_t (netlink_dnrt_socket (read write)))
                (dontaudit passwd_t sysadm_t (netlink_kobject_uevent_socket (read write)))
                (dontaudit passwd_t sysadm_t (appletalk_socket (read write)))
                (dontaudit passwd_t sysadm_t (tun_socket (read write)))
                (dontaudit passwd_t sysadm_t (netlink_iscsi_socket (read write)))
                (dontaudit passwd_t sysadm_t (netlink_fib_lookup_socket (read write)))
                (dontaudit passwd_t sysadm_t (netlink_connector_socket (read write)))
                (dontaudit passwd_t sysadm_t (netlink_netfilter_socket (read write)))
                (dontaudit passwd_t sysadm_t (netlink_generic_socket (read write)))
                (dontaudit passwd_t sysadm_t (netlink_scsitransport_socket (read write)))
                (dontaudit passwd_t sysadm_t (netlink_rdma_socket (read write)))
                (dontaudit passwd_t sysadm_t (netlink_crypto_socket (read write)))
                (dontaudit passwd_t sysadm_t (sctp_socket (read write)))
                (dontaudit passwd_t sysadm_t (icmp_socket (read write)))
                (dontaudit passwd_t sysadm_t (ax25_socket (read write)))
                (dontaudit passwd_t sysadm_t (ipx_socket (read write)))
                (dontaudit passwd_t sysadm_t (netrom_socket (read write)))
                (dontaudit passwd_t sysadm_t (atmpvc_socket (read write)))
                (dontaudit passwd_t sysadm_t (x25_socket (read write)))
                (dontaudit passwd_t sysadm_t (rose_socket (read write)))
                (dontaudit passwd_t sysadm_t (decnet_socket (read write)))
                (dontaudit passwd_t sysadm_t (atmsvc_socket (read write)))
                (dontaudit passwd_t sysadm_t (rds_socket (read write)))
                (dontaudit passwd_t sysadm_t (irda_socket (read write)))
                (dontaudit passwd_t sysadm_t (pppox_socket (read write)))
                (dontaudit passwd_t sysadm_t (llc_socket (read write)))
                (dontaudit passwd_t sysadm_t (can_socket (read write)))
                (dontaudit passwd_t sysadm_t (tipc_socket (read write)))
                (dontaudit passwd_t sysadm_t (bluetooth_socket (read write)))
                (dontaudit passwd_t sysadm_t (iucv_socket (read write)))
                (dontaudit passwd_t sysadm_t (rxrpc_socket (read write)))
                (dontaudit passwd_t sysadm_t (isdn_socket (read write)))
                (dontaudit passwd_t sysadm_t (phonet_socket (read write)))
                (dontaudit passwd_t sysadm_t (ieee802154_socket (read write)))
                (dontaudit passwd_t sysadm_t (caif_socket (read write)))
                (dontaudit passwd_t sysadm_t (alg_socket (read write)))
                (dontaudit passwd_t sysadm_t (nfc_socket (read write)))
                (dontaudit passwd_t sysadm_t (vsock_socket (read write)))
                (dontaudit passwd_t sysadm_t (kcm_socket (read write)))
                (dontaudit passwd_t sysadm_t (qipcrtr_socket (read write)))
                (dontaudit passwd_t sysadm_t (smc_socket (read write)))
                (dontaudit passwd_t sysadm_t (xdp_socket (read write)))
            )
            (optional sysadm_optional_12
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require cupsd_etc_t)
                (typeattributeset cil_gen_require cupsd_rw_etc_t)
                (typeattributeset cil_gen_require cupsd_t)
                (typeattributeset cil_gen_require cupsd_runtime_t)
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t cupsd_etc_t (dir (getattr open search)))
                (allow sysadm_t cupsd_rw_etc_t (dir (getattr open search)))
                (allow sysadm_t cupsd_etc_t (file (ioctl read getattr lock open)))
                (allow sysadm_t cupsd_rw_etc_t (file (ioctl read getattr lock open)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t cupsd_runtime_t (sock_file (read getattr open)))
                (allow sysadm_t cupsd_runtime_t (dir (getattr open search)))
                (allow sysadm_t cupsd_runtime_t (sock_file (write getattr append open)))
                (allow sysadm_t cupsd_t (unix_stream_socket (connectto)))
            )
            (optional sysadm_optional_13
                (typeattributeset cil_gen_require security_t)
                (typeattributeset cil_gen_require selinux_config_t)
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require user_home_dir_t)
                (typeattributeset cil_gen_require home_root_t)
                (typeattributeset cil_gen_require krb5kdc_conf_t)
                (typeattributeset cil_gen_require krb5_host_rcache_t)
                (typeattributeset cil_gen_require krb5_conf_t)
                (typeattributeset cil_gen_require krb5_home_t)
                (typeattributeset cil_gen_require default_context_t)
                (typeattributeset cil_gen_require file_context_t)
                (typeattributeset cil_gen_require netlabel_peer_t)
                (typeattributeset cil_gen_require netif_t)
                (typeattributeset cil_gen_require node_t)
                (typeattributeset cil_gen_require kerberos_client_packet_t)
                (typeattributeset cil_gen_require kerberos_port_t)
                (typeattributeset cil_gen_require ocsp_client_packet_t)
                (typeattributeset cil_gen_require ocsp_port_t)
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t krb5_conf_t (file (ioctl read getattr lock open)))
                (allow sysadm_t user_home_dir_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_t krb5_home_t (file (ioctl read getattr lock open)))
                (dontaudit sysadm_t krb5_conf_t (file (ioctl write getattr lock append open)))
                (dontaudit sysadm_t krb5kdc_conf_t (dir (ioctl read getattr lock open search)))
                (dontaudit sysadm_t krb5kdc_conf_t (file (ioctl read write getattr lock append open)))
                (dontaudit sysadm_t self (process (setfscreate)))
                (dontaudit sysadm_t security_t (dir (ioctl read getattr lock open search)))
                (dontaudit sysadm_t security_t (file (ioctl read write getattr map open)))
                (dontaudit sysadm_t security_t (security (check_context)))
                (dontaudit sysadm_t selinux_config_t (dir (getattr open search)))
                (dontaudit sysadm_t default_context_t (dir (getattr open search)))
                (dontaudit sysadm_t file_context_t (dir (getattr open search)))
                (dontaudit sysadm_t file_context_t (file (ioctl read getattr lock open)))
                (dontaudit sysadm_t file_context_t (file (map)))
                (booleanif (allow_kerberos)
                    (true
                        (allow sysadm_t krb5_host_rcache_t (file (getattr)))
                        (allow sysadm_t ocsp_port_t (tcp_socket (name_connect)))
                        (allow sysadm_t ocsp_client_packet_t (packet (recv)))
                        (allow sysadm_t ocsp_client_packet_t (packet (send)))
                        (allow sysadm_t kerberos_port_t (tcp_socket (name_connect)))
                        (allow sysadm_t kerberos_client_packet_t (packet (recv)))
                        (allow sysadm_t kerberos_client_packet_t (packet (send)))
                        (allow sysadm_t node_t (node (recvfrom)))
                        (allow sysadm_t node_t (node (sendto)))
                        (allow sysadm_t node_t (node (recvfrom sendto)))
                        (allow sysadm_t netif_t (netif (ingress)))
                        (allow sysadm_t netif_t (netif (egress)))
                        (allow sysadm_t netif_t (netif (ingress egress)))
                        (allow sysadm_t netlabel_peer_t (tcp_socket (recvfrom)))
                        (allow sysadm_t netlabel_peer_t (udp_socket (recvfrom)))
                        (allow sysadm_t netlabel_peer_t (rawip_socket (recvfrom)))
                        (allow sysadm_t netlabel_peer_t (peer (recv)))
                        (allow sysadm_t self (udp_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
                        (allow sysadm_t self (tcp_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
                    )
                )
                (optional sysadm_optional_14
                    (typeattributeset cil_gen_require var_run_t)
                    (typeattributeset cil_gen_require var_t)
                    (typeattributeset cil_gen_require pcscd_t)
                    (typeattributeset cil_gen_require pcscd_runtime_t)
                    (booleanif (allow_kerberos)
                        (true
                            (allow pcscd_t sysadm_t (file (ioctl read getattr lock open)))
                            (allow pcscd_t sysadm_t (dir (ioctl read getattr lock open search)))
                            (allow sysadm_t pcscd_t (unix_stream_socket (connectto)))
                            (allow sysadm_t pcscd_runtime_t (sock_file (write getattr append open)))
                            (allow sysadm_t pcscd_runtime_t (dir (getattr open search)))
                            (allow sysadm_t var_run_t (dir (getattr open search)))
                            (allow sysadm_t var_t (dir (getattr open search)))
                            (allow sysadm_t var_run_t (lnk_file (read getattr)))
                        )
                    )
                )
                (optional sysadm_optional_15
                    (typeattributeset cil_gen_require var_t)
                    (typeattributeset cil_gen_require var_lib_t)
                    (typeattributeset cil_gen_require sssd_public_t)
                    (typeattributeset cil_gen_require sssd_var_lib_t)
                    (allow sysadm_t sssd_var_lib_t (dir (getattr open search)))
                    (allow sysadm_t var_t (dir (getattr open search)))
                    (allow sysadm_t var_lib_t (dir (getattr open search)))
                    (allow sysadm_t sssd_public_t (dir (ioctl read getattr lock open search)))
                    (allow sysadm_t sssd_public_t (dir (getattr open search)))
                    (allow sysadm_t sssd_public_t (file (ioctl read getattr lock open)))
                )
            )
            (optional sysadm_optional_16
                (typeattributeset cil_gen_require mail_spool_t)
                (dontaudit sysadm_t mail_spool_t (lnk_file (read)))
            )
            (optional sysadm_optional_17
                (typeattributeset cil_gen_require quota_db_t)
                (dontaudit sysadm_t quota_db_t (file (getattr)))
            )
            (optional sysadm_optional_18
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require rpm_var_lib_t)
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t rpm_var_lib_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t rpm_var_lib_t (dir (getattr open search)))
                (allow sysadm_t rpm_var_lib_t (file (ioctl read getattr lock open)))
                (allow sysadm_t rpm_var_lib_t (dir (getattr open search)))
                (allow sysadm_t rpm_var_lib_t (lnk_file (read getattr)))
                (allow sysadm_t rpm_var_lib_t (file (map)))
                (dontaudit sysadm_t rpm_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (dontaudit sysadm_t rpm_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (dontaudit sysadm_t rpm_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (dontaudit sysadm_t rpm_var_lib_t (file (map)))
            )
            (optional sysadm_optional_19
                (typeattributeset cil_gen_require netlabel_peer_t)
                (typeattributeset cil_gen_require daemon)
                (allow sysadm_t self (association (sendto)))
                (allow daemon self (association (sendto)))
                (allow sysadm_t daemon (tcp_socket (recvfrom)))
                (allow sysadm_t daemon (association (recvfrom)))
                (allow daemon sysadm_t (tcp_socket (recvfrom)))
                (allow daemon sysadm_t (association (recvfrom)))
                (allow sysadm_t daemon (peer (recv)))
                (allow daemon sysadm_t (peer (recv)))
                (allow sysadm_t netlabel_peer_t (peer (recv)))
                (allow sysadm_t netlabel_peer_t (tcp_socket (recvfrom)))
                (allow daemon netlabel_peer_t (peer (recv)))
                (allow daemon netlabel_peer_t (tcp_socket (recvfrom)))
                (allow daemon self (association (sendto)))
                (allow sysadm_t daemon (udp_socket (recvfrom)))
                (allow sysadm_t daemon (association (recvfrom)))
                (allow sysadm_t daemon (peer (recv)))
                (allow sysadm_t netlabel_peer_t (peer (recv)))
                (allow sysadm_t netlabel_peer_t (udp_socket (recvfrom)))
            )
            (optional sysadm_optional_20
                (typeattributeset cil_gen_require ipsec_spd_t)
                (allow sysadm_t ipsec_spd_t (association (polmatch)))
                (allow sysadm_t self (association (sendto)))
            )
            (optional sysadm_optional_21
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require user_home_dir_t)
                (typeattributeset cil_gen_require home_root_t)
                (typeattributeset cil_gen_require alsa_home_t)
                (typeattributeset cil_gen_require alsa_etc_t)
                (allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_t user_home_dir_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_t alsa_home_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t alsa_etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t alsa_etc_t (dir (getattr open search)))
                (allow sysadm_t alsa_etc_t (file (ioctl read getattr lock open)))
                (allow sysadm_t alsa_etc_t (dir (getattr open search)))
                (allow sysadm_t alsa_etc_t (lnk_file (read getattr)))
                (allow sysadm_t user_home_dir_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_t alsa_home_t (file (getattr relabelfrom relabelto)))
                (typetransition sysadm_t user_home_dir_t file ".asoundrc" alsa_home_t)
            )
            (optional sysadm_optional_22
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require acpid_t)
                (typeattributeset cil_gen_require acpid_runtime_t)
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t acpid_runtime_t (dir (getattr open search)))
                (allow sysadm_t acpid_runtime_t (sock_file (write getattr append open)))
                (allow sysadm_t acpid_t (unix_stream_socket (connectto)))
            )
            (optional sysadm_optional_23
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require canna_t)
                (typeattributeset cil_gen_require canna_runtime_t)
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t canna_runtime_t (dir (getattr open search)))
                (allow sysadm_t canna_runtime_t (sock_file (write getattr append open)))
                (allow sysadm_t canna_t (unix_stream_socket (connectto)))
            )
            (optional sysadm_optional_24
                (type sysadm_cockpit_tmpfs_t)
                (roletype object_r sysadm_cockpit_tmpfs_t)
                (typeattributeset cil_gen_require file_type)
                (typeattributeset file_type (shell_exec_t bin_t ))
                (typeattributeset cil_gen_require non_security_file_type)
                (typeattributeset non_security_file_type (shell_exec_t bin_t ))
                (typeattributeset cil_gen_require non_auth_file_type)
                (typeattributeset non_auth_file_type (shell_exec_t bin_t ))
                (typeattributeset cil_gen_require device_t)
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require etc_runtime_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require user_tmpfs_t)
                (typeattributeset cil_gen_require tmpfs_t)
                (typeattributeset cil_gen_require default_t)
                (typeattributeset cil_gen_require initrc_runtime_t)
                (typeattributeset cil_gen_require tmpfsfile)
                (typeattributeset cil_gen_require root_t)
                (typeattributeset cil_gen_require cockpit_ws_t)
                (typeattributeset cil_gen_require systemd_logind_runtime_t)
                (typeattributeset cil_gen_require non_auth_file_type)
                (typeattributeset non_auth_file_type (sysadm_cockpit_tmpfs_t ))
                (typeattributeset cil_gen_require file_type)
                (typeattributeset file_type (sysadm_cockpit_tmpfs_t ))
                (typeattributeset cil_gen_require non_security_file_type)
                (typeattributeset non_security_file_type (sysadm_cockpit_tmpfs_t ))
                (typeattributeset cil_gen_require tmpfsfile)
                (typeattributeset tmpfsfile (sysadm_cockpit_tmpfs_t ))
                (allow sysadm_t device_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (typetransition sysadm_t device_t file sysadm_cockpit_tmpfs_t)
                (allow sysadm_cockpit_tmpfs_t device_t (filesystem (associate)))
                (allow sysadm_cockpit_tmpfs_t tmpfs_t (filesystem (associate)))
                (allow sysadm_cockpit_tmpfs_t tmp_t (filesystem (associate)))
                (allow sysadm_t sysadm_cockpit_tmpfs_t (file (ioctl read write create getattr setattr lock append map unlink link rename execute open)))
                (dontaudit sysadm_t device_t (file (execute)))
                (dontaudit sysadm_t default_t (file (execute)))
                (dontaudit sysadm_t etc_runtime_t (file (execute)))
                (dontaudit sysadm_t var_run_t (file (execute)))
                (allow sysadm_t etc_t (file (watch)))
                (allow sysadm_t root_t (dir (watch)))
                (allow sysadm_t var_t (dir (watch)))
                (allow sysadm_t var_lib_t (dir (watch)))
                (allow sysadm_t cockpit_ws_t (fd (use)))
                (allow sysadm_t cockpit_ws_t (unix_stream_socket (ioctl read write getattr setattr append bind connect getopt setopt shutdown)))
                (allow sysadm_t initrc_runtime_t (file (watch)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t systemd_logind_runtime_t (dir (watch)))
                (dontaudit sysadm_t user_tmpfs_t (file (execute)))
            )
            (optional sysadm_optional_25
                (type sysadm_dbusd_t)
                (roletype object_r sysadm_dbusd_t)
                (type sysadm_dbusd_tmpfs_t)
                (roletype object_r sysadm_dbusd_tmpfs_t)
                (typeattributeset cil_gen_require domain)
                (typeattributeset domain (sysadm_t ))
                (typeattributeset cil_gen_require security_t)
                (typeattributeset cil_gen_require sysfs_t)
                (typeattributeset cil_gen_require shell_exec_t)
                (typeattributeset cil_gen_require entry_type)
                (typeattributeset entry_type (shell_exec_t bin_t ))
                (typeattributeset cil_gen_require exec_type)
                (typeattributeset exec_type (shell_exec_t bin_t ))
                (typeattributeset cil_gen_require file_type)
                (typeattributeset file_type (shell_exec_t bin_t ))
                (typeattributeset cil_gen_require non_security_file_type)
                (typeattributeset non_security_file_type (shell_exec_t bin_t ))
                (typeattributeset cil_gen_require non_auth_file_type)
                (typeattributeset non_auth_file_type (shell_exec_t bin_t ))
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require ubac_constrained_type)
                (typeattributeset ubac_constrained_type (sysadm_t ))
                (typeattributeset cil_gen_require proc_t)
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require etc_runtime_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require user_home_dir_t)
                (typeattributeset cil_gen_require home_root_t)
                (typeattributeset cil_gen_require tmpfs_t)
                (typeattributeset cil_gen_require nsswitch_domain)
                (typeattributeset nsswitch_domain (sysadm_t ))
                (typeattributeset cil_gen_require tmpfsfile)
                (typeattributeset cil_gen_require session_bus_type)
                (typeattributeset cil_gen_require system_dbusd_t)
                (typeattributeset cil_gen_require dbusd_exec_t)
                (typeattributeset cil_gen_require session_dbusd_tmp_t)
                (typeattributeset cil_gen_require session_dbusd_home_t)
                (typeattributeset cil_gen_require session_dbusd_runtime_t)
                (typeattributeset cil_gen_require dbusd_system_bus_client)
                (typeattributeset cil_gen_require system_dbusd_runtime_t)
                (typeattributeset cil_gen_require system_dbusd_var_lib_t)
                (typeattributeset cil_gen_require dbusd_etc_t)
                (roleattributeset cil_gen_require sysadm_r)
                (roletype sysadm_r sysadm_dbusd_t)
                (typeattributeset cil_gen_require non_auth_file_type)
                (typeattributeset non_auth_file_type (dbusd_exec_t sysadm_dbusd_tmpfs_t ))
                (typeattributeset cil_gen_require file_type)
                (typeattributeset file_type (dbusd_exec_t sysadm_dbusd_tmpfs_t ))
                (typeattributeset cil_gen_require domain)
                (typeattributeset domain (sysadm_dbusd_t ))
                (typeattributeset cil_gen_require dbusd_system_bus_client)
                (typeattributeset dbusd_system_bus_client (sysadm_t ))
                (typeattributeset cil_gen_require session_bus_type)
                (typeattributeset session_bus_type (sysadm_dbusd_t ))
                (typeattributeset cil_gen_require nsswitch_domain)
                (typeattributeset nsswitch_domain (sysadm_dbusd_t ))
                (typeattributeset cil_gen_require entry_type)
                (typeattributeset entry_type (dbusd_exec_t ))
                (typeattributeset cil_gen_require ubac_constrained_type)
                (typeattributeset ubac_constrained_type (sysadm_dbusd_t ))
                (typeattributeset cil_gen_require exec_type)
                (typeattributeset exec_type (dbusd_exec_t ))
                (typeattributeset cil_gen_require non_security_file_type)
                (typeattributeset non_security_file_type (dbusd_exec_t sysadm_dbusd_tmpfs_t ))
                (typeattributeset cil_gen_require tmpfsfile)
                (typeattributeset tmpfsfile (sysadm_dbusd_tmpfs_t ))
                (allow sysadm_dbusd_t dbusd_exec_t (file (entrypoint)))
                (allow sysadm_dbusd_t dbusd_exec_t (file (ioctl read getattr lock map execute open)))
                (allow sysadm_t sysadm_dbusd_t (unix_stream_socket (ioctl read write create getattr setattr append bind connect listen accept getopt setopt shutdown connectto)))
                (allow sysadm_t sysadm_dbusd_t (dbus (send_msg acquire_svc)))
                (allow sysadm_t sysadm_dbusd_t (fd (use)))
                (dontaudit sysadm_dbusd_t self (process (getcap)))
                (dontaudit sysadm_dbusd_t self (cap_userns (sys_ptrace)))
                (allow sysadm_t system_dbusd_t (dbus (send_msg acquire_svc)))
                (dontaudit sysadm_t sysadm_dbusd_t (netlink_selinux_socket (read write)))
                (allow sysadm_t session_dbusd_tmp_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t session_dbusd_home_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t session_dbusd_tmp_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t session_dbusd_home_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t session_dbusd_runtime_t (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_t dbusd_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t sysadm_dbusd_t (process (transition)))
                (dontaudit sysadm_t sysadm_dbusd_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t dbusd_exec_t process sysadm_dbusd_t)
                (allow sysadm_dbusd_t sysadm_t (fd (use)))
                (allow sysadm_dbusd_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow sysadm_dbusd_t sysadm_t (process (sigchld)))
                (allow sysadm_t sysadm_dbusd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t sysadm_dbusd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t sysadm_dbusd_t (lnk_file (read getattr)))
                (allow sysadm_t sysadm_dbusd_t (process (getattr)))
                (allow sysadm_t sysadm_dbusd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_dbusd_t sysadm_t (process (sigkill)))
                (allow sysadm_dbusd_t session_dbusd_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_dbusd_t self (unix_stream_socket (connectto)))
                (allow sysadm_dbusd_t sysadm_dbusd_tmpfs_t (file (ioctl read write getattr map)))
                (allow sysadm_dbusd_t etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_dbusd_t etc_t (dir (getattr open search)))
                (allow sysadm_dbusd_t etc_runtime_t (file (ioctl read getattr lock open)))
                (allow sysadm_dbusd_t etc_t (dir (getattr open search)))
                (allow sysadm_dbusd_t etc_runtime_t (lnk_file (read getattr)))
                (allow sysadm_dbusd_tmpfs_t tmpfs_t (filesystem (associate)))
                (allow sysadm_dbusd_t tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (typetransition sysadm_dbusd_t tmpfs_t file sysadm_dbusd_tmpfs_t)
                (allow sysadm_dbusd_t proc_t (filesystem (getattr)))
                (allow sysadm_dbusd_t bin_t (dir (getattr open search)))
                (allow sysadm_dbusd_t bin_t (lnk_file (read getattr)))
                (allow sysadm_dbusd_t usr_t (dir (getattr open search)))
                (allow sysadm_dbusd_t bin_t (file (ioctl read getattr map execute open)))
                (allow sysadm_dbusd_t sysadm_t (process (transition)))
                (dontaudit sysadm_dbusd_t sysadm_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_dbusd_t bin_t process sysadm_t)
                (allow sysadm_dbusd_t bin_t (dir (getattr open search)))
                (allow sysadm_dbusd_t bin_t (lnk_file (read getattr)))
                (allow sysadm_dbusd_t usr_t (dir (getattr open search)))
                (allow sysadm_dbusd_t bin_t (dir (getattr open search)))
                (allow sysadm_dbusd_t bin_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_dbusd_t shell_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_dbusd_t sysadm_t (process (transition)))
                (dontaudit sysadm_dbusd_t sysadm_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_dbusd_t shell_exec_t process sysadm_t)
                (allow sysadm_dbusd_t sysfs_t (dir (getattr open search)))
                (allow sysadm_dbusd_t sysfs_t (dir (getattr open search)))
                (allow sysadm_dbusd_t security_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_dbusd_t security_t (file (ioctl read getattr map open)))
                (allow sysadm_dbusd_t bin_t (dir (getattr open search)))
                (allow sysadm_dbusd_t bin_t (lnk_file (read getattr)))
                (allow sysadm_dbusd_t usr_t (dir (getattr open search)))
                (allow sysadm_dbusd_t dbusd_exec_t (file (ioctl read getattr lock map execute open execute_no_trans)))
                (allow sysadm_t system_dbusd_t (dbus (send_msg)))
                (allow sysadm_t self (dbus (send_msg)))
                (allow system_dbusd_t sysadm_t (dbus (send_msg)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t system_dbusd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t system_dbusd_var_lib_t (file (ioctl read getattr lock open)))
                (allow sysadm_t system_dbusd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t system_dbusd_var_lib_t (lnk_file (read getattr)))
                (allow sysadm_t session_dbusd_tmp_t (dir (getattr open search)))
                (allow sysadm_t session_dbusd_tmp_t (sock_file (read write getattr append open)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t system_dbusd_runtime_t (dir (getattr open search)))
                (allow sysadm_t system_dbusd_runtime_t (sock_file (write getattr append open)))
                (allow sysadm_t system_dbusd_t (unix_stream_socket (connectto)))
                (allow sysadm_t dbusd_etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t dbusd_etc_t (file (ioctl read getattr lock open)))
                (allow sysadm_t system_dbusd_runtime_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t system_dbusd_runtime_t (sock_file (read)))
                (allow sysadm_t system_dbusd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t system_dbusd_var_lib_t (lnk_file (read getattr)))
                (typetransition sysadm_t user_home_dir_t dir ".dbus" session_dbusd_home_t)
                (optional sysadm_optional_26
                    (typeattributeset cil_gen_require init_t)
                    (allow sysadm_dbusd_t init_t (process (sigchld)))
                    (allow sysadm_dbusd_t init_t (process (signull)))
                    (optional sysadm_optional_27
                        (typeattributeset cil_gen_require rpm_t)
                        (allow sysadm_dbusd_t rpm_t (fd (use)))
                        (allow sysadm_dbusd_t rpm_t (fifo_file (ioctl read getattr lock open)))
                    )
                    (optional sysadm_optional_28
                        (typeattributeset cil_gen_require security_t)
                        (typeattributeset cil_gen_require sysfs_t)
                        (dontaudit sysadm_dbusd_t security_t (filesystem (getattr)))
                        (dontaudit sysadm_dbusd_t sysfs_t (filesystem (getattr)))
                        (dontaudit sysadm_dbusd_t sysfs_t (dir (getattr open search)))
                        (dontaudit sysadm_dbusd_t security_t (dir (getattr open search)))
                        (dontaudit sysadm_dbusd_t security_t (file (ioctl read getattr lock open)))
                        (optional sysadm_optional_29
                            (typeattributeset cil_gen_require selinux_config_t)
                            (dontaudit sysadm_dbusd_t selinux_config_t (dir (getattr open search)))
                            (dontaudit sysadm_dbusd_t selinux_config_t (file (ioctl read getattr lock open)))
                            (optional sysadm_optional_30
                                (typeattributeset cil_gen_require user_home_dir_t)
                                (typeattributeset cil_gen_require home_root_t)
                                (typeattributeset cil_gen_require xdg_data_t)
                                (allow sysadm_dbusd_t xdg_data_t (dir (getattr open search)))
                                (allow sysadm_dbusd_t xdg_data_t (file (ioctl read getattr lock open)))
                                (allow sysadm_dbusd_t xdg_data_t (file (map)))
                                (allow sysadm_dbusd_t xdg_data_t (dir (getattr open search)))
                                (allow sysadm_dbusd_t xdg_data_t (dir (ioctl read getattr lock open search)))
                                (allow sysadm_dbusd_t xdg_data_t (dir (getattr open search)))
                                (allow sysadm_dbusd_t xdg_data_t (lnk_file (read getattr)))
                                (allow sysadm_dbusd_t user_home_dir_t (dir (getattr open search)))
                                (allow sysadm_dbusd_t home_root_t (dir (getattr open search)))
                                (allow sysadm_dbusd_t home_root_t (lnk_file (read getattr)))
                            )
                            (optional sysadm_optional_31
                                (typeattributeset cil_gen_require var_run_t)
                                (typeattributeset cil_gen_require var_t)
                                (typeattributeset cil_gen_require systemd_logind_runtime_t)
                                (typeattributeset cil_gen_require sysadm_systemd_t)
                                (typeattributeset cil_gen_require systemd_user_runtime_notify_t)
                                (typeattributeset cil_gen_require systemd_user_runtime_t)
                                (typeattributeset cil_gen_require systemd_user_unix_stream_activated_socket_type)
                                (typeattributeset cil_gen_require systemd_user_activated_sock_file_type)
                                (typeattributeset cil_gen_require systemd_user_unix_stream_activated_socket_type)
                                (typeattributeset systemd_user_unix_stream_activated_socket_type (sysadm_dbusd_t ))
                                (typeattributeset cil_gen_require systemd_user_activated_sock_file_type)
                                (typeattributeset systemd_user_activated_sock_file_type (session_dbusd_runtime_t ))
                                (allow sysadm_dbusd_t var_run_t (lnk_file (read getattr)))
                                (allow sysadm_dbusd_t var_t (dir (getattr open search)))
                                (allow sysadm_dbusd_t var_run_t (dir (getattr open search)))
                                (allow sysadm_dbusd_t systemd_logind_runtime_t (dir (ioctl read getattr lock open search)))
                                (allow sysadm_dbusd_t systemd_logind_runtime_t (file (ioctl read getattr lock open)))
                                (allow sysadm_systemd_t dbusd_exec_t (file (ioctl read getattr map execute open)))
                                (allow sysadm_systemd_t sysadm_dbusd_t (process (transition)))
                                (dontaudit sysadm_systemd_t sysadm_dbusd_t (process (noatsecure siginh rlimitinh)))
                                (typetransition sysadm_systemd_t dbusd_exec_t process sysadm_dbusd_t)
                                (allow sysadm_dbusd_t sysadm_systemd_t (fd (use)))
                                (allow sysadm_dbusd_t sysadm_systemd_t (fifo_file (ioctl read write getattr lock append)))
                                (allow sysadm_dbusd_t sysadm_systemd_t (process (sigchld)))
                                (allow sysadm_systemd_t sysadm_dbusd_t (dir (ioctl read getattr lock open search)))
                                (allow sysadm_systemd_t sysadm_dbusd_t (file (ioctl read getattr lock open)))
                                (allow sysadm_systemd_t sysadm_dbusd_t (lnk_file (read getattr)))
                                (allow sysadm_systemd_t sysadm_dbusd_t (process (getattr)))
                                (allow sysadm_systemd_t sysadm_dbusd_t (process (sigchld sigkill sigstop signull signal)))
                                (allow sysadm_dbusd_t sysadm_systemd_t (fd (use)))
                                (allow sysadm_dbusd_t sysadm_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                                (allow sysadm_dbusd_t sysadm_systemd_t (dir (ioctl read getattr lock open search)))
                                (allow sysadm_dbusd_t sysadm_systemd_t (file (ioctl read getattr lock open)))
                                (allow sysadm_dbusd_t sysadm_systemd_t (lnk_file (read getattr)))
                                (allow sysadm_dbusd_t sysadm_systemd_t (process (getattr)))
                                (allow sysadm_dbusd_t sysadm_systemd_t (process (sigchld)))
                                (allow sysadm_dbusd_t systemd_user_runtime_t (dir (getattr open search)))
                                (allow sysadm_dbusd_t systemd_user_runtime_t (dir (getattr open search)))
                                (allow sysadm_dbusd_t systemd_user_runtime_notify_t (sock_file (read write getattr append open)))
                                (allow sysadm_dbusd_t sysadm_systemd_t (unix_dgram_socket (sendto)))
                            )
                            (optional sysadm_optional_32
                                (typeattributeset cil_gen_require accountsd_t)
                                (allow sysadm_t accountsd_t (dbus (send_msg)))
                                (allow accountsd_t sysadm_t (dbus (send_msg)))
                            )
                            (optional sysadm_optional_33
                                (typeattributeset cil_gen_require bluetooth_t)
                                (allow sysadm_t bluetooth_t (dbus (send_msg)))
                                (allow bluetooth_t sysadm_t (dbus (send_msg)))
                            )
                            (optional sysadm_optional_34
                                (typeattributeset cil_gen_require colord_t)
                                (allow sysadm_t colord_t (dbus (send_msg)))
                                (allow colord_t sysadm_t (dbus (send_msg)))
                            )
                            (optional sysadm_optional_35
                                (typeattributeset cil_gen_require cupsd_config_t)
                                (allow sysadm_t cupsd_config_t (dbus (send_msg)))
                                (allow cupsd_config_t sysadm_t (dbus (send_msg)))
                            )
                            (optional sysadm_optional_36
                                (typeattributeset cil_gen_require devicekit_disk_t)
                                (typeattributeset cil_gen_require devicekit_power_t)
                                (allow sysadm_t devicekit_disk_t (dbus (send_msg)))
                                (allow devicekit_disk_t sysadm_t (dbus (send_msg)))
                                (allow sysadm_t devicekit_power_t (dbus (send_msg)))
                                (allow devicekit_power_t sysadm_t (dbus (send_msg)))
                            )
                            (optional sysadm_optional_37
                                (typeattributeset cil_gen_require NetworkManager_t)
                                (allow sysadm_t NetworkManager_t (dbus (send_msg)))
                                (allow NetworkManager_t sysadm_t (dbus (send_msg)))
                            )
                            (optional sysadm_optional_38
                                (typeattributeset cil_gen_require policykit_t)
                                (allow sysadm_t policykit_t (dbus (send_msg)))
                                (allow policykit_t sysadm_t (dbus (send_msg)))
                            )
                            (optional sysadm_optional_39
                                (typeattributeset cil_gen_require rtkit_daemon_t)
                                (allow sysadm_t rtkit_daemon_t (dbus (send_msg)))
                                (allow rtkit_daemon_t sysadm_t (dbus (send_msg)))
                            )
                            (optional sysadm_optional_40
                                (typeattributeset cil_gen_require xdm_t)
                                (allow sysadm_t xdm_t (dbus (send_msg)))
                                (allow xdm_t sysadm_t (dbus (send_msg)))
                            )
                            (optional sysadm_optional_41
                                (type sysadm_systemd_t)
                                (roletype object_r sysadm_systemd_t)
                                (type sysadm_systemd_tmpfiles_t)
                                (roletype object_r sysadm_systemd_tmpfiles_t)
                                (typeattributeset cil_gen_require sysadm_application_exec_domain)
                                (typeattributeset sysadm_application_exec_domain (sysadm_t ))
                                (typeattributeset cil_gen_require domain)
                                (typeattributeset domain (sysadm_t ))
                                (typeattributeset cil_gen_require init_t)
                                (typeattributeset cil_gen_require security_t)
                                (typeattributeset cil_gen_require sysfs_t)
                                (typeattributeset cil_gen_require selinux_config_t)
                                (typeattributeset cil_gen_require shell_exec_t)
                                (typeattributeset cil_gen_require entry_type)
                                (typeattributeset entry_type (shell_exec_t bin_t ))
                                (typeattributeset cil_gen_require exec_type)
                                (typeattributeset exec_type (shell_exec_t bin_t ))
                                (typeattributeset cil_gen_require file_type)
                                (typeattributeset file_type (shell_exec_t bin_t ))
                                (typeattributeset cil_gen_require non_security_file_type)
                                (typeattributeset non_security_file_type (shell_exec_t bin_t ))
                                (typeattributeset cil_gen_require non_auth_file_type)
                                (typeattributeset non_auth_file_type (shell_exec_t bin_t ))
                                (typeattributeset cil_gen_require bin_t)
                                (typeattributeset cil_gen_require process_user_target)
                                (typeattributeset process_user_target (sysadm_t ))
                                (typeattributeset cil_gen_require ubac_constrained_type)
                                (typeattributeset ubac_constrained_type (sysadm_t ))
                                (typeattributeset cil_gen_require console_device_t)
                                (typeattributeset cil_gen_require device_t)
                                (typeattributeset cil_gen_require proc_t)
                                (typeattributeset cil_gen_require sysctl_t)
                                (typeattributeset cil_gen_require sysctl_kernel_t)
                                (typeattributeset cil_gen_require etc_t)
                                (typeattributeset cil_gen_require usr_t)
                                (typeattributeset cil_gen_require var_run_t)
                                (typeattributeset cil_gen_require lib_t)
                                (typeattributeset cil_gen_require locale_t)
                                (typeattributeset cil_gen_require var_t)
                                (typeattributeset cil_gen_require var_lib_t)
                                (typeattributeset cil_gen_require syslogd_t)
                                (typeattributeset cil_gen_require syslogd_runtime_t)
                                (typeattributeset cil_gen_require devlog_t)
                                (typeattributeset cil_gen_require init_runtime_t)
                                (typeattributeset cil_gen_require user_home_dir_t)
                                (typeattributeset cil_gen_require user_bin_t)
                                (typeattributeset cil_gen_require home_root_t)
                                (typeattributeset cil_gen_require user_runtime_t)
                                (typeattributeset cil_gen_require user_runtime_root_t)
                                (typeattributeset cil_gen_require tmpfs_t)
                                (typeattributeset cil_gen_require urandom_device_t)
                                (typeattributeset cil_gen_require cgroup_types)
                                (typeattributeset cil_gen_require default_context_t)
                                (typeattributeset cil_gen_require file_context_t)
                                (typeattributeset cil_gen_require kernel_t)
                                (typeattributeset cil_gen_require system_dbusd_t)
                                (typeattributeset cil_gen_require session_dbusd_tmp_t)
                                (typeattributeset cil_gen_require sysadm_dbusd_t)
                                (typeattributeset cil_gen_require systemd_user_runtime_notify_t)
                                (typeattributeset cil_gen_require systemd_user_runtime_t)
                                (typeattributeset cil_gen_require systemd_user_unix_stream_activated_socket_type)
                                (typeattributeset cil_gen_require systemd_user_activated_sock_file_type)
                                (typeattributeset cil_gen_require dbusd_system_bus_client)
                                (typeattributeset cil_gen_require system_dbusd_runtime_t)
                                (typeattributeset cil_gen_require system_dbusd_var_lib_t)
                                (typeattributeset cil_gen_require dbusd_etc_t)
                                (typeattributeset cil_gen_require systemd_user_session_type)
                                (typeattributeset cil_gen_require systemd_log_parse_env_type)
                                (typeattributeset cil_gen_require systemd_analyze_exec_t)
                                (typeattributeset cil_gen_require systemd_conf_home_t)
                                (typeattributeset cil_gen_require systemd_data_home_t)
                                (typeattributeset cil_gen_require systemd_tmpfiles_exec_t)
                                (typeattributeset cil_gen_require systemd_user_unit_t)
                                (typeattributeset cil_gen_require systemd_user_runtime_unit_t)
                                (typeattributeset cil_gen_require systemd_user_transient_unit_t)
                                (typeattributeset cil_gen_require init_exec_t)
                                (typeattributeset cil_gen_require fs_t)
                                (typeattributeset cil_gen_require nsfs_t)
                                (typeattributeset cil_gen_require init_linkable_keyring_type)
                                (typeattributeset cil_gen_require systemd_unit_t)
                                (typeattributeset cil_gen_require systemd_user_manager_unit_t)
                                (typeattributeset cil_gen_require mount_runtime_t)
                                (typeattributeset cil_gen_require systemd_runtime_notify_t)
                                (typeattributeset cil_gen_require dbusd_session_bus_client)
                                (typeattributeset cil_gen_require systemd_machined_t)
                                (typeattributeset cil_gen_require systemd_machined_devpts_t)
                                (typeattributeset cil_gen_require init_var_lib_t)
                                (typeattributeset cil_gen_require systemd_journal_t)
                                (typeattributeset cil_gen_require systemd_passwd_runtime_t)
                                (roleattributeset cil_gen_require sysadm_r)
                                (roletype sysadm_r sysadm_systemd_t)
                                (roletype sysadm_r sysadm_systemd_tmpfiles_t)
                                (typeattributeset cil_gen_require non_auth_file_type)
                                (typeattributeset non_auth_file_type (systemd_tmpfiles_exec_t init_exec_t ))
                                (typeattributeset cil_gen_require file_type)
                                (typeattributeset file_type (systemd_tmpfiles_exec_t init_exec_t ))
                                (typeattributeset cil_gen_require domain)
                                (typeattributeset domain (sysadm_systemd_t sysadm_systemd_tmpfiles_t ))
                                (typeattributeset cil_gen_require dbusd_system_bus_client)
                                (typeattributeset dbusd_system_bus_client (sysadm_systemd_t ))
                                (typeattributeset cil_gen_require sysadm_application_exec_domain)
                                (typeattributeset sysadm_application_exec_domain (sysadm_systemd_t ))
                                (typeattributeset cil_gen_require systemd_user_session_type)
                                (typeattributeset systemd_user_session_type (sysadm_systemd_t ))
                                (typeattributeset cil_gen_require process_user_target)
                                (typeattributeset process_user_target (sysadm_systemd_t sysadm_systemd_tmpfiles_t ))
                                (typeattributeset cil_gen_require systemd_log_parse_env_type)
                                (typeattributeset systemd_log_parse_env_type (sysadm_systemd_t ))
                                (typeattributeset cil_gen_require entry_type)
                                (typeattributeset entry_type (systemd_tmpfiles_exec_t init_exec_t ))
                                (typeattributeset cil_gen_require init_linkable_keyring_type)
                                (typeattributeset init_linkable_keyring_type (sysadm_systemd_t ))
                                (typeattributeset cil_gen_require ubac_constrained_type)
                                (typeattributeset ubac_constrained_type (sysadm_systemd_t ))
                                (typeattributeset cil_gen_require exec_type)
                                (typeattributeset exec_type (systemd_tmpfiles_exec_t init_exec_t ))
                                (typeattributeset cil_gen_require dbusd_session_bus_client)
                                (typeattributeset dbusd_session_bus_client (sysadm_systemd_t ))
                                (typeattributeset cil_gen_require non_security_file_type)
                                (typeattributeset non_security_file_type (systemd_tmpfiles_exec_t init_exec_t ))
                                (allow sysadm_systemd_t init_exec_t (file (entrypoint)))
                                (allow sysadm_systemd_t init_exec_t (file (ioctl read getattr lock map execute open)))
                                (allow init_t self (process (setexec)))
                                (allow init_t init_exec_t (file (ioctl read getattr map execute open)))
                                (allow init_t sysadm_systemd_t (process (transition)))
                                (dontaudit init_t sysadm_systemd_t (process (noatsecure siginh rlimitinh)))
                                (allow sysadm_systemd_t init_t (fd (use)))
                                (allow sysadm_systemd_t init_t (fifo_file (ioctl read write getattr lock append)))
                                (allow sysadm_systemd_t init_t (process (sigchld)))
                                (allow init_t sysadm_systemd_t (process (setsched noatsecure rlimitinh)))
                                (allow sysadm_systemd_tmpfiles_t systemd_tmpfiles_exec_t (file (entrypoint)))
                                (allow sysadm_systemd_tmpfiles_t systemd_tmpfiles_exec_t (file (ioctl read getattr lock map execute open)))
                                (allow sysadm_systemd_t self (process (signal getsched)))
                                (allow sysadm_systemd_t self (netlink_kobject_uevent_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
                                (allow sysadm_systemd_t self (netlink_route_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown nlmsg_read)))
                                (allow sysadm_systemd_t self (unix_dgram_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown sendto)))
                                (allow sysadm_systemd_t self (unix_stream_socket (ioctl read write create getattr setattr append bind connect listen accept getopt setopt shutdown)))
                                (allow sysadm_systemd_t sysadm_t (process (sigchld sigkill sigstop signull signal setsched rlimitinh)))
                                (allow sysadm_systemd_t bin_t (dir (getattr open search)))
                                (allow sysadm_systemd_t bin_t (lnk_file (read getattr)))
                                (allow sysadm_systemd_t usr_t (dir (getattr open search)))
                                (allow sysadm_systemd_t bin_t (dir (getattr open search)))
                                (allow sysadm_systemd_t bin_t (dir (ioctl read getattr lock open search)))
                                (allow sysadm_systemd_t shell_exec_t (file (ioctl read getattr map execute open)))
                                (allow sysadm_systemd_t sysadm_t (process (transition)))
                                (dontaudit sysadm_systemd_t sysadm_t (process (noatsecure siginh rlimitinh)))
                                (typetransition sysadm_systemd_t shell_exec_t process sysadm_t)
                                (allow sysadm_systemd_t bin_t (dir (getattr open search)))
                                (allow sysadm_systemd_t bin_t (lnk_file (read getattr)))
                                (allow sysadm_systemd_t usr_t (dir (getattr open search)))
                                (allow sysadm_systemd_t bin_t (file (ioctl read getattr map execute open)))
                                (allow sysadm_systemd_t sysadm_t (process (transition)))
                                (dontaudit sysadm_systemd_t sysadm_t (process (noatsecure siginh rlimitinh)))
                                (typetransition sysadm_systemd_t bin_t process sysadm_t)
                                (allow sysadm_systemd_t systemd_user_unix_stream_activated_socket_type (unix_stream_socket (ioctl read write create getattr setattr append bind connect listen getopt setopt shutdown)))
                                (allow sysadm_systemd_t systemd_user_activated_sock_file_type (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                                (allow sysadm_systemd_t systemd_user_activated_sock_file_type (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                                (allow sysadm_systemd_t systemd_user_runtime_t (blk_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                                (allow sysadm_systemd_t systemd_user_runtime_t (chr_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                                (allow sysadm_systemd_t systemd_user_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                                (allow sysadm_systemd_t systemd_user_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                                (allow sysadm_systemd_t systemd_user_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                                (allow sysadm_systemd_t systemd_user_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                                (allow sysadm_systemd_t systemd_user_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                                (allow sysadm_systemd_t systemd_user_runtime_unit_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                                (allow sysadm_systemd_t systemd_user_runtime_unit_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                                (allow sysadm_systemd_t systemd_user_runtime_unit_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                                (allow sysadm_systemd_t systemd_user_transient_unit_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                                (allow sysadm_systemd_t systemd_user_transient_unit_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                                (allow sysadm_systemd_t systemd_user_transient_unit_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                                (allow sysadm_systemd_t sysadm_t (dir (getattr open search)))
                                (allow sysadm_systemd_t sysadm_t (file (ioctl read getattr lock open)))
                                (allow sysadm_systemd_t sysadm_t (lnk_file (read getattr)))
                                (allow sysadm_systemd_t device_t (dir (getattr open search)))
                                (allow sysadm_systemd_t urandom_device_t (chr_file (ioctl read getattr lock open)))
                                (allow sysadm_systemd_t home_root_t (dir (getattr open search)))
                                (allow sysadm_systemd_t home_root_t (lnk_file (read getattr)))
                                (allow sysadm_systemd_t etc_t (dir (watch)))
                                (allow sysadm_systemd_t fs_t (filesystem (getattr)))
                                (allow sysadm_systemd_t nsfs_t (file (getattr)))
                                (allow sysadm_systemd_t cgroup_types (dir (ioctl read write getattr lock open add_name remove_name search)))
                                (allow sysadm_systemd_t cgroup_types (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                                (allow sysadm_systemd_t sysfs_t (dir (getattr open search)))
                                (allow sysadm_systemd_t sysfs_t (dir (getattr open search)))
                                (allow sysadm_systemd_t cgroup_types (file (watch)))
                                (dontaudit sysadm_systemd_t proc_t (filesystem (getattr)))
                                (allow sysadm_systemd_t kernel_t (unix_stream_socket (connectto)))
                                (allow sysadm_systemd_t sysfs_t (dir (getattr open search)))
                                (allow sysadm_systemd_t sysfs_t (dir (getattr open search)))
                                (allow sysadm_systemd_t security_t (dir (ioctl read getattr lock open search)))
                                (allow sysadm_systemd_t security_t (file (ioctl read getattr map open)))
                                (allow sysadm_systemd_t systemd_unit_t (dir (ioctl read getattr lock open search)))
                                (allow sysadm_systemd_t init_runtime_t (dir (getattr open search)))
                                (allow sysadm_systemd_t systemd_unit_t (dir (getattr open search)))
                                (allow sysadm_systemd_t etc_t (dir (getattr open search)))
                                (allow sysadm_systemd_t usr_t (dir (getattr open search)))
                                (allow sysadm_systemd_t lib_t (dir (getattr open search)))
                                (allow sysadm_systemd_t tmpfs_t (dir (getattr open search)))
                                (allow sysadm_systemd_t systemd_unit_t (file (ioctl read getattr lock open)))
                                (allow sysadm_systemd_t init_t (dbus (send_msg)))
                                (allow init_t sysadm_systemd_t (dbus (send_msg)))
                                (allow sysadm_systemd_t systemd_user_manager_unit_t (service (status)))
                                (allow sysadm_systemd_t systemd_user_manager_unit_t (service (start)))
                                (allow sysadm_systemd_t systemd_user_manager_unit_t (service (stop)))
                                (allow sysadm_systemd_t systemd_user_manager_unit_t (service (reload)))
                                (allow sysadm_systemd_t locale_t (file (watch)))
                                (allow sysadm_systemd_t mount_runtime_t (dir (getattr open search)))
                                (allow sysadm_systemd_t mount_runtime_t (file (ioctl read getattr lock open)))
                                (allow sysadm_systemd_t mount_runtime_t (file (watch)))
                                (allow sysadm_systemd_t mount_runtime_t (file (watch_reads)))
                                (allow sysadm_systemd_t etc_t (dir (getattr open search)))
                                (allow sysadm_systemd_t selinux_config_t (dir (getattr open search)))
                                (allow sysadm_systemd_t default_context_t (dir (getattr open search)))
                                (allow sysadm_systemd_t etc_t (dir (getattr open search)))
                                (allow sysadm_systemd_t selinux_config_t (dir (getattr open search)))
                                (allow sysadm_systemd_t default_context_t (dir (getattr open search)))
                                (allow sysadm_systemd_t file_context_t (dir (getattr open search)))
                                (allow sysadm_systemd_t file_context_t (file (ioctl read getattr lock open)))
                                (allow sysadm_systemd_t file_context_t (file (map)))
                                (allow sysadm_systemd_t systemd_conf_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                                (allow sysadm_systemd_t systemd_conf_home_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                                (allow sysadm_systemd_t systemd_conf_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                                (allow sysadm_systemd_t systemd_conf_home_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                                (allow sysadm_systemd_t systemd_conf_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                                (allow sysadm_systemd_t systemd_conf_home_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                                (allow sysadm_systemd_t systemd_data_home_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                                (allow sysadm_systemd_t systemd_data_home_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                                (allow sysadm_systemd_t systemd_data_home_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                                (allow sysadm_systemd_t systemd_user_runtime_unit_t (dir (getattr open search)))
                                (allow sysadm_systemd_t systemd_user_runtime_unit_t (dir (getattr open search)))
                                (allow sysadm_systemd_t systemd_user_transient_unit_t (dir (getattr open search)))
                                (allow sysadm_systemd_t systemd_user_transient_unit_t (dir (getattr open search)))
                                (allow sysadm_systemd_t systemd_user_unit_t (dir (ioctl read getattr lock open search)))
                                (allow sysadm_systemd_t systemd_user_unit_t (file (ioctl read getattr lock open)))
                                (allow sysadm_systemd_t systemd_user_unit_t (lnk_file (read getattr)))
                                (allow sysadm_systemd_t init_runtime_t (dir (ioctl read getattr lock open search)))
                                (allow sysadm_systemd_t var_run_t (lnk_file (read getattr)))
                                (allow sysadm_systemd_t var_t (dir (getattr open search)))
                                (allow sysadm_systemd_t var_run_t (dir (getattr open search)))
                                (allow sysadm_systemd_t init_t (unix_dgram_socket (sendto)))
                                (allow sysadm_systemd_t systemd_runtime_notify_t (sock_file (write getattr append open)))
                                (allow sysadm_systemd_t system_dbusd_t (dbus (send_msg)))
                                (allow sysadm_systemd_t self (dbus (send_msg)))
                                (allow system_dbusd_t sysadm_systemd_t (dbus (send_msg)))
                                (allow sysadm_systemd_t var_t (dir (getattr open search)))
                                (allow sysadm_systemd_t var_lib_t (dir (getattr open search)))
                                (allow sysadm_systemd_t system_dbusd_var_lib_t (dir (getattr open search)))
                                (allow sysadm_systemd_t system_dbusd_var_lib_t (file (ioctl read getattr lock open)))
                                (allow sysadm_systemd_t system_dbusd_var_lib_t (dir (getattr open search)))
                                (allow sysadm_systemd_t system_dbusd_var_lib_t (lnk_file (read getattr)))
                                (allow sysadm_systemd_t session_dbusd_tmp_t (dir (getattr open search)))
                                (allow sysadm_systemd_t session_dbusd_tmp_t (sock_file (read write getattr append open)))
                                (allow sysadm_systemd_t var_run_t (lnk_file (read getattr)))
                                (allow sysadm_systemd_t var_t (dir (getattr open search)))
                                (allow sysadm_systemd_t var_run_t (dir (getattr open search)))
                                (allow sysadm_systemd_t system_dbusd_runtime_t (dir (getattr open search)))
                                (allow sysadm_systemd_t system_dbusd_runtime_t (sock_file (write getattr append open)))
                                (allow sysadm_systemd_t system_dbusd_t (unix_stream_socket (connectto)))
                                (allow sysadm_systemd_t dbusd_etc_t (dir (ioctl read getattr lock open search)))
                                (allow sysadm_systemd_t dbusd_etc_t (file (ioctl read getattr lock open)))
                                (allow sysadm_systemd_t system_dbusd_runtime_t (dir (ioctl read getattr lock open search)))
                                (allow sysadm_systemd_t system_dbusd_runtime_t (sock_file (read)))
                                (allow sysadm_systemd_t system_dbusd_var_lib_t (dir (getattr open search)))
                                (allow sysadm_systemd_t system_dbusd_var_lib_t (lnk_file (read getattr)))
                                (allow sysadm_systemd_t sysadm_dbusd_t (dbus (send_msg)))
                                (allow sysadm_systemd_t self (dbus (send_msg)))
                                (allow sysadm_dbusd_t sysadm_systemd_t (dbus (send_msg)))
                                (allow sysadm_systemd_t sysadm_dbusd_t (unix_stream_socket (connectto)))
                                (allow sysadm_systemd_t sysadm_dbusd_t (fd (use)))
                                (allow sysadm_systemd_t sysadm_dbusd_t (dbus (acquire_svc)))
                                (allow sysadm_systemd_t user_bin_t (dir (getattr open search)))
                                (allow sysadm_systemd_t user_bin_t (file (ioctl read getattr map execute open execute_no_trans)))
                                (allow sysadm_systemd_t user_bin_t (dir (getattr open search)))
                                (allow sysadm_systemd_t user_bin_t (lnk_file (read getattr)))
                                (allow sysadm_systemd_t home_root_t (dir (getattr open search)))
                                (allow sysadm_systemd_t home_root_t (lnk_file (read getattr)))
                                (allow sysadm_systemd_tmpfiles_t sysadm_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect getopt setopt shutdown)))
                                (allow sysadm_systemd_t systemd_tmpfiles_exec_t (file (ioctl read getattr map execute open)))
                                (allow sysadm_systemd_t sysadm_systemd_tmpfiles_t (process (transition)))
                                (dontaudit sysadm_systemd_t sysadm_systemd_tmpfiles_t (process (noatsecure siginh rlimitinh)))
                                (typetransition sysadm_systemd_t systemd_tmpfiles_exec_t process sysadm_systemd_tmpfiles_t)
                                (allow sysadm_systemd_tmpfiles_t sysadm_systemd_t (fd (use)))
                                (allow sysadm_systemd_tmpfiles_t sysadm_systemd_t (fifo_file (ioctl read write getattr lock append)))
                                (allow sysadm_systemd_tmpfiles_t sysadm_systemd_t (process (sigchld)))
                                (allow sysadm_systemd_t sysadm_systemd_tmpfiles_t (dir (getattr open search)))
                                (allow sysadm_systemd_t sysadm_systemd_tmpfiles_t (file (ioctl read getattr lock open)))
                                (allow sysadm_systemd_tmpfiles_t var_run_t (lnk_file (read getattr)))
                                (allow sysadm_systemd_tmpfiles_t var_t (dir (getattr open search)))
                                (allow sysadm_systemd_tmpfiles_t var_run_t (dir (ioctl read getattr lock open search)))
                                (allow sysadm_systemd_tmpfiles_t etc_t (dir (ioctl read getattr lock open search)))
                                (allow sysadm_systemd_tmpfiles_t etc_t (dir (getattr open search)))
                                (allow sysadm_systemd_tmpfiles_t etc_t (file (ioctl read getattr lock open)))
                                (allow sysadm_systemd_tmpfiles_t etc_t (dir (getattr open search)))
                                (allow sysadm_systemd_tmpfiles_t etc_t (lnk_file (read getattr)))
                                (allow sysadm_systemd_tmpfiles_t nsfs_t (file (getattr)))
                                (allow sysadm_systemd_tmpfiles_t init_t (dir (getattr open search)))
                                (allow sysadm_systemd_tmpfiles_t init_t (file (ioctl read getattr lock open)))
                                (allow sysadm_systemd_tmpfiles_t init_t (lnk_file (read getattr)))
                                (dontaudit sysadm_systemd_tmpfiles_t proc_t (filesystem (getattr)))
                                (allow sysadm_systemd_tmpfiles_t proc_t (dir (getattr open search)))
                                (allow sysadm_systemd_tmpfiles_t sysctl_t (dir (getattr open search)))
                                (allow sysadm_systemd_tmpfiles_t sysctl_kernel_t (dir (getattr open search)))
                                (allow sysadm_systemd_tmpfiles_t sysctl_kernel_t (file (ioctl read getattr lock open)))
                                (allow sysadm_systemd_tmpfiles_t proc_t (dir (getattr open search)))
                                (allow sysadm_systemd_tmpfiles_t sysctl_t (dir (getattr open search)))
                                (allow sysadm_systemd_tmpfiles_t sysctl_kernel_t (dir (ioctl read getattr lock open search)))
                                (allow sysadm_systemd_tmpfiles_t proc_t (dir (getattr open search)))
                                (allow sysadm_systemd_tmpfiles_t proc_t (file (ioctl read getattr lock open)))
                                (allow sysadm_systemd_tmpfiles_t proc_t (dir (getattr open search)))
                                (allow sysadm_systemd_tmpfiles_t proc_t (lnk_file (read getattr)))
                                (allow sysadm_systemd_tmpfiles_t proc_t (dir (getattr open search)))
                                (allow sysadm_systemd_tmpfiles_t proc_t (dir (ioctl read getattr lock open search)))
                                (allow sysadm_systemd_tmpfiles_t devlog_t (sock_file (write getattr append open)))
                                (allow sysadm_systemd_tmpfiles_t var_run_t (lnk_file (read getattr)))
                                (allow sysadm_systemd_tmpfiles_t var_t (dir (getattr open search)))
                                (allow sysadm_systemd_tmpfiles_t var_run_t (dir (getattr open search)))
                                (allow sysadm_systemd_tmpfiles_t init_runtime_t (dir (getattr open search)))
                                (allow sysadm_systemd_tmpfiles_t syslogd_runtime_t (dir (getattr open search)))
                                (allow sysadm_systemd_tmpfiles_t syslogd_t (unix_dgram_socket (sendto)))
                                (allow sysadm_systemd_tmpfiles_t syslogd_t (unix_stream_socket (connectto)))
                                (allow sysadm_systemd_tmpfiles_t self (unix_dgram_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
                                (allow sysadm_systemd_tmpfiles_t self (unix_stream_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
                                (allow sysadm_systemd_tmpfiles_t device_t (dir (getattr open search)))
                                (allow sysadm_systemd_tmpfiles_t device_t (dir (ioctl read getattr lock open search)))
                                (allow sysadm_systemd_tmpfiles_t device_t (dir (getattr open search)))
                                (allow sysadm_systemd_tmpfiles_t device_t (lnk_file (read getattr)))
                                (allow sysadm_systemd_tmpfiles_t console_device_t (chr_file (ioctl write getattr lock append open)))
                                (dontaudit sysadm_systemd_tmpfiles_t console_device_t (chr_file (ioctl read getattr lock open)))
                                (allow sysadm_systemd_tmpfiles_t sysfs_t (dir (getattr open search)))
                                (allow sysadm_systemd_tmpfiles_t sysfs_t (dir (getattr open search)))
                                (allow sysadm_systemd_tmpfiles_t security_t (dir (ioctl read getattr lock open search)))
                                (allow sysadm_systemd_tmpfiles_t security_t (file (ioctl read getattr map open)))
                                (allow sysadm_systemd_tmpfiles_t etc_t (dir (getattr open search)))
                                (allow sysadm_systemd_tmpfiles_t selinux_config_t (dir (getattr open search)))
                                (allow sysadm_systemd_tmpfiles_t default_context_t (dir (getattr open search)))
                                (allow sysadm_systemd_tmpfiles_t file_context_t (dir (getattr open search)))
                                (allow sysadm_systemd_tmpfiles_t file_context_t (file (ioctl read getattr lock open)))
                                (allow sysadm_systemd_tmpfiles_t file_context_t (file (map)))
                                (allow sysadm_systemd_tmpfiles_t user_home_dir_t (dir (getattr open search)))
                                (allow sysadm_systemd_tmpfiles_t home_root_t (dir (getattr open search)))
                                (allow sysadm_systemd_tmpfiles_t home_root_t (lnk_file (read getattr)))
                                (allow sysadm_systemd_tmpfiles_t user_runtime_t (dir (getattr open search)))
                                (allow sysadm_systemd_tmpfiles_t user_runtime_root_t (dir (getattr open search)))
                                (allow sysadm_systemd_tmpfiles_t var_run_t (lnk_file (read getattr)))
                                (allow sysadm_systemd_tmpfiles_t var_t (dir (getattr open search)))
                                (allow sysadm_systemd_tmpfiles_t var_run_t (dir (getattr open search)))
                                (allow sysadm_t sysadm_systemd_t (process (signal)))
                                (allow sysadm_t sysadm_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                                (allow sysadm_t sysadm_systemd_t (fd (use)))
                                (allow sysadm_t sysadm_systemd_t (fifo_file (ioctl read write getattr lock append)))
                                (allow sysadm_t systemd_user_runtime_t (dir (getattr open search)))
                                (allow sysadm_t systemd_user_runtime_t (sock_file (write getattr append open)))
                                (allow sysadm_t sysadm_systemd_t (unix_stream_socket (connectto)))
                                (allow sysadm_t sysadm_systemd_t (system (status start stop enable disable reload)))
                                (allow sysadm_t systemd_user_runtime_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                                (allow sysadm_t systemd_user_runtime_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                                (allow sysadm_t systemd_user_runtime_t (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                                (allow sysadm_t systemd_user_runtime_t (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename)))
                                (allow sysadm_t systemd_user_runtime_t (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                                (allow sysadm_systemd_t systemd_machined_t (fd (use)))
                                (allow sysadm_systemd_t systemd_machined_devpts_t (chr_file (ioctl read write getattr append)))
                                (allow sysadm_t systemd_machined_t (fd (use)))
                                (allow sysadm_t systemd_machined_devpts_t (chr_file (ioctl read write getattr append)))
                                (allow sysadm_t systemd_machined_t (dbus (send_msg)))
                                (allow systemd_machined_t sysadm_t (dbus (send_msg)))
                                (allow sysadm_t systemd_user_runtime_notify_t (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                                (allow sysadm_t systemd_user_unit_t (service (reload start status stop)))
                                (allow sysadm_t systemd_conf_home_t (service (reload start status stop)))
                                (allow sysadm_t systemd_analyze_exec_t (file (ioctl read getattr lock map execute open execute_no_trans)))
                                (allow sysadm_t init_t (dbus (send_msg)))
                                (allow init_t sysadm_t (dbus (send_msg)))
                                (allow sysadm_t var_t (dir (getattr open search)))
                                (allow sysadm_t var_lib_t (dir (getattr open search)))
                                (allow sysadm_t init_var_lib_t (dir (getattr open search)))
                                (allow sysadm_t systemd_journal_t (dir (getattr open search)))
                                (allow sysadm_t systemd_journal_t (dir (ioctl read getattr lock open search)))
                                (allow sysadm_t systemd_journal_t (dir (getattr open search)))
                                (allow sysadm_t systemd_journal_t (dir (ioctl read getattr lock open search)))
                                (allow sysadm_t systemd_journal_t (dir (getattr open search)))
                                (allow sysadm_t systemd_journal_t (file (ioctl read getattr map open)))
                                (allow sysadm_t systemd_conf_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                                (allow sysadm_t systemd_conf_home_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                                (allow sysadm_t systemd_conf_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                                (allow sysadm_t systemd_conf_home_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                                (allow sysadm_t systemd_conf_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                                (allow sysadm_t systemd_conf_home_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                                (allow sysadm_t systemd_conf_home_t (dir (getattr open search)))
                                (allow sysadm_t systemd_conf_home_t (dir (getattr relabelfrom relabelto)))
                                (allow sysadm_t systemd_conf_home_t (dir (getattr open search)))
                                (allow sysadm_t systemd_conf_home_t (file (getattr relabelfrom relabelto)))
                                (allow sysadm_t systemd_conf_home_t (dir (getattr open search)))
                                (allow sysadm_t systemd_conf_home_t (lnk_file (getattr relabelfrom relabelto)))
                                (allow sysadm_t systemd_data_home_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                                (allow sysadm_t systemd_data_home_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                                (allow sysadm_t systemd_data_home_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                                (allow sysadm_t systemd_data_home_t (dir (getattr open search)))
                                (allow sysadm_t systemd_data_home_t (dir (getattr relabelfrom relabelto)))
                                (allow sysadm_t systemd_data_home_t (dir (getattr open search)))
                                (allow sysadm_t systemd_data_home_t (file (getattr relabelfrom relabelto)))
                                (allow sysadm_t systemd_data_home_t (dir (getattr open search)))
                                (allow sysadm_t systemd_data_home_t (lnk_file (getattr relabelfrom relabelto)))
                                (allow sysadm_t systemd_user_unit_t (dir (ioctl read getattr lock open search)))
                                (allow sysadm_t systemd_user_unit_t (file (ioctl read getattr lock open)))
                                (allow sysadm_t systemd_user_unit_t (lnk_file (read getattr)))
                                (allow sysadm_t systemd_user_runtime_unit_t (dir (getattr open search)))
                                (allow sysadm_t systemd_user_runtime_unit_t (dir (ioctl read getattr lock open search)))
                                (allow sysadm_t systemd_user_runtime_unit_t (dir (getattr open search)))
                                (allow sysadm_t systemd_user_runtime_unit_t (file (ioctl read getattr lock open)))
                                (allow sysadm_t systemd_user_runtime_unit_t (dir (getattr open search)))
                                (allow sysadm_t systemd_user_runtime_unit_t (lnk_file (read getattr)))
                                (allow sysadm_t systemd_user_transient_unit_t (dir (getattr open search)))
                                (allow sysadm_t systemd_user_transient_unit_t (dir (ioctl read getattr lock open search)))
                                (allow sysadm_t systemd_user_transient_unit_t (dir (getattr open search)))
                                (allow sysadm_t systemd_user_transient_unit_t (file (ioctl read getattr lock open)))
                                (allow sysadm_t systemd_user_transient_unit_t (dir (getattr open search)))
                                (allow sysadm_t systemd_user_transient_unit_t (lnk_file (read getattr)))
                                (allow sysadm_t systemd_user_runtime_unit_t (service (status)))
                                (allow sysadm_t systemd_user_runtime_unit_t (service (reload)))
                                (allow sysadm_t systemd_user_runtime_unit_t (service (start)))
                                (allow sysadm_t systemd_user_runtime_unit_t (service (stop)))
                                (allow sysadm_t systemd_user_transient_unit_t (service (status)))
                                (allow sysadm_t systemd_user_transient_unit_t (service (reload)))
                                (allow sysadm_t systemd_user_transient_unit_t (service (start)))
                                (allow sysadm_t systemd_user_transient_unit_t (service (stop)))
                                (allow sysadm_t systemd_passwd_runtime_t (dir (watch)))
                                (optional sysadm_optional_42
                                    (typeattributeset cil_gen_require init_t)
                                    (allow sysadm_systemd_t init_t (process (sigchld)))
                                    (allow sysadm_systemd_t init_t (process (signull)))
                                    (optional sysadm_optional_43
                                        (typeattributeset cil_gen_require rpm_t)
                                        (allow sysadm_systemd_t rpm_t (fd (use)))
                                        (allow sysadm_systemd_t rpm_t (fifo_file (ioctl read getattr lock open)))
                                    )
                                    (optional sysadm_optional_44
                                        (typeattributeset cil_gen_require security_t)
                                        (typeattributeset cil_gen_require sysfs_t)
                                        (dontaudit sysadm_systemd_t security_t (filesystem (getattr)))
                                        (dontaudit sysadm_systemd_t sysfs_t (filesystem (getattr)))
                                        (dontaudit sysadm_systemd_t sysfs_t (dir (getattr open search)))
                                        (dontaudit sysadm_systemd_t security_t (dir (getattr open search)))
                                        (dontaudit sysadm_systemd_t security_t (file (ioctl read getattr lock open)))
                                        (optional sysadm_optional_45
                                            (typeattributeset cil_gen_require selinux_config_t)
                                            (dontaudit sysadm_systemd_t selinux_config_t (dir (getattr open search)))
                                            (dontaudit sysadm_systemd_t selinux_config_t (file (ioctl read getattr lock open)))
                                            (optional sysadm_optional_46
                                                (typeattributeset cil_gen_require init_t)
                                                (allow sysadm_systemd_tmpfiles_t init_t (process (sigchld)))
                                                (allow sysadm_systemd_tmpfiles_t init_t (process (signull)))
                                                (optional sysadm_optional_47
                                                    (typeattributeset cil_gen_require rpm_t)
                                                    (allow sysadm_systemd_tmpfiles_t rpm_t (fd (use)))
                                                    (allow sysadm_systemd_tmpfiles_t rpm_t (fifo_file (ioctl read getattr lock open)))
                                                )
                                                (optional sysadm_optional_48
                                                    (typeattributeset cil_gen_require security_t)
                                                    (typeattributeset cil_gen_require sysfs_t)
                                                    (dontaudit sysadm_systemd_tmpfiles_t security_t (filesystem (getattr)))
                                                    (dontaudit sysadm_systemd_tmpfiles_t sysfs_t (filesystem (getattr)))
                                                    (dontaudit sysadm_systemd_tmpfiles_t sysfs_t (dir (getattr open search)))
                                                    (dontaudit sysadm_systemd_tmpfiles_t security_t (dir (getattr open search)))
                                                    (dontaudit sysadm_systemd_tmpfiles_t security_t (file (ioctl read getattr lock open)))
                                                    (optional sysadm_optional_49
                                                        (typeattributeset cil_gen_require selinux_config_t)
                                                        (dontaudit sysadm_systemd_tmpfiles_t selinux_config_t (dir (getattr open search)))
                                                        (dontaudit sysadm_systemd_tmpfiles_t selinux_config_t (file (ioctl read getattr lock open)))
                                                        (optional sysadm_optional_50
                                                            (typeattributeset cil_gen_require user_home_dir_t)
                                                            (typeattributeset cil_gen_require home_root_t)
                                                            (typeattributeset cil_gen_require xdg_data_t)
                                                            (typeattributeset cil_gen_require xdg_config_t)
                                                            (allow sysadm_systemd_t user_home_dir_t (dir (getattr open search)))
                                                            (allow sysadm_systemd_t home_root_t (dir (getattr open search)))
                                                            (allow sysadm_systemd_t home_root_t (lnk_file (read getattr)))
                                                            (allow sysadm_systemd_t xdg_config_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                                                            (allow sysadm_systemd_t xdg_config_t (dir (create getattr)))
                                                            (allow sysadm_systemd_t user_home_dir_t (dir (getattr open search)))
                                                            (allow sysadm_systemd_t home_root_t (dir (getattr open search)))
                                                            (allow sysadm_systemd_t home_root_t (lnk_file (read getattr)))
                                                            (allow sysadm_systemd_t xdg_data_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                                                            (allow sysadm_systemd_t xdg_data_t (dir (create getattr)))
                                                            (allow sysadm_systemd_t xdg_config_t (dir (getattr open search)))
                                                            (allow sysadm_systemd_t xdg_config_t (file (ioctl read getattr lock open)))
                                                            (allow sysadm_systemd_t xdg_config_t (file (map)))
                                                            (allow sysadm_systemd_t xdg_config_t (dir (getattr open search)))
                                                            (allow sysadm_systemd_t xdg_config_t (dir (ioctl read getattr lock open search)))
                                                            (allow sysadm_systemd_t xdg_config_t (dir (getattr open search)))
                                                            (allow sysadm_systemd_t xdg_config_t (lnk_file (read getattr)))
                                                            (allow sysadm_systemd_t user_home_dir_t (dir (getattr open search)))
                                                            (allow sysadm_systemd_t home_root_t (dir (getattr open search)))
                                                            (allow sysadm_systemd_t home_root_t (lnk_file (read getattr)))
                                                            (allow sysadm_systemd_t xdg_data_t (dir (getattr open search)))
                                                            (allow sysadm_systemd_t xdg_data_t (file (ioctl read getattr lock open)))
                                                            (allow sysadm_systemd_t xdg_data_t (file (map)))
                                                            (allow sysadm_systemd_t xdg_data_t (dir (getattr open search)))
                                                            (allow sysadm_systemd_t xdg_data_t (dir (ioctl read getattr lock open search)))
                                                            (allow sysadm_systemd_t xdg_data_t (dir (getattr open search)))
                                                            (allow sysadm_systemd_t xdg_data_t (lnk_file (read getattr)))
                                                            (allow sysadm_systemd_t user_home_dir_t (dir (getattr open search)))
                                                            (allow sysadm_systemd_t home_root_t (dir (getattr open search)))
                                                            (allow sysadm_systemd_t home_root_t (lnk_file (read getattr)))
                                                            (typetransition sysadm_systemd_t xdg_data_t dir "systemd" systemd_data_home_t)
                                                            (typetransition sysadm_systemd_t xdg_config_t dir "systemd" systemd_conf_home_t)
                                                        )
                                                    )
                                                )
                                            )
                                        )
                                    )
                                )
                            )
                        )
                    )
                )
            )
            (optional sysadm_optional_51
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require dpkg_var_lib_t)
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t dpkg_var_lib_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t dpkg_var_lib_t (dir (getattr open search)))
                (allow sysadm_t dpkg_var_lib_t (file (ioctl read getattr lock open)))
                (allow sysadm_t dpkg_var_lib_t (dir (getattr open search)))
                (allow sysadm_t dpkg_var_lib_t (lnk_file (read getattr)))
            )
            (optional sysadm_optional_52
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require gssproxy_t)
                (typeattributeset cil_gen_require gssproxy_run_t)
                (typeattributeset cil_gen_require gssproxy_var_lib_t)
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t gssproxy_run_t (dir (getattr open search)))
                (allow sysadm_t gssproxy_run_t (sock_file (write getattr append open)))
                (allow sysadm_t gssproxy_t (unix_stream_socket (connectto)))
                (allow sysadm_t gssproxy_var_lib_t (dir (getattr open search)))
                (allow sysadm_t gssproxy_var_lib_t (sock_file (write getattr append open)))
                (allow sysadm_t gssproxy_t (unix_stream_socket (connectto)))
            )
            (optional sysadm_optional_53
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require hwloc_dhwd_exec_t)
                (typeattributeset cil_gen_require hwloc_runtime_t)
                (allow sysadm_t hwloc_dhwd_exec_t (file (ioctl read getattr lock map execute open execute_no_trans)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t hwloc_runtime_t (dir (getattr open search)))
                (allow sysadm_t hwloc_runtime_t (file (ioctl read getattr lock open)))
            )
            (optional sysadm_optional_54
                (typeattributeset cil_gen_require inetd_t)
                (allow sysadm_t inetd_t (fd (use)))
                (allow sysadm_t inetd_t (tcp_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
            )
            (optional sysadm_optional_55
                (typeattributeset cil_gen_require innd_etc_t)
                (typeattributeset cil_gen_require innd_var_lib_t)
                (typeattributeset cil_gen_require news_spool_t)
                (allow sysadm_t innd_etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t innd_etc_t (file (ioctl read getattr lock open)))
                (allow sysadm_t innd_etc_t (lnk_file (read getattr)))
                (allow sysadm_t innd_var_lib_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t innd_var_lib_t (file (ioctl read getattr lock open)))
                (allow sysadm_t news_spool_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t news_spool_t (file (ioctl read getattr lock open)))
                (allow sysadm_t news_spool_t (lnk_file (read getattr)))
            )
            (optional sysadm_optional_56
                (typeattributeset cil_gen_require user_home_dir_t)
                (typeattributeset cil_gen_require home_root_t)
                (typeattributeset cil_gen_require krb5_home_t)
                (allow sysadm_t user_home_dir_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_t krb5_home_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t user_home_dir_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_t krb5_home_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (typetransition sysadm_t user_home_dir_t file ".k5login" krb5_home_t)
            )
            (optional sysadm_optional_57
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require locate_var_lib_t)
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t locate_var_lib_t (dir (getattr open search)))
                (allow sysadm_t locate_var_lib_t (file (ioctl read getattr lock open)))
                (allow sysadm_t locate_var_lib_t (dir (ioctl read getattr lock open search)))
            )
            (optional sysadm_optional_58
                (typeattributeset cil_gen_require user_home_dir_t)
                (typeattributeset cil_gen_require home_root_t)
                (typeattributeset cil_gen_require mpd_user_data_t)
                (allow sysadm_t user_home_dir_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_t mpd_user_data_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t mpd_user_data_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mpd_user_data_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t user_home_dir_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_t mpd_user_data_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t mpd_user_data_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t mpd_user_data_t (lnk_file (getattr relabelfrom relabelto)))
            )
            (optional sysadm_optional_59
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require modules_conf_t)
                (typeattributeset cil_gen_require boot_t)
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t boot_t (dir (getattr open search)))
                (allow sysadm_t modules_conf_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t modules_conf_t (file (ioctl read getattr lock open)))
                (allow sysadm_t modules_conf_t (lnk_file (read getattr)))
            )
            (optional sysadm_optional_60
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require mail_spool_t)
                (typeattributeset cil_gen_require var_spool_t)
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_spool_t (dir (getattr open search)))
                (allow sysadm_t mail_spool_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t mail_spool_t (file (ioctl read write getattr lock append open)))
                (allow sysadm_t mail_spool_t (lnk_file (read getattr)))
            )
            (optional sysadm_optional_61
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require user_home_dir_t)
                (typeattributeset cil_gen_require home_root_t)
                (typeattributeset cil_gen_require mysqld_home_t)
                (typeattributeset cil_gen_require mysqld_t)
                (typeattributeset cil_gen_require mysqld_runtime_t)
                (typeattributeset cil_gen_require mysqld_db_t)
                (allow sysadm_t user_home_dir_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_t mysqld_home_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t user_home_dir_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_t mysqld_home_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (typetransition sysadm_t user_home_dir_t file ".my.cnf" mysqld_home_t)
                (booleanif (allow_user_mysql_connect)
                    (true
                        (allow sysadm_t mysqld_t (unix_stream_socket (connectto)))
                        (allow sysadm_t mysqld_runtime_t (sock_file (write getattr append open)))
                        (allow sysadm_t mysqld_runtime_t (dir (getattr open search)))
                        (allow sysadm_t mysqld_db_t (dir (getattr open search)))
                        (allow sysadm_t var_run_t (dir (getattr open search)))
                        (allow sysadm_t var_t (dir (getattr open search)))
                        (allow sysadm_t var_run_t (lnk_file (read getattr)))
                    )
                )
            )
            (optional sysadm_optional_62
                (typeattributeset cil_gen_require user_home_dir_t)
                (typeattributeset cil_gen_require home_root_t)
                (typeattributeset cil_gen_require oidentd_home_t)
                (allow sysadm_t user_home_dir_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_t oidentd_home_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t user_home_dir_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_t oidentd_home_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (typetransition sysadm_t user_home_dir_t file ".oidentd.conf" oidentd_home_t)
            )
            (optional sysadm_optional_63
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require pcscd_t)
                (typeattributeset cil_gen_require pcscd_runtime_t)
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t pcscd_runtime_t (dir (getattr open search)))
                (allow sysadm_t pcscd_runtime_t (file (ioctl read getattr lock open)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t pcscd_runtime_t (dir (getattr open search)))
                (allow sysadm_t pcscd_runtime_t (sock_file (write getattr append open)))
                (allow sysadm_t pcscd_t (unix_stream_socket (connectto)))
                (allow pcscd_t sysadm_t (dir (ioctl read getattr lock open search)))
                (allow pcscd_t sysadm_t (file (ioctl read getattr lock open)))
            )
            (optional sysadm_optional_64
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require netlabel_peer_t)
                (typeattributeset cil_gen_require postgresql_t)
                (typeattributeset cil_gen_require postgresql_runtime_t)
                (typeattributeset cil_gen_require postgresql_tmp_t)
                (typeattributeset cil_gen_require postgresql_port_t)
                (typeattributeset cil_gen_require postgresql_client_packet_t)
                (booleanif (allow_user_postgresql_connect)
                    (true
                        (allow sysadm_t postgresql_client_packet_t (packet (recv)))
                        (allow sysadm_t postgresql_client_packet_t (packet (send)))
                        (allow sysadm_t postgresql_port_t (tcp_socket (name_connect)))
                        (allow postgresql_t netlabel_peer_t (tcp_socket (recvfrom)))
                        (allow postgresql_t netlabel_peer_t (peer (recv)))
                        (allow sysadm_t netlabel_peer_t (tcp_socket (recvfrom)))
                        (allow sysadm_t netlabel_peer_t (peer (recv)))
                        (allow postgresql_t sysadm_t (peer (recv)))
                        (allow sysadm_t postgresql_t (peer (recv)))
                        (allow postgresql_t sysadm_t (tcp_socket (recvfrom)))
                        (allow postgresql_t sysadm_t (association (recvfrom)))
                        (allow sysadm_t postgresql_t (tcp_socket (recvfrom)))
                        (allow sysadm_t postgresql_t (association (recvfrom)))
                        (allow sysadm_t self (association (sendto)))
                        (allow postgresql_t self (association (sendto)))
                        (allow sysadm_t tmp_t (dir (getattr open search)))
                        (allow sysadm_t var_run_t (dir (getattr open search)))
                        (allow sysadm_t var_t (dir (getattr open search)))
                        (allow sysadm_t var_run_t (lnk_file (read getattr)))
                        (allow sysadm_t postgresql_t (unix_stream_socket (connectto)))
                        (allow sysadm_t postgresql_runtime_t (sock_file (write getattr append open)))
                        (allow sysadm_t postgresql_tmp_t (sock_file (write getattr append open)))
                        (allow sysadm_t postgresql_runtime_t (dir (getattr open search)))
                        (allow sysadm_t postgresql_tmp_t (dir (getattr open search)))
                    )
                )
            )
            (optional sysadm_optional_65
                (typeattributeset cil_gen_require user_home_dir_t)
                (typeattributeset cil_gen_require home_root_t)
                (typeattributeset cil_gen_require ppp_home_t)
                (allow sysadm_t user_home_dir_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_t ppp_home_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t user_home_dir_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_t ppp_home_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (typetransition sysadm_t user_home_dir_t file ".ppprc" ppp_home_t)
            )
            (optional sysadm_optional_66
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require resmgrd_runtime_t)
                (typeattributeset cil_gen_require resmgrd_t)
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t resmgrd_runtime_t (dir (getattr open search)))
                (allow sysadm_t resmgrd_runtime_t (sock_file (write getattr append open)))
                (allow sysadm_t resmgrd_t (unix_stream_socket (connectto)))
            )
            (optional sysadm_optional_67
                (typeattributeset cil_gen_require exports_t)
                (typeattributeset cil_gen_require nfsd_rw_t)
                (dontaudit sysadm_t exports_t (file (getattr)))
                (allow sysadm_t nfsd_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nfsd_rw_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t nfsd_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nfsd_rw_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nfsd_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nfsd_rw_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
            )
            (optional sysadm_optional_68
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require samba_var_t)
                (typeattributeset cil_gen_require winbind_t)
                (typeattributeset cil_gen_require winbind_runtime_t)
                (typeattributeset cil_gen_require samba_runtime_t)
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t samba_var_t (dir (getattr open search)))
                (allow sysadm_t winbind_runtime_t (dir (getattr open search)))
                (allow sysadm_t samba_runtime_t (dir (getattr open search)))
                (allow sysadm_t winbind_runtime_t (sock_file (write getattr append open)))
                (allow sysadm_t winbind_t (unix_stream_socket (connectto)))
            )
            (optional sysadm_optional_69
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_spool_t)
                (typeattributeset cil_gen_require slrnpull_spool_t)
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_spool_t (dir (getattr open search)))
                (allow sysadm_t slrnpull_spool_t (dir (getattr open search)))
            )
            (optional sysadm_optional_70
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require udev_runtime_t)
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t udev_runtime_t (dir (getattr open search)))
                (allow sysadm_t udev_runtime_t (file (ioctl read getattr lock open)))
                (allow sysadm_t udev_runtime_t (dir (getattr open search)))
                (allow sysadm_t udev_runtime_t (lnk_file (read getattr)))
            )
            (optional sysadm_optional_71
                (roleattributeset cil_gen_require usernetctl_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require usernetctl_t)
                (typeattributeset cil_gen_require usernetctl_exec_t)
                (roleattributeset cil_gen_require usernetctl_roles)
                (roleattributeset usernetctl_roles (sysadm_r ))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t usernetctl_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t usernetctl_t (process (transition)))
                (dontaudit sysadm_t usernetctl_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t usernetctl_exec_t process usernetctl_t)
                (allow usernetctl_t sysadm_t (fd (use)))
                (allow usernetctl_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow usernetctl_t sysadm_t (process (sigchld)))
            )
            (optional sysadm_optional_72
                (typeattributeset cil_gen_require init_t)
                (typeattributeset cil_gen_require init_runtime_t)
                (typeattributeset cil_gen_require systemd_userdbd_t)
                (typeattributeset cil_gen_require systemd_userdbd_runtime_t)
                (allow sysadm_t init_runtime_t (dir (getattr open search)))
                (allow sysadm_t systemd_userdbd_runtime_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t systemd_userdbd_runtime_t (lnk_file (read getattr)))
                (allow sysadm_t systemd_userdbd_runtime_t (dir (getattr open search)))
                (allow sysadm_t systemd_userdbd_runtime_t (sock_file (write getattr append open)))
                (allow sysadm_t systemd_userdbd_t (unix_stream_socket (connectto)))
                (allow sysadm_t init_t (unix_stream_socket (connectto)))
            )
            (optional sysadm_optional_73
                (typeattributeset cil_gen_require user_home_dir_t)
                (typeattributeset cil_gen_require home_root_t)
                (typeattributeset cil_gen_require virt_home_t)
                (typeattributeset cil_gen_require virt_content_t)
                (typeattributeset cil_gen_require svirt_home_t)
                (allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_t user_home_dir_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_t virt_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t user_home_dir_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_t virt_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (typetransition sysadm_t user_home_dir_t dir "VirtualMachines" virt_home_t)
                (typetransition sysadm_t virt_home_t dir "qemu" svirt_home_t)
                (typetransition sysadm_t virt_home_t dir "isos" virt_content_t)
                (typetransition sysadm_t user_home_dir_t dir ".virtinst" virt_home_t)
                (typetransition sysadm_t user_home_dir_t dir ".libvirt" virt_home_t)
            )
            (optional sysadm_optional_74
                (typeattributeset cil_gen_require sepgsql_unconfined_type)
                (typeattributeset cil_gen_require sepgsql_unconfined_type)
                (typeattributeset sepgsql_unconfined_type (sysadm_t ))
            )
            (optional sysadm_optional_75
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require usbguard_t)
                (typeattributeset cil_gen_require usbguard_tmpfs_t)
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t usbguard_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t usbguard_tmpfs_t (sock_file (write getattr append open)))
                (allow sysadm_t usbguard_t (unix_stream_socket (connectto)))
            )
            (optional sysadm_optional_76
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require userhelper_exec_t)
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t userhelper_exec_t (file (ioctl read getattr lock map execute open execute_no_trans)))
            )
            (optional sysadm_optional_77
                (roleattributeset cil_gen_require run_init_roles)
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require initrc_exec_t)
                (typeattributeset cil_gen_require run_init_t)
                (roleattributeset cil_gen_require run_init_roles)
                (roleattributeset run_init_roles (sysadm_r ))
                (allow sysadm_t etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t initrc_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t run_init_t (process (transition)))
                (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t initrc_exec_t process run_init_t)
                (allow run_init_t sysadm_t (fd (use)))
                (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow run_init_t sysadm_t (process (sigchld)))
            )
            (optional sysadm_optional_78
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require abrt_domain)
                (typeattributeset cil_gen_require abrt_t)
                (typeattributeset cil_gen_require abrt_etc_t)
                (typeattributeset cil_gen_require abrt_initrc_exec_t)
                (typeattributeset cil_gen_require abrt_var_cache_t)
                (typeattributeset cil_gen_require abrt_var_log_t)
                (typeattributeset cil_gen_require abrt_retrace_cache_t)
                (typeattributeset cil_gen_require abrt_runtime_t)
                (typeattributeset cil_gen_require abrt_tmp_t)
                (typeattributeset cil_gen_require abrt_retrace_spool_t)
                (allow sysadm_t abrt_domain (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t abrt_domain (dir (ioctl read getattr lock open search)))
                (allow sysadm_t abrt_domain (file (ioctl read getattr lock open)))
                (allow sysadm_t abrt_domain (lnk_file (read getattr)))
                (allow sysadm_t abrt_domain (process (getattr)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t abrt_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t abrt_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t abrt_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t abrt_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t abrt_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t abrt_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t abrt_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t abrt_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t abrt_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t abrt_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t abrt_etc_t (dir (getattr open search)))
                (allow sysadm_t abrt_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t abrt_etc_t (dir (getattr open search)))
                (allow sysadm_t abrt_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t abrt_etc_t (dir (getattr open search)))
                (allow sysadm_t abrt_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t abrt_etc_t (dir (getattr open search)))
                (allow sysadm_t abrt_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t abrt_etc_t (dir (getattr open search)))
                (allow sysadm_t abrt_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t abrt_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t abrt_var_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t abrt_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t abrt_var_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t abrt_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t abrt_var_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t abrt_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t abrt_var_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t abrt_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t abrt_var_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t abrt_var_log_t (dir (getattr open search)))
                (allow sysadm_t abrt_var_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t abrt_var_log_t (dir (getattr open search)))
                (allow sysadm_t abrt_var_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t abrt_var_log_t (dir (getattr open search)))
                (allow sysadm_t abrt_var_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t abrt_var_log_t (dir (getattr open search)))
                (allow sysadm_t abrt_var_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t abrt_var_log_t (dir (getattr open search)))
                (allow sysadm_t abrt_var_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t abrt_var_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t abrt_retrace_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t abrt_retrace_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t abrt_var_cache_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t abrt_retrace_cache_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t abrt_retrace_spool_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t abrt_var_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t abrt_retrace_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t abrt_retrace_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t abrt_var_cache_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t abrt_retrace_cache_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t abrt_retrace_spool_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t abrt_var_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t abrt_retrace_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t abrt_retrace_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t abrt_var_cache_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t abrt_retrace_cache_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t abrt_retrace_spool_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t abrt_var_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t abrt_retrace_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t abrt_retrace_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t abrt_var_cache_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t abrt_retrace_cache_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t abrt_retrace_spool_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t abrt_var_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t abrt_retrace_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t abrt_retrace_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t abrt_var_cache_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t abrt_retrace_cache_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t abrt_retrace_spool_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t abrt_var_cache_t (dir (getattr open search)))
                (allow sysadm_t abrt_retrace_cache_t (dir (getattr open search)))
                (allow sysadm_t abrt_retrace_spool_t (dir (getattr open search)))
                (allow sysadm_t abrt_var_cache_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t abrt_retrace_cache_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t abrt_retrace_spool_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t abrt_var_cache_t (dir (getattr open search)))
                (allow sysadm_t abrt_retrace_cache_t (dir (getattr open search)))
                (allow sysadm_t abrt_retrace_spool_t (dir (getattr open search)))
                (allow sysadm_t abrt_var_cache_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t abrt_retrace_cache_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t abrt_retrace_spool_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t abrt_var_cache_t (dir (getattr open search)))
                (allow sysadm_t abrt_retrace_cache_t (dir (getattr open search)))
                (allow sysadm_t abrt_retrace_spool_t (dir (getattr open search)))
                (allow sysadm_t abrt_var_cache_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t abrt_retrace_cache_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t abrt_retrace_spool_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t abrt_var_cache_t (dir (getattr open search)))
                (allow sysadm_t abrt_retrace_cache_t (dir (getattr open search)))
                (allow sysadm_t abrt_retrace_spool_t (dir (getattr open search)))
                (allow sysadm_t abrt_var_cache_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t abrt_retrace_cache_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t abrt_retrace_spool_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t abrt_var_cache_t (dir (getattr open search)))
                (allow sysadm_t abrt_retrace_cache_t (dir (getattr open search)))
                (allow sysadm_t abrt_retrace_spool_t (dir (getattr open search)))
                (allow sysadm_t abrt_var_cache_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t abrt_retrace_cache_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t abrt_retrace_spool_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t abrt_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t abrt_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t abrt_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t abrt_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t abrt_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t abrt_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t abrt_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t abrt_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t abrt_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t abrt_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t abrt_runtime_t (dir (getattr open search)))
                (allow sysadm_t abrt_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t abrt_runtime_t (dir (getattr open search)))
                (allow sysadm_t abrt_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t abrt_runtime_t (dir (getattr open search)))
                (allow sysadm_t abrt_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t abrt_runtime_t (dir (getattr open search)))
                (allow sysadm_t abrt_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t abrt_runtime_t (dir (getattr open search)))
                (allow sysadm_t abrt_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (getattr open search)))
                (allow sysadm_t abrt_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t abrt_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t abrt_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t abrt_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t abrt_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t abrt_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t abrt_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t abrt_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t abrt_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t abrt_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t abrt_tmp_t (dir (getattr open search)))
                (allow sysadm_t abrt_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t abrt_tmp_t (dir (getattr open search)))
                (allow sysadm_t abrt_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t abrt_tmp_t (dir (getattr open search)))
                (allow sysadm_t abrt_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t abrt_tmp_t (dir (getattr open search)))
                (allow sysadm_t abrt_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t abrt_tmp_t (dir (getattr open search)))
                (allow sysadm_t abrt_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_79
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_80
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require accountsd_t)
                (typeattributeset cil_gen_require accountsd_var_lib_t)
                (allow sysadm_t accountsd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t accountsd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t accountsd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t accountsd_t (lnk_file (read getattr)))
                (allow sysadm_t accountsd_t (process (getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t accountsd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t accountsd_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
            )
            (optional sysadm_optional_81
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require acct_t)
                (typeattributeset cil_gen_require acct_initrc_exec_t)
                (typeattributeset cil_gen_require acct_data_t)
                (allow sysadm_t acct_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t acct_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t acct_t (file (ioctl read getattr lock open)))
                (allow sysadm_t acct_t (lnk_file (read getattr)))
                (allow sysadm_t acct_t (process (getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t acct_data_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t acct_data_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t acct_data_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t acct_data_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t acct_data_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t acct_data_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t acct_data_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t acct_data_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t acct_data_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t acct_data_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t acct_data_t (dir (getattr open search)))
                (allow sysadm_t acct_data_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t acct_data_t (dir (getattr open search)))
                (allow sysadm_t acct_data_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t acct_data_t (dir (getattr open search)))
                (allow sysadm_t acct_data_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t acct_data_t (dir (getattr open search)))
                (allow sysadm_t acct_data_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t acct_data_t (dir (getattr open search)))
                (allow sysadm_t acct_data_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_82
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_83
                (roleattributeset cil_gen_require acpi_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require var_lock_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require acpid_t)
                (typeattributeset cil_gen_require acpid_runtime_t)
                (typeattributeset cil_gen_require acpid_initrc_exec_t)
                (typeattributeset cil_gen_require acpid_log_t)
                (typeattributeset cil_gen_require acpid_lock_t)
                (typeattributeset cil_gen_require acpid_var_lib_t)
                (typeattributeset cil_gen_require acpid_tmp_t)
                (typeattributeset cil_gen_require acpi_t)
                (typeattributeset cil_gen_require acpi_exec_t)
                (roleattributeset cil_gen_require acpi_roles)
                (roleattributeset acpi_roles (sysadm_r ))
                (allow sysadm_t acpid_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t acpid_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t acpid_t (file (ioctl read getattr lock open)))
                (allow sysadm_t acpid_t (lnk_file (read getattr)))
                (allow sysadm_t acpid_t (process (getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t acpid_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t acpid_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t acpid_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t acpid_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t acpid_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t acpid_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t acpid_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t acpid_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t acpid_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t acpid_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t acpid_log_t (dir (getattr open search)))
                (allow sysadm_t acpid_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t acpid_log_t (dir (getattr open search)))
                (allow sysadm_t acpid_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t acpid_log_t (dir (getattr open search)))
                (allow sysadm_t acpid_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t acpid_log_t (dir (getattr open search)))
                (allow sysadm_t acpid_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t acpid_log_t (dir (getattr open search)))
                (allow sysadm_t acpid_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_lock_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lock_t (dir (getattr open search)))
                (allow sysadm_t acpid_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t acpid_lock_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t acpid_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t acpid_lock_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t acpid_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t acpid_lock_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t acpid_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t acpid_lock_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t acpid_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t acpid_lock_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t acpid_lock_t (dir (getattr open search)))
                (allow sysadm_t acpid_lock_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t acpid_lock_t (dir (getattr open search)))
                (allow sysadm_t acpid_lock_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t acpid_lock_t (dir (getattr open search)))
                (allow sysadm_t acpid_lock_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t acpid_lock_t (dir (getattr open search)))
                (allow sysadm_t acpid_lock_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t acpid_lock_t (dir (getattr open search)))
                (allow sysadm_t acpid_lock_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t acpid_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t acpid_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t acpid_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t acpid_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t acpid_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t acpid_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t acpid_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t acpid_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t acpid_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t acpid_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t acpid_runtime_t (dir (getattr open search)))
                (allow sysadm_t acpid_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t acpid_runtime_t (dir (getattr open search)))
                (allow sysadm_t acpid_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t acpid_runtime_t (dir (getattr open search)))
                (allow sysadm_t acpid_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t acpid_runtime_t (dir (getattr open search)))
                (allow sysadm_t acpid_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t acpid_runtime_t (dir (getattr open search)))
                (allow sysadm_t acpid_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t acpid_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t acpid_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t acpid_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t acpid_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t acpid_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t acpid_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t acpid_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t acpid_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t acpid_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t acpid_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t acpid_var_lib_t (dir (getattr open search)))
                (allow sysadm_t acpid_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t acpid_var_lib_t (dir (getattr open search)))
                (allow sysadm_t acpid_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t acpid_var_lib_t (dir (getattr open search)))
                (allow sysadm_t acpid_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t acpid_var_lib_t (dir (getattr open search)))
                (allow sysadm_t acpid_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t acpid_var_lib_t (dir (getattr open search)))
                (allow sysadm_t acpid_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (getattr open search)))
                (allow sysadm_t acpid_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t acpid_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t acpid_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t acpid_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t acpid_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t acpid_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t acpid_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t acpid_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t acpid_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t acpid_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t acpid_tmp_t (dir (getattr open search)))
                (allow sysadm_t acpid_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t acpid_tmp_t (dir (getattr open search)))
                (allow sysadm_t acpid_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t acpid_tmp_t (dir (getattr open search)))
                (allow sysadm_t acpid_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t acpid_tmp_t (dir (getattr open search)))
                (allow sysadm_t acpid_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t acpid_tmp_t (dir (getattr open search)))
                (allow sysadm_t acpid_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t acpi_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t acpi_t (process (transition)))
                (dontaudit sysadm_t acpi_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t acpi_exec_t process acpi_t)
                (allow acpi_t sysadm_t (fd (use)))
                (allow acpi_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow acpi_t sysadm_t (process (sigchld)))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t acpi_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t acpi_t (process (transition)))
                (dontaudit sysadm_t acpi_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t acpi_exec_t process acpi_t)
                (allow acpi_t sysadm_t (fd (use)))
                (allow acpi_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow acpi_t sysadm_t (process (sigchld)))
                (optional sysadm_optional_84
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_85
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require afs_domain)
                (typeattributeset cil_gen_require afs_initrc_exec_t)
                (typeattributeset cil_gen_require afs_dbdir_t)
                (typeattributeset cil_gen_require afs_pt_db_t)
                (typeattributeset cil_gen_require afs_ka_db_t)
                (typeattributeset cil_gen_require afs_vl_db_t)
                (typeattributeset cil_gen_require afs_config_t)
                (typeattributeset cil_gen_require afs_logfile_t)
                (typeattributeset cil_gen_require afs_cache_t)
                (typeattributeset cil_gen_require afs_files_t)
                (allow sysadm_t afs_domain (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t afs_domain (dir (ioctl read getattr lock open search)))
                (allow sysadm_t afs_domain (file (ioctl read getattr lock open)))
                (allow sysadm_t afs_domain (lnk_file (read getattr)))
                (allow sysadm_t afs_domain (process (getattr)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t afs_config_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t afs_config_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t afs_config_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t afs_config_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t afs_config_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t afs_config_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t afs_config_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t afs_config_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t afs_config_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t afs_config_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t afs_config_t (dir (getattr open search)))
                (allow sysadm_t afs_config_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t afs_config_t (dir (getattr open search)))
                (allow sysadm_t afs_config_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t afs_config_t (dir (getattr open search)))
                (allow sysadm_t afs_config_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t afs_config_t (dir (getattr open search)))
                (allow sysadm_t afs_config_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t afs_config_t (dir (getattr open search)))
                (allow sysadm_t afs_config_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t afs_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t afs_cache_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t afs_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t afs_cache_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t afs_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t afs_cache_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t afs_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t afs_cache_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t afs_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t afs_cache_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t afs_cache_t (dir (getattr open search)))
                (allow sysadm_t afs_cache_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t afs_cache_t (dir (getattr open search)))
                (allow sysadm_t afs_cache_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t afs_cache_t (dir (getattr open search)))
                (allow sysadm_t afs_cache_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t afs_cache_t (dir (getattr open search)))
                (allow sysadm_t afs_cache_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t afs_cache_t (dir (getattr open search)))
                (allow sysadm_t afs_cache_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t afs_dbdir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t afs_pt_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t afs_ka_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t afs_dbdir_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t afs_pt_db_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t afs_ka_db_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t afs_dbdir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t afs_pt_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t afs_ka_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t afs_dbdir_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t afs_pt_db_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t afs_ka_db_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t afs_dbdir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t afs_pt_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t afs_ka_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t afs_dbdir_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t afs_pt_db_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t afs_ka_db_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t afs_dbdir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t afs_pt_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t afs_ka_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t afs_dbdir_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t afs_pt_db_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t afs_ka_db_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t afs_dbdir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t afs_pt_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t afs_ka_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t afs_dbdir_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t afs_pt_db_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t afs_ka_db_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t afs_dbdir_t (dir (getattr open search)))
                (allow sysadm_t afs_pt_db_t (dir (getattr open search)))
                (allow sysadm_t afs_ka_db_t (dir (getattr open search)))
                (allow sysadm_t afs_dbdir_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t afs_pt_db_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t afs_ka_db_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t afs_dbdir_t (dir (getattr open search)))
                (allow sysadm_t afs_pt_db_t (dir (getattr open search)))
                (allow sysadm_t afs_ka_db_t (dir (getattr open search)))
                (allow sysadm_t afs_dbdir_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t afs_pt_db_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t afs_ka_db_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t afs_dbdir_t (dir (getattr open search)))
                (allow sysadm_t afs_pt_db_t (dir (getattr open search)))
                (allow sysadm_t afs_ka_db_t (dir (getattr open search)))
                (allow sysadm_t afs_dbdir_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t afs_pt_db_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t afs_ka_db_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t afs_dbdir_t (dir (getattr open search)))
                (allow sysadm_t afs_pt_db_t (dir (getattr open search)))
                (allow sysadm_t afs_ka_db_t (dir (getattr open search)))
                (allow sysadm_t afs_dbdir_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t afs_pt_db_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t afs_ka_db_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t afs_dbdir_t (dir (getattr open search)))
                (allow sysadm_t afs_pt_db_t (dir (getattr open search)))
                (allow sysadm_t afs_ka_db_t (dir (getattr open search)))
                (allow sysadm_t afs_dbdir_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t afs_pt_db_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t afs_ka_db_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t afs_vl_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t afs_vl_db_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t afs_vl_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t afs_vl_db_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t afs_vl_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t afs_vl_db_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t afs_vl_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t afs_vl_db_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t afs_vl_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t afs_vl_db_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t afs_vl_db_t (dir (getattr open search)))
                (allow sysadm_t afs_vl_db_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t afs_vl_db_t (dir (getattr open search)))
                (allow sysadm_t afs_vl_db_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t afs_vl_db_t (dir (getattr open search)))
                (allow sysadm_t afs_vl_db_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t afs_vl_db_t (dir (getattr open search)))
                (allow sysadm_t afs_vl_db_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t afs_vl_db_t (dir (getattr open search)))
                (allow sysadm_t afs_vl_db_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t afs_logfile_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t afs_logfile_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t afs_logfile_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t afs_logfile_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t afs_logfile_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t afs_logfile_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t afs_logfile_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t afs_logfile_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t afs_logfile_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t afs_logfile_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t afs_logfile_t (dir (getattr open search)))
                (allow sysadm_t afs_logfile_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t afs_logfile_t (dir (getattr open search)))
                (allow sysadm_t afs_logfile_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t afs_logfile_t (dir (getattr open search)))
                (allow sysadm_t afs_logfile_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t afs_logfile_t (dir (getattr open search)))
                (allow sysadm_t afs_logfile_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t afs_logfile_t (dir (getattr open search)))
                (allow sysadm_t afs_logfile_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t afs_files_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t afs_files_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t afs_files_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t afs_files_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t afs_files_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t afs_files_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t afs_files_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t afs_files_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t afs_files_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t afs_files_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t afs_files_t (dir (getattr open search)))
                (allow sysadm_t afs_files_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t afs_files_t (dir (getattr open search)))
                (allow sysadm_t afs_files_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t afs_files_t (dir (getattr open search)))
                (allow sysadm_t afs_files_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t afs_files_t (dir (getattr open search)))
                (allow sysadm_t afs_files_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t afs_files_t (dir (getattr open search)))
                (allow sysadm_t afs_files_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_86
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_87
                (roleattributeset cil_gen_require aide_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require aide_t)
                (typeattributeset cil_gen_require aide_db_t)
                (typeattributeset cil_gen_require aide_log_t)
                (typeattributeset cil_gen_require aide_exec_t)
                (roleattributeset cil_gen_require aide_roles)
                (roleattributeset aide_roles (sysadm_r ))
                (allow sysadm_t aide_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t aide_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t aide_t (file (ioctl read getattr lock open)))
                (allow sysadm_t aide_t (lnk_file (read getattr)))
                (allow sysadm_t aide_t (process (getattr)))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t aide_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t aide_t (process (transition)))
                (dontaudit sysadm_t aide_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t aide_exec_t process aide_t)
                (allow aide_t sysadm_t (fd (use)))
                (allow aide_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow aide_t sysadm_t (process (sigchld)))
                (allow sysadm_t etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t aide_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t aide_db_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t aide_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t aide_db_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t aide_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t aide_db_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t aide_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t aide_db_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t aide_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t aide_db_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t aide_db_t (dir (getattr open search)))
                (allow sysadm_t aide_db_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t aide_db_t (dir (getattr open search)))
                (allow sysadm_t aide_db_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t aide_db_t (dir (getattr open search)))
                (allow sysadm_t aide_db_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t aide_db_t (dir (getattr open search)))
                (allow sysadm_t aide_db_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t aide_db_t (dir (getattr open search)))
                (allow sysadm_t aide_db_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t aide_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t aide_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t aide_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t aide_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t aide_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t aide_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t aide_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t aide_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t aide_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t aide_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t aide_log_t (dir (getattr open search)))
                (allow sysadm_t aide_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t aide_log_t (dir (getattr open search)))
                (allow sysadm_t aide_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t aide_log_t (dir (getattr open search)))
                (allow sysadm_t aide_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t aide_log_t (dir (getattr open search)))
                (allow sysadm_t aide_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t aide_log_t (dir (getattr open search)))
                (allow sysadm_t aide_log_t (sock_file (getattr relabelfrom relabelto)))
            )
            (optional sysadm_optional_88
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require aisexec_t)
                (typeattributeset cil_gen_require aisexec_var_lib_t)
                (typeattributeset cil_gen_require aisexec_var_log_t)
                (typeattributeset cil_gen_require aisexec_runtime_t)
                (typeattributeset cil_gen_require aisexec_tmp_t)
                (typeattributeset cil_gen_require aisexec_tmpfs_t)
                (typeattributeset cil_gen_require aisexec_initrc_exec_t)
                (allow sysadm_t aisexec_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t aisexec_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t aisexec_t (file (ioctl read getattr lock open)))
                (allow sysadm_t aisexec_t (lnk_file (read getattr)))
                (allow sysadm_t aisexec_t (process (getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t aisexec_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t aisexec_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t aisexec_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t aisexec_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t aisexec_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t aisexec_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t aisexec_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t aisexec_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t aisexec_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t aisexec_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t aisexec_var_lib_t (dir (getattr open search)))
                (allow sysadm_t aisexec_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t aisexec_var_lib_t (dir (getattr open search)))
                (allow sysadm_t aisexec_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t aisexec_var_lib_t (dir (getattr open search)))
                (allow sysadm_t aisexec_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t aisexec_var_lib_t (dir (getattr open search)))
                (allow sysadm_t aisexec_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t aisexec_var_lib_t (dir (getattr open search)))
                (allow sysadm_t aisexec_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t aisexec_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t aisexec_var_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t aisexec_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t aisexec_var_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t aisexec_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t aisexec_var_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t aisexec_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t aisexec_var_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t aisexec_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t aisexec_var_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t aisexec_var_log_t (dir (getattr open search)))
                (allow sysadm_t aisexec_var_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t aisexec_var_log_t (dir (getattr open search)))
                (allow sysadm_t aisexec_var_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t aisexec_var_log_t (dir (getattr open search)))
                (allow sysadm_t aisexec_var_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t aisexec_var_log_t (dir (getattr open search)))
                (allow sysadm_t aisexec_var_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t aisexec_var_log_t (dir (getattr open search)))
                (allow sysadm_t aisexec_var_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t aisexec_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t aisexec_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t aisexec_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t aisexec_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t aisexec_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t aisexec_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t aisexec_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t aisexec_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t aisexec_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t aisexec_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t aisexec_runtime_t (dir (getattr open search)))
                (allow sysadm_t aisexec_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t aisexec_runtime_t (dir (getattr open search)))
                (allow sysadm_t aisexec_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t aisexec_runtime_t (dir (getattr open search)))
                (allow sysadm_t aisexec_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t aisexec_runtime_t (dir (getattr open search)))
                (allow sysadm_t aisexec_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t aisexec_runtime_t (dir (getattr open search)))
                (allow sysadm_t aisexec_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t aisexec_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t aisexec_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t aisexec_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t aisexec_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t aisexec_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t aisexec_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t aisexec_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t aisexec_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t aisexec_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t aisexec_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t aisexec_tmp_t (dir (getattr open search)))
                (allow sysadm_t aisexec_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t aisexec_tmp_t (dir (getattr open search)))
                (allow sysadm_t aisexec_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t aisexec_tmp_t (dir (getattr open search)))
                (allow sysadm_t aisexec_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t aisexec_tmp_t (dir (getattr open search)))
                (allow sysadm_t aisexec_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t aisexec_tmp_t (dir (getattr open search)))
                (allow sysadm_t aisexec_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t aisexec_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t aisexec_tmpfs_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t aisexec_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t aisexec_tmpfs_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t aisexec_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t aisexec_tmpfs_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t aisexec_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t aisexec_tmpfs_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t aisexec_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t aisexec_tmpfs_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t aisexec_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t aisexec_tmpfs_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t aisexec_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t aisexec_tmpfs_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t aisexec_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t aisexec_tmpfs_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t aisexec_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t aisexec_tmpfs_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t aisexec_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t aisexec_tmpfs_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_89
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_90
                (roleattributeset cil_gen_require amanda_recover_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require amanda_recover_t)
                (typeattributeset cil_gen_require amanda_recover_exec_t)
                (roleattributeset cil_gen_require amanda_recover_roles)
                (roleattributeset amanda_recover_roles (sysadm_r ))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t amanda_recover_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t amanda_recover_t (process (transition)))
                (dontaudit sysadm_t amanda_recover_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t amanda_recover_exec_t process amanda_recover_t)
                (allow amanda_recover_t sysadm_t (fd (use)))
                (allow amanda_recover_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow amanda_recover_t sysadm_t (process (sigchld)))
            )
            (optional sysadm_optional_91
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require var_spool_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require amavis_t)
                (typeattributeset cil_gen_require amavis_tmp_t)
                (typeattributeset cil_gen_require amavis_var_log_t)
                (typeattributeset cil_gen_require amavis_spool_t)
                (typeattributeset cil_gen_require amavis_var_lib_t)
                (typeattributeset cil_gen_require amavis_runtime_t)
                (typeattributeset cil_gen_require amavis_etc_t)
                (typeattributeset cil_gen_require amavis_quarantine_t)
                (typeattributeset cil_gen_require amavis_initrc_exec_t)
                (allow sysadm_t amavis_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t amavis_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t amavis_t (file (ioctl read getattr lock open)))
                (allow sysadm_t amavis_t (lnk_file (read getattr)))
                (allow sysadm_t amavis_t (process (getattr)))
                (allow sysadm_t etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t amavis_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t amavis_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t amavis_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t amavis_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t amavis_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t amavis_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t amavis_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t amavis_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t amavis_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t amavis_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t amavis_etc_t (dir (getattr open search)))
                (allow sysadm_t amavis_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t amavis_etc_t (dir (getattr open search)))
                (allow sysadm_t amavis_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t amavis_etc_t (dir (getattr open search)))
                (allow sysadm_t amavis_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t amavis_etc_t (dir (getattr open search)))
                (allow sysadm_t amavis_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t amavis_etc_t (dir (getattr open search)))
                (allow sysadm_t amavis_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t amavis_quarantine_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t amavis_quarantine_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t amavis_quarantine_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t amavis_quarantine_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t amavis_quarantine_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t amavis_quarantine_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t amavis_quarantine_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t amavis_quarantine_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t amavis_quarantine_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t amavis_quarantine_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t amavis_quarantine_t (dir (getattr open search)))
                (allow sysadm_t amavis_quarantine_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t amavis_quarantine_t (dir (getattr open search)))
                (allow sysadm_t amavis_quarantine_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t amavis_quarantine_t (dir (getattr open search)))
                (allow sysadm_t amavis_quarantine_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t amavis_quarantine_t (dir (getattr open search)))
                (allow sysadm_t amavis_quarantine_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t amavis_quarantine_t (dir (getattr open search)))
                (allow sysadm_t amavis_quarantine_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_spool_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t amavis_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t amavis_spool_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t amavis_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t amavis_spool_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t amavis_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t amavis_spool_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t amavis_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t amavis_spool_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t amavis_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t amavis_spool_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t amavis_spool_t (dir (getattr open search)))
                (allow sysadm_t amavis_spool_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t amavis_spool_t (dir (getattr open search)))
                (allow sysadm_t amavis_spool_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t amavis_spool_t (dir (getattr open search)))
                (allow sysadm_t amavis_spool_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t amavis_spool_t (dir (getattr open search)))
                (allow sysadm_t amavis_spool_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t amavis_spool_t (dir (getattr open search)))
                (allow sysadm_t amavis_spool_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t amavis_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t amavis_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t amavis_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t amavis_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t amavis_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t amavis_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t amavis_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t amavis_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t amavis_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t amavis_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t amavis_tmp_t (dir (getattr open search)))
                (allow sysadm_t amavis_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t amavis_tmp_t (dir (getattr open search)))
                (allow sysadm_t amavis_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t amavis_tmp_t (dir (getattr open search)))
                (allow sysadm_t amavis_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t amavis_tmp_t (dir (getattr open search)))
                (allow sysadm_t amavis_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t amavis_tmp_t (dir (getattr open search)))
                (allow sysadm_t amavis_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t amavis_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t amavis_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t amavis_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t amavis_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t amavis_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t amavis_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t amavis_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t amavis_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t amavis_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t amavis_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t amavis_var_lib_t (dir (getattr open search)))
                (allow sysadm_t amavis_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t amavis_var_lib_t (dir (getattr open search)))
                (allow sysadm_t amavis_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t amavis_var_lib_t (dir (getattr open search)))
                (allow sysadm_t amavis_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t amavis_var_lib_t (dir (getattr open search)))
                (allow sysadm_t amavis_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t amavis_var_lib_t (dir (getattr open search)))
                (allow sysadm_t amavis_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t amavis_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t amavis_var_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t amavis_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t amavis_var_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t amavis_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t amavis_var_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t amavis_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t amavis_var_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t amavis_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t amavis_var_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t amavis_var_log_t (dir (getattr open search)))
                (allow sysadm_t amavis_var_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t amavis_var_log_t (dir (getattr open search)))
                (allow sysadm_t amavis_var_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t amavis_var_log_t (dir (getattr open search)))
                (allow sysadm_t amavis_var_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t amavis_var_log_t (dir (getattr open search)))
                (allow sysadm_t amavis_var_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t amavis_var_log_t (dir (getattr open search)))
                (allow sysadm_t amavis_var_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t amavis_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t amavis_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t amavis_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t amavis_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t amavis_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t amavis_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t amavis_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t amavis_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t amavis_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t amavis_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t amavis_runtime_t (dir (getattr open search)))
                (allow sysadm_t amavis_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t amavis_runtime_t (dir (getattr open search)))
                (allow sysadm_t amavis_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t amavis_runtime_t (dir (getattr open search)))
                (allow sysadm_t amavis_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t amavis_runtime_t (dir (getattr open search)))
                (allow sysadm_t amavis_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t amavis_runtime_t (dir (getattr open search)))
                (allow sysadm_t amavis_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_92
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_93
                (typeattributeset cil_gen_require amtu_t)
                (typeattributeset cil_gen_require amtu_initrc_exec_t)
                (allow sysadm_t amtu_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t amtu_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t amtu_t (file (ioctl read getattr lock open)))
                (allow sysadm_t amtu_t (lnk_file (read getattr)))
                (allow sysadm_t amtu_t (process (getattr)))
                (optional sysadm_optional_94
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_95
                (roleattributeset cil_gen_require httpd_helper_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require user_home_dir_t)
                (typeattributeset cil_gen_require home_root_t)
                (typeattributeset cil_gen_require public_content_rw_t)
                (typeattributeset cil_gen_require var_lock_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require httpdcontent)
                (typeattributeset cil_gen_require httpd_script_exec_type)
                (typeattributeset cil_gen_require httpd_script_domains)
                (typeattributeset cil_gen_require httpd_htaccess_type)
                (typeattributeset cil_gen_require httpd_t)
                (typeattributeset cil_gen_require httpd_config_t)
                (typeattributeset cil_gen_require httpd_log_t)
                (typeattributeset cil_gen_require httpd_modules_t)
                (typeattributeset cil_gen_require httpd_lock_t)
                (typeattributeset cil_gen_require httpd_helper_t)
                (typeattributeset cil_gen_require httpd_runtime_t)
                (typeattributeset cil_gen_require httpd_passwd_t)
                (typeattributeset cil_gen_require httpd_suexec_t)
                (typeattributeset cil_gen_require httpd_suexec_tmp_t)
                (typeattributeset cil_gen_require httpd_tmp_t)
                (typeattributeset cil_gen_require httpd_rotatelogs_t)
                (typeattributeset cil_gen_require httpd_initrc_exec_t)
                (typeattributeset cil_gen_require httpd_keytab_t)
                (typeattributeset cil_gen_require httpd_exec_scripts)
                (typeattributeset cil_gen_require httpd_helper_exec_t)
                (typeattributeset cil_gen_require httpd_user_content_t)
                (typeattributeset cil_gen_require httpd_user_htaccess_t)
                (typeattributeset cil_gen_require httpd_user_script_t)
                (typeattributeset cil_gen_require httpd_user_script_exec_t)
                (typeattributeset cil_gen_require httpd_user_ra_content_t)
                (typeattributeset cil_gen_require httpd_user_rw_content_t)
                (roleattributeset cil_gen_require httpd_helper_roles)
                (roleattributeset httpd_helper_roles (sysadm_r ))
                (roleattributeset cil_gen_require sysadm_r)
                (roletype sysadm_r httpd_script_domains)
                (roletype sysadm_r httpd_user_script_t)
                (typeattributeset cil_gen_require httpd_exec_scripts)
                (typeattributeset httpd_exec_scripts (sysadm_t ))
                (allow sysadm_t httpd_script_domains (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t httpd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t httpd_helper_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t httpd_passwd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t httpd_suexec_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t httpd_rotatelogs_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t httpd_script_domains (dir (ioctl read getattr lock open search)))
                (allow sysadm_t httpd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t httpd_helper_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t httpd_script_domains (file (ioctl read getattr lock open)))
                (allow sysadm_t httpd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t httpd_helper_t (file (ioctl read getattr lock open)))
                (allow sysadm_t httpd_script_domains (lnk_file (read getattr)))
                (allow sysadm_t httpd_t (lnk_file (read getattr)))
                (allow sysadm_t httpd_helper_t (lnk_file (read getattr)))
                (allow sysadm_t httpd_script_domains (process (getattr)))
                (allow sysadm_t httpd_t (process (getattr)))
                (allow sysadm_t httpd_helper_t (process (getattr)))
                (allow sysadm_t httpd_passwd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t httpd_suexec_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t httpd_rotatelogs_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t httpd_passwd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t httpd_suexec_t (file (ioctl read getattr lock open)))
                (allow sysadm_t httpd_rotatelogs_t (file (ioctl read getattr lock open)))
                (allow sysadm_t httpd_passwd_t (lnk_file (read getattr)))
                (allow sysadm_t httpd_suexec_t (lnk_file (read getattr)))
                (allow sysadm_t httpd_rotatelogs_t (lnk_file (read getattr)))
                (allow sysadm_t httpd_passwd_t (process (getattr)))
                (allow sysadm_t httpd_suexec_t (process (getattr)))
                (allow sysadm_t httpd_rotatelogs_t (process (getattr)))
                (allow sysadm_t httpdcontent (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpdcontent (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t httpdcontent (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpdcontent (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t httpdcontent (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpdcontent (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t httpd_script_exec_type (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_script_exec_type (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t httpd_script_exec_type (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_script_exec_type (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t httpd_script_exec_type (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_script_exec_type (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t public_content_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t public_content_rw_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t public_content_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t public_content_rw_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t public_content_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t public_content_rw_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t httpd_config_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_config_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t httpd_keytab_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t httpd_config_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_config_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t httpd_keytab_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t httpd_config_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_config_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t httpd_keytab_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t httpd_config_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_config_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t httpd_keytab_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t httpd_config_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_config_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t httpd_keytab_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t httpd_config_t (dir (getattr open search)))
                (allow sysadm_t httpd_keytab_t (dir (getattr open search)))
                (allow sysadm_t httpd_config_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_keytab_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_config_t (dir (getattr open search)))
                (allow sysadm_t httpd_keytab_t (dir (getattr open search)))
                (allow sysadm_t httpd_config_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_keytab_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_config_t (dir (getattr open search)))
                (allow sysadm_t httpd_keytab_t (dir (getattr open search)))
                (allow sysadm_t httpd_config_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_keytab_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_config_t (dir (getattr open search)))
                (allow sysadm_t httpd_keytab_t (dir (getattr open search)))
                (allow sysadm_t httpd_config_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_keytab_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_config_t (dir (getattr open search)))
                (allow sysadm_t httpd_keytab_t (dir (getattr open search)))
                (allow sysadm_t httpd_config_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_keytab_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t httpd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t httpd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t httpd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t httpd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t httpd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t httpd_log_t (dir (getattr open search)))
                (allow sysadm_t httpd_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_log_t (dir (getattr open search)))
                (allow sysadm_t httpd_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_log_t (dir (getattr open search)))
                (allow sysadm_t httpd_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_log_t (dir (getattr open search)))
                (allow sysadm_t httpd_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_log_t (dir (getattr open search)))
                (allow sysadm_t httpd_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_modules_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_modules_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t httpd_modules_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_modules_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t httpd_modules_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_modules_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t httpd_modules_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_modules_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t httpd_modules_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_modules_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t httpd_modules_t (dir (getattr open search)))
                (allow sysadm_t httpd_modules_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_modules_t (dir (getattr open search)))
                (allow sysadm_t httpd_modules_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_modules_t (dir (getattr open search)))
                (allow sysadm_t httpd_modules_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_modules_t (dir (getattr open search)))
                (allow sysadm_t httpd_modules_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_modules_t (dir (getattr open search)))
                (allow sysadm_t httpd_modules_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_lock_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t httpd_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_lock_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t httpd_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_lock_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t httpd_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_lock_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t httpd_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_lock_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t httpd_lock_t (dir (getattr open search)))
                (allow sysadm_t httpd_lock_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_lock_t (dir (getattr open search)))
                (allow sysadm_t httpd_lock_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_lock_t (dir (getattr open search)))
                (allow sysadm_t httpd_lock_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_lock_t (dir (getattr open search)))
                (allow sysadm_t httpd_lock_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_lock_t (dir (getattr open search)))
                (allow sysadm_t httpd_lock_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lock_t (lnk_file (read getattr)))
                (allow sysadm_t var_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (typetransition sysadm_t var_lock_t file httpd_lock_t)
                (allow sysadm_t httpd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t httpd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t httpd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t httpd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t httpd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t httpd_runtime_t (dir (getattr open search)))
                (allow sysadm_t httpd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_runtime_t (dir (getattr open search)))
                (allow sysadm_t httpd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_runtime_t (dir (getattr open search)))
                (allow sysadm_t httpd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_runtime_t (dir (getattr open search)))
                (allow sysadm_t httpd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_runtime_t (dir (getattr open search)))
                (allow sysadm_t httpd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_run_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (typetransition sysadm_t var_run_t file httpd_runtime_t)
                (allow sysadm_t httpdcontent (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_script_exec_type (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_htaccess_type (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpdcontent (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t httpd_script_exec_type (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t httpd_htaccess_type (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t httpdcontent (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_script_exec_type (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_htaccess_type (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpdcontent (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t httpd_script_exec_type (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t httpd_htaccess_type (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t httpdcontent (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_script_exec_type (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_htaccess_type (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpdcontent (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t httpd_script_exec_type (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t httpd_htaccess_type (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t httpdcontent (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_script_exec_type (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_htaccess_type (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpdcontent (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t httpd_script_exec_type (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t httpd_htaccess_type (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t httpdcontent (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_script_exec_type (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_htaccess_type (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpdcontent (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t httpd_script_exec_type (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t httpd_htaccess_type (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t httpdcontent (dir (getattr open search)))
                (allow sysadm_t httpd_script_exec_type (dir (getattr open search)))
                (allow sysadm_t httpd_htaccess_type (dir (getattr open search)))
                (allow sysadm_t httpdcontent (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_script_exec_type (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_htaccess_type (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t httpdcontent (dir (getattr open search)))
                (allow sysadm_t httpd_script_exec_type (dir (getattr open search)))
                (allow sysadm_t httpd_htaccess_type (dir (getattr open search)))
                (allow sysadm_t httpdcontent (file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_script_exec_type (file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_htaccess_type (file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpdcontent (dir (getattr open search)))
                (allow sysadm_t httpd_script_exec_type (dir (getattr open search)))
                (allow sysadm_t httpd_htaccess_type (dir (getattr open search)))
                (allow sysadm_t httpdcontent (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_script_exec_type (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_htaccess_type (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpdcontent (dir (getattr open search)))
                (allow sysadm_t httpd_script_exec_type (dir (getattr open search)))
                (allow sysadm_t httpd_htaccess_type (dir (getattr open search)))
                (allow sysadm_t httpdcontent (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_script_exec_type (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_htaccess_type (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpdcontent (dir (getattr open search)))
                (allow sysadm_t httpd_script_exec_type (dir (getattr open search)))
                (allow sysadm_t httpd_htaccess_type (dir (getattr open search)))
                (allow sysadm_t httpdcontent (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_script_exec_type (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_htaccess_type (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_suexec_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_suexec_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t httpd_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t httpd_suexec_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_suexec_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t httpd_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t httpd_suexec_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_suexec_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t httpd_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t httpd_suexec_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_suexec_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t httpd_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t httpd_suexec_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_suexec_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t httpd_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t httpd_suexec_tmp_t (dir (getattr open search)))
                (allow sysadm_t httpd_tmp_t (dir (getattr open search)))
                (allow sysadm_t httpd_suexec_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_suexec_tmp_t (dir (getattr open search)))
                (allow sysadm_t httpd_tmp_t (dir (getattr open search)))
                (allow sysadm_t httpd_suexec_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_suexec_tmp_t (dir (getattr open search)))
                (allow sysadm_t httpd_tmp_t (dir (getattr open search)))
                (allow sysadm_t httpd_suexec_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_suexec_tmp_t (dir (getattr open search)))
                (allow sysadm_t httpd_tmp_t (dir (getattr open search)))
                (allow sysadm_t httpd_suexec_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_suexec_tmp_t (dir (getattr open search)))
                (allow sysadm_t httpd_tmp_t (dir (getattr open search)))
                (allow sysadm_t httpd_suexec_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t httpd_helper_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t httpd_helper_t (process (transition)))
                (dontaudit sysadm_t httpd_helper_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t httpd_helper_exec_t process httpd_helper_t)
                (allow httpd_helper_t sysadm_t (fd (use)))
                (allow httpd_helper_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow httpd_helper_t sysadm_t (process (sigchld)))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t httpd_helper_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t httpd_helper_t (process (transition)))
                (dontaudit sysadm_t httpd_helper_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t httpd_helper_exec_t process httpd_helper_t)
                (allow httpd_helper_t sysadm_t (fd (use)))
                (allow httpd_helper_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow httpd_helper_t sysadm_t (process (sigchld)))
                (allow sysadm_t httpd_user_htaccess_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t httpd_user_content_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t httpd_user_content_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t httpd_user_content_t (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename)))
                (allow sysadm_t httpd_user_ra_content_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t httpd_user_ra_content_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t httpd_user_ra_content_t (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename)))
                (allow sysadm_t httpd_user_rw_content_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t httpd_user_rw_content_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t httpd_user_rw_content_t (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename)))
                (allow sysadm_t httpd_user_script_exec_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t httpd_user_script_exec_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t httpd_user_script_exec_t (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename)))
                (allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_t httpd_user_content_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_user_content_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_user_content_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (typetransition sysadm_t httpd_user_content_t dir "logs" httpd_user_ra_content_t)
                (typetransition sysadm_t httpd_user_content_t dir "cgi-bin" httpd_user_script_exec_t)
                (typetransition sysadm_t httpd_user_content_t file ".htaccess" httpd_user_htaccess_t)
                (typetransition sysadm_t user_home_dir_t dir "www" httpd_user_content_t)
                (typetransition sysadm_t user_home_dir_t dir "web" httpd_user_content_t)
                (typetransition sysadm_t user_home_dir_t dir "public_html" httpd_user_content_t)
                (booleanif (and (httpd_enable_cgi) (httpd_unified))
                    (true
                        (allow httpd_user_script_t sysadm_application_exec_domain (process (sigchld)))
                        (allow httpd_user_script_t sysadm_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                        (allow httpd_user_script_t sysadm_application_exec_domain (fd (use)))
                        (typetransition sysadm_application_exec_domain httpdcontent process httpd_user_script_t)
                        (dontaudit sysadm_application_exec_domain httpd_user_script_t (process (noatsecure siginh rlimitinh)))
                        (allow sysadm_application_exec_domain httpd_user_script_t (process (transition)))
                        (allow sysadm_application_exec_domain httpdcontent (file (ioctl read getattr map execute open)))
                    )
                )
                (booleanif (httpd_enable_cgi)
                    (true
                        (allow httpd_user_script_t sysadm_application_exec_domain (process (sigchld)))
                        (allow httpd_user_script_t sysadm_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                        (allow httpd_user_script_t sysadm_application_exec_domain (fd (use)))
                        (typetransition sysadm_application_exec_domain httpd_user_script_exec_t process httpd_user_script_t)
                        (dontaudit sysadm_application_exec_domain httpd_user_script_t (process (noatsecure siginh rlimitinh)))
                        (allow sysadm_application_exec_domain httpd_user_script_t (process (transition)))
                        (allow sysadm_application_exec_domain httpd_user_script_exec_t (file (ioctl read getattr map execute open)))
                    )
                )
                (optional sysadm_optional_96
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
                (optional sysadm_optional_97
                    (typeattributeset cil_gen_require sysadm_systemd_t)
                    (allow sysadm_systemd_t httpd_user_script_t (dir (ioctl read getattr lock open search)))
                    (allow sysadm_systemd_t httpd_user_script_t (file (ioctl read getattr lock open)))
                    (allow sysadm_systemd_t httpd_user_script_t (lnk_file (read getattr)))
                    (allow sysadm_systemd_t httpd_user_script_t (process (getattr)))
                    (allow sysadm_systemd_t httpd_user_script_t (process (sigchld sigkill sigstop signull signal)))
                    (allow httpd_user_script_t sysadm_systemd_t (fd (use)))
                    (allow httpd_user_script_t sysadm_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                    (allow httpd_user_script_t sysadm_systemd_t (dir (ioctl read getattr lock open search)))
                    (allow httpd_user_script_t sysadm_systemd_t (file (ioctl read getattr lock open)))
                    (allow httpd_user_script_t sysadm_systemd_t (lnk_file (read getattr)))
                    (allow httpd_user_script_t sysadm_systemd_t (process (getattr)))
                    (allow httpd_user_script_t sysadm_systemd_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_98
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require apcupsd_t)
                (typeattributeset cil_gen_require apcupsd_tmp_t)
                (typeattributeset cil_gen_require apcupsd_log_t)
                (typeattributeset cil_gen_require apcupsd_runtime_t)
                (typeattributeset cil_gen_require apcupsd_initrc_exec_t)
                (typeattributeset cil_gen_require apcupsd_lock_t)
                (allow sysadm_t apcupsd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t apcupsd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t apcupsd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t apcupsd_t (lnk_file (read getattr)))
                (allow sysadm_t apcupsd_t (process (getattr)))
                (allow sysadm_t var_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t apcupsd_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t apcupsd_lock_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t apcupsd_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t apcupsd_lock_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t apcupsd_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t apcupsd_lock_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t apcupsd_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t apcupsd_lock_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t apcupsd_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t apcupsd_lock_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t apcupsd_lock_t (dir (getattr open search)))
                (allow sysadm_t apcupsd_lock_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t apcupsd_lock_t (dir (getattr open search)))
                (allow sysadm_t apcupsd_lock_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t apcupsd_lock_t (dir (getattr open search)))
                (allow sysadm_t apcupsd_lock_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t apcupsd_lock_t (dir (getattr open search)))
                (allow sysadm_t apcupsd_lock_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t apcupsd_lock_t (dir (getattr open search)))
                (allow sysadm_t apcupsd_lock_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t apcupsd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t apcupsd_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t apcupsd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t apcupsd_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t apcupsd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t apcupsd_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t apcupsd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t apcupsd_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t apcupsd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t apcupsd_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t apcupsd_log_t (dir (getattr open search)))
                (allow sysadm_t apcupsd_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t apcupsd_log_t (dir (getattr open search)))
                (allow sysadm_t apcupsd_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t apcupsd_log_t (dir (getattr open search)))
                (allow sysadm_t apcupsd_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t apcupsd_log_t (dir (getattr open search)))
                (allow sysadm_t apcupsd_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t apcupsd_log_t (dir (getattr open search)))
                (allow sysadm_t apcupsd_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t apcupsd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t apcupsd_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t apcupsd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t apcupsd_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t apcupsd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t apcupsd_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t apcupsd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t apcupsd_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t apcupsd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t apcupsd_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t apcupsd_tmp_t (dir (getattr open search)))
                (allow sysadm_t apcupsd_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t apcupsd_tmp_t (dir (getattr open search)))
                (allow sysadm_t apcupsd_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t apcupsd_tmp_t (dir (getattr open search)))
                (allow sysadm_t apcupsd_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t apcupsd_tmp_t (dir (getattr open search)))
                (allow sysadm_t apcupsd_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t apcupsd_tmp_t (dir (getattr open search)))
                (allow sysadm_t apcupsd_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t apcupsd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t apcupsd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t apcupsd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t apcupsd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t apcupsd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t apcupsd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t apcupsd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t apcupsd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t apcupsd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t apcupsd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t apcupsd_runtime_t (dir (getattr open search)))
                (allow sysadm_t apcupsd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t apcupsd_runtime_t (dir (getattr open search)))
                (allow sysadm_t apcupsd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t apcupsd_runtime_t (dir (getattr open search)))
                (allow sysadm_t apcupsd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t apcupsd_runtime_t (dir (getattr open search)))
                (allow sysadm_t apcupsd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t apcupsd_runtime_t (dir (getattr open search)))
                (allow sysadm_t apcupsd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_99
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_100
                (roleattributeset cil_gen_require apt_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require apt_t)
                (typeattributeset cil_gen_require apt_exec_t)
                (roleattributeset cil_gen_require apt_roles)
                (roleattributeset apt_roles (sysadm_r ))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t apt_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t apt_t (process (transition)))
                (dontaudit sysadm_t apt_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t apt_exec_t process apt_t)
                (allow apt_t sysadm_t (fd (use)))
                (allow apt_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow apt_t sysadm_t (process (sigchld)))
            )
            (optional sysadm_optional_101
                (roleattributeset cil_gen_require acngtool_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require acngtool_t)
                (typeattributeset cil_gen_require acngtool_exec_t)
                (roleattributeset cil_gen_require acngtool_roles)
                (roleattributeset acngtool_roles (sysadm_r ))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t acngtool_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t acngtool_t (process (transition)))
                (dontaudit sysadm_t acngtool_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t acngtool_exec_t process acngtool_t)
                (allow acngtool_t sysadm_t (fd (use)))
                (allow acngtool_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow acngtool_t sysadm_t (process (sigchld)))
            )
            (optional sysadm_optional_102
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require arpwatch_t)
                (typeattributeset cil_gen_require arpwatch_tmp_t)
                (typeattributeset cil_gen_require arpwatch_initrc_exec_t)
                (typeattributeset cil_gen_require arpwatch_data_t)
                (typeattributeset cil_gen_require arpwatch_pid_t)
                (typeattributeset cil_gen_require arpwatch_unit_t)
                (allow sysadm_t arpwatch_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t arpwatch_t (file (ioctl read getattr lock open)))
                (allow sysadm_t arpwatch_t (lnk_file (read getattr)))
                (allow sysadm_t arpwatch_t (process (getattr)))
                (allow sysadm_t arpwatch_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t tmp_t (dir (getattr open search)))
                (allow sysadm_t arpwatch_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t arpwatch_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t arpwatch_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t arpwatch_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t arpwatch_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t arpwatch_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t arpwatch_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t arpwatch_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t arpwatch_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t arpwatch_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t arpwatch_tmp_t (dir (getattr open search)))
                (allow sysadm_t arpwatch_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t arpwatch_tmp_t (dir (getattr open search)))
                (allow sysadm_t arpwatch_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t arpwatch_tmp_t (dir (getattr open search)))
                (allow sysadm_t arpwatch_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t arpwatch_tmp_t (dir (getattr open search)))
                (allow sysadm_t arpwatch_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t arpwatch_tmp_t (dir (getattr open search)))
                (allow sysadm_t arpwatch_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t arpwatch_data_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t arpwatch_data_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t arpwatch_data_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t arpwatch_data_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t arpwatch_data_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t arpwatch_data_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t arpwatch_data_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t arpwatch_data_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t arpwatch_data_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t arpwatch_data_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t arpwatch_data_t (dir (getattr open search)))
                (allow sysadm_t arpwatch_data_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t arpwatch_data_t (dir (getattr open search)))
                (allow sysadm_t arpwatch_data_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t arpwatch_data_t (dir (getattr open search)))
                (allow sysadm_t arpwatch_data_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t arpwatch_data_t (dir (getattr open search)))
                (allow sysadm_t arpwatch_data_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t arpwatch_data_t (dir (getattr open search)))
                (allow sysadm_t arpwatch_data_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t arpwatch_pid_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t arpwatch_pid_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t arpwatch_pid_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t arpwatch_pid_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t arpwatch_pid_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t arpwatch_pid_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t arpwatch_pid_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t arpwatch_pid_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t arpwatch_pid_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t arpwatch_pid_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t arpwatch_pid_t (dir (getattr open search)))
                (allow sysadm_t arpwatch_pid_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t arpwatch_pid_t (dir (getattr open search)))
                (allow sysadm_t arpwatch_pid_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t arpwatch_pid_t (dir (getattr open search)))
                (allow sysadm_t arpwatch_pid_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t arpwatch_pid_t (dir (getattr open search)))
                (allow sysadm_t arpwatch_pid_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t arpwatch_pid_t (dir (getattr open search)))
                (allow sysadm_t arpwatch_pid_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_103
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_104
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require var_spool_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require asterisk_t)
                (typeattributeset cil_gen_require asterisk_runtime_t)
                (typeattributeset cil_gen_require asterisk_spool_t)
                (typeattributeset cil_gen_require asterisk_etc_t)
                (typeattributeset cil_gen_require asterisk_tmp_t)
                (typeattributeset cil_gen_require asterisk_log_t)
                (typeattributeset cil_gen_require asterisk_var_lib_t)
                (typeattributeset cil_gen_require asterisk_initrc_exec_t)
                (typeattributeset cil_gen_require asterisk_exec_t)
                (allow sysadm_t asterisk_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t asterisk_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t asterisk_t (file (ioctl read getattr lock open)))
                (allow sysadm_t asterisk_t (lnk_file (read getattr)))
                (allow sysadm_t asterisk_t (process (getattr)))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t asterisk_exec_t (file (ioctl read getattr lock map execute open execute_no_trans)))
                (allow sysadm_t tmp_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t asterisk_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t asterisk_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t asterisk_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t asterisk_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t asterisk_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t asterisk_tmp_t (dir (getattr open search)))
                (allow sysadm_t asterisk_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t asterisk_tmp_t (dir (getattr open search)))
                (allow sysadm_t asterisk_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t asterisk_tmp_t (dir (getattr open search)))
                (allow sysadm_t asterisk_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t asterisk_tmp_t (dir (getattr open search)))
                (allow sysadm_t asterisk_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t asterisk_tmp_t (dir (getattr open search)))
                (allow sysadm_t asterisk_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t asterisk_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t asterisk_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t asterisk_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t asterisk_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t asterisk_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t asterisk_etc_t (dir (getattr open search)))
                (allow sysadm_t asterisk_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t asterisk_etc_t (dir (getattr open search)))
                (allow sysadm_t asterisk_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t asterisk_etc_t (dir (getattr open search)))
                (allow sysadm_t asterisk_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t asterisk_etc_t (dir (getattr open search)))
                (allow sysadm_t asterisk_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t asterisk_etc_t (dir (getattr open search)))
                (allow sysadm_t asterisk_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t asterisk_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t asterisk_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t asterisk_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t asterisk_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t asterisk_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t asterisk_log_t (dir (getattr open search)))
                (allow sysadm_t asterisk_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t asterisk_log_t (dir (getattr open search)))
                (allow sysadm_t asterisk_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t asterisk_log_t (dir (getattr open search)))
                (allow sysadm_t asterisk_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t asterisk_log_t (dir (getattr open search)))
                (allow sysadm_t asterisk_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t asterisk_log_t (dir (getattr open search)))
                (allow sysadm_t asterisk_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_spool_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t asterisk_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_spool_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t asterisk_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_spool_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t asterisk_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_spool_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t asterisk_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_spool_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t asterisk_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_spool_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t asterisk_spool_t (dir (getattr open search)))
                (allow sysadm_t asterisk_spool_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t asterisk_spool_t (dir (getattr open search)))
                (allow sysadm_t asterisk_spool_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t asterisk_spool_t (dir (getattr open search)))
                (allow sysadm_t asterisk_spool_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t asterisk_spool_t (dir (getattr open search)))
                (allow sysadm_t asterisk_spool_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t asterisk_spool_t (dir (getattr open search)))
                (allow sysadm_t asterisk_spool_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t asterisk_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t asterisk_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t asterisk_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t asterisk_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t asterisk_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t asterisk_var_lib_t (dir (getattr open search)))
                (allow sysadm_t asterisk_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t asterisk_var_lib_t (dir (getattr open search)))
                (allow sysadm_t asterisk_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t asterisk_var_lib_t (dir (getattr open search)))
                (allow sysadm_t asterisk_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t asterisk_var_lib_t (dir (getattr open search)))
                (allow sysadm_t asterisk_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t asterisk_var_lib_t (dir (getattr open search)))
                (allow sysadm_t asterisk_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t asterisk_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t asterisk_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t asterisk_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t asterisk_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t asterisk_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t asterisk_runtime_t (dir (getattr open search)))
                (allow sysadm_t asterisk_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t asterisk_runtime_t (dir (getattr open search)))
                (allow sysadm_t asterisk_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t asterisk_runtime_t (dir (getattr open search)))
                (allow sysadm_t asterisk_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t asterisk_runtime_t (dir (getattr open search)))
                (allow sysadm_t asterisk_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t asterisk_runtime_t (dir (getattr open search)))
                (allow sysadm_t asterisk_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t asterisk_runtime_t (dir (getattr open search)))
                (allow sysadm_t asterisk_runtime_t (sock_file (write getattr append open)))
                (allow sysadm_t asterisk_t (unix_stream_socket (connectto)))
                (optional sysadm_optional_105
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_106
                (roleattributeset cil_gen_require auditadm_r)
                (roleallow sysadm_r auditadm_r)
            )
            (optional sysadm_optional_107
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require automount_t)
                (typeattributeset cil_gen_require automount_lock_t)
                (typeattributeset cil_gen_require automount_tmp_t)
                (typeattributeset cil_gen_require automount_runtime_t)
                (typeattributeset cil_gen_require automount_initrc_exec_t)
                (typeattributeset cil_gen_require automount_keytab_t)
                (allow sysadm_t automount_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t automount_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t automount_t (file (ioctl read getattr lock open)))
                (allow sysadm_t automount_t (lnk_file (read getattr)))
                (allow sysadm_t automount_t (process (getattr)))
                (allow sysadm_t etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t automount_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t automount_keytab_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t automount_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t automount_keytab_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t automount_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t automount_keytab_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t automount_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t automount_keytab_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t automount_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t automount_keytab_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t automount_keytab_t (dir (getattr open search)))
                (allow sysadm_t automount_keytab_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t automount_keytab_t (dir (getattr open search)))
                (allow sysadm_t automount_keytab_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t automount_keytab_t (dir (getattr open search)))
                (allow sysadm_t automount_keytab_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t automount_keytab_t (dir (getattr open search)))
                (allow sysadm_t automount_keytab_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t automount_keytab_t (dir (getattr open search)))
                (allow sysadm_t automount_keytab_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t automount_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t automount_lock_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t automount_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t automount_lock_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t automount_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t automount_lock_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t automount_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t automount_lock_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t automount_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t automount_lock_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t automount_lock_t (dir (getattr open search)))
                (allow sysadm_t automount_lock_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t automount_lock_t (dir (getattr open search)))
                (allow sysadm_t automount_lock_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t automount_lock_t (dir (getattr open search)))
                (allow sysadm_t automount_lock_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t automount_lock_t (dir (getattr open search)))
                (allow sysadm_t automount_lock_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t automount_lock_t (dir (getattr open search)))
                (allow sysadm_t automount_lock_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t automount_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t automount_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t automount_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t automount_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t automount_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t automount_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t automount_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t automount_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t automount_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t automount_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t automount_tmp_t (dir (getattr open search)))
                (allow sysadm_t automount_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t automount_tmp_t (dir (getattr open search)))
                (allow sysadm_t automount_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t automount_tmp_t (dir (getattr open search)))
                (allow sysadm_t automount_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t automount_tmp_t (dir (getattr open search)))
                (allow sysadm_t automount_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t automount_tmp_t (dir (getattr open search)))
                (allow sysadm_t automount_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t automount_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t automount_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t automount_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t automount_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t automount_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t automount_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t automount_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t automount_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t automount_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t automount_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t automount_runtime_t (dir (getattr open search)))
                (allow sysadm_t automount_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t automount_runtime_t (dir (getattr open search)))
                (allow sysadm_t automount_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t automount_runtime_t (dir (getattr open search)))
                (allow sysadm_t automount_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t automount_runtime_t (dir (getattr open search)))
                (allow sysadm_t automount_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t automount_runtime_t (dir (getattr open search)))
                (allow sysadm_t automount_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_108
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_109
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require avahi_t)
                (typeattributeset cil_gen_require avahi_runtime_t)
                (typeattributeset cil_gen_require avahi_initrc_exec_t)
                (typeattributeset cil_gen_require avahi_var_lib_t)
                (allow sysadm_t avahi_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t avahi_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t avahi_t (file (ioctl read getattr lock open)))
                (allow sysadm_t avahi_t (lnk_file (read getattr)))
                (allow sysadm_t avahi_t (process (getattr)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t avahi_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t avahi_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t avahi_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t avahi_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t avahi_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t avahi_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t avahi_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t avahi_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t avahi_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t avahi_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t avahi_runtime_t (dir (getattr open search)))
                (allow sysadm_t avahi_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t avahi_runtime_t (dir (getattr open search)))
                (allow sysadm_t avahi_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t avahi_runtime_t (dir (getattr open search)))
                (allow sysadm_t avahi_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t avahi_runtime_t (dir (getattr open search)))
                (allow sysadm_t avahi_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t avahi_runtime_t (dir (getattr open search)))
                (allow sysadm_t avahi_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t avahi_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t avahi_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t avahi_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t avahi_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t avahi_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t avahi_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t avahi_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t avahi_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t avahi_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t avahi_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t avahi_var_lib_t (dir (getattr open search)))
                (allow sysadm_t avahi_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t avahi_var_lib_t (dir (getattr open search)))
                (allow sysadm_t avahi_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t avahi_var_lib_t (dir (getattr open search)))
                (allow sysadm_t avahi_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t avahi_var_lib_t (dir (getattr open search)))
                (allow sysadm_t avahi_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t avahi_var_lib_t (dir (getattr open search)))
                (allow sysadm_t avahi_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_110
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_111
                (roleattributeset cil_gen_require backup_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require backup_t)
                (typeattributeset cil_gen_require backup_exec_t)
                (roleattributeset cil_gen_require backup_roles)
                (roleattributeset backup_roles (sysadm_r ))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t backup_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t backup_t (process (transition)))
                (dontaudit sysadm_t backup_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t backup_exec_t process backup_t)
                (allow backup_t sysadm_t (fd (use)))
                (allow backup_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow backup_t sysadm_t (process (sigchld)))
            )
            (optional sysadm_optional_112
                (roleattributeset cil_gen_require bacula_admin_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require bacula_admin_t)
                (typeattributeset cil_gen_require bacula_admin_exec_t)
                (typeattributeset cil_gen_require bacula_t)
                (typeattributeset cil_gen_require bacula_etc_t)
                (typeattributeset cil_gen_require bacula_log_t)
                (typeattributeset cil_gen_require bacula_spool_t)
                (typeattributeset cil_gen_require bacula_var_lib_t)
                (typeattributeset cil_gen_require bacula_runtime_t)
                (typeattributeset cil_gen_require bacula_initrc_exec_t)
                (roleattributeset cil_gen_require bacula_admin_roles)
                (roleattributeset bacula_admin_roles (sysadm_r ))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t bacula_admin_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t bacula_admin_t (process (transition)))
                (dontaudit sysadm_t bacula_admin_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t bacula_admin_exec_t process bacula_admin_t)
                (allow bacula_admin_t sysadm_t (fd (use)))
                (allow bacula_admin_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow bacula_admin_t sysadm_t (process (sigchld)))
                (allow sysadm_t bacula_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t bacula_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t bacula_t (file (ioctl read getattr lock open)))
                (allow sysadm_t bacula_t (lnk_file (read getattr)))
                (allow sysadm_t bacula_t (process (getattr)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t bacula_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bacula_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t bacula_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bacula_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bacula_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bacula_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t bacula_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bacula_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bacula_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bacula_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bacula_etc_t (dir (getattr open search)))
                (allow sysadm_t bacula_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t bacula_etc_t (dir (getattr open search)))
                (allow sysadm_t bacula_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t bacula_etc_t (dir (getattr open search)))
                (allow sysadm_t bacula_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bacula_etc_t (dir (getattr open search)))
                (allow sysadm_t bacula_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bacula_etc_t (dir (getattr open search)))
                (allow sysadm_t bacula_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t bacula_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bacula_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t bacula_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bacula_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bacula_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bacula_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t bacula_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bacula_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bacula_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bacula_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bacula_log_t (dir (getattr open search)))
                (allow sysadm_t bacula_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t bacula_log_t (dir (getattr open search)))
                (allow sysadm_t bacula_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t bacula_log_t (dir (getattr open search)))
                (allow sysadm_t bacula_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bacula_log_t (dir (getattr open search)))
                (allow sysadm_t bacula_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bacula_log_t (dir (getattr open search)))
                (allow sysadm_t bacula_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t bacula_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bacula_spool_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t bacula_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bacula_spool_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bacula_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bacula_spool_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t bacula_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bacula_spool_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bacula_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bacula_spool_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bacula_spool_t (dir (getattr open search)))
                (allow sysadm_t bacula_spool_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t bacula_spool_t (dir (getattr open search)))
                (allow sysadm_t bacula_spool_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t bacula_spool_t (dir (getattr open search)))
                (allow sysadm_t bacula_spool_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bacula_spool_t (dir (getattr open search)))
                (allow sysadm_t bacula_spool_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bacula_spool_t (dir (getattr open search)))
                (allow sysadm_t bacula_spool_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t bacula_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bacula_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t bacula_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bacula_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bacula_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bacula_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t bacula_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bacula_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bacula_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bacula_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bacula_var_lib_t (dir (getattr open search)))
                (allow sysadm_t bacula_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t bacula_var_lib_t (dir (getattr open search)))
                (allow sysadm_t bacula_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t bacula_var_lib_t (dir (getattr open search)))
                (allow sysadm_t bacula_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bacula_var_lib_t (dir (getattr open search)))
                (allow sysadm_t bacula_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bacula_var_lib_t (dir (getattr open search)))
                (allow sysadm_t bacula_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t bacula_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bacula_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t bacula_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bacula_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bacula_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bacula_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t bacula_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bacula_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bacula_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bacula_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bacula_runtime_t (dir (getattr open search)))
                (allow sysadm_t bacula_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t bacula_runtime_t (dir (getattr open search)))
                (allow sysadm_t bacula_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t bacula_runtime_t (dir (getattr open search)))
                (allow sysadm_t bacula_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bacula_runtime_t (dir (getattr open search)))
                (allow sysadm_t bacula_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bacula_runtime_t (dir (getattr open search)))
                (allow sysadm_t bacula_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_113
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_114
                (roleattributeset cil_gen_require ndc_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require named_t)
                (typeattributeset cil_gen_require named_tmp_t)
                (typeattributeset cil_gen_require named_log_t)
                (typeattributeset cil_gen_require named_cache_t)
                (typeattributeset cil_gen_require named_zone_t)
                (typeattributeset cil_gen_require named_initrc_exec_t)
                (typeattributeset cil_gen_require dnssec_t)
                (typeattributeset cil_gen_require ndc_t)
                (typeattributeset cil_gen_require named_conf_t)
                (typeattributeset cil_gen_require named_runtime_t)
                (typeattributeset cil_gen_require named_keytab_t)
                (typeattributeset cil_gen_require ndc_exec_t)
                (roleattributeset cil_gen_require ndc_roles)
                (roleattributeset ndc_roles (sysadm_r ))
                (allow sysadm_t named_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t ndc_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t named_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t ndc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t named_t (file (ioctl read getattr lock open)))
                (allow sysadm_t ndc_t (file (ioctl read getattr lock open)))
                (allow sysadm_t named_t (lnk_file (read getattr)))
                (allow sysadm_t ndc_t (lnk_file (read getattr)))
                (allow sysadm_t named_t (process (getattr)))
                (allow sysadm_t ndc_t (process (getattr)))
                (allow sysadm_t tmp_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t named_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t named_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t named_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t named_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t named_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t named_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t named_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t named_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t named_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t named_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t named_tmp_t (dir (getattr open search)))
                (allow sysadm_t named_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t named_tmp_t (dir (getattr open search)))
                (allow sysadm_t named_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t named_tmp_t (dir (getattr open search)))
                (allow sysadm_t named_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t named_tmp_t (dir (getattr open search)))
                (allow sysadm_t named_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t named_tmp_t (dir (getattr open search)))
                (allow sysadm_t named_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t named_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t named_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t named_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t named_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t named_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t named_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t named_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t named_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t named_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t named_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t named_log_t (dir (getattr open search)))
                (allow sysadm_t named_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t named_log_t (dir (getattr open search)))
                (allow sysadm_t named_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t named_log_t (dir (getattr open search)))
                (allow sysadm_t named_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t named_log_t (dir (getattr open search)))
                (allow sysadm_t named_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t named_log_t (dir (getattr open search)))
                (allow sysadm_t named_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t named_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t named_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t named_conf_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t named_keytab_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t named_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t named_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t named_conf_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t named_keytab_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t named_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t named_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t named_conf_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t named_keytab_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t named_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t named_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t named_conf_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t named_keytab_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t named_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t named_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t named_conf_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t named_keytab_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t named_conf_t (dir (getattr open search)))
                (allow sysadm_t named_keytab_t (dir (getattr open search)))
                (allow sysadm_t named_conf_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t named_keytab_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t named_conf_t (dir (getattr open search)))
                (allow sysadm_t named_keytab_t (dir (getattr open search)))
                (allow sysadm_t named_conf_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t named_keytab_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t named_conf_t (dir (getattr open search)))
                (allow sysadm_t named_keytab_t (dir (getattr open search)))
                (allow sysadm_t named_conf_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t named_keytab_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t named_conf_t (dir (getattr open search)))
                (allow sysadm_t named_keytab_t (dir (getattr open search)))
                (allow sysadm_t named_conf_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t named_keytab_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t named_conf_t (dir (getattr open search)))
                (allow sysadm_t named_keytab_t (dir (getattr open search)))
                (allow sysadm_t named_conf_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t named_keytab_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t named_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t named_zone_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dnssec_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t named_cache_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t named_zone_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t dnssec_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t named_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t named_zone_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dnssec_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t named_cache_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t named_zone_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dnssec_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t named_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t named_zone_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dnssec_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t named_cache_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t named_zone_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t dnssec_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t named_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t named_zone_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dnssec_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t named_cache_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t named_zone_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dnssec_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t named_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t named_zone_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dnssec_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t named_cache_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t named_zone_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dnssec_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t named_cache_t (dir (getattr open search)))
                (allow sysadm_t named_zone_t (dir (getattr open search)))
                (allow sysadm_t dnssec_t (dir (getattr open search)))
                (allow sysadm_t named_cache_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t named_zone_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t dnssec_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t named_cache_t (dir (getattr open search)))
                (allow sysadm_t named_zone_t (dir (getattr open search)))
                (allow sysadm_t dnssec_t (dir (getattr open search)))
                (allow sysadm_t named_cache_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t named_zone_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t dnssec_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t named_cache_t (dir (getattr open search)))
                (allow sysadm_t named_zone_t (dir (getattr open search)))
                (allow sysadm_t dnssec_t (dir (getattr open search)))
                (allow sysadm_t named_cache_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t named_zone_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dnssec_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t named_cache_t (dir (getattr open search)))
                (allow sysadm_t named_zone_t (dir (getattr open search)))
                (allow sysadm_t dnssec_t (dir (getattr open search)))
                (allow sysadm_t named_cache_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t named_zone_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dnssec_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t named_cache_t (dir (getattr open search)))
                (allow sysadm_t named_zone_t (dir (getattr open search)))
                (allow sysadm_t dnssec_t (dir (getattr open search)))
                (allow sysadm_t named_cache_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t named_zone_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dnssec_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t named_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t named_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t named_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t named_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t named_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t named_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t named_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t named_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t named_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t named_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t named_runtime_t (dir (getattr open search)))
                (allow sysadm_t named_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t named_runtime_t (dir (getattr open search)))
                (allow sysadm_t named_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t named_runtime_t (dir (getattr open search)))
                (allow sysadm_t named_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t named_runtime_t (dir (getattr open search)))
                (allow sysadm_t named_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t named_runtime_t (dir (getattr open search)))
                (allow sysadm_t named_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t ndc_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t ndc_t (process (transition)))
                (dontaudit sysadm_t ndc_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t ndc_exec_t process ndc_t)
                (allow ndc_t sysadm_t (fd (use)))
                (allow ndc_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow ndc_t sysadm_t (process (sigchld)))
                (optional sysadm_optional_115
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_116
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require bird_t)
                (typeattributeset cil_gen_require bird_etc_t)
                (typeattributeset cil_gen_require bird_log_t)
                (typeattributeset cil_gen_require bird_runtime_t)
                (typeattributeset cil_gen_require bird_initrc_exec_t)
                (allow sysadm_t bird_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t bird_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t bird_t (file (ioctl read getattr lock open)))
                (allow sysadm_t bird_t (lnk_file (read getattr)))
                (allow sysadm_t bird_t (process (getattr)))
                (allow sysadm_t etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t bird_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bird_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t bird_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bird_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bird_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bird_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t bird_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bird_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bird_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bird_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bird_etc_t (dir (getattr open search)))
                (allow sysadm_t bird_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t bird_etc_t (dir (getattr open search)))
                (allow sysadm_t bird_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t bird_etc_t (dir (getattr open search)))
                (allow sysadm_t bird_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bird_etc_t (dir (getattr open search)))
                (allow sysadm_t bird_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bird_etc_t (dir (getattr open search)))
                (allow sysadm_t bird_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t bird_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bird_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t bird_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bird_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bird_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bird_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t bird_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bird_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bird_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bird_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bird_log_t (dir (getattr open search)))
                (allow sysadm_t bird_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t bird_log_t (dir (getattr open search)))
                (allow sysadm_t bird_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t bird_log_t (dir (getattr open search)))
                (allow sysadm_t bird_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bird_log_t (dir (getattr open search)))
                (allow sysadm_t bird_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bird_log_t (dir (getattr open search)))
                (allow sysadm_t bird_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t bird_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bird_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t bird_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bird_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bird_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bird_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t bird_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bird_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bird_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bird_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bird_runtime_t (dir (getattr open search)))
                (allow sysadm_t bird_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t bird_runtime_t (dir (getattr open search)))
                (allow sysadm_t bird_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t bird_runtime_t (dir (getattr open search)))
                (allow sysadm_t bird_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bird_runtime_t (dir (getattr open search)))
                (allow sysadm_t bird_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bird_runtime_t (dir (getattr open search)))
                (allow sysadm_t bird_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bird_runtime_t (dir (getattr open search)))
                (allow sysadm_t bird_runtime_t (sock_file (write getattr append open)))
                (allow sysadm_t bird_t (unix_stream_socket (connectto)))
                (optional sysadm_optional_117
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_118
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require bitlbee_t)
                (typeattributeset cil_gen_require bitlbee_conf_t)
                (typeattributeset cil_gen_require bitlbee_var_t)
                (typeattributeset cil_gen_require bitlbee_initrc_exec_t)
                (typeattributeset cil_gen_require bitlbee_runtime_t)
                (typeattributeset cil_gen_require bitlbee_log_t)
                (typeattributeset cil_gen_require bitlbee_tmp_t)
                (allow sysadm_t bitlbee_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t bitlbee_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t bitlbee_t (file (ioctl read getattr lock open)))
                (allow sysadm_t bitlbee_t (lnk_file (read getattr)))
                (allow sysadm_t bitlbee_t (process (getattr)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t bitlbee_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bitlbee_conf_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t bitlbee_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bitlbee_conf_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bitlbee_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bitlbee_conf_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t bitlbee_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bitlbee_conf_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bitlbee_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bitlbee_conf_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bitlbee_conf_t (dir (getattr open search)))
                (allow sysadm_t bitlbee_conf_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t bitlbee_conf_t (dir (getattr open search)))
                (allow sysadm_t bitlbee_conf_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t bitlbee_conf_t (dir (getattr open search)))
                (allow sysadm_t bitlbee_conf_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bitlbee_conf_t (dir (getattr open search)))
                (allow sysadm_t bitlbee_conf_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bitlbee_conf_t (dir (getattr open search)))
                (allow sysadm_t bitlbee_conf_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t bitlbee_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bitlbee_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t bitlbee_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bitlbee_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bitlbee_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bitlbee_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t bitlbee_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bitlbee_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bitlbee_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bitlbee_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bitlbee_log_t (dir (getattr open search)))
                (allow sysadm_t bitlbee_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t bitlbee_log_t (dir (getattr open search)))
                (allow sysadm_t bitlbee_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t bitlbee_log_t (dir (getattr open search)))
                (allow sysadm_t bitlbee_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bitlbee_log_t (dir (getattr open search)))
                (allow sysadm_t bitlbee_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bitlbee_log_t (dir (getattr open search)))
                (allow sysadm_t bitlbee_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (getattr open search)))
                (allow sysadm_t bitlbee_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bitlbee_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t bitlbee_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bitlbee_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bitlbee_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bitlbee_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t bitlbee_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bitlbee_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bitlbee_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bitlbee_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bitlbee_tmp_t (dir (getattr open search)))
                (allow sysadm_t bitlbee_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t bitlbee_tmp_t (dir (getattr open search)))
                (allow sysadm_t bitlbee_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t bitlbee_tmp_t (dir (getattr open search)))
                (allow sysadm_t bitlbee_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bitlbee_tmp_t (dir (getattr open search)))
                (allow sysadm_t bitlbee_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bitlbee_tmp_t (dir (getattr open search)))
                (allow sysadm_t bitlbee_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t bitlbee_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bitlbee_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t bitlbee_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bitlbee_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bitlbee_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bitlbee_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t bitlbee_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bitlbee_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bitlbee_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bitlbee_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bitlbee_runtime_t (dir (getattr open search)))
                (allow sysadm_t bitlbee_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t bitlbee_runtime_t (dir (getattr open search)))
                (allow sysadm_t bitlbee_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t bitlbee_runtime_t (dir (getattr open search)))
                (allow sysadm_t bitlbee_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bitlbee_runtime_t (dir (getattr open search)))
                (allow sysadm_t bitlbee_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bitlbee_runtime_t (dir (getattr open search)))
                (allow sysadm_t bitlbee_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t bitlbee_var_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bitlbee_var_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t bitlbee_var_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bitlbee_var_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bitlbee_var_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bitlbee_var_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t bitlbee_var_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bitlbee_var_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bitlbee_var_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bitlbee_var_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bitlbee_var_t (dir (getattr open search)))
                (allow sysadm_t bitlbee_var_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t bitlbee_var_t (dir (getattr open search)))
                (allow sysadm_t bitlbee_var_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t bitlbee_var_t (dir (getattr open search)))
                (allow sysadm_t bitlbee_var_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bitlbee_var_t (dir (getattr open search)))
                (allow sysadm_t bitlbee_var_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bitlbee_var_t (dir (getattr open search)))
                (allow sysadm_t bitlbee_var_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_119
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_120
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require boinc_t)
                (typeattributeset cil_gen_require boinc_project_t)
                (typeattributeset cil_gen_require boinc_log_t)
                (typeattributeset cil_gen_require boinc_var_lib_t)
                (typeattributeset cil_gen_require boinc_tmp_t)
                (typeattributeset cil_gen_require boinc_initrc_exec_t)
                (typeattributeset cil_gen_require boinc_project_var_lib_t)
                (typeattributeset cil_gen_require boinc_project_tmp_t)
                (allow sysadm_t boinc_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t boinc_project_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t boinc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t boinc_project_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t boinc_t (file (ioctl read getattr lock open)))
                (allow sysadm_t boinc_project_t (file (ioctl read getattr lock open)))
                (allow sysadm_t boinc_t (lnk_file (read getattr)))
                (allow sysadm_t boinc_project_t (lnk_file (read getattr)))
                (allow sysadm_t boinc_t (process (getattr)))
                (allow sysadm_t boinc_project_t (process (getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t boinc_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t boinc_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t boinc_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t boinc_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t boinc_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t boinc_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t boinc_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t boinc_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t boinc_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t boinc_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t boinc_log_t (dir (getattr open search)))
                (allow sysadm_t boinc_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t boinc_log_t (dir (getattr open search)))
                (allow sysadm_t boinc_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t boinc_log_t (dir (getattr open search)))
                (allow sysadm_t boinc_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t boinc_log_t (dir (getattr open search)))
                (allow sysadm_t boinc_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t boinc_log_t (dir (getattr open search)))
                (allow sysadm_t boinc_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (getattr open search)))
                (allow sysadm_t boinc_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t boinc_project_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t boinc_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t boinc_project_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t boinc_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t boinc_project_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t boinc_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t boinc_project_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t boinc_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t boinc_project_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t boinc_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t boinc_project_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t boinc_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t boinc_project_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t boinc_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t boinc_project_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t boinc_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t boinc_project_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t boinc_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t boinc_project_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t boinc_tmp_t (dir (getattr open search)))
                (allow sysadm_t boinc_project_tmp_t (dir (getattr open search)))
                (allow sysadm_t boinc_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t boinc_project_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t boinc_tmp_t (dir (getattr open search)))
                (allow sysadm_t boinc_project_tmp_t (dir (getattr open search)))
                (allow sysadm_t boinc_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t boinc_project_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t boinc_tmp_t (dir (getattr open search)))
                (allow sysadm_t boinc_project_tmp_t (dir (getattr open search)))
                (allow sysadm_t boinc_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t boinc_project_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t boinc_tmp_t (dir (getattr open search)))
                (allow sysadm_t boinc_project_tmp_t (dir (getattr open search)))
                (allow sysadm_t boinc_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t boinc_project_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t boinc_tmp_t (dir (getattr open search)))
                (allow sysadm_t boinc_project_tmp_t (dir (getattr open search)))
                (allow sysadm_t boinc_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t boinc_project_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t boinc_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t boinc_project_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t boinc_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t boinc_project_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t boinc_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t boinc_project_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t boinc_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t boinc_project_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t boinc_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t boinc_project_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t boinc_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t boinc_project_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t boinc_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t boinc_project_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t boinc_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t boinc_project_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t boinc_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t boinc_project_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t boinc_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t boinc_project_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t boinc_var_lib_t (dir (getattr open search)))
                (allow sysadm_t boinc_project_var_lib_t (dir (getattr open search)))
                (allow sysadm_t boinc_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t boinc_project_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t boinc_var_lib_t (dir (getattr open search)))
                (allow sysadm_t boinc_project_var_lib_t (dir (getattr open search)))
                (allow sysadm_t boinc_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t boinc_project_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t boinc_var_lib_t (dir (getattr open search)))
                (allow sysadm_t boinc_project_var_lib_t (dir (getattr open search)))
                (allow sysadm_t boinc_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t boinc_project_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t boinc_var_lib_t (dir (getattr open search)))
                (allow sysadm_t boinc_project_var_lib_t (dir (getattr open search)))
                (allow sysadm_t boinc_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t boinc_project_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t boinc_var_lib_t (dir (getattr open search)))
                (allow sysadm_t boinc_project_var_lib_t (dir (getattr open search)))
                (allow sysadm_t boinc_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t boinc_project_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_121
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_122
                (roleattributeset cil_gen_require bootloader_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require bootloader_t)
                (typeattributeset cil_gen_require bootloader_exec_t)
                (roleattributeset cil_gen_require bootloader_roles)
                (roleattributeset bootloader_roles (sysadm_r ))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t bootloader_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t bootloader_t (process (transition)))
                (dontaudit sysadm_t bootloader_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t bootloader_exec_t process bootloader_t)
                (allow bootloader_t sysadm_t (fd (use)))
                (allow bootloader_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow bootloader_t sysadm_t (process (sigchld)))
            )
            (optional sysadm_optional_123
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require httpd_bugzilla_script_t)
                (typeattributeset cil_gen_require httpd_bugzilla_content_t)
                (typeattributeset cil_gen_require httpd_bugzilla_ra_content_t)
                (typeattributeset cil_gen_require httpd_bugzilla_rw_content_t)
                (typeattributeset cil_gen_require httpd_bugzilla_script_exec_t)
                (typeattributeset cil_gen_require httpd_bugzilla_htaccess_t)
                (typeattributeset cil_gen_require httpd_sys_content_t)
                (allow sysadm_t httpd_bugzilla_script_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t httpd_bugzilla_script_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t httpd_bugzilla_script_t (file (ioctl read getattr lock open)))
                (allow sysadm_t httpd_bugzilla_script_t (lnk_file (read getattr)))
                (allow sysadm_t httpd_bugzilla_script_t (process (getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t httpd_bugzilla_script_exec_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_bugzilla_script_exec_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t httpd_bugzilla_script_exec_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_bugzilla_script_exec_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t httpd_bugzilla_script_exec_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_bugzilla_script_exec_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t httpd_bugzilla_script_exec_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_bugzilla_script_exec_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t httpd_bugzilla_script_exec_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_bugzilla_script_exec_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t httpd_bugzilla_script_exec_t (dir (getattr open search)))
                (allow sysadm_t httpd_bugzilla_script_exec_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_bugzilla_script_exec_t (dir (getattr open search)))
                (allow sysadm_t httpd_bugzilla_script_exec_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_bugzilla_script_exec_t (dir (getattr open search)))
                (allow sysadm_t httpd_bugzilla_script_exec_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_bugzilla_script_exec_t (dir (getattr open search)))
                (allow sysadm_t httpd_bugzilla_script_exec_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_bugzilla_script_exec_t (dir (getattr open search)))
                (allow sysadm_t httpd_bugzilla_script_exec_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_bugzilla_script_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_bugzilla_script_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t httpd_bugzilla_script_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_bugzilla_script_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t httpd_bugzilla_script_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_bugzilla_script_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t httpd_bugzilla_script_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_bugzilla_script_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t httpd_bugzilla_script_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_bugzilla_script_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t httpd_bugzilla_script_t (dir (getattr open search)))
                (allow sysadm_t httpd_bugzilla_script_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_bugzilla_script_t (dir (getattr open search)))
                (allow sysadm_t httpd_bugzilla_script_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_bugzilla_script_t (dir (getattr open search)))
                (allow sysadm_t httpd_bugzilla_script_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_bugzilla_script_t (dir (getattr open search)))
                (allow sysadm_t httpd_bugzilla_script_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_bugzilla_script_t (dir (getattr open search)))
                (allow sysadm_t httpd_bugzilla_script_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_bugzilla_content_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_bugzilla_content_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t httpd_bugzilla_content_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_bugzilla_content_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t httpd_bugzilla_content_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_bugzilla_content_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t httpd_bugzilla_content_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_bugzilla_content_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t httpd_bugzilla_content_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_bugzilla_content_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t httpd_bugzilla_content_t (dir (getattr open search)))
                (allow sysadm_t httpd_bugzilla_content_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_bugzilla_content_t (dir (getattr open search)))
                (allow sysadm_t httpd_bugzilla_content_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_bugzilla_content_t (dir (getattr open search)))
                (allow sysadm_t httpd_bugzilla_content_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_bugzilla_content_t (dir (getattr open search)))
                (allow sysadm_t httpd_bugzilla_content_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_bugzilla_content_t (dir (getattr open search)))
                (allow sysadm_t httpd_bugzilla_content_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_bugzilla_htaccess_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_bugzilla_htaccess_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t httpd_bugzilla_htaccess_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_bugzilla_htaccess_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t httpd_bugzilla_htaccess_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_bugzilla_htaccess_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t httpd_bugzilla_htaccess_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_bugzilla_htaccess_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t httpd_bugzilla_htaccess_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_bugzilla_htaccess_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t httpd_bugzilla_htaccess_t (dir (getattr open search)))
                (allow sysadm_t httpd_bugzilla_htaccess_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_bugzilla_htaccess_t (dir (getattr open search)))
                (allow sysadm_t httpd_bugzilla_htaccess_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_bugzilla_htaccess_t (dir (getattr open search)))
                (allow sysadm_t httpd_bugzilla_htaccess_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_bugzilla_htaccess_t (dir (getattr open search)))
                (allow sysadm_t httpd_bugzilla_htaccess_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_bugzilla_htaccess_t (dir (getattr open search)))
                (allow sysadm_t httpd_bugzilla_htaccess_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_bugzilla_ra_content_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_bugzilla_ra_content_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t httpd_bugzilla_ra_content_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_bugzilla_ra_content_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t httpd_bugzilla_ra_content_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_bugzilla_ra_content_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t httpd_bugzilla_ra_content_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_bugzilla_ra_content_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t httpd_bugzilla_ra_content_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_bugzilla_ra_content_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t httpd_bugzilla_ra_content_t (dir (getattr open search)))
                (allow sysadm_t httpd_bugzilla_ra_content_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_bugzilla_ra_content_t (dir (getattr open search)))
                (allow sysadm_t httpd_bugzilla_ra_content_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_bugzilla_ra_content_t (dir (getattr open search)))
                (allow sysadm_t httpd_bugzilla_ra_content_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_bugzilla_ra_content_t (dir (getattr open search)))
                (allow sysadm_t httpd_bugzilla_ra_content_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_bugzilla_ra_content_t (dir (getattr open search)))
                (allow sysadm_t httpd_bugzilla_ra_content_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (getattr open search)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t httpd_bugzilla_rw_content_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_bugzilla_rw_content_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t httpd_bugzilla_rw_content_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_bugzilla_rw_content_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t httpd_bugzilla_rw_content_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_bugzilla_rw_content_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t httpd_bugzilla_rw_content_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_bugzilla_rw_content_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t httpd_bugzilla_rw_content_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t httpd_bugzilla_rw_content_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t httpd_bugzilla_rw_content_t (dir (getattr open search)))
                (allow sysadm_t httpd_bugzilla_rw_content_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_bugzilla_rw_content_t (dir (getattr open search)))
                (allow sysadm_t httpd_bugzilla_rw_content_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_bugzilla_rw_content_t (dir (getattr open search)))
                (allow sysadm_t httpd_bugzilla_rw_content_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_bugzilla_rw_content_t (dir (getattr open search)))
                (allow sysadm_t httpd_bugzilla_rw_content_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_bugzilla_rw_content_t (dir (getattr open search)))
                (allow sysadm_t httpd_bugzilla_rw_content_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_sys_content_t (dir (getattr open search)))
                (allow sysadm_t httpd_sys_content_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t var_t (dir (getattr open search)))
            )
            (optional sysadm_optional_124
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require cachefilesd_t)
                (typeattributeset cil_gen_require cachefilesd_initrc_exec_t)
                (typeattributeset cil_gen_require cachefilesd_cache_t)
                (typeattributeset cil_gen_require cachefilesd_runtime_t)
                (allow sysadm_t cachefilesd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t cachefilesd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t cachefilesd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t cachefilesd_t (lnk_file (read getattr)))
                (allow sysadm_t cachefilesd_t (process (getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t cachefilesd_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cachefilesd_cache_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t cachefilesd_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cachefilesd_cache_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cachefilesd_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cachefilesd_cache_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t cachefilesd_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cachefilesd_cache_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cachefilesd_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cachefilesd_cache_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cachefilesd_cache_t (dir (getattr open search)))
                (allow sysadm_t cachefilesd_cache_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t cachefilesd_cache_t (dir (getattr open search)))
                (allow sysadm_t cachefilesd_cache_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t cachefilesd_cache_t (dir (getattr open search)))
                (allow sysadm_t cachefilesd_cache_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cachefilesd_cache_t (dir (getattr open search)))
                (allow sysadm_t cachefilesd_cache_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cachefilesd_cache_t (dir (getattr open search)))
                (allow sysadm_t cachefilesd_cache_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t cachefilesd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cachefilesd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t cachefilesd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cachefilesd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cachefilesd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cachefilesd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t cachefilesd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cachefilesd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cachefilesd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cachefilesd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cachefilesd_runtime_t (dir (getattr open search)))
                (allow sysadm_t cachefilesd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t cachefilesd_runtime_t (dir (getattr open search)))
                (allow sysadm_t cachefilesd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t cachefilesd_runtime_t (dir (getattr open search)))
                (allow sysadm_t cachefilesd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cachefilesd_runtime_t (dir (getattr open search)))
                (allow sysadm_t cachefilesd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cachefilesd_runtime_t (dir (getattr open search)))
                (allow sysadm_t cachefilesd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_125
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_126
                (roleattributeset cil_gen_require calamaris_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require httpd_sys_content_t)
                (typeattributeset cil_gen_require calamaris_t)
                (typeattributeset cil_gen_require calamaris_log_t)
                (typeattributeset cil_gen_require calamaris_www_t)
                (typeattributeset cil_gen_require lightsquid_t)
                (typeattributeset cil_gen_require lightsquid_exec_t)
                (roleattributeset cil_gen_require calamaris_roles)
                (roleattributeset calamaris_roles (sysadm_r ))
                (allow sysadm_t calamaris_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t calamaris_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t calamaris_t (file (ioctl read getattr lock open)))
                (allow sysadm_t calamaris_t (lnk_file (read getattr)))
                (allow sysadm_t calamaris_t (process (getattr)))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t lightsquid_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t lightsquid_t (process (transition)))
                (dontaudit sysadm_t lightsquid_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t lightsquid_exec_t process lightsquid_t)
                (allow lightsquid_t sysadm_t (fd (use)))
                (allow lightsquid_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow lightsquid_t sysadm_t (process (sigchld)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t calamaris_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t calamaris_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t calamaris_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t calamaris_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t calamaris_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t calamaris_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t calamaris_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t calamaris_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t calamaris_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t calamaris_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t calamaris_log_t (dir (getattr open search)))
                (allow sysadm_t calamaris_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t calamaris_log_t (dir (getattr open search)))
                (allow sysadm_t calamaris_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t calamaris_log_t (dir (getattr open search)))
                (allow sysadm_t calamaris_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t calamaris_log_t (dir (getattr open search)))
                (allow sysadm_t calamaris_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t calamaris_log_t (dir (getattr open search)))
                (allow sysadm_t calamaris_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_sys_content_t (dir (getattr open search)))
                (allow sysadm_t httpd_sys_content_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t calamaris_www_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t calamaris_www_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t calamaris_www_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t calamaris_www_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t calamaris_www_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t calamaris_www_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t calamaris_www_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t calamaris_www_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t calamaris_www_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t calamaris_www_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t calamaris_www_t (dir (getattr open search)))
                (allow sysadm_t calamaris_www_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t calamaris_www_t (dir (getattr open search)))
                (allow sysadm_t calamaris_www_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t calamaris_www_t (dir (getattr open search)))
                (allow sysadm_t calamaris_www_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t calamaris_www_t (dir (getattr open search)))
                (allow sysadm_t calamaris_www_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t calamaris_www_t (dir (getattr open search)))
                (allow sysadm_t calamaris_www_t (sock_file (getattr relabelfrom relabelto)))
            )
            (optional sysadm_optional_127
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require canna_t)
                (typeattributeset cil_gen_require canna_runtime_t)
                (typeattributeset cil_gen_require canna_log_t)
                (typeattributeset cil_gen_require canna_var_lib_t)
                (typeattributeset cil_gen_require canna_initrc_exec_t)
                (allow sysadm_t canna_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t canna_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t canna_t (file (ioctl read getattr lock open)))
                (allow sysadm_t canna_t (lnk_file (read getattr)))
                (allow sysadm_t canna_t (process (getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t canna_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t canna_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t canna_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t canna_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t canna_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t canna_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t canna_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t canna_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t canna_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t canna_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t canna_log_t (dir (getattr open search)))
                (allow sysadm_t canna_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t canna_log_t (dir (getattr open search)))
                (allow sysadm_t canna_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t canna_log_t (dir (getattr open search)))
                (allow sysadm_t canna_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t canna_log_t (dir (getattr open search)))
                (allow sysadm_t canna_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t canna_log_t (dir (getattr open search)))
                (allow sysadm_t canna_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t canna_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t canna_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t canna_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t canna_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t canna_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t canna_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t canna_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t canna_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t canna_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t canna_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t canna_var_lib_t (dir (getattr open search)))
                (allow sysadm_t canna_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t canna_var_lib_t (dir (getattr open search)))
                (allow sysadm_t canna_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t canna_var_lib_t (dir (getattr open search)))
                (allow sysadm_t canna_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t canna_var_lib_t (dir (getattr open search)))
                (allow sysadm_t canna_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t canna_var_lib_t (dir (getattr open search)))
                (allow sysadm_t canna_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t canna_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t canna_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t canna_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t canna_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t canna_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t canna_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t canna_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t canna_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t canna_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t canna_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t canna_runtime_t (dir (getattr open search)))
                (allow sysadm_t canna_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t canna_runtime_t (dir (getattr open search)))
                (allow sysadm_t canna_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t canna_runtime_t (dir (getattr open search)))
                (allow sysadm_t canna_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t canna_runtime_t (dir (getattr open search)))
                (allow sysadm_t canna_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t canna_runtime_t (dir (getattr open search)))
                (allow sysadm_t canna_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_128
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_129
                (typeattributeset cil_gen_require certbot_t)
                (typeattributeset cil_gen_require certbot_exec_t)
                (roleattributeset cil_gen_require sysadm_r)
                (roletype sysadm_r certbot_t)
                (allow sysadm_t certbot_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t certbot_t (process (transition)))
                (dontaudit sysadm_t certbot_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t certbot_exec_t process certbot_t)
                (allow certbot_t sysadm_t (fd (use)))
                (allow certbot_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow certbot_t sysadm_t (process (sigchld)))
            )
            (optional sysadm_optional_130
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require cert_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require certmaster_t)
                (typeattributeset cil_gen_require certmaster_runtime_t)
                (typeattributeset cil_gen_require certmaster_var_lib_t)
                (typeattributeset cil_gen_require certmaster_etc_rw_t)
                (typeattributeset cil_gen_require certmaster_var_log_t)
                (typeattributeset cil_gen_require certmaster_initrc_exec_t)
                (allow sysadm_t certmaster_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t certmaster_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t certmaster_t (file (ioctl read getattr lock open)))
                (allow sysadm_t certmaster_t (lnk_file (read getattr)))
                (allow sysadm_t certmaster_t (process (getattr)))
                (allow sysadm_t etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t cert_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cert_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t cert_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cert_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cert_t (dir (getattr open search)))
                (allow sysadm_t cert_t (lnk_file (read getattr)))
                (allow sysadm_t certmaster_etc_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t certmaster_etc_rw_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t certmaster_etc_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t certmaster_etc_rw_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t certmaster_etc_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t certmaster_etc_rw_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t certmaster_etc_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t certmaster_etc_rw_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t certmaster_etc_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t certmaster_etc_rw_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t certmaster_etc_rw_t (dir (getattr open search)))
                (allow sysadm_t certmaster_etc_rw_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t certmaster_etc_rw_t (dir (getattr open search)))
                (allow sysadm_t certmaster_etc_rw_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t certmaster_etc_rw_t (dir (getattr open search)))
                (allow sysadm_t certmaster_etc_rw_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t certmaster_etc_rw_t (dir (getattr open search)))
                (allow sysadm_t certmaster_etc_rw_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t certmaster_etc_rw_t (dir (getattr open search)))
                (allow sysadm_t certmaster_etc_rw_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t certmaster_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t certmaster_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t certmaster_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t certmaster_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t certmaster_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t certmaster_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t certmaster_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t certmaster_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t certmaster_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t certmaster_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t certmaster_runtime_t (dir (getattr open search)))
                (allow sysadm_t certmaster_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t certmaster_runtime_t (dir (getattr open search)))
                (allow sysadm_t certmaster_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t certmaster_runtime_t (dir (getattr open search)))
                (allow sysadm_t certmaster_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t certmaster_runtime_t (dir (getattr open search)))
                (allow sysadm_t certmaster_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t certmaster_runtime_t (dir (getattr open search)))
                (allow sysadm_t certmaster_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t certmaster_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t certmaster_var_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t certmaster_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t certmaster_var_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t certmaster_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t certmaster_var_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t certmaster_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t certmaster_var_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t certmaster_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t certmaster_var_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t certmaster_var_log_t (dir (getattr open search)))
                (allow sysadm_t certmaster_var_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t certmaster_var_log_t (dir (getattr open search)))
                (allow sysadm_t certmaster_var_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t certmaster_var_log_t (dir (getattr open search)))
                (allow sysadm_t certmaster_var_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t certmaster_var_log_t (dir (getattr open search)))
                (allow sysadm_t certmaster_var_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t certmaster_var_log_t (dir (getattr open search)))
                (allow sysadm_t certmaster_var_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t certmaster_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t certmaster_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t certmaster_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t certmaster_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t certmaster_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t certmaster_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t certmaster_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t certmaster_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t certmaster_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t certmaster_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t certmaster_var_lib_t (dir (getattr open search)))
                (allow sysadm_t certmaster_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t certmaster_var_lib_t (dir (getattr open search)))
                (allow sysadm_t certmaster_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t certmaster_var_lib_t (dir (getattr open search)))
                (allow sysadm_t certmaster_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t certmaster_var_lib_t (dir (getattr open search)))
                (allow sysadm_t certmaster_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t certmaster_var_lib_t (dir (getattr open search)))
                (allow sysadm_t certmaster_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_131
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_132
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require certmonger_t)
                (typeattributeset cil_gen_require certmonger_initrc_exec_t)
                (typeattributeset cil_gen_require certmonger_var_lib_t)
                (typeattributeset cil_gen_require certmonger_runtime_t)
                (allow sysadm_t certmonger_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t certmonger_t (file (ioctl read getattr lock open)))
                (allow sysadm_t certmonger_t (lnk_file (read getattr)))
                (allow sysadm_t certmonger_t (process (getattr)))
                (allow sysadm_t certmonger_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t certmonger_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t certmonger_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t certmonger_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t certmonger_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t certmonger_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t certmonger_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t certmonger_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t certmonger_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t certmonger_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t certmonger_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t certmonger_var_lib_t (dir (getattr open search)))
                (allow sysadm_t certmonger_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t certmonger_var_lib_t (dir (getattr open search)))
                (allow sysadm_t certmonger_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t certmonger_var_lib_t (dir (getattr open search)))
                (allow sysadm_t certmonger_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t certmonger_var_lib_t (dir (getattr open search)))
                (allow sysadm_t certmonger_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t certmonger_var_lib_t (dir (getattr open search)))
                (allow sysadm_t certmonger_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t certmonger_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t certmonger_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t certmonger_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t certmonger_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t certmonger_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t certmonger_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t certmonger_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t certmonger_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t certmonger_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t certmonger_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t certmonger_runtime_t (dir (getattr open search)))
                (allow sysadm_t certmonger_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t certmonger_runtime_t (dir (getattr open search)))
                (allow sysadm_t certmonger_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t certmonger_runtime_t (dir (getattr open search)))
                (allow sysadm_t certmonger_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t certmonger_runtime_t (dir (getattr open search)))
                (allow sysadm_t certmonger_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t certmonger_runtime_t (dir (getattr open search)))
                (allow sysadm_t certmonger_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_133
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_134
                (roleattributeset cil_gen_require certwatch_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require certwatch_exec_t)
                (typeattributeset cil_gen_require certwatch_t)
                (roleattributeset cil_gen_require certwatch_roles)
                (roleattributeset certwatch_roles (sysadm_r ))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t certwatch_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t certwatch_t (process (transition)))
                (dontaudit sysadm_t certwatch_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t certwatch_exec_t process certwatch_t)
                (allow certwatch_t sysadm_t (fd (use)))
                (allow certwatch_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow certwatch_t sysadm_t (process (sigchld)))
            )
            (optional sysadm_optional_135
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require cfengine_domain)
                (typeattributeset cil_gen_require cfengine_initrc_exec_t)
                (typeattributeset cil_gen_require cfengine_log_t)
                (typeattributeset cil_gen_require cfengine_var_lib_t)
                (allow sysadm_t cfengine_domain (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t cfengine_domain (dir (ioctl read getattr lock open search)))
                (allow sysadm_t cfengine_domain (file (ioctl read getattr lock open)))
                (allow sysadm_t cfengine_domain (lnk_file (read getattr)))
                (allow sysadm_t cfengine_domain (process (getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t cfengine_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cfengine_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cfengine_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t cfengine_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t cfengine_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cfengine_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cfengine_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cfengine_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cfengine_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cfengine_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cfengine_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t cfengine_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t cfengine_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cfengine_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cfengine_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cfengine_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cfengine_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cfengine_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cfengine_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cfengine_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cfengine_log_t (dir (getattr open search)))
                (allow sysadm_t cfengine_var_lib_t (dir (getattr open search)))
                (allow sysadm_t cfengine_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t cfengine_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t cfengine_log_t (dir (getattr open search)))
                (allow sysadm_t cfengine_var_lib_t (dir (getattr open search)))
                (allow sysadm_t cfengine_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t cfengine_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t cfengine_log_t (dir (getattr open search)))
                (allow sysadm_t cfengine_var_lib_t (dir (getattr open search)))
                (allow sysadm_t cfengine_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cfengine_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cfengine_log_t (dir (getattr open search)))
                (allow sysadm_t cfengine_var_lib_t (dir (getattr open search)))
                (allow sysadm_t cfengine_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cfengine_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cfengine_log_t (dir (getattr open search)))
                (allow sysadm_t cfengine_var_lib_t (dir (getattr open search)))
                (allow sysadm_t cfengine_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cfengine_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_136
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_137
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require cgred_t)
                (typeattributeset cil_gen_require cgconfig_t)
                (typeattributeset cil_gen_require cgred_runtime_t)
                (typeattributeset cil_gen_require cgconfig_etc_t)
                (typeattributeset cil_gen_require cgconfig_initrc_exec_t)
                (typeattributeset cil_gen_require cgred_initrc_exec_t)
                (typeattributeset cil_gen_require cgrules_etc_t)
                (typeattributeset cil_gen_require cgclear_t)
                (typeattributeset cil_gen_require cgclear_exec_t)
                (roleattributeset cil_gen_require sysadm_r)
                (roletype sysadm_r cgclear_t)
                (allow sysadm_t cgred_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t cgconfig_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t cgclear_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t cgred_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t cgconfig_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t cgclear_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t cgred_t (file (ioctl read getattr lock open)))
                (allow sysadm_t cgconfig_t (file (ioctl read getattr lock open)))
                (allow sysadm_t cgclear_t (file (ioctl read getattr lock open)))
                (allow sysadm_t cgred_t (lnk_file (read getattr)))
                (allow sysadm_t cgconfig_t (lnk_file (read getattr)))
                (allow sysadm_t cgclear_t (lnk_file (read getattr)))
                (allow sysadm_t cgred_t (process (getattr)))
                (allow sysadm_t cgconfig_t (process (getattr)))
                (allow sysadm_t cgclear_t (process (getattr)))
                (allow sysadm_t cgconfig_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cgrules_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cgconfig_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t cgrules_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t cgconfig_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cgrules_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cgconfig_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cgrules_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cgconfig_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cgrules_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cgconfig_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t cgrules_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t cgconfig_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cgrules_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cgconfig_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cgrules_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cgconfig_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cgrules_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cgconfig_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cgrules_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cgconfig_etc_t (dir (getattr open search)))
                (allow sysadm_t cgrules_etc_t (dir (getattr open search)))
                (allow sysadm_t cgconfig_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t cgrules_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t cgconfig_etc_t (dir (getattr open search)))
                (allow sysadm_t cgrules_etc_t (dir (getattr open search)))
                (allow sysadm_t cgconfig_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t cgrules_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t cgconfig_etc_t (dir (getattr open search)))
                (allow sysadm_t cgrules_etc_t (dir (getattr open search)))
                (allow sysadm_t cgconfig_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cgrules_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cgconfig_etc_t (dir (getattr open search)))
                (allow sysadm_t cgrules_etc_t (dir (getattr open search)))
                (allow sysadm_t cgconfig_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cgrules_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cgconfig_etc_t (dir (getattr open search)))
                (allow sysadm_t cgrules_etc_t (dir (getattr open search)))
                (allow sysadm_t cgconfig_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cgrules_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t cgred_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cgred_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t cgred_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cgred_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cgred_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cgred_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t cgred_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cgred_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cgred_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cgred_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cgred_runtime_t (dir (getattr open search)))
                (allow sysadm_t cgred_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t cgred_runtime_t (dir (getattr open search)))
                (allow sysadm_t cgred_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t cgred_runtime_t (dir (getattr open search)))
                (allow sysadm_t cgred_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cgred_runtime_t (dir (getattr open search)))
                (allow sysadm_t cgred_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cgred_runtime_t (dir (getattr open search)))
                (allow sysadm_t cgred_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t cgclear_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t cgclear_t (process (transition)))
                (dontaudit sysadm_t cgclear_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t cgclear_exec_t process cgclear_t)
                (allow cgclear_t sysadm_t (fd (use)))
                (allow cgclear_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow cgclear_t sysadm_t (process (sigchld)))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (optional sysadm_optional_138
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                    (optional sysadm_optional_139
                        (roleattributeset cil_gen_require run_init_roles)
                        (typeattributeset cil_gen_require bin_t)
                        (typeattributeset cil_gen_require usr_t)
                        (typeattributeset cil_gen_require run_init_t)
                        (typeattributeset cil_gen_require run_init_exec_t)
                        (roleattributeset cil_gen_require run_init_roles)
                        (roleattributeset run_init_roles (sysadm_r ))
                        (allow sysadm_t usr_t (dir (getattr open search)))
                        (allow sysadm_t bin_t (dir (getattr open search)))
                        (allow sysadm_t bin_t (lnk_file (read getattr)))
                        (allow sysadm_t usr_t (dir (getattr open search)))
                        (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                        (allow sysadm_t run_init_t (process (transition)))
                        (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                        (typetransition sysadm_t run_init_exec_t process run_init_t)
                        (allow run_init_t sysadm_t (fd (use)))
                        (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                        (allow run_init_t sysadm_t (process (sigchld)))
                    )
                )
            )
            (optional sysadm_optional_140
                (roleattributeset cil_gen_require chkrootkit_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require chkrootkit_t)
                (typeattributeset cil_gen_require chkrootkit_exec_t)
                (roleattributeset cil_gen_require chkrootkit_roles)
                (roleattributeset chkrootkit_roles (sysadm_r ))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t chkrootkit_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t chkrootkit_t (process (transition)))
                (dontaudit sysadm_t chkrootkit_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t chkrootkit_exec_t process chkrootkit_t)
                (allow chkrootkit_t sysadm_t (fd (use)))
                (allow chkrootkit_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow chkrootkit_t sysadm_t (process (sigchld)))
            )
            (optional sysadm_optional_141
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require chronyd_t)
                (typeattributeset cil_gen_require chronyd_var_log_t)
                (typeattributeset cil_gen_require chronyd_runtime_t)
                (typeattributeset cil_gen_require chronyd_var_lib_t)
                (typeattributeset cil_gen_require chronyd_initrc_exec_t)
                (typeattributeset cil_gen_require chronyd_keys_t)
                (allow sysadm_t chronyd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t chronyd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t chronyd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t chronyd_t (lnk_file (read getattr)))
                (allow sysadm_t chronyd_t (process (getattr)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t chronyd_keys_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t chronyd_keys_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t chronyd_keys_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t chronyd_keys_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t chronyd_keys_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t chronyd_keys_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t chronyd_keys_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t chronyd_keys_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t chronyd_keys_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t chronyd_keys_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t chronyd_keys_t (dir (getattr open search)))
                (allow sysadm_t chronyd_keys_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t chronyd_keys_t (dir (getattr open search)))
                (allow sysadm_t chronyd_keys_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t chronyd_keys_t (dir (getattr open search)))
                (allow sysadm_t chronyd_keys_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t chronyd_keys_t (dir (getattr open search)))
                (allow sysadm_t chronyd_keys_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t chronyd_keys_t (dir (getattr open search)))
                (allow sysadm_t chronyd_keys_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t chronyd_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t chronyd_var_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t chronyd_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t chronyd_var_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t chronyd_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t chronyd_var_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t chronyd_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t chronyd_var_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t chronyd_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t chronyd_var_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t chronyd_var_log_t (dir (getattr open search)))
                (allow sysadm_t chronyd_var_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t chronyd_var_log_t (dir (getattr open search)))
                (allow sysadm_t chronyd_var_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t chronyd_var_log_t (dir (getattr open search)))
                (allow sysadm_t chronyd_var_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t chronyd_var_log_t (dir (getattr open search)))
                (allow sysadm_t chronyd_var_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t chronyd_var_log_t (dir (getattr open search)))
                (allow sysadm_t chronyd_var_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t chronyd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t chronyd_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t chronyd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t chronyd_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t chronyd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t chronyd_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t chronyd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t chronyd_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t chronyd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t chronyd_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t chronyd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t chronyd_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t chronyd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t chronyd_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t chronyd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t chronyd_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t chronyd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t chronyd_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t chronyd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t chronyd_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t chronyd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t chronyd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t chronyd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t chronyd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t chronyd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t chronyd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t chronyd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t chronyd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t chronyd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t chronyd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t chronyd_runtime_t (dir (getattr open search)))
                (allow sysadm_t chronyd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t chronyd_runtime_t (dir (getattr open search)))
                (allow sysadm_t chronyd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t chronyd_runtime_t (dir (getattr open search)))
                (allow sysadm_t chronyd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t chronyd_runtime_t (dir (getattr open search)))
                (allow sysadm_t chronyd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t chronyd_runtime_t (dir (getattr open search)))
                (allow sysadm_t chronyd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_142
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_143
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require clamd_t)
                (typeattributeset cil_gen_require clamd_etc_t)
                (typeattributeset cil_gen_require clamd_tmp_t)
                (typeattributeset cil_gen_require clamd_var_log_t)
                (typeattributeset cil_gen_require clamd_var_lib_t)
                (typeattributeset cil_gen_require clamd_initrc_exec_t)
                (typeattributeset cil_gen_require clamd_runtime_t)
                (typeattributeset cil_gen_require clamscan_t)
                (typeattributeset cil_gen_require clamscan_tmp_t)
                (typeattributeset cil_gen_require freshclam_t)
                (typeattributeset cil_gen_require freshclam_var_log_t)
                (allow sysadm_t clamd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t clamscan_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t freshclam_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t clamd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t clamscan_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t freshclam_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t clamd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t clamscan_t (file (ioctl read getattr lock open)))
                (allow sysadm_t freshclam_t (file (ioctl read getattr lock open)))
                (allow sysadm_t clamd_t (lnk_file (read getattr)))
                (allow sysadm_t clamscan_t (lnk_file (read getattr)))
                (allow sysadm_t freshclam_t (lnk_file (read getattr)))
                (allow sysadm_t clamd_t (process (getattr)))
                (allow sysadm_t clamscan_t (process (getattr)))
                (allow sysadm_t freshclam_t (process (getattr)))
                (allow sysadm_t etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t clamd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t clamd_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t clamd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t clamd_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t clamd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t clamd_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t clamd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t clamd_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t clamd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t clamd_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t clamd_etc_t (dir (getattr open search)))
                (allow sysadm_t clamd_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t clamd_etc_t (dir (getattr open search)))
                (allow sysadm_t clamd_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t clamd_etc_t (dir (getattr open search)))
                (allow sysadm_t clamd_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t clamd_etc_t (dir (getattr open search)))
                (allow sysadm_t clamd_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t clamd_etc_t (dir (getattr open search)))
                (allow sysadm_t clamd_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t clamd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t clamd_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t clamd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t clamd_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t clamd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t clamd_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t clamd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t clamd_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t clamd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t clamd_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t clamd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t clamd_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t clamd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t clamd_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t clamd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t clamd_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t clamd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t clamd_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t clamd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t clamd_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t clamd_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t freshclam_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t clamd_var_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t freshclam_var_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t clamd_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t freshclam_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t clamd_var_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t freshclam_var_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t clamd_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t freshclam_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t clamd_var_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t freshclam_var_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t clamd_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t freshclam_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t clamd_var_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t freshclam_var_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t clamd_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t freshclam_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t clamd_var_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t freshclam_var_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t clamd_var_log_t (dir (getattr open search)))
                (allow sysadm_t freshclam_var_log_t (dir (getattr open search)))
                (allow sysadm_t clamd_var_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t freshclam_var_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t clamd_var_log_t (dir (getattr open search)))
                (allow sysadm_t freshclam_var_log_t (dir (getattr open search)))
                (allow sysadm_t clamd_var_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t freshclam_var_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t clamd_var_log_t (dir (getattr open search)))
                (allow sysadm_t freshclam_var_log_t (dir (getattr open search)))
                (allow sysadm_t clamd_var_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t freshclam_var_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t clamd_var_log_t (dir (getattr open search)))
                (allow sysadm_t freshclam_var_log_t (dir (getattr open search)))
                (allow sysadm_t clamd_var_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t freshclam_var_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t clamd_var_log_t (dir (getattr open search)))
                (allow sysadm_t freshclam_var_log_t (dir (getattr open search)))
                (allow sysadm_t clamd_var_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t freshclam_var_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t clamd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t clamd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t clamd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t clamd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t clamd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t clamd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t clamd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t clamd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t clamd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t clamd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t clamd_runtime_t (dir (getattr open search)))
                (allow sysadm_t clamd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t clamd_runtime_t (dir (getattr open search)))
                (allow sysadm_t clamd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t clamd_runtime_t (dir (getattr open search)))
                (allow sysadm_t clamd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t clamd_runtime_t (dir (getattr open search)))
                (allow sysadm_t clamd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t clamd_runtime_t (dir (getattr open search)))
                (allow sysadm_t clamd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t clamd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t clamscan_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t clamd_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t clamscan_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t clamd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t clamscan_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t clamd_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t clamscan_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t clamd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t clamscan_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t clamd_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t clamscan_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t clamd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t clamscan_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t clamd_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t clamscan_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t clamd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t clamscan_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t clamd_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t clamscan_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t clamd_tmp_t (dir (getattr open search)))
                (allow sysadm_t clamscan_tmp_t (dir (getattr open search)))
                (allow sysadm_t clamd_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t clamscan_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t clamd_tmp_t (dir (getattr open search)))
                (allow sysadm_t clamscan_tmp_t (dir (getattr open search)))
                (allow sysadm_t clamd_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t clamscan_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t clamd_tmp_t (dir (getattr open search)))
                (allow sysadm_t clamscan_tmp_t (dir (getattr open search)))
                (allow sysadm_t clamd_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t clamscan_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t clamd_tmp_t (dir (getattr open search)))
                (allow sysadm_t clamscan_tmp_t (dir (getattr open search)))
                (allow sysadm_t clamd_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t clamscan_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t clamd_tmp_t (dir (getattr open search)))
                (allow sysadm_t clamscan_tmp_t (dir (getattr open search)))
                (allow sysadm_t clamd_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t clamscan_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_144
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_145
                (typeattributeset cil_gen_require hwclock_t)
                (typeattributeset cil_gen_require hwclock_exec_t)
                (roleattributeset cil_gen_require sysadm_r)
                (roletype sysadm_r hwclock_t)
                (allow sysadm_t hwclock_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t hwclock_t (process (transition)))
                (dontaudit sysadm_t hwclock_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t hwclock_exec_t process hwclock_t)
                (allow hwclock_t sysadm_t (fd (use)))
                (allow hwclock_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow hwclock_t sysadm_t (process (sigchld)))
            )
            (optional sysadm_optional_146
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require httpd_sys_content_t)
                (typeattributeset cil_gen_require cobblerd_t)
                (typeattributeset cil_gen_require cobbler_var_lib_t)
                (typeattributeset cil_gen_require cobbler_var_log_t)
                (typeattributeset cil_gen_require cobbler_etc_t)
                (typeattributeset cil_gen_require cobblerd_initrc_exec_t)
                (typeattributeset cil_gen_require cobbler_content_t)
                (typeattributeset cil_gen_require cobbler_tmp_t)
                (allow sysadm_t cobblerd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t cobblerd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t cobblerd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t cobblerd_t (lnk_file (read getattr)))
                (allow sysadm_t cobblerd_t (process (getattr)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t cobbler_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cobbler_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t cobbler_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cobbler_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cobbler_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cobbler_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t cobbler_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cobbler_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cobbler_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cobbler_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cobbler_etc_t (dir (getattr open search)))
                (allow sysadm_t cobbler_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t cobbler_etc_t (dir (getattr open search)))
                (allow sysadm_t cobbler_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t cobbler_etc_t (dir (getattr open search)))
                (allow sysadm_t cobbler_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cobbler_etc_t (dir (getattr open search)))
                (allow sysadm_t cobbler_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cobbler_etc_t (dir (getattr open search)))
                (allow sysadm_t cobbler_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (getattr open search)))
                (allow sysadm_t cobbler_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cobbler_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t cobbler_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cobbler_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cobbler_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cobbler_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t cobbler_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cobbler_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cobbler_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cobbler_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cobbler_tmp_t (dir (getattr open search)))
                (allow sysadm_t cobbler_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t cobbler_tmp_t (dir (getattr open search)))
                (allow sysadm_t cobbler_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t cobbler_tmp_t (dir (getattr open search)))
                (allow sysadm_t cobbler_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cobbler_tmp_t (dir (getattr open search)))
                (allow sysadm_t cobbler_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cobbler_tmp_t (dir (getattr open search)))
                (allow sysadm_t cobbler_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t cobbler_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cobbler_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t cobbler_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cobbler_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cobbler_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cobbler_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t cobbler_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cobbler_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cobbler_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cobbler_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cobbler_var_lib_t (dir (getattr open search)))
                (allow sysadm_t cobbler_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t cobbler_var_lib_t (dir (getattr open search)))
                (allow sysadm_t cobbler_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t cobbler_var_lib_t (dir (getattr open search)))
                (allow sysadm_t cobbler_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cobbler_var_lib_t (dir (getattr open search)))
                (allow sysadm_t cobbler_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cobbler_var_lib_t (dir (getattr open search)))
                (allow sysadm_t cobbler_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t cobbler_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cobbler_var_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t cobbler_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cobbler_var_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cobbler_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cobbler_var_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t cobbler_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cobbler_var_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cobbler_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cobbler_var_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cobbler_var_log_t (dir (getattr open search)))
                (allow sysadm_t cobbler_var_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t cobbler_var_log_t (dir (getattr open search)))
                (allow sysadm_t cobbler_var_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t cobbler_var_log_t (dir (getattr open search)))
                (allow sysadm_t cobbler_var_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cobbler_var_log_t (dir (getattr open search)))
                (allow sysadm_t cobbler_var_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cobbler_var_log_t (dir (getattr open search)))
                (allow sysadm_t cobbler_var_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t httpd_sys_content_t (dir (getattr open search)))
                (allow sysadm_t cobbler_content_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cobbler_content_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t cobbler_content_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cobbler_content_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cobbler_content_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cobbler_content_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t cobbler_content_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cobbler_content_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cobbler_content_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cobbler_content_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cobbler_content_t (dir (getattr open search)))
                (allow sysadm_t cobbler_content_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t cobbler_content_t (dir (getattr open search)))
                (allow sysadm_t cobbler_content_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t cobbler_content_t (dir (getattr open search)))
                (allow sysadm_t cobbler_content_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cobbler_content_t (dir (getattr open search)))
                (allow sysadm_t cobbler_content_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cobbler_content_t (dir (getattr open search)))
                (allow sysadm_t cobbler_content_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_147
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_148
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require cockpit_ws_t)
                (typeattributeset cil_gen_require cockpit_session_t)
                (typeattributeset cil_gen_require cockpit_state_t)
                (typeattributeset cil_gen_require cockpit_runtime_t)
                (typeattributeset cil_gen_require cockpit_unit_t)
                (allow sysadm_t cockpit_ws_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t cockpit_ws_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t cockpit_ws_t (file (ioctl read getattr lock open)))
                (allow sysadm_t cockpit_ws_t (lnk_file (read getattr)))
                (allow sysadm_t cockpit_ws_t (process (getattr)))
                (allow sysadm_t cockpit_session_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t cockpit_session_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t cockpit_session_t (file (ioctl read getattr lock open)))
                (allow sysadm_t cockpit_session_t (lnk_file (read getattr)))
                (allow sysadm_t cockpit_session_t (process (getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t cockpit_state_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cockpit_state_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t cockpit_state_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cockpit_state_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cockpit_state_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cockpit_state_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t cockpit_state_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cockpit_state_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cockpit_state_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cockpit_state_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cockpit_state_t (dir (getattr open search)))
                (allow sysadm_t cockpit_state_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t cockpit_state_t (dir (getattr open search)))
                (allow sysadm_t cockpit_state_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t cockpit_state_t (dir (getattr open search)))
                (allow sysadm_t cockpit_state_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cockpit_state_t (dir (getattr open search)))
                (allow sysadm_t cockpit_state_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cockpit_state_t (dir (getattr open search)))
                (allow sysadm_t cockpit_state_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cockpit_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cockpit_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t cockpit_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cockpit_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cockpit_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cockpit_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t cockpit_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cockpit_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cockpit_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cockpit_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cockpit_runtime_t (dir (getattr open search)))
                (allow sysadm_t cockpit_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t cockpit_runtime_t (dir (getattr open search)))
                (allow sysadm_t cockpit_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t cockpit_runtime_t (dir (getattr open search)))
                (allow sysadm_t cockpit_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cockpit_runtime_t (dir (getattr open search)))
                (allow sysadm_t cockpit_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cockpit_runtime_t (dir (getattr open search)))
                (allow sysadm_t cockpit_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cockpit_unit_t (service (status)))
                (allow sysadm_t cockpit_unit_t (service (enable disable)))
                (allow sysadm_t cockpit_unit_t (service (status)))
                (allow sysadm_t cockpit_unit_t (service (start stop)))
                (allow sysadm_t cockpit_unit_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cockpit_unit_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t cockpit_unit_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cockpit_unit_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cockpit_unit_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cockpit_unit_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t cockpit_unit_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cockpit_unit_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cockpit_unit_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cockpit_unit_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cockpit_unit_t (dir (getattr open search)))
                (allow sysadm_t cockpit_unit_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t cockpit_unit_t (dir (getattr open search)))
                (allow sysadm_t cockpit_unit_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t cockpit_unit_t (dir (getattr open search)))
                (allow sysadm_t cockpit_unit_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cockpit_unit_t (dir (getattr open search)))
                (allow sysadm_t cockpit_unit_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cockpit_unit_t (dir (getattr open search)))
                (allow sysadm_t cockpit_unit_t (sock_file (getattr relabelfrom relabelto)))
            )
            (optional sysadm_optional_149
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require collectd_t)
                (typeattributeset cil_gen_require collectd_initrc_exec_t)
                (typeattributeset cil_gen_require collectd_runtime_t)
                (typeattributeset cil_gen_require collectd_var_lib_t)
                (allow sysadm_t collectd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t collectd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t collectd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t collectd_t (lnk_file (read getattr)))
                (allow sysadm_t collectd_t (process (getattr)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t collectd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t collectd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t collectd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t collectd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t collectd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t collectd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t collectd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t collectd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t collectd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t collectd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t collectd_runtime_t (dir (getattr open search)))
                (allow sysadm_t collectd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t collectd_runtime_t (dir (getattr open search)))
                (allow sysadm_t collectd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t collectd_runtime_t (dir (getattr open search)))
                (allow sysadm_t collectd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t collectd_runtime_t (dir (getattr open search)))
                (allow sysadm_t collectd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t collectd_runtime_t (dir (getattr open search)))
                (allow sysadm_t collectd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t collectd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t collectd_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t collectd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t collectd_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t collectd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t collectd_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t collectd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t collectd_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t collectd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t collectd_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t collectd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t collectd_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t collectd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t collectd_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t collectd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t collectd_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t collectd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t collectd_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t collectd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t collectd_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_150
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_151
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require var_lock_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require condor_domain)
                (typeattributeset cil_gen_require condor_initrc_exec_t)
                (typeattributeset cil_gen_require condor_log_t)
                (typeattributeset cil_gen_require condor_var_lib_t)
                (typeattributeset cil_gen_require condor_var_lock_t)
                (typeattributeset cil_gen_require condor_schedd_tmp_t)
                (typeattributeset cil_gen_require condor_runtime_t)
                (typeattributeset cil_gen_require condor_startd_tmp_t)
                (typeattributeset cil_gen_require condor_conf_t)
                (allow sysadm_t condor_domain (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t condor_domain (dir (ioctl read getattr lock open search)))
                (allow sysadm_t condor_domain (file (ioctl read getattr lock open)))
                (allow sysadm_t condor_domain (lnk_file (read getattr)))
                (allow sysadm_t condor_domain (process (getattr)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t condor_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t condor_conf_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t condor_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t condor_conf_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t condor_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t condor_conf_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t condor_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t condor_conf_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t condor_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t condor_conf_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t condor_conf_t (dir (getattr open search)))
                (allow sysadm_t condor_conf_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t condor_conf_t (dir (getattr open search)))
                (allow sysadm_t condor_conf_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t condor_conf_t (dir (getattr open search)))
                (allow sysadm_t condor_conf_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t condor_conf_t (dir (getattr open search)))
                (allow sysadm_t condor_conf_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t condor_conf_t (dir (getattr open search)))
                (allow sysadm_t condor_conf_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t condor_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t condor_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t condor_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t condor_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t condor_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t condor_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t condor_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t condor_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t condor_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t condor_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t condor_log_t (dir (getattr open search)))
                (allow sysadm_t condor_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t condor_log_t (dir (getattr open search)))
                (allow sysadm_t condor_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t condor_log_t (dir (getattr open search)))
                (allow sysadm_t condor_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t condor_log_t (dir (getattr open search)))
                (allow sysadm_t condor_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t condor_log_t (dir (getattr open search)))
                (allow sysadm_t condor_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_lock_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lock_t (dir (getattr open search)))
                (allow sysadm_t condor_var_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t condor_var_lock_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t condor_var_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t condor_var_lock_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t condor_var_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t condor_var_lock_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t condor_var_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t condor_var_lock_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t condor_var_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t condor_var_lock_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t condor_var_lock_t (dir (getattr open search)))
                (allow sysadm_t condor_var_lock_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t condor_var_lock_t (dir (getattr open search)))
                (allow sysadm_t condor_var_lock_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t condor_var_lock_t (dir (getattr open search)))
                (allow sysadm_t condor_var_lock_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t condor_var_lock_t (dir (getattr open search)))
                (allow sysadm_t condor_var_lock_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t condor_var_lock_t (dir (getattr open search)))
                (allow sysadm_t condor_var_lock_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t condor_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t condor_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t condor_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t condor_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t condor_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t condor_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t condor_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t condor_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t condor_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t condor_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t condor_var_lib_t (dir (getattr open search)))
                (allow sysadm_t condor_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t condor_var_lib_t (dir (getattr open search)))
                (allow sysadm_t condor_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t condor_var_lib_t (dir (getattr open search)))
                (allow sysadm_t condor_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t condor_var_lib_t (dir (getattr open search)))
                (allow sysadm_t condor_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t condor_var_lib_t (dir (getattr open search)))
                (allow sysadm_t condor_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t condor_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t condor_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t condor_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t condor_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t condor_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t condor_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t condor_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t condor_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t condor_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t condor_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t condor_runtime_t (dir (getattr open search)))
                (allow sysadm_t condor_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t condor_runtime_t (dir (getattr open search)))
                (allow sysadm_t condor_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t condor_runtime_t (dir (getattr open search)))
                (allow sysadm_t condor_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t condor_runtime_t (dir (getattr open search)))
                (allow sysadm_t condor_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t condor_runtime_t (dir (getattr open search)))
                (allow sysadm_t condor_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (getattr open search)))
                (allow sysadm_t condor_schedd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t condor_startd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t condor_schedd_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t condor_startd_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t condor_schedd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t condor_startd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t condor_schedd_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t condor_startd_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t condor_schedd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t condor_startd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t condor_schedd_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t condor_startd_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t condor_schedd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t condor_startd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t condor_schedd_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t condor_startd_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t condor_schedd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t condor_startd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t condor_schedd_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t condor_startd_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t condor_schedd_tmp_t (dir (getattr open search)))
                (allow sysadm_t condor_startd_tmp_t (dir (getattr open search)))
                (allow sysadm_t condor_schedd_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t condor_startd_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t condor_schedd_tmp_t (dir (getattr open search)))
                (allow sysadm_t condor_startd_tmp_t (dir (getattr open search)))
                (allow sysadm_t condor_schedd_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t condor_startd_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t condor_schedd_tmp_t (dir (getattr open search)))
                (allow sysadm_t condor_startd_tmp_t (dir (getattr open search)))
                (allow sysadm_t condor_schedd_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t condor_startd_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t condor_schedd_tmp_t (dir (getattr open search)))
                (allow sysadm_t condor_startd_tmp_t (dir (getattr open search)))
                (allow sysadm_t condor_schedd_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t condor_startd_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t condor_schedd_tmp_t (dir (getattr open search)))
                (allow sysadm_t condor_startd_tmp_t (dir (getattr open search)))
                (allow sysadm_t condor_schedd_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t condor_startd_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_152
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_153
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require consoletype_t)
                (typeattributeset cil_gen_require consoletype_exec_t)
                (roleattributeset cil_gen_require sysadm_r)
                (roletype sysadm_r consoletype_t)
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t consoletype_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t consoletype_t (process (transition)))
                (dontaudit sysadm_t consoletype_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t consoletype_exec_t process consoletype_t)
                (allow consoletype_t sysadm_t (fd (use)))
                (allow consoletype_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow consoletype_t sysadm_t (process (sigchld)))
                (dontaudit consoletype_t sysadm_t (tcp_socket (read write)))
                (dontaudit consoletype_t sysadm_t (udp_socket (read write)))
                (dontaudit consoletype_t sysadm_t (rawip_socket (read write)))
                (dontaudit consoletype_t sysadm_t (netlink_socket (read write)))
                (dontaudit consoletype_t sysadm_t (packet_socket (read write)))
                (dontaudit consoletype_t sysadm_t (unix_stream_socket (read write)))
                (dontaudit consoletype_t sysadm_t (unix_dgram_socket (read write)))
                (dontaudit consoletype_t sysadm_t (netlink_route_socket (read write)))
                (dontaudit consoletype_t sysadm_t (netlink_tcpdiag_socket (read write)))
                (dontaudit consoletype_t sysadm_t (netlink_nflog_socket (read write)))
                (dontaudit consoletype_t sysadm_t (netlink_xfrm_socket (read write)))
                (dontaudit consoletype_t sysadm_t (netlink_selinux_socket (read write)))
                (dontaudit consoletype_t sysadm_t (netlink_audit_socket (read write)))
                (dontaudit consoletype_t sysadm_t (netlink_dnrt_socket (read write)))
                (dontaudit consoletype_t sysadm_t (netlink_kobject_uevent_socket (read write)))
                (dontaudit consoletype_t sysadm_t (appletalk_socket (read write)))
                (dontaudit consoletype_t sysadm_t (tun_socket (read write)))
                (dontaudit consoletype_t sysadm_t (netlink_iscsi_socket (read write)))
                (dontaudit consoletype_t sysadm_t (netlink_fib_lookup_socket (read write)))
                (dontaudit consoletype_t sysadm_t (netlink_connector_socket (read write)))
                (dontaudit consoletype_t sysadm_t (netlink_netfilter_socket (read write)))
                (dontaudit consoletype_t sysadm_t (netlink_generic_socket (read write)))
                (dontaudit consoletype_t sysadm_t (netlink_scsitransport_socket (read write)))
                (dontaudit consoletype_t sysadm_t (netlink_rdma_socket (read write)))
                (dontaudit consoletype_t sysadm_t (netlink_crypto_socket (read write)))
                (dontaudit consoletype_t sysadm_t (sctp_socket (read write)))
                (dontaudit consoletype_t sysadm_t (icmp_socket (read write)))
                (dontaudit consoletype_t sysadm_t (ax25_socket (read write)))
                (dontaudit consoletype_t sysadm_t (ipx_socket (read write)))
                (dontaudit consoletype_t sysadm_t (netrom_socket (read write)))
                (dontaudit consoletype_t sysadm_t (atmpvc_socket (read write)))
                (dontaudit consoletype_t sysadm_t (x25_socket (read write)))
                (dontaudit consoletype_t sysadm_t (rose_socket (read write)))
                (dontaudit consoletype_t sysadm_t (decnet_socket (read write)))
                (dontaudit consoletype_t sysadm_t (atmsvc_socket (read write)))
                (dontaudit consoletype_t sysadm_t (rds_socket (read write)))
                (dontaudit consoletype_t sysadm_t (irda_socket (read write)))
                (dontaudit consoletype_t sysadm_t (pppox_socket (read write)))
                (dontaudit consoletype_t sysadm_t (llc_socket (read write)))
                (dontaudit consoletype_t sysadm_t (can_socket (read write)))
                (dontaudit consoletype_t sysadm_t (tipc_socket (read write)))
                (dontaudit consoletype_t sysadm_t (bluetooth_socket (read write)))
                (dontaudit consoletype_t sysadm_t (iucv_socket (read write)))
                (dontaudit consoletype_t sysadm_t (rxrpc_socket (read write)))
                (dontaudit consoletype_t sysadm_t (isdn_socket (read write)))
                (dontaudit consoletype_t sysadm_t (phonet_socket (read write)))
                (dontaudit consoletype_t sysadm_t (ieee802154_socket (read write)))
                (dontaudit consoletype_t sysadm_t (caif_socket (read write)))
                (dontaudit consoletype_t sysadm_t (alg_socket (read write)))
                (dontaudit consoletype_t sysadm_t (nfc_socket (read write)))
                (dontaudit consoletype_t sysadm_t (vsock_socket (read write)))
                (dontaudit consoletype_t sysadm_t (kcm_socket (read write)))
                (dontaudit consoletype_t sysadm_t (qipcrtr_socket (read write)))
                (dontaudit consoletype_t sysadm_t (smc_socket (read write)))
                (dontaudit consoletype_t sysadm_t (xdp_socket (read write)))
            )
            (optional sysadm_optional_154
                (roleattributeset cil_gen_require container_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require tmpfs_t)
                (typeattributeset cil_gen_require container_domain)
                (typeattributeset cil_gen_require container_engine_domain)
                (typeattributeset cil_gen_require container_file_t)
                (typeattributeset cil_gen_require container_ro_file_t)
                (typeattributeset cil_gen_require container_var_lib_t)
                (typeattributeset cil_gen_require container_runtime_t)
                (typeattributeset cil_gen_require container_config_t)
                (typeattributeset cil_gen_require container_engine_cache_t)
                (typeattributeset cil_gen_require container_engine_tmp_t)
                (typeattributeset cil_gen_require container_engine_tmpfs_t)
                (typeattributeset cil_gen_require container_engine_t)
                (typeattributeset cil_gen_require container_engine_exec_t)
                (roleattributeset cil_gen_require container_roles)
                (roleattributeset container_roles (sysadm_r ))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t container_engine_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t container_engine_t (process (transition)))
                (dontaudit sysadm_t container_engine_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t container_engine_exec_t process container_engine_t)
                (allow container_engine_t sysadm_t (fd (use)))
                (allow container_engine_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow container_engine_t sysadm_t (process (sigchld)))
                (allow sysadm_t container_domain (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t container_domain (dir (ioctl read getattr lock open search)))
                (allow sysadm_t container_domain (file (ioctl read getattr lock open)))
                (allow sysadm_t container_domain (lnk_file (read getattr)))
                (allow sysadm_t container_domain (process (getattr)))
                (allow sysadm_t container_engine_domain (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t container_engine_domain (dir (ioctl read getattr lock open search)))
                (allow sysadm_t container_engine_domain (file (ioctl read getattr lock open)))
                (allow sysadm_t container_engine_domain (lnk_file (read getattr)))
                (allow sysadm_t container_engine_domain (process (getattr)))
                (allow sysadm_t self (cap_userns (kill sys_ptrace sys_admin)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t container_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t container_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t container_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t container_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t container_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t container_var_lib_t (dir (getattr open search)))
                (allow sysadm_t container_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t container_var_lib_t (dir (getattr open search)))
                (allow sysadm_t container_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t container_var_lib_t (dir (getattr open search)))
                (allow sysadm_t container_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t container_var_lib_t (dir (getattr open search)))
                (allow sysadm_t container_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t container_var_lib_t (dir (getattr open search)))
                (allow sysadm_t container_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t container_file_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_file_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t container_file_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_file_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t container_file_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_file_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t container_file_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_file_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t container_file_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_file_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t container_file_t (dir (getattr open search)))
                (allow sysadm_t container_file_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t container_file_t (dir (getattr open search)))
                (allow sysadm_t container_file_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t container_file_t (dir (getattr open search)))
                (allow sysadm_t container_file_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t container_file_t (dir (getattr open search)))
                (allow sysadm_t container_file_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t container_file_t (dir (getattr open search)))
                (allow sysadm_t container_file_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t container_ro_file_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_ro_file_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t container_ro_file_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_ro_file_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t container_ro_file_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_ro_file_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t container_ro_file_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_ro_file_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t container_ro_file_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_ro_file_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t container_ro_file_t (dir (getattr open search)))
                (allow sysadm_t container_ro_file_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t container_ro_file_t (dir (getattr open search)))
                (allow sysadm_t container_ro_file_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t container_ro_file_t (dir (getattr open search)))
                (allow sysadm_t container_ro_file_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t container_ro_file_t (dir (getattr open search)))
                (allow sysadm_t container_ro_file_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t container_ro_file_t (dir (getattr open search)))
                (allow sysadm_t container_ro_file_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t container_var_lib_t (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t container_file_t (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t container_ro_file_t (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t container_engine_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_engine_cache_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t container_engine_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_engine_cache_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t container_engine_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_engine_cache_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t container_engine_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_engine_cache_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t container_engine_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_engine_cache_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t container_engine_cache_t (dir (getattr open search)))
                (allow sysadm_t container_engine_cache_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t container_engine_cache_t (dir (getattr open search)))
                (allow sysadm_t container_engine_cache_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t container_engine_cache_t (dir (getattr open search)))
                (allow sysadm_t container_engine_cache_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t container_engine_cache_t (dir (getattr open search)))
                (allow sysadm_t container_engine_cache_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t container_engine_cache_t (dir (getattr open search)))
                (allow sysadm_t container_engine_cache_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t container_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t container_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t container_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t container_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t container_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t container_runtime_t (dir (getattr open search)))
                (allow sysadm_t container_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t container_runtime_t (dir (getattr open search)))
                (allow sysadm_t container_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t container_runtime_t (dir (getattr open search)))
                (allow sysadm_t container_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t container_runtime_t (dir (getattr open search)))
                (allow sysadm_t container_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t container_runtime_t (dir (getattr open search)))
                (allow sysadm_t container_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t container_config_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_config_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t container_config_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_config_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t container_config_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_config_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t container_config_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_config_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t container_config_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_config_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t container_config_t (dir (getattr open search)))
                (allow sysadm_t container_config_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t container_config_t (dir (getattr open search)))
                (allow sysadm_t container_config_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t container_config_t (dir (getattr open search)))
                (allow sysadm_t container_config_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t container_config_t (dir (getattr open search)))
                (allow sysadm_t container_config_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t container_config_t (dir (getattr open search)))
                (allow sysadm_t container_config_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (getattr open search)))
                (allow sysadm_t container_engine_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_engine_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t container_engine_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_engine_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t container_engine_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_engine_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t container_engine_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_engine_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t container_engine_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_engine_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t container_engine_tmp_t (dir (getattr open search)))
                (allow sysadm_t container_engine_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t container_engine_tmp_t (dir (getattr open search)))
                (allow sysadm_t container_engine_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t container_engine_tmp_t (dir (getattr open search)))
                (allow sysadm_t container_engine_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t container_engine_tmp_t (dir (getattr open search)))
                (allow sysadm_t container_engine_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t container_engine_tmp_t (dir (getattr open search)))
                (allow sysadm_t container_engine_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmpfs_t (dir (getattr open search)))
                (allow sysadm_t container_engine_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_engine_tmpfs_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t container_engine_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_engine_tmpfs_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t container_engine_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_engine_tmpfs_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t container_engine_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_engine_tmpfs_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t container_engine_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_engine_tmpfs_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t container_engine_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t container_engine_tmpfs_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t container_engine_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t container_engine_tmpfs_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t container_engine_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t container_engine_tmpfs_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t container_engine_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t container_engine_tmpfs_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t container_engine_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t container_engine_tmpfs_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_155
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require dockerc_t)
                    (typeattributeset cil_gen_require dockerc_exec_t)
                    (roleattributeset cil_gen_require sysadm_r)
                    (roletype sysadm_r dockerc_t)
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t dockerc_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t dockerc_t (process (transition)))
                    (dontaudit sysadm_t dockerc_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t dockerc_exec_t process dockerc_t)
                    (allow dockerc_t sysadm_t (fd (use)))
                    (allow dockerc_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow dockerc_t sysadm_t (process (sigchld)))
                    (optional sysadm_optional_156
                        (typeattributeset cil_gen_require bin_t)
                        (typeattributeset cil_gen_require usr_t)
                        (typeattributeset cil_gen_require rootlesskit_t)
                        (typeattributeset cil_gen_require rootlesskit_exec_t)
                        (roleattributeset cil_gen_require sysadm_r)
                        (roletype sysadm_r rootlesskit_t)
                        (allow sysadm_t bin_t (dir (getattr open search)))
                        (allow sysadm_t bin_t (lnk_file (read getattr)))
                        (allow sysadm_t usr_t (dir (getattr open search)))
                        (allow sysadm_t rootlesskit_exec_t (file (ioctl read getattr map execute open)))
                        (allow sysadm_t rootlesskit_t (process (transition)))
                        (dontaudit sysadm_t rootlesskit_t (process (noatsecure siginh rlimitinh)))
                        (typetransition sysadm_t rootlesskit_exec_t process rootlesskit_t)
                        (allow rootlesskit_t sysadm_t (fd (use)))
                        (allow rootlesskit_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                        (allow rootlesskit_t sysadm_t (process (sigchld)))
                    )
                )
                (optional sysadm_optional_157
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require podman_t)
                    (typeattributeset cil_gen_require podman_exec_t)
                    (typeattributeset cil_gen_require podman_conmon_t)
                    (typeattributeset cil_gen_require conmon_exec_t)
                    (roleattributeset cil_gen_require sysadm_r)
                    (roletype sysadm_r podman_t)
                    (roletype sysadm_r podman_conmon_t)
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t podman_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t podman_t (process (transition)))
                    (dontaudit sysadm_t podman_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t podman_exec_t process podman_t)
                    (allow podman_t sysadm_t (fd (use)))
                    (allow podman_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow podman_t sysadm_t (process (sigchld)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t conmon_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t podman_conmon_t (process (transition)))
                    (dontaudit sysadm_t podman_conmon_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t conmon_exec_t process podman_conmon_t)
                    (allow podman_conmon_t sysadm_t (fd (use)))
                    (allow podman_conmon_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow podman_conmon_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_158
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require corosync_t)
                (typeattributeset cil_gen_require corosync_var_lib_t)
                (typeattributeset cil_gen_require corosync_var_log_t)
                (typeattributeset cil_gen_require corosync_runtime_t)
                (typeattributeset cil_gen_require corosync_tmp_t)
                (typeattributeset cil_gen_require corosync_tmpfs_t)
                (typeattributeset cil_gen_require corosync_initrc_exec_t)
                (allow sysadm_t corosync_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t corosync_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t corosync_t (file (ioctl read getattr lock open)))
                (allow sysadm_t corosync_t (lnk_file (read getattr)))
                (allow sysadm_t corosync_t (process (getattr)))
                (allow sysadm_t tmp_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t corosync_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t corosync_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t corosync_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t corosync_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t corosync_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t corosync_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t corosync_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t corosync_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t corosync_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t corosync_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t corosync_tmp_t (dir (getattr open search)))
                (allow sysadm_t corosync_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t corosync_tmp_t (dir (getattr open search)))
                (allow sysadm_t corosync_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t corosync_tmp_t (dir (getattr open search)))
                (allow sysadm_t corosync_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t corosync_tmp_t (dir (getattr open search)))
                (allow sysadm_t corosync_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t corosync_tmp_t (dir (getattr open search)))
                (allow sysadm_t corosync_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t corosync_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t corosync_tmpfs_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t corosync_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t corosync_tmpfs_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t corosync_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t corosync_tmpfs_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t corosync_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t corosync_tmpfs_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t corosync_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t corosync_tmpfs_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t corosync_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t corosync_tmpfs_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t corosync_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t corosync_tmpfs_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t corosync_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t corosync_tmpfs_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t corosync_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t corosync_tmpfs_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t corosync_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t corosync_tmpfs_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t corosync_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t corosync_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t corosync_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t corosync_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t corosync_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t corosync_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t corosync_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t corosync_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t corosync_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t corosync_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t corosync_var_lib_t (dir (getattr open search)))
                (allow sysadm_t corosync_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t corosync_var_lib_t (dir (getattr open search)))
                (allow sysadm_t corosync_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t corosync_var_lib_t (dir (getattr open search)))
                (allow sysadm_t corosync_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t corosync_var_lib_t (dir (getattr open search)))
                (allow sysadm_t corosync_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t corosync_var_lib_t (dir (getattr open search)))
                (allow sysadm_t corosync_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t corosync_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t corosync_var_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t corosync_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t corosync_var_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t corosync_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t corosync_var_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t corosync_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t corosync_var_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t corosync_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t corosync_var_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t corosync_var_log_t (dir (getattr open search)))
                (allow sysadm_t corosync_var_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t corosync_var_log_t (dir (getattr open search)))
                (allow sysadm_t corosync_var_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t corosync_var_log_t (dir (getattr open search)))
                (allow sysadm_t corosync_var_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t corosync_var_log_t (dir (getattr open search)))
                (allow sysadm_t corosync_var_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t corosync_var_log_t (dir (getattr open search)))
                (allow sysadm_t corosync_var_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t corosync_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t corosync_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t corosync_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t corosync_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t corosync_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t corosync_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t corosync_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t corosync_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t corosync_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t corosync_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t corosync_runtime_t (dir (getattr open search)))
                (allow sysadm_t corosync_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t corosync_runtime_t (dir (getattr open search)))
                (allow sysadm_t corosync_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t corosync_runtime_t (dir (getattr open search)))
                (allow sysadm_t corosync_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t corosync_runtime_t (dir (getattr open search)))
                (allow sysadm_t corosync_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t corosync_runtime_t (dir (getattr open search)))
                (allow sysadm_t corosync_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_159
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_160
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require couchdb_t)
                (typeattributeset cil_gen_require couchdb_conf_t)
                (typeattributeset cil_gen_require couchdb_initrc_exec_t)
                (typeattributeset cil_gen_require couchdb_log_t)
                (typeattributeset cil_gen_require couchdb_var_lib_t)
                (typeattributeset cil_gen_require couchdb_runtime_t)
                (typeattributeset cil_gen_require couchdb_tmp_t)
                (allow sysadm_t couchdb_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t couchdb_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t couchdb_t (file (ioctl read getattr lock open)))
                (allow sysadm_t couchdb_t (lnk_file (read getattr)))
                (allow sysadm_t couchdb_t (process (getattr)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t couchdb_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t couchdb_conf_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t couchdb_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t couchdb_conf_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t couchdb_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t couchdb_conf_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t couchdb_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t couchdb_conf_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t couchdb_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t couchdb_conf_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t couchdb_conf_t (dir (getattr open search)))
                (allow sysadm_t couchdb_conf_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t couchdb_conf_t (dir (getattr open search)))
                (allow sysadm_t couchdb_conf_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t couchdb_conf_t (dir (getattr open search)))
                (allow sysadm_t couchdb_conf_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t couchdb_conf_t (dir (getattr open search)))
                (allow sysadm_t couchdb_conf_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t couchdb_conf_t (dir (getattr open search)))
                (allow sysadm_t couchdb_conf_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t couchdb_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t couchdb_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t couchdb_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t couchdb_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t couchdb_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t couchdb_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t couchdb_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t couchdb_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t couchdb_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t couchdb_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t couchdb_log_t (dir (getattr open search)))
                (allow sysadm_t couchdb_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t couchdb_log_t (dir (getattr open search)))
                (allow sysadm_t couchdb_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t couchdb_log_t (dir (getattr open search)))
                (allow sysadm_t couchdb_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t couchdb_log_t (dir (getattr open search)))
                (allow sysadm_t couchdb_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t couchdb_log_t (dir (getattr open search)))
                (allow sysadm_t couchdb_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (getattr open search)))
                (allow sysadm_t couchdb_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t couchdb_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t couchdb_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t couchdb_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t couchdb_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t couchdb_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t couchdb_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t couchdb_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t couchdb_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t couchdb_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t couchdb_tmp_t (dir (getattr open search)))
                (allow sysadm_t couchdb_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t couchdb_tmp_t (dir (getattr open search)))
                (allow sysadm_t couchdb_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t couchdb_tmp_t (dir (getattr open search)))
                (allow sysadm_t couchdb_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t couchdb_tmp_t (dir (getattr open search)))
                (allow sysadm_t couchdb_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t couchdb_tmp_t (dir (getattr open search)))
                (allow sysadm_t couchdb_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t couchdb_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t couchdb_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t couchdb_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t couchdb_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t couchdb_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t couchdb_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t couchdb_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t couchdb_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t couchdb_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t couchdb_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t couchdb_var_lib_t (dir (getattr open search)))
                (allow sysadm_t couchdb_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t couchdb_var_lib_t (dir (getattr open search)))
                (allow sysadm_t couchdb_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t couchdb_var_lib_t (dir (getattr open search)))
                (allow sysadm_t couchdb_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t couchdb_var_lib_t (dir (getattr open search)))
                (allow sysadm_t couchdb_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t couchdb_var_lib_t (dir (getattr open search)))
                (allow sysadm_t couchdb_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t couchdb_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t couchdb_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t couchdb_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t couchdb_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t couchdb_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t couchdb_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t couchdb_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t couchdb_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t couchdb_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t couchdb_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t couchdb_runtime_t (dir (getattr open search)))
                (allow sysadm_t couchdb_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t couchdb_runtime_t (dir (getattr open search)))
                (allow sysadm_t couchdb_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t couchdb_runtime_t (dir (getattr open search)))
                (allow sysadm_t couchdb_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t couchdb_runtime_t (dir (getattr open search)))
                (allow sysadm_t couchdb_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t couchdb_runtime_t (dir (getattr open search)))
                (allow sysadm_t couchdb_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_161
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_162
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require var_lock_t)
                (typeattributeset cil_gen_require var_spool_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require crond_t)
                (typeattributeset cil_gen_require cronjob_t)
                (typeattributeset cil_gen_require crond_initrc_exec_t)
                (typeattributeset cil_gen_require cron_var_lib_t)
                (typeattributeset cil_gen_require system_cronjob_var_lib_t)
                (typeattributeset cil_gen_require crond_tmp_t)
                (typeattributeset cil_gen_require admin_crontab_tmp_t)
                (typeattributeset cil_gen_require crontab_tmp_t)
                (typeattributeset cil_gen_require system_cronjob_tmp_t)
                (typeattributeset cil_gen_require cron_runtime_t)
                (typeattributeset cil_gen_require system_cronjob_runtime_t)
                (typeattributeset cil_gen_require crond_runtime_t)
                (typeattributeset cil_gen_require cron_log_t)
                (typeattributeset cil_gen_require system_cronjob_lock_t)
                (typeattributeset cil_gen_require user_cron_spool_log_t)
                (typeattributeset cil_gen_require cron_spool_type)
                (allow sysadm_t crond_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t cronjob_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t crond_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t cronjob_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t crond_t (file (ioctl read getattr lock open)))
                (allow sysadm_t cronjob_t (file (ioctl read getattr lock open)))
                (allow sysadm_t crond_t (lnk_file (read getattr)))
                (allow sysadm_t cronjob_t (lnk_file (read getattr)))
                (allow sysadm_t crond_t (process (getattr)))
                (allow sysadm_t cronjob_t (process (getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t cron_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t system_cronjob_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cron_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t system_cronjob_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t cron_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t system_cronjob_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cron_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t system_cronjob_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cron_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t system_cronjob_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cron_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t system_cronjob_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t cron_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t system_cronjob_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cron_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t system_cronjob_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cron_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t system_cronjob_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cron_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t system_cronjob_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cron_var_lib_t (dir (getattr open search)))
                (allow sysadm_t system_cronjob_var_lib_t (dir (getattr open search)))
                (allow sysadm_t cron_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t system_cronjob_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t cron_var_lib_t (dir (getattr open search)))
                (allow sysadm_t system_cronjob_var_lib_t (dir (getattr open search)))
                (allow sysadm_t cron_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t system_cronjob_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t cron_var_lib_t (dir (getattr open search)))
                (allow sysadm_t system_cronjob_var_lib_t (dir (getattr open search)))
                (allow sysadm_t cron_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t system_cronjob_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cron_var_lib_t (dir (getattr open search)))
                (allow sysadm_t system_cronjob_var_lib_t (dir (getattr open search)))
                (allow sysadm_t cron_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t system_cronjob_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cron_var_lib_t (dir (getattr open search)))
                (allow sysadm_t system_cronjob_var_lib_t (dir (getattr open search)))
                (allow sysadm_t cron_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t system_cronjob_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (getattr open search)))
                (allow sysadm_t crond_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t admin_crontab_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t crond_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t admin_crontab_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t crond_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t admin_crontab_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t crond_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t admin_crontab_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t crond_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t admin_crontab_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t crond_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t admin_crontab_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t crond_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t admin_crontab_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t crond_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t admin_crontab_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t crond_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t admin_crontab_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t crond_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t admin_crontab_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t crond_tmp_t (dir (getattr open search)))
                (allow sysadm_t admin_crontab_tmp_t (dir (getattr open search)))
                (allow sysadm_t crond_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t admin_crontab_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t crond_tmp_t (dir (getattr open search)))
                (allow sysadm_t admin_crontab_tmp_t (dir (getattr open search)))
                (allow sysadm_t crond_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t admin_crontab_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t crond_tmp_t (dir (getattr open search)))
                (allow sysadm_t admin_crontab_tmp_t (dir (getattr open search)))
                (allow sysadm_t crond_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t admin_crontab_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t crond_tmp_t (dir (getattr open search)))
                (allow sysadm_t admin_crontab_tmp_t (dir (getattr open search)))
                (allow sysadm_t crond_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t admin_crontab_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t crond_tmp_t (dir (getattr open search)))
                (allow sysadm_t admin_crontab_tmp_t (dir (getattr open search)))
                (allow sysadm_t crond_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t admin_crontab_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t crontab_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t system_cronjob_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t crontab_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t system_cronjob_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t crontab_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t system_cronjob_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t crontab_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t system_cronjob_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t crontab_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t system_cronjob_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t crontab_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t system_cronjob_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t crontab_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t system_cronjob_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t crontab_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t system_cronjob_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t crontab_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t system_cronjob_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t crontab_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t system_cronjob_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t crontab_tmp_t (dir (getattr open search)))
                (allow sysadm_t system_cronjob_tmp_t (dir (getattr open search)))
                (allow sysadm_t crontab_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t system_cronjob_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t crontab_tmp_t (dir (getattr open search)))
                (allow sysadm_t system_cronjob_tmp_t (dir (getattr open search)))
                (allow sysadm_t crontab_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t system_cronjob_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t crontab_tmp_t (dir (getattr open search)))
                (allow sysadm_t system_cronjob_tmp_t (dir (getattr open search)))
                (allow sysadm_t crontab_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t system_cronjob_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t crontab_tmp_t (dir (getattr open search)))
                (allow sysadm_t system_cronjob_tmp_t (dir (getattr open search)))
                (allow sysadm_t crontab_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t system_cronjob_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t crontab_tmp_t (dir (getattr open search)))
                (allow sysadm_t system_cronjob_tmp_t (dir (getattr open search)))
                (allow sysadm_t crontab_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t system_cronjob_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t cron_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t system_cronjob_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t crond_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cron_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t system_cronjob_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t crond_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t cron_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t system_cronjob_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t crond_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cron_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t system_cronjob_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t crond_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cron_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t system_cronjob_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t crond_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cron_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t system_cronjob_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t crond_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t cron_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t system_cronjob_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t crond_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cron_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t system_cronjob_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t crond_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cron_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t system_cronjob_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t crond_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cron_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t system_cronjob_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t crond_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cron_runtime_t (dir (getattr open search)))
                (allow sysadm_t system_cronjob_runtime_t (dir (getattr open search)))
                (allow sysadm_t crond_runtime_t (dir (getattr open search)))
                (allow sysadm_t cron_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t system_cronjob_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t crond_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t cron_runtime_t (dir (getattr open search)))
                (allow sysadm_t system_cronjob_runtime_t (dir (getattr open search)))
                (allow sysadm_t crond_runtime_t (dir (getattr open search)))
                (allow sysadm_t cron_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t system_cronjob_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t crond_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t cron_runtime_t (dir (getattr open search)))
                (allow sysadm_t system_cronjob_runtime_t (dir (getattr open search)))
                (allow sysadm_t crond_runtime_t (dir (getattr open search)))
                (allow sysadm_t cron_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t system_cronjob_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t crond_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cron_runtime_t (dir (getattr open search)))
                (allow sysadm_t system_cronjob_runtime_t (dir (getattr open search)))
                (allow sysadm_t crond_runtime_t (dir (getattr open search)))
                (allow sysadm_t cron_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t system_cronjob_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t crond_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cron_runtime_t (dir (getattr open search)))
                (allow sysadm_t system_cronjob_runtime_t (dir (getattr open search)))
                (allow sysadm_t crond_runtime_t (dir (getattr open search)))
                (allow sysadm_t cron_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t system_cronjob_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t crond_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_lock_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lock_t (dir (getattr open search)))
                (allow sysadm_t system_cronjob_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t system_cronjob_lock_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t system_cronjob_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t system_cronjob_lock_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t system_cronjob_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t system_cronjob_lock_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t system_cronjob_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t system_cronjob_lock_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t system_cronjob_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t system_cronjob_lock_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t system_cronjob_lock_t (dir (getattr open search)))
                (allow sysadm_t system_cronjob_lock_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t system_cronjob_lock_t (dir (getattr open search)))
                (allow sysadm_t system_cronjob_lock_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t system_cronjob_lock_t (dir (getattr open search)))
                (allow sysadm_t system_cronjob_lock_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t system_cronjob_lock_t (dir (getattr open search)))
                (allow sysadm_t system_cronjob_lock_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t system_cronjob_lock_t (dir (getattr open search)))
                (allow sysadm_t system_cronjob_lock_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t cron_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t user_cron_spool_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cron_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t user_cron_spool_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t cron_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t user_cron_spool_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cron_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t user_cron_spool_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cron_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t user_cron_spool_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cron_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t user_cron_spool_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t cron_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t user_cron_spool_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cron_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t user_cron_spool_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cron_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t user_cron_spool_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cron_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t user_cron_spool_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cron_log_t (dir (getattr open search)))
                (allow sysadm_t user_cron_spool_log_t (dir (getattr open search)))
                (allow sysadm_t cron_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t user_cron_spool_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t cron_log_t (dir (getattr open search)))
                (allow sysadm_t user_cron_spool_log_t (dir (getattr open search)))
                (allow sysadm_t cron_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t user_cron_spool_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t cron_log_t (dir (getattr open search)))
                (allow sysadm_t user_cron_spool_log_t (dir (getattr open search)))
                (allow sysadm_t cron_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t user_cron_spool_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cron_log_t (dir (getattr open search)))
                (allow sysadm_t user_cron_spool_log_t (dir (getattr open search)))
                (allow sysadm_t cron_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t user_cron_spool_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cron_log_t (dir (getattr open search)))
                (allow sysadm_t user_cron_spool_log_t (dir (getattr open search)))
                (allow sysadm_t cron_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t user_cron_spool_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_spool_t (dir (getattr open search)))
                (allow sysadm_t cron_spool_type (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cron_spool_type (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t cron_spool_type (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cron_spool_type (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cron_spool_type (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cron_spool_type (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t cron_spool_type (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cron_spool_type (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cron_spool_type (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cron_spool_type (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cron_spool_type (dir (getattr open search)))
                (allow sysadm_t cron_spool_type (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t cron_spool_type (dir (getattr open search)))
                (allow sysadm_t cron_spool_type (file (getattr relabelfrom relabelto)))
                (allow sysadm_t cron_spool_type (dir (getattr open search)))
                (allow sysadm_t cron_spool_type (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cron_spool_type (dir (getattr open search)))
                (allow sysadm_t cron_spool_type (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cron_spool_type (dir (getattr open search)))
                (allow sysadm_t cron_spool_type (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_163
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_164
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require ctdbd_t)
                (typeattributeset cil_gen_require ctdbd_initrc_exec_t)
                (typeattributeset cil_gen_require ctdbd_tmp_t)
                (typeattributeset cil_gen_require ctdbd_log_t)
                (typeattributeset cil_gen_require ctdbd_var_lib_t)
                (typeattributeset cil_gen_require ctdbd_runtime_t)
                (allow sysadm_t ctdbd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t ctdbd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t ctdbd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t ctdbd_t (lnk_file (read getattr)))
                (allow sysadm_t ctdbd_t (process (getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t ctdbd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ctdbd_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t ctdbd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ctdbd_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ctdbd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ctdbd_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t ctdbd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ctdbd_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ctdbd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ctdbd_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ctdbd_log_t (dir (getattr open search)))
                (allow sysadm_t ctdbd_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t ctdbd_log_t (dir (getattr open search)))
                (allow sysadm_t ctdbd_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t ctdbd_log_t (dir (getattr open search)))
                (allow sysadm_t ctdbd_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ctdbd_log_t (dir (getattr open search)))
                (allow sysadm_t ctdbd_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ctdbd_log_t (dir (getattr open search)))
                (allow sysadm_t ctdbd_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (getattr open search)))
                (allow sysadm_t ctdbd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ctdbd_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t ctdbd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ctdbd_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ctdbd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ctdbd_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t ctdbd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ctdbd_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ctdbd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ctdbd_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ctdbd_tmp_t (dir (getattr open search)))
                (allow sysadm_t ctdbd_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t ctdbd_tmp_t (dir (getattr open search)))
                (allow sysadm_t ctdbd_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t ctdbd_tmp_t (dir (getattr open search)))
                (allow sysadm_t ctdbd_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ctdbd_tmp_t (dir (getattr open search)))
                (allow sysadm_t ctdbd_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ctdbd_tmp_t (dir (getattr open search)))
                (allow sysadm_t ctdbd_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t ctdbd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ctdbd_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t ctdbd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ctdbd_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ctdbd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ctdbd_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t ctdbd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ctdbd_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ctdbd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ctdbd_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ctdbd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t ctdbd_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t ctdbd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t ctdbd_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t ctdbd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t ctdbd_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ctdbd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t ctdbd_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ctdbd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t ctdbd_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t ctdbd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ctdbd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t ctdbd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ctdbd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ctdbd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ctdbd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t ctdbd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ctdbd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ctdbd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ctdbd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ctdbd_runtime_t (dir (getattr open search)))
                (allow sysadm_t ctdbd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t ctdbd_runtime_t (dir (getattr open search)))
                (allow sysadm_t ctdbd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t ctdbd_runtime_t (dir (getattr open search)))
                (allow sysadm_t ctdbd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ctdbd_runtime_t (dir (getattr open search)))
                (allow sysadm_t ctdbd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ctdbd_runtime_t (dir (getattr open search)))
                (allow sysadm_t ctdbd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_165
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_166
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require cupsd_etc_t)
                (typeattributeset cil_gen_require cupsd_rw_etc_t)
                (typeattributeset cil_gen_require cupsd_t)
                (typeattributeset cil_gen_require cupsd_runtime_t)
                (typeattributeset cil_gen_require var_spool_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require cupsd_config_t)
                (typeattributeset cil_gen_require cupsd_tmp_t)
                (typeattributeset cil_gen_require cupsd_lpd_tmp_t)
                (typeattributeset cil_gen_require cupsd_log_t)
                (typeattributeset cil_gen_require cupsd_config_runtime_t)
                (typeattributeset cil_gen_require cupsd_lpd_runtime_t)
                (typeattributeset cil_gen_require hplip_runtime_t)
                (typeattributeset cil_gen_require cupsd_initrc_exec_t)
                (typeattributeset cil_gen_require cupsd_lpd_t)
                (typeattributeset cil_gen_require cups_pdf_t)
                (typeattributeset cil_gen_require hplip_t)
                (allow sysadm_t cupsd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t cupsd_config_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t cupsd_lpd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t cups_pdf_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t hplip_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t cupsd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t cupsd_config_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t cupsd_lpd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t cupsd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t cupsd_config_t (file (ioctl read getattr lock open)))
                (allow sysadm_t cupsd_lpd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t cupsd_t (lnk_file (read getattr)))
                (allow sysadm_t cupsd_config_t (lnk_file (read getattr)))
                (allow sysadm_t cupsd_lpd_t (lnk_file (read getattr)))
                (allow sysadm_t cupsd_t (process (getattr)))
                (allow sysadm_t cupsd_config_t (process (getattr)))
                (allow sysadm_t cupsd_lpd_t (process (getattr)))
                (allow sysadm_t cups_pdf_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t hplip_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t cups_pdf_t (file (ioctl read getattr lock open)))
                (allow sysadm_t hplip_t (file (ioctl read getattr lock open)))
                (allow sysadm_t cups_pdf_t (lnk_file (read getattr)))
                (allow sysadm_t hplip_t (lnk_file (read getattr)))
                (allow sysadm_t cups_pdf_t (process (getattr)))
                (allow sysadm_t hplip_t (process (getattr)))
                (allow sysadm_t etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t cupsd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cupsd_rw_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cupsd_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t cupsd_rw_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t cupsd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cupsd_rw_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cupsd_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cupsd_rw_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cupsd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cupsd_rw_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cupsd_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t cupsd_rw_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t cupsd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cupsd_rw_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cupsd_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cupsd_rw_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cupsd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cupsd_rw_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cupsd_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cupsd_rw_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cupsd_etc_t (dir (getattr open search)))
                (allow sysadm_t cupsd_rw_etc_t (dir (getattr open search)))
                (allow sysadm_t cupsd_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t cupsd_rw_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t cupsd_etc_t (dir (getattr open search)))
                (allow sysadm_t cupsd_rw_etc_t (dir (getattr open search)))
                (allow sysadm_t cupsd_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t cupsd_rw_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t cupsd_etc_t (dir (getattr open search)))
                (allow sysadm_t cupsd_rw_etc_t (dir (getattr open search)))
                (allow sysadm_t cupsd_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cupsd_rw_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cupsd_etc_t (dir (getattr open search)))
                (allow sysadm_t cupsd_rw_etc_t (dir (getattr open search)))
                (allow sysadm_t cupsd_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cupsd_rw_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cupsd_etc_t (dir (getattr open search)))
                (allow sysadm_t cupsd_rw_etc_t (dir (getattr open search)))
                (allow sysadm_t cupsd_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cupsd_rw_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t cupsd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cupsd_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t cupsd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cupsd_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cupsd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cupsd_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t cupsd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cupsd_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cupsd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cupsd_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cupsd_log_t (dir (getattr open search)))
                (allow sysadm_t cupsd_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t cupsd_log_t (dir (getattr open search)))
                (allow sysadm_t cupsd_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t cupsd_log_t (dir (getattr open search)))
                (allow sysadm_t cupsd_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cupsd_log_t (dir (getattr open search)))
                (allow sysadm_t cupsd_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cupsd_log_t (dir (getattr open search)))
                (allow sysadm_t cupsd_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_spool_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t tmp_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t cupsd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cupsd_lpd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cupsd_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t cupsd_lpd_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t cupsd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cupsd_lpd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cupsd_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cupsd_lpd_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cupsd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cupsd_lpd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cupsd_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t cupsd_lpd_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t cupsd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cupsd_lpd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cupsd_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cupsd_lpd_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cupsd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cupsd_lpd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cupsd_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cupsd_lpd_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cupsd_tmp_t (dir (getattr open search)))
                (allow sysadm_t cupsd_lpd_tmp_t (dir (getattr open search)))
                (allow sysadm_t cupsd_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t cupsd_lpd_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t cupsd_tmp_t (dir (getattr open search)))
                (allow sysadm_t cupsd_lpd_tmp_t (dir (getattr open search)))
                (allow sysadm_t cupsd_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t cupsd_lpd_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t cupsd_tmp_t (dir (getattr open search)))
                (allow sysadm_t cupsd_lpd_tmp_t (dir (getattr open search)))
                (allow sysadm_t cupsd_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cupsd_lpd_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cupsd_tmp_t (dir (getattr open search)))
                (allow sysadm_t cupsd_lpd_tmp_t (dir (getattr open search)))
                (allow sysadm_t cupsd_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cupsd_lpd_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cupsd_tmp_t (dir (getattr open search)))
                (allow sysadm_t cupsd_lpd_tmp_t (dir (getattr open search)))
                (allow sysadm_t cupsd_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cupsd_lpd_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t cupsd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cupsd_config_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t hplip_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cupsd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t cupsd_config_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t hplip_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t cupsd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cupsd_config_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t hplip_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cupsd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cupsd_config_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t hplip_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cupsd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cupsd_config_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t hplip_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cupsd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t cupsd_config_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t hplip_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t cupsd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cupsd_config_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t hplip_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cupsd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cupsd_config_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t hplip_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cupsd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cupsd_config_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t hplip_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cupsd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cupsd_config_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t hplip_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cupsd_runtime_t (dir (getattr open search)))
                (allow sysadm_t cupsd_config_runtime_t (dir (getattr open search)))
                (allow sysadm_t hplip_runtime_t (dir (getattr open search)))
                (allow sysadm_t cupsd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t cupsd_config_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t hplip_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t cupsd_runtime_t (dir (getattr open search)))
                (allow sysadm_t cupsd_config_runtime_t (dir (getattr open search)))
                (allow sysadm_t hplip_runtime_t (dir (getattr open search)))
                (allow sysadm_t cupsd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t cupsd_config_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t hplip_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t cupsd_runtime_t (dir (getattr open search)))
                (allow sysadm_t cupsd_config_runtime_t (dir (getattr open search)))
                (allow sysadm_t hplip_runtime_t (dir (getattr open search)))
                (allow sysadm_t cupsd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cupsd_config_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t hplip_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cupsd_runtime_t (dir (getattr open search)))
                (allow sysadm_t cupsd_config_runtime_t (dir (getattr open search)))
                (allow sysadm_t hplip_runtime_t (dir (getattr open search)))
                (allow sysadm_t cupsd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cupsd_config_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t hplip_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cupsd_runtime_t (dir (getattr open search)))
                (allow sysadm_t cupsd_config_runtime_t (dir (getattr open search)))
                (allow sysadm_t hplip_runtime_t (dir (getattr open search)))
                (allow sysadm_t cupsd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cupsd_config_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t hplip_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cupsd_lpd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cupsd_lpd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t cupsd_lpd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cupsd_lpd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cupsd_lpd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cupsd_lpd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t cupsd_lpd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cupsd_lpd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cupsd_lpd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cupsd_lpd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cupsd_lpd_runtime_t (dir (getattr open search)))
                (allow sysadm_t cupsd_lpd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t cupsd_lpd_runtime_t (dir (getattr open search)))
                (allow sysadm_t cupsd_lpd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t cupsd_lpd_runtime_t (dir (getattr open search)))
                (allow sysadm_t cupsd_lpd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cupsd_lpd_runtime_t (dir (getattr open search)))
                (allow sysadm_t cupsd_lpd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cupsd_lpd_runtime_t (dir (getattr open search)))
                (allow sysadm_t cupsd_lpd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_167
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_168
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require cvs_t)
                (typeattributeset cil_gen_require cvs_tmp_t)
                (typeattributeset cil_gen_require cvs_initrc_exec_t)
                (typeattributeset cil_gen_require cvs_data_t)
                (typeattributeset cil_gen_require cvs_runtime_t)
                (typeattributeset cil_gen_require cvs_keytab_t)
                (typeattributeset cil_gen_require cvs_exec_t)
                (allow sysadm_t cvs_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t cvs_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t cvs_t (file (ioctl read getattr lock open)))
                (allow sysadm_t cvs_t (lnk_file (read getattr)))
                (allow sysadm_t cvs_t (process (getattr)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t cvs_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cvs_keytab_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t cvs_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cvs_keytab_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cvs_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cvs_keytab_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t cvs_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cvs_keytab_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cvs_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cvs_keytab_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cvs_keytab_t (dir (getattr open search)))
                (allow sysadm_t cvs_keytab_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t cvs_keytab_t (dir (getattr open search)))
                (allow sysadm_t cvs_keytab_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t cvs_keytab_t (dir (getattr open search)))
                (allow sysadm_t cvs_keytab_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cvs_keytab_t (dir (getattr open search)))
                (allow sysadm_t cvs_keytab_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cvs_keytab_t (dir (getattr open search)))
                (allow sysadm_t cvs_keytab_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t cvs_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cvs_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t cvs_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cvs_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cvs_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cvs_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t cvs_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cvs_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cvs_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cvs_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cvs_tmp_t (dir (getattr open search)))
                (allow sysadm_t cvs_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t cvs_tmp_t (dir (getattr open search)))
                (allow sysadm_t cvs_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t cvs_tmp_t (dir (getattr open search)))
                (allow sysadm_t cvs_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cvs_tmp_t (dir (getattr open search)))
                (allow sysadm_t cvs_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cvs_tmp_t (dir (getattr open search)))
                (allow sysadm_t cvs_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t cvs_data_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cvs_data_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t cvs_data_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cvs_data_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cvs_data_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cvs_data_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t cvs_data_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cvs_data_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cvs_data_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cvs_data_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cvs_data_t (dir (getattr open search)))
                (allow sysadm_t cvs_data_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t cvs_data_t (dir (getattr open search)))
                (allow sysadm_t cvs_data_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t cvs_data_t (dir (getattr open search)))
                (allow sysadm_t cvs_data_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cvs_data_t (dir (getattr open search)))
                (allow sysadm_t cvs_data_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cvs_data_t (dir (getattr open search)))
                (allow sysadm_t cvs_data_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t cvs_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cvs_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t cvs_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cvs_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cvs_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cvs_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t cvs_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cvs_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cvs_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cvs_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cvs_runtime_t (dir (getattr open search)))
                (allow sysadm_t cvs_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t cvs_runtime_t (dir (getattr open search)))
                (allow sysadm_t cvs_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t cvs_runtime_t (dir (getattr open search)))
                (allow sysadm_t cvs_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cvs_runtime_t (dir (getattr open search)))
                (allow sysadm_t cvs_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cvs_runtime_t (dir (getattr open search)))
                (allow sysadm_t cvs_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t cvs_exec_t (file (ioctl read getattr lock map execute open execute_no_trans)))
                (optional sysadm_optional_169
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_170
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require cyphesis_t)
                (typeattributeset cil_gen_require cyphesis_initrc_exec_t)
                (typeattributeset cil_gen_require cyphesis_log_t)
                (typeattributeset cil_gen_require cyphesis_runtime_t)
                (typeattributeset cil_gen_require cyphesis_tmp_t)
                (allow sysadm_t cyphesis_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t cyphesis_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t cyphesis_t (file (ioctl read getattr lock open)))
                (allow sysadm_t cyphesis_t (lnk_file (read getattr)))
                (allow sysadm_t cyphesis_t (process (getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t cyphesis_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cyphesis_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t cyphesis_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cyphesis_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cyphesis_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cyphesis_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t cyphesis_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cyphesis_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cyphesis_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cyphesis_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cyphesis_log_t (dir (getattr open search)))
                (allow sysadm_t cyphesis_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t cyphesis_log_t (dir (getattr open search)))
                (allow sysadm_t cyphesis_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t cyphesis_log_t (dir (getattr open search)))
                (allow sysadm_t cyphesis_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cyphesis_log_t (dir (getattr open search)))
                (allow sysadm_t cyphesis_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cyphesis_log_t (dir (getattr open search)))
                (allow sysadm_t cyphesis_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t cyphesis_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cyphesis_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t cyphesis_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cyphesis_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cyphesis_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cyphesis_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t cyphesis_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cyphesis_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cyphesis_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cyphesis_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cyphesis_runtime_t (dir (getattr open search)))
                (allow sysadm_t cyphesis_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t cyphesis_runtime_t (dir (getattr open search)))
                (allow sysadm_t cyphesis_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t cyphesis_runtime_t (dir (getattr open search)))
                (allow sysadm_t cyphesis_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cyphesis_runtime_t (dir (getattr open search)))
                (allow sysadm_t cyphesis_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cyphesis_runtime_t (dir (getattr open search)))
                (allow sysadm_t cyphesis_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (getattr open search)))
                (allow sysadm_t cyphesis_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cyphesis_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t cyphesis_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cyphesis_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cyphesis_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cyphesis_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t cyphesis_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cyphesis_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cyphesis_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cyphesis_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cyphesis_tmp_t (dir (getattr open search)))
                (allow sysadm_t cyphesis_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t cyphesis_tmp_t (dir (getattr open search)))
                (allow sysadm_t cyphesis_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t cyphesis_tmp_t (dir (getattr open search)))
                (allow sysadm_t cyphesis_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cyphesis_tmp_t (dir (getattr open search)))
                (allow sysadm_t cyphesis_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cyphesis_tmp_t (dir (getattr open search)))
                (allow sysadm_t cyphesis_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_171
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_172
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require cyrus_t)
                (typeattributeset cil_gen_require cyrus_tmp_t)
                (typeattributeset cil_gen_require cyrus_var_lib_t)
                (typeattributeset cil_gen_require cyrus_runtime_t)
                (typeattributeset cil_gen_require cyrus_initrc_exec_t)
                (typeattributeset cil_gen_require cyrus_keytab_t)
                (allow sysadm_t cyrus_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t cyrus_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t cyrus_t (file (ioctl read getattr lock open)))
                (allow sysadm_t cyrus_t (lnk_file (read getattr)))
                (allow sysadm_t cyrus_t (process (getattr)))
                (allow sysadm_t etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t cyrus_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cyrus_keytab_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t cyrus_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cyrus_keytab_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cyrus_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cyrus_keytab_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t cyrus_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cyrus_keytab_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cyrus_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cyrus_keytab_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cyrus_keytab_t (dir (getattr open search)))
                (allow sysadm_t cyrus_keytab_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t cyrus_keytab_t (dir (getattr open search)))
                (allow sysadm_t cyrus_keytab_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t cyrus_keytab_t (dir (getattr open search)))
                (allow sysadm_t cyrus_keytab_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cyrus_keytab_t (dir (getattr open search)))
                (allow sysadm_t cyrus_keytab_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cyrus_keytab_t (dir (getattr open search)))
                (allow sysadm_t cyrus_keytab_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t cyrus_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cyrus_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t cyrus_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cyrus_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cyrus_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cyrus_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t cyrus_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cyrus_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cyrus_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cyrus_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cyrus_tmp_t (dir (getattr open search)))
                (allow sysadm_t cyrus_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t cyrus_tmp_t (dir (getattr open search)))
                (allow sysadm_t cyrus_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t cyrus_tmp_t (dir (getattr open search)))
                (allow sysadm_t cyrus_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cyrus_tmp_t (dir (getattr open search)))
                (allow sysadm_t cyrus_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cyrus_tmp_t (dir (getattr open search)))
                (allow sysadm_t cyrus_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t cyrus_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cyrus_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t cyrus_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cyrus_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cyrus_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cyrus_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t cyrus_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cyrus_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cyrus_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cyrus_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cyrus_var_lib_t (dir (getattr open search)))
                (allow sysadm_t cyrus_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t cyrus_var_lib_t (dir (getattr open search)))
                (allow sysadm_t cyrus_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t cyrus_var_lib_t (dir (getattr open search)))
                (allow sysadm_t cyrus_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cyrus_var_lib_t (dir (getattr open search)))
                (allow sysadm_t cyrus_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cyrus_var_lib_t (dir (getattr open search)))
                (allow sysadm_t cyrus_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t cyrus_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cyrus_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t cyrus_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cyrus_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cyrus_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cyrus_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t cyrus_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cyrus_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cyrus_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cyrus_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cyrus_runtime_t (dir (getattr open search)))
                (allow sysadm_t cyrus_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t cyrus_runtime_t (dir (getattr open search)))
                (allow sysadm_t cyrus_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t cyrus_runtime_t (dir (getattr open search)))
                (allow sysadm_t cyrus_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cyrus_runtime_t (dir (getattr open search)))
                (allow sysadm_t cyrus_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cyrus_runtime_t (dir (getattr open search)))
                (allow sysadm_t cyrus_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_173
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_174
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require dante_t)
                (typeattributeset cil_gen_require dante_conf_t)
                (typeattributeset cil_gen_require dante_runtime_t)
                (typeattributeset cil_gen_require dante_initrc_exec_t)
                (allow sysadm_t dante_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t dante_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t dante_t (file (ioctl read getattr lock open)))
                (allow sysadm_t dante_t (lnk_file (read getattr)))
                (allow sysadm_t dante_t (process (getattr)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t dante_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dante_conf_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t dante_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dante_conf_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dante_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dante_conf_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t dante_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dante_conf_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dante_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dante_conf_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dante_conf_t (dir (getattr open search)))
                (allow sysadm_t dante_conf_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t dante_conf_t (dir (getattr open search)))
                (allow sysadm_t dante_conf_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t dante_conf_t (dir (getattr open search)))
                (allow sysadm_t dante_conf_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dante_conf_t (dir (getattr open search)))
                (allow sysadm_t dante_conf_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dante_conf_t (dir (getattr open search)))
                (allow sysadm_t dante_conf_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t dante_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dante_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t dante_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dante_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dante_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dante_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t dante_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dante_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dante_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dante_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dante_runtime_t (dir (getattr open search)))
                (allow sysadm_t dante_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t dante_runtime_t (dir (getattr open search)))
                (allow sysadm_t dante_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t dante_runtime_t (dir (getattr open search)))
                (allow sysadm_t dante_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dante_runtime_t (dir (getattr open search)))
                (allow sysadm_t dante_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dante_runtime_t (dir (getattr open search)))
                (allow sysadm_t dante_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_175
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_176
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require ddclient_t)
                (typeattributeset cil_gen_require ddclient_etc_t)
                (typeattributeset cil_gen_require ddclient_log_t)
                (typeattributeset cil_gen_require ddclient_var_t)
                (typeattributeset cil_gen_require ddclient_var_lib_t)
                (typeattributeset cil_gen_require ddclient_tmp_t)
                (typeattributeset cil_gen_require ddclient_runtime_t)
                (typeattributeset cil_gen_require ddclient_initrc_exec_t)
                (allow sysadm_t ddclient_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t ddclient_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t ddclient_t (file (ioctl read getattr lock open)))
                (allow sysadm_t ddclient_t (lnk_file (read getattr)))
                (allow sysadm_t ddclient_t (process (getattr)))
                (allow sysadm_t etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t ddclient_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ddclient_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t ddclient_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ddclient_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ddclient_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ddclient_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t ddclient_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ddclient_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ddclient_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ddclient_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ddclient_etc_t (dir (getattr open search)))
                (allow sysadm_t ddclient_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t ddclient_etc_t (dir (getattr open search)))
                (allow sysadm_t ddclient_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t ddclient_etc_t (dir (getattr open search)))
                (allow sysadm_t ddclient_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ddclient_etc_t (dir (getattr open search)))
                (allow sysadm_t ddclient_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ddclient_etc_t (dir (getattr open search)))
                (allow sysadm_t ddclient_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t ddclient_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ddclient_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t ddclient_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ddclient_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ddclient_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ddclient_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t ddclient_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ddclient_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ddclient_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ddclient_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ddclient_log_t (dir (getattr open search)))
                (allow sysadm_t ddclient_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t ddclient_log_t (dir (getattr open search)))
                (allow sysadm_t ddclient_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t ddclient_log_t (dir (getattr open search)))
                (allow sysadm_t ddclient_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ddclient_log_t (dir (getattr open search)))
                (allow sysadm_t ddclient_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ddclient_log_t (dir (getattr open search)))
                (allow sysadm_t ddclient_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t ddclient_var_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ddclient_var_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t ddclient_var_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ddclient_var_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ddclient_var_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ddclient_var_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t ddclient_var_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ddclient_var_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ddclient_var_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ddclient_var_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ddclient_var_t (dir (getattr open search)))
                (allow sysadm_t ddclient_var_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t ddclient_var_t (dir (getattr open search)))
                (allow sysadm_t ddclient_var_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t ddclient_var_t (dir (getattr open search)))
                (allow sysadm_t ddclient_var_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ddclient_var_t (dir (getattr open search)))
                (allow sysadm_t ddclient_var_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ddclient_var_t (dir (getattr open search)))
                (allow sysadm_t ddclient_var_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t ddclient_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ddclient_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t ddclient_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ddclient_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ddclient_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ddclient_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t ddclient_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ddclient_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ddclient_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ddclient_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ddclient_var_lib_t (dir (getattr open search)))
                (allow sysadm_t ddclient_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t ddclient_var_lib_t (dir (getattr open search)))
                (allow sysadm_t ddclient_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t ddclient_var_lib_t (dir (getattr open search)))
                (allow sysadm_t ddclient_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ddclient_var_lib_t (dir (getattr open search)))
                (allow sysadm_t ddclient_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ddclient_var_lib_t (dir (getattr open search)))
                (allow sysadm_t ddclient_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t ddclient_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ddclient_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t ddclient_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ddclient_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ddclient_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ddclient_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t ddclient_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ddclient_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ddclient_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ddclient_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ddclient_runtime_t (dir (getattr open search)))
                (allow sysadm_t ddclient_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t ddclient_runtime_t (dir (getattr open search)))
                (allow sysadm_t ddclient_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t ddclient_runtime_t (dir (getattr open search)))
                (allow sysadm_t ddclient_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ddclient_runtime_t (dir (getattr open search)))
                (allow sysadm_t ddclient_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ddclient_runtime_t (dir (getattr open search)))
                (allow sysadm_t ddclient_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t ddclient_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ddclient_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t ddclient_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ddclient_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ddclient_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ddclient_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t ddclient_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ddclient_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ddclient_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ddclient_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ddclient_tmp_t (dir (getattr open search)))
                (allow sysadm_t ddclient_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t ddclient_tmp_t (dir (getattr open search)))
                (allow sysadm_t ddclient_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t ddclient_tmp_t (dir (getattr open search)))
                (allow sysadm_t ddclient_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ddclient_tmp_t (dir (getattr open search)))
                (allow sysadm_t ddclient_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ddclient_tmp_t (dir (getattr open search)))
                (allow sysadm_t ddclient_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_177
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_178
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require devicekit_disk_t)
                (typeattributeset cil_gen_require devicekit_power_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require devicekit_t)
                (typeattributeset cil_gen_require devicekit_var_lib_t)
                (typeattributeset cil_gen_require devicekit_runtime_t)
                (typeattributeset cil_gen_require devicekit_tmp_t)
                (typeattributeset cil_gen_require devicekit_var_log_t)
                (allow sysadm_t devicekit_disk_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t devicekit_power_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t devicekit_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t devicekit_disk_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t devicekit_power_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t devicekit_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t devicekit_disk_t (file (ioctl read getattr lock open)))
                (allow sysadm_t devicekit_power_t (file (ioctl read getattr lock open)))
                (allow sysadm_t devicekit_t (file (ioctl read getattr lock open)))
                (allow sysadm_t devicekit_disk_t (lnk_file (read getattr)))
                (allow sysadm_t devicekit_power_t (lnk_file (read getattr)))
                (allow sysadm_t devicekit_t (lnk_file (read getattr)))
                (allow sysadm_t devicekit_disk_t (process (getattr)))
                (allow sysadm_t devicekit_power_t (process (getattr)))
                (allow sysadm_t devicekit_t (process (getattr)))
                (allow sysadm_t tmp_t (dir (getattr open search)))
                (allow sysadm_t devicekit_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t devicekit_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t devicekit_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t devicekit_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t devicekit_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t devicekit_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t devicekit_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t devicekit_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t devicekit_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t devicekit_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t devicekit_tmp_t (dir (getattr open search)))
                (allow sysadm_t devicekit_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t devicekit_tmp_t (dir (getattr open search)))
                (allow sysadm_t devicekit_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t devicekit_tmp_t (dir (getattr open search)))
                (allow sysadm_t devicekit_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t devicekit_tmp_t (dir (getattr open search)))
                (allow sysadm_t devicekit_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t devicekit_tmp_t (dir (getattr open search)))
                (allow sysadm_t devicekit_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t devicekit_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t devicekit_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t devicekit_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t devicekit_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t devicekit_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t devicekit_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t devicekit_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t devicekit_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t devicekit_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t devicekit_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t devicekit_var_lib_t (dir (getattr open search)))
                (allow sysadm_t devicekit_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t devicekit_var_lib_t (dir (getattr open search)))
                (allow sysadm_t devicekit_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t devicekit_var_lib_t (dir (getattr open search)))
                (allow sysadm_t devicekit_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t devicekit_var_lib_t (dir (getattr open search)))
                (allow sysadm_t devicekit_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t devicekit_var_lib_t (dir (getattr open search)))
                (allow sysadm_t devicekit_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t devicekit_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t devicekit_var_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t devicekit_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t devicekit_var_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t devicekit_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t devicekit_var_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t devicekit_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t devicekit_var_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t devicekit_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t devicekit_var_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t devicekit_var_log_t (dir (getattr open search)))
                (allow sysadm_t devicekit_var_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t devicekit_var_log_t (dir (getattr open search)))
                (allow sysadm_t devicekit_var_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t devicekit_var_log_t (dir (getattr open search)))
                (allow sysadm_t devicekit_var_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t devicekit_var_log_t (dir (getattr open search)))
                (allow sysadm_t devicekit_var_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t devicekit_var_log_t (dir (getattr open search)))
                (allow sysadm_t devicekit_var_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t devicekit_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t devicekit_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t devicekit_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t devicekit_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t devicekit_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t devicekit_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t devicekit_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t devicekit_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t devicekit_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t devicekit_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t devicekit_runtime_t (dir (getattr open search)))
                (allow sysadm_t devicekit_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t devicekit_runtime_t (dir (getattr open search)))
                (allow sysadm_t devicekit_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t devicekit_runtime_t (dir (getattr open search)))
                (allow sysadm_t devicekit_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t devicekit_runtime_t (dir (getattr open search)))
                (allow sysadm_t devicekit_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t devicekit_runtime_t (dir (getattr open search)))
                (allow sysadm_t devicekit_runtime_t (sock_file (getattr relabelfrom relabelto)))
            )
            (optional sysadm_optional_179
                (typeattributeset cil_gen_require device_t)
                (typeattributeset cil_gen_require xen_device_t)
                (allow sysadm_t device_t (dir (getattr open search)))
                (allow sysadm_t xen_device_t (chr_file (ioctl read write getattr lock append open)))
                (allow sysadm_t xen_device_t (chr_file (map)))
            )
            (optional sysadm_optional_180
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require dhcpd_t)
                (typeattributeset cil_gen_require dhcpd_tmp_t)
                (typeattributeset cil_gen_require dhcpd_state_t)
                (typeattributeset cil_gen_require dhcpd_runtime_t)
                (typeattributeset cil_gen_require dhcpd_initrc_exec_t)
                (allow sysadm_t dhcpd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t dhcpd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t dhcpd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t dhcpd_t (lnk_file (read getattr)))
                (allow sysadm_t dhcpd_t (process (getattr)))
                (allow sysadm_t tmp_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t dhcpd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dhcpd_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t dhcpd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dhcpd_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dhcpd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dhcpd_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t dhcpd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dhcpd_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dhcpd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dhcpd_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dhcpd_tmp_t (dir (getattr open search)))
                (allow sysadm_t dhcpd_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t dhcpd_tmp_t (dir (getattr open search)))
                (allow sysadm_t dhcpd_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t dhcpd_tmp_t (dir (getattr open search)))
                (allow sysadm_t dhcpd_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dhcpd_tmp_t (dir (getattr open search)))
                (allow sysadm_t dhcpd_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dhcpd_tmp_t (dir (getattr open search)))
                (allow sysadm_t dhcpd_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t dhcpd_state_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dhcpd_state_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t dhcpd_state_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dhcpd_state_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dhcpd_state_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dhcpd_state_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t dhcpd_state_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dhcpd_state_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dhcpd_state_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dhcpd_state_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dhcpd_state_t (dir (getattr open search)))
                (allow sysadm_t dhcpd_state_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t dhcpd_state_t (dir (getattr open search)))
                (allow sysadm_t dhcpd_state_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t dhcpd_state_t (dir (getattr open search)))
                (allow sysadm_t dhcpd_state_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dhcpd_state_t (dir (getattr open search)))
                (allow sysadm_t dhcpd_state_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dhcpd_state_t (dir (getattr open search)))
                (allow sysadm_t dhcpd_state_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t dhcpd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dhcpd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t dhcpd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dhcpd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dhcpd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dhcpd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t dhcpd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dhcpd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dhcpd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dhcpd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dhcpd_runtime_t (dir (getattr open search)))
                (allow sysadm_t dhcpd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t dhcpd_runtime_t (dir (getattr open search)))
                (allow sysadm_t dhcpd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t dhcpd_runtime_t (dir (getattr open search)))
                (allow sysadm_t dhcpd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dhcpd_runtime_t (dir (getattr open search)))
                (allow sysadm_t dhcpd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dhcpd_runtime_t (dir (getattr open search)))
                (allow sysadm_t dhcpd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_181
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_182
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require dictd_t)
                (typeattributeset cil_gen_require dictd_etc_t)
                (typeattributeset cil_gen_require dictd_var_lib_t)
                (typeattributeset cil_gen_require dictd_runtime_t)
                (typeattributeset cil_gen_require dictd_initrc_exec_t)
                (allow sysadm_t dictd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t dictd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t dictd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t dictd_t (lnk_file (read getattr)))
                (allow sysadm_t dictd_t (process (getattr)))
                (allow sysadm_t etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t dictd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dictd_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t dictd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dictd_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dictd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dictd_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t dictd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dictd_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dictd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dictd_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dictd_etc_t (dir (getattr open search)))
                (allow sysadm_t dictd_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t dictd_etc_t (dir (getattr open search)))
                (allow sysadm_t dictd_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t dictd_etc_t (dir (getattr open search)))
                (allow sysadm_t dictd_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dictd_etc_t (dir (getattr open search)))
                (allow sysadm_t dictd_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dictd_etc_t (dir (getattr open search)))
                (allow sysadm_t dictd_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t dictd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dictd_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t dictd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dictd_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dictd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dictd_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t dictd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dictd_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dictd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dictd_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dictd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t dictd_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t dictd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t dictd_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t dictd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t dictd_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dictd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t dictd_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dictd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t dictd_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t dictd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dictd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t dictd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dictd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dictd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dictd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t dictd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dictd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dictd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dictd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dictd_runtime_t (dir (getattr open search)))
                (allow sysadm_t dictd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t dictd_runtime_t (dir (getattr open search)))
                (allow sysadm_t dictd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t dictd_runtime_t (dir (getattr open search)))
                (allow sysadm_t dictd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dictd_runtime_t (dir (getattr open search)))
                (allow sysadm_t dictd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dictd_runtime_t (dir (getattr open search)))
                (allow sysadm_t dictd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_183
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_184
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require dirmngr_t)
                (typeattributeset cil_gen_require dirmngr_initrc_exec_t)
                (typeattributeset cil_gen_require dirmngr_runtime_t)
                (typeattributeset cil_gen_require dirmngr_conf_t)
                (typeattributeset cil_gen_require dirmngr_var_lib_t)
                (typeattributeset cil_gen_require dirmngr_log_t)
                (allow sysadm_t dirmngr_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t dirmngr_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t dirmngr_t (file (ioctl read getattr lock open)))
                (allow sysadm_t dirmngr_t (lnk_file (read getattr)))
                (allow sysadm_t dirmngr_t (process (getattr)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t dirmngr_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dirmngr_conf_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t dirmngr_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dirmngr_conf_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dirmngr_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dirmngr_conf_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t dirmngr_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dirmngr_conf_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dirmngr_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dirmngr_conf_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dirmngr_conf_t (dir (getattr open search)))
                (allow sysadm_t dirmngr_conf_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t dirmngr_conf_t (dir (getattr open search)))
                (allow sysadm_t dirmngr_conf_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t dirmngr_conf_t (dir (getattr open search)))
                (allow sysadm_t dirmngr_conf_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dirmngr_conf_t (dir (getattr open search)))
                (allow sysadm_t dirmngr_conf_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dirmngr_conf_t (dir (getattr open search)))
                (allow sysadm_t dirmngr_conf_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t dirmngr_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dirmngr_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t dirmngr_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dirmngr_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dirmngr_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dirmngr_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t dirmngr_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dirmngr_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dirmngr_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dirmngr_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dirmngr_log_t (dir (getattr open search)))
                (allow sysadm_t dirmngr_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t dirmngr_log_t (dir (getattr open search)))
                (allow sysadm_t dirmngr_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t dirmngr_log_t (dir (getattr open search)))
                (allow sysadm_t dirmngr_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dirmngr_log_t (dir (getattr open search)))
                (allow sysadm_t dirmngr_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dirmngr_log_t (dir (getattr open search)))
                (allow sysadm_t dirmngr_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t dirmngr_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dirmngr_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t dirmngr_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dirmngr_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dirmngr_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dirmngr_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t dirmngr_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dirmngr_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dirmngr_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dirmngr_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dirmngr_runtime_t (dir (getattr open search)))
                (allow sysadm_t dirmngr_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t dirmngr_runtime_t (dir (getattr open search)))
                (allow sysadm_t dirmngr_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t dirmngr_runtime_t (dir (getattr open search)))
                (allow sysadm_t dirmngr_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dirmngr_runtime_t (dir (getattr open search)))
                (allow sysadm_t dirmngr_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dirmngr_runtime_t (dir (getattr open search)))
                (allow sysadm_t dirmngr_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t dirmngr_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dirmngr_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t dirmngr_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dirmngr_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dirmngr_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dirmngr_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t dirmngr_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dirmngr_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dirmngr_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dirmngr_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dirmngr_var_lib_t (dir (getattr open search)))
                (allow sysadm_t dirmngr_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t dirmngr_var_lib_t (dir (getattr open search)))
                (allow sysadm_t dirmngr_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t dirmngr_var_lib_t (dir (getattr open search)))
                (allow sysadm_t dirmngr_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dirmngr_var_lib_t (dir (getattr open search)))
                (allow sysadm_t dirmngr_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dirmngr_var_lib_t (dir (getattr open search)))
                (allow sysadm_t dirmngr_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_185
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_186
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require distccd_t)
                (typeattributeset cil_gen_require distccd_log_t)
                (typeattributeset cil_gen_require distccd_runtime_t)
                (typeattributeset cil_gen_require distccd_tmp_t)
                (typeattributeset cil_gen_require distccd_initrc_exec_t)
                (allow sysadm_t distccd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t distccd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t distccd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t distccd_t (lnk_file (read getattr)))
                (allow sysadm_t distccd_t (process (getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t distccd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t distccd_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t distccd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t distccd_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t distccd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t distccd_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t distccd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t distccd_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t distccd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t distccd_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t distccd_log_t (dir (getattr open search)))
                (allow sysadm_t distccd_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t distccd_log_t (dir (getattr open search)))
                (allow sysadm_t distccd_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t distccd_log_t (dir (getattr open search)))
                (allow sysadm_t distccd_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t distccd_log_t (dir (getattr open search)))
                (allow sysadm_t distccd_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t distccd_log_t (dir (getattr open search)))
                (allow sysadm_t distccd_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (getattr open search)))
                (allow sysadm_t distccd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t distccd_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t distccd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t distccd_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t distccd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t distccd_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t distccd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t distccd_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t distccd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t distccd_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t distccd_tmp_t (dir (getattr open search)))
                (allow sysadm_t distccd_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t distccd_tmp_t (dir (getattr open search)))
                (allow sysadm_t distccd_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t distccd_tmp_t (dir (getattr open search)))
                (allow sysadm_t distccd_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t distccd_tmp_t (dir (getattr open search)))
                (allow sysadm_t distccd_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t distccd_tmp_t (dir (getattr open search)))
                (allow sysadm_t distccd_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t distccd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t distccd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t distccd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t distccd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t distccd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t distccd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t distccd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t distccd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t distccd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t distccd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t distccd_runtime_t (dir (getattr open search)))
                (allow sysadm_t distccd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t distccd_runtime_t (dir (getattr open search)))
                (allow sysadm_t distccd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t distccd_runtime_t (dir (getattr open search)))
                (allow sysadm_t distccd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t distccd_runtime_t (dir (getattr open search)))
                (allow sysadm_t distccd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t distccd_runtime_t (dir (getattr open search)))
                (allow sysadm_t distccd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_187
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_188
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require dkim_milter_t)
                (typeattributeset cil_gen_require dkim_milter_initrc_exec_t)
                (typeattributeset cil_gen_require dkim_milter_private_key_t)
                (typeattributeset cil_gen_require dkim_milter_data_t)
                (allow sysadm_t dkim_milter_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t dkim_milter_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t dkim_milter_t (file (ioctl read getattr lock open)))
                (allow sysadm_t dkim_milter_t (lnk_file (read getattr)))
                (allow sysadm_t dkim_milter_t (process (getattr)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t dkim_milter_private_key_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dkim_milter_private_key_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t dkim_milter_private_key_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dkim_milter_private_key_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dkim_milter_private_key_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dkim_milter_private_key_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t dkim_milter_private_key_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dkim_milter_private_key_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dkim_milter_private_key_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dkim_milter_private_key_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dkim_milter_private_key_t (dir (getattr open search)))
                (allow sysadm_t dkim_milter_private_key_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t dkim_milter_private_key_t (dir (getattr open search)))
                (allow sysadm_t dkim_milter_private_key_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t dkim_milter_private_key_t (dir (getattr open search)))
                (allow sysadm_t dkim_milter_private_key_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dkim_milter_private_key_t (dir (getattr open search)))
                (allow sysadm_t dkim_milter_private_key_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dkim_milter_private_key_t (dir (getattr open search)))
                (allow sysadm_t dkim_milter_private_key_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t dkim_milter_data_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dkim_milter_data_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t dkim_milter_data_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dkim_milter_data_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dkim_milter_data_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dkim_milter_data_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t dkim_milter_data_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dkim_milter_data_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dkim_milter_data_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dkim_milter_data_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dkim_milter_data_t (dir (getattr open search)))
                (allow sysadm_t dkim_milter_data_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t dkim_milter_data_t (dir (getattr open search)))
                (allow sysadm_t dkim_milter_data_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t dkim_milter_data_t (dir (getattr open search)))
                (allow sysadm_t dkim_milter_data_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dkim_milter_data_t (dir (getattr open search)))
                (allow sysadm_t dkim_milter_data_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dkim_milter_data_t (dir (getattr open search)))
                (allow sysadm_t dkim_milter_data_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_189
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_190
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require dmesg_exec_t)
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t dmesg_exec_t (file (ioctl read getattr lock map execute open execute_no_trans)))
            )
            (optional sysadm_optional_191
                (roleattributeset cil_gen_require dmidecode_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require dmidecode_t)
                (typeattributeset cil_gen_require dmidecode_exec_t)
                (roleattributeset cil_gen_require dmidecode_roles)
                (roleattributeset dmidecode_roles (sysadm_r ))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t dmidecode_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t dmidecode_t (process (transition)))
                (dontaudit sysadm_t dmidecode_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t dmidecode_exec_t process dmidecode_t)
                (allow dmidecode_t sysadm_t (fd (use)))
                (allow dmidecode_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow dmidecode_t sysadm_t (process (sigchld)))
            )
            (optional sysadm_optional_192
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require dnsmasq_t)
                (typeattributeset cil_gen_require dnsmasq_lease_t)
                (typeattributeset cil_gen_require dnsmasq_runtime_t)
                (typeattributeset cil_gen_require dnsmasq_initrc_exec_t)
                (typeattributeset cil_gen_require dnsmasq_var_log_t)
                (allow sysadm_t dnsmasq_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t dnsmasq_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t dnsmasq_t (file (ioctl read getattr lock open)))
                (allow sysadm_t dnsmasq_t (lnk_file (read getattr)))
                (allow sysadm_t dnsmasq_t (process (getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t dnsmasq_lease_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dnsmasq_lease_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t dnsmasq_lease_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dnsmasq_lease_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dnsmasq_lease_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dnsmasq_lease_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t dnsmasq_lease_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dnsmasq_lease_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dnsmasq_lease_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dnsmasq_lease_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dnsmasq_lease_t (dir (getattr open search)))
                (allow sysadm_t dnsmasq_lease_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t dnsmasq_lease_t (dir (getattr open search)))
                (allow sysadm_t dnsmasq_lease_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t dnsmasq_lease_t (dir (getattr open search)))
                (allow sysadm_t dnsmasq_lease_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dnsmasq_lease_t (dir (getattr open search)))
                (allow sysadm_t dnsmasq_lease_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dnsmasq_lease_t (dir (getattr open search)))
                (allow sysadm_t dnsmasq_lease_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t dnsmasq_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dnsmasq_var_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t dnsmasq_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dnsmasq_var_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dnsmasq_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dnsmasq_var_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t dnsmasq_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dnsmasq_var_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dnsmasq_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dnsmasq_var_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dnsmasq_var_log_t (dir (getattr open search)))
                (allow sysadm_t dnsmasq_var_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t dnsmasq_var_log_t (dir (getattr open search)))
                (allow sysadm_t dnsmasq_var_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t dnsmasq_var_log_t (dir (getattr open search)))
                (allow sysadm_t dnsmasq_var_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dnsmasq_var_log_t (dir (getattr open search)))
                (allow sysadm_t dnsmasq_var_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dnsmasq_var_log_t (dir (getattr open search)))
                (allow sysadm_t dnsmasq_var_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t dnsmasq_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dnsmasq_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t dnsmasq_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dnsmasq_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dnsmasq_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dnsmasq_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t dnsmasq_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dnsmasq_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dnsmasq_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dnsmasq_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dnsmasq_runtime_t (dir (getattr open search)))
                (allow sysadm_t dnsmasq_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t dnsmasq_runtime_t (dir (getattr open search)))
                (allow sysadm_t dnsmasq_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t dnsmasq_runtime_t (dir (getattr open search)))
                (allow sysadm_t dnsmasq_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dnsmasq_runtime_t (dir (getattr open search)))
                (allow sysadm_t dnsmasq_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dnsmasq_runtime_t (dir (getattr open search)))
                (allow sysadm_t dnsmasq_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_193
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_194
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require var_spool_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require dovecot_t)
                (typeattributeset cil_gen_require dovecot_etc_t)
                (typeattributeset cil_gen_require dovecot_var_log_t)
                (typeattributeset cil_gen_require dovecot_spool_t)
                (typeattributeset cil_gen_require dovecot_var_lib_t)
                (typeattributeset cil_gen_require dovecot_initrc_exec_t)
                (typeattributeset cil_gen_require dovecot_runtime_t)
                (typeattributeset cil_gen_require dovecot_cert_t)
                (typeattributeset cil_gen_require dovecot_passwd_t)
                (typeattributeset cil_gen_require dovecot_tmp_t)
                (typeattributeset cil_gen_require dovecot_auth_tmp_t)
                (typeattributeset cil_gen_require dovecot_deliver_tmp_t)
                (typeattributeset cil_gen_require dovecot_keytab_t)
                (allow sysadm_t dovecot_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t dovecot_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t dovecot_t (file (ioctl read getattr lock open)))
                (allow sysadm_t dovecot_t (lnk_file (read getattr)))
                (allow sysadm_t dovecot_t (process (getattr)))
                (allow sysadm_t etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t dovecot_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dovecot_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dovecot_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t dovecot_keytab_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t dovecot_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dovecot_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dovecot_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dovecot_keytab_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dovecot_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dovecot_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dovecot_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t dovecot_keytab_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t dovecot_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dovecot_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dovecot_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dovecot_keytab_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dovecot_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dovecot_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dovecot_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dovecot_keytab_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dovecot_etc_t (dir (getattr open search)))
                (allow sysadm_t dovecot_keytab_t (dir (getattr open search)))
                (allow sysadm_t dovecot_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t dovecot_keytab_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t dovecot_etc_t (dir (getattr open search)))
                (allow sysadm_t dovecot_keytab_t (dir (getattr open search)))
                (allow sysadm_t dovecot_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t dovecot_keytab_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t dovecot_etc_t (dir (getattr open search)))
                (allow sysadm_t dovecot_keytab_t (dir (getattr open search)))
                (allow sysadm_t dovecot_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dovecot_keytab_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dovecot_etc_t (dir (getattr open search)))
                (allow sysadm_t dovecot_keytab_t (dir (getattr open search)))
                (allow sysadm_t dovecot_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dovecot_keytab_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dovecot_etc_t (dir (getattr open search)))
                (allow sysadm_t dovecot_keytab_t (dir (getattr open search)))
                (allow sysadm_t dovecot_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dovecot_keytab_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t dovecot_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dovecot_var_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t dovecot_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dovecot_var_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dovecot_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dovecot_var_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t dovecot_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dovecot_var_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dovecot_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dovecot_var_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dovecot_var_log_t (dir (getattr open search)))
                (allow sysadm_t dovecot_var_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t dovecot_var_log_t (dir (getattr open search)))
                (allow sysadm_t dovecot_var_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t dovecot_var_log_t (dir (getattr open search)))
                (allow sysadm_t dovecot_var_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dovecot_var_log_t (dir (getattr open search)))
                (allow sysadm_t dovecot_var_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dovecot_var_log_t (dir (getattr open search)))
                (allow sysadm_t dovecot_var_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_spool_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t dovecot_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dovecot_spool_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t dovecot_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dovecot_spool_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dovecot_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dovecot_spool_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t dovecot_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dovecot_spool_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dovecot_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dovecot_spool_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dovecot_spool_t (dir (getattr open search)))
                (allow sysadm_t dovecot_spool_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t dovecot_spool_t (dir (getattr open search)))
                (allow sysadm_t dovecot_spool_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t dovecot_spool_t (dir (getattr open search)))
                (allow sysadm_t dovecot_spool_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dovecot_spool_t (dir (getattr open search)))
                (allow sysadm_t dovecot_spool_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dovecot_spool_t (dir (getattr open search)))
                (allow sysadm_t dovecot_spool_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (getattr open search)))
                (allow sysadm_t dovecot_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dovecot_auth_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dovecot_deliver_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dovecot_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t dovecot_auth_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t dovecot_deliver_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t dovecot_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dovecot_auth_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dovecot_deliver_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dovecot_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dovecot_auth_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dovecot_deliver_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dovecot_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dovecot_auth_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dovecot_deliver_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dovecot_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t dovecot_auth_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t dovecot_deliver_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t dovecot_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dovecot_auth_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dovecot_deliver_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dovecot_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dovecot_auth_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dovecot_deliver_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dovecot_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dovecot_auth_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dovecot_deliver_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dovecot_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dovecot_auth_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dovecot_deliver_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dovecot_tmp_t (dir (getattr open search)))
                (allow sysadm_t dovecot_auth_tmp_t (dir (getattr open search)))
                (allow sysadm_t dovecot_deliver_tmp_t (dir (getattr open search)))
                (allow sysadm_t dovecot_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t dovecot_auth_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t dovecot_deliver_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t dovecot_tmp_t (dir (getattr open search)))
                (allow sysadm_t dovecot_auth_tmp_t (dir (getattr open search)))
                (allow sysadm_t dovecot_deliver_tmp_t (dir (getattr open search)))
                (allow sysadm_t dovecot_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t dovecot_auth_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t dovecot_deliver_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t dovecot_tmp_t (dir (getattr open search)))
                (allow sysadm_t dovecot_auth_tmp_t (dir (getattr open search)))
                (allow sysadm_t dovecot_deliver_tmp_t (dir (getattr open search)))
                (allow sysadm_t dovecot_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dovecot_auth_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dovecot_deliver_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dovecot_tmp_t (dir (getattr open search)))
                (allow sysadm_t dovecot_auth_tmp_t (dir (getattr open search)))
                (allow sysadm_t dovecot_deliver_tmp_t (dir (getattr open search)))
                (allow sysadm_t dovecot_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dovecot_auth_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dovecot_deliver_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dovecot_tmp_t (dir (getattr open search)))
                (allow sysadm_t dovecot_auth_tmp_t (dir (getattr open search)))
                (allow sysadm_t dovecot_deliver_tmp_t (dir (getattr open search)))
                (allow sysadm_t dovecot_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dovecot_auth_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dovecot_deliver_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t dovecot_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dovecot_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t dovecot_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dovecot_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dovecot_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dovecot_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t dovecot_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dovecot_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dovecot_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dovecot_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dovecot_var_lib_t (dir (getattr open search)))
                (allow sysadm_t dovecot_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t dovecot_var_lib_t (dir (getattr open search)))
                (allow sysadm_t dovecot_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t dovecot_var_lib_t (dir (getattr open search)))
                (allow sysadm_t dovecot_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dovecot_var_lib_t (dir (getattr open search)))
                (allow sysadm_t dovecot_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dovecot_var_lib_t (dir (getattr open search)))
                (allow sysadm_t dovecot_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t dovecot_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dovecot_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t dovecot_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dovecot_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dovecot_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dovecot_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t dovecot_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dovecot_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dovecot_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dovecot_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dovecot_runtime_t (dir (getattr open search)))
                (allow sysadm_t dovecot_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t dovecot_runtime_t (dir (getattr open search)))
                (allow sysadm_t dovecot_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t dovecot_runtime_t (dir (getattr open search)))
                (allow sysadm_t dovecot_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dovecot_runtime_t (dir (getattr open search)))
                (allow sysadm_t dovecot_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dovecot_runtime_t (dir (getattr open search)))
                (allow sysadm_t dovecot_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dovecot_cert_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dovecot_passwd_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dovecot_cert_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t dovecot_passwd_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t dovecot_cert_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dovecot_passwd_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dovecot_cert_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dovecot_passwd_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dovecot_cert_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dovecot_passwd_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dovecot_cert_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t dovecot_passwd_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t dovecot_cert_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dovecot_passwd_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dovecot_cert_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dovecot_passwd_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dovecot_cert_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dovecot_passwd_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dovecot_cert_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dovecot_passwd_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dovecot_cert_t (dir (getattr open search)))
                (allow sysadm_t dovecot_passwd_t (dir (getattr open search)))
                (allow sysadm_t dovecot_cert_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t dovecot_passwd_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t dovecot_cert_t (dir (getattr open search)))
                (allow sysadm_t dovecot_passwd_t (dir (getattr open search)))
                (allow sysadm_t dovecot_cert_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t dovecot_passwd_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t dovecot_cert_t (dir (getattr open search)))
                (allow sysadm_t dovecot_passwd_t (dir (getattr open search)))
                (allow sysadm_t dovecot_cert_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dovecot_passwd_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dovecot_cert_t (dir (getattr open search)))
                (allow sysadm_t dovecot_passwd_t (dir (getattr open search)))
                (allow sysadm_t dovecot_cert_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dovecot_passwd_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dovecot_cert_t (dir (getattr open search)))
                (allow sysadm_t dovecot_passwd_t (dir (getattr open search)))
                (allow sysadm_t dovecot_cert_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dovecot_passwd_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_195
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_196
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require dphysswapfile_t)
                (typeattributeset cil_gen_require dphysswapfile_conf_t)
                (typeattributeset cil_gen_require dphysswapfile_initrc_exec_t)
                (typeattributeset cil_gen_require dphysswapfile_unit_t)
                (allow sysadm_t dphysswapfile_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t dphysswapfile_t (file (ioctl read getattr lock open)))
                (allow sysadm_t dphysswapfile_t (lnk_file (read getattr)))
                (allow sysadm_t dphysswapfile_t (process (getattr)))
                (allow sysadm_t dphysswapfile_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t dphysswapfile_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dphysswapfile_conf_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t dphysswapfile_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dphysswapfile_conf_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dphysswapfile_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dphysswapfile_conf_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t dphysswapfile_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dphysswapfile_conf_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dphysswapfile_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dphysswapfile_conf_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dphysswapfile_conf_t (dir (getattr open search)))
                (allow sysadm_t dphysswapfile_conf_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t dphysswapfile_conf_t (dir (getattr open search)))
                (allow sysadm_t dphysswapfile_conf_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t dphysswapfile_conf_t (dir (getattr open search)))
                (allow sysadm_t dphysswapfile_conf_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dphysswapfile_conf_t (dir (getattr open search)))
                (allow sysadm_t dphysswapfile_conf_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dphysswapfile_conf_t (dir (getattr open search)))
                (allow sysadm_t dphysswapfile_conf_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_197
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_198
                (roleattributeset cil_gen_require dpkg_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require dpkg_t)
                (typeattributeset cil_gen_require dpkg_exec_t)
                (roleattributeset cil_gen_require dpkg_roles)
                (roleattributeset dpkg_roles (sysadm_r ))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t dpkg_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t dpkg_t (process (transition)))
                (dontaudit sysadm_t dpkg_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t dpkg_exec_t process dpkg_t)
                (allow dpkg_t sysadm_t (fd (use)))
                (allow dpkg_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow dpkg_t sysadm_t (process (sigchld)))
            )
            (optional sysadm_optional_199
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require var_lock_t)
                (typeattributeset cil_gen_require drbd_t)
                (typeattributeset cil_gen_require drbd_initrc_exec_t)
                (typeattributeset cil_gen_require drbd_lock_t)
                (typeattributeset cil_gen_require drbd_var_lib_t)
                (allow sysadm_t drbd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t drbd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t drbd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t drbd_t (lnk_file (read getattr)))
                (allow sysadm_t drbd_t (process (getattr)))
                (allow sysadm_t var_lock_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lock_t (dir (getattr open search)))
                (allow sysadm_t drbd_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t drbd_lock_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t drbd_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t drbd_lock_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t drbd_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t drbd_lock_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t drbd_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t drbd_lock_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t drbd_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t drbd_lock_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t drbd_lock_t (dir (getattr open search)))
                (allow sysadm_t drbd_lock_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t drbd_lock_t (dir (getattr open search)))
                (allow sysadm_t drbd_lock_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t drbd_lock_t (dir (getattr open search)))
                (allow sysadm_t drbd_lock_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t drbd_lock_t (dir (getattr open search)))
                (allow sysadm_t drbd_lock_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t drbd_lock_t (dir (getattr open search)))
                (allow sysadm_t drbd_lock_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t drbd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t drbd_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t drbd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t drbd_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t drbd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t drbd_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t drbd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t drbd_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t drbd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t drbd_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t drbd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t drbd_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t drbd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t drbd_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t drbd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t drbd_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t drbd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t drbd_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t drbd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t drbd_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_200
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_201
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require entropyd_t)
                (typeattributeset cil_gen_require entropyd_initrc_exec_t)
                (typeattributeset cil_gen_require entropyd_runtime_t)
                (allow sysadm_t entropyd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t entropyd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t entropyd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t entropyd_t (lnk_file (read getattr)))
                (allow sysadm_t entropyd_t (process (getattr)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t entropyd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t entropyd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t entropyd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t entropyd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t entropyd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t entropyd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t entropyd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t entropyd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t entropyd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t entropyd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t entropyd_runtime_t (dir (getattr open search)))
                (allow sysadm_t entropyd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t entropyd_runtime_t (dir (getattr open search)))
                (allow sysadm_t entropyd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t entropyd_runtime_t (dir (getattr open search)))
                (allow sysadm_t entropyd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t entropyd_runtime_t (dir (getattr open search)))
                (allow sysadm_t entropyd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t entropyd_runtime_t (dir (getattr open search)))
                (allow sysadm_t entropyd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_202
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_203
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require var_spool_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require exim_t)
                (typeattributeset cil_gen_require exim_spool_t)
                (typeattributeset cil_gen_require exim_log_t)
                (typeattributeset cil_gen_require exim_pid_t)
                (typeattributeset cil_gen_require exim_initrc_exec_t)
                (typeattributeset cil_gen_require exim_tmp_t)
                (typeattributeset cil_gen_require exim_keytab_t)
                (allow sysadm_t exim_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t exim_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t exim_t (file (ioctl read getattr lock open)))
                (allow sysadm_t exim_t (lnk_file (read getattr)))
                (allow sysadm_t exim_t (process (getattr)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t exim_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t exim_keytab_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t exim_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t exim_keytab_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t exim_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t exim_keytab_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t exim_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t exim_keytab_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t exim_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t exim_keytab_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t exim_keytab_t (dir (getattr open search)))
                (allow sysadm_t exim_keytab_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t exim_keytab_t (dir (getattr open search)))
                (allow sysadm_t exim_keytab_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t exim_keytab_t (dir (getattr open search)))
                (allow sysadm_t exim_keytab_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t exim_keytab_t (dir (getattr open search)))
                (allow sysadm_t exim_keytab_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t exim_keytab_t (dir (getattr open search)))
                (allow sysadm_t exim_keytab_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_spool_t (dir (getattr open search)))
                (allow sysadm_t exim_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t exim_spool_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t exim_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t exim_spool_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t exim_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t exim_spool_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t exim_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t exim_spool_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t exim_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t exim_spool_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t exim_spool_t (dir (getattr open search)))
                (allow sysadm_t exim_spool_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t exim_spool_t (dir (getattr open search)))
                (allow sysadm_t exim_spool_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t exim_spool_t (dir (getattr open search)))
                (allow sysadm_t exim_spool_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t exim_spool_t (dir (getattr open search)))
                (allow sysadm_t exim_spool_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t exim_spool_t (dir (getattr open search)))
                (allow sysadm_t exim_spool_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t exim_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t exim_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t exim_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t exim_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t exim_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t exim_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t exim_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t exim_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t exim_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t exim_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t exim_log_t (dir (getattr open search)))
                (allow sysadm_t exim_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t exim_log_t (dir (getattr open search)))
                (allow sysadm_t exim_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t exim_log_t (dir (getattr open search)))
                (allow sysadm_t exim_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t exim_log_t (dir (getattr open search)))
                (allow sysadm_t exim_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t exim_log_t (dir (getattr open search)))
                (allow sysadm_t exim_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t exim_pid_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t exim_pid_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t exim_pid_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t exim_pid_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t exim_pid_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t exim_pid_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t exim_pid_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t exim_pid_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t exim_pid_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t exim_pid_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t exim_pid_t (dir (getattr open search)))
                (allow sysadm_t exim_pid_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t exim_pid_t (dir (getattr open search)))
                (allow sysadm_t exim_pid_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t exim_pid_t (dir (getattr open search)))
                (allow sysadm_t exim_pid_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t exim_pid_t (dir (getattr open search)))
                (allow sysadm_t exim_pid_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t exim_pid_t (dir (getattr open search)))
                (allow sysadm_t exim_pid_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (getattr open search)))
                (allow sysadm_t exim_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t exim_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t exim_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t exim_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t exim_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t exim_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t exim_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t exim_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t exim_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t exim_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t exim_tmp_t (dir (getattr open search)))
                (allow sysadm_t exim_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t exim_tmp_t (dir (getattr open search)))
                (allow sysadm_t exim_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t exim_tmp_t (dir (getattr open search)))
                (allow sysadm_t exim_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t exim_tmp_t (dir (getattr open search)))
                (allow sysadm_t exim_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t exim_tmp_t (dir (getattr open search)))
                (allow sysadm_t exim_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_204
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_205
                (roleattributeset cil_gen_require fail2ban_client_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require fail2ban_t)
                (typeattributeset cil_gen_require fail2ban_log_t)
                (typeattributeset cil_gen_require fail2ban_tmp_t)
                (typeattributeset cil_gen_require fail2ban_runtime_t)
                (typeattributeset cil_gen_require fail2ban_initrc_exec_t)
                (typeattributeset cil_gen_require fail2ban_var_lib_t)
                (typeattributeset cil_gen_require fail2ban_client_t)
                (typeattributeset cil_gen_require fail2ban_client_exec_t)
                (roleattributeset cil_gen_require fail2ban_client_roles)
                (roleattributeset fail2ban_client_roles (sysadm_r ))
                (allow sysadm_t fail2ban_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t fail2ban_client_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t fail2ban_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t fail2ban_client_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t fail2ban_t (file (ioctl read getattr lock open)))
                (allow sysadm_t fail2ban_client_t (file (ioctl read getattr lock open)))
                (allow sysadm_t fail2ban_t (lnk_file (read getattr)))
                (allow sysadm_t fail2ban_client_t (lnk_file (read getattr)))
                (allow sysadm_t fail2ban_t (process (getattr)))
                (allow sysadm_t fail2ban_client_t (process (getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t fail2ban_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fail2ban_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t fail2ban_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fail2ban_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t fail2ban_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fail2ban_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t fail2ban_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fail2ban_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t fail2ban_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fail2ban_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t fail2ban_log_t (dir (getattr open search)))
                (allow sysadm_t fail2ban_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t fail2ban_log_t (dir (getattr open search)))
                (allow sysadm_t fail2ban_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t fail2ban_log_t (dir (getattr open search)))
                (allow sysadm_t fail2ban_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t fail2ban_log_t (dir (getattr open search)))
                (allow sysadm_t fail2ban_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t fail2ban_log_t (dir (getattr open search)))
                (allow sysadm_t fail2ban_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t fail2ban_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fail2ban_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t fail2ban_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fail2ban_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t fail2ban_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fail2ban_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t fail2ban_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fail2ban_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t fail2ban_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fail2ban_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t fail2ban_runtime_t (dir (getattr open search)))
                (allow sysadm_t fail2ban_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t fail2ban_runtime_t (dir (getattr open search)))
                (allow sysadm_t fail2ban_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t fail2ban_runtime_t (dir (getattr open search)))
                (allow sysadm_t fail2ban_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t fail2ban_runtime_t (dir (getattr open search)))
                (allow sysadm_t fail2ban_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t fail2ban_runtime_t (dir (getattr open search)))
                (allow sysadm_t fail2ban_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t fail2ban_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fail2ban_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t fail2ban_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fail2ban_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t fail2ban_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fail2ban_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t fail2ban_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fail2ban_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t fail2ban_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fail2ban_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t fail2ban_var_lib_t (dir (getattr open search)))
                (allow sysadm_t fail2ban_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t fail2ban_var_lib_t (dir (getattr open search)))
                (allow sysadm_t fail2ban_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t fail2ban_var_lib_t (dir (getattr open search)))
                (allow sysadm_t fail2ban_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t fail2ban_var_lib_t (dir (getattr open search)))
                (allow sysadm_t fail2ban_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t fail2ban_var_lib_t (dir (getattr open search)))
                (allow sysadm_t fail2ban_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (getattr open search)))
                (allow sysadm_t fail2ban_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fail2ban_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t fail2ban_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fail2ban_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t fail2ban_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fail2ban_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t fail2ban_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fail2ban_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t fail2ban_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fail2ban_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t fail2ban_tmp_t (dir (getattr open search)))
                (allow sysadm_t fail2ban_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t fail2ban_tmp_t (dir (getattr open search)))
                (allow sysadm_t fail2ban_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t fail2ban_tmp_t (dir (getattr open search)))
                (allow sysadm_t fail2ban_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t fail2ban_tmp_t (dir (getattr open search)))
                (allow sysadm_t fail2ban_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t fail2ban_tmp_t (dir (getattr open search)))
                (allow sysadm_t fail2ban_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t fail2ban_client_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t fail2ban_client_t (process (transition)))
                (dontaudit sysadm_t fail2ban_client_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t fail2ban_client_exec_t process fail2ban_client_t)
                (allow fail2ban_client_t sysadm_t (fd (use)))
                (allow fail2ban_client_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow fail2ban_client_t sysadm_t (process (sigchld)))
                (optional sysadm_optional_206
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_207
                (roleattributeset cil_gen_require fagenrules_roles)
                (roleattributeset cil_gen_require fapolicyc_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require fagenrules_tmp_t)
                (typeattributeset cil_gen_require fapolicyd_config_t)
                (typeattributeset cil_gen_require fapolicyd_log_t)
                (typeattributeset cil_gen_require fapolicyd_runtime_t)
                (typeattributeset cil_gen_require fagenrules_t)
                (typeattributeset cil_gen_require fagenrules_exec_t)
                (typeattributeset cil_gen_require fapolicyc_t)
                (typeattributeset cil_gen_require fapolicyc_exec_t)
                (roleattributeset cil_gen_require fapolicyc_roles)
                (roleattributeset fapolicyc_roles (sysadm_r ))
                (roleattributeset cil_gen_require fagenrules_roles)
                (roleattributeset fagenrules_roles (sysadm_r ))
                (allow sysadm_t tmp_t (dir (getattr open search)))
                (allow sysadm_t fagenrules_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fagenrules_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t fagenrules_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fagenrules_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t fagenrules_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fagenrules_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t fagenrules_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fagenrules_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t fagenrules_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fagenrules_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t fagenrules_tmp_t (dir (getattr open search)))
                (allow sysadm_t fagenrules_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t fagenrules_tmp_t (dir (getattr open search)))
                (allow sysadm_t fagenrules_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t fagenrules_tmp_t (dir (getattr open search)))
                (allow sysadm_t fagenrules_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t fagenrules_tmp_t (dir (getattr open search)))
                (allow sysadm_t fagenrules_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t fagenrules_tmp_t (dir (getattr open search)))
                (allow sysadm_t fagenrules_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t fapolicyd_config_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fapolicyd_config_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t fapolicyd_config_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fapolicyd_config_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t fapolicyd_config_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fapolicyd_config_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t fapolicyd_config_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fapolicyd_config_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t fapolicyd_config_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fapolicyd_config_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t fapolicyd_config_t (dir (getattr open search)))
                (allow sysadm_t fapolicyd_config_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t fapolicyd_config_t (dir (getattr open search)))
                (allow sysadm_t fapolicyd_config_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t fapolicyd_config_t (dir (getattr open search)))
                (allow sysadm_t fapolicyd_config_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t fapolicyd_config_t (dir (getattr open search)))
                (allow sysadm_t fapolicyd_config_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t fapolicyd_config_t (dir (getattr open search)))
                (allow sysadm_t fapolicyd_config_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t fapolicyd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fapolicyd_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t fapolicyd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fapolicyd_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t fapolicyd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fapolicyd_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t fapolicyd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fapolicyd_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t fapolicyd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fapolicyd_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t fapolicyd_log_t (dir (getattr open search)))
                (allow sysadm_t fapolicyd_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t fapolicyd_log_t (dir (getattr open search)))
                (allow sysadm_t fapolicyd_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t fapolicyd_log_t (dir (getattr open search)))
                (allow sysadm_t fapolicyd_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t fapolicyd_log_t (dir (getattr open search)))
                (allow sysadm_t fapolicyd_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t fapolicyd_log_t (dir (getattr open search)))
                (allow sysadm_t fapolicyd_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t fapolicyd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fapolicyd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t fapolicyd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fapolicyd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t fapolicyd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fapolicyd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t fapolicyd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fapolicyd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t fapolicyd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fapolicyd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t fapolicyd_runtime_t (dir (getattr open search)))
                (allow sysadm_t fapolicyd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t fapolicyd_runtime_t (dir (getattr open search)))
                (allow sysadm_t fapolicyd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t fapolicyd_runtime_t (dir (getattr open search)))
                (allow sysadm_t fapolicyd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t fapolicyd_runtime_t (dir (getattr open search)))
                (allow sysadm_t fapolicyd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t fapolicyd_runtime_t (dir (getattr open search)))
                (allow sysadm_t fapolicyd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t fagenrules_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t fagenrules_t (process (transition)))
                (dontaudit sysadm_t fagenrules_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t fagenrules_exec_t process fagenrules_t)
                (allow fagenrules_t sysadm_t (fd (use)))
                (allow fagenrules_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow fagenrules_t sysadm_t (process (sigchld)))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t fapolicyc_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t fapolicyc_t (process (transition)))
                (dontaudit sysadm_t fapolicyc_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t fapolicyc_exec_t process fapolicyc_t)
                (allow fapolicyc_t sysadm_t (fd (use)))
                (allow fapolicyc_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow fapolicyc_t sysadm_t (process (sigchld)))
            )
            (optional sysadm_optional_208
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require fcoemon_t)
                (typeattributeset cil_gen_require fcoemon_initrc_exec_t)
                (typeattributeset cil_gen_require fcoemon_runtime_t)
                (allow sysadm_t fcoemon_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t fcoemon_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t fcoemon_t (file (ioctl read getattr lock open)))
                (allow sysadm_t fcoemon_t (lnk_file (read getattr)))
                (allow sysadm_t fcoemon_t (process (getattr)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t fcoemon_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fcoemon_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t fcoemon_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fcoemon_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t fcoemon_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fcoemon_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t fcoemon_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fcoemon_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t fcoemon_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fcoemon_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t fcoemon_runtime_t (dir (getattr open search)))
                (allow sysadm_t fcoemon_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t fcoemon_runtime_t (dir (getattr open search)))
                (allow sysadm_t fcoemon_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t fcoemon_runtime_t (dir (getattr open search)))
                (allow sysadm_t fcoemon_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t fcoemon_runtime_t (dir (getattr open search)))
                (allow sysadm_t fcoemon_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t fcoemon_runtime_t (dir (getattr open search)))
                (allow sysadm_t fcoemon_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_209
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_210
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require fetchmail_t)
                (typeattributeset cil_gen_require fetchmail_etc_t)
                (typeattributeset cil_gen_require fetchmail_uidl_cache_t)
                (typeattributeset cil_gen_require fetchmail_runtime_t)
                (typeattributeset cil_gen_require fetchmail_initrc_exec_t)
                (typeattributeset cil_gen_require fetchmail_log_t)
                (allow sysadm_t fetchmail_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t fetchmail_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t fetchmail_t (file (ioctl read getattr lock open)))
                (allow sysadm_t fetchmail_t (lnk_file (read getattr)))
                (allow sysadm_t fetchmail_t (process (getattr)))
                (allow sysadm_t etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t fetchmail_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fetchmail_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t fetchmail_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fetchmail_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t fetchmail_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fetchmail_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t fetchmail_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fetchmail_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t fetchmail_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fetchmail_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t fetchmail_etc_t (dir (getattr open search)))
                (allow sysadm_t fetchmail_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t fetchmail_etc_t (dir (getattr open search)))
                (allow sysadm_t fetchmail_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t fetchmail_etc_t (dir (getattr open search)))
                (allow sysadm_t fetchmail_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t fetchmail_etc_t (dir (getattr open search)))
                (allow sysadm_t fetchmail_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t fetchmail_etc_t (dir (getattr open search)))
                (allow sysadm_t fetchmail_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t fetchmail_uidl_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fetchmail_uidl_cache_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t fetchmail_uidl_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fetchmail_uidl_cache_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t fetchmail_uidl_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fetchmail_uidl_cache_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t fetchmail_uidl_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fetchmail_uidl_cache_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t fetchmail_uidl_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fetchmail_uidl_cache_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t fetchmail_uidl_cache_t (dir (getattr open search)))
                (allow sysadm_t fetchmail_uidl_cache_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t fetchmail_uidl_cache_t (dir (getattr open search)))
                (allow sysadm_t fetchmail_uidl_cache_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t fetchmail_uidl_cache_t (dir (getattr open search)))
                (allow sysadm_t fetchmail_uidl_cache_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t fetchmail_uidl_cache_t (dir (getattr open search)))
                (allow sysadm_t fetchmail_uidl_cache_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t fetchmail_uidl_cache_t (dir (getattr open search)))
                (allow sysadm_t fetchmail_uidl_cache_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t fetchmail_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fetchmail_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t fetchmail_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fetchmail_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t fetchmail_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fetchmail_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t fetchmail_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fetchmail_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t fetchmail_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fetchmail_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t fetchmail_runtime_t (dir (getattr open search)))
                (allow sysadm_t fetchmail_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t fetchmail_runtime_t (dir (getattr open search)))
                (allow sysadm_t fetchmail_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t fetchmail_runtime_t (dir (getattr open search)))
                (allow sysadm_t fetchmail_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t fetchmail_runtime_t (dir (getattr open search)))
                (allow sysadm_t fetchmail_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t fetchmail_runtime_t (dir (getattr open search)))
                (allow sysadm_t fetchmail_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t fetchmail_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fetchmail_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t fetchmail_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fetchmail_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t fetchmail_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fetchmail_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t fetchmail_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fetchmail_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t fetchmail_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fetchmail_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t fetchmail_log_t (dir (getattr open search)))
                (allow sysadm_t fetchmail_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t fetchmail_log_t (dir (getattr open search)))
                (allow sysadm_t fetchmail_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t fetchmail_log_t (dir (getattr open search)))
                (allow sysadm_t fetchmail_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t fetchmail_log_t (dir (getattr open search)))
                (allow sysadm_t fetchmail_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t fetchmail_log_t (dir (getattr open search)))
                (allow sysadm_t fetchmail_log_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_211
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_212
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require firewalld_t)
                (typeattributeset cil_gen_require firewalld_initrc_exec_t)
                (typeattributeset cil_gen_require firewalld_etc_rw_t)
                (typeattributeset cil_gen_require firewalld_runtime_t)
                (typeattributeset cil_gen_require firewalld_var_log_t)
                (allow sysadm_t firewalld_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t firewalld_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t firewalld_t (file (ioctl read getattr lock open)))
                (allow sysadm_t firewalld_t (lnk_file (read getattr)))
                (allow sysadm_t firewalld_t (process (getattr)))
                (allow sysadm_t firewalld_t (dbus (send_msg)))
                (allow firewalld_t sysadm_t (dbus (send_msg)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t firewalld_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t firewalld_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t firewalld_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t firewalld_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t firewalld_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t firewalld_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t firewalld_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t firewalld_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t firewalld_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t firewalld_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t firewalld_runtime_t (dir (getattr open search)))
                (allow sysadm_t firewalld_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t firewalld_runtime_t (dir (getattr open search)))
                (allow sysadm_t firewalld_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t firewalld_runtime_t (dir (getattr open search)))
                (allow sysadm_t firewalld_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t firewalld_runtime_t (dir (getattr open search)))
                (allow sysadm_t firewalld_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t firewalld_runtime_t (dir (getattr open search)))
                (allow sysadm_t firewalld_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t firewalld_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t firewalld_var_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t firewalld_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t firewalld_var_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t firewalld_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t firewalld_var_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t firewalld_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t firewalld_var_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t firewalld_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t firewalld_var_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t firewalld_var_log_t (dir (getattr open search)))
                (allow sysadm_t firewalld_var_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t firewalld_var_log_t (dir (getattr open search)))
                (allow sysadm_t firewalld_var_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t firewalld_var_log_t (dir (getattr open search)))
                (allow sysadm_t firewalld_var_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t firewalld_var_log_t (dir (getattr open search)))
                (allow sysadm_t firewalld_var_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t firewalld_var_log_t (dir (getattr open search)))
                (allow sysadm_t firewalld_var_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t firewalld_etc_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t firewalld_etc_rw_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t firewalld_etc_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t firewalld_etc_rw_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t firewalld_etc_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t firewalld_etc_rw_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t firewalld_etc_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t firewalld_etc_rw_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t firewalld_etc_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t firewalld_etc_rw_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t firewalld_etc_rw_t (dir (getattr open search)))
                (allow sysadm_t firewalld_etc_rw_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t firewalld_etc_rw_t (dir (getattr open search)))
                (allow sysadm_t firewalld_etc_rw_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t firewalld_etc_rw_t (dir (getattr open search)))
                (allow sysadm_t firewalld_etc_rw_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t firewalld_etc_rw_t (dir (getattr open search)))
                (allow sysadm_t firewalld_etc_rw_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t firewalld_etc_rw_t (dir (getattr open search)))
                (allow sysadm_t firewalld_etc_rw_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_213
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_214
                (roleattributeset cil_gen_require firstboot_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require firstboot_t)
                (typeattributeset cil_gen_require firstboot_exec_t)
                (roleattributeset cil_gen_require firstboot_roles)
                (roleattributeset firstboot_roles (sysadm_r ))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t firstboot_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t firstboot_t (process (transition)))
                (dontaudit sysadm_t firstboot_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t firstboot_exec_t process firstboot_t)
                (allow firstboot_t sysadm_t (fd (use)))
                (allow firstboot_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow firstboot_t sysadm_t (process (sigchld)))
            )
            (optional sysadm_optional_215
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require fsadm_t)
                (typeattributeset cil_gen_require fsadm_exec_t)
                (roleattributeset cil_gen_require sysadm_r)
                (roletype sysadm_r fsadm_t)
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t fsadm_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t fsadm_t (process (transition)))
                (dontaudit sysadm_t fsadm_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t fsadm_exec_t process fsadm_t)
                (allow fsadm_t sysadm_t (fd (use)))
                (allow fsadm_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow fsadm_t sysadm_t (process (sigchld)))
            )
            (optional sysadm_optional_216
                (roleattributeset cil_gen_require ftpdctl_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require public_content_rw_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require ftpd_t)
                (typeattributeset cil_gen_require ftpdctl_t)
                (typeattributeset cil_gen_require ftpd_tmp_t)
                (typeattributeset cil_gen_require ftpd_etc_t)
                (typeattributeset cil_gen_require ftpd_lock_t)
                (typeattributeset cil_gen_require sftpd_t)
                (typeattributeset cil_gen_require ftpd_runtime_t)
                (typeattributeset cil_gen_require xferlog_t)
                (typeattributeset cil_gen_require anon_sftpd_t)
                (typeattributeset cil_gen_require ftpd_initrc_exec_t)
                (typeattributeset cil_gen_require ftpdctl_tmp_t)
                (typeattributeset cil_gen_require ftpd_keytab_t)
                (typeattributeset cil_gen_require ftpdctl_exec_t)
                (roleattributeset cil_gen_require ftpdctl_roles)
                (roleattributeset ftpdctl_roles (sysadm_r ))
                (allow sysadm_t ftpd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t ftpdctl_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t sftpd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t anon_sftpd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t ftpd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t ftpdctl_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t sftpd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t anon_sftpd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t ftpd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t ftpdctl_t (file (ioctl read getattr lock open)))
                (allow sysadm_t sftpd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t anon_sftpd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t ftpd_t (lnk_file (read getattr)))
                (allow sysadm_t ftpdctl_t (lnk_file (read getattr)))
                (allow sysadm_t sftpd_t (lnk_file (read getattr)))
                (allow sysadm_t anon_sftpd_t (lnk_file (read getattr)))
                (allow sysadm_t ftpd_t (process (getattr)))
                (allow sysadm_t ftpdctl_t (process (getattr)))
                (allow sysadm_t sftpd_t (process (getattr)))
                (allow sysadm_t anon_sftpd_t (process (getattr)))
                (allow sysadm_t public_content_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t public_content_rw_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t public_content_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t public_content_rw_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t public_content_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t public_content_rw_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t tmp_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t ftpd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ftpdctl_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ftpd_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t ftpdctl_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t ftpd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ftpdctl_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ftpd_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ftpdctl_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ftpd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ftpdctl_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ftpd_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t ftpdctl_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t ftpd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ftpdctl_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ftpd_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ftpdctl_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ftpd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ftpdctl_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ftpd_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ftpdctl_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ftpd_tmp_t (dir (getattr open search)))
                (allow sysadm_t ftpdctl_tmp_t (dir (getattr open search)))
                (allow sysadm_t ftpd_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t ftpdctl_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t ftpd_tmp_t (dir (getattr open search)))
                (allow sysadm_t ftpdctl_tmp_t (dir (getattr open search)))
                (allow sysadm_t ftpd_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t ftpdctl_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t ftpd_tmp_t (dir (getattr open search)))
                (allow sysadm_t ftpdctl_tmp_t (dir (getattr open search)))
                (allow sysadm_t ftpd_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ftpdctl_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ftpd_tmp_t (dir (getattr open search)))
                (allow sysadm_t ftpdctl_tmp_t (dir (getattr open search)))
                (allow sysadm_t ftpd_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ftpdctl_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ftpd_tmp_t (dir (getattr open search)))
                (allow sysadm_t ftpdctl_tmp_t (dir (getattr open search)))
                (allow sysadm_t ftpd_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ftpdctl_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t ftpd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ftpd_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ftpd_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t ftpd_keytab_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t ftpd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ftpd_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ftpd_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ftpd_keytab_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ftpd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ftpd_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ftpd_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t ftpd_keytab_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t ftpd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ftpd_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ftpd_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ftpd_keytab_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ftpd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ftpd_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ftpd_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ftpd_keytab_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ftpd_etc_t (dir (getattr open search)))
                (allow sysadm_t ftpd_keytab_t (dir (getattr open search)))
                (allow sysadm_t ftpd_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t ftpd_keytab_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t ftpd_etc_t (dir (getattr open search)))
                (allow sysadm_t ftpd_keytab_t (dir (getattr open search)))
                (allow sysadm_t ftpd_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t ftpd_keytab_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t ftpd_etc_t (dir (getattr open search)))
                (allow sysadm_t ftpd_keytab_t (dir (getattr open search)))
                (allow sysadm_t ftpd_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ftpd_keytab_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ftpd_etc_t (dir (getattr open search)))
                (allow sysadm_t ftpd_keytab_t (dir (getattr open search)))
                (allow sysadm_t ftpd_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ftpd_keytab_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ftpd_etc_t (dir (getattr open search)))
                (allow sysadm_t ftpd_keytab_t (dir (getattr open search)))
                (allow sysadm_t ftpd_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ftpd_keytab_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t ftpd_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ftpd_lock_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t ftpd_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ftpd_lock_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ftpd_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ftpd_lock_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t ftpd_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ftpd_lock_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ftpd_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ftpd_lock_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ftpd_lock_t (dir (getattr open search)))
                (allow sysadm_t ftpd_lock_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t ftpd_lock_t (dir (getattr open search)))
                (allow sysadm_t ftpd_lock_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t ftpd_lock_t (dir (getattr open search)))
                (allow sysadm_t ftpd_lock_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ftpd_lock_t (dir (getattr open search)))
                (allow sysadm_t ftpd_lock_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ftpd_lock_t (dir (getattr open search)))
                (allow sysadm_t ftpd_lock_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t ftpd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ftpd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t ftpd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ftpd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ftpd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ftpd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t ftpd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ftpd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ftpd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ftpd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ftpd_runtime_t (dir (getattr open search)))
                (allow sysadm_t ftpd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t ftpd_runtime_t (dir (getattr open search)))
                (allow sysadm_t ftpd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t ftpd_runtime_t (dir (getattr open search)))
                (allow sysadm_t ftpd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ftpd_runtime_t (dir (getattr open search)))
                (allow sysadm_t ftpd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ftpd_runtime_t (dir (getattr open search)))
                (allow sysadm_t ftpd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t xferlog_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t xferlog_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t xferlog_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t xferlog_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t xferlog_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t xferlog_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t xferlog_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t xferlog_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t xferlog_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t xferlog_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t xferlog_t (dir (getattr open search)))
                (allow sysadm_t xferlog_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t xferlog_t (dir (getattr open search)))
                (allow sysadm_t xferlog_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t xferlog_t (dir (getattr open search)))
                (allow sysadm_t xferlog_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t xferlog_t (dir (getattr open search)))
                (allow sysadm_t xferlog_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t xferlog_t (dir (getattr open search)))
                (allow sysadm_t xferlog_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t ftpdctl_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t ftpdctl_t (process (transition)))
                (dontaudit sysadm_t ftpdctl_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t ftpdctl_exec_t process ftpdctl_t)
                (allow ftpdctl_t sysadm_t (fd (use)))
                (allow ftpdctl_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow ftpdctl_t sysadm_t (process (sigchld)))
                (optional sysadm_optional_217
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_218
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require gatekeeper_t)
                (typeattributeset cil_gen_require gatekeeper_etc_t)
                (typeattributeset cil_gen_require gatekeeper_log_t)
                (typeattributeset cil_gen_require gatekeeper_runtime_t)
                (typeattributeset cil_gen_require gatekeeper_tmp_t)
                (typeattributeset cil_gen_require gatekeeper_initrc_exec_t)
                (allow sysadm_t gatekeeper_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t gatekeeper_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t gatekeeper_t (file (ioctl read getattr lock open)))
                (allow sysadm_t gatekeeper_t (lnk_file (read getattr)))
                (allow sysadm_t gatekeeper_t (process (getattr)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t gatekeeper_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gatekeeper_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t gatekeeper_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gatekeeper_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t gatekeeper_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gatekeeper_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t gatekeeper_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gatekeeper_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t gatekeeper_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gatekeeper_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t gatekeeper_etc_t (dir (getattr open search)))
                (allow sysadm_t gatekeeper_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t gatekeeper_etc_t (dir (getattr open search)))
                (allow sysadm_t gatekeeper_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t gatekeeper_etc_t (dir (getattr open search)))
                (allow sysadm_t gatekeeper_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t gatekeeper_etc_t (dir (getattr open search)))
                (allow sysadm_t gatekeeper_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t gatekeeper_etc_t (dir (getattr open search)))
                (allow sysadm_t gatekeeper_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t gatekeeper_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gatekeeper_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t gatekeeper_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gatekeeper_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t gatekeeper_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gatekeeper_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t gatekeeper_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gatekeeper_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t gatekeeper_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gatekeeper_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t gatekeeper_log_t (dir (getattr open search)))
                (allow sysadm_t gatekeeper_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t gatekeeper_log_t (dir (getattr open search)))
                (allow sysadm_t gatekeeper_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t gatekeeper_log_t (dir (getattr open search)))
                (allow sysadm_t gatekeeper_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t gatekeeper_log_t (dir (getattr open search)))
                (allow sysadm_t gatekeeper_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t gatekeeper_log_t (dir (getattr open search)))
                (allow sysadm_t gatekeeper_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (getattr open search)))
                (allow sysadm_t gatekeeper_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gatekeeper_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t gatekeeper_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gatekeeper_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t gatekeeper_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gatekeeper_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t gatekeeper_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gatekeeper_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t gatekeeper_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gatekeeper_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t gatekeeper_tmp_t (dir (getattr open search)))
                (allow sysadm_t gatekeeper_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t gatekeeper_tmp_t (dir (getattr open search)))
                (allow sysadm_t gatekeeper_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t gatekeeper_tmp_t (dir (getattr open search)))
                (allow sysadm_t gatekeeper_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t gatekeeper_tmp_t (dir (getattr open search)))
                (allow sysadm_t gatekeeper_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t gatekeeper_tmp_t (dir (getattr open search)))
                (allow sysadm_t gatekeeper_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t gatekeeper_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gatekeeper_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t gatekeeper_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gatekeeper_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t gatekeeper_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gatekeeper_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t gatekeeper_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gatekeeper_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t gatekeeper_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gatekeeper_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t gatekeeper_runtime_t (dir (getattr open search)))
                (allow sysadm_t gatekeeper_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t gatekeeper_runtime_t (dir (getattr open search)))
                (allow sysadm_t gatekeeper_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t gatekeeper_runtime_t (dir (getattr open search)))
                (allow sysadm_t gatekeeper_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t gatekeeper_runtime_t (dir (getattr open search)))
                (allow sysadm_t gatekeeper_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t gatekeeper_runtime_t (dir (getattr open search)))
                (allow sysadm_t gatekeeper_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_219
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_220
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require gdomap_t)
                (typeattributeset cil_gen_require gdomap_conf_t)
                (typeattributeset cil_gen_require gdomap_initrc_exec_t)
                (typeattributeset cil_gen_require gdomap_runtime_t)
                (allow sysadm_t gdomap_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t gdomap_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t gdomap_t (file (ioctl read getattr lock open)))
                (allow sysadm_t gdomap_t (lnk_file (read getattr)))
                (allow sysadm_t gdomap_t (process (getattr)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t gdomap_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gdomap_conf_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t gdomap_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gdomap_conf_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t gdomap_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gdomap_conf_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t gdomap_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gdomap_conf_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t gdomap_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gdomap_conf_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t gdomap_conf_t (dir (getattr open search)))
                (allow sysadm_t gdomap_conf_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t gdomap_conf_t (dir (getattr open search)))
                (allow sysadm_t gdomap_conf_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t gdomap_conf_t (dir (getattr open search)))
                (allow sysadm_t gdomap_conf_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t gdomap_conf_t (dir (getattr open search)))
                (allow sysadm_t gdomap_conf_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t gdomap_conf_t (dir (getattr open search)))
                (allow sysadm_t gdomap_conf_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t gdomap_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gdomap_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t gdomap_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gdomap_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t gdomap_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gdomap_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t gdomap_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gdomap_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t gdomap_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gdomap_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t gdomap_runtime_t (dir (getattr open search)))
                (allow sysadm_t gdomap_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t gdomap_runtime_t (dir (getattr open search)))
                (allow sysadm_t gdomap_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t gdomap_runtime_t (dir (getattr open search)))
                (allow sysadm_t gdomap_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t gdomap_runtime_t (dir (getattr open search)))
                (allow sysadm_t gdomap_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t gdomap_runtime_t (dir (getattr open search)))
                (allow sysadm_t gdomap_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_221
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_222
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require glance_registry_t)
                (typeattributeset cil_gen_require glance_api_t)
                (typeattributeset cil_gen_require glance_log_t)
                (typeattributeset cil_gen_require glance_var_lib_t)
                (typeattributeset cil_gen_require glance_runtime_t)
                (typeattributeset cil_gen_require glance_registry_initrc_exec_t)
                (typeattributeset cil_gen_require glance_api_initrc_exec_t)
                (allow sysadm_t glance_registry_t (process (sigchld sigkill sigstop signull signal)))
                (allow sysadm_t glance_api_t (process (sigchld sigkill sigstop signull signal)))
                (allow sysadm_t glance_registry_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t glance_api_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t glance_registry_t (file (ioctl read getattr lock open)))
                (allow sysadm_t glance_api_t (file (ioctl read getattr lock open)))
                (allow sysadm_t glance_registry_t (lnk_file (read getattr)))
                (allow sysadm_t glance_api_t (lnk_file (read getattr)))
                (allow sysadm_t glance_registry_t (process (getattr)))
                (allow sysadm_t glance_api_t (process (getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t glance_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t glance_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t glance_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t glance_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t glance_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t glance_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t glance_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t glance_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t glance_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t glance_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t glance_log_t (dir (getattr open search)))
                (allow sysadm_t glance_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t glance_log_t (dir (getattr open search)))
                (allow sysadm_t glance_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t glance_log_t (dir (getattr open search)))
                (allow sysadm_t glance_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t glance_log_t (dir (getattr open search)))
                (allow sysadm_t glance_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t glance_log_t (dir (getattr open search)))
                (allow sysadm_t glance_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t glance_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t glance_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t glance_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t glance_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t glance_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t glance_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t glance_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t glance_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t glance_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t glance_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t glance_var_lib_t (dir (getattr open search)))
                (allow sysadm_t glance_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t glance_var_lib_t (dir (getattr open search)))
                (allow sysadm_t glance_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t glance_var_lib_t (dir (getattr open search)))
                (allow sysadm_t glance_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t glance_var_lib_t (dir (getattr open search)))
                (allow sysadm_t glance_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t glance_var_lib_t (dir (getattr open search)))
                (allow sysadm_t glance_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t glance_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t glance_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t glance_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t glance_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t glance_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t glance_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t glance_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t glance_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t glance_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t glance_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t glance_runtime_t (dir (getattr open search)))
                (allow sysadm_t glance_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t glance_runtime_t (dir (getattr open search)))
                (allow sysadm_t glance_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t glance_runtime_t (dir (getattr open search)))
                (allow sysadm_t glance_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t glance_runtime_t (dir (getattr open search)))
                (allow sysadm_t glance_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t glance_runtime_t (dir (getattr open search)))
                (allow sysadm_t glance_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_223
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                    (optional sysadm_optional_224
                        (roleattributeset cil_gen_require run_init_roles)
                        (typeattributeset cil_gen_require bin_t)
                        (typeattributeset cil_gen_require usr_t)
                        (typeattributeset cil_gen_require run_init_t)
                        (typeattributeset cil_gen_require run_init_exec_t)
                        (roleattributeset cil_gen_require run_init_roles)
                        (roleattributeset run_init_roles (sysadm_r ))
                        (allow sysadm_t usr_t (dir (getattr open search)))
                        (allow sysadm_t bin_t (dir (getattr open search)))
                        (allow sysadm_t bin_t (lnk_file (read getattr)))
                        (allow sysadm_t usr_t (dir (getattr open search)))
                        (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                        (allow sysadm_t run_init_t (process (transition)))
                        (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                        (typetransition sysadm_t run_init_exec_t process run_init_t)
                        (allow run_init_t sysadm_t (fd (use)))
                        (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                        (allow run_init_t sysadm_t (process (sigchld)))
                    )
                )
            )
            (optional sysadm_optional_225
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require glusterd_t)
                (typeattributeset cil_gen_require glusterd_initrc_exec_t)
                (typeattributeset cil_gen_require glusterd_log_t)
                (typeattributeset cil_gen_require glusterd_tmp_t)
                (typeattributeset cil_gen_require glusterd_conf_t)
                (typeattributeset cil_gen_require glusterd_var_lib_t)
                (typeattributeset cil_gen_require glusterd_hook_t)
                (typeattributeset cil_gen_require glusterd_runtime_t)
                (typeattributeset cil_gen_require glusterd_brick_t)
                (typeattributeset cil_gen_require glusterd_exec_t)
                (roleattributeset cil_gen_require sysadm_r)
                (roletype sysadm_r glusterd_t)
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t glusterd_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t glusterd_t (process (transition)))
                (dontaudit sysadm_t glusterd_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t glusterd_exec_t process glusterd_t)
                (allow glusterd_t sysadm_t (fd (use)))
                (allow glusterd_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow glusterd_t sysadm_t (process (sigchld)))
                (allow sysadm_t glusterd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t glusterd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t glusterd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t glusterd_t (lnk_file (read getattr)))
                (allow sysadm_t glusterd_t (process (getattr)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t glusterd_runtime_t (dir (getattr open search)))
                (allow sysadm_t glusterd_runtime_t (sock_file (write getattr append open)))
                (allow sysadm_t glusterd_t (unix_stream_socket (connectto)))
                (allow sysadm_t glusterd_runtime_t (sock_file (read getattr open)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t glusterd_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t glusterd_conf_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t glusterd_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t glusterd_conf_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t glusterd_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t glusterd_conf_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t glusterd_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t glusterd_conf_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t glusterd_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t glusterd_conf_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t glusterd_conf_t (dir (getattr open search)))
                (allow sysadm_t glusterd_conf_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t glusterd_conf_t (dir (getattr open search)))
                (allow sysadm_t glusterd_conf_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t glusterd_conf_t (dir (getattr open search)))
                (allow sysadm_t glusterd_conf_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t glusterd_conf_t (dir (getattr open search)))
                (allow sysadm_t glusterd_conf_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t glusterd_conf_t (dir (getattr open search)))
                (allow sysadm_t glusterd_conf_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t glusterd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t glusterd_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t glusterd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t glusterd_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t glusterd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t glusterd_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t glusterd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t glusterd_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t glusterd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t glusterd_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t glusterd_log_t (dir (getattr open search)))
                (allow sysadm_t glusterd_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t glusterd_log_t (dir (getattr open search)))
                (allow sysadm_t glusterd_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t glusterd_log_t (dir (getattr open search)))
                (allow sysadm_t glusterd_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t glusterd_log_t (dir (getattr open search)))
                (allow sysadm_t glusterd_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t glusterd_log_t (dir (getattr open search)))
                (allow sysadm_t glusterd_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (getattr open search)))
                (allow sysadm_t glusterd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t glusterd_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t glusterd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t glusterd_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t glusterd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t glusterd_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t glusterd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t glusterd_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t glusterd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t glusterd_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t glusterd_tmp_t (dir (getattr open search)))
                (allow sysadm_t glusterd_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t glusterd_tmp_t (dir (getattr open search)))
                (allow sysadm_t glusterd_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t glusterd_tmp_t (dir (getattr open search)))
                (allow sysadm_t glusterd_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t glusterd_tmp_t (dir (getattr open search)))
                (allow sysadm_t glusterd_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t glusterd_tmp_t (dir (getattr open search)))
                (allow sysadm_t glusterd_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t glusterd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t glusterd_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t glusterd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t glusterd_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t glusterd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t glusterd_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t glusterd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t glusterd_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t glusterd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t glusterd_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t glusterd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t glusterd_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t glusterd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t glusterd_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t glusterd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t glusterd_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t glusterd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t glusterd_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t glusterd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t glusterd_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t glusterd_hook_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t glusterd_hook_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t glusterd_hook_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t glusterd_hook_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t glusterd_hook_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t glusterd_hook_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t glusterd_hook_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t glusterd_hook_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t glusterd_hook_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t glusterd_hook_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t glusterd_hook_t (dir (getattr open search)))
                (allow sysadm_t glusterd_hook_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t glusterd_hook_t (dir (getattr open search)))
                (allow sysadm_t glusterd_hook_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t glusterd_hook_t (dir (getattr open search)))
                (allow sysadm_t glusterd_hook_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t glusterd_hook_t (dir (getattr open search)))
                (allow sysadm_t glusterd_hook_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t glusterd_hook_t (dir (getattr open search)))
                (allow sysadm_t glusterd_hook_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t glusterd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t glusterd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t glusterd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t glusterd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t glusterd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t glusterd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t glusterd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t glusterd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t glusterd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t glusterd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t glusterd_runtime_t (dir (getattr open search)))
                (allow sysadm_t glusterd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t glusterd_runtime_t (dir (getattr open search)))
                (allow sysadm_t glusterd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t glusterd_runtime_t (dir (getattr open search)))
                (allow sysadm_t glusterd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t glusterd_runtime_t (dir (getattr open search)))
                (allow sysadm_t glusterd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t glusterd_runtime_t (dir (getattr open search)))
                (allow sysadm_t glusterd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t glusterd_brick_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t glusterd_brick_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t glusterd_brick_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t glusterd_brick_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t glusterd_brick_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t glusterd_brick_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t glusterd_brick_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t glusterd_brick_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t glusterd_brick_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t glusterd_brick_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t glusterd_brick_t (dir (getattr open search)))
                (allow sysadm_t glusterd_brick_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t glusterd_brick_t (dir (getattr open search)))
                (allow sysadm_t glusterd_brick_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t glusterd_brick_t (dir (getattr open search)))
                (allow sysadm_t glusterd_brick_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t glusterd_brick_t (dir (getattr open search)))
                (allow sysadm_t glusterd_brick_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t glusterd_brick_t (dir (getattr open search)))
                (allow sysadm_t glusterd_brick_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_226
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_227
                (typeattributeset cil_gen_require device_t)
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require gpm_t)
                (typeattributeset cil_gen_require gpm_conf_t)
                (typeattributeset cil_gen_require gpm_initrc_exec_t)
                (typeattributeset cil_gen_require gpm_runtime_t)
                (typeattributeset cil_gen_require gpmctl_t)
                (allow sysadm_t gpm_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t gpm_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t gpm_t (file (ioctl read getattr lock open)))
                (allow sysadm_t gpm_t (lnk_file (read getattr)))
                (allow sysadm_t gpm_t (process (getattr)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t gpm_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gpm_conf_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t gpm_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gpm_conf_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t gpm_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gpm_conf_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t gpm_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gpm_conf_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t gpm_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gpm_conf_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t gpm_conf_t (dir (getattr open search)))
                (allow sysadm_t gpm_conf_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t gpm_conf_t (dir (getattr open search)))
                (allow sysadm_t gpm_conf_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t gpm_conf_t (dir (getattr open search)))
                (allow sysadm_t gpm_conf_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t gpm_conf_t (dir (getattr open search)))
                (allow sysadm_t gpm_conf_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t gpm_conf_t (dir (getattr open search)))
                (allow sysadm_t gpm_conf_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t device_t (dir (getattr open search)))
                (allow sysadm_t device_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t device_t (dir (getattr open search)))
                (allow sysadm_t device_t (lnk_file (read getattr)))
                (allow sysadm_t gpmctl_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gpmctl_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t gpmctl_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gpmctl_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t gpmctl_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gpmctl_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t gpmctl_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gpmctl_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t gpmctl_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gpmctl_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t gpmctl_t (dir (getattr open search)))
                (allow sysadm_t gpmctl_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t gpmctl_t (dir (getattr open search)))
                (allow sysadm_t gpmctl_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t gpmctl_t (dir (getattr open search)))
                (allow sysadm_t gpmctl_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t gpmctl_t (dir (getattr open search)))
                (allow sysadm_t gpmctl_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t gpmctl_t (dir (getattr open search)))
                (allow sysadm_t gpmctl_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t gpm_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gpm_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t gpm_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gpm_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t gpm_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gpm_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t gpm_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gpm_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t gpm_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gpm_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t gpm_runtime_t (dir (getattr open search)))
                (allow sysadm_t gpm_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t gpm_runtime_t (dir (getattr open search)))
                (allow sysadm_t gpm_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t gpm_runtime_t (dir (getattr open search)))
                (allow sysadm_t gpm_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t gpm_runtime_t (dir (getattr open search)))
                (allow sysadm_t gpm_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t gpm_runtime_t (dir (getattr open search)))
                (allow sysadm_t gpm_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_228
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_229
                (roleattributeset cil_gen_require gpsd_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require gpsd_t)
                (typeattributeset cil_gen_require gpsd_initrc_exec_t)
                (typeattributeset cil_gen_require gpsd_runtime_t)
                (typeattributeset cil_gen_require gpsd_exec_t)
                (roleattributeset cil_gen_require gpsd_roles)
                (roleattributeset gpsd_roles (sysadm_r ))
                (allow sysadm_t gpsd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t gpsd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t gpsd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t gpsd_t (lnk_file (read getattr)))
                (allow sysadm_t gpsd_t (process (getattr)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t gpsd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gpsd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t gpsd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gpsd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t gpsd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gpsd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t gpsd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gpsd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t gpsd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gpsd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t gpsd_runtime_t (dir (getattr open search)))
                (allow sysadm_t gpsd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t gpsd_runtime_t (dir (getattr open search)))
                (allow sysadm_t gpsd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t gpsd_runtime_t (dir (getattr open search)))
                (allow sysadm_t gpsd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t gpsd_runtime_t (dir (getattr open search)))
                (allow sysadm_t gpsd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t gpsd_runtime_t (dir (getattr open search)))
                (allow sysadm_t gpsd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t gpsd_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t gpsd_t (process (transition)))
                (dontaudit sysadm_t gpsd_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t gpsd_exec_t process gpsd_t)
                (allow gpsd_t sysadm_t (fd (use)))
                (allow gpsd_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow gpsd_t sysadm_t (process (sigchld)))
                (optional sysadm_optional_230
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_231
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require gssproxy_t)
                (typeattributeset cil_gen_require gssproxy_run_t)
                (typeattributeset cil_gen_require gssproxy_var_lib_t)
                (typeattributeset cil_gen_require gssproxy_unit_t)
                (allow sysadm_t gssproxy_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t gssproxy_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t gssproxy_t (file (ioctl read getattr lock open)))
                (allow sysadm_t gssproxy_t (lnk_file (read getattr)))
                (allow sysadm_t gssproxy_t (process (getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t gssproxy_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gssproxy_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t gssproxy_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gssproxy_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t gssproxy_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gssproxy_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t gssproxy_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gssproxy_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t gssproxy_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gssproxy_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t gssproxy_var_lib_t (dir (getattr open search)))
                (allow sysadm_t gssproxy_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t gssproxy_var_lib_t (dir (getattr open search)))
                (allow sysadm_t gssproxy_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t gssproxy_var_lib_t (dir (getattr open search)))
                (allow sysadm_t gssproxy_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t gssproxy_var_lib_t (dir (getattr open search)))
                (allow sysadm_t gssproxy_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t gssproxy_var_lib_t (dir (getattr open search)))
                (allow sysadm_t gssproxy_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t gssproxy_run_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gssproxy_run_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t gssproxy_run_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gssproxy_run_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t gssproxy_run_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gssproxy_run_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t gssproxy_run_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gssproxy_run_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t gssproxy_run_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gssproxy_run_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t gssproxy_run_t (dir (getattr open search)))
                (allow sysadm_t gssproxy_run_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t gssproxy_run_t (dir (getattr open search)))
                (allow sysadm_t gssproxy_run_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t gssproxy_run_t (dir (getattr open search)))
                (allow sysadm_t gssproxy_run_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t gssproxy_run_t (dir (getattr open search)))
                (allow sysadm_t gssproxy_run_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t gssproxy_run_t (dir (getattr open search)))
                (allow sysadm_t gssproxy_run_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t gssproxy_unit_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gssproxy_unit_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t gssproxy_unit_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gssproxy_unit_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t gssproxy_unit_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gssproxy_unit_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t gssproxy_unit_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gssproxy_unit_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t gssproxy_unit_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gssproxy_unit_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t gssproxy_unit_t (dir (getattr open search)))
                (allow sysadm_t gssproxy_unit_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t gssproxy_unit_t (dir (getattr open search)))
                (allow sysadm_t gssproxy_unit_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t gssproxy_unit_t (dir (getattr open search)))
                (allow sysadm_t gssproxy_unit_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t gssproxy_unit_t (dir (getattr open search)))
                (allow sysadm_t gssproxy_unit_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t gssproxy_unit_t (dir (getattr open search)))
                (allow sysadm_t gssproxy_unit_t (sock_file (getattr relabelfrom relabelto)))
            )
            (optional sysadm_optional_232
                (roleattributeset cil_gen_require hadoop_roles)
                (roleattributeset cil_gen_require zookeeper_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require hadoop_t)
                (typeattributeset cil_gen_require zookeeper_t)
                (typeattributeset cil_gen_require hadoop_home_t)
                (typeattributeset cil_gen_require hadoop_tmp_t)
                (typeattributeset cil_gen_require hadoop_hsperfdata_t)
                (typeattributeset cil_gen_require zookeeper_tmp_t)
                (typeattributeset cil_gen_require hadoop_exec_t)
                (typeattributeset cil_gen_require zookeeper_exec_t)
                (roleattributeset cil_gen_require hadoop_roles)
                (roleattributeset hadoop_roles (sysadm_r ))
                (roleattributeset cil_gen_require zookeeper_roles)
                (roleattributeset zookeeper_roles (sysadm_r ))
                (allow sysadm_application_exec_domain bin_t (dir (getattr open search)))
                (allow sysadm_application_exec_domain bin_t (lnk_file (read getattr)))
                (allow sysadm_application_exec_domain usr_t (dir (getattr open search)))
                (allow sysadm_application_exec_domain hadoop_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_application_exec_domain hadoop_t (process (transition)))
                (dontaudit sysadm_application_exec_domain hadoop_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_application_exec_domain hadoop_exec_t process hadoop_t)
                (allow hadoop_t sysadm_application_exec_domain (fd (use)))
                (allow hadoop_t sysadm_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                (allow hadoop_t sysadm_application_exec_domain (process (sigchld)))
                (allow sysadm_application_exec_domain bin_t (dir (getattr open search)))
                (allow sysadm_application_exec_domain bin_t (lnk_file (read getattr)))
                (allow sysadm_application_exec_domain usr_t (dir (getattr open search)))
                (allow sysadm_application_exec_domain zookeeper_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_application_exec_domain zookeeper_t (process (transition)))
                (dontaudit sysadm_application_exec_domain zookeeper_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_application_exec_domain zookeeper_exec_t process zookeeper_t)
                (allow zookeeper_t sysadm_application_exec_domain (fd (use)))
                (allow zookeeper_t sysadm_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                (allow zookeeper_t sysadm_application_exec_domain (process (sigchld)))
                (allow sysadm_application_exec_domain hadoop_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_application_exec_domain zookeeper_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_application_exec_domain hadoop_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_application_exec_domain zookeeper_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_application_exec_domain hadoop_t (file (ioctl read getattr lock open)))
                (allow sysadm_application_exec_domain zookeeper_t (file (ioctl read getattr lock open)))
                (allow sysadm_application_exec_domain hadoop_t (lnk_file (read getattr)))
                (allow sysadm_application_exec_domain zookeeper_t (lnk_file (read getattr)))
                (allow sysadm_application_exec_domain hadoop_t (process (getattr)))
                (allow sysadm_application_exec_domain zookeeper_t (process (getattr)))
                (allow sysadm_t hadoop_home_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t hadoop_tmp_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t hadoop_hsperfdata_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t hadoop_home_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t hadoop_tmp_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t zookeeper_tmp_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t hadoop_home_t (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename)))
                (optional sysadm_optional_233
                    (typeattributeset cil_gen_require sysadm_systemd_t)
                    (allow sysadm_systemd_t hadoop_t (dir (ioctl read getattr lock open search)))
                    (allow sysadm_systemd_t hadoop_t (file (ioctl read getattr lock open)))
                    (allow sysadm_systemd_t hadoop_t (lnk_file (read getattr)))
                    (allow sysadm_systemd_t hadoop_t (process (getattr)))
                    (allow sysadm_systemd_t hadoop_t (process (sigchld sigkill sigstop signull signal)))
                    (allow hadoop_t sysadm_systemd_t (fd (use)))
                    (allow hadoop_t sysadm_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                    (allow hadoop_t sysadm_systemd_t (dir (ioctl read getattr lock open search)))
                    (allow hadoop_t sysadm_systemd_t (file (ioctl read getattr lock open)))
                    (allow hadoop_t sysadm_systemd_t (lnk_file (read getattr)))
                    (allow hadoop_t sysadm_systemd_t (process (getattr)))
                    (allow hadoop_t sysadm_systemd_t (process (sigchld)))
                    (allow sysadm_systemd_t zookeeper_t (dir (ioctl read getattr lock open search)))
                    (allow sysadm_systemd_t zookeeper_t (file (ioctl read getattr lock open)))
                    (allow sysadm_systemd_t zookeeper_t (lnk_file (read getattr)))
                    (allow sysadm_systemd_t zookeeper_t (process (getattr)))
                    (allow sysadm_systemd_t zookeeper_t (process (sigchld sigkill sigstop signull signal)))
                    (allow zookeeper_t sysadm_systemd_t (fd (use)))
                    (allow zookeeper_t sysadm_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                    (allow zookeeper_t sysadm_systemd_t (dir (ioctl read getattr lock open search)))
                    (allow zookeeper_t sysadm_systemd_t (file (ioctl read getattr lock open)))
                    (allow zookeeper_t sysadm_systemd_t (lnk_file (read getattr)))
                    (allow zookeeper_t sysadm_systemd_t (process (getattr)))
                    (allow zookeeper_t sysadm_systemd_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_234
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require tmpfs_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require haproxy_t)
                (typeattributeset cil_gen_require haproxy_initrc_exec_t)
                (typeattributeset cil_gen_require haproxy_conf_t)
                (typeattributeset cil_gen_require haproxy_log_t)
                (typeattributeset cil_gen_require haproxy_runtime_t)
                (typeattributeset cil_gen_require haproxy_tmpfs_t)
                (typeattributeset cil_gen_require haproxy_exec_t)
                (roleattributeset cil_gen_require sysadm_r)
                (roletype sysadm_r haproxy_t)
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t haproxy_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t haproxy_t (process (transition)))
                (dontaudit sysadm_t haproxy_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t haproxy_exec_t process haproxy_t)
                (allow haproxy_t sysadm_t (fd (use)))
                (allow haproxy_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow haproxy_t sysadm_t (process (sigchld)))
                (allow sysadm_t haproxy_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t haproxy_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t haproxy_t (file (ioctl read getattr lock open)))
                (allow sysadm_t haproxy_t (lnk_file (read getattr)))
                (allow sysadm_t haproxy_t (process (getattr)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t haproxy_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t haproxy_conf_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t haproxy_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t haproxy_conf_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t haproxy_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t haproxy_conf_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t haproxy_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t haproxy_conf_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t haproxy_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t haproxy_conf_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t haproxy_conf_t (dir (getattr open search)))
                (allow sysadm_t haproxy_conf_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t haproxy_conf_t (dir (getattr open search)))
                (allow sysadm_t haproxy_conf_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t haproxy_conf_t (dir (getattr open search)))
                (allow sysadm_t haproxy_conf_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t haproxy_conf_t (dir (getattr open search)))
                (allow sysadm_t haproxy_conf_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t haproxy_conf_t (dir (getattr open search)))
                (allow sysadm_t haproxy_conf_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t haproxy_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t haproxy_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t haproxy_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t haproxy_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t haproxy_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t haproxy_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t haproxy_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t haproxy_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t haproxy_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t haproxy_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t haproxy_log_t (dir (getattr open search)))
                (allow sysadm_t haproxy_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t haproxy_log_t (dir (getattr open search)))
                (allow sysadm_t haproxy_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t haproxy_log_t (dir (getattr open search)))
                (allow sysadm_t haproxy_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t haproxy_log_t (dir (getattr open search)))
                (allow sysadm_t haproxy_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t haproxy_log_t (dir (getattr open search)))
                (allow sysadm_t haproxy_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmpfs_t (dir (getattr open search)))
                (allow sysadm_t haproxy_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t haproxy_tmpfs_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t haproxy_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t haproxy_tmpfs_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t haproxy_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t haproxy_tmpfs_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t haproxy_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t haproxy_tmpfs_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t haproxy_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t haproxy_tmpfs_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t haproxy_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t haproxy_tmpfs_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t haproxy_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t haproxy_tmpfs_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t haproxy_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t haproxy_tmpfs_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t haproxy_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t haproxy_tmpfs_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t haproxy_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t haproxy_tmpfs_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t haproxy_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t haproxy_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t haproxy_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t haproxy_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t haproxy_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t haproxy_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t haproxy_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t haproxy_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t haproxy_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t haproxy_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t haproxy_runtime_t (dir (getattr open search)))
                (allow sysadm_t haproxy_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t haproxy_runtime_t (dir (getattr open search)))
                (allow sysadm_t haproxy_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t haproxy_runtime_t (dir (getattr open search)))
                (allow sysadm_t haproxy_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t haproxy_runtime_t (dir (getattr open search)))
                (allow sysadm_t haproxy_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t haproxy_runtime_t (dir (getattr open search)))
                (allow sysadm_t haproxy_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_235
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_236
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require hddtemp_t)
                (typeattributeset cil_gen_require hddtemp_etc_t)
                (typeattributeset cil_gen_require hddtemp_initrc_exec_t)
                (typeattributeset cil_gen_require hddtemp_exec_t)
                (roleattributeset cil_gen_require sysadm_r)
                (roletype sysadm_r hddtemp_t)
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t hddtemp_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t hddtemp_t (process (transition)))
                (dontaudit sysadm_t hddtemp_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t hddtemp_exec_t process hddtemp_t)
                (allow hddtemp_t sysadm_t (fd (use)))
                (allow hddtemp_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow hddtemp_t sysadm_t (process (sigchld)))
                (allow sysadm_t hddtemp_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t hddtemp_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t hddtemp_t (file (ioctl read getattr lock open)))
                (allow sysadm_t hddtemp_t (lnk_file (read getattr)))
                (allow sysadm_t hddtemp_t (process (getattr)))
                (allow sysadm_t hddtemp_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t hddtemp_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t hddtemp_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t hddtemp_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t hddtemp_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t hddtemp_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t hddtemp_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t hddtemp_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t hddtemp_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t hddtemp_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t hddtemp_etc_t (dir (getattr open search)))
                (allow sysadm_t hddtemp_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t hddtemp_etc_t (dir (getattr open search)))
                (allow sysadm_t hddtemp_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t hddtemp_etc_t (dir (getattr open search)))
                (allow sysadm_t hddtemp_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t hddtemp_etc_t (dir (getattr open search)))
                (allow sysadm_t hddtemp_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t hddtemp_etc_t (dir (getattr open search)))
                (allow sysadm_t hddtemp_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (optional sysadm_optional_237
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_238
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require hostname_t)
                (typeattributeset cil_gen_require hostname_exec_t)
                (roleattributeset cil_gen_require sysadm_r)
                (roletype sysadm_r hostname_t)
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t hostname_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t hostname_t (process (transition)))
                (dontaudit sysadm_t hostname_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t hostname_exec_t process hostname_t)
                (allow hostname_t sysadm_t (fd (use)))
                (allow hostname_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow hostname_t sysadm_t (process (sigchld)))
            )
            (optional sysadm_optional_239
                (roleattributeset cil_gen_require hwloc_dhwd_roles)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require hwloc_dhwd_exec_t)
                (typeattributeset cil_gen_require hwloc_runtime_t)
                (typeattributeset cil_gen_require hwloc_dhwd_t)
                (roleattributeset cil_gen_require hwloc_dhwd_roles)
                (roleattributeset hwloc_dhwd_roles (sysadm_r ))
                (allow sysadm_t hwloc_dhwd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t hwloc_dhwd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t hwloc_dhwd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t hwloc_dhwd_t (lnk_file (read getattr)))
                (allow sysadm_t hwloc_dhwd_t (process (getattr)))
                (allow sysadm_t hwloc_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t hwloc_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t hwloc_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t hwloc_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t hwloc_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t hwloc_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t hwloc_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t hwloc_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t hwloc_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t hwloc_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t hwloc_runtime_t (dir (getattr open search)))
                (allow sysadm_t hwloc_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t hwloc_runtime_t (dir (getattr open search)))
                (allow sysadm_t hwloc_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t hwloc_runtime_t (dir (getattr open search)))
                (allow sysadm_t hwloc_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t hwloc_runtime_t (dir (getattr open search)))
                (allow sysadm_t hwloc_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t hwloc_runtime_t (dir (getattr open search)))
                (allow sysadm_t hwloc_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_run_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t hwloc_dhwd_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t hwloc_dhwd_t (process (transition)))
                (dontaudit sysadm_t hwloc_dhwd_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t hwloc_dhwd_exec_t process hwloc_dhwd_t)
                (allow hwloc_dhwd_t sysadm_t (fd (use)))
                (allow hwloc_dhwd_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow hwloc_dhwd_t sysadm_t (process (sigchld)))
                (typetransition sysadm_t var_run_t dir "hwloc" hwloc_runtime_t)
            )
            (optional sysadm_optional_240
                (typeattributeset cil_gen_require hypervkvpd_t)
                (typeattributeset cil_gen_require hypervkvpd_initrc_exec_t)
                (allow sysadm_t hypervkvpd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t hypervkvpd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t hypervkvpd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t hypervkvpd_t (lnk_file (read getattr)))
                (allow sysadm_t hypervkvpd_t (process (getattr)))
                (optional sysadm_optional_241
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_242
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require i18n_input_t)
                (typeattributeset cil_gen_require i18n_input_initrc_exec_t)
                (typeattributeset cil_gen_require i18n_input_runtime_t)
                (typeattributeset cil_gen_require i18n_input_log_t)
                (allow sysadm_t i18n_input_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t i18n_input_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t i18n_input_t (file (ioctl read getattr lock open)))
                (allow sysadm_t i18n_input_t (lnk_file (read getattr)))
                (allow sysadm_t i18n_input_t (process (getattr)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t i18n_input_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t i18n_input_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t i18n_input_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t i18n_input_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t i18n_input_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t i18n_input_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t i18n_input_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t i18n_input_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t i18n_input_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t i18n_input_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t i18n_input_runtime_t (dir (getattr open search)))
                (allow sysadm_t i18n_input_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t i18n_input_runtime_t (dir (getattr open search)))
                (allow sysadm_t i18n_input_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t i18n_input_runtime_t (dir (getattr open search)))
                (allow sysadm_t i18n_input_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t i18n_input_runtime_t (dir (getattr open search)))
                (allow sysadm_t i18n_input_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t i18n_input_runtime_t (dir (getattr open search)))
                (allow sysadm_t i18n_input_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t i18n_input_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t i18n_input_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t i18n_input_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t i18n_input_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t i18n_input_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t i18n_input_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t i18n_input_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t i18n_input_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t i18n_input_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t i18n_input_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t i18n_input_log_t (dir (getattr open search)))
                (allow sysadm_t i18n_input_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t i18n_input_log_t (dir (getattr open search)))
                (allow sysadm_t i18n_input_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t i18n_input_log_t (dir (getattr open search)))
                (allow sysadm_t i18n_input_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t i18n_input_log_t (dir (getattr open search)))
                (allow sysadm_t i18n_input_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t i18n_input_log_t (dir (getattr open search)))
                (allow sysadm_t i18n_input_log_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_243
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_244
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require icecast_t)
                (typeattributeset cil_gen_require icecast_initrc_exec_t)
                (typeattributeset cil_gen_require icecast_log_t)
                (typeattributeset cil_gen_require icecast_runtime_t)
                (allow sysadm_t icecast_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t icecast_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t icecast_t (file (ioctl read getattr lock open)))
                (allow sysadm_t icecast_t (lnk_file (read getattr)))
                (allow sysadm_t icecast_t (process (getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t icecast_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t icecast_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t icecast_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t icecast_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t icecast_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t icecast_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t icecast_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t icecast_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t icecast_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t icecast_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t icecast_log_t (dir (getattr open search)))
                (allow sysadm_t icecast_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t icecast_log_t (dir (getattr open search)))
                (allow sysadm_t icecast_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t icecast_log_t (dir (getattr open search)))
                (allow sysadm_t icecast_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t icecast_log_t (dir (getattr open search)))
                (allow sysadm_t icecast_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t icecast_log_t (dir (getattr open search)))
                (allow sysadm_t icecast_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t icecast_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t icecast_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t icecast_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t icecast_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t icecast_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t icecast_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t icecast_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t icecast_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t icecast_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t icecast_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t icecast_runtime_t (dir (getattr open search)))
                (allow sysadm_t icecast_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t icecast_runtime_t (dir (getattr open search)))
                (allow sysadm_t icecast_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t icecast_runtime_t (dir (getattr open search)))
                (allow sysadm_t icecast_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t icecast_runtime_t (dir (getattr open search)))
                (allow sysadm_t icecast_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t icecast_runtime_t (dir (getattr open search)))
                (allow sysadm_t icecast_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_245
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_246
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require ifplugd_t)
                (typeattributeset cil_gen_require ifplugd_etc_t)
                (typeattributeset cil_gen_require ifplugd_runtime_t)
                (typeattributeset cil_gen_require ifplugd_initrc_exec_t)
                (allow sysadm_t ifplugd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t ifplugd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t ifplugd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t ifplugd_t (lnk_file (read getattr)))
                (allow sysadm_t ifplugd_t (process (getattr)))
                (allow sysadm_t etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t ifplugd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ifplugd_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t ifplugd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ifplugd_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ifplugd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ifplugd_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t ifplugd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ifplugd_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ifplugd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ifplugd_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ifplugd_etc_t (dir (getattr open search)))
                (allow sysadm_t ifplugd_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t ifplugd_etc_t (dir (getattr open search)))
                (allow sysadm_t ifplugd_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t ifplugd_etc_t (dir (getattr open search)))
                (allow sysadm_t ifplugd_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ifplugd_etc_t (dir (getattr open search)))
                (allow sysadm_t ifplugd_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ifplugd_etc_t (dir (getattr open search)))
                (allow sysadm_t ifplugd_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t ifplugd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ifplugd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t ifplugd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ifplugd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ifplugd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ifplugd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t ifplugd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ifplugd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ifplugd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ifplugd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ifplugd_runtime_t (dir (getattr open search)))
                (allow sysadm_t ifplugd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t ifplugd_runtime_t (dir (getattr open search)))
                (allow sysadm_t ifplugd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t ifplugd_runtime_t (dir (getattr open search)))
                (allow sysadm_t ifplugd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ifplugd_runtime_t (dir (getattr open search)))
                (allow sysadm_t ifplugd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ifplugd_runtime_t (dir (getattr open search)))
                (allow sysadm_t ifplugd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_247
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_248
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require var_spool_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require innd_etc_t)
                (typeattributeset cil_gen_require innd_var_lib_t)
                (typeattributeset cil_gen_require news_spool_t)
                (typeattributeset cil_gen_require innd_t)
                (typeattributeset cil_gen_require innd_log_t)
                (typeattributeset cil_gen_require innd_runtime_t)
                (typeattributeset cil_gen_require innd_initrc_exec_t)
                (allow sysadm_t innd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t innd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t innd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t innd_t (lnk_file (read getattr)))
                (allow sysadm_t innd_t (process (getattr)))
                (allow sysadm_t etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t innd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t innd_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t innd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t innd_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t innd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t innd_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t innd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t innd_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t innd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t innd_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t innd_etc_t (dir (getattr open search)))
                (allow sysadm_t innd_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t innd_etc_t (dir (getattr open search)))
                (allow sysadm_t innd_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t innd_etc_t (dir (getattr open search)))
                (allow sysadm_t innd_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t innd_etc_t (dir (getattr open search)))
                (allow sysadm_t innd_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t innd_etc_t (dir (getattr open search)))
                (allow sysadm_t innd_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t innd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t innd_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t innd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t innd_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t innd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t innd_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t innd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t innd_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t innd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t innd_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t innd_log_t (dir (getattr open search)))
                (allow sysadm_t innd_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t innd_log_t (dir (getattr open search)))
                (allow sysadm_t innd_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t innd_log_t (dir (getattr open search)))
                (allow sysadm_t innd_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t innd_log_t (dir (getattr open search)))
                (allow sysadm_t innd_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t innd_log_t (dir (getattr open search)))
                (allow sysadm_t innd_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t innd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t innd_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t innd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t innd_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t innd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t innd_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t innd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t innd_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t innd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t innd_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t innd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t innd_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t innd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t innd_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t innd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t innd_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t innd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t innd_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t innd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t innd_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t innd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t innd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t innd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t innd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t innd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t innd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t innd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t innd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t innd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t innd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t innd_runtime_t (dir (getattr open search)))
                (allow sysadm_t innd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t innd_runtime_t (dir (getattr open search)))
                (allow sysadm_t innd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t innd_runtime_t (dir (getattr open search)))
                (allow sysadm_t innd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t innd_runtime_t (dir (getattr open search)))
                (allow sysadm_t innd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t innd_runtime_t (dir (getattr open search)))
                (allow sysadm_t innd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_spool_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t news_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t news_spool_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t news_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t news_spool_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t news_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t news_spool_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t news_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t news_spool_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t news_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t news_spool_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t news_spool_t (dir (getattr open search)))
                (allow sysadm_t news_spool_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t news_spool_t (dir (getattr open search)))
                (allow sysadm_t news_spool_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t news_spool_t (dir (getattr open search)))
                (allow sysadm_t news_spool_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t news_spool_t (dir (getattr open search)))
                (allow sysadm_t news_spool_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t news_spool_t (dir (getattr open search)))
                (allow sysadm_t news_spool_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_249
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_250
                (typeattributeset cil_gen_require iodined_t)
                (typeattributeset cil_gen_require iodined_initrc_exec_t)
                (allow sysadm_t iodined_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t iodined_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t iodined_t (file (ioctl read getattr lock open)))
                (allow sysadm_t iodined_t (lnk_file (read getattr)))
                (allow sysadm_t iodined_t (process (getattr)))
                (optional sysadm_optional_251
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_252
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require var_lock_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require ipsec_t)
                (typeattributeset cil_gen_require ipsec_initrc_exec_t)
                (typeattributeset cil_gen_require ipsec_conf_file_t)
                (typeattributeset cil_gen_require ipsec_key_file_t)
                (typeattributeset cil_gen_require ipsec_log_t)
                (typeattributeset cil_gen_require ipsec_tmp_t)
                (typeattributeset cil_gen_require ipsec_runtime_t)
                (typeattributeset cil_gen_require ipsec_mgmt_lock_t)
                (typeattributeset cil_gen_require ipsec_mgmt_runtime_t)
                (typeattributeset cil_gen_require racoon_tmp_t)
                (typeattributeset cil_gen_require ipsec_unit_t)
                (typeattributeset cil_gen_require ipsec_exec_t)
                (allow sysadm_t ipsec_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t ipsec_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t ipsec_t (file (ioctl read getattr lock open)))
                (allow sysadm_t ipsec_t (lnk_file (read getattr)))
                (allow sysadm_t ipsec_t (process (getattr)))
                (allow sysadm_t ipsec_exec_t (file (ioctl read getattr lock map execute open execute_no_trans)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t ipsec_runtime_t (dir (getattr open search)))
                (allow sysadm_t ipsec_runtime_t (sock_file (write getattr append open)))
                (allow sysadm_t ipsec_t (unix_stream_socket (connectto)))
                (allow sysadm_t ipsec_t (key_socket (getattr)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t ipsec_conf_file_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ipsec_key_file_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ipsec_conf_file_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t ipsec_key_file_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t ipsec_conf_file_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ipsec_key_file_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ipsec_conf_file_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ipsec_key_file_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ipsec_conf_file_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ipsec_key_file_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ipsec_conf_file_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t ipsec_key_file_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t ipsec_conf_file_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ipsec_key_file_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ipsec_conf_file_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ipsec_key_file_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ipsec_conf_file_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ipsec_key_file_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ipsec_conf_file_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ipsec_key_file_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ipsec_conf_file_t (dir (getattr open search)))
                (allow sysadm_t ipsec_key_file_t (dir (getattr open search)))
                (allow sysadm_t ipsec_conf_file_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t ipsec_key_file_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t ipsec_conf_file_t (dir (getattr open search)))
                (allow sysadm_t ipsec_key_file_t (dir (getattr open search)))
                (allow sysadm_t ipsec_conf_file_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t ipsec_key_file_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t ipsec_conf_file_t (dir (getattr open search)))
                (allow sysadm_t ipsec_key_file_t (dir (getattr open search)))
                (allow sysadm_t ipsec_conf_file_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ipsec_key_file_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ipsec_conf_file_t (dir (getattr open search)))
                (allow sysadm_t ipsec_key_file_t (dir (getattr open search)))
                (allow sysadm_t ipsec_conf_file_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ipsec_key_file_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ipsec_conf_file_t (dir (getattr open search)))
                (allow sysadm_t ipsec_key_file_t (dir (getattr open search)))
                (allow sysadm_t ipsec_conf_file_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ipsec_key_file_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (getattr open search)))
                (allow sysadm_t ipsec_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t racoon_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ipsec_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t racoon_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t ipsec_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t racoon_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ipsec_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t racoon_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ipsec_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t racoon_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ipsec_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t racoon_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t ipsec_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t racoon_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ipsec_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t racoon_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ipsec_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t racoon_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ipsec_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t racoon_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ipsec_tmp_t (dir (getattr open search)))
                (allow sysadm_t racoon_tmp_t (dir (getattr open search)))
                (allow sysadm_t ipsec_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t racoon_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t ipsec_tmp_t (dir (getattr open search)))
                (allow sysadm_t racoon_tmp_t (dir (getattr open search)))
                (allow sysadm_t ipsec_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t racoon_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t ipsec_tmp_t (dir (getattr open search)))
                (allow sysadm_t racoon_tmp_t (dir (getattr open search)))
                (allow sysadm_t ipsec_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t racoon_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ipsec_tmp_t (dir (getattr open search)))
                (allow sysadm_t racoon_tmp_t (dir (getattr open search)))
                (allow sysadm_t ipsec_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t racoon_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ipsec_tmp_t (dir (getattr open search)))
                (allow sysadm_t racoon_tmp_t (dir (getattr open search)))
                (allow sysadm_t ipsec_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t racoon_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t ipsec_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ipsec_mgmt_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ipsec_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t ipsec_mgmt_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t ipsec_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ipsec_mgmt_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ipsec_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ipsec_mgmt_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ipsec_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ipsec_mgmt_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ipsec_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t ipsec_mgmt_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t ipsec_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ipsec_mgmt_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ipsec_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ipsec_mgmt_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ipsec_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ipsec_mgmt_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ipsec_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ipsec_mgmt_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ipsec_runtime_t (dir (getattr open search)))
                (allow sysadm_t ipsec_mgmt_runtime_t (dir (getattr open search)))
                (allow sysadm_t ipsec_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t ipsec_mgmt_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t ipsec_runtime_t (dir (getattr open search)))
                (allow sysadm_t ipsec_mgmt_runtime_t (dir (getattr open search)))
                (allow sysadm_t ipsec_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t ipsec_mgmt_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t ipsec_runtime_t (dir (getattr open search)))
                (allow sysadm_t ipsec_mgmt_runtime_t (dir (getattr open search)))
                (allow sysadm_t ipsec_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ipsec_mgmt_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ipsec_runtime_t (dir (getattr open search)))
                (allow sysadm_t ipsec_mgmt_runtime_t (dir (getattr open search)))
                (allow sysadm_t ipsec_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ipsec_mgmt_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ipsec_runtime_t (dir (getattr open search)))
                (allow sysadm_t ipsec_mgmt_runtime_t (dir (getattr open search)))
                (allow sysadm_t ipsec_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ipsec_mgmt_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_lock_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lock_t (dir (getattr open search)))
                (allow sysadm_t ipsec_mgmt_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ipsec_mgmt_lock_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t ipsec_mgmt_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ipsec_mgmt_lock_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ipsec_mgmt_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ipsec_mgmt_lock_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t ipsec_mgmt_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ipsec_mgmt_lock_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ipsec_mgmt_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ipsec_mgmt_lock_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ipsec_mgmt_lock_t (dir (getattr open search)))
                (allow sysadm_t ipsec_mgmt_lock_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t ipsec_mgmt_lock_t (dir (getattr open search)))
                (allow sysadm_t ipsec_mgmt_lock_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t ipsec_mgmt_lock_t (dir (getattr open search)))
                (allow sysadm_t ipsec_mgmt_lock_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ipsec_mgmt_lock_t (dir (getattr open search)))
                (allow sysadm_t ipsec_mgmt_lock_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ipsec_mgmt_lock_t (dir (getattr open search)))
                (allow sysadm_t ipsec_mgmt_lock_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t ipsec_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ipsec_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t ipsec_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ipsec_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ipsec_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ipsec_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t ipsec_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ipsec_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ipsec_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ipsec_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ipsec_log_t (dir (getattr open search)))
                (allow sysadm_t ipsec_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t ipsec_log_t (dir (getattr open search)))
                (allow sysadm_t ipsec_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t ipsec_log_t (dir (getattr open search)))
                (allow sysadm_t ipsec_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ipsec_log_t (dir (getattr open search)))
                (allow sysadm_t ipsec_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ipsec_log_t (dir (getattr open search)))
                (allow sysadm_t ipsec_log_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_253
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_254
                (roleattributeset cil_gen_require iptables_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require iptables_t)
                (typeattributeset cil_gen_require iptables_initrc_exec_t)
                (typeattributeset cil_gen_require iptables_conf_t)
                (typeattributeset cil_gen_require iptables_tmp_t)
                (typeattributeset cil_gen_require iptables_runtime_t)
                (typeattributeset cil_gen_require iptables_unit_t)
                (typeattributeset cil_gen_require iptables_exec_t)
                (roleattributeset cil_gen_require iptables_roles)
                (roleattributeset iptables_roles (sysadm_r ))
                (allow sysadm_t iptables_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t iptables_t (file (ioctl read getattr lock open)))
                (allow sysadm_t iptables_t (lnk_file (read getattr)))
                (allow sysadm_t iptables_t (process (getattr)))
                (allow sysadm_t iptables_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t iptables_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t iptables_conf_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t iptables_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t iptables_conf_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t iptables_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t iptables_conf_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t iptables_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t iptables_conf_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t iptables_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t iptables_conf_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t iptables_conf_t (dir (getattr open search)))
                (allow sysadm_t iptables_conf_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t iptables_conf_t (dir (getattr open search)))
                (allow sysadm_t iptables_conf_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t iptables_conf_t (dir (getattr open search)))
                (allow sysadm_t iptables_conf_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t iptables_conf_t (dir (getattr open search)))
                (allow sysadm_t iptables_conf_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t iptables_conf_t (dir (getattr open search)))
                (allow sysadm_t iptables_conf_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (getattr open search)))
                (allow sysadm_t iptables_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t iptables_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t iptables_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t iptables_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t iptables_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t iptables_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t iptables_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t iptables_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t iptables_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t iptables_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t iptables_tmp_t (dir (getattr open search)))
                (allow sysadm_t iptables_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t iptables_tmp_t (dir (getattr open search)))
                (allow sysadm_t iptables_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t iptables_tmp_t (dir (getattr open search)))
                (allow sysadm_t iptables_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t iptables_tmp_t (dir (getattr open search)))
                (allow sysadm_t iptables_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t iptables_tmp_t (dir (getattr open search)))
                (allow sysadm_t iptables_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t iptables_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t iptables_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t iptables_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t iptables_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t iptables_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t iptables_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t iptables_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t iptables_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t iptables_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t iptables_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t iptables_runtime_t (dir (getattr open search)))
                (allow sysadm_t iptables_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t iptables_runtime_t (dir (getattr open search)))
                (allow sysadm_t iptables_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t iptables_runtime_t (dir (getattr open search)))
                (allow sysadm_t iptables_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t iptables_runtime_t (dir (getattr open search)))
                (allow sysadm_t iptables_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t iptables_runtime_t (dir (getattr open search)))
                (allow sysadm_t iptables_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t iptables_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t iptables_t (process (transition)))
                (dontaudit sysadm_t iptables_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t iptables_exec_t process iptables_t)
                (allow iptables_t sysadm_t (fd (use)))
                (allow iptables_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow iptables_t sysadm_t (process (sigchld)))
                (dontaudit iptables_t sysadm_t (tcp_socket (read write)))
                (dontaudit iptables_t sysadm_t (udp_socket (read write)))
                (dontaudit iptables_t sysadm_t (rawip_socket (read write)))
                (dontaudit iptables_t sysadm_t (netlink_socket (read write)))
                (dontaudit iptables_t sysadm_t (packet_socket (read write)))
                (dontaudit iptables_t sysadm_t (unix_stream_socket (read write)))
                (dontaudit iptables_t sysadm_t (unix_dgram_socket (read write)))
                (dontaudit iptables_t sysadm_t (netlink_route_socket (read write)))
                (dontaudit iptables_t sysadm_t (netlink_tcpdiag_socket (read write)))
                (dontaudit iptables_t sysadm_t (netlink_nflog_socket (read write)))
                (dontaudit iptables_t sysadm_t (netlink_xfrm_socket (read write)))
                (dontaudit iptables_t sysadm_t (netlink_selinux_socket (read write)))
                (dontaudit iptables_t sysadm_t (netlink_audit_socket (read write)))
                (dontaudit iptables_t sysadm_t (netlink_dnrt_socket (read write)))
                (dontaudit iptables_t sysadm_t (netlink_kobject_uevent_socket (read write)))
                (dontaudit iptables_t sysadm_t (appletalk_socket (read write)))
                (dontaudit iptables_t sysadm_t (tun_socket (read write)))
                (dontaudit iptables_t sysadm_t (netlink_iscsi_socket (read write)))
                (dontaudit iptables_t sysadm_t (netlink_fib_lookup_socket (read write)))
                (dontaudit iptables_t sysadm_t (netlink_connector_socket (read write)))
                (dontaudit iptables_t sysadm_t (netlink_netfilter_socket (read write)))
                (dontaudit iptables_t sysadm_t (netlink_generic_socket (read write)))
                (dontaudit iptables_t sysadm_t (netlink_scsitransport_socket (read write)))
                (dontaudit iptables_t sysadm_t (netlink_rdma_socket (read write)))
                (dontaudit iptables_t sysadm_t (netlink_crypto_socket (read write)))
                (dontaudit iptables_t sysadm_t (sctp_socket (read write)))
                (dontaudit iptables_t sysadm_t (icmp_socket (read write)))
                (dontaudit iptables_t sysadm_t (ax25_socket (read write)))
                (dontaudit iptables_t sysadm_t (ipx_socket (read write)))
                (dontaudit iptables_t sysadm_t (netrom_socket (read write)))
                (dontaudit iptables_t sysadm_t (atmpvc_socket (read write)))
                (dontaudit iptables_t sysadm_t (x25_socket (read write)))
                (dontaudit iptables_t sysadm_t (rose_socket (read write)))
                (dontaudit iptables_t sysadm_t (decnet_socket (read write)))
                (dontaudit iptables_t sysadm_t (atmsvc_socket (read write)))
                (dontaudit iptables_t sysadm_t (rds_socket (read write)))
                (dontaudit iptables_t sysadm_t (irda_socket (read write)))
                (dontaudit iptables_t sysadm_t (pppox_socket (read write)))
                (dontaudit iptables_t sysadm_t (llc_socket (read write)))
                (dontaudit iptables_t sysadm_t (can_socket (read write)))
                (dontaudit iptables_t sysadm_t (tipc_socket (read write)))
                (dontaudit iptables_t sysadm_t (bluetooth_socket (read write)))
                (dontaudit iptables_t sysadm_t (iucv_socket (read write)))
                (dontaudit iptables_t sysadm_t (rxrpc_socket (read write)))
                (dontaudit iptables_t sysadm_t (isdn_socket (read write)))
                (dontaudit iptables_t sysadm_t (phonet_socket (read write)))
                (dontaudit iptables_t sysadm_t (ieee802154_socket (read write)))
                (dontaudit iptables_t sysadm_t (caif_socket (read write)))
                (dontaudit iptables_t sysadm_t (alg_socket (read write)))
                (dontaudit iptables_t sysadm_t (nfc_socket (read write)))
                (dontaudit iptables_t sysadm_t (vsock_socket (read write)))
                (dontaudit iptables_t sysadm_t (kcm_socket (read write)))
                (dontaudit iptables_t sysadm_t (qipcrtr_socket (read write)))
                (dontaudit iptables_t sysadm_t (smc_socket (read write)))
                (dontaudit iptables_t sysadm_t (xdp_socket (read write)))
                (optional sysadm_optional_255
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_256
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require irqbalance_t)
                (typeattributeset cil_gen_require irqbalance_initrc_exec_t)
                (typeattributeset cil_gen_require irqbalance_pid_t)
                (typeattributeset cil_gen_require irqbalance_unit_t)
                (allow sysadm_t irqbalance_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t irqbalance_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t irqbalance_t (file (ioctl read getattr lock open)))
                (allow sysadm_t irqbalance_t (lnk_file (read getattr)))
                (allow sysadm_t irqbalance_t (process (getattr)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t irqbalance_pid_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t irqbalance_pid_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t irqbalance_pid_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t irqbalance_pid_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t irqbalance_pid_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t irqbalance_pid_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t irqbalance_pid_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t irqbalance_pid_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t irqbalance_pid_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t irqbalance_pid_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t irqbalance_pid_t (dir (getattr open search)))
                (allow sysadm_t irqbalance_pid_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t irqbalance_pid_t (dir (getattr open search)))
                (allow sysadm_t irqbalance_pid_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t irqbalance_pid_t (dir (getattr open search)))
                (allow sysadm_t irqbalance_pid_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t irqbalance_pid_t (dir (getattr open search)))
                (allow sysadm_t irqbalance_pid_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t irqbalance_pid_t (dir (getattr open search)))
                (allow sysadm_t irqbalance_pid_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_257
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_258
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require var_lock_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require iscsid_t)
                (typeattributeset cil_gen_require iscsi_lock_t)
                (typeattributeset cil_gen_require iscsi_log_t)
                (typeattributeset cil_gen_require iscsi_var_lib_t)
                (typeattributeset cil_gen_require iscsi_runtime_t)
                (typeattributeset cil_gen_require iscsi_tmp_t)
                (typeattributeset cil_gen_require iscsi_initrc_exec_t)
                (allow sysadm_t iscsid_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t iscsid_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t iscsid_t (file (ioctl read getattr lock open)))
                (allow sysadm_t iscsid_t (lnk_file (read getattr)))
                (allow sysadm_t iscsid_t (process (getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t iscsi_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t iscsi_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t iscsi_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t iscsi_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t iscsi_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t iscsi_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t iscsi_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t iscsi_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t iscsi_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t iscsi_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t iscsi_log_t (dir (getattr open search)))
                (allow sysadm_t iscsi_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t iscsi_log_t (dir (getattr open search)))
                (allow sysadm_t iscsi_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t iscsi_log_t (dir (getattr open search)))
                (allow sysadm_t iscsi_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t iscsi_log_t (dir (getattr open search)))
                (allow sysadm_t iscsi_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t iscsi_log_t (dir (getattr open search)))
                (allow sysadm_t iscsi_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_lock_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lock_t (dir (getattr open search)))
                (allow sysadm_t iscsi_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t iscsi_lock_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t iscsi_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t iscsi_lock_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t iscsi_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t iscsi_lock_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t iscsi_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t iscsi_lock_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t iscsi_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t iscsi_lock_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t iscsi_lock_t (dir (getattr open search)))
                (allow sysadm_t iscsi_lock_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t iscsi_lock_t (dir (getattr open search)))
                (allow sysadm_t iscsi_lock_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t iscsi_lock_t (dir (getattr open search)))
                (allow sysadm_t iscsi_lock_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t iscsi_lock_t (dir (getattr open search)))
                (allow sysadm_t iscsi_lock_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t iscsi_lock_t (dir (getattr open search)))
                (allow sysadm_t iscsi_lock_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t iscsi_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t iscsi_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t iscsi_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t iscsi_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t iscsi_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t iscsi_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t iscsi_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t iscsi_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t iscsi_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t iscsi_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t iscsi_var_lib_t (dir (getattr open search)))
                (allow sysadm_t iscsi_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t iscsi_var_lib_t (dir (getattr open search)))
                (allow sysadm_t iscsi_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t iscsi_var_lib_t (dir (getattr open search)))
                (allow sysadm_t iscsi_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t iscsi_var_lib_t (dir (getattr open search)))
                (allow sysadm_t iscsi_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t iscsi_var_lib_t (dir (getattr open search)))
                (allow sysadm_t iscsi_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t iscsi_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t iscsi_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t iscsi_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t iscsi_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t iscsi_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t iscsi_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t iscsi_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t iscsi_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t iscsi_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t iscsi_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t iscsi_runtime_t (dir (getattr open search)))
                (allow sysadm_t iscsi_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t iscsi_runtime_t (dir (getattr open search)))
                (allow sysadm_t iscsi_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t iscsi_runtime_t (dir (getattr open search)))
                (allow sysadm_t iscsi_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t iscsi_runtime_t (dir (getattr open search)))
                (allow sysadm_t iscsi_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t iscsi_runtime_t (dir (getattr open search)))
                (allow sysadm_t iscsi_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (getattr open search)))
                (allow sysadm_t iscsi_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t iscsi_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t iscsi_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t iscsi_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t iscsi_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t iscsi_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t iscsi_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t iscsi_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t iscsi_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t iscsi_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t iscsi_tmp_t (dir (getattr open search)))
                (allow sysadm_t iscsi_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t iscsi_tmp_t (dir (getattr open search)))
                (allow sysadm_t iscsi_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t iscsi_tmp_t (dir (getattr open search)))
                (allow sysadm_t iscsi_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t iscsi_tmp_t (dir (getattr open search)))
                (allow sysadm_t iscsi_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t iscsi_tmp_t (dir (getattr open search)))
                (allow sysadm_t iscsi_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_259
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_260
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require isnsd_t)
                (typeattributeset cil_gen_require isnsd_initrc_exec_t)
                (typeattributeset cil_gen_require isnsd_var_lib_t)
                (typeattributeset cil_gen_require isnsd_runtime_t)
                (allow sysadm_t isnsd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t isnsd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t isnsd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t isnsd_t (lnk_file (read getattr)))
                (allow sysadm_t isnsd_t (process (getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t isnsd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t isnsd_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t isnsd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t isnsd_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t isnsd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t isnsd_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t isnsd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t isnsd_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t isnsd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t isnsd_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t isnsd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t isnsd_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t isnsd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t isnsd_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t isnsd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t isnsd_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t isnsd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t isnsd_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t isnsd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t isnsd_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t isnsd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t isnsd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t isnsd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t isnsd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t isnsd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t isnsd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t isnsd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t isnsd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t isnsd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t isnsd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t isnsd_runtime_t (dir (getattr open search)))
                (allow sysadm_t isnsd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t isnsd_runtime_t (dir (getattr open search)))
                (allow sysadm_t isnsd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t isnsd_runtime_t (dir (getattr open search)))
                (allow sysadm_t isnsd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t isnsd_runtime_t (dir (getattr open search)))
                (allow sysadm_t isnsd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t isnsd_runtime_t (dir (getattr open search)))
                (allow sysadm_t isnsd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_261
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_262
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require var_lock_t)
                (typeattributeset cil_gen_require var_spool_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require jabberd_domain)
                (typeattributeset cil_gen_require jabberd_lock_t)
                (typeattributeset cil_gen_require jabberd_log_t)
                (typeattributeset cil_gen_require jabberd_spool_t)
                (typeattributeset cil_gen_require jabberd_var_lib_t)
                (typeattributeset cil_gen_require jabberd_runtime_t)
                (typeattributeset cil_gen_require jabberd_initrc_exec_t)
                (allow sysadm_t jabberd_domain (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t jabberd_domain (dir (ioctl read getattr lock open search)))
                (allow sysadm_t jabberd_domain (file (ioctl read getattr lock open)))
                (allow sysadm_t jabberd_domain (lnk_file (read getattr)))
                (allow sysadm_t jabberd_domain (process (getattr)))
                (allow sysadm_t var_lock_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lock_t (dir (getattr open search)))
                (allow sysadm_t jabberd_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t jabberd_lock_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t jabberd_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t jabberd_lock_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t jabberd_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t jabberd_lock_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t jabberd_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t jabberd_lock_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t jabberd_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t jabberd_lock_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t jabberd_lock_t (dir (getattr open search)))
                (allow sysadm_t jabberd_lock_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t jabberd_lock_t (dir (getattr open search)))
                (allow sysadm_t jabberd_lock_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t jabberd_lock_t (dir (getattr open search)))
                (allow sysadm_t jabberd_lock_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t jabberd_lock_t (dir (getattr open search)))
                (allow sysadm_t jabberd_lock_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t jabberd_lock_t (dir (getattr open search)))
                (allow sysadm_t jabberd_lock_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t jabberd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t jabberd_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t jabberd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t jabberd_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t jabberd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t jabberd_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t jabberd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t jabberd_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t jabberd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t jabberd_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t jabberd_log_t (dir (getattr open search)))
                (allow sysadm_t jabberd_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t jabberd_log_t (dir (getattr open search)))
                (allow sysadm_t jabberd_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t jabberd_log_t (dir (getattr open search)))
                (allow sysadm_t jabberd_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t jabberd_log_t (dir (getattr open search)))
                (allow sysadm_t jabberd_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t jabberd_log_t (dir (getattr open search)))
                (allow sysadm_t jabberd_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_spool_t (dir (getattr open search)))
                (allow sysadm_t jabberd_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t jabberd_spool_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t jabberd_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t jabberd_spool_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t jabberd_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t jabberd_spool_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t jabberd_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t jabberd_spool_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t jabberd_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t jabberd_spool_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t jabberd_spool_t (dir (getattr open search)))
                (allow sysadm_t jabberd_spool_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t jabberd_spool_t (dir (getattr open search)))
                (allow sysadm_t jabberd_spool_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t jabberd_spool_t (dir (getattr open search)))
                (allow sysadm_t jabberd_spool_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t jabberd_spool_t (dir (getattr open search)))
                (allow sysadm_t jabberd_spool_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t jabberd_spool_t (dir (getattr open search)))
                (allow sysadm_t jabberd_spool_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t jabberd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t jabberd_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t jabberd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t jabberd_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t jabberd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t jabberd_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t jabberd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t jabberd_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t jabberd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t jabberd_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t jabberd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t jabberd_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t jabberd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t jabberd_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t jabberd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t jabberd_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t jabberd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t jabberd_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t jabberd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t jabberd_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t jabberd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t jabberd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t jabberd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t jabberd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t jabberd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t jabberd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t jabberd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t jabberd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t jabberd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t jabberd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t jabberd_runtime_t (dir (getattr open search)))
                (allow sysadm_t jabberd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t jabberd_runtime_t (dir (getattr open search)))
                (allow sysadm_t jabberd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t jabberd_runtime_t (dir (getattr open search)))
                (allow sysadm_t jabberd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t jabberd_runtime_t (dir (getattr open search)))
                (allow sysadm_t jabberd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t jabberd_runtime_t (dir (getattr open search)))
                (allow sysadm_t jabberd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_263
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_264
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require kdump_t)
                (typeattributeset cil_gen_require kdump_etc_t)
                (typeattributeset cil_gen_require kdumpctl_tmp_t)
                (typeattributeset cil_gen_require kdump_initrc_exec_t)
                (typeattributeset cil_gen_require kdumpctl_t)
                (allow sysadm_t kdump_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t kdumpctl_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t kdump_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t kdumpctl_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t kdump_t (file (ioctl read getattr lock open)))
                (allow sysadm_t kdumpctl_t (file (ioctl read getattr lock open)))
                (allow sysadm_t kdump_t (lnk_file (read getattr)))
                (allow sysadm_t kdumpctl_t (lnk_file (read getattr)))
                (allow sysadm_t kdump_t (process (getattr)))
                (allow sysadm_t kdumpctl_t (process (getattr)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t kdump_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kdump_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t kdump_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kdump_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t kdump_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kdump_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t kdump_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kdump_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t kdump_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kdump_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t kdump_etc_t (dir (getattr open search)))
                (allow sysadm_t kdump_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t kdump_etc_t (dir (getattr open search)))
                (allow sysadm_t kdump_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t kdump_etc_t (dir (getattr open search)))
                (allow sysadm_t kdump_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t kdump_etc_t (dir (getattr open search)))
                (allow sysadm_t kdump_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t kdump_etc_t (dir (getattr open search)))
                (allow sysadm_t kdump_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (getattr open search)))
                (allow sysadm_t kdumpctl_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kdumpctl_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t kdumpctl_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kdumpctl_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t kdumpctl_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kdumpctl_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t kdumpctl_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kdumpctl_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t kdumpctl_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kdumpctl_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t kdumpctl_tmp_t (dir (getattr open search)))
                (allow sysadm_t kdumpctl_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t kdumpctl_tmp_t (dir (getattr open search)))
                (allow sysadm_t kdumpctl_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t kdumpctl_tmp_t (dir (getattr open search)))
                (allow sysadm_t kdumpctl_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t kdumpctl_tmp_t (dir (getattr open search)))
                (allow sysadm_t kdumpctl_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t kdumpctl_tmp_t (dir (getattr open search)))
                (allow sysadm_t kdumpctl_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_265
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_266
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require krb5kdc_conf_t)
                (typeattributeset cil_gen_require krb5_host_rcache_t)
                (typeattributeset cil_gen_require krb5_conf_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require kadmind_t)
                (typeattributeset cil_gen_require krb5kdc_t)
                (typeattributeset cil_gen_require kerberos_initrc_exec_t)
                (typeattributeset cil_gen_require kadmind_log_t)
                (typeattributeset cil_gen_require kadmind_tmp_t)
                (typeattributeset cil_gen_require kadmind_runtime_t)
                (typeattributeset cil_gen_require krb5_keytab_t)
                (typeattributeset cil_gen_require krb5kdc_principal_t)
                (typeattributeset cil_gen_require krb5kdc_tmp_t)
                (typeattributeset cil_gen_require kpropd_t)
                (typeattributeset cil_gen_require krb5kdc_runtime_t)
                (allow sysadm_t kadmind_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t krb5kdc_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t kpropd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t kadmind_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t krb5kdc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t kpropd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t kadmind_t (file (ioctl read getattr lock open)))
                (allow sysadm_t krb5kdc_t (file (ioctl read getattr lock open)))
                (allow sysadm_t kpropd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t kadmind_t (lnk_file (read getattr)))
                (allow sysadm_t krb5kdc_t (lnk_file (read getattr)))
                (allow sysadm_t kpropd_t (lnk_file (read getattr)))
                (allow sysadm_t kadmind_t (process (getattr)))
                (allow sysadm_t krb5kdc_t (process (getattr)))
                (allow sysadm_t kpropd_t (process (getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t kadmind_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kadmind_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t kadmind_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kadmind_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t kadmind_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kadmind_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t kadmind_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kadmind_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t kadmind_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kadmind_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t kadmind_log_t (dir (getattr open search)))
                (allow sysadm_t kadmind_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t kadmind_log_t (dir (getattr open search)))
                (allow sysadm_t kadmind_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t kadmind_log_t (dir (getattr open search)))
                (allow sysadm_t kadmind_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t kadmind_log_t (dir (getattr open search)))
                (allow sysadm_t kadmind_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t kadmind_log_t (dir (getattr open search)))
                (allow sysadm_t kadmind_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t krb5_host_rcache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kadmind_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t krb5kdc_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t krb5_host_rcache_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t kadmind_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t krb5kdc_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t krb5_host_rcache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kadmind_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t krb5kdc_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t krb5_host_rcache_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t kadmind_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t krb5kdc_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t krb5_host_rcache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kadmind_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t krb5kdc_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t krb5_host_rcache_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t kadmind_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t krb5kdc_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t krb5_host_rcache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kadmind_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t krb5kdc_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t krb5_host_rcache_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t kadmind_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t krb5kdc_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t krb5_host_rcache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kadmind_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t krb5kdc_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t krb5_host_rcache_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t kadmind_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t krb5kdc_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t krb5_host_rcache_t (dir (getattr open search)))
                (allow sysadm_t kadmind_tmp_t (dir (getattr open search)))
                (allow sysadm_t krb5kdc_tmp_t (dir (getattr open search)))
                (allow sysadm_t krb5_host_rcache_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t kadmind_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t krb5kdc_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t krb5_host_rcache_t (dir (getattr open search)))
                (allow sysadm_t kadmind_tmp_t (dir (getattr open search)))
                (allow sysadm_t krb5kdc_tmp_t (dir (getattr open search)))
                (allow sysadm_t krb5_host_rcache_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t kadmind_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t krb5kdc_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t krb5_host_rcache_t (dir (getattr open search)))
                (allow sysadm_t kadmind_tmp_t (dir (getattr open search)))
                (allow sysadm_t krb5kdc_tmp_t (dir (getattr open search)))
                (allow sysadm_t krb5_host_rcache_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t kadmind_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t krb5kdc_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t krb5_host_rcache_t (dir (getattr open search)))
                (allow sysadm_t kadmind_tmp_t (dir (getattr open search)))
                (allow sysadm_t krb5kdc_tmp_t (dir (getattr open search)))
                (allow sysadm_t krb5_host_rcache_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t kadmind_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t krb5kdc_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t krb5_host_rcache_t (dir (getattr open search)))
                (allow sysadm_t kadmind_tmp_t (dir (getattr open search)))
                (allow sysadm_t krb5kdc_tmp_t (dir (getattr open search)))
                (allow sysadm_t krb5_host_rcache_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t kadmind_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t krb5kdc_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t kadmind_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t krb5kdc_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kadmind_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t krb5kdc_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t kadmind_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t krb5kdc_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kadmind_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t krb5kdc_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t kadmind_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t krb5kdc_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kadmind_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t krb5kdc_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t kadmind_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t krb5kdc_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kadmind_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t krb5kdc_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t kadmind_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t krb5kdc_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kadmind_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t krb5kdc_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t kadmind_runtime_t (dir (getattr open search)))
                (allow sysadm_t krb5kdc_runtime_t (dir (getattr open search)))
                (allow sysadm_t kadmind_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t krb5kdc_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t kadmind_runtime_t (dir (getattr open search)))
                (allow sysadm_t krb5kdc_runtime_t (dir (getattr open search)))
                (allow sysadm_t kadmind_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t krb5kdc_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t kadmind_runtime_t (dir (getattr open search)))
                (allow sysadm_t krb5kdc_runtime_t (dir (getattr open search)))
                (allow sysadm_t kadmind_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t krb5kdc_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t kadmind_runtime_t (dir (getattr open search)))
                (allow sysadm_t krb5kdc_runtime_t (dir (getattr open search)))
                (allow sysadm_t kadmind_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t krb5kdc_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t kadmind_runtime_t (dir (getattr open search)))
                (allow sysadm_t krb5kdc_runtime_t (dir (getattr open search)))
                (allow sysadm_t kadmind_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t krb5kdc_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t krb5_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t krb5_conf_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t krb5_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t krb5_conf_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t krb5_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t krb5_conf_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t krb5_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t krb5_conf_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t krb5_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t krb5_conf_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t krb5_conf_t (dir (getattr open search)))
                (allow sysadm_t krb5_conf_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t krb5_conf_t (dir (getattr open search)))
                (allow sysadm_t krb5_conf_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t krb5_conf_t (dir (getattr open search)))
                (allow sysadm_t krb5_conf_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t krb5_conf_t (dir (getattr open search)))
                (allow sysadm_t krb5_conf_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t krb5_conf_t (dir (getattr open search)))
                (allow sysadm_t krb5_conf_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t krb5_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t krb5kdc_principal_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t krb5_keytab_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t krb5kdc_principal_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t krb5_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t krb5kdc_principal_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t krb5_keytab_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t krb5kdc_principal_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t krb5_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t krb5kdc_principal_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t krb5_keytab_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t krb5kdc_principal_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t krb5_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t krb5kdc_principal_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t krb5_keytab_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t krb5kdc_principal_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t krb5_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t krb5kdc_principal_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t krb5_keytab_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t krb5kdc_principal_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t krb5_keytab_t (dir (getattr open search)))
                (allow sysadm_t krb5kdc_principal_t (dir (getattr open search)))
                (allow sysadm_t krb5_keytab_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t krb5kdc_principal_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t krb5_keytab_t (dir (getattr open search)))
                (allow sysadm_t krb5kdc_principal_t (dir (getattr open search)))
                (allow sysadm_t krb5_keytab_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t krb5kdc_principal_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t krb5_keytab_t (dir (getattr open search)))
                (allow sysadm_t krb5kdc_principal_t (dir (getattr open search)))
                (allow sysadm_t krb5_keytab_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t krb5kdc_principal_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t krb5_keytab_t (dir (getattr open search)))
                (allow sysadm_t krb5kdc_principal_t (dir (getattr open search)))
                (allow sysadm_t krb5_keytab_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t krb5kdc_principal_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t krb5_keytab_t (dir (getattr open search)))
                (allow sysadm_t krb5kdc_principal_t (dir (getattr open search)))
                (allow sysadm_t krb5_keytab_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t krb5kdc_principal_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t krb5kdc_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t krb5kdc_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t krb5kdc_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (typetransition sysadm_t etc_t file "kadm5.keytab" krb5_keytab_t)
                (typetransition sysadm_t krb5kdc_conf_t file "principal1" krb5kdc_principal_t)
                (typetransition sysadm_t krb5kdc_conf_t file "principal0" krb5kdc_principal_t)
                (typetransition sysadm_t krb5kdc_conf_t file "principal" krb5kdc_principal_t)
                (typetransition sysadm_t etc_t file "krb5.conf" krb5_conf_t)
                (typetransition sysadm_t tmp_t file "ldap_55" krb5_host_rcache_t)
                (typetransition sysadm_t tmp_t file "ldap_487" krb5_host_rcache_t)
                (typetransition sysadm_t tmp_t file "ldapmap1_0" krb5_host_rcache_t)
                (typetransition sysadm_t tmp_t file "nfs_0" krb5_host_rcache_t)
                (typetransition sysadm_t tmp_t file "imap_0" krb5_host_rcache_t)
                (typetransition sysadm_t tmp_t file "HTTP_48" krb5_host_rcache_t)
                (typetransition sysadm_t tmp_t file "HTTP_23" krb5_host_rcache_t)
                (typetransition sysadm_t tmp_t file "host_0" krb5_host_rcache_t)
                (optional sysadm_optional_267
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_268
                (typeattributeset cil_gen_require kerneloops_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require kerneloops_initrc_exec_t)
                (typeattributeset cil_gen_require kerneloops_tmp_t)
                (allow sysadm_t kerneloops_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t kerneloops_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t kerneloops_t (file (ioctl read getattr lock open)))
                (allow sysadm_t kerneloops_t (lnk_file (read getattr)))
                (allow sysadm_t kerneloops_t (process (getattr)))
                (allow sysadm_t tmp_t (dir (getattr open search)))
                (allow sysadm_t kerneloops_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kerneloops_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t kerneloops_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kerneloops_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t kerneloops_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kerneloops_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t kerneloops_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kerneloops_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t kerneloops_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kerneloops_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t kerneloops_tmp_t (dir (getattr open search)))
                (allow sysadm_t kerneloops_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t kerneloops_tmp_t (dir (getattr open search)))
                (allow sysadm_t kerneloops_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t kerneloops_tmp_t (dir (getattr open search)))
                (allow sysadm_t kerneloops_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t kerneloops_tmp_t (dir (getattr open search)))
                (allow sysadm_t kerneloops_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t kerneloops_tmp_t (dir (getattr open search)))
                (allow sysadm_t kerneloops_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_269
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_270
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require keystone_t)
                (typeattributeset cil_gen_require keystone_initrc_exec_t)
                (typeattributeset cil_gen_require keystone_log_t)
                (typeattributeset cil_gen_require keystone_var_lib_t)
                (typeattributeset cil_gen_require keystone_tmp_t)
                (allow sysadm_t keystone_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t keystone_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t keystone_t (file (ioctl read getattr lock open)))
                (allow sysadm_t keystone_t (lnk_file (read getattr)))
                (allow sysadm_t keystone_t (process (getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t keystone_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t keystone_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t keystone_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t keystone_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t keystone_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t keystone_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t keystone_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t keystone_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t keystone_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t keystone_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t keystone_log_t (dir (getattr open search)))
                (allow sysadm_t keystone_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t keystone_log_t (dir (getattr open search)))
                (allow sysadm_t keystone_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t keystone_log_t (dir (getattr open search)))
                (allow sysadm_t keystone_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t keystone_log_t (dir (getattr open search)))
                (allow sysadm_t keystone_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t keystone_log_t (dir (getattr open search)))
                (allow sysadm_t keystone_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t keystone_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t keystone_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t keystone_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t keystone_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t keystone_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t keystone_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t keystone_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t keystone_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t keystone_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t keystone_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t keystone_var_lib_t (dir (getattr open search)))
                (allow sysadm_t keystone_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t keystone_var_lib_t (dir (getattr open search)))
                (allow sysadm_t keystone_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t keystone_var_lib_t (dir (getattr open search)))
                (allow sysadm_t keystone_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t keystone_var_lib_t (dir (getattr open search)))
                (allow sysadm_t keystone_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t keystone_var_lib_t (dir (getattr open search)))
                (allow sysadm_t keystone_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (getattr open search)))
                (allow sysadm_t keystone_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t keystone_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t keystone_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t keystone_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t keystone_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t keystone_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t keystone_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t keystone_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t keystone_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t keystone_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t keystone_tmp_t (dir (getattr open search)))
                (allow sysadm_t keystone_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t keystone_tmp_t (dir (getattr open search)))
                (allow sysadm_t keystone_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t keystone_tmp_t (dir (getattr open search)))
                (allow sysadm_t keystone_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t keystone_tmp_t (dir (getattr open search)))
                (allow sysadm_t keystone_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t keystone_tmp_t (dir (getattr open search)))
                (allow sysadm_t keystone_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_271
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_272
                (roleattributeset cil_gen_require knot_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require knotc_t)
                (typeattributeset cil_gen_require knotd_t)
                (typeattributeset cil_gen_require knot_conf_t)
                (typeattributeset cil_gen_require knot_initrc_exec_t)
                (typeattributeset cil_gen_require knot_runtime_t)
                (typeattributeset cil_gen_require knot_tmp_t)
                (typeattributeset cil_gen_require knot_var_lib_t)
                (typeattributeset cil_gen_require knotc_exec_t)
                (roleattributeset cil_gen_require knot_roles)
                (roleattributeset knot_roles (sysadm_r ))
                (allow sysadm_t knotc_t (process (sigchld sigkill sigstop signull signal)))
                (allow sysadm_t knotd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t knotc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t knotc_t (file (ioctl read getattr lock open)))
                (allow sysadm_t knotc_t (lnk_file (read getattr)))
                (allow sysadm_t knotc_t (process (getattr)))
                (allow sysadm_t knotd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t knotd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t knotd_t (lnk_file (read getattr)))
                (allow sysadm_t knotd_t (process (getattr)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t knot_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t knot_conf_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t knot_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t knot_conf_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t knot_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t knot_conf_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t knot_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t knot_conf_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t knot_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t knot_conf_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t knot_conf_t (dir (getattr open search)))
                (allow sysadm_t knot_conf_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t knot_conf_t (dir (getattr open search)))
                (allow sysadm_t knot_conf_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t knot_conf_t (dir (getattr open search)))
                (allow sysadm_t knot_conf_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t knot_conf_t (dir (getattr open search)))
                (allow sysadm_t knot_conf_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t knot_conf_t (dir (getattr open search)))
                (allow sysadm_t knot_conf_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t knot_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t knot_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t knot_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t knot_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t knot_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t knot_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t knot_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t knot_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t knot_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t knot_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t knot_runtime_t (dir (getattr open search)))
                (allow sysadm_t knot_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t knot_runtime_t (dir (getattr open search)))
                (allow sysadm_t knot_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t knot_runtime_t (dir (getattr open search)))
                (allow sysadm_t knot_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t knot_runtime_t (dir (getattr open search)))
                (allow sysadm_t knot_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t knot_runtime_t (dir (getattr open search)))
                (allow sysadm_t knot_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (getattr open search)))
                (allow sysadm_t knot_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t knot_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t knot_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t knot_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t knot_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t knot_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t knot_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t knot_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t knot_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t knot_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t knot_tmp_t (dir (getattr open search)))
                (allow sysadm_t knot_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t knot_tmp_t (dir (getattr open search)))
                (allow sysadm_t knot_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t knot_tmp_t (dir (getattr open search)))
                (allow sysadm_t knot_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t knot_tmp_t (dir (getattr open search)))
                (allow sysadm_t knot_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t knot_tmp_t (dir (getattr open search)))
                (allow sysadm_t knot_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t knot_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t knot_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t knot_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t knot_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t knot_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t knot_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t knot_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t knot_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t knot_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t knot_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t knot_var_lib_t (dir (getattr open search)))
                (allow sysadm_t knot_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t knot_var_lib_t (dir (getattr open search)))
                (allow sysadm_t knot_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t knot_var_lib_t (dir (getattr open search)))
                (allow sysadm_t knot_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t knot_var_lib_t (dir (getattr open search)))
                (allow sysadm_t knot_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t knot_var_lib_t (dir (getattr open search)))
                (allow sysadm_t knot_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t knotc_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t knotc_t (process (transition)))
                (dontaudit sysadm_t knotc_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t knotc_exec_t process knotc_t)
                (allow knotc_t sysadm_t (fd (use)))
                (allow knotc_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow knotc_t sysadm_t (process (sigchld)))
                (optional sysadm_optional_273
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_274
                (roleattributeset cil_gen_require kismet_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require kismet_t)
                (typeattributeset cil_gen_require kismet_var_lib_t)
                (typeattributeset cil_gen_require kismet_runtime_t)
                (typeattributeset cil_gen_require kismet_log_t)
                (typeattributeset cil_gen_require kismet_tmp_t)
                (typeattributeset cil_gen_require kismet_initrc_exec_t)
                (typeattributeset cil_gen_require kismet_exec_t)
                (roleattributeset cil_gen_require kismet_roles)
                (roleattributeset kismet_roles (sysadm_r ))
                (allow sysadm_t kismet_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t kismet_t (file (ioctl read getattr lock open)))
                (allow sysadm_t kismet_t (lnk_file (read getattr)))
                (allow sysadm_t kismet_t (process (getattr)))
                (allow sysadm_t kismet_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t kismet_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kismet_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t kismet_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kismet_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t kismet_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kismet_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t kismet_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kismet_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t kismet_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kismet_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t kismet_var_lib_t (dir (getattr open search)))
                (allow sysadm_t kismet_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t kismet_var_lib_t (dir (getattr open search)))
                (allow sysadm_t kismet_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t kismet_var_lib_t (dir (getattr open search)))
                (allow sysadm_t kismet_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t kismet_var_lib_t (dir (getattr open search)))
                (allow sysadm_t kismet_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t kismet_var_lib_t (dir (getattr open search)))
                (allow sysadm_t kismet_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t kismet_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kismet_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t kismet_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kismet_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t kismet_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kismet_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t kismet_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kismet_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t kismet_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kismet_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t kismet_runtime_t (dir (getattr open search)))
                (allow sysadm_t kismet_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t kismet_runtime_t (dir (getattr open search)))
                (allow sysadm_t kismet_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t kismet_runtime_t (dir (getattr open search)))
                (allow sysadm_t kismet_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t kismet_runtime_t (dir (getattr open search)))
                (allow sysadm_t kismet_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t kismet_runtime_t (dir (getattr open search)))
                (allow sysadm_t kismet_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t kismet_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kismet_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t kismet_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kismet_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t kismet_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kismet_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t kismet_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kismet_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t kismet_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kismet_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t kismet_log_t (dir (getattr open search)))
                (allow sysadm_t kismet_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t kismet_log_t (dir (getattr open search)))
                (allow sysadm_t kismet_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t kismet_log_t (dir (getattr open search)))
                (allow sysadm_t kismet_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t kismet_log_t (dir (getattr open search)))
                (allow sysadm_t kismet_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t kismet_log_t (dir (getattr open search)))
                (allow sysadm_t kismet_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (getattr open search)))
                (allow sysadm_t kismet_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kismet_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t kismet_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kismet_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t kismet_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kismet_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t kismet_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kismet_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t kismet_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kismet_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t kismet_tmp_t (dir (getattr open search)))
                (allow sysadm_t kismet_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t kismet_tmp_t (dir (getattr open search)))
                (allow sysadm_t kismet_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t kismet_tmp_t (dir (getattr open search)))
                (allow sysadm_t kismet_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t kismet_tmp_t (dir (getattr open search)))
                (allow sysadm_t kismet_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t kismet_tmp_t (dir (getattr open search)))
                (allow sysadm_t kismet_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t kismet_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t kismet_t (process (transition)))
                (dontaudit sysadm_t kismet_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t kismet_exec_t process kismet_t)
                (allow kismet_t sysadm_t (fd (use)))
                (allow kismet_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow kismet_t sysadm_t (process (sigchld)))
                (optional sysadm_optional_275
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_276
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require ksmtuned_t)
                (typeattributeset cil_gen_require ksmtuned_runtime_t)
                (typeattributeset cil_gen_require ksmtuned_initrc_exec_t)
                (typeattributeset cil_gen_require ksmtuned_log_t)
                (allow sysadm_t ksmtuned_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t ksmtuned_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t ksmtuned_t (file (ioctl read getattr lock open)))
                (allow sysadm_t ksmtuned_t (lnk_file (read getattr)))
                (allow sysadm_t ksmtuned_t (process (getattr)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t ksmtuned_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ksmtuned_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t ksmtuned_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ksmtuned_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ksmtuned_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ksmtuned_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t ksmtuned_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ksmtuned_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ksmtuned_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ksmtuned_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ksmtuned_runtime_t (dir (getattr open search)))
                (allow sysadm_t ksmtuned_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t ksmtuned_runtime_t (dir (getattr open search)))
                (allow sysadm_t ksmtuned_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t ksmtuned_runtime_t (dir (getattr open search)))
                (allow sysadm_t ksmtuned_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ksmtuned_runtime_t (dir (getattr open search)))
                (allow sysadm_t ksmtuned_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ksmtuned_runtime_t (dir (getattr open search)))
                (allow sysadm_t ksmtuned_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t ksmtuned_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ksmtuned_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t ksmtuned_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ksmtuned_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ksmtuned_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ksmtuned_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t ksmtuned_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ksmtuned_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ksmtuned_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ksmtuned_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ksmtuned_log_t (dir (getattr open search)))
                (allow sysadm_t ksmtuned_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t ksmtuned_log_t (dir (getattr open search)))
                (allow sysadm_t ksmtuned_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t ksmtuned_log_t (dir (getattr open search)))
                (allow sysadm_t ksmtuned_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ksmtuned_log_t (dir (getattr open search)))
                (allow sysadm_t ksmtuned_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ksmtuned_log_t (dir (getattr open search)))
                (allow sysadm_t ksmtuned_log_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_277
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_278
                (roleattributeset cil_gen_require container_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require user_home_dir_t)
                (typeattributeset cil_gen_require home_root_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require tmpfs_t)
                (typeattributeset cil_gen_require container_domain)
                (typeattributeset cil_gen_require container_engine_domain)
                (typeattributeset cil_gen_require container_file_t)
                (typeattributeset cil_gen_require container_ro_file_t)
                (typeattributeset cil_gen_require container_var_lib_t)
                (typeattributeset cil_gen_require container_runtime_t)
                (typeattributeset cil_gen_require container_config_t)
                (typeattributeset cil_gen_require container_engine_cache_t)
                (typeattributeset cil_gen_require container_engine_tmp_t)
                (typeattributeset cil_gen_require container_engine_tmpfs_t)
                (typeattributeset cil_gen_require container_engine_t)
                (typeattributeset cil_gen_require container_engine_exec_t)
                (typeattributeset cil_gen_require kubeadm_t)
                (typeattributeset cil_gen_require kubelet_t)
                (typeattributeset cil_gen_require kubectl_t)
                (typeattributeset cil_gen_require kubectl_exec_t)
                (typeattributeset cil_gen_require kubernetes_config_t)
                (typeattributeset cil_gen_require kubernetes_tmp_t)
                (typeattributeset cil_gen_require kubernetes_tmpfs_t)
                (typeattributeset cil_gen_require kubernetes_runtime_t)
                (typeattributeset cil_gen_require kubernetes_home_t)
                (typeattributeset cil_gen_require kubeadm_exec_t)
                (typeattributeset cil_gen_require kubelet_exec_t)
                (roleattributeset cil_gen_require sysadm_r)
                (roletype sysadm_r kubeadm_t)
                (roletype sysadm_r kubelet_t)
                (roletype sysadm_r kubectl_t)
                (roleattributeset cil_gen_require container_roles)
                (roleattributeset container_roles (sysadm_r ))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t container_engine_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t container_engine_t (process (transition)))
                (dontaudit sysadm_t container_engine_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t container_engine_exec_t process container_engine_t)
                (allow container_engine_t sysadm_t (fd (use)))
                (allow container_engine_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow container_engine_t sysadm_t (process (sigchld)))
                (allow sysadm_t container_domain (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t container_domain (dir (ioctl read getattr lock open search)))
                (allow sysadm_t container_domain (file (ioctl read getattr lock open)))
                (allow sysadm_t container_domain (lnk_file (read getattr)))
                (allow sysadm_t container_domain (process (getattr)))
                (allow sysadm_t container_engine_domain (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t container_engine_domain (dir (ioctl read getattr lock open search)))
                (allow sysadm_t container_engine_domain (file (ioctl read getattr lock open)))
                (allow sysadm_t container_engine_domain (lnk_file (read getattr)))
                (allow sysadm_t container_engine_domain (process (getattr)))
                (allow sysadm_t self (cap_userns (kill sys_ptrace sys_admin)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t container_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t container_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t container_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t container_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t container_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t container_var_lib_t (dir (getattr open search)))
                (allow sysadm_t container_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t container_var_lib_t (dir (getattr open search)))
                (allow sysadm_t container_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t container_var_lib_t (dir (getattr open search)))
                (allow sysadm_t container_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t container_var_lib_t (dir (getattr open search)))
                (allow sysadm_t container_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t container_var_lib_t (dir (getattr open search)))
                (allow sysadm_t container_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t container_file_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_file_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t container_file_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_file_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t container_file_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_file_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t container_file_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_file_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t container_file_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_file_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t container_file_t (dir (getattr open search)))
                (allow sysadm_t container_file_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t container_file_t (dir (getattr open search)))
                (allow sysadm_t container_file_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t container_file_t (dir (getattr open search)))
                (allow sysadm_t container_file_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t container_file_t (dir (getattr open search)))
                (allow sysadm_t container_file_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t container_file_t (dir (getattr open search)))
                (allow sysadm_t container_file_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t container_ro_file_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_ro_file_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t container_ro_file_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_ro_file_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t container_ro_file_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_ro_file_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t container_ro_file_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_ro_file_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t container_ro_file_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_ro_file_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t container_ro_file_t (dir (getattr open search)))
                (allow sysadm_t container_ro_file_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t container_ro_file_t (dir (getattr open search)))
                (allow sysadm_t container_ro_file_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t container_ro_file_t (dir (getattr open search)))
                (allow sysadm_t container_ro_file_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t container_ro_file_t (dir (getattr open search)))
                (allow sysadm_t container_ro_file_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t container_ro_file_t (dir (getattr open search)))
                (allow sysadm_t container_ro_file_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t container_var_lib_t (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t container_file_t (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t container_ro_file_t (blk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t container_engine_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_engine_cache_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t container_engine_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_engine_cache_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t container_engine_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_engine_cache_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t container_engine_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_engine_cache_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t container_engine_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_engine_cache_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t container_engine_cache_t (dir (getattr open search)))
                (allow sysadm_t container_engine_cache_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t container_engine_cache_t (dir (getattr open search)))
                (allow sysadm_t container_engine_cache_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t container_engine_cache_t (dir (getattr open search)))
                (allow sysadm_t container_engine_cache_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t container_engine_cache_t (dir (getattr open search)))
                (allow sysadm_t container_engine_cache_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t container_engine_cache_t (dir (getattr open search)))
                (allow sysadm_t container_engine_cache_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t container_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t container_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t container_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t container_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t container_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t container_runtime_t (dir (getattr open search)))
                (allow sysadm_t container_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t container_runtime_t (dir (getattr open search)))
                (allow sysadm_t container_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t container_runtime_t (dir (getattr open search)))
                (allow sysadm_t container_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t container_runtime_t (dir (getattr open search)))
                (allow sysadm_t container_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t container_runtime_t (dir (getattr open search)))
                (allow sysadm_t container_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t container_config_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_config_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t container_config_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_config_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t container_config_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_config_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t container_config_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_config_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t container_config_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_config_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t container_config_t (dir (getattr open search)))
                (allow sysadm_t container_config_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t container_config_t (dir (getattr open search)))
                (allow sysadm_t container_config_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t container_config_t (dir (getattr open search)))
                (allow sysadm_t container_config_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t container_config_t (dir (getattr open search)))
                (allow sysadm_t container_config_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t container_config_t (dir (getattr open search)))
                (allow sysadm_t container_config_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (getattr open search)))
                (allow sysadm_t container_engine_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_engine_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t container_engine_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_engine_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t container_engine_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_engine_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t container_engine_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_engine_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t container_engine_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_engine_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t container_engine_tmp_t (dir (getattr open search)))
                (allow sysadm_t container_engine_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t container_engine_tmp_t (dir (getattr open search)))
                (allow sysadm_t container_engine_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t container_engine_tmp_t (dir (getattr open search)))
                (allow sysadm_t container_engine_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t container_engine_tmp_t (dir (getattr open search)))
                (allow sysadm_t container_engine_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t container_engine_tmp_t (dir (getattr open search)))
                (allow sysadm_t container_engine_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmpfs_t (dir (getattr open search)))
                (allow sysadm_t container_engine_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_engine_tmpfs_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t container_engine_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_engine_tmpfs_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t container_engine_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_engine_tmpfs_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t container_engine_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_engine_tmpfs_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t container_engine_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t container_engine_tmpfs_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t container_engine_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t container_engine_tmpfs_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t container_engine_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t container_engine_tmpfs_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t container_engine_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t container_engine_tmpfs_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t container_engine_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t container_engine_tmpfs_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t container_engine_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t container_engine_tmpfs_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t kubeadm_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t kubeadm_t (process (transition)))
                (dontaudit sysadm_t kubeadm_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t kubeadm_exec_t process kubeadm_t)
                (allow kubeadm_t sysadm_t (fd (use)))
                (allow kubeadm_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow kubeadm_t sysadm_t (process (sigchld)))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t kubelet_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t kubelet_t (process (transition)))
                (dontaudit sysadm_t kubelet_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t kubelet_exec_t process kubelet_t)
                (allow kubelet_t sysadm_t (fd (use)))
                (allow kubelet_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow kubelet_t sysadm_t (process (sigchld)))
                (allow sysadm_t kubectl_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t kubectl_t (process (transition)))
                (dontaudit sysadm_t kubectl_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t kubectl_exec_t process kubectl_t)
                (allow kubectl_t sysadm_t (fd (use)))
                (allow kubectl_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow kubectl_t sysadm_t (process (sigchld)))
                (allow kubectl_t bin_t (dir (getattr open search)))
                (allow kubectl_t bin_t (lnk_file (read getattr)))
                (allow kubectl_t usr_t (dir (getattr open search)))
                (allow kubectl_t bin_t (file (ioctl read getattr map execute open)))
                (allow kubectl_t sysadm_t (process (transition)))
                (dontaudit kubectl_t sysadm_t (process (noatsecure siginh rlimitinh)))
                (typetransition kubectl_t bin_t process sysadm_t)
                (allow sysadm_t kubectl_t (fd (use)))
                (allow sysadm_t kubectl_t (fifo_file (ioctl read write getattr lock append)))
                (allow sysadm_t kubeadm_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t kubeadm_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t kubeadm_t (file (ioctl read getattr lock open)))
                (allow sysadm_t kubeadm_t (lnk_file (read getattr)))
                (allow sysadm_t kubeadm_t (process (getattr)))
                (allow sysadm_t kubelet_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t kubelet_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t kubelet_t (file (ioctl read getattr lock open)))
                (allow sysadm_t kubelet_t (lnk_file (read getattr)))
                (allow sysadm_t kubelet_t (process (getattr)))
                (allow sysadm_t kubectl_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t kubectl_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t kubectl_t (file (ioctl read getattr lock open)))
                (allow sysadm_t kubectl_t (lnk_file (read getattr)))
                (allow sysadm_t kubectl_t (process (getattr)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t kubernetes_config_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kubernetes_config_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t kubernetes_config_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kubernetes_config_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t kubernetes_config_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kubernetes_config_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t kubernetes_config_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kubernetes_config_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t kubernetes_config_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kubernetes_config_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t kubernetes_config_t (dir (getattr open search)))
                (allow sysadm_t kubernetes_config_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t kubernetes_config_t (dir (getattr open search)))
                (allow sysadm_t kubernetes_config_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t kubernetes_config_t (dir (getattr open search)))
                (allow sysadm_t kubernetes_config_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t kubernetes_config_t (dir (getattr open search)))
                (allow sysadm_t kubernetes_config_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t kubernetes_config_t (dir (getattr open search)))
                (allow sysadm_t kubernetes_config_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t kubernetes_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kubernetes_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t kubernetes_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kubernetes_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t kubernetes_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kubernetes_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t kubernetes_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kubernetes_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t kubernetes_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kubernetes_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t kubernetes_runtime_t (dir (getattr open search)))
                (allow sysadm_t kubernetes_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t kubernetes_runtime_t (dir (getattr open search)))
                (allow sysadm_t kubernetes_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t kubernetes_runtime_t (dir (getattr open search)))
                (allow sysadm_t kubernetes_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t kubernetes_runtime_t (dir (getattr open search)))
                (allow sysadm_t kubernetes_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t kubernetes_runtime_t (dir (getattr open search)))
                (allow sysadm_t kubernetes_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (getattr open search)))
                (allow sysadm_t kubernetes_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kubernetes_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t kubernetes_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kubernetes_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t kubernetes_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kubernetes_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t kubernetes_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kubernetes_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t kubernetes_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kubernetes_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t kubernetes_tmp_t (dir (getattr open search)))
                (allow sysadm_t kubernetes_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t kubernetes_tmp_t (dir (getattr open search)))
                (allow sysadm_t kubernetes_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t kubernetes_tmp_t (dir (getattr open search)))
                (allow sysadm_t kubernetes_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t kubernetes_tmp_t (dir (getattr open search)))
                (allow sysadm_t kubernetes_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t kubernetes_tmp_t (dir (getattr open search)))
                (allow sysadm_t kubernetes_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmpfs_t (dir (getattr open search)))
                (allow sysadm_t kubernetes_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kubernetes_tmpfs_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t kubernetes_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kubernetes_tmpfs_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t kubernetes_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kubernetes_tmpfs_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t kubernetes_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kubernetes_tmpfs_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t kubernetes_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kubernetes_tmpfs_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t kubernetes_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t kubernetes_tmpfs_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t kubernetes_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t kubernetes_tmpfs_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t kubernetes_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t kubernetes_tmpfs_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t kubernetes_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t kubernetes_tmpfs_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t kubernetes_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t kubernetes_tmpfs_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t kubernetes_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kubernetes_home_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t kubernetes_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kubernetes_home_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t kubernetes_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kubernetes_home_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t kubernetes_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kubernetes_home_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t kubernetes_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t kubernetes_home_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t kubernetes_home_t (dir (getattr open search)))
                (allow sysadm_t kubernetes_home_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t kubernetes_home_t (dir (getattr open search)))
                (allow sysadm_t kubernetes_home_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t kubernetes_home_t (dir (getattr open search)))
                (allow sysadm_t kubernetes_home_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t kubernetes_home_t (dir (getattr open search)))
                (allow sysadm_t kubernetes_home_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t kubernetes_home_t (dir (getattr open search)))
                (allow sysadm_t kubernetes_home_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (typetransition sysadm_t user_home_dir_t dir ".kube" kubernetes_home_t)
                (optional sysadm_optional_279
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require dockerc_t)
                    (typeattributeset cil_gen_require dockerc_exec_t)
                    (roleattributeset cil_gen_require sysadm_r)
                    (roletype sysadm_r dockerc_t)
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t dockerc_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t dockerc_t (process (transition)))
                    (dontaudit sysadm_t dockerc_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t dockerc_exec_t process dockerc_t)
                    (allow dockerc_t sysadm_t (fd (use)))
                    (allow dockerc_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow dockerc_t sysadm_t (process (sigchld)))
                    (optional sysadm_optional_280
                        (typeattributeset cil_gen_require bin_t)
                        (typeattributeset cil_gen_require usr_t)
                        (typeattributeset cil_gen_require rootlesskit_t)
                        (typeattributeset cil_gen_require rootlesskit_exec_t)
                        (roleattributeset cil_gen_require sysadm_r)
                        (roletype sysadm_r rootlesskit_t)
                        (allow sysadm_t bin_t (dir (getattr open search)))
                        (allow sysadm_t bin_t (lnk_file (read getattr)))
                        (allow sysadm_t usr_t (dir (getattr open search)))
                        (allow sysadm_t rootlesskit_exec_t (file (ioctl read getattr map execute open)))
                        (allow sysadm_t rootlesskit_t (process (transition)))
                        (dontaudit sysadm_t rootlesskit_t (process (noatsecure siginh rlimitinh)))
                        (typetransition sysadm_t rootlesskit_exec_t process rootlesskit_t)
                        (allow rootlesskit_t sysadm_t (fd (use)))
                        (allow rootlesskit_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                        (allow rootlesskit_t sysadm_t (process (sigchld)))
                    )
                )
                (optional sysadm_optional_281
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require podman_t)
                    (typeattributeset cil_gen_require podman_exec_t)
                    (typeattributeset cil_gen_require podman_conmon_t)
                    (typeattributeset cil_gen_require conmon_exec_t)
                    (roleattributeset cil_gen_require sysadm_r)
                    (roletype sysadm_r podman_t)
                    (roletype sysadm_r podman_conmon_t)
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t podman_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t podman_t (process (transition)))
                    (dontaudit sysadm_t podman_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t podman_exec_t process podman_t)
                    (allow podman_t sysadm_t (fd (use)))
                    (allow podman_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow podman_t sysadm_t (process (sigchld)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t conmon_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t podman_conmon_t (process (transition)))
                    (dontaudit sysadm_t podman_conmon_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t conmon_exec_t process podman_conmon_t)
                    (allow podman_conmon_t sysadm_t (fd (use)))
                    (allow podman_conmon_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow podman_conmon_t sysadm_t (process (sigchld)))
                )
                (optional sysadm_optional_282
                    (typeattributeset cil_gen_require var_run_t)
                    (typeattributeset cil_gen_require var_t)
                    (typeattributeset cil_gen_require container_runtime_t)
                    (typeattributeset cil_gen_require crio_t)
                    (typeattributeset cil_gen_require crio_conmon_t)
                    (typeattributeset cil_gen_require container_engine_system_domain)
                    (allow sysadm_t crio_t (process (sigchld sigkill sigstop signull signal ptrace)))
                    (allow sysadm_t crio_t (dir (ioctl read getattr lock open search)))
                    (allow sysadm_t crio_t (file (ioctl read getattr lock open)))
                    (allow sysadm_t crio_t (lnk_file (read getattr)))
                    (allow sysadm_t crio_t (process (getattr)))
                    (allow sysadm_t crio_conmon_t (process (sigchld sigkill sigstop signull signal ptrace)))
                    (allow sysadm_t crio_conmon_t (dir (ioctl read getattr lock open search)))
                    (allow sysadm_t crio_conmon_t (file (ioctl read getattr lock open)))
                    (allow sysadm_t crio_conmon_t (lnk_file (read getattr)))
                    (allow sysadm_t crio_conmon_t (process (getattr)))
                    (allow sysadm_t var_run_t (lnk_file (read getattr)))
                    (allow sysadm_t var_t (dir (getattr open search)))
                    (allow sysadm_t var_run_t (dir (getattr open search)))
                    (allow sysadm_t container_runtime_t (dir (getattr open search)))
                    (allow sysadm_t container_runtime_t (sock_file (write getattr append open)))
                    (allow sysadm_t container_engine_system_domain (unix_stream_socket (connectto)))
                    (allow sysadm_t container_runtime_t (sock_file (read getattr open)))
                )
            )
            (optional sysadm_optional_283
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require l2tpd_t)
                (typeattributeset cil_gen_require l2tpd_initrc_exec_t)
                (typeattributeset cil_gen_require l2tpd_runtime_t)
                (typeattributeset cil_gen_require l2tp_conf_t)
                (typeattributeset cil_gen_require l2tpd_tmp_t)
                (allow sysadm_t l2tpd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t l2tpd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t l2tpd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t l2tpd_t (lnk_file (read getattr)))
                (allow sysadm_t l2tpd_t (process (getattr)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t l2tp_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t l2tp_conf_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t l2tp_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t l2tp_conf_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t l2tp_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t l2tp_conf_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t l2tp_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t l2tp_conf_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t l2tp_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t l2tp_conf_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t l2tp_conf_t (dir (getattr open search)))
                (allow sysadm_t l2tp_conf_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t l2tp_conf_t (dir (getattr open search)))
                (allow sysadm_t l2tp_conf_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t l2tp_conf_t (dir (getattr open search)))
                (allow sysadm_t l2tp_conf_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t l2tp_conf_t (dir (getattr open search)))
                (allow sysadm_t l2tp_conf_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t l2tp_conf_t (dir (getattr open search)))
                (allow sysadm_t l2tp_conf_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t l2tpd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t l2tpd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t l2tpd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t l2tpd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t l2tpd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t l2tpd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t l2tpd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t l2tpd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t l2tpd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t l2tpd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t l2tpd_runtime_t (dir (getattr open search)))
                (allow sysadm_t l2tpd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t l2tpd_runtime_t (dir (getattr open search)))
                (allow sysadm_t l2tpd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t l2tpd_runtime_t (dir (getattr open search)))
                (allow sysadm_t l2tpd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t l2tpd_runtime_t (dir (getattr open search)))
                (allow sysadm_t l2tpd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t l2tpd_runtime_t (dir (getattr open search)))
                (allow sysadm_t l2tpd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (getattr open search)))
                (allow sysadm_t l2tpd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t l2tpd_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t l2tpd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t l2tpd_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t l2tpd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t l2tpd_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t l2tpd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t l2tpd_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t l2tpd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t l2tpd_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t l2tpd_tmp_t (dir (getattr open search)))
                (allow sysadm_t l2tpd_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t l2tpd_tmp_t (dir (getattr open search)))
                (allow sysadm_t l2tpd_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t l2tpd_tmp_t (dir (getattr open search)))
                (allow sysadm_t l2tpd_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t l2tpd_tmp_t (dir (getattr open search)))
                (allow sysadm_t l2tpd_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t l2tpd_tmp_t (dir (getattr open search)))
                (allow sysadm_t l2tpd_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_284
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_285
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require var_lock_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require slapd_t)
                (typeattributeset cil_gen_require slapd_tmp_t)
                (typeattributeset cil_gen_require slapd_replog_t)
                (typeattributeset cil_gen_require slapd_lock_t)
                (typeattributeset cil_gen_require slapd_etc_t)
                (typeattributeset cil_gen_require slapd_runtime_t)
                (typeattributeset cil_gen_require slapd_initrc_exec_t)
                (typeattributeset cil_gen_require slapd_log_t)
                (typeattributeset cil_gen_require slapd_cert_t)
                (typeattributeset cil_gen_require slapd_db_t)
                (typeattributeset cil_gen_require slapd_keytab_t)
                (allow sysadm_t slapd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t slapd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t slapd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t slapd_t (lnk_file (read getattr)))
                (allow sysadm_t slapd_t (process (getattr)))
                (allow sysadm_t etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t slapd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t slapd_cert_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t slapd_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t slapd_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t slapd_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t slapd_cert_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t slapd_db_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t slapd_keytab_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t slapd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t slapd_cert_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t slapd_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t slapd_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t slapd_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t slapd_cert_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t slapd_db_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t slapd_keytab_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t slapd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t slapd_cert_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t slapd_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t slapd_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t slapd_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t slapd_cert_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t slapd_db_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t slapd_keytab_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t slapd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t slapd_cert_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t slapd_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t slapd_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t slapd_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t slapd_cert_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t slapd_db_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t slapd_keytab_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t slapd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t slapd_cert_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t slapd_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t slapd_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t slapd_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t slapd_cert_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t slapd_db_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t slapd_keytab_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t slapd_etc_t (dir (getattr open search)))
                (allow sysadm_t slapd_cert_t (dir (getattr open search)))
                (allow sysadm_t slapd_db_t (dir (getattr open search)))
                (allow sysadm_t slapd_keytab_t (dir (getattr open search)))
                (allow sysadm_t slapd_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t slapd_cert_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t slapd_db_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t slapd_keytab_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t slapd_etc_t (dir (getattr open search)))
                (allow sysadm_t slapd_cert_t (dir (getattr open search)))
                (allow sysadm_t slapd_db_t (dir (getattr open search)))
                (allow sysadm_t slapd_keytab_t (dir (getattr open search)))
                (allow sysadm_t slapd_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t slapd_cert_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t slapd_db_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t slapd_keytab_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t slapd_etc_t (dir (getattr open search)))
                (allow sysadm_t slapd_cert_t (dir (getattr open search)))
                (allow sysadm_t slapd_db_t (dir (getattr open search)))
                (allow sysadm_t slapd_keytab_t (dir (getattr open search)))
                (allow sysadm_t slapd_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t slapd_cert_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t slapd_db_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t slapd_keytab_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t slapd_etc_t (dir (getattr open search)))
                (allow sysadm_t slapd_cert_t (dir (getattr open search)))
                (allow sysadm_t slapd_db_t (dir (getattr open search)))
                (allow sysadm_t slapd_keytab_t (dir (getattr open search)))
                (allow sysadm_t slapd_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t slapd_cert_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t slapd_db_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t slapd_keytab_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t slapd_etc_t (dir (getattr open search)))
                (allow sysadm_t slapd_cert_t (dir (getattr open search)))
                (allow sysadm_t slapd_db_t (dir (getattr open search)))
                (allow sysadm_t slapd_keytab_t (dir (getattr open search)))
                (allow sysadm_t slapd_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t slapd_cert_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t slapd_db_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t slapd_keytab_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_lock_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lock_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t slapd_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t slapd_lock_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t slapd_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t slapd_lock_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t slapd_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t slapd_lock_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t slapd_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t slapd_lock_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t slapd_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t slapd_lock_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t slapd_lock_t (dir (getattr open search)))
                (allow sysadm_t slapd_lock_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t slapd_lock_t (dir (getattr open search)))
                (allow sysadm_t slapd_lock_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t slapd_lock_t (dir (getattr open search)))
                (allow sysadm_t slapd_lock_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t slapd_lock_t (dir (getattr open search)))
                (allow sysadm_t slapd_lock_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t slapd_lock_t (dir (getattr open search)))
                (allow sysadm_t slapd_lock_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t slapd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t slapd_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t slapd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t slapd_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t slapd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t slapd_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t slapd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t slapd_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t slapd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t slapd_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t slapd_log_t (dir (getattr open search)))
                (allow sysadm_t slapd_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t slapd_log_t (dir (getattr open search)))
                (allow sysadm_t slapd_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t slapd_log_t (dir (getattr open search)))
                (allow sysadm_t slapd_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t slapd_log_t (dir (getattr open search)))
                (allow sysadm_t slapd_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t slapd_log_t (dir (getattr open search)))
                (allow sysadm_t slapd_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t slapd_replog_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t slapd_replog_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t slapd_replog_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t slapd_replog_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t slapd_replog_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t slapd_replog_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t slapd_replog_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t slapd_replog_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t slapd_replog_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t slapd_replog_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t slapd_replog_t (dir (getattr open search)))
                (allow sysadm_t slapd_replog_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t slapd_replog_t (dir (getattr open search)))
                (allow sysadm_t slapd_replog_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t slapd_replog_t (dir (getattr open search)))
                (allow sysadm_t slapd_replog_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t slapd_replog_t (dir (getattr open search)))
                (allow sysadm_t slapd_replog_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t slapd_replog_t (dir (getattr open search)))
                (allow sysadm_t slapd_replog_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t slapd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t slapd_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t slapd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t slapd_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t slapd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t slapd_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t slapd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t slapd_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t slapd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t slapd_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t slapd_tmp_t (dir (getattr open search)))
                (allow sysadm_t slapd_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t slapd_tmp_t (dir (getattr open search)))
                (allow sysadm_t slapd_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t slapd_tmp_t (dir (getattr open search)))
                (allow sysadm_t slapd_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t slapd_tmp_t (dir (getattr open search)))
                (allow sysadm_t slapd_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t slapd_tmp_t (dir (getattr open search)))
                (allow sysadm_t slapd_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t slapd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t slapd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t slapd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t slapd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t slapd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t slapd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t slapd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t slapd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t slapd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t slapd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t slapd_runtime_t (dir (getattr open search)))
                (allow sysadm_t slapd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t slapd_runtime_t (dir (getattr open search)))
                (allow sysadm_t slapd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t slapd_runtime_t (dir (getattr open search)))
                (allow sysadm_t slapd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t slapd_runtime_t (dir (getattr open search)))
                (allow sysadm_t slapd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t slapd_runtime_t (dir (getattr open search)))
                (allow sysadm_t slapd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_286
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_287
                (roleattributeset cil_gen_require libmtp_roles)
                (typeattributeset cil_gen_require libmtp_t)
                (typeattributeset cil_gen_require libmtp_exec_t)
                (roleattributeset cil_gen_require libmtp_roles)
                (roleattributeset libmtp_roles (sysadm_r ))
                (allow sysadm_application_exec_domain libmtp_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_application_exec_domain libmtp_t (process (transition)))
                (dontaudit sysadm_application_exec_domain libmtp_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_application_exec_domain libmtp_exec_t process libmtp_t)
                (allow libmtp_t sysadm_application_exec_domain (fd (use)))
                (allow libmtp_t sysadm_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                (allow libmtp_t sysadm_application_exec_domain (process (sigchld)))
                (allow sysadm_application_exec_domain libmtp_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_application_exec_domain libmtp_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_application_exec_domain libmtp_t (file (ioctl read getattr lock open)))
                (allow sysadm_application_exec_domain libmtp_t (lnk_file (read getattr)))
                (allow sysadm_application_exec_domain libmtp_t (process (getattr)))
                (optional sysadm_optional_288
                    (typeattributeset cil_gen_require sysadm_systemd_t)
                    (allow sysadm_systemd_t libmtp_t (dir (ioctl read getattr lock open search)))
                    (allow sysadm_systemd_t libmtp_t (file (ioctl read getattr lock open)))
                    (allow sysadm_systemd_t libmtp_t (lnk_file (read getattr)))
                    (allow sysadm_systemd_t libmtp_t (process (getattr)))
                    (allow sysadm_systemd_t libmtp_t (process (sigchld sigkill sigstop signull signal)))
                    (allow libmtp_t sysadm_systemd_t (fd (use)))
                    (allow libmtp_t sysadm_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                    (allow libmtp_t sysadm_systemd_t (dir (ioctl read getattr lock open search)))
                    (allow libmtp_t sysadm_systemd_t (file (ioctl read getattr lock open)))
                    (allow libmtp_t sysadm_systemd_t (lnk_file (read getattr)))
                    (allow libmtp_t sysadm_systemd_t (process (getattr)))
                    (allow libmtp_t sysadm_systemd_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_289
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require ldconfig_t)
                (typeattributeset cil_gen_require ldconfig_exec_t)
                (roleattributeset cil_gen_require sysadm_r)
                (roletype sysadm_r ldconfig_t)
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t ldconfig_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t ldconfig_t (process (transition)))
                (dontaudit sysadm_t ldconfig_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t ldconfig_exec_t process ldconfig_t)
                (allow ldconfig_t sysadm_t (fd (use)))
                (allow ldconfig_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow ldconfig_t sysadm_t (process (sigchld)))
            )
            (optional sysadm_optional_290
                (roleattributeset cil_gen_require lightsquid_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require httpd_sys_content_t)
                (typeattributeset cil_gen_require lightsquid_t)
                (typeattributeset cil_gen_require lightsquid_exec_t)
                (typeattributeset cil_gen_require lightsquid_rw_content_t)
                (roleattributeset cil_gen_require lightsquid_roles)
                (roleattributeset lightsquid_roles (sysadm_r ))
                (allow sysadm_t lightsquid_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t lightsquid_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t lightsquid_t (file (ioctl read getattr lock open)))
                (allow sysadm_t lightsquid_t (lnk_file (read getattr)))
                (allow sysadm_t lightsquid_t (process (getattr)))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t lightsquid_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t lightsquid_t (process (transition)))
                (dontaudit sysadm_t lightsquid_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t lightsquid_exec_t process lightsquid_t)
                (allow lightsquid_t sysadm_t (fd (use)))
                (allow lightsquid_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow lightsquid_t sysadm_t (process (sigchld)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t lightsquid_rw_content_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lightsquid_rw_content_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t lightsquid_rw_content_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lightsquid_rw_content_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lightsquid_rw_content_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lightsquid_rw_content_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t lightsquid_rw_content_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lightsquid_rw_content_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lightsquid_rw_content_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lightsquid_rw_content_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lightsquid_rw_content_t (dir (getattr open search)))
                (allow sysadm_t lightsquid_rw_content_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t lightsquid_rw_content_t (dir (getattr open search)))
                (allow sysadm_t lightsquid_rw_content_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t lightsquid_rw_content_t (dir (getattr open search)))
                (allow sysadm_t lightsquid_rw_content_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t lightsquid_rw_content_t (dir (getattr open search)))
                (allow sysadm_t lightsquid_rw_content_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t lightsquid_rw_content_t (dir (getattr open search)))
                (allow sysadm_t lightsquid_rw_content_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t httpd_sys_content_t (dir (getattr open search)))
                (allow sysadm_t httpd_sys_content_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t var_t (dir (getattr open search)))
            )
            (optional sysadm_optional_291
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require likewise_domains)
                (typeattributeset cil_gen_require likewise_initrc_exec_t)
                (typeattributeset cil_gen_require likewise_etc_t)
                (typeattributeset cil_gen_require likewise_pstore_lock_t)
                (typeattributeset cil_gen_require likewise_krb5_ad_t)
                (typeattributeset cil_gen_require likewise_var_lib_t)
                (typeattributeset cil_gen_require eventlogd_var_socket_t)
                (typeattributeset cil_gen_require lsassd_var_socket_t)
                (typeattributeset cil_gen_require lwiod_var_socket_t)
                (typeattributeset cil_gen_require lwregd_var_socket_t)
                (typeattributeset cil_gen_require lwsmd_var_socket_t)
                (typeattributeset cil_gen_require lwsmd_var_lib_t)
                (typeattributeset cil_gen_require netlogond_var_socket_t)
                (typeattributeset cil_gen_require netlogond_var_lib_t)
                (typeattributeset cil_gen_require lsassd_var_lib_t)
                (typeattributeset cil_gen_require lwregd_var_lib_t)
                (typeattributeset cil_gen_require eventlogd_var_lib_t)
                (typeattributeset cil_gen_require dcerpcd_var_lib_t)
                (typeattributeset cil_gen_require lsassd_tmp_t)
                (typeattributeset cil_gen_require eventlogd_runtime_t)
                (typeattributeset cil_gen_require lsassd_runtime_t)
                (typeattributeset cil_gen_require lwiod_runtime_t)
                (typeattributeset cil_gen_require lwregd_runtime_t)
                (typeattributeset cil_gen_require netlogond_runtime_t)
                (typeattributeset cil_gen_require srvsvcd_runtime_t)
                (allow sysadm_t likewise_domains (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t likewise_domains (dir (ioctl read getattr lock open search)))
                (allow sysadm_t likewise_domains (file (ioctl read getattr lock open)))
                (allow sysadm_t likewise_domains (lnk_file (read getattr)))
                (allow sysadm_t likewise_domains (process (getattr)))
                (allow sysadm_t etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t likewise_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t likewise_pstore_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t likewise_krb5_ad_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t likewise_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t likewise_pstore_lock_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t likewise_krb5_ad_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t likewise_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t likewise_pstore_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t likewise_krb5_ad_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t likewise_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t likewise_pstore_lock_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t likewise_krb5_ad_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t likewise_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t likewise_pstore_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t likewise_krb5_ad_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t likewise_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t likewise_pstore_lock_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t likewise_krb5_ad_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t likewise_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t likewise_pstore_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t likewise_krb5_ad_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t likewise_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t likewise_pstore_lock_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t likewise_krb5_ad_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t likewise_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t likewise_pstore_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t likewise_krb5_ad_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t likewise_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t likewise_pstore_lock_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t likewise_krb5_ad_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t likewise_etc_t (dir (getattr open search)))
                (allow sysadm_t likewise_pstore_lock_t (dir (getattr open search)))
                (allow sysadm_t likewise_krb5_ad_t (dir (getattr open search)))
                (allow sysadm_t likewise_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t likewise_pstore_lock_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t likewise_krb5_ad_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t likewise_etc_t (dir (getattr open search)))
                (allow sysadm_t likewise_pstore_lock_t (dir (getattr open search)))
                (allow sysadm_t likewise_krb5_ad_t (dir (getattr open search)))
                (allow sysadm_t likewise_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t likewise_pstore_lock_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t likewise_krb5_ad_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t likewise_etc_t (dir (getattr open search)))
                (allow sysadm_t likewise_pstore_lock_t (dir (getattr open search)))
                (allow sysadm_t likewise_krb5_ad_t (dir (getattr open search)))
                (allow sysadm_t likewise_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t likewise_pstore_lock_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t likewise_krb5_ad_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t likewise_etc_t (dir (getattr open search)))
                (allow sysadm_t likewise_pstore_lock_t (dir (getattr open search)))
                (allow sysadm_t likewise_krb5_ad_t (dir (getattr open search)))
                (allow sysadm_t likewise_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t likewise_pstore_lock_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t likewise_krb5_ad_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t likewise_etc_t (dir (getattr open search)))
                (allow sysadm_t likewise_pstore_lock_t (dir (getattr open search)))
                (allow sysadm_t likewise_krb5_ad_t (dir (getattr open search)))
                (allow sysadm_t likewise_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t likewise_pstore_lock_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t likewise_krb5_ad_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t likewise_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t eventlogd_var_socket_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lsassd_var_socket_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t likewise_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t eventlogd_var_socket_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t lsassd_var_socket_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t likewise_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t eventlogd_var_socket_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lsassd_var_socket_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t likewise_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t eventlogd_var_socket_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lsassd_var_socket_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t likewise_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t eventlogd_var_socket_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lsassd_var_socket_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t likewise_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t eventlogd_var_socket_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t lsassd_var_socket_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t likewise_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t eventlogd_var_socket_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lsassd_var_socket_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t likewise_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t eventlogd_var_socket_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lsassd_var_socket_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t likewise_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t eventlogd_var_socket_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lsassd_var_socket_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t likewise_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t eventlogd_var_socket_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lsassd_var_socket_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t likewise_var_lib_t (dir (getattr open search)))
                (allow sysadm_t eventlogd_var_socket_t (dir (getattr open search)))
                (allow sysadm_t lsassd_var_socket_t (dir (getattr open search)))
                (allow sysadm_t likewise_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t eventlogd_var_socket_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t lsassd_var_socket_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t likewise_var_lib_t (dir (getattr open search)))
                (allow sysadm_t eventlogd_var_socket_t (dir (getattr open search)))
                (allow sysadm_t lsassd_var_socket_t (dir (getattr open search)))
                (allow sysadm_t likewise_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t eventlogd_var_socket_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t lsassd_var_socket_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t likewise_var_lib_t (dir (getattr open search)))
                (allow sysadm_t eventlogd_var_socket_t (dir (getattr open search)))
                (allow sysadm_t lsassd_var_socket_t (dir (getattr open search)))
                (allow sysadm_t likewise_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t eventlogd_var_socket_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t lsassd_var_socket_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t likewise_var_lib_t (dir (getattr open search)))
                (allow sysadm_t eventlogd_var_socket_t (dir (getattr open search)))
                (allow sysadm_t lsassd_var_socket_t (dir (getattr open search)))
                (allow sysadm_t likewise_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t eventlogd_var_socket_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t lsassd_var_socket_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t likewise_var_lib_t (dir (getattr open search)))
                (allow sysadm_t eventlogd_var_socket_t (dir (getattr open search)))
                (allow sysadm_t lsassd_var_socket_t (dir (getattr open search)))
                (allow sysadm_t likewise_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t eventlogd_var_socket_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t lsassd_var_socket_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t lwiod_var_socket_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lwregd_var_socket_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lwsmd_var_socket_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lwiod_var_socket_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t lwregd_var_socket_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t lwsmd_var_socket_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t lwiod_var_socket_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lwregd_var_socket_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lwsmd_var_socket_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lwiod_var_socket_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lwregd_var_socket_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lwsmd_var_socket_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lwiod_var_socket_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lwregd_var_socket_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lwsmd_var_socket_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lwiod_var_socket_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t lwregd_var_socket_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t lwsmd_var_socket_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t lwiod_var_socket_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lwregd_var_socket_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lwsmd_var_socket_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lwiod_var_socket_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lwregd_var_socket_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lwsmd_var_socket_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lwiod_var_socket_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lwregd_var_socket_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lwsmd_var_socket_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lwiod_var_socket_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lwregd_var_socket_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lwsmd_var_socket_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lwiod_var_socket_t (dir (getattr open search)))
                (allow sysadm_t lwregd_var_socket_t (dir (getattr open search)))
                (allow sysadm_t lwsmd_var_socket_t (dir (getattr open search)))
                (allow sysadm_t lwiod_var_socket_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t lwregd_var_socket_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t lwsmd_var_socket_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t lwiod_var_socket_t (dir (getattr open search)))
                (allow sysadm_t lwregd_var_socket_t (dir (getattr open search)))
                (allow sysadm_t lwsmd_var_socket_t (dir (getattr open search)))
                (allow sysadm_t lwiod_var_socket_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t lwregd_var_socket_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t lwsmd_var_socket_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t lwiod_var_socket_t (dir (getattr open search)))
                (allow sysadm_t lwregd_var_socket_t (dir (getattr open search)))
                (allow sysadm_t lwsmd_var_socket_t (dir (getattr open search)))
                (allow sysadm_t lwiod_var_socket_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t lwregd_var_socket_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t lwsmd_var_socket_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t lwiod_var_socket_t (dir (getattr open search)))
                (allow sysadm_t lwregd_var_socket_t (dir (getattr open search)))
                (allow sysadm_t lwsmd_var_socket_t (dir (getattr open search)))
                (allow sysadm_t lwiod_var_socket_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t lwregd_var_socket_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t lwsmd_var_socket_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t lwiod_var_socket_t (dir (getattr open search)))
                (allow sysadm_t lwregd_var_socket_t (dir (getattr open search)))
                (allow sysadm_t lwsmd_var_socket_t (dir (getattr open search)))
                (allow sysadm_t lwiod_var_socket_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t lwregd_var_socket_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t lwsmd_var_socket_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t lwsmd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t netlogond_var_socket_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t netlogond_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lwsmd_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t netlogond_var_socket_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t netlogond_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t lwsmd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t netlogond_var_socket_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t netlogond_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lwsmd_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t netlogond_var_socket_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t netlogond_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lwsmd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t netlogond_var_socket_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t netlogond_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lwsmd_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t netlogond_var_socket_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t netlogond_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t lwsmd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t netlogond_var_socket_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t netlogond_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lwsmd_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t netlogond_var_socket_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t netlogond_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lwsmd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t netlogond_var_socket_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t netlogond_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lwsmd_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t netlogond_var_socket_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t netlogond_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lwsmd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t netlogond_var_socket_t (dir (getattr open search)))
                (allow sysadm_t netlogond_var_lib_t (dir (getattr open search)))
                (allow sysadm_t lwsmd_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t netlogond_var_socket_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t netlogond_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t lwsmd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t netlogond_var_socket_t (dir (getattr open search)))
                (allow sysadm_t netlogond_var_lib_t (dir (getattr open search)))
                (allow sysadm_t lwsmd_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t netlogond_var_socket_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t netlogond_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t lwsmd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t netlogond_var_socket_t (dir (getattr open search)))
                (allow sysadm_t netlogond_var_lib_t (dir (getattr open search)))
                (allow sysadm_t lwsmd_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t netlogond_var_socket_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t netlogond_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t lwsmd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t netlogond_var_socket_t (dir (getattr open search)))
                (allow sysadm_t netlogond_var_lib_t (dir (getattr open search)))
                (allow sysadm_t lwsmd_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t netlogond_var_socket_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t netlogond_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t lwsmd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t netlogond_var_socket_t (dir (getattr open search)))
                (allow sysadm_t netlogond_var_lib_t (dir (getattr open search)))
                (allow sysadm_t lwsmd_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t netlogond_var_socket_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t netlogond_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t lsassd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lwregd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t eventlogd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lsassd_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t lwregd_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t eventlogd_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t lsassd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lwregd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t eventlogd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lsassd_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lwregd_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t eventlogd_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lsassd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lwregd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t eventlogd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lsassd_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t lwregd_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t eventlogd_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t lsassd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lwregd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t eventlogd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lsassd_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lwregd_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t eventlogd_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lsassd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lwregd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t eventlogd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lsassd_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lwregd_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t eventlogd_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lsassd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t lwregd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t eventlogd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t lsassd_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t lwregd_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t eventlogd_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t lsassd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t lwregd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t eventlogd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t lsassd_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t lwregd_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t eventlogd_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t lsassd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t lwregd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t eventlogd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t lsassd_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t lwregd_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t eventlogd_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t lsassd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t lwregd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t eventlogd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t lsassd_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t lwregd_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t eventlogd_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t lsassd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t lwregd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t eventlogd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t lsassd_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t lwregd_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t eventlogd_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dcerpcd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dcerpcd_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t dcerpcd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dcerpcd_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dcerpcd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dcerpcd_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t dcerpcd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dcerpcd_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dcerpcd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t dcerpcd_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t dcerpcd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t dcerpcd_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t dcerpcd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t dcerpcd_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t dcerpcd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t dcerpcd_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dcerpcd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t dcerpcd_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t dcerpcd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t dcerpcd_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t lsassd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lsassd_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t lsassd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lsassd_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lsassd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lsassd_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t lsassd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lsassd_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lsassd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lsassd_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lsassd_tmp_t (dir (getattr open search)))
                (allow sysadm_t lsassd_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t lsassd_tmp_t (dir (getattr open search)))
                (allow sysadm_t lsassd_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t lsassd_tmp_t (dir (getattr open search)))
                (allow sysadm_t lsassd_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t lsassd_tmp_t (dir (getattr open search)))
                (allow sysadm_t lsassd_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t lsassd_tmp_t (dir (getattr open search)))
                (allow sysadm_t lsassd_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t eventlogd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lsassd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lwiod_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t eventlogd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t lsassd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t lwiod_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t eventlogd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lsassd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lwiod_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t eventlogd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lsassd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lwiod_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t eventlogd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lsassd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lwiod_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t eventlogd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t lsassd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t lwiod_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t eventlogd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lsassd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lwiod_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t eventlogd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lsassd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lwiod_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t eventlogd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lsassd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lwiod_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t eventlogd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lsassd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lwiod_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t eventlogd_runtime_t (dir (getattr open search)))
                (allow sysadm_t lsassd_runtime_t (dir (getattr open search)))
                (allow sysadm_t lwiod_runtime_t (dir (getattr open search)))
                (allow sysadm_t eventlogd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t lsassd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t lwiod_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t eventlogd_runtime_t (dir (getattr open search)))
                (allow sysadm_t lsassd_runtime_t (dir (getattr open search)))
                (allow sysadm_t lwiod_runtime_t (dir (getattr open search)))
                (allow sysadm_t eventlogd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t lsassd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t lwiod_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t eventlogd_runtime_t (dir (getattr open search)))
                (allow sysadm_t lsassd_runtime_t (dir (getattr open search)))
                (allow sysadm_t lwiod_runtime_t (dir (getattr open search)))
                (allow sysadm_t eventlogd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t lsassd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t lwiod_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t eventlogd_runtime_t (dir (getattr open search)))
                (allow sysadm_t lsassd_runtime_t (dir (getattr open search)))
                (allow sysadm_t lwiod_runtime_t (dir (getattr open search)))
                (allow sysadm_t eventlogd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t lsassd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t lwiod_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t eventlogd_runtime_t (dir (getattr open search)))
                (allow sysadm_t lsassd_runtime_t (dir (getattr open search)))
                (allow sysadm_t lwiod_runtime_t (dir (getattr open search)))
                (allow sysadm_t eventlogd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t lsassd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t lwiod_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t lwregd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t netlogond_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t srvsvcd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lwregd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t netlogond_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t srvsvcd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t lwregd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t netlogond_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t srvsvcd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lwregd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t netlogond_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t srvsvcd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lwregd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t netlogond_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t srvsvcd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lwregd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t netlogond_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t srvsvcd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t lwregd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t netlogond_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t srvsvcd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lwregd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t netlogond_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t srvsvcd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lwregd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t netlogond_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t srvsvcd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lwregd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t netlogond_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t srvsvcd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lwregd_runtime_t (dir (getattr open search)))
                (allow sysadm_t netlogond_runtime_t (dir (getattr open search)))
                (allow sysadm_t srvsvcd_runtime_t (dir (getattr open search)))
                (allow sysadm_t lwregd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t netlogond_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t srvsvcd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t lwregd_runtime_t (dir (getattr open search)))
                (allow sysadm_t netlogond_runtime_t (dir (getattr open search)))
                (allow sysadm_t srvsvcd_runtime_t (dir (getattr open search)))
                (allow sysadm_t lwregd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t netlogond_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t srvsvcd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t lwregd_runtime_t (dir (getattr open search)))
                (allow sysadm_t netlogond_runtime_t (dir (getattr open search)))
                (allow sysadm_t srvsvcd_runtime_t (dir (getattr open search)))
                (allow sysadm_t lwregd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t netlogond_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t srvsvcd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t lwregd_runtime_t (dir (getattr open search)))
                (allow sysadm_t netlogond_runtime_t (dir (getattr open search)))
                (allow sysadm_t srvsvcd_runtime_t (dir (getattr open search)))
                (allow sysadm_t lwregd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t netlogond_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t srvsvcd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t lwregd_runtime_t (dir (getattr open search)))
                (allow sysadm_t netlogond_runtime_t (dir (getattr open search)))
                (allow sysadm_t srvsvcd_runtime_t (dir (getattr open search)))
                (allow sysadm_t lwregd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t netlogond_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t srvsvcd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_292
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_293
                (typeattributeset cil_gen_require device_t)
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require lircd_t)
                (typeattributeset cil_gen_require lircd_runtime_t)
                (typeattributeset cil_gen_require lircd_initrc_exec_t)
                (typeattributeset cil_gen_require lircd_etc_t)
                (allow sysadm_t lircd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t lircd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t lircd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t lircd_t (lnk_file (read getattr)))
                (allow sysadm_t lircd_t (process (getattr)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t lircd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lircd_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t lircd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lircd_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lircd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lircd_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t lircd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lircd_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lircd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lircd_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lircd_etc_t (dir (getattr open search)))
                (allow sysadm_t lircd_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t lircd_etc_t (dir (getattr open search)))
                (allow sysadm_t lircd_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t lircd_etc_t (dir (getattr open search)))
                (allow sysadm_t lircd_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t lircd_etc_t (dir (getattr open search)))
                (allow sysadm_t lircd_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t lircd_etc_t (dir (getattr open search)))
                (allow sysadm_t lircd_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t lircd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lircd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t lircd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lircd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lircd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lircd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t lircd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lircd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lircd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lircd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lircd_runtime_t (dir (getattr open search)))
                (allow sysadm_t lircd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t lircd_runtime_t (dir (getattr open search)))
                (allow sysadm_t lircd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t lircd_runtime_t (dir (getattr open search)))
                (allow sysadm_t lircd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t lircd_runtime_t (dir (getattr open search)))
                (allow sysadm_t lircd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t lircd_runtime_t (dir (getattr open search)))
                (allow sysadm_t lircd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t device_t (dir (getattr open search)))
                (allow sysadm_t device_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t device_t (dir (getattr open search)))
                (allow sysadm_t device_t (lnk_file (read getattr)))
                (optional sysadm_optional_294
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_295
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require lldpad_t)
                (typeattributeset cil_gen_require lldpad_initrc_exec_t)
                (typeattributeset cil_gen_require lldpad_var_lib_t)
                (typeattributeset cil_gen_require lldpad_runtime_t)
                (allow sysadm_t lldpad_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t lldpad_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t lldpad_t (file (ioctl read getattr lock open)))
                (allow sysadm_t lldpad_t (lnk_file (read getattr)))
                (allow sysadm_t lldpad_t (process (getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t lldpad_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lldpad_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t lldpad_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lldpad_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lldpad_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lldpad_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t lldpad_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lldpad_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lldpad_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lldpad_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lldpad_var_lib_t (dir (getattr open search)))
                (allow sysadm_t lldpad_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t lldpad_var_lib_t (dir (getattr open search)))
                (allow sysadm_t lldpad_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t lldpad_var_lib_t (dir (getattr open search)))
                (allow sysadm_t lldpad_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t lldpad_var_lib_t (dir (getattr open search)))
                (allow sysadm_t lldpad_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t lldpad_var_lib_t (dir (getattr open search)))
                (allow sysadm_t lldpad_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t lldpad_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lldpad_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t lldpad_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lldpad_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lldpad_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lldpad_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t lldpad_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lldpad_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lldpad_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lldpad_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lldpad_runtime_t (dir (getattr open search)))
                (allow sysadm_t lldpad_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t lldpad_runtime_t (dir (getattr open search)))
                (allow sysadm_t lldpad_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t lldpad_runtime_t (dir (getattr open search)))
                (allow sysadm_t lldpad_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t lldpad_runtime_t (dir (getattr open search)))
                (allow sysadm_t lldpad_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t lldpad_runtime_t (dir (getattr open search)))
                (allow sysadm_t lldpad_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_296
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_297
                (roleattributeset cil_gen_require logrotate_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require logrotate_t)
                (typeattributeset cil_gen_require logrotate_exec_t)
                (roleattributeset cil_gen_require logrotate_roles)
                (roleattributeset logrotate_roles (sysadm_r ))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t logrotate_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t logrotate_t (process (transition)))
                (dontaudit sysadm_t logrotate_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t logrotate_exec_t process logrotate_t)
                (allow logrotate_t sysadm_t (fd (use)))
                (allow logrotate_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow logrotate_t sysadm_t (process (sigchld)))
            )
            (optional sysadm_optional_298
                (roleattributeset cil_gen_require checkpc_roles)
                (roleattributeset cil_gen_require lpr_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require checkpc_t)
                (typeattributeset cil_gen_require checkpc_exec_t)
                (typeattributeset cil_gen_require lpr_t)
                (typeattributeset cil_gen_require lpr_exec_t)
                (roleattributeset cil_gen_require checkpc_roles)
                (roleattributeset checkpc_roles (sysadm_r ))
                (roleattributeset cil_gen_require lpr_roles)
                (roleattributeset lpr_roles (sysadm_r ))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t checkpc_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t checkpc_t (process (transition)))
                (dontaudit sysadm_t checkpc_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t checkpc_exec_t process checkpc_t)
                (allow checkpc_t sysadm_t (fd (use)))
                (allow checkpc_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow checkpc_t sysadm_t (process (sigchld)))
                (allow sysadm_application_exec_domain lpr_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_application_exec_domain lpr_t (process (transition)))
                (dontaudit sysadm_application_exec_domain lpr_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_application_exec_domain lpr_exec_t process lpr_t)
                (allow lpr_t sysadm_application_exec_domain (fd (use)))
                (allow lpr_t sysadm_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                (allow lpr_t sysadm_application_exec_domain (process (sigchld)))
                (allow sysadm_application_exec_domain lpr_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_application_exec_domain lpr_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_application_exec_domain lpr_t (file (ioctl read getattr lock open)))
                (allow sysadm_application_exec_domain lpr_t (lnk_file (read getattr)))
                (allow sysadm_application_exec_domain lpr_t (process (getattr)))
                (dontaudit lpr_t sysadm_application_exec_domain (unix_stream_socket (read write)))
                (optional sysadm_optional_299
                    (typeattributeset cil_gen_require etc_t)
                    (typeattributeset cil_gen_require cupsd_etc_t)
                    (typeattributeset cil_gen_require cupsd_rw_etc_t)
                    (allow sysadm_application_exec_domain etc_t (dir (getattr open search)))
                    (allow sysadm_application_exec_domain cupsd_etc_t (dir (getattr open search)))
                    (allow sysadm_application_exec_domain cupsd_rw_etc_t (dir (getattr open search)))
                    (allow sysadm_application_exec_domain cupsd_etc_t (file (ioctl read getattr lock open)))
                    (allow sysadm_application_exec_domain cupsd_rw_etc_t (file (ioctl read getattr lock open)))
                )
                (optional sysadm_optional_300
                    (typeattributeset cil_gen_require sysadm_systemd_t)
                    (allow sysadm_systemd_t lpr_t (dir (ioctl read getattr lock open search)))
                    (allow sysadm_systemd_t lpr_t (file (ioctl read getattr lock open)))
                    (allow sysadm_systemd_t lpr_t (lnk_file (read getattr)))
                    (allow sysadm_systemd_t lpr_t (process (getattr)))
                    (allow sysadm_systemd_t lpr_t (process (sigchld sigkill sigstop signull signal)))
                    (allow lpr_t sysadm_systemd_t (fd (use)))
                    (allow lpr_t sysadm_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                    (allow lpr_t sysadm_systemd_t (dir (ioctl read getattr lock open search)))
                    (allow lpr_t sysadm_systemd_t (file (ioctl read getattr lock open)))
                    (allow lpr_t sysadm_systemd_t (lnk_file (read getattr)))
                    (allow lpr_t sysadm_systemd_t (process (getattr)))
                    (allow lpr_t sysadm_systemd_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_301
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require lsmd_t)
                (typeattributeset cil_gen_require lsmd_runtime_t)
                (allow sysadm_t lsmd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t lsmd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t lsmd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t lsmd_t (lnk_file (read getattr)))
                (allow sysadm_t lsmd_t (process (getattr)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t lsmd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lsmd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t lsmd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lsmd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lsmd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lsmd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t lsmd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lsmd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lsmd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lsmd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lsmd_runtime_t (dir (getattr open search)))
                (allow sysadm_t lsmd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t lsmd_runtime_t (dir (getattr open search)))
                (allow sysadm_t lsmd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t lsmd_runtime_t (dir (getattr open search)))
                (allow sysadm_t lsmd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t lsmd_runtime_t (dir (getattr open search)))
                (allow sysadm_t lsmd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t lsmd_runtime_t (dir (getattr open search)))
                (allow sysadm_t lsmd_runtime_t (sock_file (getattr relabelfrom relabelto)))
            )
            (optional sysadm_optional_302
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require var_lock_t)
                (typeattributeset cil_gen_require lvm_t)
                (typeattributeset cil_gen_require lvm_etc_t)
                (typeattributeset cil_gen_require lvm_lock_t)
                (typeattributeset cil_gen_require lvm_metadata_t)
                (typeattributeset cil_gen_require lvm_var_lib_t)
                (typeattributeset cil_gen_require lvm_runtime_t)
                (typeattributeset cil_gen_require lvm_tmp_t)
                (typeattributeset cil_gen_require lvm_exec_t)
                (roleattributeset cil_gen_require sysadm_r)
                (roletype sysadm_r lvm_t)
                (allow sysadm_t lvm_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t lvm_t (file (ioctl read getattr lock open)))
                (allow sysadm_t lvm_t (lnk_file (read getattr)))
                (allow sysadm_t lvm_t (process (getattr)))
                (allow sysadm_t lvm_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t lvm_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lvm_metadata_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lvm_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t lvm_metadata_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t lvm_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lvm_metadata_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lvm_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lvm_metadata_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lvm_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lvm_metadata_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lvm_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t lvm_metadata_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t lvm_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lvm_metadata_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lvm_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lvm_metadata_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lvm_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lvm_metadata_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lvm_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lvm_metadata_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lvm_etc_t (dir (getattr open search)))
                (allow sysadm_t lvm_metadata_t (dir (getattr open search)))
                (allow sysadm_t lvm_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t lvm_metadata_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t lvm_etc_t (dir (getattr open search)))
                (allow sysadm_t lvm_metadata_t (dir (getattr open search)))
                (allow sysadm_t lvm_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t lvm_metadata_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t lvm_etc_t (dir (getattr open search)))
                (allow sysadm_t lvm_metadata_t (dir (getattr open search)))
                (allow sysadm_t lvm_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t lvm_metadata_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t lvm_etc_t (dir (getattr open search)))
                (allow sysadm_t lvm_metadata_t (dir (getattr open search)))
                (allow sysadm_t lvm_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t lvm_metadata_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t lvm_etc_t (dir (getattr open search)))
                (allow sysadm_t lvm_metadata_t (dir (getattr open search)))
                (allow sysadm_t lvm_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t lvm_metadata_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_lock_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lock_t (dir (getattr open search)))
                (allow sysadm_t lvm_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lvm_lock_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t lvm_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lvm_lock_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lvm_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lvm_lock_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t lvm_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lvm_lock_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lvm_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lvm_lock_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lvm_lock_t (dir (getattr open search)))
                (allow sysadm_t lvm_lock_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t lvm_lock_t (dir (getattr open search)))
                (allow sysadm_t lvm_lock_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t lvm_lock_t (dir (getattr open search)))
                (allow sysadm_t lvm_lock_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t lvm_lock_t (dir (getattr open search)))
                (allow sysadm_t lvm_lock_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t lvm_lock_t (dir (getattr open search)))
                (allow sysadm_t lvm_lock_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t lvm_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lvm_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t lvm_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lvm_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lvm_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lvm_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t lvm_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lvm_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lvm_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lvm_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lvm_var_lib_t (dir (getattr open search)))
                (allow sysadm_t lvm_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t lvm_var_lib_t (dir (getattr open search)))
                (allow sysadm_t lvm_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t lvm_var_lib_t (dir (getattr open search)))
                (allow sysadm_t lvm_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t lvm_var_lib_t (dir (getattr open search)))
                (allow sysadm_t lvm_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t lvm_var_lib_t (dir (getattr open search)))
                (allow sysadm_t lvm_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t lvm_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lvm_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t lvm_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lvm_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lvm_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lvm_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t lvm_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lvm_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lvm_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lvm_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lvm_runtime_t (dir (getattr open search)))
                (allow sysadm_t lvm_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t lvm_runtime_t (dir (getattr open search)))
                (allow sysadm_t lvm_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t lvm_runtime_t (dir (getattr open search)))
                (allow sysadm_t lvm_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t lvm_runtime_t (dir (getattr open search)))
                (allow sysadm_t lvm_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t lvm_runtime_t (dir (getattr open search)))
                (allow sysadm_t lvm_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (getattr open search)))
                (allow sysadm_t lvm_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lvm_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t lvm_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lvm_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lvm_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lvm_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t lvm_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lvm_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lvm_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t lvm_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t lvm_tmp_t (dir (getattr open search)))
                (allow sysadm_t lvm_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t lvm_tmp_t (dir (getattr open search)))
                (allow sysadm_t lvm_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t lvm_tmp_t (dir (getattr open search)))
                (allow sysadm_t lvm_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t lvm_tmp_t (dir (getattr open search)))
                (allow sysadm_t lvm_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t lvm_tmp_t (dir (getattr open search)))
                (allow sysadm_t lvm_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t lvm_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t lvm_t (process (transition)))
                (dontaudit sysadm_t lvm_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t lvm_exec_t process lvm_t)
                (allow lvm_t sysadm_t (fd (use)))
                (allow lvm_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow lvm_t sysadm_t (process (sigchld)))
            )
            (optional sysadm_optional_303
                (roleattributeset cil_gen_require mandb_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require mandb_t)
                (typeattributeset cil_gen_require mandb_exec_t)
                (roleattributeset cil_gen_require mandb_roles)
                (roleattributeset mandb_roles (sysadm_r ))
                (allow sysadm_t mandb_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t mandb_t (file (ioctl read getattr lock open)))
                (allow sysadm_t mandb_t (lnk_file (read getattr)))
                (allow sysadm_t mandb_t (process (getattr)))
                (allow sysadm_t mandb_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t mandb_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t mandb_t (process (transition)))
                (dontaudit sysadm_t mandb_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t mandb_exec_t process mandb_t)
                (allow mandb_t sysadm_t (fd (use)))
                (allow mandb_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow mandb_t sysadm_t (process (sigchld)))
            )
            (optional sysadm_optional_304
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require mcelog_t)
                (typeattributeset cil_gen_require mcelog_initrc_exec_t)
                (typeattributeset cil_gen_require mcelog_log_t)
                (typeattributeset cil_gen_require mcelog_runtime_t)
                (typeattributeset cil_gen_require mcelog_etc_t)
                (allow sysadm_t mcelog_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t mcelog_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t mcelog_t (file (ioctl read getattr lock open)))
                (allow sysadm_t mcelog_t (lnk_file (read getattr)))
                (allow sysadm_t mcelog_t (process (getattr)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t mcelog_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mcelog_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t mcelog_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mcelog_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mcelog_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mcelog_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t mcelog_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mcelog_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mcelog_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mcelog_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mcelog_etc_t (dir (getattr open search)))
                (allow sysadm_t mcelog_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t mcelog_etc_t (dir (getattr open search)))
                (allow sysadm_t mcelog_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t mcelog_etc_t (dir (getattr open search)))
                (allow sysadm_t mcelog_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t mcelog_etc_t (dir (getattr open search)))
                (allow sysadm_t mcelog_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t mcelog_etc_t (dir (getattr open search)))
                (allow sysadm_t mcelog_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t mcelog_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mcelog_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t mcelog_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mcelog_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mcelog_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mcelog_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t mcelog_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mcelog_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mcelog_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mcelog_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mcelog_log_t (dir (getattr open search)))
                (allow sysadm_t mcelog_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t mcelog_log_t (dir (getattr open search)))
                (allow sysadm_t mcelog_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t mcelog_log_t (dir (getattr open search)))
                (allow sysadm_t mcelog_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t mcelog_log_t (dir (getattr open search)))
                (allow sysadm_t mcelog_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t mcelog_log_t (dir (getattr open search)))
                (allow sysadm_t mcelog_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t mcelog_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mcelog_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t mcelog_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mcelog_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mcelog_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mcelog_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t mcelog_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mcelog_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mcelog_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mcelog_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mcelog_runtime_t (dir (getattr open search)))
                (allow sysadm_t mcelog_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t mcelog_runtime_t (dir (getattr open search)))
                (allow sysadm_t mcelog_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t mcelog_runtime_t (dir (getattr open search)))
                (allow sysadm_t mcelog_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t mcelog_runtime_t (dir (getattr open search)))
                (allow sysadm_t mcelog_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t mcelog_runtime_t (dir (getattr open search)))
                (allow sysadm_t mcelog_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_305
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_306
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require memcached_t)
                (typeattributeset cil_gen_require memcached_initrc_exec_t)
                (typeattributeset cil_gen_require memcached_runtime_t)
                (allow sysadm_t memcached_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t memcached_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t memcached_t (file (ioctl read getattr lock open)))
                (allow sysadm_t memcached_t (lnk_file (read getattr)))
                (allow sysadm_t memcached_t (process (getattr)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t memcached_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t memcached_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t memcached_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t memcached_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t memcached_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t memcached_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t memcached_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t memcached_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t memcached_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t memcached_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t memcached_runtime_t (dir (getattr open search)))
                (allow sysadm_t memcached_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t memcached_runtime_t (dir (getattr open search)))
                (allow sysadm_t memcached_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t memcached_runtime_t (dir (getattr open search)))
                (allow sysadm_t memcached_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t memcached_runtime_t (dir (getattr open search)))
                (allow sysadm_t memcached_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t memcached_runtime_t (dir (getattr open search)))
                (allow sysadm_t memcached_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_307
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_308
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require minidlna_t)
                (typeattributeset cil_gen_require minidlna_runtime_t)
                (typeattributeset cil_gen_require minidlna_initrc_exec_t)
                (typeattributeset cil_gen_require minidlna_conf_t)
                (typeattributeset cil_gen_require minidlna_log_t)
                (typeattributeset cil_gen_require minidlna_db_t)
                (allow sysadm_t minidlna_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t minidlna_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t minidlna_t (file (ioctl read getattr lock open)))
                (allow sysadm_t minidlna_t (lnk_file (read getattr)))
                (allow sysadm_t minidlna_t (process (getattr)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t minidlna_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t minidlna_conf_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t minidlna_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t minidlna_conf_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t minidlna_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t minidlna_conf_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t minidlna_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t minidlna_conf_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t minidlna_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t minidlna_conf_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t minidlna_conf_t (dir (getattr open search)))
                (allow sysadm_t minidlna_conf_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t minidlna_conf_t (dir (getattr open search)))
                (allow sysadm_t minidlna_conf_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t minidlna_conf_t (dir (getattr open search)))
                (allow sysadm_t minidlna_conf_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t minidlna_conf_t (dir (getattr open search)))
                (allow sysadm_t minidlna_conf_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t minidlna_conf_t (dir (getattr open search)))
                (allow sysadm_t minidlna_conf_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t minidlna_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t minidlna_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t minidlna_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t minidlna_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t minidlna_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t minidlna_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t minidlna_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t minidlna_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t minidlna_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t minidlna_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t minidlna_log_t (dir (getattr open search)))
                (allow sysadm_t minidlna_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t minidlna_log_t (dir (getattr open search)))
                (allow sysadm_t minidlna_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t minidlna_log_t (dir (getattr open search)))
                (allow sysadm_t minidlna_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t minidlna_log_t (dir (getattr open search)))
                (allow sysadm_t minidlna_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t minidlna_log_t (dir (getattr open search)))
                (allow sysadm_t minidlna_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t minidlna_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t minidlna_db_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t minidlna_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t minidlna_db_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t minidlna_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t minidlna_db_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t minidlna_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t minidlna_db_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t minidlna_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t minidlna_db_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t minidlna_db_t (dir (getattr open search)))
                (allow sysadm_t minidlna_db_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t minidlna_db_t (dir (getattr open search)))
                (allow sysadm_t minidlna_db_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t minidlna_db_t (dir (getattr open search)))
                (allow sysadm_t minidlna_db_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t minidlna_db_t (dir (getattr open search)))
                (allow sysadm_t minidlna_db_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t minidlna_db_t (dir (getattr open search)))
                (allow sysadm_t minidlna_db_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t minidlna_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t minidlna_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t minidlna_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t minidlna_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t minidlna_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t minidlna_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t minidlna_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t minidlna_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t minidlna_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t minidlna_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t minidlna_runtime_t (dir (getattr open search)))
                (allow sysadm_t minidlna_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t minidlna_runtime_t (dir (getattr open search)))
                (allow sysadm_t minidlna_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t minidlna_runtime_t (dir (getattr open search)))
                (allow sysadm_t minidlna_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t minidlna_runtime_t (dir (getattr open search)))
                (allow sysadm_t minidlna_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t minidlna_runtime_t (dir (getattr open search)))
                (allow sysadm_t minidlna_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_309
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_310
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require minissdpd_t)
                (typeattributeset cil_gen_require minissdpd_initrc_exec_t)
                (typeattributeset cil_gen_require minissdpd_conf_t)
                (typeattributeset cil_gen_require minissdpd_runtime_t)
                (allow sysadm_t minissdpd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t minissdpd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t minissdpd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t minissdpd_t (lnk_file (read getattr)))
                (allow sysadm_t minissdpd_t (process (getattr)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t minissdpd_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t minissdpd_conf_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t minissdpd_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t minissdpd_conf_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t minissdpd_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t minissdpd_conf_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t minissdpd_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t minissdpd_conf_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t minissdpd_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t minissdpd_conf_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t minissdpd_conf_t (dir (getattr open search)))
                (allow sysadm_t minissdpd_conf_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t minissdpd_conf_t (dir (getattr open search)))
                (allow sysadm_t minissdpd_conf_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t minissdpd_conf_t (dir (getattr open search)))
                (allow sysadm_t minissdpd_conf_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t minissdpd_conf_t (dir (getattr open search)))
                (allow sysadm_t minissdpd_conf_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t minissdpd_conf_t (dir (getattr open search)))
                (allow sysadm_t minissdpd_conf_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t minissdpd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t minissdpd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t minissdpd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t minissdpd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t minissdpd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t minissdpd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t minissdpd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t minissdpd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t minissdpd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t minissdpd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t minissdpd_runtime_t (dir (getattr open search)))
                (allow sysadm_t minissdpd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t minissdpd_runtime_t (dir (getattr open search)))
                (allow sysadm_t minissdpd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t minissdpd_runtime_t (dir (getattr open search)))
                (allow sysadm_t minissdpd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t minissdpd_runtime_t (dir (getattr open search)))
                (allow sysadm_t minissdpd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t minissdpd_runtime_t (dir (getattr open search)))
                (allow sysadm_t minissdpd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_311
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_312
                (roleattributeset cil_gen_require kmod_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require kmod_t)
                (typeattributeset cil_gen_require kmod_exec_t)
                (roleattributeset cil_gen_require kmod_roles)
                (roleattributeset kmod_roles (sysadm_r ))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t kmod_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t kmod_t (process (transition)))
                (dontaudit sysadm_t kmod_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t kmod_exec_t process kmod_t)
                (allow kmod_t sysadm_t (fd (use)))
                (allow kmod_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow kmod_t sysadm_t (process (sigchld)))
            )
            (optional sysadm_optional_313
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require mongod_t)
                (typeattributeset cil_gen_require mongod_initrc_exec_t)
                (typeattributeset cil_gen_require mongod_log_t)
                (typeattributeset cil_gen_require mongod_var_lib_t)
                (typeattributeset cil_gen_require mongod_runtime_t)
                (allow sysadm_t mongod_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t mongod_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t mongod_t (file (ioctl read getattr lock open)))
                (allow sysadm_t mongod_t (lnk_file (read getattr)))
                (allow sysadm_t mongod_t (process (getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t mongod_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mongod_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t mongod_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mongod_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mongod_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mongod_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t mongod_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mongod_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mongod_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mongod_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mongod_log_t (dir (getattr open search)))
                (allow sysadm_t mongod_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t mongod_log_t (dir (getattr open search)))
                (allow sysadm_t mongod_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t mongod_log_t (dir (getattr open search)))
                (allow sysadm_t mongod_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t mongod_log_t (dir (getattr open search)))
                (allow sysadm_t mongod_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t mongod_log_t (dir (getattr open search)))
                (allow sysadm_t mongod_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t mongod_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mongod_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t mongod_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mongod_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mongod_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mongod_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t mongod_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mongod_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mongod_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mongod_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mongod_var_lib_t (dir (getattr open search)))
                (allow sysadm_t mongod_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t mongod_var_lib_t (dir (getattr open search)))
                (allow sysadm_t mongod_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t mongod_var_lib_t (dir (getattr open search)))
                (allow sysadm_t mongod_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t mongod_var_lib_t (dir (getattr open search)))
                (allow sysadm_t mongod_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t mongod_var_lib_t (dir (getattr open search)))
                (allow sysadm_t mongod_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t mongod_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mongod_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t mongod_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mongod_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mongod_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mongod_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t mongod_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mongod_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mongod_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mongod_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mongod_runtime_t (dir (getattr open search)))
                (allow sysadm_t mongod_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t mongod_runtime_t (dir (getattr open search)))
                (allow sysadm_t mongod_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t mongod_runtime_t (dir (getattr open search)))
                (allow sysadm_t mongod_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t mongod_runtime_t (dir (getattr open search)))
                (allow sysadm_t mongod_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t mongod_runtime_t (dir (getattr open search)))
                (allow sysadm_t mongod_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_314
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_315
                (roleattributeset cil_gen_require monit_cli_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require monit_t)
                (typeattributeset cil_gen_require monit_conf_t)
                (typeattributeset cil_gen_require monit_initrc_exec_t)
                (typeattributeset cil_gen_require monit_log_t)
                (typeattributeset cil_gen_require monit_runtime_t)
                (typeattributeset cil_gen_require monit_unit_t)
                (typeattributeset cil_gen_require monit_var_lib_t)
                (typeattributeset cil_gen_require monit_cli_t)
                (typeattributeset cil_gen_require monit_exec_t)
                (roleattributeset cil_gen_require monit_cli_roles)
                (roleattributeset monit_cli_roles (sysadm_r ))
                (allow sysadm_t monit_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t monit_t (file (ioctl read getattr lock open)))
                (allow sysadm_t monit_t (lnk_file (read getattr)))
                (allow sysadm_t monit_t (process (getattr)))
                (allow sysadm_t monit_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t monit_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t monit_conf_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t monit_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t monit_conf_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t monit_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t monit_conf_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t monit_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t monit_conf_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t monit_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t monit_conf_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t monit_conf_t (dir (getattr open search)))
                (allow sysadm_t monit_conf_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t monit_conf_t (dir (getattr open search)))
                (allow sysadm_t monit_conf_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t monit_conf_t (dir (getattr open search)))
                (allow sysadm_t monit_conf_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t monit_conf_t (dir (getattr open search)))
                (allow sysadm_t monit_conf_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t monit_conf_t (dir (getattr open search)))
                (allow sysadm_t monit_conf_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t monit_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t monit_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t monit_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t monit_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t monit_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t monit_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t monit_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t monit_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t monit_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t monit_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t monit_log_t (dir (getattr open search)))
                (allow sysadm_t monit_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t monit_log_t (dir (getattr open search)))
                (allow sysadm_t monit_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t monit_log_t (dir (getattr open search)))
                (allow sysadm_t monit_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t monit_log_t (dir (getattr open search)))
                (allow sysadm_t monit_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t monit_log_t (dir (getattr open search)))
                (allow sysadm_t monit_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t monit_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t monit_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t monit_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t monit_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t monit_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t monit_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t monit_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t monit_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t monit_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t monit_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t monit_runtime_t (dir (getattr open search)))
                (allow sysadm_t monit_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t monit_runtime_t (dir (getattr open search)))
                (allow sysadm_t monit_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t monit_runtime_t (dir (getattr open search)))
                (allow sysadm_t monit_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t monit_runtime_t (dir (getattr open search)))
                (allow sysadm_t monit_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t monit_runtime_t (dir (getattr open search)))
                (allow sysadm_t monit_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t monit_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t monit_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t monit_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t monit_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t monit_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t monit_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t monit_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t monit_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t monit_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t monit_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t monit_var_lib_t (dir (getattr open search)))
                (allow sysadm_t monit_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t monit_var_lib_t (dir (getattr open search)))
                (allow sysadm_t monit_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t monit_var_lib_t (dir (getattr open search)))
                (allow sysadm_t monit_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t monit_var_lib_t (dir (getattr open search)))
                (allow sysadm_t monit_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t monit_var_lib_t (dir (getattr open search)))
                (allow sysadm_t monit_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t monit_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t monit_cli_t (process (transition)))
                (dontaudit sysadm_t monit_cli_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t monit_exec_t process monit_cli_t)
                (allow monit_cli_t sysadm_t (fd (use)))
                (allow monit_cli_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow monit_cli_t sysadm_t (process (sigchld)))
                (optional sysadm_optional_316
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_317
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require monopd_t)
                (typeattributeset cil_gen_require monopd_initrc_exec_t)
                (typeattributeset cil_gen_require monopd_share_t)
                (typeattributeset cil_gen_require monopd_etc_t)
                (typeattributeset cil_gen_require monopd_runtime_t)
                (allow sysadm_t monopd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t monopd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t monopd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t monopd_t (lnk_file (read getattr)))
                (allow sysadm_t monopd_t (process (getattr)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t monopd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t monopd_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t monopd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t monopd_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t monopd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t monopd_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t monopd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t monopd_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t monopd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t monopd_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t monopd_etc_t (dir (getattr open search)))
                (allow sysadm_t monopd_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t monopd_etc_t (dir (getattr open search)))
                (allow sysadm_t monopd_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t monopd_etc_t (dir (getattr open search)))
                (allow sysadm_t monopd_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t monopd_etc_t (dir (getattr open search)))
                (allow sysadm_t monopd_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t monopd_etc_t (dir (getattr open search)))
                (allow sysadm_t monopd_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t monopd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t monopd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t monopd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t monopd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t monopd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t monopd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t monopd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t monopd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t monopd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t monopd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t monopd_runtime_t (dir (getattr open search)))
                (allow sysadm_t monopd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t monopd_runtime_t (dir (getattr open search)))
                (allow sysadm_t monopd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t monopd_runtime_t (dir (getattr open search)))
                (allow sysadm_t monopd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t monopd_runtime_t (dir (getattr open search)))
                (allow sysadm_t monopd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t monopd_runtime_t (dir (getattr open search)))
                (allow sysadm_t monopd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t monopd_share_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t monopd_share_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t monopd_share_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t monopd_share_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t monopd_share_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t monopd_share_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t monopd_share_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t monopd_share_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t monopd_share_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t monopd_share_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t monopd_share_t (dir (getattr open search)))
                (allow sysadm_t monopd_share_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t monopd_share_t (dir (getattr open search)))
                (allow sysadm_t monopd_share_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t monopd_share_t (dir (getattr open search)))
                (allow sysadm_t monopd_share_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t monopd_share_t (dir (getattr open search)))
                (allow sysadm_t monopd_share_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t monopd_share_t (dir (getattr open search)))
                (allow sysadm_t monopd_share_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_318
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_319
                (roleattributeset cil_gen_require mount_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require mount_t)
                (typeattributeset cil_gen_require mount_exec_t)
                (roleattributeset cil_gen_require mount_roles)
                (roleattributeset mount_roles (sysadm_r ))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t mount_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t mount_t (process (transition)))
                (dontaudit sysadm_t mount_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t mount_exec_t process mount_t)
                (allow mount_t sysadm_t (fd (use)))
                (allow mount_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow mount_t sysadm_t (process (sigchld)))
            )
            (optional sysadm_optional_320
                (roleattributeset cil_gen_require mozilla_roles)
                (typeattributeset cil_gen_require user_home_dir_t)
                (typeattributeset cil_gen_require home_root_t)
                (typeattributeset cil_gen_require mozilla_t)
                (typeattributeset cil_gen_require mozilla_exec_t)
                (typeattributeset cil_gen_require mozilla_home_t)
                (typeattributeset cil_gen_require mozilla_tmp_t)
                (typeattributeset cil_gen_require mozilla_tmpfs_t)
                (typeattributeset cil_gen_require mozilla_plugin_tmp_t)
                (typeattributeset cil_gen_require mozilla_plugin_tmpfs_t)
                (typeattributeset cil_gen_require mozilla_plugin_home_t)
                (roleattributeset cil_gen_require mozilla_roles)
                (roleattributeset mozilla_roles (sysadm_r ))
                (allow sysadm_application_exec_domain mozilla_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_application_exec_domain mozilla_t (process (transition)))
                (dontaudit sysadm_application_exec_domain mozilla_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_application_exec_domain mozilla_exec_t process mozilla_t)
                (allow mozilla_t sysadm_application_exec_domain (fd (use)))
                (allow mozilla_t sysadm_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                (allow mozilla_t sysadm_application_exec_domain (process (sigchld)))
                (allow sysadm_application_exec_domain mozilla_t (process (sigchld sigkill sigstop signull signal ptrace noatsecure siginh rlimitinh)))
                (allow sysadm_application_exec_domain mozilla_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_application_exec_domain mozilla_t (file (ioctl read getattr lock open)))
                (allow sysadm_application_exec_domain mozilla_t (lnk_file (read getattr)))
                (allow sysadm_application_exec_domain mozilla_t (process (getattr)))
                (allow mozilla_t sysadm_application_exec_domain (process (signull)))
                (allow mozilla_t sysadm_application_exec_domain (unix_stream_socket (connectto)))
                (allow sysadm_application_exec_domain mozilla_t (fd (use)))
                (allow sysadm_application_exec_domain mozilla_t (shm (getattr read write associate unix_read unix_write lock)))
                (allow sysadm_application_exec_domain mozilla_tmpfs_t (dir (getattr open search)))
                (allow sysadm_application_exec_domain mozilla_tmpfs_t (sock_file (write getattr append open)))
                (allow sysadm_application_exec_domain mozilla_t (unix_stream_socket (connectto)))
                (allow sysadm_t mozilla_home_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t mozilla_plugin_home_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t mozilla_home_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t mozilla_plugin_home_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t mozilla_home_t (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename)))
                (allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_t mozilla_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mozilla_tmp_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t mozilla_plugin_tmp_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t mozilla_tmp_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t mozilla_plugin_tmp_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t mozilla_plugin_tmp_t (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t mozilla_tmpfs_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t mozilla_plugin_tmpfs_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t mozilla_tmpfs_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t mozilla_plugin_tmpfs_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t mozilla_tmpfs_t (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t mozilla_plugin_tmpfs_t (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t mozilla_tmpfs_t (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t mozilla_plugin_tmpfs_t (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (typetransition sysadm_t mozilla_home_t dir "plugins" mozilla_plugin_home_t)
                (typetransition sysadm_t user_home_dir_t dir ".phoenix" mozilla_home_t)
                (typetransition sysadm_t user_home_dir_t dir ".netscape" mozilla_home_t)
                (typetransition sysadm_t user_home_dir_t dir ".mozilla" mozilla_home_t)
                (typetransition sysadm_t user_home_dir_t dir ".galeon" mozilla_home_t)
                (optional sysadm_optional_321
                    (typeattributeset cil_gen_require mozilla_t)
                    (allow sysadm_application_exec_domain mozilla_t (dbus (send_msg)))
                    (allow mozilla_t sysadm_application_exec_domain (dbus (send_msg)))
                )
                (optional sysadm_optional_322
                    (typeattributeset cil_gen_require sysadm_systemd_t)
                    (allow sysadm_systemd_t mozilla_t (dir (ioctl read getattr lock open search)))
                    (allow sysadm_systemd_t mozilla_t (file (ioctl read getattr lock open)))
                    (allow sysadm_systemd_t mozilla_t (lnk_file (read getattr)))
                    (allow sysadm_systemd_t mozilla_t (process (getattr)))
                    (allow sysadm_systemd_t mozilla_t (process (sigchld sigkill sigstop signull signal)))
                    (allow mozilla_t sysadm_systemd_t (fd (use)))
                    (allow mozilla_t sysadm_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                    (allow mozilla_t sysadm_systemd_t (dir (ioctl read getattr lock open search)))
                    (allow mozilla_t sysadm_systemd_t (file (ioctl read getattr lock open)))
                    (allow mozilla_t sysadm_systemd_t (lnk_file (read getattr)))
                    (allow mozilla_t sysadm_systemd_t (process (getattr)))
                    (allow mozilla_t sysadm_systemd_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_323
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require tmpfs_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require mpd_user_data_t)
                (typeattributeset cil_gen_require mpd_t)
                (typeattributeset cil_gen_require mpd_initrc_exec_t)
                (typeattributeset cil_gen_require mpd_etc_t)
                (typeattributeset cil_gen_require mpd_data_t)
                (typeattributeset cil_gen_require mpd_log_t)
                (typeattributeset cil_gen_require mpd_var_lib_t)
                (typeattributeset cil_gen_require mpd_tmpfs_t)
                (typeattributeset cil_gen_require mpd_tmp_t)
                (allow sysadm_t mpd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t mpd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t mpd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t mpd_t (lnk_file (read getattr)))
                (allow sysadm_t mpd_t (process (getattr)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t mpd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mpd_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t mpd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mpd_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mpd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mpd_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t mpd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mpd_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mpd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mpd_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mpd_etc_t (dir (getattr open search)))
                (allow sysadm_t mpd_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t mpd_etc_t (dir (getattr open search)))
                (allow sysadm_t mpd_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t mpd_etc_t (dir (getattr open search)))
                (allow sysadm_t mpd_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t mpd_etc_t (dir (getattr open search)))
                (allow sysadm_t mpd_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t mpd_etc_t (dir (getattr open search)))
                (allow sysadm_t mpd_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t mpd_user_data_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mpd_data_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mpd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mpd_user_data_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t mpd_data_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t mpd_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t mpd_user_data_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mpd_data_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mpd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mpd_user_data_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mpd_data_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mpd_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mpd_user_data_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mpd_data_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mpd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mpd_user_data_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t mpd_data_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t mpd_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t mpd_user_data_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mpd_data_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mpd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mpd_user_data_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mpd_data_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mpd_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mpd_user_data_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mpd_data_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mpd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mpd_user_data_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mpd_data_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mpd_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mpd_user_data_t (dir (getattr open search)))
                (allow sysadm_t mpd_data_t (dir (getattr open search)))
                (allow sysadm_t mpd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t mpd_user_data_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t mpd_data_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t mpd_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t mpd_user_data_t (dir (getattr open search)))
                (allow sysadm_t mpd_data_t (dir (getattr open search)))
                (allow sysadm_t mpd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t mpd_user_data_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t mpd_data_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t mpd_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t mpd_user_data_t (dir (getattr open search)))
                (allow sysadm_t mpd_data_t (dir (getattr open search)))
                (allow sysadm_t mpd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t mpd_user_data_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t mpd_data_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t mpd_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t mpd_user_data_t (dir (getattr open search)))
                (allow sysadm_t mpd_data_t (dir (getattr open search)))
                (allow sysadm_t mpd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t mpd_user_data_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t mpd_data_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t mpd_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t mpd_user_data_t (dir (getattr open search)))
                (allow sysadm_t mpd_data_t (dir (getattr open search)))
                (allow sysadm_t mpd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t mpd_user_data_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t mpd_data_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t mpd_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t mpd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mpd_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t mpd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mpd_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mpd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mpd_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t mpd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mpd_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mpd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mpd_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mpd_log_t (dir (getattr open search)))
                (allow sysadm_t mpd_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t mpd_log_t (dir (getattr open search)))
                (allow sysadm_t mpd_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t mpd_log_t (dir (getattr open search)))
                (allow sysadm_t mpd_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t mpd_log_t (dir (getattr open search)))
                (allow sysadm_t mpd_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t mpd_log_t (dir (getattr open search)))
                (allow sysadm_t mpd_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (getattr open search)))
                (allow sysadm_t mpd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mpd_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t mpd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mpd_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mpd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mpd_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t mpd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mpd_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mpd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mpd_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mpd_tmp_t (dir (getattr open search)))
                (allow sysadm_t mpd_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t mpd_tmp_t (dir (getattr open search)))
                (allow sysadm_t mpd_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t mpd_tmp_t (dir (getattr open search)))
                (allow sysadm_t mpd_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t mpd_tmp_t (dir (getattr open search)))
                (allow sysadm_t mpd_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t mpd_tmp_t (dir (getattr open search)))
                (allow sysadm_t mpd_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmpfs_t (dir (getattr open search)))
                (allow sysadm_t mpd_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mpd_tmpfs_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t mpd_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mpd_tmpfs_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mpd_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mpd_tmpfs_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t mpd_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mpd_tmpfs_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mpd_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mpd_tmpfs_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mpd_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t mpd_tmpfs_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t mpd_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t mpd_tmpfs_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t mpd_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t mpd_tmpfs_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t mpd_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t mpd_tmpfs_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t mpd_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t mpd_tmpfs_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_324
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_325
                (roleattributeset cil_gen_require mencoder_roles)
                (roleattributeset cil_gen_require mplayer_roles)
                (typeattributeset cil_gen_require user_home_dir_t)
                (typeattributeset cil_gen_require home_root_t)
                (typeattributeset cil_gen_require mencoder_t)
                (typeattributeset cil_gen_require mencoder_exec_t)
                (typeattributeset cil_gen_require mplayer_home_t)
                (typeattributeset cil_gen_require mplayer_t)
                (typeattributeset cil_gen_require mplayer_exec_t)
                (typeattributeset cil_gen_require mplayer_tmpfs_t)
                (roleattributeset cil_gen_require mplayer_roles)
                (roleattributeset mplayer_roles (sysadm_r ))
                (roleattributeset cil_gen_require mencoder_roles)
                (roleattributeset mencoder_roles (sysadm_r ))
                (allow sysadm_application_exec_domain mencoder_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_application_exec_domain mencoder_t (process (transition)))
                (dontaudit sysadm_application_exec_domain mencoder_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_application_exec_domain mencoder_exec_t process mencoder_t)
                (allow mencoder_t sysadm_application_exec_domain (fd (use)))
                (allow mencoder_t sysadm_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                (allow mencoder_t sysadm_application_exec_domain (process (sigchld)))
                (allow sysadm_application_exec_domain mplayer_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_application_exec_domain mplayer_t (process (transition)))
                (dontaudit sysadm_application_exec_domain mplayer_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_application_exec_domain mplayer_exec_t process mplayer_t)
                (allow mplayer_t sysadm_application_exec_domain (fd (use)))
                (allow mplayer_t sysadm_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                (allow mplayer_t sysadm_application_exec_domain (process (sigchld)))
                (allow sysadm_application_exec_domain mencoder_t (process (sigchld sigkill sigstop signull signal ptrace getsched)))
                (allow sysadm_application_exec_domain mplayer_t (process (sigchld sigkill sigstop signull signal ptrace getsched)))
                (allow sysadm_application_exec_domain mencoder_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_application_exec_domain mplayer_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_application_exec_domain mencoder_t (file (ioctl read getattr lock open)))
                (allow sysadm_application_exec_domain mplayer_t (file (ioctl read getattr lock open)))
                (allow sysadm_application_exec_domain mencoder_t (lnk_file (read getattr)))
                (allow sysadm_application_exec_domain mplayer_t (lnk_file (read getattr)))
                (allow sysadm_application_exec_domain mencoder_t (process (getattr)))
                (allow sysadm_application_exec_domain mplayer_t (process (getattr)))
                (allow sysadm_t mplayer_home_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t mplayer_home_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t mplayer_home_t (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename)))
                (allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_t mplayer_tmpfs_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t mplayer_tmpfs_t (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename)))
                (allow sysadm_t mplayer_tmpfs_t (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t mplayer_tmpfs_t (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (typetransition sysadm_t user_home_dir_t dir ".mplayer" mplayer_home_t)
                (optional sysadm_optional_326
                    (typeattributeset cil_gen_require sysadm_systemd_t)
                    (allow sysadm_systemd_t mencoder_t (dir (ioctl read getattr lock open search)))
                    (allow sysadm_systemd_t mencoder_t (file (ioctl read getattr lock open)))
                    (allow sysadm_systemd_t mencoder_t (lnk_file (read getattr)))
                    (allow sysadm_systemd_t mencoder_t (process (getattr)))
                    (allow sysadm_systemd_t mencoder_t (process (sigchld sigkill sigstop signull signal)))
                    (allow mencoder_t sysadm_systemd_t (fd (use)))
                    (allow mencoder_t sysadm_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                    (allow mencoder_t sysadm_systemd_t (dir (ioctl read getattr lock open search)))
                    (allow mencoder_t sysadm_systemd_t (file (ioctl read getattr lock open)))
                    (allow mencoder_t sysadm_systemd_t (lnk_file (read getattr)))
                    (allow mencoder_t sysadm_systemd_t (process (getattr)))
                    (allow mencoder_t sysadm_systemd_t (process (sigchld)))
                    (allow sysadm_systemd_t mplayer_t (dir (ioctl read getattr lock open search)))
                    (allow sysadm_systemd_t mplayer_t (file (ioctl read getattr lock open)))
                    (allow sysadm_systemd_t mplayer_t (lnk_file (read getattr)))
                    (allow sysadm_systemd_t mplayer_t (process (getattr)))
                    (allow sysadm_systemd_t mplayer_t (process (sigchld sigkill sigstop signull signal)))
                    (allow mplayer_t sysadm_systemd_t (fd (use)))
                    (allow mplayer_t sysadm_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                    (allow mplayer_t sysadm_systemd_t (dir (ioctl read getattr lock open search)))
                    (allow mplayer_t sysadm_systemd_t (file (ioctl read getattr lock open)))
                    (allow mplayer_t sysadm_systemd_t (lnk_file (read getattr)))
                    (allow mplayer_t sysadm_systemd_t (process (getattr)))
                    (allow mplayer_t sysadm_systemd_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_327
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require var_lock_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require mrtg_t)
                (typeattributeset cil_gen_require mrtg_runtime_t)
                (typeattributeset cil_gen_require mrtg_initrc_exec_t)
                (typeattributeset cil_gen_require mrtg_var_lib_t)
                (typeattributeset cil_gen_require mrtg_lock_t)
                (typeattributeset cil_gen_require mrtg_log_t)
                (typeattributeset cil_gen_require mrtg_etc_t)
                (allow sysadm_t mrtg_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t mrtg_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t mrtg_t (file (ioctl read getattr lock open)))
                (allow sysadm_t mrtg_t (lnk_file (read getattr)))
                (allow sysadm_t mrtg_t (process (getattr)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t mrtg_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mrtg_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t mrtg_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mrtg_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mrtg_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mrtg_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t mrtg_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mrtg_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mrtg_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mrtg_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mrtg_etc_t (dir (getattr open search)))
                (allow sysadm_t mrtg_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t mrtg_etc_t (dir (getattr open search)))
                (allow sysadm_t mrtg_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t mrtg_etc_t (dir (getattr open search)))
                (allow sysadm_t mrtg_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t mrtg_etc_t (dir (getattr open search)))
                (allow sysadm_t mrtg_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t mrtg_etc_t (dir (getattr open search)))
                (allow sysadm_t mrtg_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_lock_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lock_t (dir (getattr open search)))
                (allow sysadm_t mrtg_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mrtg_lock_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t mrtg_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mrtg_lock_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mrtg_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mrtg_lock_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t mrtg_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mrtg_lock_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mrtg_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mrtg_lock_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mrtg_lock_t (dir (getattr open search)))
                (allow sysadm_t mrtg_lock_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t mrtg_lock_t (dir (getattr open search)))
                (allow sysadm_t mrtg_lock_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t mrtg_lock_t (dir (getattr open search)))
                (allow sysadm_t mrtg_lock_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t mrtg_lock_t (dir (getattr open search)))
                (allow sysadm_t mrtg_lock_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t mrtg_lock_t (dir (getattr open search)))
                (allow sysadm_t mrtg_lock_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t mrtg_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mrtg_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t mrtg_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mrtg_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mrtg_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mrtg_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t mrtg_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mrtg_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mrtg_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mrtg_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mrtg_log_t (dir (getattr open search)))
                (allow sysadm_t mrtg_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t mrtg_log_t (dir (getattr open search)))
                (allow sysadm_t mrtg_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t mrtg_log_t (dir (getattr open search)))
                (allow sysadm_t mrtg_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t mrtg_log_t (dir (getattr open search)))
                (allow sysadm_t mrtg_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t mrtg_log_t (dir (getattr open search)))
                (allow sysadm_t mrtg_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t mrtg_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mrtg_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t mrtg_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mrtg_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mrtg_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mrtg_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t mrtg_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mrtg_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mrtg_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mrtg_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mrtg_runtime_t (dir (getattr open search)))
                (allow sysadm_t mrtg_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t mrtg_runtime_t (dir (getattr open search)))
                (allow sysadm_t mrtg_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t mrtg_runtime_t (dir (getattr open search)))
                (allow sysadm_t mrtg_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t mrtg_runtime_t (dir (getattr open search)))
                (allow sysadm_t mrtg_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t mrtg_runtime_t (dir (getattr open search)))
                (allow sysadm_t mrtg_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t mrtg_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mrtg_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t mrtg_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mrtg_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mrtg_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mrtg_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t mrtg_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mrtg_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mrtg_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mrtg_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mrtg_var_lib_t (dir (getattr open search)))
                (allow sysadm_t mrtg_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t mrtg_var_lib_t (dir (getattr open search)))
                (allow sysadm_t mrtg_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t mrtg_var_lib_t (dir (getattr open search)))
                (allow sysadm_t mrtg_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t mrtg_var_lib_t (dir (getattr open search)))
                (allow sysadm_t mrtg_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t mrtg_var_lib_t (dir (getattr open search)))
                (allow sysadm_t mrtg_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_328
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_329
                (roleattributeset cil_gen_require user_mail_roles)
                (typeattributeset cil_gen_require user_home_dir_t)
                (typeattributeset cil_gen_require home_root_t)
                (typeattributeset cil_gen_require mta_user_agent)
                (typeattributeset cil_gen_require user_mail_t)
                (typeattributeset cil_gen_require sendmail_exec_t)
                (typeattributeset cil_gen_require mail_home_t)
                (typeattributeset cil_gen_require user_mail_tmp_t)
                (typeattributeset cil_gen_require mail_home_rw_t)
                (roleattributeset cil_gen_require sysadm_r)
                (roletype sysadm_r mta_user_agent)
                (roleattributeset cil_gen_require user_mail_roles)
                (roleattributeset user_mail_roles (sysadm_r ))
                (allow sysadm_application_exec_domain sendmail_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_application_exec_domain user_mail_t (process (transition)))
                (dontaudit sysadm_application_exec_domain user_mail_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_application_exec_domain sendmail_exec_t process user_mail_t)
                (allow user_mail_t sysadm_application_exec_domain (fd (use)))
                (allow user_mail_t sysadm_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                (allow user_mail_t sysadm_application_exec_domain (process (sigchld)))
                (allow sysadm_application_exec_domain sendmail_exec_t (lnk_file (read getattr)))
                (allow sysadm_application_exec_domain mta_user_agent (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_application_exec_domain user_mail_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_application_exec_domain mta_user_agent (dir (ioctl read getattr lock open search)))
                (allow sysadm_application_exec_domain user_mail_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_application_exec_domain mta_user_agent (file (ioctl read getattr lock open)))
                (allow sysadm_application_exec_domain user_mail_t (file (ioctl read getattr lock open)))
                (allow sysadm_application_exec_domain mta_user_agent (lnk_file (read getattr)))
                (allow sysadm_application_exec_domain user_mail_t (lnk_file (read getattr)))
                (allow sysadm_application_exec_domain mta_user_agent (process (getattr)))
                (allow sysadm_application_exec_domain user_mail_t (process (getattr)))
                (allow sysadm_t mail_home_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_t mail_home_rw_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t mail_home_rw_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t mail_home_rw_t (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename)))
                (allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_t user_mail_tmp_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t user_mail_tmp_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (typetransition sysadm_t user_home_dir_t dir ".maildir" mail_home_rw_t)
                (typetransition sysadm_t user_home_dir_t dir "Maildir" mail_home_rw_t)
                (typetransition sysadm_t user_home_dir_t file "dead.letter" mail_home_t)
                (typetransition sysadm_t user_home_dir_t file ".mailrc" mail_home_t)
                (typetransition sysadm_t user_home_dir_t file ".forward" mail_home_t)
                (typetransition sysadm_t user_home_dir_t file ".esmtp_queue" mail_home_t)
                (optional sysadm_optional_330
                    (roleattributeset cil_gen_require exim_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require exim_t)
                    (typeattributeset cil_gen_require exim_exec_t)
                    (roleattributeset cil_gen_require exim_roles)
                    (roleattributeset exim_roles (sysadm_r ))
                    (allow sysadm_application_exec_domain bin_t (dir (getattr open search)))
                    (allow sysadm_application_exec_domain bin_t (lnk_file (read getattr)))
                    (allow sysadm_application_exec_domain usr_t (dir (getattr open search)))
                    (allow sysadm_application_exec_domain exim_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_application_exec_domain exim_t (process (transition)))
                    (dontaudit sysadm_application_exec_domain exim_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_application_exec_domain exim_exec_t process exim_t)
                    (allow exim_t sysadm_application_exec_domain (fd (use)))
                    (allow exim_t sysadm_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                    (allow exim_t sysadm_application_exec_domain (process (sigchld)))
                )
                (optional sysadm_optional_331
                    (roleattributeset cil_gen_require mailman_roles)
                    (typeattributeset cil_gen_require lib_t)
                    (typeattributeset cil_gen_require mailman_mail_exec_t)
                    (typeattributeset cil_gen_require mailman_mail_t)
                    (roleattributeset cil_gen_require mailman_roles)
                    (roleattributeset mailman_roles (sysadm_r ))
                    (allow sysadm_application_exec_domain lib_t (dir (getattr open search)))
                    (allow sysadm_application_exec_domain mailman_mail_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_application_exec_domain mailman_mail_t (process (transition)))
                    (dontaudit sysadm_application_exec_domain mailman_mail_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_application_exec_domain mailman_mail_exec_t process mailman_mail_t)
                    (allow mailman_mail_t sysadm_application_exec_domain (fd (use)))
                    (allow mailman_mail_t sysadm_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                    (allow mailman_mail_t sysadm_application_exec_domain (process (sigchld)))
                )
                (optional sysadm_optional_332
                    (typeattributeset cil_gen_require sysadm_systemd_t)
                    (allow sysadm_systemd_t user_mail_t (dir (ioctl read getattr lock open search)))
                    (allow sysadm_systemd_t user_mail_t (file (ioctl read getattr lock open)))
                    (allow sysadm_systemd_t user_mail_t (lnk_file (read getattr)))
                    (allow sysadm_systemd_t user_mail_t (process (getattr)))
                    (allow sysadm_systemd_t user_mail_t (process (sigchld sigkill sigstop signull signal)))
                    (allow user_mail_t sysadm_systemd_t (fd (use)))
                    (allow user_mail_t sysadm_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                    (allow user_mail_t sysadm_systemd_t (dir (ioctl read getattr lock open search)))
                    (allow user_mail_t sysadm_systemd_t (file (ioctl read getattr lock open)))
                    (allow user_mail_t sysadm_systemd_t (lnk_file (read getattr)))
                    (allow user_mail_t sysadm_systemd_t (process (getattr)))
                    (allow user_mail_t sysadm_systemd_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_333
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require munin_runtime_t)
                (typeattributeset cil_gen_require munin_t)
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t munin_runtime_t (dir (getattr open search)))
                (allow sysadm_t munin_runtime_t (sock_file (write getattr append open)))
                (allow sysadm_t munin_t (unix_stream_socket (connectto)))
            )
            (optional sysadm_optional_334
                (roleattributeset cil_gen_require mysqld_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require mysqld_home_t)
                (typeattributeset cil_gen_require mysqld_t)
                (typeattributeset cil_gen_require mysqld_runtime_t)
                (typeattributeset cil_gen_require mysqld_db_t)
                (typeattributeset cil_gen_require mysqld_etc_t)
                (typeattributeset cil_gen_require mysqld_tmp_t)
                (typeattributeset cil_gen_require mysqld_log_t)
                (typeattributeset cil_gen_require mysqld_safe_t)
                (typeattributeset cil_gen_require mysqlmanagerd_t)
                (typeattributeset cil_gen_require mysqlmanagerd_runtime_t)
                (typeattributeset cil_gen_require mysqld_initrc_exec_t)
                (typeattributeset cil_gen_require mysqlmanagerd_initrc_exec_t)
                (typeattributeset cil_gen_require mysqld_exec_t)
                (roleattributeset cil_gen_require mysqld_roles)
                (roleattributeset mysqld_roles (sysadm_r ))
                (allow sysadm_t mysqld_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t mysqld_safe_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t mysqlmanagerd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t mysqld_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t mysqld_safe_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t mysqlmanagerd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t mysqld_t (file (ioctl read getattr lock open)))
                (allow sysadm_t mysqld_safe_t (file (ioctl read getattr lock open)))
                (allow sysadm_t mysqlmanagerd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t mysqld_t (lnk_file (read getattr)))
                (allow sysadm_t mysqld_safe_t (lnk_file (read getattr)))
                (allow sysadm_t mysqlmanagerd_t (lnk_file (read getattr)))
                (allow sysadm_t mysqld_t (process (getattr)))
                (allow sysadm_t mysqld_safe_t (process (getattr)))
                (allow sysadm_t mysqlmanagerd_t (process (getattr)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t mysqld_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mysqlmanagerd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mysqld_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t mysqlmanagerd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t mysqld_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mysqlmanagerd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mysqld_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mysqlmanagerd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mysqld_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mysqlmanagerd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mysqld_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t mysqlmanagerd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t mysqld_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mysqlmanagerd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mysqld_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mysqlmanagerd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mysqld_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mysqlmanagerd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mysqld_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mysqlmanagerd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mysqld_runtime_t (dir (getattr open search)))
                (allow sysadm_t mysqlmanagerd_runtime_t (dir (getattr open search)))
                (allow sysadm_t mysqld_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t mysqlmanagerd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t mysqld_runtime_t (dir (getattr open search)))
                (allow sysadm_t mysqlmanagerd_runtime_t (dir (getattr open search)))
                (allow sysadm_t mysqld_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t mysqlmanagerd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t mysqld_runtime_t (dir (getattr open search)))
                (allow sysadm_t mysqlmanagerd_runtime_t (dir (getattr open search)))
                (allow sysadm_t mysqld_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t mysqlmanagerd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t mysqld_runtime_t (dir (getattr open search)))
                (allow sysadm_t mysqlmanagerd_runtime_t (dir (getattr open search)))
                (allow sysadm_t mysqld_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t mysqlmanagerd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t mysqld_runtime_t (dir (getattr open search)))
                (allow sysadm_t mysqlmanagerd_runtime_t (dir (getattr open search)))
                (allow sysadm_t mysqld_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t mysqlmanagerd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t mysqld_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mysqld_db_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t mysqld_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mysqld_db_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mysqld_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mysqld_db_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t mysqld_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mysqld_db_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mysqld_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mysqld_db_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mysqld_db_t (dir (getattr open search)))
                (allow sysadm_t mysqld_db_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t mysqld_db_t (dir (getattr open search)))
                (allow sysadm_t mysqld_db_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t mysqld_db_t (dir (getattr open search)))
                (allow sysadm_t mysqld_db_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t mysqld_db_t (dir (getattr open search)))
                (allow sysadm_t mysqld_db_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t mysqld_db_t (dir (getattr open search)))
                (allow sysadm_t mysqld_db_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t mysqld_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mysqld_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mysqld_home_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t mysqld_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t mysqld_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mysqld_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mysqld_home_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mysqld_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mysqld_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mysqld_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mysqld_home_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t mysqld_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t mysqld_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mysqld_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mysqld_home_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mysqld_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mysqld_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mysqld_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mysqld_home_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mysqld_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mysqld_home_t (dir (getattr open search)))
                (allow sysadm_t mysqld_etc_t (dir (getattr open search)))
                (allow sysadm_t mysqld_home_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t mysqld_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t mysqld_home_t (dir (getattr open search)))
                (allow sysadm_t mysqld_etc_t (dir (getattr open search)))
                (allow sysadm_t mysqld_home_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t mysqld_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t mysqld_home_t (dir (getattr open search)))
                (allow sysadm_t mysqld_etc_t (dir (getattr open search)))
                (allow sysadm_t mysqld_home_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t mysqld_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t mysqld_home_t (dir (getattr open search)))
                (allow sysadm_t mysqld_etc_t (dir (getattr open search)))
                (allow sysadm_t mysqld_home_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t mysqld_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t mysqld_home_t (dir (getattr open search)))
                (allow sysadm_t mysqld_etc_t (dir (getattr open search)))
                (allow sysadm_t mysqld_home_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t mysqld_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t mysqld_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mysqld_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t mysqld_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mysqld_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mysqld_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mysqld_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t mysqld_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mysqld_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mysqld_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mysqld_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mysqld_log_t (dir (getattr open search)))
                (allow sysadm_t mysqld_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t mysqld_log_t (dir (getattr open search)))
                (allow sysadm_t mysqld_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t mysqld_log_t (dir (getattr open search)))
                (allow sysadm_t mysqld_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t mysqld_log_t (dir (getattr open search)))
                (allow sysadm_t mysqld_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t mysqld_log_t (dir (getattr open search)))
                (allow sysadm_t mysqld_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (getattr open search)))
                (allow sysadm_t mysqld_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mysqld_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t mysqld_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mysqld_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mysqld_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mysqld_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t mysqld_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mysqld_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mysqld_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mysqld_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mysqld_tmp_t (dir (getattr open search)))
                (allow sysadm_t mysqld_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t mysqld_tmp_t (dir (getattr open search)))
                (allow sysadm_t mysqld_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t mysqld_tmp_t (dir (getattr open search)))
                (allow sysadm_t mysqld_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t mysqld_tmp_t (dir (getattr open search)))
                (allow sysadm_t mysqld_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t mysqld_tmp_t (dir (getattr open search)))
                (allow sysadm_t mysqld_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t mysqld_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t mysqld_t (process (transition)))
                (dontaudit sysadm_t mysqld_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t mysqld_exec_t process mysqld_t)
                (allow mysqld_t sysadm_t (fd (use)))
                (allow mysqld_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow mysqld_t sysadm_t (process (sigchld)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t mysqld_runtime_t (dir (getattr open search)))
                (allow sysadm_t mysqld_db_t (dir (getattr open search)))
                (allow sysadm_t mysqld_runtime_t (sock_file (write getattr append open)))
                (allow sysadm_t mysqld_t (unix_stream_socket (connectto)))
                (optional sysadm_optional_335
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                    (optional sysadm_optional_336
                        (roleattributeset cil_gen_require run_init_roles)
                        (typeattributeset cil_gen_require bin_t)
                        (typeattributeset cil_gen_require usr_t)
                        (typeattributeset cil_gen_require run_init_t)
                        (typeattributeset cil_gen_require run_init_exec_t)
                        (roleattributeset cil_gen_require run_init_roles)
                        (roleattributeset run_init_roles (sysadm_r ))
                        (allow sysadm_t usr_t (dir (getattr open search)))
                        (allow sysadm_t bin_t (dir (getattr open search)))
                        (allow sysadm_t bin_t (lnk_file (read getattr)))
                        (allow sysadm_t usr_t (dir (getattr open search)))
                        (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                        (allow sysadm_t run_init_t (process (transition)))
                        (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                        (typetransition sysadm_t run_init_exec_t process run_init_t)
                        (allow run_init_t sysadm_t (fd (use)))
                        (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                        (allow run_init_t sysadm_t (process (sigchld)))
                    )
                )
            )
            (optional sysadm_optional_337
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require var_spool_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require nagios_plugin_domain)
                (typeattributeset cil_gen_require nagios_t)
                (typeattributeset cil_gen_require nrpe_t)
                (typeattributeset cil_gen_require nagios_initrc_exec_t)
                (typeattributeset cil_gen_require nagios_tmp_t)
                (typeattributeset cil_gen_require nagios_log_t)
                (typeattributeset cil_gen_require nagios_var_lib_t)
                (typeattributeset cil_gen_require nagios_etc_t)
                (typeattributeset cil_gen_require nrpe_etc_t)
                (typeattributeset cil_gen_require nrpe_runtime_t)
                (typeattributeset cil_gen_require nagios_spool_t)
                (typeattributeset cil_gen_require nagios_runtime_t)
                (typeattributeset cil_gen_require nagios_system_plugin_tmp_t)
                (typeattributeset cil_gen_require nagios_eventhandler_plugin_tmp_t)
                (allow sysadm_t nagios_plugin_domain (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t nagios_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t nrpe_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t nagios_plugin_domain (dir (ioctl read getattr lock open search)))
                (allow sysadm_t nagios_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t nrpe_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t nagios_plugin_domain (file (ioctl read getattr lock open)))
                (allow sysadm_t nagios_t (file (ioctl read getattr lock open)))
                (allow sysadm_t nrpe_t (file (ioctl read getattr lock open)))
                (allow sysadm_t nagios_plugin_domain (lnk_file (read getattr)))
                (allow sysadm_t nagios_t (lnk_file (read getattr)))
                (allow sysadm_t nrpe_t (lnk_file (read getattr)))
                (allow sysadm_t nagios_plugin_domain (process (getattr)))
                (allow sysadm_t nagios_t (process (getattr)))
                (allow sysadm_t nrpe_t (process (getattr)))
                (allow sysadm_t tmp_t (dir (getattr open search)))
                (allow sysadm_t nagios_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nagios_system_plugin_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nagios_eventhandler_plugin_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nagios_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t nagios_system_plugin_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t nagios_eventhandler_plugin_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t nagios_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nagios_system_plugin_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nagios_eventhandler_plugin_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nagios_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nagios_system_plugin_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nagios_eventhandler_plugin_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nagios_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nagios_system_plugin_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nagios_eventhandler_plugin_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nagios_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t nagios_system_plugin_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t nagios_eventhandler_plugin_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t nagios_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nagios_system_plugin_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nagios_eventhandler_plugin_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nagios_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nagios_system_plugin_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nagios_eventhandler_plugin_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nagios_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nagios_system_plugin_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nagios_eventhandler_plugin_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nagios_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nagios_system_plugin_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nagios_eventhandler_plugin_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nagios_tmp_t (dir (getattr open search)))
                (allow sysadm_t nagios_system_plugin_tmp_t (dir (getattr open search)))
                (allow sysadm_t nagios_eventhandler_plugin_tmp_t (dir (getattr open search)))
                (allow sysadm_t nagios_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t nagios_system_plugin_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t nagios_eventhandler_plugin_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t nagios_tmp_t (dir (getattr open search)))
                (allow sysadm_t nagios_system_plugin_tmp_t (dir (getattr open search)))
                (allow sysadm_t nagios_eventhandler_plugin_tmp_t (dir (getattr open search)))
                (allow sysadm_t nagios_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t nagios_system_plugin_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t nagios_eventhandler_plugin_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t nagios_tmp_t (dir (getattr open search)))
                (allow sysadm_t nagios_system_plugin_tmp_t (dir (getattr open search)))
                (allow sysadm_t nagios_eventhandler_plugin_tmp_t (dir (getattr open search)))
                (allow sysadm_t nagios_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nagios_system_plugin_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nagios_eventhandler_plugin_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nagios_tmp_t (dir (getattr open search)))
                (allow sysadm_t nagios_system_plugin_tmp_t (dir (getattr open search)))
                (allow sysadm_t nagios_eventhandler_plugin_tmp_t (dir (getattr open search)))
                (allow sysadm_t nagios_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nagios_system_plugin_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nagios_eventhandler_plugin_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nagios_tmp_t (dir (getattr open search)))
                (allow sysadm_t nagios_system_plugin_tmp_t (dir (getattr open search)))
                (allow sysadm_t nagios_eventhandler_plugin_tmp_t (dir (getattr open search)))
                (allow sysadm_t nagios_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nagios_system_plugin_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nagios_eventhandler_plugin_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t nagios_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nagios_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t nagios_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nagios_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nagios_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nagios_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t nagios_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nagios_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nagios_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nagios_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nagios_log_t (dir (getattr open search)))
                (allow sysadm_t nagios_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t nagios_log_t (dir (getattr open search)))
                (allow sysadm_t nagios_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t nagios_log_t (dir (getattr open search)))
                (allow sysadm_t nagios_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nagios_log_t (dir (getattr open search)))
                (allow sysadm_t nagios_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nagios_log_t (dir (getattr open search)))
                (allow sysadm_t nagios_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t nagios_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nrpe_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nagios_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t nrpe_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t nagios_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nrpe_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nagios_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nrpe_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nagios_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nrpe_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nagios_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t nrpe_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t nagios_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nrpe_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nagios_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nrpe_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nagios_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nrpe_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nagios_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nrpe_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nagios_etc_t (dir (getattr open search)))
                (allow sysadm_t nrpe_etc_t (dir (getattr open search)))
                (allow sysadm_t nagios_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t nrpe_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t nagios_etc_t (dir (getattr open search)))
                (allow sysadm_t nrpe_etc_t (dir (getattr open search)))
                (allow sysadm_t nagios_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t nrpe_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t nagios_etc_t (dir (getattr open search)))
                (allow sysadm_t nrpe_etc_t (dir (getattr open search)))
                (allow sysadm_t nagios_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nrpe_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nagios_etc_t (dir (getattr open search)))
                (allow sysadm_t nrpe_etc_t (dir (getattr open search)))
                (allow sysadm_t nagios_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nrpe_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nagios_etc_t (dir (getattr open search)))
                (allow sysadm_t nrpe_etc_t (dir (getattr open search)))
                (allow sysadm_t nagios_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nrpe_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_spool_t (dir (getattr open search)))
                (allow sysadm_t nagios_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nagios_spool_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t nagios_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nagios_spool_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nagios_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nagios_spool_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t nagios_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nagios_spool_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nagios_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nagios_spool_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nagios_spool_t (dir (getattr open search)))
                (allow sysadm_t nagios_spool_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t nagios_spool_t (dir (getattr open search)))
                (allow sysadm_t nagios_spool_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t nagios_spool_t (dir (getattr open search)))
                (allow sysadm_t nagios_spool_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nagios_spool_t (dir (getattr open search)))
                (allow sysadm_t nagios_spool_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nagios_spool_t (dir (getattr open search)))
                (allow sysadm_t nagios_spool_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t nrpe_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nagios_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nrpe_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t nagios_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t nrpe_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nagios_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nrpe_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nagios_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nrpe_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nagios_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nrpe_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t nagios_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t nrpe_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nagios_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nrpe_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nagios_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nrpe_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nagios_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nrpe_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nagios_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nrpe_runtime_t (dir (getattr open search)))
                (allow sysadm_t nagios_runtime_t (dir (getattr open search)))
                (allow sysadm_t nrpe_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t nagios_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t nrpe_runtime_t (dir (getattr open search)))
                (allow sysadm_t nagios_runtime_t (dir (getattr open search)))
                (allow sysadm_t nrpe_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t nagios_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t nrpe_runtime_t (dir (getattr open search)))
                (allow sysadm_t nagios_runtime_t (dir (getattr open search)))
                (allow sysadm_t nrpe_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nagios_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nrpe_runtime_t (dir (getattr open search)))
                (allow sysadm_t nagios_runtime_t (dir (getattr open search)))
                (allow sysadm_t nrpe_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nagios_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nrpe_runtime_t (dir (getattr open search)))
                (allow sysadm_t nagios_runtime_t (dir (getattr open search)))
                (allow sysadm_t nrpe_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nagios_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t nagios_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nagios_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t nagios_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nagios_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nagios_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nagios_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t nagios_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nagios_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nagios_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nagios_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nagios_var_lib_t (dir (getattr open search)))
                (allow sysadm_t nagios_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t nagios_var_lib_t (dir (getattr open search)))
                (allow sysadm_t nagios_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t nagios_var_lib_t (dir (getattr open search)))
                (allow sysadm_t nagios_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nagios_var_lib_t (dir (getattr open search)))
                (allow sysadm_t nagios_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nagios_var_lib_t (dir (getattr open search)))
                (allow sysadm_t nagios_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_338
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_339
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require nessusd_t)
                (typeattributeset cil_gen_require nessusd_db_t)
                (typeattributeset cil_gen_require nessusd_initrc_exec_t)
                (typeattributeset cil_gen_require nessusd_etc_t)
                (typeattributeset cil_gen_require nessusd_log_t)
                (typeattributeset cil_gen_require nessusd_runtime_t)
                (allow sysadm_t nessusd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t nessusd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t nessusd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t nessusd_t (lnk_file (read getattr)))
                (allow sysadm_t nessusd_t (process (getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t nessusd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nessusd_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t nessusd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nessusd_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nessusd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nessusd_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t nessusd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nessusd_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nessusd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nessusd_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nessusd_log_t (dir (getattr open search)))
                (allow sysadm_t nessusd_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t nessusd_log_t (dir (getattr open search)))
                (allow sysadm_t nessusd_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t nessusd_log_t (dir (getattr open search)))
                (allow sysadm_t nessusd_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nessusd_log_t (dir (getattr open search)))
                (allow sysadm_t nessusd_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nessusd_log_t (dir (getattr open search)))
                (allow sysadm_t nessusd_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t nessusd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nessusd_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t nessusd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nessusd_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nessusd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nessusd_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t nessusd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nessusd_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nessusd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nessusd_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nessusd_etc_t (dir (getattr open search)))
                (allow sysadm_t nessusd_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t nessusd_etc_t (dir (getattr open search)))
                (allow sysadm_t nessusd_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t nessusd_etc_t (dir (getattr open search)))
                (allow sysadm_t nessusd_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nessusd_etc_t (dir (getattr open search)))
                (allow sysadm_t nessusd_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nessusd_etc_t (dir (getattr open search)))
                (allow sysadm_t nessusd_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t nessusd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nessusd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t nessusd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nessusd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nessusd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nessusd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t nessusd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nessusd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nessusd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nessusd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nessusd_runtime_t (dir (getattr open search)))
                (allow sysadm_t nessusd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t nessusd_runtime_t (dir (getattr open search)))
                (allow sysadm_t nessusd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t nessusd_runtime_t (dir (getattr open search)))
                (allow sysadm_t nessusd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nessusd_runtime_t (dir (getattr open search)))
                (allow sysadm_t nessusd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nessusd_runtime_t (dir (getattr open search)))
                (allow sysadm_t nessusd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t nessusd_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nessusd_db_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t nessusd_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nessusd_db_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nessusd_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nessusd_db_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t nessusd_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nessusd_db_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nessusd_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nessusd_db_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nessusd_db_t (dir (getattr open search)))
                (allow sysadm_t nessusd_db_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t nessusd_db_t (dir (getattr open search)))
                (allow sysadm_t nessusd_db_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t nessusd_db_t (dir (getattr open search)))
                (allow sysadm_t nessusd_db_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nessusd_db_t (dir (getattr open search)))
                (allow sysadm_t nessusd_db_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nessusd_db_t (dir (getattr open search)))
                (allow sysadm_t nessusd_db_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_340
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_341
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require netutils_t)
                (typeattributeset cil_gen_require netutils_exec_t)
                (typeattributeset cil_gen_require ping_t)
                (typeattributeset cil_gen_require ping_exec_t)
                (typeattributeset cil_gen_require traceroute_t)
                (typeattributeset cil_gen_require traceroute_exec_t)
                (roleattributeset cil_gen_require sysadm_r)
                (roletype sysadm_r netutils_t)
                (roletype sysadm_r ping_t)
                (roletype sysadm_r traceroute_t)
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t netutils_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t netutils_t (process (transition)))
                (dontaudit sysadm_t netutils_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t netutils_exec_t process netutils_t)
                (allow netutils_t sysadm_t (fd (use)))
                (allow netutils_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow netutils_t sysadm_t (process (sigchld)))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t ping_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t ping_t (process (transition)))
                (dontaudit sysadm_t ping_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t ping_exec_t process ping_t)
                (allow ping_t sysadm_t (fd (use)))
                (allow ping_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow ping_t sysadm_t (process (sigchld)))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t traceroute_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t traceroute_t (process (transition)))
                (dontaudit sysadm_t traceroute_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t traceroute_exec_t process traceroute_t)
                (allow traceroute_t sysadm_t (fd (use)))
                (allow traceroute_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow traceroute_t sysadm_t (process (sigchld)))
            )
            (optional sysadm_optional_342
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require NetworkManager_t)
                (typeattributeset cil_gen_require NetworkManager_initrc_exec_t)
                (typeattributeset cil_gen_require NetworkManager_etc_t)
                (typeattributeset cil_gen_require NetworkManager_etc_rw_t)
                (typeattributeset cil_gen_require NetworkManager_log_t)
                (typeattributeset cil_gen_require NetworkManager_tmp_t)
                (typeattributeset cil_gen_require NetworkManager_var_lib_t)
                (typeattributeset cil_gen_require NetworkManager_runtime_t)
                (typeattributeset cil_gen_require wpa_cli_t)
                (allow sysadm_t NetworkManager_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t wpa_cli_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t NetworkManager_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t wpa_cli_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t NetworkManager_t (file (ioctl read getattr lock open)))
                (allow sysadm_t wpa_cli_t (file (ioctl read getattr lock open)))
                (allow sysadm_t NetworkManager_t (lnk_file (read getattr)))
                (allow sysadm_t wpa_cli_t (lnk_file (read getattr)))
                (allow sysadm_t NetworkManager_t (process (getattr)))
                (allow sysadm_t wpa_cli_t (process (getattr)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t NetworkManager_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t NetworkManager_etc_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t NetworkManager_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t NetworkManager_etc_rw_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t NetworkManager_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t NetworkManager_etc_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t NetworkManager_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t NetworkManager_etc_rw_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t NetworkManager_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t NetworkManager_etc_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t NetworkManager_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t NetworkManager_etc_rw_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t NetworkManager_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t NetworkManager_etc_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t NetworkManager_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t NetworkManager_etc_rw_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t NetworkManager_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t NetworkManager_etc_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t NetworkManager_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t NetworkManager_etc_rw_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t NetworkManager_etc_t (dir (getattr open search)))
                (allow sysadm_t NetworkManager_etc_rw_t (dir (getattr open search)))
                (allow sysadm_t NetworkManager_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t NetworkManager_etc_rw_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t NetworkManager_etc_t (dir (getattr open search)))
                (allow sysadm_t NetworkManager_etc_rw_t (dir (getattr open search)))
                (allow sysadm_t NetworkManager_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t NetworkManager_etc_rw_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t NetworkManager_etc_t (dir (getattr open search)))
                (allow sysadm_t NetworkManager_etc_rw_t (dir (getattr open search)))
                (allow sysadm_t NetworkManager_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t NetworkManager_etc_rw_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t NetworkManager_etc_t (dir (getattr open search)))
                (allow sysadm_t NetworkManager_etc_rw_t (dir (getattr open search)))
                (allow sysadm_t NetworkManager_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t NetworkManager_etc_rw_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t NetworkManager_etc_t (dir (getattr open search)))
                (allow sysadm_t NetworkManager_etc_rw_t (dir (getattr open search)))
                (allow sysadm_t NetworkManager_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t NetworkManager_etc_rw_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t NetworkManager_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t NetworkManager_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t NetworkManager_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t NetworkManager_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t NetworkManager_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t NetworkManager_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t NetworkManager_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t NetworkManager_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t NetworkManager_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t NetworkManager_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t NetworkManager_log_t (dir (getattr open search)))
                (allow sysadm_t NetworkManager_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t NetworkManager_log_t (dir (getattr open search)))
                (allow sysadm_t NetworkManager_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t NetworkManager_log_t (dir (getattr open search)))
                (allow sysadm_t NetworkManager_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t NetworkManager_log_t (dir (getattr open search)))
                (allow sysadm_t NetworkManager_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t NetworkManager_log_t (dir (getattr open search)))
                (allow sysadm_t NetworkManager_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t NetworkManager_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t NetworkManager_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t NetworkManager_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t NetworkManager_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t NetworkManager_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t NetworkManager_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t NetworkManager_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t NetworkManager_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t NetworkManager_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t NetworkManager_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t NetworkManager_var_lib_t (dir (getattr open search)))
                (allow sysadm_t NetworkManager_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t NetworkManager_var_lib_t (dir (getattr open search)))
                (allow sysadm_t NetworkManager_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t NetworkManager_var_lib_t (dir (getattr open search)))
                (allow sysadm_t NetworkManager_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t NetworkManager_var_lib_t (dir (getattr open search)))
                (allow sysadm_t NetworkManager_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t NetworkManager_var_lib_t (dir (getattr open search)))
                (allow sysadm_t NetworkManager_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t NetworkManager_var_lib_t (file (map)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t NetworkManager_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t NetworkManager_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t NetworkManager_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t NetworkManager_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t NetworkManager_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t NetworkManager_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t NetworkManager_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t NetworkManager_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t NetworkManager_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t NetworkManager_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t NetworkManager_runtime_t (dir (getattr open search)))
                (allow sysadm_t NetworkManager_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t NetworkManager_runtime_t (dir (getattr open search)))
                (allow sysadm_t NetworkManager_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t NetworkManager_runtime_t (dir (getattr open search)))
                (allow sysadm_t NetworkManager_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t NetworkManager_runtime_t (dir (getattr open search)))
                (allow sysadm_t NetworkManager_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t NetworkManager_runtime_t (dir (getattr open search)))
                (allow sysadm_t NetworkManager_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (getattr open search)))
                (allow sysadm_t NetworkManager_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t NetworkManager_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t NetworkManager_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t NetworkManager_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t NetworkManager_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t NetworkManager_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t NetworkManager_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t NetworkManager_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t NetworkManager_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t NetworkManager_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t NetworkManager_tmp_t (dir (getattr open search)))
                (allow sysadm_t NetworkManager_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t NetworkManager_tmp_t (dir (getattr open search)))
                (allow sysadm_t NetworkManager_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t NetworkManager_tmp_t (dir (getattr open search)))
                (allow sysadm_t NetworkManager_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t NetworkManager_tmp_t (dir (getattr open search)))
                (allow sysadm_t NetworkManager_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t NetworkManager_tmp_t (dir (getattr open search)))
                (allow sysadm_t NetworkManager_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_343
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_344
                (roleattributeset cil_gen_require ypbind_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require ypbind_t)
                (typeattributeset cil_gen_require yppasswdd_t)
                (typeattributeset cil_gen_require ypserv_t)
                (typeattributeset cil_gen_require ypxfr_t)
                (typeattributeset cil_gen_require ypbind_tmp_t)
                (typeattributeset cil_gen_require ypserv_tmp_t)
                (typeattributeset cil_gen_require ypserv_conf_t)
                (typeattributeset cil_gen_require ypbind_runtime_t)
                (typeattributeset cil_gen_require yppasswdd_runtime_t)
                (typeattributeset cil_gen_require ypserv_runtime_t)
                (typeattributeset cil_gen_require ypbind_initrc_exec_t)
                (typeattributeset cil_gen_require nis_initrc_exec_t)
                (typeattributeset cil_gen_require var_yp_t)
                (typeattributeset cil_gen_require ypbind_exec_t)
                (roleattributeset cil_gen_require ypbind_roles)
                (roleattributeset ypbind_roles (sysadm_r ))
                (allow sysadm_t ypbind_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t yppasswdd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t ypserv_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t ypxfr_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t ypbind_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t yppasswdd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t ypserv_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t ypxfr_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t ypbind_t (file (ioctl read getattr lock open)))
                (allow sysadm_t yppasswdd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t ypserv_t (file (ioctl read getattr lock open)))
                (allow sysadm_t ypxfr_t (file (ioctl read getattr lock open)))
                (allow sysadm_t ypbind_t (lnk_file (read getattr)))
                (allow sysadm_t yppasswdd_t (lnk_file (read getattr)))
                (allow sysadm_t ypserv_t (lnk_file (read getattr)))
                (allow sysadm_t ypxfr_t (lnk_file (read getattr)))
                (allow sysadm_t ypbind_t (process (getattr)))
                (allow sysadm_t yppasswdd_t (process (getattr)))
                (allow sysadm_t ypserv_t (process (getattr)))
                (allow sysadm_t ypxfr_t (process (getattr)))
                (allow sysadm_t tmp_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t ypbind_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ypserv_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ypbind_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t ypserv_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t ypbind_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ypserv_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ypbind_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ypserv_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ypbind_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ypserv_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ypbind_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t ypserv_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t ypbind_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ypserv_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ypbind_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ypserv_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ypbind_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ypserv_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ypbind_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ypserv_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ypbind_tmp_t (dir (getattr open search)))
                (allow sysadm_t ypserv_tmp_t (dir (getattr open search)))
                (allow sysadm_t ypbind_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t ypserv_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t ypbind_tmp_t (dir (getattr open search)))
                (allow sysadm_t ypserv_tmp_t (dir (getattr open search)))
                (allow sysadm_t ypbind_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t ypserv_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t ypbind_tmp_t (dir (getattr open search)))
                (allow sysadm_t ypserv_tmp_t (dir (getattr open search)))
                (allow sysadm_t ypbind_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ypserv_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ypbind_tmp_t (dir (getattr open search)))
                (allow sysadm_t ypserv_tmp_t (dir (getattr open search)))
                (allow sysadm_t ypbind_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ypserv_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ypbind_tmp_t (dir (getattr open search)))
                (allow sysadm_t ypserv_tmp_t (dir (getattr open search)))
                (allow sysadm_t ypbind_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ypserv_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t ypbind_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t yppasswdd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ypserv_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ypbind_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t yppasswdd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t ypserv_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t ypbind_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t yppasswdd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ypserv_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ypbind_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t yppasswdd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ypserv_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ypbind_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t yppasswdd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ypserv_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ypbind_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t yppasswdd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t ypserv_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t ypbind_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t yppasswdd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ypserv_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ypbind_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t yppasswdd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ypserv_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ypbind_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t yppasswdd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ypserv_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ypbind_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t yppasswdd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ypserv_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ypbind_runtime_t (dir (getattr open search)))
                (allow sysadm_t yppasswdd_runtime_t (dir (getattr open search)))
                (allow sysadm_t ypserv_runtime_t (dir (getattr open search)))
                (allow sysadm_t ypbind_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t yppasswdd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t ypserv_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t ypbind_runtime_t (dir (getattr open search)))
                (allow sysadm_t yppasswdd_runtime_t (dir (getattr open search)))
                (allow sysadm_t ypserv_runtime_t (dir (getattr open search)))
                (allow sysadm_t ypbind_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t yppasswdd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t ypserv_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t ypbind_runtime_t (dir (getattr open search)))
                (allow sysadm_t yppasswdd_runtime_t (dir (getattr open search)))
                (allow sysadm_t ypserv_runtime_t (dir (getattr open search)))
                (allow sysadm_t ypbind_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t yppasswdd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ypserv_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ypbind_runtime_t (dir (getattr open search)))
                (allow sysadm_t yppasswdd_runtime_t (dir (getattr open search)))
                (allow sysadm_t ypserv_runtime_t (dir (getattr open search)))
                (allow sysadm_t ypbind_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t yppasswdd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ypserv_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ypbind_runtime_t (dir (getattr open search)))
                (allow sysadm_t yppasswdd_runtime_t (dir (getattr open search)))
                (allow sysadm_t ypserv_runtime_t (dir (getattr open search)))
                (allow sysadm_t ypbind_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t yppasswdd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ypserv_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t ypserv_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ypserv_conf_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t ypserv_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ypserv_conf_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ypserv_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ypserv_conf_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t ypserv_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ypserv_conf_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ypserv_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ypserv_conf_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ypserv_conf_t (dir (getattr open search)))
                (allow sysadm_t ypserv_conf_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t ypserv_conf_t (dir (getattr open search)))
                (allow sysadm_t ypserv_conf_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t ypserv_conf_t (dir (getattr open search)))
                (allow sysadm_t ypserv_conf_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ypserv_conf_t (dir (getattr open search)))
                (allow sysadm_t ypserv_conf_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ypserv_conf_t (dir (getattr open search)))
                (allow sysadm_t ypserv_conf_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_yp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t var_yp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t var_yp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t var_yp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t var_yp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t var_yp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t var_yp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t var_yp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t var_yp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t var_yp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t var_yp_t (dir (getattr open search)))
                (allow sysadm_t var_yp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t var_yp_t (dir (getattr open search)))
                (allow sysadm_t var_yp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_yp_t (dir (getattr open search)))
                (allow sysadm_t var_yp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_yp_t (dir (getattr open search)))
                (allow sysadm_t var_yp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_yp_t (dir (getattr open search)))
                (allow sysadm_t var_yp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t ypbind_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t ypbind_t (process (transition)))
                (dontaudit sysadm_t ypbind_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t ypbind_exec_t process ypbind_t)
                (allow ypbind_t sysadm_t (fd (use)))
                (allow ypbind_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow ypbind_t sysadm_t (process (sigchld)))
                (optional sysadm_optional_345
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                    (optional sysadm_optional_346
                        (roleattributeset cil_gen_require run_init_roles)
                        (typeattributeset cil_gen_require bin_t)
                        (typeattributeset cil_gen_require usr_t)
                        (typeattributeset cil_gen_require run_init_t)
                        (typeattributeset cil_gen_require run_init_exec_t)
                        (roleattributeset cil_gen_require run_init_roles)
                        (roleattributeset run_init_roles (sysadm_r ))
                        (allow sysadm_t usr_t (dir (getattr open search)))
                        (allow sysadm_t bin_t (dir (getattr open search)))
                        (allow sysadm_t bin_t (lnk_file (read getattr)))
                        (allow sysadm_t usr_t (dir (getattr open search)))
                        (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                        (allow sysadm_t run_init_t (process (transition)))
                        (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                        (typetransition sysadm_t run_init_exec_t process run_init_t)
                        (allow run_init_t sysadm_t (fd (use)))
                        (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                        (allow run_init_t sysadm_t (process (sigchld)))
                    )
                )
            )
            (optional sysadm_optional_347
                (roleattributeset cil_gen_require nscd_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require nscd_t)
                (typeattributeset cil_gen_require nscd_log_t)
                (typeattributeset cil_gen_require nscd_runtime_t)
                (typeattributeset cil_gen_require nscd_initrc_exec_t)
                (typeattributeset cil_gen_require nscd_exec_t)
                (roleattributeset cil_gen_require nscd_roles)
                (roleattributeset nscd_roles (sysadm_r ))
                (allow sysadm_t nscd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t nscd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t nscd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t nscd_t (lnk_file (read getattr)))
                (allow sysadm_t nscd_t (process (getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t nscd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nscd_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t nscd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nscd_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nscd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nscd_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t nscd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nscd_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nscd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nscd_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nscd_log_t (dir (getattr open search)))
                (allow sysadm_t nscd_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t nscd_log_t (dir (getattr open search)))
                (allow sysadm_t nscd_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t nscd_log_t (dir (getattr open search)))
                (allow sysadm_t nscd_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nscd_log_t (dir (getattr open search)))
                (allow sysadm_t nscd_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nscd_log_t (dir (getattr open search)))
                (allow sysadm_t nscd_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t nscd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nscd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t nscd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nscd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nscd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nscd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t nscd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nscd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nscd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nscd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nscd_runtime_t (dir (getattr open search)))
                (allow sysadm_t nscd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t nscd_runtime_t (dir (getattr open search)))
                (allow sysadm_t nscd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t nscd_runtime_t (dir (getattr open search)))
                (allow sysadm_t nscd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nscd_runtime_t (dir (getattr open search)))
                (allow sysadm_t nscd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nscd_runtime_t (dir (getattr open search)))
                (allow sysadm_t nscd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t nscd_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t nscd_t (process (transition)))
                (dontaudit sysadm_t nscd_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t nscd_exec_t process nscd_t)
                (allow nscd_t sysadm_t (fd (use)))
                (allow nscd_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow nscd_t sysadm_t (process (sigchld)))
                (optional sysadm_optional_348
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_349
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require nsd_t)
                (typeattributeset cil_gen_require nsd_conf_t)
                (typeattributeset cil_gen_require nsd_runtime_t)
                (typeattributeset cil_gen_require nsd_initrc_exec_t)
                (typeattributeset cil_gen_require nsd_db_t)
                (typeattributeset cil_gen_require nsd_zone_t)
                (allow sysadm_t nsd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t nsd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t nsd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t nsd_t (lnk_file (read getattr)))
                (allow sysadm_t nsd_t (process (getattr)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t nsd_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nsd_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nsd_conf_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t nsd_db_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t nsd_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nsd_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nsd_conf_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nsd_db_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nsd_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nsd_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nsd_conf_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t nsd_db_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t nsd_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nsd_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nsd_conf_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nsd_db_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nsd_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nsd_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nsd_conf_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nsd_db_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nsd_conf_t (dir (getattr open search)))
                (allow sysadm_t nsd_db_t (dir (getattr open search)))
                (allow sysadm_t nsd_conf_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t nsd_db_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t nsd_conf_t (dir (getattr open search)))
                (allow sysadm_t nsd_db_t (dir (getattr open search)))
                (allow sysadm_t nsd_conf_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t nsd_db_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t nsd_conf_t (dir (getattr open search)))
                (allow sysadm_t nsd_db_t (dir (getattr open search)))
                (allow sysadm_t nsd_conf_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nsd_db_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nsd_conf_t (dir (getattr open search)))
                (allow sysadm_t nsd_db_t (dir (getattr open search)))
                (allow sysadm_t nsd_conf_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nsd_db_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nsd_conf_t (dir (getattr open search)))
                (allow sysadm_t nsd_db_t (dir (getattr open search)))
                (allow sysadm_t nsd_conf_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nsd_db_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t nsd_zone_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nsd_zone_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t nsd_zone_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nsd_zone_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nsd_zone_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nsd_zone_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t nsd_zone_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nsd_zone_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nsd_zone_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nsd_zone_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nsd_zone_t (dir (getattr open search)))
                (allow sysadm_t nsd_zone_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t nsd_zone_t (dir (getattr open search)))
                (allow sysadm_t nsd_zone_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t nsd_zone_t (dir (getattr open search)))
                (allow sysadm_t nsd_zone_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nsd_zone_t (dir (getattr open search)))
                (allow sysadm_t nsd_zone_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nsd_zone_t (dir (getattr open search)))
                (allow sysadm_t nsd_zone_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t nsd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nsd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t nsd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nsd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nsd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nsd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t nsd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nsd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nsd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nsd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nsd_runtime_t (dir (getattr open search)))
                (allow sysadm_t nsd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t nsd_runtime_t (dir (getattr open search)))
                (allow sysadm_t nsd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t nsd_runtime_t (dir (getattr open search)))
                (allow sysadm_t nsd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nsd_runtime_t (dir (getattr open search)))
                (allow sysadm_t nsd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nsd_runtime_t (dir (getattr open search)))
                (allow sysadm_t nsd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_350
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_351
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require nslcd_t)
                (typeattributeset cil_gen_require nslcd_initrc_exec_t)
                (typeattributeset cil_gen_require nslcd_runtime_t)
                (typeattributeset cil_gen_require nslcd_conf_t)
                (allow sysadm_t nslcd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t nslcd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t nslcd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t nslcd_t (lnk_file (read getattr)))
                (allow sysadm_t nslcd_t (process (getattr)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t nslcd_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nslcd_conf_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t nslcd_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nslcd_conf_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nslcd_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nslcd_conf_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t nslcd_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nslcd_conf_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nslcd_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nslcd_conf_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nslcd_conf_t (dir (getattr open search)))
                (allow sysadm_t nslcd_conf_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t nslcd_conf_t (dir (getattr open search)))
                (allow sysadm_t nslcd_conf_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t nslcd_conf_t (dir (getattr open search)))
                (allow sysadm_t nslcd_conf_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nslcd_conf_t (dir (getattr open search)))
                (allow sysadm_t nslcd_conf_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nslcd_conf_t (dir (getattr open search)))
                (allow sysadm_t nslcd_conf_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t nslcd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nslcd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t nslcd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nslcd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nslcd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nslcd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t nslcd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nslcd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nslcd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nslcd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nslcd_runtime_t (dir (getattr open search)))
                (allow sysadm_t nslcd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t nslcd_runtime_t (dir (getattr open search)))
                (allow sysadm_t nslcd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t nslcd_runtime_t (dir (getattr open search)))
                (allow sysadm_t nslcd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nslcd_runtime_t (dir (getattr open search)))
                (allow sysadm_t nslcd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nslcd_runtime_t (dir (getattr open search)))
                (allow sysadm_t nslcd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_352
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_353
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require ntop_t)
                (typeattributeset cil_gen_require ntop_etc_t)
                (typeattributeset cil_gen_require ntop_runtime_t)
                (typeattributeset cil_gen_require ntop_initrc_exec_t)
                (typeattributeset cil_gen_require ntop_var_lib_t)
                (allow sysadm_t ntop_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t ntop_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t ntop_t (file (ioctl read getattr lock open)))
                (allow sysadm_t ntop_t (lnk_file (read getattr)))
                (allow sysadm_t ntop_t (process (getattr)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t ntop_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ntop_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t ntop_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ntop_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ntop_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ntop_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t ntop_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ntop_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ntop_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ntop_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ntop_etc_t (dir (getattr open search)))
                (allow sysadm_t ntop_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t ntop_etc_t (dir (getattr open search)))
                (allow sysadm_t ntop_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t ntop_etc_t (dir (getattr open search)))
                (allow sysadm_t ntop_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ntop_etc_t (dir (getattr open search)))
                (allow sysadm_t ntop_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ntop_etc_t (dir (getattr open search)))
                (allow sysadm_t ntop_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t ntop_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ntop_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t ntop_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ntop_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ntop_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ntop_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t ntop_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ntop_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ntop_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ntop_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ntop_var_lib_t (dir (getattr open search)))
                (allow sysadm_t ntop_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t ntop_var_lib_t (dir (getattr open search)))
                (allow sysadm_t ntop_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t ntop_var_lib_t (dir (getattr open search)))
                (allow sysadm_t ntop_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ntop_var_lib_t (dir (getattr open search)))
                (allow sysadm_t ntop_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ntop_var_lib_t (dir (getattr open search)))
                (allow sysadm_t ntop_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t ntop_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ntop_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t ntop_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ntop_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ntop_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ntop_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t ntop_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ntop_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ntop_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ntop_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ntop_runtime_t (dir (getattr open search)))
                (allow sysadm_t ntop_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t ntop_runtime_t (dir (getattr open search)))
                (allow sysadm_t ntop_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t ntop_runtime_t (dir (getattr open search)))
                (allow sysadm_t ntop_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ntop_runtime_t (dir (getattr open search)))
                (allow sysadm_t ntop_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ntop_runtime_t (dir (getattr open search)))
                (allow sysadm_t ntop_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_354
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_355
                (roleattributeset cil_gen_require ntpd_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require ntpd_t)
                (typeattributeset cil_gen_require ntpd_tmp_t)
                (typeattributeset cil_gen_require ntpd_log_t)
                (typeattributeset cil_gen_require ntpd_key_t)
                (typeattributeset cil_gen_require ntpd_pid_t)
                (typeattributeset cil_gen_require ntp_conf_t)
                (typeattributeset cil_gen_require ntpd_initrc_exec_t)
                (typeattributeset cil_gen_require ntp_drift_t)
                (typeattributeset cil_gen_require ntpd_unit_t)
                (typeattributeset cil_gen_require ntpd_exec_t)
                (typeattributeset cil_gen_require ntp_port_t)
                (roleattributeset cil_gen_require ntpd_roles)
                (roleattributeset ntpd_roles (sysadm_r ))
                (allow sysadm_t ntpd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t ntpd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t ntpd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t ntpd_t (lnk_file (read getattr)))
                (allow sysadm_t ntpd_t (process (getattr)))
                (allow sysadm_t etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t ntpd_key_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ntp_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ntpd_key_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t ntp_conf_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t ntpd_key_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ntp_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ntpd_key_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ntp_conf_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ntpd_key_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ntp_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ntpd_key_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t ntp_conf_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t ntpd_key_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ntp_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ntpd_key_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ntp_conf_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ntpd_key_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ntp_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ntpd_key_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ntp_conf_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ntpd_key_t (dir (getattr open search)))
                (allow sysadm_t ntp_conf_t (dir (getattr open search)))
                (allow sysadm_t ntpd_key_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t ntp_conf_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t ntpd_key_t (dir (getattr open search)))
                (allow sysadm_t ntp_conf_t (dir (getattr open search)))
                (allow sysadm_t ntpd_key_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t ntp_conf_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t ntpd_key_t (dir (getattr open search)))
                (allow sysadm_t ntp_conf_t (dir (getattr open search)))
                (allow sysadm_t ntpd_key_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ntp_conf_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ntpd_key_t (dir (getattr open search)))
                (allow sysadm_t ntp_conf_t (dir (getattr open search)))
                (allow sysadm_t ntpd_key_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ntp_conf_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ntpd_key_t (dir (getattr open search)))
                (allow sysadm_t ntp_conf_t (dir (getattr open search)))
                (allow sysadm_t ntpd_key_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ntp_conf_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t ntpd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ntpd_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t ntpd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ntpd_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ntpd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ntpd_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t ntpd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ntpd_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ntpd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ntpd_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ntpd_log_t (dir (getattr open search)))
                (allow sysadm_t ntpd_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t ntpd_log_t (dir (getattr open search)))
                (allow sysadm_t ntpd_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t ntpd_log_t (dir (getattr open search)))
                (allow sysadm_t ntpd_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ntpd_log_t (dir (getattr open search)))
                (allow sysadm_t ntpd_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ntpd_log_t (dir (getattr open search)))
                (allow sysadm_t ntpd_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t ntpd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ntpd_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t ntpd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ntpd_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ntpd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ntpd_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t ntpd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ntpd_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ntpd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ntpd_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ntpd_tmp_t (dir (getattr open search)))
                (allow sysadm_t ntpd_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t ntpd_tmp_t (dir (getattr open search)))
                (allow sysadm_t ntpd_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t ntpd_tmp_t (dir (getattr open search)))
                (allow sysadm_t ntpd_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ntpd_tmp_t (dir (getattr open search)))
                (allow sysadm_t ntpd_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ntpd_tmp_t (dir (getattr open search)))
                (allow sysadm_t ntpd_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t ntp_drift_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ntp_drift_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t ntp_drift_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ntp_drift_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ntp_drift_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ntp_drift_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t ntp_drift_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ntp_drift_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ntp_drift_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ntp_drift_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ntp_drift_t (dir (getattr open search)))
                (allow sysadm_t ntp_drift_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t ntp_drift_t (dir (getattr open search)))
                (allow sysadm_t ntp_drift_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t ntp_drift_t (dir (getattr open search)))
                (allow sysadm_t ntp_drift_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ntp_drift_t (dir (getattr open search)))
                (allow sysadm_t ntp_drift_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ntp_drift_t (dir (getattr open search)))
                (allow sysadm_t ntp_drift_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t ntpd_pid_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ntpd_pid_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t ntpd_pid_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ntpd_pid_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ntpd_pid_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ntpd_pid_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t ntpd_pid_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ntpd_pid_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ntpd_pid_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ntpd_pid_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ntpd_pid_t (dir (getattr open search)))
                (allow sysadm_t ntpd_pid_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t ntpd_pid_t (dir (getattr open search)))
                (allow sysadm_t ntpd_pid_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t ntpd_pid_t (dir (getattr open search)))
                (allow sysadm_t ntpd_pid_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ntpd_pid_t (dir (getattr open search)))
                (allow sysadm_t ntpd_pid_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ntpd_pid_t (dir (getattr open search)))
                (allow sysadm_t ntpd_pid_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t ntpd_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t ntpd_t (process (transition)))
                (dontaudit sysadm_t ntpd_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t ntpd_exec_t process ntpd_t)
                (allow ntpd_t sysadm_t (fd (use)))
                (allow ntpd_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow ntpd_t sysadm_t (process (sigchld)))
                (allow sysadm_t ntp_port_t (udp_socket (name_bind)))
                (allow sysadm_t self (capability (net_bind_service)))
                (optional sysadm_optional_356
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_357
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require numad_t)
                (typeattributeset cil_gen_require numad_initrc_exec_t)
                (typeattributeset cil_gen_require numad_log_t)
                (typeattributeset cil_gen_require numad_runtime_t)
                (allow sysadm_t numad_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t numad_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t numad_t (file (ioctl read getattr lock open)))
                (allow sysadm_t numad_t (lnk_file (read getattr)))
                (allow sysadm_t numad_t (process (getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t numad_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t numad_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t numad_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t numad_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t numad_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t numad_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t numad_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t numad_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t numad_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t numad_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t numad_log_t (dir (getattr open search)))
                (allow sysadm_t numad_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t numad_log_t (dir (getattr open search)))
                (allow sysadm_t numad_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t numad_log_t (dir (getattr open search)))
                (allow sysadm_t numad_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t numad_log_t (dir (getattr open search)))
                (allow sysadm_t numad_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t numad_log_t (dir (getattr open search)))
                (allow sysadm_t numad_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t numad_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t numad_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t numad_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t numad_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t numad_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t numad_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t numad_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t numad_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t numad_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t numad_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t numad_runtime_t (dir (getattr open search)))
                (allow sysadm_t numad_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t numad_runtime_t (dir (getattr open search)))
                (allow sysadm_t numad_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t numad_runtime_t (dir (getattr open search)))
                (allow sysadm_t numad_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t numad_runtime_t (dir (getattr open search)))
                (allow sysadm_t numad_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t numad_runtime_t (dir (getattr open search)))
                (allow sysadm_t numad_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_358
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_359
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require nut_domain)
                (typeattributeset cil_gen_require nut_initrc_exec_t)
                (typeattributeset cil_gen_require nut_runtime_t)
                (typeattributeset cil_gen_require nut_conf_t)
                (allow sysadm_t nut_domain (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t nut_domain (dir (ioctl read getattr lock open search)))
                (allow sysadm_t nut_domain (file (ioctl read getattr lock open)))
                (allow sysadm_t nut_domain (lnk_file (read getattr)))
                (allow sysadm_t nut_domain (process (getattr)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t nut_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nut_conf_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t nut_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nut_conf_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nut_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nut_conf_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t nut_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nut_conf_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nut_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nut_conf_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nut_conf_t (dir (getattr open search)))
                (allow sysadm_t nut_conf_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t nut_conf_t (dir (getattr open search)))
                (allow sysadm_t nut_conf_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t nut_conf_t (dir (getattr open search)))
                (allow sysadm_t nut_conf_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nut_conf_t (dir (getattr open search)))
                (allow sysadm_t nut_conf_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nut_conf_t (dir (getattr open search)))
                (allow sysadm_t nut_conf_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t nut_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nut_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t nut_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nut_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nut_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nut_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t nut_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nut_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nut_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nut_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nut_runtime_t (dir (getattr open search)))
                (allow sysadm_t nut_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t nut_runtime_t (dir (getattr open search)))
                (allow sysadm_t nut_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t nut_runtime_t (dir (getattr open search)))
                (allow sysadm_t nut_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nut_runtime_t (dir (getattr open search)))
                (allow sysadm_t nut_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nut_runtime_t (dir (getattr open search)))
                (allow sysadm_t nut_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_360
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_361
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require oidentd_t)
                (typeattributeset cil_gen_require oidentd_initrc_exec_t)
                (typeattributeset cil_gen_require oidentd_config_t)
                (allow sysadm_t oidentd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t oidentd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t oidentd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t oidentd_t (lnk_file (read getattr)))
                (allow sysadm_t oidentd_t (process (getattr)))
                (allow sysadm_t etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t oidentd_config_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t oidentd_config_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t oidentd_config_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t oidentd_config_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t oidentd_config_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t oidentd_config_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t oidentd_config_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t oidentd_config_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t oidentd_config_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t oidentd_config_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t oidentd_config_t (dir (getattr open search)))
                (allow sysadm_t oidentd_config_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t oidentd_config_t (dir (getattr open search)))
                (allow sysadm_t oidentd_config_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t oidentd_config_t (dir (getattr open search)))
                (allow sysadm_t oidentd_config_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t oidentd_config_t (dir (getattr open search)))
                (allow sysadm_t oidentd_config_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t oidentd_config_t (dir (getattr open search)))
                (allow sysadm_t oidentd_config_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_362
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_363
                (roleattributeset cil_gen_require ooffice_roles)
                (typeattributeset cil_gen_require ooffice_t)
                (typeattributeset cil_gen_require ooffice_exec_t)
                (roleattributeset cil_gen_require ooffice_roles)
                (roleattributeset ooffice_roles (sysadm_r ))
                (allow ooffice_t sysadm_application_exec_domain (unix_stream_socket (connectto)))
                (allow sysadm_application_exec_domain ooffice_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_application_exec_domain ooffice_t (process (transition)))
                (dontaudit sysadm_application_exec_domain ooffice_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_application_exec_domain ooffice_exec_t process ooffice_t)
                (allow ooffice_t sysadm_application_exec_domain (fd (use)))
                (allow ooffice_t sysadm_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                (allow ooffice_t sysadm_application_exec_domain (process (sigchld)))
                (allow sysadm_application_exec_domain ooffice_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_application_exec_domain ooffice_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_application_exec_domain ooffice_t (file (ioctl read getattr lock open)))
                (allow sysadm_application_exec_domain ooffice_t (lnk_file (read getattr)))
                (allow sysadm_application_exec_domain ooffice_t (process (getattr)))
                (optional sysadm_optional_364
                    (typeattributeset cil_gen_require ooffice_t)
                    (allow sysadm_application_exec_domain ooffice_t (dbus (send_msg)))
                    (allow ooffice_t sysadm_application_exec_domain (dbus (send_msg)))
                )
                (optional sysadm_optional_365
                    (typeattributeset cil_gen_require sysadm_systemd_t)
                    (allow sysadm_systemd_t ooffice_t (dir (ioctl read getattr lock open search)))
                    (allow sysadm_systemd_t ooffice_t (file (ioctl read getattr lock open)))
                    (allow sysadm_systemd_t ooffice_t (lnk_file (read getattr)))
                    (allow sysadm_systemd_t ooffice_t (process (getattr)))
                    (allow sysadm_systemd_t ooffice_t (process (sigchld sigkill sigstop signull signal)))
                    (allow ooffice_t sysadm_systemd_t (fd (use)))
                    (allow ooffice_t sysadm_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                    (allow ooffice_t sysadm_systemd_t (dir (ioctl read getattr lock open search)))
                    (allow ooffice_t sysadm_systemd_t (file (ioctl read getattr lock open)))
                    (allow ooffice_t sysadm_systemd_t (lnk_file (read getattr)))
                    (allow ooffice_t sysadm_systemd_t (process (getattr)))
                    (allow ooffice_t sysadm_systemd_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_366
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require openarc_milter_t)
                (typeattributeset cil_gen_require openarc_milter_initrc_exec_t)
                (typeattributeset cil_gen_require openarc_milter_private_key_t)
                (typeattributeset cil_gen_require openarc_milter_data_t)
                (allow sysadm_t openarc_milter_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t openarc_milter_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t openarc_milter_t (file (ioctl read getattr lock open)))
                (allow sysadm_t openarc_milter_t (lnk_file (read getattr)))
                (allow sysadm_t openarc_milter_t (process (getattr)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t openarc_milter_private_key_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openarc_milter_private_key_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t openarc_milter_private_key_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openarc_milter_private_key_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t openarc_milter_private_key_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openarc_milter_private_key_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t openarc_milter_private_key_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openarc_milter_private_key_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t openarc_milter_private_key_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openarc_milter_private_key_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t openarc_milter_private_key_t (dir (getattr open search)))
                (allow sysadm_t openarc_milter_private_key_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t openarc_milter_private_key_t (dir (getattr open search)))
                (allow sysadm_t openarc_milter_private_key_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t openarc_milter_private_key_t (dir (getattr open search)))
                (allow sysadm_t openarc_milter_private_key_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t openarc_milter_private_key_t (dir (getattr open search)))
                (allow sysadm_t openarc_milter_private_key_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t openarc_milter_private_key_t (dir (getattr open search)))
                (allow sysadm_t openarc_milter_private_key_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t openarc_milter_data_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openarc_milter_data_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t openarc_milter_data_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openarc_milter_data_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t openarc_milter_data_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openarc_milter_data_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t openarc_milter_data_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openarc_milter_data_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t openarc_milter_data_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openarc_milter_data_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t openarc_milter_data_t (dir (getattr open search)))
                (allow sysadm_t openarc_milter_data_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t openarc_milter_data_t (dir (getattr open search)))
                (allow sysadm_t openarc_milter_data_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t openarc_milter_data_t (dir (getattr open search)))
                (allow sysadm_t openarc_milter_data_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t openarc_milter_data_t (dir (getattr open search)))
                (allow sysadm_t openarc_milter_data_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t openarc_milter_data_t (dir (getattr open search)))
                (allow sysadm_t openarc_milter_data_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_367
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_368
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require openct_t)
                (typeattributeset cil_gen_require openct_initrc_exec_t)
                (typeattributeset cil_gen_require openct_runtime_t)
                (allow sysadm_t openct_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t openct_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t openct_t (file (ioctl read getattr lock open)))
                (allow sysadm_t openct_t (lnk_file (read getattr)))
                (allow sysadm_t openct_t (process (getattr)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t openct_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openct_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t openct_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openct_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t openct_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openct_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t openct_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openct_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t openct_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openct_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t openct_runtime_t (dir (getattr open search)))
                (allow sysadm_t openct_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t openct_runtime_t (dir (getattr open search)))
                (allow sysadm_t openct_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t openct_runtime_t (dir (getattr open search)))
                (allow sysadm_t openct_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t openct_runtime_t (dir (getattr open search)))
                (allow sysadm_t openct_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t openct_runtime_t (dir (getattr open search)))
                (allow sysadm_t openct_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_369
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_370
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require openhpid_t)
                (typeattributeset cil_gen_require openhpid_initrc_exec_t)
                (typeattributeset cil_gen_require openhpid_var_lib_t)
                (typeattributeset cil_gen_require openhpid_runtime_t)
                (allow sysadm_t openhpid_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t openhpid_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t openhpid_t (file (ioctl read getattr lock open)))
                (allow sysadm_t openhpid_t (lnk_file (read getattr)))
                (allow sysadm_t openhpid_t (process (getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t openhpid_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openhpid_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t openhpid_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openhpid_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t openhpid_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openhpid_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t openhpid_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openhpid_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t openhpid_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openhpid_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t openhpid_var_lib_t (dir (getattr open search)))
                (allow sysadm_t openhpid_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t openhpid_var_lib_t (dir (getattr open search)))
                (allow sysadm_t openhpid_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t openhpid_var_lib_t (dir (getattr open search)))
                (allow sysadm_t openhpid_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t openhpid_var_lib_t (dir (getattr open search)))
                (allow sysadm_t openhpid_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t openhpid_var_lib_t (dir (getattr open search)))
                (allow sysadm_t openhpid_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t openhpid_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openhpid_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t openhpid_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openhpid_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t openhpid_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openhpid_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t openhpid_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openhpid_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t openhpid_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openhpid_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t openhpid_runtime_t (dir (getattr open search)))
                (allow sysadm_t openhpid_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t openhpid_runtime_t (dir (getattr open search)))
                (allow sysadm_t openhpid_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t openhpid_runtime_t (dir (getattr open search)))
                (allow sysadm_t openhpid_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t openhpid_runtime_t (dir (getattr open search)))
                (allow sysadm_t openhpid_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t openhpid_runtime_t (dir (getattr open search)))
                (allow sysadm_t openhpid_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_371
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_372
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require opensm_t)
                (typeattributeset cil_gen_require opensm_conf_t)
                (typeattributeset cil_gen_require opensm_cache_t)
                (typeattributeset cil_gen_require opensm_log_t)
                (typeattributeset cil_gen_require opensm_exec_t)
                (roleattributeset cil_gen_require sysadm_r)
                (roletype sysadm_r opensm_t)
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t opensm_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t opensm_t (process (transition)))
                (dontaudit sysadm_t opensm_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t opensm_exec_t process opensm_t)
                (allow opensm_t sysadm_t (fd (use)))
                (allow opensm_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow opensm_t sysadm_t (process (sigchld)))
                (allow sysadm_t opensm_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t opensm_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t opensm_t (file (ioctl read getattr lock open)))
                (allow sysadm_t opensm_t (lnk_file (read getattr)))
                (allow sysadm_t opensm_t (process (getattr)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t opensm_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t opensm_conf_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t opensm_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t opensm_conf_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t opensm_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t opensm_conf_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t opensm_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t opensm_conf_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t opensm_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t opensm_conf_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t opensm_conf_t (dir (getattr open search)))
                (allow sysadm_t opensm_conf_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t opensm_conf_t (dir (getattr open search)))
                (allow sysadm_t opensm_conf_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t opensm_conf_t (dir (getattr open search)))
                (allow sysadm_t opensm_conf_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t opensm_conf_t (dir (getattr open search)))
                (allow sysadm_t opensm_conf_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t opensm_conf_t (dir (getattr open search)))
                (allow sysadm_t opensm_conf_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t opensm_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t opensm_cache_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t opensm_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t opensm_cache_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t opensm_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t opensm_cache_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t opensm_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t opensm_cache_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t opensm_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t opensm_cache_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t opensm_cache_t (dir (getattr open search)))
                (allow sysadm_t opensm_cache_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t opensm_cache_t (dir (getattr open search)))
                (allow sysadm_t opensm_cache_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t opensm_cache_t (dir (getattr open search)))
                (allow sysadm_t opensm_cache_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t opensm_cache_t (dir (getattr open search)))
                (allow sysadm_t opensm_cache_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t opensm_cache_t (dir (getattr open search)))
                (allow sysadm_t opensm_cache_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t opensm_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t opensm_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t opensm_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t opensm_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t opensm_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t opensm_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t opensm_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t opensm_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t opensm_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t opensm_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t opensm_log_t (dir (getattr open search)))
                (allow sysadm_t opensm_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t opensm_log_t (dir (getattr open search)))
                (allow sysadm_t opensm_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t opensm_log_t (dir (getattr open search)))
                (allow sysadm_t opensm_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t opensm_log_t (dir (getattr open search)))
                (allow sysadm_t opensm_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t opensm_log_t (dir (getattr open search)))
                (allow sysadm_t opensm_log_t (sock_file (getattr relabelfrom relabelto)))
            )
            (optional sysadm_optional_373
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require openvpn_t)
                (typeattributeset cil_gen_require openvpn_etc_t)
                (typeattributeset cil_gen_require openvpn_var_log_t)
                (typeattributeset cil_gen_require openvpn_runtime_t)
                (typeattributeset cil_gen_require openvpn_initrc_exec_t)
                (typeattributeset cil_gen_require openvpn_etc_rw_t)
                (typeattributeset cil_gen_require openvpn_status_t)
                (allow sysadm_t openvpn_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t openvpn_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t openvpn_t (file (ioctl read getattr lock open)))
                (allow sysadm_t openvpn_t (lnk_file (read getattr)))
                (allow sysadm_t openvpn_t (process (getattr)))
                (allow sysadm_t etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t openvpn_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openvpn_etc_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openvpn_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t openvpn_etc_rw_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t openvpn_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openvpn_etc_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openvpn_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t openvpn_etc_rw_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t openvpn_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openvpn_etc_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openvpn_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t openvpn_etc_rw_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t openvpn_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openvpn_etc_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openvpn_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t openvpn_etc_rw_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t openvpn_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openvpn_etc_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openvpn_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t openvpn_etc_rw_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t openvpn_etc_t (dir (getattr open search)))
                (allow sysadm_t openvpn_etc_rw_t (dir (getattr open search)))
                (allow sysadm_t openvpn_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t openvpn_etc_rw_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t openvpn_etc_t (dir (getattr open search)))
                (allow sysadm_t openvpn_etc_rw_t (dir (getattr open search)))
                (allow sysadm_t openvpn_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t openvpn_etc_rw_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t openvpn_etc_t (dir (getattr open search)))
                (allow sysadm_t openvpn_etc_rw_t (dir (getattr open search)))
                (allow sysadm_t openvpn_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t openvpn_etc_rw_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t openvpn_etc_t (dir (getattr open search)))
                (allow sysadm_t openvpn_etc_rw_t (dir (getattr open search)))
                (allow sysadm_t openvpn_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t openvpn_etc_rw_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t openvpn_etc_t (dir (getattr open search)))
                (allow sysadm_t openvpn_etc_rw_t (dir (getattr open search)))
                (allow sysadm_t openvpn_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t openvpn_etc_rw_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t openvpn_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openvpn_status_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openvpn_var_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t openvpn_status_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t openvpn_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openvpn_status_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openvpn_var_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t openvpn_status_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t openvpn_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openvpn_status_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openvpn_var_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t openvpn_status_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t openvpn_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openvpn_status_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openvpn_var_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t openvpn_status_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t openvpn_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openvpn_status_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openvpn_var_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t openvpn_status_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t openvpn_var_log_t (dir (getattr open search)))
                (allow sysadm_t openvpn_status_t (dir (getattr open search)))
                (allow sysadm_t openvpn_var_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t openvpn_status_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t openvpn_var_log_t (dir (getattr open search)))
                (allow sysadm_t openvpn_status_t (dir (getattr open search)))
                (allow sysadm_t openvpn_var_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t openvpn_status_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t openvpn_var_log_t (dir (getattr open search)))
                (allow sysadm_t openvpn_status_t (dir (getattr open search)))
                (allow sysadm_t openvpn_var_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t openvpn_status_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t openvpn_var_log_t (dir (getattr open search)))
                (allow sysadm_t openvpn_status_t (dir (getattr open search)))
                (allow sysadm_t openvpn_var_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t openvpn_status_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t openvpn_var_log_t (dir (getattr open search)))
                (allow sysadm_t openvpn_status_t (dir (getattr open search)))
                (allow sysadm_t openvpn_var_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t openvpn_status_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t openvpn_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openvpn_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t openvpn_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openvpn_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t openvpn_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openvpn_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t openvpn_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openvpn_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t openvpn_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openvpn_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t openvpn_runtime_t (dir (getattr open search)))
                (allow sysadm_t openvpn_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t openvpn_runtime_t (dir (getattr open search)))
                (allow sysadm_t openvpn_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t openvpn_runtime_t (dir (getattr open search)))
                (allow sysadm_t openvpn_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t openvpn_runtime_t (dir (getattr open search)))
                (allow sysadm_t openvpn_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t openvpn_runtime_t (dir (getattr open search)))
                (allow sysadm_t openvpn_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_374
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_375
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require openvswitch_t)
                (typeattributeset cil_gen_require openvswitch_initrc_exec_t)
                (typeattributeset cil_gen_require openvswitch_conf_t)
                (typeattributeset cil_gen_require openvswitch_var_lib_t)
                (typeattributeset cil_gen_require openvswitch_log_t)
                (typeattributeset cil_gen_require openvswitch_runtime_t)
                (allow sysadm_t openvswitch_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t openvswitch_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t openvswitch_t (file (ioctl read getattr lock open)))
                (allow sysadm_t openvswitch_t (lnk_file (read getattr)))
                (allow sysadm_t openvswitch_t (process (getattr)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t openvswitch_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openvswitch_conf_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t openvswitch_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openvswitch_conf_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t openvswitch_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openvswitch_conf_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t openvswitch_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openvswitch_conf_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t openvswitch_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openvswitch_conf_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t openvswitch_conf_t (dir (getattr open search)))
                (allow sysadm_t openvswitch_conf_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t openvswitch_conf_t (dir (getattr open search)))
                (allow sysadm_t openvswitch_conf_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t openvswitch_conf_t (dir (getattr open search)))
                (allow sysadm_t openvswitch_conf_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t openvswitch_conf_t (dir (getattr open search)))
                (allow sysadm_t openvswitch_conf_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t openvswitch_conf_t (dir (getattr open search)))
                (allow sysadm_t openvswitch_conf_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t openvswitch_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openvswitch_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t openvswitch_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openvswitch_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t openvswitch_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openvswitch_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t openvswitch_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openvswitch_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t openvswitch_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openvswitch_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t openvswitch_var_lib_t (dir (getattr open search)))
                (allow sysadm_t openvswitch_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t openvswitch_var_lib_t (dir (getattr open search)))
                (allow sysadm_t openvswitch_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t openvswitch_var_lib_t (dir (getattr open search)))
                (allow sysadm_t openvswitch_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t openvswitch_var_lib_t (dir (getattr open search)))
                (allow sysadm_t openvswitch_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t openvswitch_var_lib_t (dir (getattr open search)))
                (allow sysadm_t openvswitch_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t openvswitch_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openvswitch_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t openvswitch_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openvswitch_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t openvswitch_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openvswitch_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t openvswitch_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openvswitch_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t openvswitch_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openvswitch_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t openvswitch_log_t (dir (getattr open search)))
                (allow sysadm_t openvswitch_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t openvswitch_log_t (dir (getattr open search)))
                (allow sysadm_t openvswitch_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t openvswitch_log_t (dir (getattr open search)))
                (allow sysadm_t openvswitch_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t openvswitch_log_t (dir (getattr open search)))
                (allow sysadm_t openvswitch_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t openvswitch_log_t (dir (getattr open search)))
                (allow sysadm_t openvswitch_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t openvswitch_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openvswitch_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t openvswitch_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openvswitch_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t openvswitch_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openvswitch_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t openvswitch_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openvswitch_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t openvswitch_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t openvswitch_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t openvswitch_runtime_t (dir (getattr open search)))
                (allow sysadm_t openvswitch_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t openvswitch_runtime_t (dir (getattr open search)))
                (allow sysadm_t openvswitch_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t openvswitch_runtime_t (dir (getattr open search)))
                (allow sysadm_t openvswitch_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t openvswitch_runtime_t (dir (getattr open search)))
                (allow sysadm_t openvswitch_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t openvswitch_runtime_t (dir (getattr open search)))
                (allow sysadm_t openvswitch_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_376
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_377
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require pacemaker_t)
                (typeattributeset cil_gen_require pacemaker_initrc_exec_t)
                (typeattributeset cil_gen_require pacemaker_var_lib_t)
                (typeattributeset cil_gen_require pacemaker_runtime_t)
                (allow sysadm_t pacemaker_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t pacemaker_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t pacemaker_t (file (ioctl read getattr lock open)))
                (allow sysadm_t pacemaker_t (lnk_file (read getattr)))
                (allow sysadm_t pacemaker_t (process (getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t pacemaker_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pacemaker_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t pacemaker_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pacemaker_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pacemaker_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pacemaker_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t pacemaker_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pacemaker_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pacemaker_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pacemaker_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pacemaker_var_lib_t (dir (getattr open search)))
                (allow sysadm_t pacemaker_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t pacemaker_var_lib_t (dir (getattr open search)))
                (allow sysadm_t pacemaker_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t pacemaker_var_lib_t (dir (getattr open search)))
                (allow sysadm_t pacemaker_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pacemaker_var_lib_t (dir (getattr open search)))
                (allow sysadm_t pacemaker_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pacemaker_var_lib_t (dir (getattr open search)))
                (allow sysadm_t pacemaker_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t pacemaker_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pacemaker_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t pacemaker_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pacemaker_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pacemaker_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pacemaker_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t pacemaker_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pacemaker_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pacemaker_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pacemaker_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pacemaker_runtime_t (dir (getattr open search)))
                (allow sysadm_t pacemaker_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t pacemaker_runtime_t (dir (getattr open search)))
                (allow sysadm_t pacemaker_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t pacemaker_runtime_t (dir (getattr open search)))
                (allow sysadm_t pacemaker_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pacemaker_runtime_t (dir (getattr open search)))
                (allow sysadm_t pacemaker_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pacemaker_runtime_t (dir (getattr open search)))
                (allow sysadm_t pacemaker_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_378
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_379
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require pads_t)
                (typeattributeset cil_gen_require pads_config_t)
                (typeattributeset cil_gen_require pads_runtime_t)
                (typeattributeset cil_gen_require pads_initrc_exec_t)
                (allow sysadm_t pads_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t pads_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t pads_t (file (ioctl read getattr lock open)))
                (allow sysadm_t pads_t (lnk_file (read getattr)))
                (allow sysadm_t pads_t (process (getattr)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t pads_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pads_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t pads_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pads_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pads_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pads_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t pads_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pads_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pads_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pads_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pads_runtime_t (dir (getattr open search)))
                (allow sysadm_t pads_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t pads_runtime_t (dir (getattr open search)))
                (allow sysadm_t pads_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t pads_runtime_t (dir (getattr open search)))
                (allow sysadm_t pads_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pads_runtime_t (dir (getattr open search)))
                (allow sysadm_t pads_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pads_runtime_t (dir (getattr open search)))
                (allow sysadm_t pads_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t pads_config_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pads_config_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t pads_config_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pads_config_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pads_config_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pads_config_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t pads_config_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pads_config_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pads_config_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pads_config_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pads_config_t (dir (getattr open search)))
                (allow sysadm_t pads_config_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t pads_config_t (dir (getattr open search)))
                (allow sysadm_t pads_config_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t pads_config_t (dir (getattr open search)))
                (allow sysadm_t pads_config_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pads_config_t (dir (getattr open search)))
                (allow sysadm_t pads_config_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pads_config_t (dir (getattr open search)))
                (allow sysadm_t pads_config_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_380
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_381
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require pcscd_t)
                (typeattributeset cil_gen_require pcscd_runtime_t)
                (typeattributeset cil_gen_require pcscd_initrc_exec_t)
                (allow sysadm_t pcscd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t pcscd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t pcscd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t pcscd_t (lnk_file (read getattr)))
                (allow sysadm_t pcscd_t (process (getattr)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t pcscd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pcscd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t pcscd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pcscd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pcscd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pcscd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t pcscd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pcscd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pcscd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pcscd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pcscd_runtime_t (dir (getattr open search)))
                (allow sysadm_t pcscd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t pcscd_runtime_t (dir (getattr open search)))
                (allow sysadm_t pcscd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t pcscd_runtime_t (dir (getattr open search)))
                (allow sysadm_t pcscd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pcscd_runtime_t (dir (getattr open search)))
                (allow sysadm_t pcscd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pcscd_runtime_t (dir (getattr open search)))
                (allow sysadm_t pcscd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_382
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_383
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require pegasus_t)
                (typeattributeset cil_gen_require pegasus_initrc_exec_t)
                (typeattributeset cil_gen_require pegasus_tmp_t)
                (typeattributeset cil_gen_require pegasus_cache_t)
                (typeattributeset cil_gen_require pegasus_data_t)
                (typeattributeset cil_gen_require pegasus_conf_t)
                (typeattributeset cil_gen_require pegasus_mof_t)
                (typeattributeset cil_gen_require pegasus_runtime_t)
                (allow sysadm_t pegasus_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t pegasus_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t pegasus_t (file (ioctl read getattr lock open)))
                (allow sysadm_t pegasus_t (lnk_file (read getattr)))
                (allow sysadm_t pegasus_t (process (getattr)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t pegasus_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pegasus_conf_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t pegasus_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pegasus_conf_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pegasus_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pegasus_conf_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t pegasus_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pegasus_conf_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pegasus_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pegasus_conf_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pegasus_conf_t (dir (getattr open search)))
                (allow sysadm_t pegasus_conf_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t pegasus_conf_t (dir (getattr open search)))
                (allow sysadm_t pegasus_conf_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t pegasus_conf_t (dir (getattr open search)))
                (allow sysadm_t pegasus_conf_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pegasus_conf_t (dir (getattr open search)))
                (allow sysadm_t pegasus_conf_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pegasus_conf_t (dir (getattr open search)))
                (allow sysadm_t pegasus_conf_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t pegasus_mof_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pegasus_mof_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t pegasus_mof_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pegasus_mof_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pegasus_mof_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pegasus_mof_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t pegasus_mof_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pegasus_mof_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pegasus_mof_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pegasus_mof_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pegasus_mof_t (dir (getattr open search)))
                (allow sysadm_t pegasus_mof_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t pegasus_mof_t (dir (getattr open search)))
                (allow sysadm_t pegasus_mof_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t pegasus_mof_t (dir (getattr open search)))
                (allow sysadm_t pegasus_mof_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pegasus_mof_t (dir (getattr open search)))
                (allow sysadm_t pegasus_mof_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pegasus_mof_t (dir (getattr open search)))
                (allow sysadm_t pegasus_mof_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (getattr open search)))
                (allow sysadm_t pegasus_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pegasus_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t pegasus_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pegasus_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pegasus_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pegasus_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t pegasus_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pegasus_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pegasus_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pegasus_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pegasus_tmp_t (dir (getattr open search)))
                (allow sysadm_t pegasus_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t pegasus_tmp_t (dir (getattr open search)))
                (allow sysadm_t pegasus_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t pegasus_tmp_t (dir (getattr open search)))
                (allow sysadm_t pegasus_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pegasus_tmp_t (dir (getattr open search)))
                (allow sysadm_t pegasus_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pegasus_tmp_t (dir (getattr open search)))
                (allow sysadm_t pegasus_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t pegasus_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pegasus_cache_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t pegasus_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pegasus_cache_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pegasus_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pegasus_cache_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t pegasus_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pegasus_cache_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pegasus_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pegasus_cache_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pegasus_cache_t (dir (getattr open search)))
                (allow sysadm_t pegasus_cache_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t pegasus_cache_t (dir (getattr open search)))
                (allow sysadm_t pegasus_cache_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t pegasus_cache_t (dir (getattr open search)))
                (allow sysadm_t pegasus_cache_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pegasus_cache_t (dir (getattr open search)))
                (allow sysadm_t pegasus_cache_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pegasus_cache_t (dir (getattr open search)))
                (allow sysadm_t pegasus_cache_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t pegasus_data_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pegasus_data_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t pegasus_data_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pegasus_data_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pegasus_data_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pegasus_data_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t pegasus_data_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pegasus_data_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pegasus_data_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pegasus_data_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pegasus_data_t (dir (getattr open search)))
                (allow sysadm_t pegasus_data_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t pegasus_data_t (dir (getattr open search)))
                (allow sysadm_t pegasus_data_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t pegasus_data_t (dir (getattr open search)))
                (allow sysadm_t pegasus_data_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pegasus_data_t (dir (getattr open search)))
                (allow sysadm_t pegasus_data_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pegasus_data_t (dir (getattr open search)))
                (allow sysadm_t pegasus_data_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t pegasus_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pegasus_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t pegasus_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pegasus_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pegasus_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pegasus_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t pegasus_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pegasus_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pegasus_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pegasus_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pegasus_runtime_t (dir (getattr open search)))
                (allow sysadm_t pegasus_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t pegasus_runtime_t (dir (getattr open search)))
                (allow sysadm_t pegasus_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t pegasus_runtime_t (dir (getattr open search)))
                (allow sysadm_t pegasus_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pegasus_runtime_t (dir (getattr open search)))
                (allow sysadm_t pegasus_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pegasus_runtime_t (dir (getattr open search)))
                (allow sysadm_t pegasus_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_384
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_385
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require perdition_t)
                (typeattributeset cil_gen_require perdition_initrc_exec_t)
                (typeattributeset cil_gen_require perdition_etc_t)
                (typeattributeset cil_gen_require perdition_runtime_t)
                (allow sysadm_t perdition_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t perdition_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t perdition_t (file (ioctl read getattr lock open)))
                (allow sysadm_t perdition_t (lnk_file (read getattr)))
                (allow sysadm_t perdition_t (process (getattr)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t perdition_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t perdition_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t perdition_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t perdition_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t perdition_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t perdition_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t perdition_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t perdition_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t perdition_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t perdition_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t perdition_etc_t (dir (getattr open search)))
                (allow sysadm_t perdition_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t perdition_etc_t (dir (getattr open search)))
                (allow sysadm_t perdition_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t perdition_etc_t (dir (getattr open search)))
                (allow sysadm_t perdition_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t perdition_etc_t (dir (getattr open search)))
                (allow sysadm_t perdition_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t perdition_etc_t (dir (getattr open search)))
                (allow sysadm_t perdition_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t perdition_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t perdition_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t perdition_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t perdition_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t perdition_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t perdition_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t perdition_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t perdition_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t perdition_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t perdition_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t perdition_runtime_t (dir (getattr open search)))
                (allow sysadm_t perdition_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t perdition_runtime_t (dir (getattr open search)))
                (allow sysadm_t perdition_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t perdition_runtime_t (dir (getattr open search)))
                (allow sysadm_t perdition_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t perdition_runtime_t (dir (getattr open search)))
                (allow sysadm_t perdition_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t perdition_runtime_t (dir (getattr open search)))
                (allow sysadm_t perdition_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_386
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_387
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require pingd_t)
                (typeattributeset cil_gen_require pingd_etc_t)
                (typeattributeset cil_gen_require pingd_modules_t)
                (typeattributeset cil_gen_require pingd_initrc_exec_t)
                (allow sysadm_t pingd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t pingd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t pingd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t pingd_t (lnk_file (read getattr)))
                (allow sysadm_t pingd_t (process (getattr)))
                (allow sysadm_t etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t pingd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pingd_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t pingd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pingd_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pingd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pingd_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t pingd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pingd_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pingd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pingd_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pingd_etc_t (dir (getattr open search)))
                (allow sysadm_t pingd_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t pingd_etc_t (dir (getattr open search)))
                (allow sysadm_t pingd_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t pingd_etc_t (dir (getattr open search)))
                (allow sysadm_t pingd_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pingd_etc_t (dir (getattr open search)))
                (allow sysadm_t pingd_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pingd_etc_t (dir (getattr open search)))
                (allow sysadm_t pingd_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t usr_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t pingd_modules_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pingd_modules_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t pingd_modules_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pingd_modules_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pingd_modules_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pingd_modules_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t pingd_modules_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pingd_modules_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pingd_modules_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pingd_modules_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pingd_modules_t (dir (getattr open search)))
                (allow sysadm_t pingd_modules_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t pingd_modules_t (dir (getattr open search)))
                (allow sysadm_t pingd_modules_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t pingd_modules_t (dir (getattr open search)))
                (allow sysadm_t pingd_modules_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pingd_modules_t (dir (getattr open search)))
                (allow sysadm_t pingd_modules_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pingd_modules_t (dir (getattr open search)))
                (allow sysadm_t pingd_modules_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_388
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_389
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require tmpfs_t)
                (typeattributeset cil_gen_require pkcs_slotd_t)
                (typeattributeset cil_gen_require pkcs_slotd_initrc_exec_t)
                (typeattributeset cil_gen_require pkcs_slotd_var_lib_t)
                (typeattributeset cil_gen_require pkcs_slotd_runtime_t)
                (typeattributeset cil_gen_require pkcs_slotd_tmp_t)
                (typeattributeset cil_gen_require pkcs_slotd_tmpfs_t)
                (allow sysadm_t pkcs_slotd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t pkcs_slotd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t pkcs_slotd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t pkcs_slotd_t (lnk_file (read getattr)))
                (allow sysadm_t pkcs_slotd_t (process (getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t pkcs_slotd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pkcs_slotd_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t pkcs_slotd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pkcs_slotd_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pkcs_slotd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pkcs_slotd_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t pkcs_slotd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pkcs_slotd_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pkcs_slotd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pkcs_slotd_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pkcs_slotd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t pkcs_slotd_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t pkcs_slotd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t pkcs_slotd_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t pkcs_slotd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t pkcs_slotd_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pkcs_slotd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t pkcs_slotd_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pkcs_slotd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t pkcs_slotd_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t pkcs_slotd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pkcs_slotd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t pkcs_slotd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pkcs_slotd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pkcs_slotd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pkcs_slotd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t pkcs_slotd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pkcs_slotd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pkcs_slotd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pkcs_slotd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pkcs_slotd_runtime_t (dir (getattr open search)))
                (allow sysadm_t pkcs_slotd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t pkcs_slotd_runtime_t (dir (getattr open search)))
                (allow sysadm_t pkcs_slotd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t pkcs_slotd_runtime_t (dir (getattr open search)))
                (allow sysadm_t pkcs_slotd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pkcs_slotd_runtime_t (dir (getattr open search)))
                (allow sysadm_t pkcs_slotd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pkcs_slotd_runtime_t (dir (getattr open search)))
                (allow sysadm_t pkcs_slotd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (getattr open search)))
                (allow sysadm_t pkcs_slotd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pkcs_slotd_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t pkcs_slotd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pkcs_slotd_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pkcs_slotd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pkcs_slotd_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t pkcs_slotd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pkcs_slotd_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pkcs_slotd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pkcs_slotd_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pkcs_slotd_tmp_t (dir (getattr open search)))
                (allow sysadm_t pkcs_slotd_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t pkcs_slotd_tmp_t (dir (getattr open search)))
                (allow sysadm_t pkcs_slotd_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t pkcs_slotd_tmp_t (dir (getattr open search)))
                (allow sysadm_t pkcs_slotd_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pkcs_slotd_tmp_t (dir (getattr open search)))
                (allow sysadm_t pkcs_slotd_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pkcs_slotd_tmp_t (dir (getattr open search)))
                (allow sysadm_t pkcs_slotd_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmpfs_t (dir (getattr open search)))
                (allow sysadm_t pkcs_slotd_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pkcs_slotd_tmpfs_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t pkcs_slotd_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pkcs_slotd_tmpfs_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pkcs_slotd_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pkcs_slotd_tmpfs_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t pkcs_slotd_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pkcs_slotd_tmpfs_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pkcs_slotd_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pkcs_slotd_tmpfs_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pkcs_slotd_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t pkcs_slotd_tmpfs_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t pkcs_slotd_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t pkcs_slotd_tmpfs_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t pkcs_slotd_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t pkcs_slotd_tmpfs_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pkcs_slotd_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t pkcs_slotd_tmpfs_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pkcs_slotd_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t pkcs_slotd_tmpfs_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_390
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_391
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require var_spool_t)
                (typeattributeset cil_gen_require plymouthd_t)
                (typeattributeset cil_gen_require plymouthd_spool_t)
                (typeattributeset cil_gen_require plymouthd_var_lib_t)
                (typeattributeset cil_gen_require plymouthd_runtime_t)
                (allow sysadm_t plymouthd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t plymouthd_t (dir (getattr open search)))
                (allow sysadm_t plymouthd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_spool_t (dir (getattr open search)))
                (allow sysadm_t plymouthd_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t plymouthd_spool_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t plymouthd_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t plymouthd_spool_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t plymouthd_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t plymouthd_spool_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t plymouthd_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t plymouthd_spool_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t plymouthd_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t plymouthd_spool_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t plymouthd_spool_t (dir (getattr open search)))
                (allow sysadm_t plymouthd_spool_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t plymouthd_spool_t (dir (getattr open search)))
                (allow sysadm_t plymouthd_spool_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t plymouthd_spool_t (dir (getattr open search)))
                (allow sysadm_t plymouthd_spool_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t plymouthd_spool_t (dir (getattr open search)))
                (allow sysadm_t plymouthd_spool_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t plymouthd_spool_t (dir (getattr open search)))
                (allow sysadm_t plymouthd_spool_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t plymouthd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t plymouthd_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t plymouthd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t plymouthd_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t plymouthd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t plymouthd_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t plymouthd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t plymouthd_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t plymouthd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t plymouthd_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t plymouthd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t plymouthd_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t plymouthd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t plymouthd_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t plymouthd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t plymouthd_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t plymouthd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t plymouthd_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t plymouthd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t plymouthd_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t plymouthd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t plymouthd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t plymouthd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t plymouthd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t plymouthd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t plymouthd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t plymouthd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t plymouthd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t plymouthd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t plymouthd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t plymouthd_runtime_t (dir (getattr open search)))
                (allow sysadm_t plymouthd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t plymouthd_runtime_t (dir (getattr open search)))
                (allow sysadm_t plymouthd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t plymouthd_runtime_t (dir (getattr open search)))
                (allow sysadm_t plymouthd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t plymouthd_runtime_t (dir (getattr open search)))
                (allow sysadm_t plymouthd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t plymouthd_runtime_t (dir (getattr open search)))
                (allow sysadm_t plymouthd_runtime_t (sock_file (getattr relabelfrom relabelto)))
            )
            (optional sysadm_optional_392
                (roleattributeset cil_gen_require portage_roles)
                (roleattributeset cil_gen_require portage_fetch_roles)
                (roleattributeset cil_gen_require gcc_config_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require portage_t)
                (typeattributeset cil_gen_require portage_exec_t)
                (typeattributeset cil_gen_require portage_tmp_t)
                (typeattributeset cil_gen_require portage_fetch_t)
                (typeattributeset cil_gen_require portage_fetch_exec_t)
                (typeattributeset cil_gen_require gcc_config_t)
                (typeattributeset cil_gen_require gcc_config_exec_t)
                (roleattributeset cil_gen_require portage_fetch_roles)
                (roleattributeset portage_fetch_roles (sysadm_r ))
                (roleattributeset cil_gen_require gcc_config_roles)
                (roleattributeset gcc_config_roles (sysadm_r ))
                (roleattributeset cil_gen_require portage_roles)
                (roleattributeset portage_roles (sysadm_r ))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t portage_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t portage_t (process (transition)))
                (dontaudit sysadm_t portage_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t portage_exec_t process portage_t)
                (allow portage_t sysadm_t (fd (use)))
                (allow portage_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow portage_t sysadm_t (process (sigchld)))
                (allow sysadm_t portage_tmp_t (file (ioctl read getattr lock map execute open execute_no_trans)))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t portage_fetch_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t portage_fetch_t (process (transition)))
                (dontaudit sysadm_t portage_fetch_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t portage_fetch_exec_t process portage_fetch_t)
                (allow portage_fetch_t sysadm_t (fd (use)))
                (allow portage_fetch_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow portage_fetch_t sysadm_t (process (sigchld)))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t gcc_config_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t gcc_config_t (process (transition)))
                (dontaudit sysadm_t gcc_config_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t gcc_config_exec_t process gcc_config_t)
                (allow gcc_config_t sysadm_t (fd (use)))
                (allow gcc_config_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow gcc_config_t sysadm_t (process (sigchld)))
                (allow sysadm_t gcc_config_t (process2 (nnp_transition)))
            )
            (optional sysadm_optional_393
                (roleattributeset cil_gen_require portmap_helper_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require portmap_helper_t)
                (typeattributeset cil_gen_require portmap_helper_exec_t)
                (typeattributeset cil_gen_require portmap_t)
                (typeattributeset cil_gen_require portmap_initrc_exec_t)
                (typeattributeset cil_gen_require portmap_runtime_t)
                (typeattributeset cil_gen_require portmap_tmp_t)
                (roleattributeset cil_gen_require portmap_helper_roles)
                (roleattributeset portmap_helper_roles (sysadm_r ))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t portmap_helper_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t portmap_helper_t (process (transition)))
                (dontaudit sysadm_t portmap_helper_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t portmap_helper_exec_t process portmap_helper_t)
                (allow portmap_helper_t sysadm_t (fd (use)))
                (allow portmap_helper_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow portmap_helper_t sysadm_t (process (sigchld)))
                (allow sysadm_t portmap_helper_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t portmap_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t portmap_helper_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t portmap_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t portmap_helper_t (file (ioctl read getattr lock open)))
                (allow sysadm_t portmap_t (file (ioctl read getattr lock open)))
                (allow sysadm_t portmap_helper_t (lnk_file (read getattr)))
                (allow sysadm_t portmap_t (lnk_file (read getattr)))
                (allow sysadm_t portmap_helper_t (process (getattr)))
                (allow sysadm_t portmap_t (process (getattr)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t portmap_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t portmap_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t portmap_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t portmap_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t portmap_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t portmap_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t portmap_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t portmap_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t portmap_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t portmap_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t portmap_runtime_t (dir (getattr open search)))
                (allow sysadm_t portmap_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t portmap_runtime_t (dir (getattr open search)))
                (allow sysadm_t portmap_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t portmap_runtime_t (dir (getattr open search)))
                (allow sysadm_t portmap_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t portmap_runtime_t (dir (getattr open search)))
                (allow sysadm_t portmap_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t portmap_runtime_t (dir (getattr open search)))
                (allow sysadm_t portmap_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (getattr open search)))
                (allow sysadm_t portmap_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t portmap_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t portmap_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t portmap_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t portmap_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t portmap_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t portmap_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t portmap_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t portmap_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t portmap_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t portmap_tmp_t (dir (getattr open search)))
                (allow sysadm_t portmap_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t portmap_tmp_t (dir (getattr open search)))
                (allow sysadm_t portmap_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t portmap_tmp_t (dir (getattr open search)))
                (allow sysadm_t portmap_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t portmap_tmp_t (dir (getattr open search)))
                (allow sysadm_t portmap_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t portmap_tmp_t (dir (getattr open search)))
                (allow sysadm_t portmap_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_394
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_395
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require portreserve_t)
                (typeattributeset cil_gen_require portreserve_etc_t)
                (typeattributeset cil_gen_require portreserve_runtime_t)
                (typeattributeset cil_gen_require portreserve_initrc_exec_t)
                (allow sysadm_t portreserve_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t portreserve_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t portreserve_t (file (ioctl read getattr lock open)))
                (allow sysadm_t portreserve_t (lnk_file (read getattr)))
                (allow sysadm_t portreserve_t (process (getattr)))
                (allow sysadm_t etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t portreserve_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t portreserve_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t portreserve_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t portreserve_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t portreserve_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t portreserve_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t portreserve_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t portreserve_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t portreserve_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t portreserve_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t portreserve_etc_t (dir (getattr open search)))
                (allow sysadm_t portreserve_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t portreserve_etc_t (dir (getattr open search)))
                (allow sysadm_t portreserve_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t portreserve_etc_t (dir (getattr open search)))
                (allow sysadm_t portreserve_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t portreserve_etc_t (dir (getattr open search)))
                (allow sysadm_t portreserve_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t portreserve_etc_t (dir (getattr open search)))
                (allow sysadm_t portreserve_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t portreserve_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t portreserve_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t portreserve_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t portreserve_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t portreserve_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t portreserve_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t portreserve_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t portreserve_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t portreserve_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t portreserve_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t portreserve_runtime_t (dir (getattr open search)))
                (allow sysadm_t portreserve_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t portreserve_runtime_t (dir (getattr open search)))
                (allow sysadm_t portreserve_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t portreserve_runtime_t (dir (getattr open search)))
                (allow sysadm_t portreserve_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t portreserve_runtime_t (dir (getattr open search)))
                (allow sysadm_t portreserve_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t portreserve_runtime_t (dir (getattr open search)))
                (allow sysadm_t portreserve_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_396
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_397
                (roleattributeset cil_gen_require postfix_map_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require console_device_t)
                (typeattributeset cil_gen_require device_t)
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require syslogd_t)
                (typeattributeset cil_gen_require syslogd_runtime_t)
                (typeattributeset cil_gen_require devlog_t)
                (typeattributeset cil_gen_require init_runtime_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require var_spool_t)
                (typeattributeset cil_gen_require postfix_domain)
                (typeattributeset cil_gen_require postfix_spool_type)
                (typeattributeset cil_gen_require postfix_server_tmp_content)
                (typeattributeset cil_gen_require postfix_initrc_exec_t)
                (typeattributeset cil_gen_require postfix_prng_t)
                (typeattributeset cil_gen_require postfix_etc_t)
                (typeattributeset cil_gen_require postfix_data_t)
                (typeattributeset cil_gen_require postfix_runtime_t)
                (typeattributeset cil_gen_require postfix_public_t)
                (typeattributeset cil_gen_require postfix_private_t)
                (typeattributeset cil_gen_require postfix_map_tmp_t)
                (typeattributeset cil_gen_require postfix_exec_t)
                (typeattributeset cil_gen_require postfix_keytab_t)
                (typeattributeset cil_gen_require postfix_master_t)
                (typeattributeset cil_gen_require postfix_master_exec_t)
                (typeattributeset cil_gen_require postfix_postqueue_exec_t)
                (typeattributeset cil_gen_require postfix_map_t)
                (typeattributeset cil_gen_require postfix_map_exec_t)
                (typeattributeset cil_gen_require postfix_showq_exec_t)
                (typeattributeset cil_gen_require postfix_postqueue_t)
                (roleattributeset cil_gen_require postfix_map_roles)
                (roleattributeset postfix_map_roles (sysadm_r ))
                (allow sysadm_t postfix_domain (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t postfix_domain (dir (ioctl read getattr lock open search)))
                (allow sysadm_t postfix_domain (file (ioctl read getattr lock open)))
                (allow sysadm_t postfix_domain (lnk_file (read getattr)))
                (allow sysadm_t postfix_domain (process (getattr)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t postfix_prng_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_exec_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_prng_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t postfix_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t postfix_exec_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t postfix_keytab_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t postfix_prng_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_exec_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_prng_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postfix_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postfix_exec_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postfix_keytab_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postfix_prng_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_exec_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_prng_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t postfix_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t postfix_exec_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t postfix_keytab_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t postfix_prng_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_exec_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_prng_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postfix_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postfix_exec_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postfix_keytab_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postfix_prng_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_exec_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_prng_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postfix_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postfix_exec_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postfix_keytab_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postfix_prng_t (dir (getattr open search)))
                (allow sysadm_t postfix_etc_t (dir (getattr open search)))
                (allow sysadm_t postfix_exec_t (dir (getattr open search)))
                (allow sysadm_t postfix_keytab_t (dir (getattr open search)))
                (allow sysadm_t postfix_prng_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t postfix_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t postfix_exec_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t postfix_keytab_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t postfix_prng_t (dir (getattr open search)))
                (allow sysadm_t postfix_etc_t (dir (getattr open search)))
                (allow sysadm_t postfix_exec_t (dir (getattr open search)))
                (allow sysadm_t postfix_keytab_t (dir (getattr open search)))
                (allow sysadm_t postfix_prng_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t postfix_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t postfix_exec_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t postfix_keytab_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t postfix_prng_t (dir (getattr open search)))
                (allow sysadm_t postfix_etc_t (dir (getattr open search)))
                (allow sysadm_t postfix_exec_t (dir (getattr open search)))
                (allow sysadm_t postfix_keytab_t (dir (getattr open search)))
                (allow sysadm_t postfix_prng_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t postfix_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t postfix_exec_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t postfix_keytab_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t postfix_prng_t (dir (getattr open search)))
                (allow sysadm_t postfix_etc_t (dir (getattr open search)))
                (allow sysadm_t postfix_exec_t (dir (getattr open search)))
                (allow sysadm_t postfix_keytab_t (dir (getattr open search)))
                (allow sysadm_t postfix_prng_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t postfix_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t postfix_exec_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t postfix_keytab_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t postfix_prng_t (dir (getattr open search)))
                (allow sysadm_t postfix_etc_t (dir (getattr open search)))
                (allow sysadm_t postfix_exec_t (dir (getattr open search)))
                (allow sysadm_t postfix_keytab_t (dir (getattr open search)))
                (allow sysadm_t postfix_prng_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t postfix_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t postfix_exec_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t postfix_keytab_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_spool_t (dir (getattr open search)))
                (allow sysadm_t postfix_spool_type (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_public_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_private_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_spool_type (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t postfix_public_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t postfix_private_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t postfix_spool_type (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_public_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_private_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_spool_type (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postfix_public_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postfix_private_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postfix_spool_type (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_public_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_private_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_spool_type (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t postfix_public_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t postfix_private_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t postfix_spool_type (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_public_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_private_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_spool_type (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postfix_public_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postfix_private_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postfix_spool_type (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_public_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_private_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_spool_type (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postfix_public_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postfix_private_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postfix_spool_type (dir (getattr open search)))
                (allow sysadm_t postfix_public_t (dir (getattr open search)))
                (allow sysadm_t postfix_private_t (dir (getattr open search)))
                (allow sysadm_t postfix_spool_type (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t postfix_public_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t postfix_private_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t postfix_spool_type (dir (getattr open search)))
                (allow sysadm_t postfix_public_t (dir (getattr open search)))
                (allow sysadm_t postfix_private_t (dir (getattr open search)))
                (allow sysadm_t postfix_spool_type (file (getattr relabelfrom relabelto)))
                (allow sysadm_t postfix_public_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t postfix_private_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t postfix_spool_type (dir (getattr open search)))
                (allow sysadm_t postfix_public_t (dir (getattr open search)))
                (allow sysadm_t postfix_private_t (dir (getattr open search)))
                (allow sysadm_t postfix_spool_type (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t postfix_public_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t postfix_private_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t postfix_spool_type (dir (getattr open search)))
                (allow sysadm_t postfix_public_t (dir (getattr open search)))
                (allow sysadm_t postfix_private_t (dir (getattr open search)))
                (allow sysadm_t postfix_spool_type (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t postfix_public_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t postfix_private_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t postfix_spool_type (dir (getattr open search)))
                (allow sysadm_t postfix_public_t (dir (getattr open search)))
                (allow sysadm_t postfix_private_t (dir (getattr open search)))
                (allow sysadm_t postfix_spool_type (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t postfix_public_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t postfix_private_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t postfix_data_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_data_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t postfix_data_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_data_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postfix_data_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_data_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t postfix_data_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_data_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postfix_data_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_data_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postfix_data_t (dir (getattr open search)))
                (allow sysadm_t postfix_data_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t postfix_data_t (dir (getattr open search)))
                (allow sysadm_t postfix_data_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t postfix_data_t (dir (getattr open search)))
                (allow sysadm_t postfix_data_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t postfix_data_t (dir (getattr open search)))
                (allow sysadm_t postfix_data_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t postfix_data_t (dir (getattr open search)))
                (allow sysadm_t postfix_data_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t postfix_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t postfix_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postfix_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t postfix_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postfix_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postfix_runtime_t (dir (getattr open search)))
                (allow sysadm_t postfix_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t postfix_runtime_t (dir (getattr open search)))
                (allow sysadm_t postfix_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t postfix_runtime_t (dir (getattr open search)))
                (allow sysadm_t postfix_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t postfix_runtime_t (dir (getattr open search)))
                (allow sysadm_t postfix_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t postfix_runtime_t (dir (getattr open search)))
                (allow sysadm_t postfix_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (getattr open search)))
                (allow sysadm_t postfix_server_tmp_content (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_map_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_server_tmp_content (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t postfix_map_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t postfix_server_tmp_content (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_map_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_server_tmp_content (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postfix_map_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postfix_server_tmp_content (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_map_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_server_tmp_content (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t postfix_map_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t postfix_server_tmp_content (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_map_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_server_tmp_content (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postfix_map_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postfix_server_tmp_content (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_map_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_server_tmp_content (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postfix_map_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postfix_server_tmp_content (dir (getattr open search)))
                (allow sysadm_t postfix_map_tmp_t (dir (getattr open search)))
                (allow sysadm_t postfix_server_tmp_content (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t postfix_map_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t postfix_server_tmp_content (dir (getattr open search)))
                (allow sysadm_t postfix_map_tmp_t (dir (getattr open search)))
                (allow sysadm_t postfix_server_tmp_content (file (getattr relabelfrom relabelto)))
                (allow sysadm_t postfix_map_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t postfix_server_tmp_content (dir (getattr open search)))
                (allow sysadm_t postfix_map_tmp_t (dir (getattr open search)))
                (allow sysadm_t postfix_server_tmp_content (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t postfix_map_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t postfix_server_tmp_content (dir (getattr open search)))
                (allow sysadm_t postfix_map_tmp_t (dir (getattr open search)))
                (allow sysadm_t postfix_server_tmp_content (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t postfix_map_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t postfix_server_tmp_content (dir (getattr open search)))
                (allow sysadm_t postfix_map_tmp_t (dir (getattr open search)))
                (allow sysadm_t postfix_server_tmp_content (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t postfix_map_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t postfix_master_exec_t (file (ioctl read getattr lock map execute open execute_no_trans)))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t postfix_postqueue_exec_t (file (ioctl read getattr lock map execute open execute_no_trans)))
                (allow sysadm_t postfix_public_t (dir (getattr open search)))
                (allow sysadm_t postfix_public_t (sock_file (write getattr append open)))
                (allow sysadm_t postfix_master_t (unix_stream_socket (connectto)))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t postfix_map_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t postfix_map_t (process (transition)))
                (dontaudit sysadm_t postfix_map_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t postfix_map_exec_t process postfix_map_t)
                (allow postfix_map_t sysadm_t (fd (use)))
                (allow postfix_map_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow postfix_map_t sysadm_t (process (sigchld)))
                (allow postfix_postqueue_t sysadm_t (process (sigchld)))
                (allow sysadm_t postfix_showq_exec_t (file (ioctl read getattr lock map execute open execute_no_trans)))
                (allow sysadm_t postfix_master_exec_t (file (ioctl read getattr lock map execute open execute_no_trans)))
                (allow sysadm_t devlog_t (sock_file (write getattr append open)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t init_runtime_t (dir (getattr open search)))
                (allow sysadm_t syslogd_runtime_t (dir (getattr open search)))
                (allow sysadm_t syslogd_t (unix_dgram_socket (sendto)))
                (allow sysadm_t syslogd_t (unix_stream_socket (connectto)))
                (allow sysadm_t self (unix_dgram_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
                (allow sysadm_t self (unix_stream_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
                (allow sysadm_t device_t (dir (getattr open search)))
                (allow sysadm_t device_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t device_t (dir (getattr open search)))
                (allow sysadm_t device_t (lnk_file (read getattr)))
                (allow sysadm_t console_device_t (chr_file (ioctl write getattr lock append open)))
                (dontaudit sysadm_t console_device_t (chr_file (ioctl read getattr lock open)))
                (allow sysadm_t self (tcp_socket (ioctl read write create getattr setattr append bind connect listen accept getopt setopt shutdown)))
                (allow sysadm_t self (netlink_route_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown nlmsg_read)))
                (allow sysadm_t self (capability (setgid setuid)))
                (optional sysadm_optional_398
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_399
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require postfix_policyd_t)
                (typeattributeset cil_gen_require postfix_policyd_conf_t)
                (typeattributeset cil_gen_require postfix_policyd_runtime_t)
                (typeattributeset cil_gen_require postfix_policyd_initrc_exec_t)
                (allow sysadm_t postfix_policyd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t postfix_policyd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t postfix_policyd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t postfix_policyd_t (lnk_file (read getattr)))
                (allow sysadm_t postfix_policyd_t (process (getattr)))
                (allow sysadm_t etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t postfix_policyd_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_policyd_conf_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t postfix_policyd_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_policyd_conf_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postfix_policyd_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_policyd_conf_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t postfix_policyd_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_policyd_conf_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postfix_policyd_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_policyd_conf_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postfix_policyd_conf_t (dir (getattr open search)))
                (allow sysadm_t postfix_policyd_conf_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t postfix_policyd_conf_t (dir (getattr open search)))
                (allow sysadm_t postfix_policyd_conf_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t postfix_policyd_conf_t (dir (getattr open search)))
                (allow sysadm_t postfix_policyd_conf_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t postfix_policyd_conf_t (dir (getattr open search)))
                (allow sysadm_t postfix_policyd_conf_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t postfix_policyd_conf_t (dir (getattr open search)))
                (allow sysadm_t postfix_policyd_conf_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t postfix_policyd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_policyd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t postfix_policyd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_policyd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postfix_policyd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_policyd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t postfix_policyd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_policyd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postfix_policyd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postfix_policyd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postfix_policyd_runtime_t (dir (getattr open search)))
                (allow sysadm_t postfix_policyd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t postfix_policyd_runtime_t (dir (getattr open search)))
                (allow sysadm_t postfix_policyd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t postfix_policyd_runtime_t (dir (getattr open search)))
                (allow sysadm_t postfix_policyd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t postfix_policyd_runtime_t (dir (getattr open search)))
                (allow sysadm_t postfix_policyd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t postfix_policyd_runtime_t (dir (getattr open search)))
                (allow sysadm_t postfix_policyd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_400
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_401
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require var_spool_t)
                (typeattributeset cil_gen_require postgrey_t)
                (typeattributeset cil_gen_require postgrey_etc_t)
                (typeattributeset cil_gen_require postgrey_spool_t)
                (typeattributeset cil_gen_require postgrey_var_lib_t)
                (typeattributeset cil_gen_require postgrey_runtime_t)
                (typeattributeset cil_gen_require postgrey_initrc_exec_t)
                (allow sysadm_t postgrey_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t postgrey_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t postgrey_t (file (ioctl read getattr lock open)))
                (allow sysadm_t postgrey_t (lnk_file (read getattr)))
                (allow sysadm_t postgrey_t (process (getattr)))
                (allow sysadm_t etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t postgrey_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postgrey_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t postgrey_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postgrey_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postgrey_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postgrey_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t postgrey_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postgrey_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postgrey_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postgrey_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postgrey_etc_t (dir (getattr open search)))
                (allow sysadm_t postgrey_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t postgrey_etc_t (dir (getattr open search)))
                (allow sysadm_t postgrey_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t postgrey_etc_t (dir (getattr open search)))
                (allow sysadm_t postgrey_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t postgrey_etc_t (dir (getattr open search)))
                (allow sysadm_t postgrey_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t postgrey_etc_t (dir (getattr open search)))
                (allow sysadm_t postgrey_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t postgrey_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postgrey_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t postgrey_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postgrey_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postgrey_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postgrey_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t postgrey_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postgrey_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postgrey_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postgrey_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postgrey_var_lib_t (dir (getattr open search)))
                (allow sysadm_t postgrey_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t postgrey_var_lib_t (dir (getattr open search)))
                (allow sysadm_t postgrey_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t postgrey_var_lib_t (dir (getattr open search)))
                (allow sysadm_t postgrey_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t postgrey_var_lib_t (dir (getattr open search)))
                (allow sysadm_t postgrey_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t postgrey_var_lib_t (dir (getattr open search)))
                (allow sysadm_t postgrey_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_spool_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t postgrey_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postgrey_spool_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t postgrey_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postgrey_spool_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postgrey_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postgrey_spool_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t postgrey_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postgrey_spool_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postgrey_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postgrey_spool_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postgrey_spool_t (dir (getattr open search)))
                (allow sysadm_t postgrey_spool_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t postgrey_spool_t (dir (getattr open search)))
                (allow sysadm_t postgrey_spool_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t postgrey_spool_t (dir (getattr open search)))
                (allow sysadm_t postgrey_spool_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t postgrey_spool_t (dir (getattr open search)))
                (allow sysadm_t postgrey_spool_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t postgrey_spool_t (dir (getattr open search)))
                (allow sysadm_t postgrey_spool_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t postgrey_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postgrey_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t postgrey_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postgrey_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postgrey_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postgrey_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t postgrey_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postgrey_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postgrey_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postgrey_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postgrey_runtime_t (dir (getattr open search)))
                (allow sysadm_t postgrey_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t postgrey_runtime_t (dir (getattr open search)))
                (allow sysadm_t postgrey_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t postgrey_runtime_t (dir (getattr open search)))
                (allow sysadm_t postgrey_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t postgrey_runtime_t (dir (getattr open search)))
                (allow sysadm_t postgrey_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t postgrey_runtime_t (dir (getattr open search)))
                (allow sysadm_t postgrey_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_402
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_403
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require var_lock_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require pppd_t)
                (typeattributeset cil_gen_require pppd_tmp_t)
                (typeattributeset cil_gen_require pppd_log_t)
                (typeattributeset cil_gen_require pppd_lock_t)
                (typeattributeset cil_gen_require pppd_etc_t)
                (typeattributeset cil_gen_require pppd_secret_t)
                (typeattributeset cil_gen_require pppd_etc_rw_t)
                (typeattributeset cil_gen_require pppd_runtime_t)
                (typeattributeset cil_gen_require pppd_initrc_exec_t)
                (typeattributeset cil_gen_require pptp_t)
                (typeattributeset cil_gen_require pptp_log_t)
                (typeattributeset cil_gen_require pptp_runtime_t)
                (allow sysadm_t pppd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t pptp_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t pppd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t pptp_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t pppd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t pptp_t (file (ioctl read getattr lock open)))
                (allow sysadm_t pppd_t (lnk_file (read getattr)))
                (allow sysadm_t pptp_t (lnk_file (read getattr)))
                (allow sysadm_t pppd_t (process (getattr)))
                (allow sysadm_t pptp_t (process (getattr)))
                (allow sysadm_t tmp_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t pppd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pppd_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t pppd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pppd_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pppd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pppd_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t pppd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pppd_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pppd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pppd_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pppd_tmp_t (dir (getattr open search)))
                (allow sysadm_t pppd_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t pppd_tmp_t (dir (getattr open search)))
                (allow sysadm_t pppd_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t pppd_tmp_t (dir (getattr open search)))
                (allow sysadm_t pppd_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pppd_tmp_t (dir (getattr open search)))
                (allow sysadm_t pppd_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pppd_tmp_t (dir (getattr open search)))
                (allow sysadm_t pppd_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t pppd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pptp_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pppd_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t pptp_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t pppd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pptp_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pppd_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pptp_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pppd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pptp_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pppd_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t pptp_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t pppd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pptp_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pppd_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pptp_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pppd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pptp_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pppd_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pptp_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pppd_log_t (dir (getattr open search)))
                (allow sysadm_t pptp_log_t (dir (getattr open search)))
                (allow sysadm_t pppd_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t pptp_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t pppd_log_t (dir (getattr open search)))
                (allow sysadm_t pptp_log_t (dir (getattr open search)))
                (allow sysadm_t pppd_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t pptp_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t pppd_log_t (dir (getattr open search)))
                (allow sysadm_t pptp_log_t (dir (getattr open search)))
                (allow sysadm_t pppd_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pptp_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pppd_log_t (dir (getattr open search)))
                (allow sysadm_t pptp_log_t (dir (getattr open search)))
                (allow sysadm_t pppd_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pptp_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pppd_log_t (dir (getattr open search)))
                (allow sysadm_t pptp_log_t (dir (getattr open search)))
                (allow sysadm_t pppd_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pptp_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_lock_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lock_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t pppd_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pppd_lock_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t pppd_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pppd_lock_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pppd_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pppd_lock_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t pppd_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pppd_lock_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pppd_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pppd_lock_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pppd_lock_t (dir (getattr open search)))
                (allow sysadm_t pppd_lock_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t pppd_lock_t (dir (getattr open search)))
                (allow sysadm_t pppd_lock_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t pppd_lock_t (dir (getattr open search)))
                (allow sysadm_t pppd_lock_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pppd_lock_t (dir (getattr open search)))
                (allow sysadm_t pppd_lock_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pppd_lock_t (dir (getattr open search)))
                (allow sysadm_t pppd_lock_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t pppd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pppd_secret_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pppd_etc_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pppd_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t pppd_secret_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t pppd_etc_rw_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t pppd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pppd_secret_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pppd_etc_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pppd_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pppd_secret_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pppd_etc_rw_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pppd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pppd_secret_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pppd_etc_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pppd_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t pppd_secret_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t pppd_etc_rw_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t pppd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pppd_secret_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pppd_etc_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pppd_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pppd_secret_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pppd_etc_rw_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pppd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pppd_secret_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pppd_etc_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pppd_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pppd_secret_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pppd_etc_rw_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pppd_etc_t (dir (getattr open search)))
                (allow sysadm_t pppd_secret_t (dir (getattr open search)))
                (allow sysadm_t pppd_etc_rw_t (dir (getattr open search)))
                (allow sysadm_t pppd_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t pppd_secret_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t pppd_etc_rw_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t pppd_etc_t (dir (getattr open search)))
                (allow sysadm_t pppd_secret_t (dir (getattr open search)))
                (allow sysadm_t pppd_etc_rw_t (dir (getattr open search)))
                (allow sysadm_t pppd_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t pppd_secret_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t pppd_etc_rw_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t pppd_etc_t (dir (getattr open search)))
                (allow sysadm_t pppd_secret_t (dir (getattr open search)))
                (allow sysadm_t pppd_etc_rw_t (dir (getattr open search)))
                (allow sysadm_t pppd_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pppd_secret_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pppd_etc_rw_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pppd_etc_t (dir (getattr open search)))
                (allow sysadm_t pppd_secret_t (dir (getattr open search)))
                (allow sysadm_t pppd_etc_rw_t (dir (getattr open search)))
                (allow sysadm_t pppd_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pppd_secret_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pppd_etc_rw_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pppd_etc_t (dir (getattr open search)))
                (allow sysadm_t pppd_secret_t (dir (getattr open search)))
                (allow sysadm_t pppd_etc_rw_t (dir (getattr open search)))
                (allow sysadm_t pppd_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pppd_secret_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pppd_etc_rw_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t pppd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pptp_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pppd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t pptp_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t pppd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pptp_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pppd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pptp_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pppd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pptp_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pppd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t pptp_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t pppd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pptp_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pppd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pptp_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pppd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pptp_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pppd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pptp_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pppd_runtime_t (dir (getattr open search)))
                (allow sysadm_t pptp_runtime_t (dir (getattr open search)))
                (allow sysadm_t pppd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t pptp_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t pppd_runtime_t (dir (getattr open search)))
                (allow sysadm_t pptp_runtime_t (dir (getattr open search)))
                (allow sysadm_t pppd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t pptp_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t pppd_runtime_t (dir (getattr open search)))
                (allow sysadm_t pptp_runtime_t (dir (getattr open search)))
                (allow sysadm_t pppd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pptp_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pppd_runtime_t (dir (getattr open search)))
                (allow sysadm_t pptp_runtime_t (dir (getattr open search)))
                (allow sysadm_t pppd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pptp_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pppd_runtime_t (dir (getattr open search)))
                (allow sysadm_t pptp_runtime_t (dir (getattr open search)))
                (allow sysadm_t pppd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pptp_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_404
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_405
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require var_spool_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require prelude_t)
                (typeattributeset cil_gen_require prelude_spool_t)
                (typeattributeset cil_gen_require prelude_lml_runtime_t)
                (typeattributeset cil_gen_require prelude_runtime_t)
                (typeattributeset cil_gen_require prelude_var_lib_t)
                (typeattributeset cil_gen_require prelude_log_t)
                (typeattributeset cil_gen_require prelude_audisp_t)
                (typeattributeset cil_gen_require prelude_audisp_runtime_t)
                (typeattributeset cil_gen_require prelude_initrc_exec_t)
                (typeattributeset cil_gen_require prelude_lml_t)
                (typeattributeset cil_gen_require prelude_lml_tmp_t)
                (typeattributeset cil_gen_require prelude_correlator_t)
                (allow sysadm_t prelude_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t prelude_audisp_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t prelude_lml_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t prelude_correlator_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t prelude_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t prelude_audisp_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t prelude_lml_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t prelude_correlator_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t prelude_t (file (ioctl read getattr lock open)))
                (allow sysadm_t prelude_audisp_t (file (ioctl read getattr lock open)))
                (allow sysadm_t prelude_lml_t (file (ioctl read getattr lock open)))
                (allow sysadm_t prelude_correlator_t (file (ioctl read getattr lock open)))
                (allow sysadm_t prelude_t (lnk_file (read getattr)))
                (allow sysadm_t prelude_audisp_t (lnk_file (read getattr)))
                (allow sysadm_t prelude_lml_t (lnk_file (read getattr)))
                (allow sysadm_t prelude_correlator_t (lnk_file (read getattr)))
                (allow sysadm_t prelude_t (process (getattr)))
                (allow sysadm_t prelude_audisp_t (process (getattr)))
                (allow sysadm_t prelude_lml_t (process (getattr)))
                (allow sysadm_t prelude_correlator_t (process (getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_spool_t (dir (getattr open search)))
                (allow sysadm_t prelude_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t prelude_spool_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t prelude_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t prelude_spool_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t prelude_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t prelude_spool_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t prelude_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t prelude_spool_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t prelude_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t prelude_spool_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t prelude_spool_t (dir (getattr open search)))
                (allow sysadm_t prelude_spool_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t prelude_spool_t (dir (getattr open search)))
                (allow sysadm_t prelude_spool_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t prelude_spool_t (dir (getattr open search)))
                (allow sysadm_t prelude_spool_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t prelude_spool_t (dir (getattr open search)))
                (allow sysadm_t prelude_spool_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t prelude_spool_t (dir (getattr open search)))
                (allow sysadm_t prelude_spool_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t prelude_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t prelude_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t prelude_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t prelude_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t prelude_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t prelude_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t prelude_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t prelude_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t prelude_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t prelude_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t prelude_log_t (dir (getattr open search)))
                (allow sysadm_t prelude_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t prelude_log_t (dir (getattr open search)))
                (allow sysadm_t prelude_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t prelude_log_t (dir (getattr open search)))
                (allow sysadm_t prelude_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t prelude_log_t (dir (getattr open search)))
                (allow sysadm_t prelude_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t prelude_log_t (dir (getattr open search)))
                (allow sysadm_t prelude_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t prelude_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t prelude_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t prelude_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t prelude_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t prelude_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t prelude_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t prelude_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t prelude_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t prelude_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t prelude_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t prelude_var_lib_t (dir (getattr open search)))
                (allow sysadm_t prelude_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t prelude_var_lib_t (dir (getattr open search)))
                (allow sysadm_t prelude_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t prelude_var_lib_t (dir (getattr open search)))
                (allow sysadm_t prelude_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t prelude_var_lib_t (dir (getattr open search)))
                (allow sysadm_t prelude_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t prelude_var_lib_t (dir (getattr open search)))
                (allow sysadm_t prelude_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t prelude_lml_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t prelude_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t prelude_audisp_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t prelude_lml_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t prelude_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t prelude_audisp_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t prelude_lml_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t prelude_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t prelude_audisp_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t prelude_lml_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t prelude_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t prelude_audisp_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t prelude_lml_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t prelude_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t prelude_audisp_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t prelude_lml_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t prelude_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t prelude_audisp_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t prelude_lml_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t prelude_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t prelude_audisp_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t prelude_lml_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t prelude_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t prelude_audisp_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t prelude_lml_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t prelude_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t prelude_audisp_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t prelude_lml_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t prelude_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t prelude_audisp_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t prelude_lml_runtime_t (dir (getattr open search)))
                (allow sysadm_t prelude_runtime_t (dir (getattr open search)))
                (allow sysadm_t prelude_audisp_runtime_t (dir (getattr open search)))
                (allow sysadm_t prelude_lml_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t prelude_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t prelude_audisp_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t prelude_lml_runtime_t (dir (getattr open search)))
                (allow sysadm_t prelude_runtime_t (dir (getattr open search)))
                (allow sysadm_t prelude_audisp_runtime_t (dir (getattr open search)))
                (allow sysadm_t prelude_lml_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t prelude_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t prelude_audisp_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t prelude_lml_runtime_t (dir (getattr open search)))
                (allow sysadm_t prelude_runtime_t (dir (getattr open search)))
                (allow sysadm_t prelude_audisp_runtime_t (dir (getattr open search)))
                (allow sysadm_t prelude_lml_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t prelude_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t prelude_audisp_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t prelude_lml_runtime_t (dir (getattr open search)))
                (allow sysadm_t prelude_runtime_t (dir (getattr open search)))
                (allow sysadm_t prelude_audisp_runtime_t (dir (getattr open search)))
                (allow sysadm_t prelude_lml_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t prelude_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t prelude_audisp_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t prelude_lml_runtime_t (dir (getattr open search)))
                (allow sysadm_t prelude_runtime_t (dir (getattr open search)))
                (allow sysadm_t prelude_audisp_runtime_t (dir (getattr open search)))
                (allow sysadm_t prelude_lml_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t prelude_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t prelude_audisp_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (getattr open search)))
                (allow sysadm_t prelude_lml_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t prelude_lml_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t prelude_lml_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t prelude_lml_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t prelude_lml_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t prelude_lml_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t prelude_lml_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t prelude_lml_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t prelude_lml_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t prelude_lml_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t prelude_lml_tmp_t (dir (getattr open search)))
                (allow sysadm_t prelude_lml_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t prelude_lml_tmp_t (dir (getattr open search)))
                (allow sysadm_t prelude_lml_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t prelude_lml_tmp_t (dir (getattr open search)))
                (allow sysadm_t prelude_lml_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t prelude_lml_tmp_t (dir (getattr open search)))
                (allow sysadm_t prelude_lml_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t prelude_lml_tmp_t (dir (getattr open search)))
                (allow sysadm_t prelude_lml_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_406
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_407
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require privoxy_t)
                (typeattributeset cil_gen_require privoxy_log_t)
                (typeattributeset cil_gen_require privoxy_initrc_exec_t)
                (typeattributeset cil_gen_require privoxy_etc_rw_t)
                (typeattributeset cil_gen_require privoxy_runtime_t)
                (allow sysadm_t privoxy_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t privoxy_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t privoxy_t (file (ioctl read getattr lock open)))
                (allow sysadm_t privoxy_t (lnk_file (read getattr)))
                (allow sysadm_t privoxy_t (process (getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t privoxy_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t privoxy_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t privoxy_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t privoxy_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t privoxy_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t privoxy_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t privoxy_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t privoxy_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t privoxy_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t privoxy_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t privoxy_log_t (dir (getattr open search)))
                (allow sysadm_t privoxy_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t privoxy_log_t (dir (getattr open search)))
                (allow sysadm_t privoxy_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t privoxy_log_t (dir (getattr open search)))
                (allow sysadm_t privoxy_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t privoxy_log_t (dir (getattr open search)))
                (allow sysadm_t privoxy_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t privoxy_log_t (dir (getattr open search)))
                (allow sysadm_t privoxy_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t privoxy_etc_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t privoxy_etc_rw_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t privoxy_etc_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t privoxy_etc_rw_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t privoxy_etc_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t privoxy_etc_rw_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t privoxy_etc_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t privoxy_etc_rw_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t privoxy_etc_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t privoxy_etc_rw_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t privoxy_etc_rw_t (dir (getattr open search)))
                (allow sysadm_t privoxy_etc_rw_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t privoxy_etc_rw_t (dir (getattr open search)))
                (allow sysadm_t privoxy_etc_rw_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t privoxy_etc_rw_t (dir (getattr open search)))
                (allow sysadm_t privoxy_etc_rw_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t privoxy_etc_rw_t (dir (getattr open search)))
                (allow sysadm_t privoxy_etc_rw_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t privoxy_etc_rw_t (dir (getattr open search)))
                (allow sysadm_t privoxy_etc_rw_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t privoxy_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t privoxy_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t privoxy_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t privoxy_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t privoxy_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t privoxy_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t privoxy_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t privoxy_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t privoxy_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t privoxy_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t privoxy_runtime_t (dir (getattr open search)))
                (allow sysadm_t privoxy_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t privoxy_runtime_t (dir (getattr open search)))
                (allow sysadm_t privoxy_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t privoxy_runtime_t (dir (getattr open search)))
                (allow sysadm_t privoxy_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t privoxy_runtime_t (dir (getattr open search)))
                (allow sysadm_t privoxy_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t privoxy_runtime_t (dir (getattr open search)))
                (allow sysadm_t privoxy_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_408
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_409
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require psad_t)
                (typeattributeset cil_gen_require psad_runtime_t)
                (typeattributeset cil_gen_require psad_var_log_t)
                (typeattributeset cil_gen_require psad_initrc_exec_t)
                (typeattributeset cil_gen_require psad_var_lib_t)
                (typeattributeset cil_gen_require psad_tmp_t)
                (typeattributeset cil_gen_require psad_etc_t)
                (allow sysadm_t psad_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t psad_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t psad_t (file (ioctl read getattr lock open)))
                (allow sysadm_t psad_t (lnk_file (read getattr)))
                (allow sysadm_t psad_t (process (getattr)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t psad_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t psad_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t psad_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t psad_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t psad_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t psad_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t psad_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t psad_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t psad_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t psad_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t psad_etc_t (dir (getattr open search)))
                (allow sysadm_t psad_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t psad_etc_t (dir (getattr open search)))
                (allow sysadm_t psad_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t psad_etc_t (dir (getattr open search)))
                (allow sysadm_t psad_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t psad_etc_t (dir (getattr open search)))
                (allow sysadm_t psad_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t psad_etc_t (dir (getattr open search)))
                (allow sysadm_t psad_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t psad_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t psad_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t psad_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t psad_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t psad_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t psad_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t psad_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t psad_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t psad_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t psad_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t psad_runtime_t (dir (getattr open search)))
                (allow sysadm_t psad_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t psad_runtime_t (dir (getattr open search)))
                (allow sysadm_t psad_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t psad_runtime_t (dir (getattr open search)))
                (allow sysadm_t psad_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t psad_runtime_t (dir (getattr open search)))
                (allow sysadm_t psad_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t psad_runtime_t (dir (getattr open search)))
                (allow sysadm_t psad_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t psad_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t psad_var_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t psad_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t psad_var_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t psad_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t psad_var_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t psad_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t psad_var_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t psad_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t psad_var_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t psad_var_log_t (dir (getattr open search)))
                (allow sysadm_t psad_var_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t psad_var_log_t (dir (getattr open search)))
                (allow sysadm_t psad_var_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t psad_var_log_t (dir (getattr open search)))
                (allow sysadm_t psad_var_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t psad_var_log_t (dir (getattr open search)))
                (allow sysadm_t psad_var_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t psad_var_log_t (dir (getattr open search)))
                (allow sysadm_t psad_var_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t psad_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t psad_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t psad_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t psad_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t psad_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t psad_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t psad_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t psad_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t psad_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t psad_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t psad_var_lib_t (dir (getattr open search)))
                (allow sysadm_t psad_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t psad_var_lib_t (dir (getattr open search)))
                (allow sysadm_t psad_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t psad_var_lib_t (dir (getattr open search)))
                (allow sysadm_t psad_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t psad_var_lib_t (dir (getattr open search)))
                (allow sysadm_t psad_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t psad_var_lib_t (dir (getattr open search)))
                (allow sysadm_t psad_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (getattr open search)))
                (allow sysadm_t psad_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t psad_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t psad_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t psad_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t psad_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t psad_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t psad_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t psad_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t psad_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t psad_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t psad_tmp_t (dir (getattr open search)))
                (allow sysadm_t psad_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t psad_tmp_t (dir (getattr open search)))
                (allow sysadm_t psad_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t psad_tmp_t (dir (getattr open search)))
                (allow sysadm_t psad_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t psad_tmp_t (dir (getattr open search)))
                (allow sysadm_t psad_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t psad_tmp_t (dir (getattr open search)))
                (allow sysadm_t psad_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_410
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_411
                (roleattributeset cil_gen_require puppetca_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require puppet_initrc_exec_t)
                (typeattributeset cil_gen_require puppetmaster_initrc_exec_t)
                (typeattributeset cil_gen_require puppet_log_t)
                (typeattributeset cil_gen_require puppet_var_lib_t)
                (typeattributeset cil_gen_require puppet_tmp_t)
                (typeattributeset cil_gen_require puppet_etc_t)
                (typeattributeset cil_gen_require puppet_runtime_t)
                (typeattributeset cil_gen_require puppetmaster_tmp_t)
                (typeattributeset cil_gen_require puppet_t)
                (typeattributeset cil_gen_require puppetca_t)
                (typeattributeset cil_gen_require puppetmaster_t)
                (typeattributeset cil_gen_require puppetca_exec_t)
                (roleattributeset cil_gen_require puppetca_roles)
                (roleattributeset puppetca_roles (sysadm_r ))
                (allow sysadm_t puppet_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t puppetca_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t puppetmaster_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t puppet_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t puppetca_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t puppetmaster_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t puppet_t (file (ioctl read getattr lock open)))
                (allow sysadm_t puppetca_t (file (ioctl read getattr lock open)))
                (allow sysadm_t puppetmaster_t (file (ioctl read getattr lock open)))
                (allow sysadm_t puppet_t (lnk_file (read getattr)))
                (allow sysadm_t puppetca_t (lnk_file (read getattr)))
                (allow sysadm_t puppetmaster_t (lnk_file (read getattr)))
                (allow sysadm_t puppet_t (process (getattr)))
                (allow sysadm_t puppetca_t (process (getattr)))
                (allow sysadm_t puppetmaster_t (process (getattr)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t puppet_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t puppet_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t puppet_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t puppet_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t puppet_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t puppet_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t puppet_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t puppet_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t puppet_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t puppet_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t puppet_etc_t (dir (getattr open search)))
                (allow sysadm_t puppet_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t puppet_etc_t (dir (getattr open search)))
                (allow sysadm_t puppet_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t puppet_etc_t (dir (getattr open search)))
                (allow sysadm_t puppet_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t puppet_etc_t (dir (getattr open search)))
                (allow sysadm_t puppet_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t puppet_etc_t (dir (getattr open search)))
                (allow sysadm_t puppet_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t puppet_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t puppet_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t puppet_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t puppet_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t puppet_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t puppet_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t puppet_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t puppet_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t puppet_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t puppet_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t puppet_log_t (dir (getattr open search)))
                (allow sysadm_t puppet_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t puppet_log_t (dir (getattr open search)))
                (allow sysadm_t puppet_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t puppet_log_t (dir (getattr open search)))
                (allow sysadm_t puppet_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t puppet_log_t (dir (getattr open search)))
                (allow sysadm_t puppet_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t puppet_log_t (dir (getattr open search)))
                (allow sysadm_t puppet_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t puppet_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t puppet_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t puppet_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t puppet_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t puppet_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t puppet_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t puppet_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t puppet_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t puppet_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t puppet_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t puppet_var_lib_t (dir (getattr open search)))
                (allow sysadm_t puppet_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t puppet_var_lib_t (dir (getattr open search)))
                (allow sysadm_t puppet_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t puppet_var_lib_t (dir (getattr open search)))
                (allow sysadm_t puppet_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t puppet_var_lib_t (dir (getattr open search)))
                (allow sysadm_t puppet_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t puppet_var_lib_t (dir (getattr open search)))
                (allow sysadm_t puppet_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t puppet_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t puppet_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t puppet_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t puppet_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t puppet_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t puppet_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t puppet_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t puppet_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t puppet_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t puppet_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t puppet_runtime_t (dir (getattr open search)))
                (allow sysadm_t puppet_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t puppet_runtime_t (dir (getattr open search)))
                (allow sysadm_t puppet_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t puppet_runtime_t (dir (getattr open search)))
                (allow sysadm_t puppet_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t puppet_runtime_t (dir (getattr open search)))
                (allow sysadm_t puppet_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t puppet_runtime_t (dir (getattr open search)))
                (allow sysadm_t puppet_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (getattr open search)))
                (allow sysadm_t puppet_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t puppetmaster_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t puppet_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t puppetmaster_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t puppet_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t puppetmaster_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t puppet_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t puppetmaster_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t puppet_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t puppetmaster_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t puppet_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t puppetmaster_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t puppet_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t puppetmaster_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t puppet_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t puppetmaster_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t puppet_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t puppetmaster_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t puppet_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t puppetmaster_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t puppet_tmp_t (dir (getattr open search)))
                (allow sysadm_t puppetmaster_tmp_t (dir (getattr open search)))
                (allow sysadm_t puppet_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t puppetmaster_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t puppet_tmp_t (dir (getattr open search)))
                (allow sysadm_t puppetmaster_tmp_t (dir (getattr open search)))
                (allow sysadm_t puppet_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t puppetmaster_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t puppet_tmp_t (dir (getattr open search)))
                (allow sysadm_t puppetmaster_tmp_t (dir (getattr open search)))
                (allow sysadm_t puppet_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t puppetmaster_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t puppet_tmp_t (dir (getattr open search)))
                (allow sysadm_t puppetmaster_tmp_t (dir (getattr open search)))
                (allow sysadm_t puppet_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t puppetmaster_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t puppet_tmp_t (dir (getattr open search)))
                (allow sysadm_t puppetmaster_tmp_t (dir (getattr open search)))
                (allow sysadm_t puppet_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t puppetmaster_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t puppetca_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t puppetca_t (process (transition)))
                (dontaudit sysadm_t puppetca_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t puppetca_exec_t process puppetca_t)
                (allow puppetca_t sysadm_t (fd (use)))
                (allow puppetca_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow puppetca_t sysadm_t (process (sigchld)))
                (optional sysadm_optional_412
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                    (optional sysadm_optional_413
                        (roleattributeset cil_gen_require run_init_roles)
                        (typeattributeset cil_gen_require bin_t)
                        (typeattributeset cil_gen_require usr_t)
                        (typeattributeset cil_gen_require run_init_t)
                        (typeattributeset cil_gen_require run_init_exec_t)
                        (roleattributeset cil_gen_require run_init_roles)
                        (roleattributeset run_init_roles (sysadm_r ))
                        (allow sysadm_t usr_t (dir (getattr open search)))
                        (allow sysadm_t bin_t (dir (getattr open search)))
                        (allow sysadm_t bin_t (lnk_file (read getattr)))
                        (allow sysadm_t usr_t (dir (getattr open search)))
                        (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                        (allow sysadm_t run_init_t (process (transition)))
                        (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                        (typetransition sysadm_t run_init_exec_t process run_init_t)
                        (allow run_init_t sysadm_t (fd (use)))
                        (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                        (allow run_init_t sysadm_t (process (sigchld)))
                    )
                )
            )
            (optional sysadm_optional_414
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require pxe_t)
                (typeattributeset cil_gen_require pxe_initrc_exec_t)
                (typeattributeset cil_gen_require pxe_log_t)
                (typeattributeset cil_gen_require pxe_runtime_t)
                (allow sysadm_t pxe_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t pxe_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t pxe_t (file (ioctl read getattr lock open)))
                (allow sysadm_t pxe_t (lnk_file (read getattr)))
                (allow sysadm_t pxe_t (process (getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t pxe_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pxe_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t pxe_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pxe_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pxe_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pxe_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t pxe_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pxe_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pxe_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pxe_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pxe_log_t (dir (getattr open search)))
                (allow sysadm_t pxe_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t pxe_log_t (dir (getattr open search)))
                (allow sysadm_t pxe_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t pxe_log_t (dir (getattr open search)))
                (allow sysadm_t pxe_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pxe_log_t (dir (getattr open search)))
                (allow sysadm_t pxe_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pxe_log_t (dir (getattr open search)))
                (allow sysadm_t pxe_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t pxe_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pxe_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t pxe_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pxe_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pxe_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pxe_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t pxe_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pxe_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pxe_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pxe_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pxe_runtime_t (dir (getattr open search)))
                (allow sysadm_t pxe_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t pxe_runtime_t (dir (getattr open search)))
                (allow sysadm_t pxe_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t pxe_runtime_t (dir (getattr open search)))
                (allow sysadm_t pxe_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pxe_runtime_t (dir (getattr open search)))
                (allow sysadm_t pxe_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pxe_runtime_t (dir (getattr open search)))
                (allow sysadm_t pxe_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_415
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_416
                (roleattributeset cil_gen_require pyzor_roles)
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require user_home_dir_t)
                (typeattributeset cil_gen_require home_root_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require pyzord_t)
                (typeattributeset cil_gen_require pyzord_initrc_exec_t)
                (typeattributeset cil_gen_require pyzord_log_t)
                (typeattributeset cil_gen_require pyzor_var_lib_t)
                (typeattributeset cil_gen_require pyzor_etc_t)
                (typeattributeset cil_gen_require pyzor_t)
                (typeattributeset cil_gen_require pyzor_exec_t)
                (typeattributeset cil_gen_require pyzor_home_t)
                (typeattributeset cil_gen_require pyzor_tmp_t)
                (roleattributeset cil_gen_require pyzor_roles)
                (roleattributeset pyzor_roles (sysadm_r ))
                (allow sysadm_t pyzord_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t pyzord_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t pyzord_t (file (ioctl read getattr lock open)))
                (allow sysadm_t pyzord_t (lnk_file (read getattr)))
                (allow sysadm_t pyzord_t (process (getattr)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t pyzor_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pyzor_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t pyzor_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pyzor_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pyzor_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pyzor_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t pyzor_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pyzor_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pyzor_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pyzor_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pyzor_etc_t (dir (getattr open search)))
                (allow sysadm_t pyzor_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t pyzor_etc_t (dir (getattr open search)))
                (allow sysadm_t pyzor_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t pyzor_etc_t (dir (getattr open search)))
                (allow sysadm_t pyzor_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pyzor_etc_t (dir (getattr open search)))
                (allow sysadm_t pyzor_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pyzor_etc_t (dir (getattr open search)))
                (allow sysadm_t pyzor_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t pyzord_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pyzord_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t pyzord_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pyzord_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pyzord_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pyzord_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t pyzord_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pyzord_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pyzord_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pyzord_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pyzord_log_t (dir (getattr open search)))
                (allow sysadm_t pyzord_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t pyzord_log_t (dir (getattr open search)))
                (allow sysadm_t pyzord_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t pyzord_log_t (dir (getattr open search)))
                (allow sysadm_t pyzord_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pyzord_log_t (dir (getattr open search)))
                (allow sysadm_t pyzord_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pyzord_log_t (dir (getattr open search)))
                (allow sysadm_t pyzord_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t pyzor_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pyzor_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t pyzor_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pyzor_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pyzor_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pyzor_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t pyzor_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pyzor_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pyzor_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t pyzor_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t pyzor_var_lib_t (dir (getattr open search)))
                (allow sysadm_t pyzor_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t pyzor_var_lib_t (dir (getattr open search)))
                (allow sysadm_t pyzor_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t pyzor_var_lib_t (dir (getattr open search)))
                (allow sysadm_t pyzor_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pyzor_var_lib_t (dir (getattr open search)))
                (allow sysadm_t pyzor_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t pyzor_var_lib_t (dir (getattr open search)))
                (allow sysadm_t pyzor_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_application_exec_domain pyzor_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_application_exec_domain pyzor_t (process (transition)))
                (dontaudit sysadm_application_exec_domain pyzor_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_application_exec_domain pyzor_exec_t process pyzor_t)
                (allow pyzor_t sysadm_application_exec_domain (fd (use)))
                (allow pyzor_t sysadm_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                (allow pyzor_t sysadm_application_exec_domain (process (sigchld)))
                (allow sysadm_application_exec_domain pyzor_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_application_exec_domain pyzor_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_application_exec_domain pyzor_t (file (ioctl read getattr lock open)))
                (allow sysadm_application_exec_domain pyzor_t (lnk_file (read getattr)))
                (allow sysadm_application_exec_domain pyzor_t (process (getattr)))
                (allow sysadm_t pyzor_home_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t pyzor_tmp_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t pyzor_home_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t pyzor_tmp_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t pyzor_home_t (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename)))
                (allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (typetransition sysadm_t user_home_dir_t dir ".pyzor" pyzor_home_t)
                (optional sysadm_optional_417
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
                (optional sysadm_optional_418
                    (typeattributeset cil_gen_require sysadm_systemd_t)
                    (allow sysadm_systemd_t pyzor_t (dir (ioctl read getattr lock open search)))
                    (allow sysadm_systemd_t pyzor_t (file (ioctl read getattr lock open)))
                    (allow sysadm_systemd_t pyzor_t (lnk_file (read getattr)))
                    (allow sysadm_systemd_t pyzor_t (process (getattr)))
                    (allow sysadm_systemd_t pyzor_t (process (sigchld sigkill sigstop signull signal)))
                    (allow pyzor_t sysadm_systemd_t (fd (use)))
                    (allow pyzor_t sysadm_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                    (allow pyzor_t sysadm_systemd_t (dir (ioctl read getattr lock open search)))
                    (allow pyzor_t sysadm_systemd_t (file (ioctl read getattr lock open)))
                    (allow pyzor_t sysadm_systemd_t (lnk_file (read getattr)))
                    (allow pyzor_t sysadm_systemd_t (process (getattr)))
                    (allow pyzor_t sysadm_systemd_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_419
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require qpidd_t)
                (typeattributeset cil_gen_require qpidd_initrc_exec_t)
                (typeattributeset cil_gen_require qpidd_var_lib_t)
                (typeattributeset cil_gen_require qpidd_runtime_t)
                (allow sysadm_t qpidd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t qpidd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t qpidd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t qpidd_t (lnk_file (read getattr)))
                (allow sysadm_t qpidd_t (process (getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t qpidd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t qpidd_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t qpidd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t qpidd_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t qpidd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t qpidd_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t qpidd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t qpidd_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t qpidd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t qpidd_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t qpidd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t qpidd_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t qpidd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t qpidd_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t qpidd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t qpidd_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t qpidd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t qpidd_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t qpidd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t qpidd_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t qpidd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t qpidd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t qpidd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t qpidd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t qpidd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t qpidd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t qpidd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t qpidd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t qpidd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t qpidd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t qpidd_runtime_t (dir (getattr open search)))
                (allow sysadm_t qpidd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t qpidd_runtime_t (dir (getattr open search)))
                (allow sysadm_t qpidd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t qpidd_runtime_t (dir (getattr open search)))
                (allow sysadm_t qpidd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t qpidd_runtime_t (dir (getattr open search)))
                (allow sysadm_t qpidd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t qpidd_runtime_t (dir (getattr open search)))
                (allow sysadm_t qpidd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_420
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_421
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require quantum_t)
                (typeattributeset cil_gen_require quantum_initrc_exec_t)
                (typeattributeset cil_gen_require quantum_log_t)
                (typeattributeset cil_gen_require quantum_var_lib_t)
                (typeattributeset cil_gen_require quantum_tmp_t)
                (allow sysadm_t quantum_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t quantum_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t quantum_t (file (ioctl read getattr lock open)))
                (allow sysadm_t quantum_t (lnk_file (read getattr)))
                (allow sysadm_t quantum_t (process (getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t quantum_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t quantum_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t quantum_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t quantum_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t quantum_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t quantum_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t quantum_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t quantum_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t quantum_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t quantum_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t quantum_log_t (dir (getattr open search)))
                (allow sysadm_t quantum_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t quantum_log_t (dir (getattr open search)))
                (allow sysadm_t quantum_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t quantum_log_t (dir (getattr open search)))
                (allow sysadm_t quantum_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t quantum_log_t (dir (getattr open search)))
                (allow sysadm_t quantum_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t quantum_log_t (dir (getattr open search)))
                (allow sysadm_t quantum_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t quantum_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t quantum_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t quantum_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t quantum_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t quantum_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t quantum_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t quantum_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t quantum_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t quantum_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t quantum_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t quantum_var_lib_t (dir (getattr open search)))
                (allow sysadm_t quantum_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t quantum_var_lib_t (dir (getattr open search)))
                (allow sysadm_t quantum_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t quantum_var_lib_t (dir (getattr open search)))
                (allow sysadm_t quantum_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t quantum_var_lib_t (dir (getattr open search)))
                (allow sysadm_t quantum_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t quantum_var_lib_t (dir (getattr open search)))
                (allow sysadm_t quantum_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (getattr open search)))
                (allow sysadm_t quantum_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t quantum_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t quantum_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t quantum_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t quantum_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t quantum_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t quantum_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t quantum_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t quantum_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t quantum_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t quantum_tmp_t (dir (getattr open search)))
                (allow sysadm_t quantum_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t quantum_tmp_t (dir (getattr open search)))
                (allow sysadm_t quantum_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t quantum_tmp_t (dir (getattr open search)))
                (allow sysadm_t quantum_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t quantum_tmp_t (dir (getattr open search)))
                (allow sysadm_t quantum_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t quantum_tmp_t (dir (getattr open search)))
                (allow sysadm_t quantum_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_422
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_423
                (roleattributeset cil_gen_require quota_roles)
                (typeattributeset cil_gen_require file_type)
                (typeattributeset file_type (shell_exec_t bin_t ))
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require quota_db_t)
                (typeattributeset cil_gen_require quota_t)
                (typeattributeset cil_gen_require quota_exec_t)
                (typeattributeset cil_gen_require quota_nld_t)
                (typeattributeset cil_gen_require quota_nld_initrc_exec_t)
                (typeattributeset cil_gen_require quota_flag_t)
                (typeattributeset cil_gen_require quota_nld_runtime_t)
                (roleattributeset cil_gen_require quota_roles)
                (roleattributeset quota_roles (sysadm_r ))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t quota_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t quota_t (process (transition)))
                (dontaudit sysadm_t quota_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t quota_exec_t process quota_t)
                (allow quota_t sysadm_t (fd (use)))
                (allow quota_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow quota_t sysadm_t (process (sigchld)))
                (allow sysadm_t quota_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t quota_nld_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t quota_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t quota_nld_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t quota_t (file (ioctl read getattr lock open)))
                (allow sysadm_t quota_nld_t (file (ioctl read getattr lock open)))
                (allow sysadm_t quota_t (lnk_file (read getattr)))
                (allow sysadm_t quota_nld_t (lnk_file (read getattr)))
                (allow sysadm_t quota_t (process (getattr)))
                (allow sysadm_t quota_nld_t (process (getattr)))
                (allow sysadm_t file_type (dir (ioctl read getattr lock open search)))
                (allow sysadm_t quota_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t quota_flag_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t quota_nld_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t quota_db_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t quota_flag_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t quota_nld_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t quota_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t quota_flag_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t quota_nld_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t quota_db_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t quota_flag_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t quota_nld_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t quota_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t quota_flag_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t quota_nld_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t quota_db_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t quota_flag_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t quota_nld_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t quota_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t quota_flag_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t quota_nld_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t quota_db_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t quota_flag_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t quota_nld_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t quota_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t quota_flag_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t quota_nld_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t quota_db_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t quota_flag_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t quota_nld_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t quota_db_t (dir (getattr open search)))
                (allow sysadm_t quota_flag_t (dir (getattr open search)))
                (allow sysadm_t quota_nld_runtime_t (dir (getattr open search)))
                (allow sysadm_t quota_db_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t quota_flag_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t quota_nld_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t quota_db_t (dir (getattr open search)))
                (allow sysadm_t quota_flag_t (dir (getattr open search)))
                (allow sysadm_t quota_nld_runtime_t (dir (getattr open search)))
                (allow sysadm_t quota_db_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t quota_flag_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t quota_nld_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t quota_db_t (dir (getattr open search)))
                (allow sysadm_t quota_flag_t (dir (getattr open search)))
                (allow sysadm_t quota_nld_runtime_t (dir (getattr open search)))
                (allow sysadm_t quota_db_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t quota_flag_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t quota_nld_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t quota_db_t (dir (getattr open search)))
                (allow sysadm_t quota_flag_t (dir (getattr open search)))
                (allow sysadm_t quota_nld_runtime_t (dir (getattr open search)))
                (allow sysadm_t quota_db_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t quota_flag_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t quota_nld_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t quota_db_t (dir (getattr open search)))
                (allow sysadm_t quota_flag_t (dir (getattr open search)))
                (allow sysadm_t quota_nld_runtime_t (dir (getattr open search)))
                (allow sysadm_t quota_db_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t quota_flag_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t quota_nld_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_424
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_425
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require rabbitmq_epmd_t)
                (typeattributeset cil_gen_require rabbitmq_beam_t)
                (typeattributeset cil_gen_require rabbitmq_initrc_exec_t)
                (typeattributeset cil_gen_require rabbitmq_var_lib_t)
                (typeattributeset cil_gen_require rabbitmq_var_log_t)
                (typeattributeset cil_gen_require rabbitmq_runtime_t)
                (allow sysadm_t rabbitmq_epmd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t rabbitmq_beam_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t rabbitmq_epmd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t rabbitmq_beam_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t rabbitmq_epmd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t rabbitmq_beam_t (file (ioctl read getattr lock open)))
                (allow sysadm_t rabbitmq_epmd_t (lnk_file (read getattr)))
                (allow sysadm_t rabbitmq_beam_t (lnk_file (read getattr)))
                (allow sysadm_t rabbitmq_epmd_t (process (getattr)))
                (allow sysadm_t rabbitmq_beam_t (process (getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t rabbitmq_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rabbitmq_var_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t rabbitmq_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rabbitmq_var_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rabbitmq_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rabbitmq_var_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t rabbitmq_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rabbitmq_var_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rabbitmq_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rabbitmq_var_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rabbitmq_var_log_t (dir (getattr open search)))
                (allow sysadm_t rabbitmq_var_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t rabbitmq_var_log_t (dir (getattr open search)))
                (allow sysadm_t rabbitmq_var_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t rabbitmq_var_log_t (dir (getattr open search)))
                (allow sysadm_t rabbitmq_var_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t rabbitmq_var_log_t (dir (getattr open search)))
                (allow sysadm_t rabbitmq_var_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t rabbitmq_var_log_t (dir (getattr open search)))
                (allow sysadm_t rabbitmq_var_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t rabbitmq_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rabbitmq_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t rabbitmq_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rabbitmq_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rabbitmq_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rabbitmq_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t rabbitmq_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rabbitmq_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rabbitmq_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rabbitmq_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rabbitmq_var_lib_t (dir (getattr open search)))
                (allow sysadm_t rabbitmq_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t rabbitmq_var_lib_t (dir (getattr open search)))
                (allow sysadm_t rabbitmq_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t rabbitmq_var_lib_t (dir (getattr open search)))
                (allow sysadm_t rabbitmq_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t rabbitmq_var_lib_t (dir (getattr open search)))
                (allow sysadm_t rabbitmq_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t rabbitmq_var_lib_t (dir (getattr open search)))
                (allow sysadm_t rabbitmq_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t rabbitmq_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rabbitmq_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t rabbitmq_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rabbitmq_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rabbitmq_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rabbitmq_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t rabbitmq_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rabbitmq_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rabbitmq_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rabbitmq_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rabbitmq_runtime_t (dir (getattr open search)))
                (allow sysadm_t rabbitmq_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t rabbitmq_runtime_t (dir (getattr open search)))
                (allow sysadm_t rabbitmq_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t rabbitmq_runtime_t (dir (getattr open search)))
                (allow sysadm_t rabbitmq_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t rabbitmq_runtime_t (dir (getattr open search)))
                (allow sysadm_t rabbitmq_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t rabbitmq_runtime_t (dir (getattr open search)))
                (allow sysadm_t rabbitmq_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_426
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_427
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require radiusd_t)
                (typeattributeset cil_gen_require radiusd_etc_t)
                (typeattributeset cil_gen_require radiusd_log_t)
                (typeattributeset cil_gen_require radiusd_etc_rw_t)
                (typeattributeset cil_gen_require radiusd_var_lib_t)
                (typeattributeset cil_gen_require radiusd_runtime_t)
                (typeattributeset cil_gen_require radiusd_initrc_exec_t)
                (allow sysadm_t radiusd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t radiusd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t radiusd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t radiusd_t (lnk_file (read getattr)))
                (allow sysadm_t radiusd_t (process (getattr)))
                (allow sysadm_t etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t radiusd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t radiusd_etc_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t radiusd_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t radiusd_etc_rw_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t radiusd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t radiusd_etc_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t radiusd_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t radiusd_etc_rw_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t radiusd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t radiusd_etc_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t radiusd_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t radiusd_etc_rw_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t radiusd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t radiusd_etc_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t radiusd_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t radiusd_etc_rw_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t radiusd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t radiusd_etc_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t radiusd_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t radiusd_etc_rw_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t radiusd_etc_t (dir (getattr open search)))
                (allow sysadm_t radiusd_etc_rw_t (dir (getattr open search)))
                (allow sysadm_t radiusd_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t radiusd_etc_rw_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t radiusd_etc_t (dir (getattr open search)))
                (allow sysadm_t radiusd_etc_rw_t (dir (getattr open search)))
                (allow sysadm_t radiusd_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t radiusd_etc_rw_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t radiusd_etc_t (dir (getattr open search)))
                (allow sysadm_t radiusd_etc_rw_t (dir (getattr open search)))
                (allow sysadm_t radiusd_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t radiusd_etc_rw_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t radiusd_etc_t (dir (getattr open search)))
                (allow sysadm_t radiusd_etc_rw_t (dir (getattr open search)))
                (allow sysadm_t radiusd_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t radiusd_etc_rw_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t radiusd_etc_t (dir (getattr open search)))
                (allow sysadm_t radiusd_etc_rw_t (dir (getattr open search)))
                (allow sysadm_t radiusd_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t radiusd_etc_rw_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t radiusd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t radiusd_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t radiusd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t radiusd_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t radiusd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t radiusd_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t radiusd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t radiusd_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t radiusd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t radiusd_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t radiusd_log_t (dir (getattr open search)))
                (allow sysadm_t radiusd_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t radiusd_log_t (dir (getattr open search)))
                (allow sysadm_t radiusd_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t radiusd_log_t (dir (getattr open search)))
                (allow sysadm_t radiusd_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t radiusd_log_t (dir (getattr open search)))
                (allow sysadm_t radiusd_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t radiusd_log_t (dir (getattr open search)))
                (allow sysadm_t radiusd_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t radiusd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t radiusd_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t radiusd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t radiusd_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t radiusd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t radiusd_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t radiusd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t radiusd_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t radiusd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t radiusd_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t radiusd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t radiusd_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t radiusd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t radiusd_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t radiusd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t radiusd_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t radiusd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t radiusd_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t radiusd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t radiusd_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t radiusd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t radiusd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t radiusd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t radiusd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t radiusd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t radiusd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t radiusd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t radiusd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t radiusd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t radiusd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t radiusd_runtime_t (dir (getattr open search)))
                (allow sysadm_t radiusd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t radiusd_runtime_t (dir (getattr open search)))
                (allow sysadm_t radiusd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t radiusd_runtime_t (dir (getattr open search)))
                (allow sysadm_t radiusd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t radiusd_runtime_t (dir (getattr open search)))
                (allow sysadm_t radiusd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t radiusd_runtime_t (dir (getattr open search)))
                (allow sysadm_t radiusd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_428
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_429
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require radvd_t)
                (typeattributeset cil_gen_require radvd_etc_t)
                (typeattributeset cil_gen_require radvd_initrc_exec_t)
                (typeattributeset cil_gen_require radvd_runtime_t)
                (allow sysadm_t radvd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t radvd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t radvd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t radvd_t (lnk_file (read getattr)))
                (allow sysadm_t radvd_t (process (getattr)))
                (allow sysadm_t etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t radvd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t radvd_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t radvd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t radvd_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t radvd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t radvd_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t radvd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t radvd_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t radvd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t radvd_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t radvd_etc_t (dir (getattr open search)))
                (allow sysadm_t radvd_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t radvd_etc_t (dir (getattr open search)))
                (allow sysadm_t radvd_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t radvd_etc_t (dir (getattr open search)))
                (allow sysadm_t radvd_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t radvd_etc_t (dir (getattr open search)))
                (allow sysadm_t radvd_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t radvd_etc_t (dir (getattr open search)))
                (allow sysadm_t radvd_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t radvd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t radvd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t radvd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t radvd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t radvd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t radvd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t radvd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t radvd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t radvd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t radvd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t radvd_runtime_t (dir (getattr open search)))
                (allow sysadm_t radvd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t radvd_runtime_t (dir (getattr open search)))
                (allow sysadm_t radvd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t radvd_runtime_t (dir (getattr open search)))
                (allow sysadm_t radvd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t radvd_runtime_t (dir (getattr open search)))
                (allow sysadm_t radvd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t radvd_runtime_t (dir (getattr open search)))
                (allow sysadm_t radvd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_430
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_431
                (roleattributeset cil_gen_require mdadm_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require mdadm_t)
                (typeattributeset cil_gen_require mdadm_exec_t)
                (typeattributeset cil_gen_require mdadm_initrc_exec_t)
                (typeattributeset cil_gen_require mdadm_runtime_t)
                (roleattributeset cil_gen_require mdadm_roles)
                (roleattributeset mdadm_roles (sysadm_r ))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t mdadm_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t mdadm_t (process (transition)))
                (dontaudit sysadm_t mdadm_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t mdadm_exec_t process mdadm_t)
                (allow mdadm_t sysadm_t (fd (use)))
                (allow mdadm_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow mdadm_t sysadm_t (process (sigchld)))
                (allow sysadm_t mdadm_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t mdadm_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t mdadm_t (file (ioctl read getattr lock open)))
                (allow sysadm_t mdadm_t (lnk_file (read getattr)))
                (allow sysadm_t mdadm_t (process (getattr)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t mdadm_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mdadm_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t mdadm_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mdadm_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mdadm_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mdadm_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t mdadm_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mdadm_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mdadm_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mdadm_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mdadm_runtime_t (dir (getattr open search)))
                (allow sysadm_t mdadm_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t mdadm_runtime_t (dir (getattr open search)))
                (allow sysadm_t mdadm_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t mdadm_runtime_t (dir (getattr open search)))
                (allow sysadm_t mdadm_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t mdadm_runtime_t (dir (getattr open search)))
                (allow sysadm_t mdadm_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t mdadm_runtime_t (dir (getattr open search)))
                (allow sysadm_t mdadm_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_432
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_433
                (roleattributeset cil_gen_require razor_roles)
                (typeattributeset cil_gen_require user_home_dir_t)
                (typeattributeset cil_gen_require home_root_t)
                (typeattributeset cil_gen_require razor_t)
                (typeattributeset cil_gen_require razor_exec_t)
                (typeattributeset cil_gen_require razor_home_t)
                (typeattributeset cil_gen_require razor_tmp_t)
                (roleattributeset cil_gen_require razor_roles)
                (roleattributeset razor_roles (sysadm_r ))
                (allow sysadm_application_exec_domain razor_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_application_exec_domain razor_t (process (transition)))
                (dontaudit sysadm_application_exec_domain razor_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_application_exec_domain razor_exec_t process razor_t)
                (allow razor_t sysadm_application_exec_domain (fd (use)))
                (allow razor_t sysadm_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                (allow razor_t sysadm_application_exec_domain (process (sigchld)))
                (allow sysadm_application_exec_domain razor_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_application_exec_domain razor_t (file (ioctl read getattr lock open)))
                (allow sysadm_application_exec_domain razor_t (lnk_file (read getattr)))
                (allow sysadm_application_exec_domain razor_t (process (getattr)))
                (allow sysadm_application_exec_domain razor_t (process (signal)))
                (allow sysadm_t razor_home_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t razor_tmp_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t razor_home_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t razor_tmp_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t razor_home_t (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename)))
                (allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (typetransition sysadm_t user_home_dir_t dir ".razor" razor_home_t)
                (optional sysadm_optional_434
                    (typeattributeset cil_gen_require sysadm_systemd_t)
                    (allow sysadm_systemd_t razor_t (dir (ioctl read getattr lock open search)))
                    (allow sysadm_systemd_t razor_t (file (ioctl read getattr lock open)))
                    (allow sysadm_systemd_t razor_t (lnk_file (read getattr)))
                    (allow sysadm_systemd_t razor_t (process (getattr)))
                    (allow sysadm_systemd_t razor_t (process (sigchld sigkill sigstop signull signal)))
                    (allow razor_t sysadm_systemd_t (fd (use)))
                    (allow razor_t sysadm_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                    (allow razor_t sysadm_systemd_t (dir (ioctl read getattr lock open search)))
                    (allow razor_t sysadm_systemd_t (file (ioctl read getattr lock open)))
                    (allow razor_t sysadm_systemd_t (lnk_file (read getattr)))
                    (allow razor_t sysadm_systemd_t (process (getattr)))
                    (allow razor_t sysadm_systemd_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_435
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require redis_t)
                (typeattributeset cil_gen_require redis_initrc_exec_t)
                (typeattributeset cil_gen_require redis_var_lib_t)
                (typeattributeset cil_gen_require redis_log_t)
                (typeattributeset cil_gen_require redis_runtime_t)
                (typeattributeset cil_gen_require redis_conf_t)
                (allow sysadm_t redis_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t redis_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t redis_t (file (ioctl read getattr lock open)))
                (allow sysadm_t redis_t (lnk_file (read getattr)))
                (allow sysadm_t redis_t (process (getattr)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t redis_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t redis_conf_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t redis_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t redis_conf_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t redis_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t redis_conf_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t redis_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t redis_conf_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t redis_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t redis_conf_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t redis_conf_t (dir (getattr open search)))
                (allow sysadm_t redis_conf_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t redis_conf_t (dir (getattr open search)))
                (allow sysadm_t redis_conf_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t redis_conf_t (dir (getattr open search)))
                (allow sysadm_t redis_conf_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t redis_conf_t (dir (getattr open search)))
                (allow sysadm_t redis_conf_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t redis_conf_t (dir (getattr open search)))
                (allow sysadm_t redis_conf_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t redis_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t redis_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t redis_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t redis_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t redis_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t redis_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t redis_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t redis_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t redis_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t redis_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t redis_log_t (dir (getattr open search)))
                (allow sysadm_t redis_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t redis_log_t (dir (getattr open search)))
                (allow sysadm_t redis_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t redis_log_t (dir (getattr open search)))
                (allow sysadm_t redis_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t redis_log_t (dir (getattr open search)))
                (allow sysadm_t redis_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t redis_log_t (dir (getattr open search)))
                (allow sysadm_t redis_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t redis_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t redis_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t redis_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t redis_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t redis_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t redis_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t redis_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t redis_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t redis_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t redis_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t redis_var_lib_t (dir (getattr open search)))
                (allow sysadm_t redis_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t redis_var_lib_t (dir (getattr open search)))
                (allow sysadm_t redis_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t redis_var_lib_t (dir (getattr open search)))
                (allow sysadm_t redis_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t redis_var_lib_t (dir (getattr open search)))
                (allow sysadm_t redis_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t redis_var_lib_t (dir (getattr open search)))
                (allow sysadm_t redis_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t redis_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t redis_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t redis_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t redis_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t redis_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t redis_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t redis_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t redis_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t redis_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t redis_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t redis_runtime_t (dir (getattr open search)))
                (allow sysadm_t redis_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t redis_runtime_t (dir (getattr open search)))
                (allow sysadm_t redis_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t redis_runtime_t (dir (getattr open search)))
                (allow sysadm_t redis_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t redis_runtime_t (dir (getattr open search)))
                (allow sysadm_t redis_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t redis_runtime_t (dir (getattr open search)))
                (allow sysadm_t redis_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_436
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_437
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require resmgrd_runtime_t)
                (typeattributeset cil_gen_require resmgrd_t)
                (typeattributeset cil_gen_require resmgrd_initrc_exec_t)
                (typeattributeset cil_gen_require resmgrd_etc_t)
                (allow sysadm_t resmgrd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t resmgrd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t resmgrd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t resmgrd_t (lnk_file (read getattr)))
                (allow sysadm_t resmgrd_t (process (getattr)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t resmgrd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t resmgrd_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t resmgrd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t resmgrd_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t resmgrd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t resmgrd_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t resmgrd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t resmgrd_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t resmgrd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t resmgrd_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t resmgrd_etc_t (dir (getattr open search)))
                (allow sysadm_t resmgrd_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t resmgrd_etc_t (dir (getattr open search)))
                (allow sysadm_t resmgrd_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t resmgrd_etc_t (dir (getattr open search)))
                (allow sysadm_t resmgrd_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t resmgrd_etc_t (dir (getattr open search)))
                (allow sysadm_t resmgrd_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t resmgrd_etc_t (dir (getattr open search)))
                (allow sysadm_t resmgrd_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t resmgrd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t resmgrd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t resmgrd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t resmgrd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t resmgrd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t resmgrd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t resmgrd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t resmgrd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t resmgrd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t resmgrd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t resmgrd_runtime_t (dir (getattr open search)))
                (allow sysadm_t resmgrd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t resmgrd_runtime_t (dir (getattr open search)))
                (allow sysadm_t resmgrd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t resmgrd_runtime_t (dir (getattr open search)))
                (allow sysadm_t resmgrd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t resmgrd_runtime_t (dir (getattr open search)))
                (allow sysadm_t resmgrd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t resmgrd_runtime_t (dir (getattr open search)))
                (allow sysadm_t resmgrd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_438
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_439
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require var_lock_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require rhsmcertd_t)
                (typeattributeset cil_gen_require rhsmcertd_initrc_exec_t)
                (typeattributeset cil_gen_require rhsmcertd_log_t)
                (typeattributeset cil_gen_require rhsmcertd_var_lib_t)
                (typeattributeset cil_gen_require rhsmcertd_runtime_t)
                (typeattributeset cil_gen_require rhsmcertd_lock_t)
                (allow sysadm_t rhsmcertd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t rhsmcertd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t rhsmcertd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t rhsmcertd_t (lnk_file (read getattr)))
                (allow sysadm_t rhsmcertd_t (process (getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t rhsmcertd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rhsmcertd_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t rhsmcertd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rhsmcertd_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rhsmcertd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rhsmcertd_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t rhsmcertd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rhsmcertd_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rhsmcertd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rhsmcertd_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rhsmcertd_log_t (dir (getattr open search)))
                (allow sysadm_t rhsmcertd_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t rhsmcertd_log_t (dir (getattr open search)))
                (allow sysadm_t rhsmcertd_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t rhsmcertd_log_t (dir (getattr open search)))
                (allow sysadm_t rhsmcertd_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t rhsmcertd_log_t (dir (getattr open search)))
                (allow sysadm_t rhsmcertd_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t rhsmcertd_log_t (dir (getattr open search)))
                (allow sysadm_t rhsmcertd_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t rhsmcertd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rhsmcertd_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t rhsmcertd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rhsmcertd_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rhsmcertd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rhsmcertd_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t rhsmcertd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rhsmcertd_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rhsmcertd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rhsmcertd_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rhsmcertd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t rhsmcertd_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t rhsmcertd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t rhsmcertd_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t rhsmcertd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t rhsmcertd_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t rhsmcertd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t rhsmcertd_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t rhsmcertd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t rhsmcertd_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t rhsmcertd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rhsmcertd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t rhsmcertd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rhsmcertd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rhsmcertd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rhsmcertd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t rhsmcertd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rhsmcertd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rhsmcertd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rhsmcertd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rhsmcertd_runtime_t (dir (getattr open search)))
                (allow sysadm_t rhsmcertd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t rhsmcertd_runtime_t (dir (getattr open search)))
                (allow sysadm_t rhsmcertd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t rhsmcertd_runtime_t (dir (getattr open search)))
                (allow sysadm_t rhsmcertd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t rhsmcertd_runtime_t (dir (getattr open search)))
                (allow sysadm_t rhsmcertd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t rhsmcertd_runtime_t (dir (getattr open search)))
                (allow sysadm_t rhsmcertd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_lock_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lock_t (dir (getattr open search)))
                (allow sysadm_t rhsmcertd_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rhsmcertd_lock_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t rhsmcertd_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rhsmcertd_lock_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rhsmcertd_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rhsmcertd_lock_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t rhsmcertd_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rhsmcertd_lock_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rhsmcertd_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rhsmcertd_lock_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rhsmcertd_lock_t (dir (getattr open search)))
                (allow sysadm_t rhsmcertd_lock_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t rhsmcertd_lock_t (dir (getattr open search)))
                (allow sysadm_t rhsmcertd_lock_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t rhsmcertd_lock_t (dir (getattr open search)))
                (allow sysadm_t rhsmcertd_lock_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t rhsmcertd_lock_t (dir (getattr open search)))
                (allow sysadm_t rhsmcertd_lock_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t rhsmcertd_lock_t (dir (getattr open search)))
                (allow sysadm_t rhsmcertd_lock_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_440
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_441
                (roleattributeset cil_gen_require rkhunter_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require rkhunter_t)
                (typeattributeset cil_gen_require rkhunter_exec_t)
                (roleattributeset cil_gen_require rkhunter_roles)
                (roleattributeset rkhunter_roles (sysadm_r ))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t rkhunter_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t rkhunter_t (process (transition)))
                (dontaudit sysadm_t rkhunter_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t rkhunter_exec_t process rkhunter_t)
                (allow rkhunter_t sysadm_t (fd (use)))
                (allow rkhunter_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow rkhunter_t sysadm_t (process (sigchld)))
            )
            (optional sysadm_optional_442
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require rngd_t)
                (typeattributeset cil_gen_require rngd_initrc_exec_t)
                (typeattributeset cil_gen_require rngd_runtime_t)
                (allow sysadm_t rngd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t rngd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t rngd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t rngd_t (lnk_file (read getattr)))
                (allow sysadm_t rngd_t (process (getattr)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t rngd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rngd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t rngd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rngd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rngd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rngd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t rngd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rngd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rngd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rngd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rngd_runtime_t (dir (getattr open search)))
                (allow sysadm_t rngd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t rngd_runtime_t (dir (getattr open search)))
                (allow sysadm_t rngd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t rngd_runtime_t (dir (getattr open search)))
                (allow sysadm_t rngd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t rngd_runtime_t (dir (getattr open search)))
                (allow sysadm_t rngd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t rngd_runtime_t (dir (getattr open search)))
                (allow sysadm_t rngd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_443
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_444
                (typeattributeset cil_gen_require file_type)
                (typeattributeset file_type (shell_exec_t bin_t ))
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require exports_t)
                (typeattributeset cil_gen_require nfsd_rw_t)
                (typeattributeset cil_gen_require rpc_domain)
                (typeattributeset cil_gen_require nfsd_initrc_exec_t)
                (typeattributeset cil_gen_require rpcd_initrc_exec_t)
                (typeattributeset cil_gen_require var_lib_nfs_t)
                (typeattributeset cil_gen_require rpcd_runtime_t)
                (typeattributeset cil_gen_require gssd_tmp_t)
                (typeattributeset cil_gen_require nfsd_ro_t)
                (typeattributeset cil_gen_require gssd_keytab_t)
                (typeattributeset cil_gen_require nfsd_t)
                (typeattributeset cil_gen_require rpcd_t)
                (typeattributeset cil_gen_require nfsd_fs_t)
                (typeattributeset cil_gen_require nfsd_exec_t)
                (allow sysadm_t rpc_domain (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t rpc_domain (dir (ioctl read getattr lock open search)))
                (allow sysadm_t rpc_domain (file (ioctl read getattr lock open)))
                (allow sysadm_t rpc_domain (lnk_file (read getattr)))
                (allow sysadm_t rpc_domain (process (getattr)))
                (allow sysadm_t etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t exports_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gssd_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t exports_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t gssd_keytab_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t exports_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gssd_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t exports_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t gssd_keytab_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t exports_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gssd_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t exports_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t gssd_keytab_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t exports_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gssd_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t exports_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t gssd_keytab_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t exports_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gssd_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t exports_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t gssd_keytab_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t exports_t (dir (getattr open search)))
                (allow sysadm_t gssd_keytab_t (dir (getattr open search)))
                (allow sysadm_t exports_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t gssd_keytab_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t exports_t (dir (getattr open search)))
                (allow sysadm_t gssd_keytab_t (dir (getattr open search)))
                (allow sysadm_t exports_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t gssd_keytab_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t exports_t (dir (getattr open search)))
                (allow sysadm_t gssd_keytab_t (dir (getattr open search)))
                (allow sysadm_t exports_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t gssd_keytab_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t exports_t (dir (getattr open search)))
                (allow sysadm_t gssd_keytab_t (dir (getattr open search)))
                (allow sysadm_t exports_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t gssd_keytab_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t exports_t (dir (getattr open search)))
                (allow sysadm_t gssd_keytab_t (dir (getattr open search)))
                (allow sysadm_t exports_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t gssd_keytab_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t var_lib_nfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t var_lib_nfs_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t var_lib_nfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t var_lib_nfs_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t var_lib_nfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t var_lib_nfs_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t var_lib_nfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t var_lib_nfs_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t var_lib_nfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t var_lib_nfs_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t var_lib_nfs_t (dir (getattr open search)))
                (allow sysadm_t var_lib_nfs_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t var_lib_nfs_t (dir (getattr open search)))
                (allow sysadm_t var_lib_nfs_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_lib_nfs_t (dir (getattr open search)))
                (allow sysadm_t var_lib_nfs_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_lib_nfs_t (dir (getattr open search)))
                (allow sysadm_t var_lib_nfs_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_lib_nfs_t (dir (getattr open search)))
                (allow sysadm_t var_lib_nfs_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t rpcd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpcd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t rpcd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpcd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rpcd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpcd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t rpcd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpcd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rpcd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpcd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rpcd_runtime_t (dir (getattr open search)))
                (allow sysadm_t rpcd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t rpcd_runtime_t (dir (getattr open search)))
                (allow sysadm_t rpcd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t rpcd_runtime_t (dir (getattr open search)))
                (allow sysadm_t rpcd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t rpcd_runtime_t (dir (getattr open search)))
                (allow sysadm_t rpcd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t rpcd_runtime_t (dir (getattr open search)))
                (allow sysadm_t rpcd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t file_type (dir (ioctl read getattr lock open search)))
                (allow sysadm_t nfsd_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nfsd_ro_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nfsd_rw_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t nfsd_ro_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t nfsd_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nfsd_ro_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nfsd_rw_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nfsd_ro_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nfsd_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nfsd_ro_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nfsd_rw_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t nfsd_ro_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t nfsd_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nfsd_ro_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nfsd_rw_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nfsd_ro_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nfsd_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nfsd_ro_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nfsd_rw_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nfsd_ro_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nfsd_rw_t (dir (getattr open search)))
                (allow sysadm_t nfsd_ro_t (dir (getattr open search)))
                (allow sysadm_t nfsd_rw_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t nfsd_ro_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t nfsd_rw_t (dir (getattr open search)))
                (allow sysadm_t nfsd_ro_t (dir (getattr open search)))
                (allow sysadm_t nfsd_rw_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t nfsd_ro_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t nfsd_rw_t (dir (getattr open search)))
                (allow sysadm_t nfsd_ro_t (dir (getattr open search)))
                (allow sysadm_t nfsd_rw_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nfsd_ro_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nfsd_rw_t (dir (getattr open search)))
                (allow sysadm_t nfsd_ro_t (dir (getattr open search)))
                (allow sysadm_t nfsd_rw_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nfsd_ro_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nfsd_rw_t (dir (getattr open search)))
                (allow sysadm_t nfsd_ro_t (dir (getattr open search)))
                (allow sysadm_t nfsd_rw_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nfsd_ro_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t gssd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gssd_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t gssd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gssd_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t gssd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gssd_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t gssd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gssd_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t gssd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gssd_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t gssd_tmp_t (dir (getattr open search)))
                (allow sysadm_t gssd_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t gssd_tmp_t (dir (getattr open search)))
                (allow sysadm_t gssd_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t gssd_tmp_t (dir (getattr open search)))
                (allow sysadm_t gssd_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t gssd_tmp_t (dir (getattr open search)))
                (allow sysadm_t gssd_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t gssd_tmp_t (dir (getattr open search)))
                (allow sysadm_t gssd_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nfsd_fs_t (dir (getattr open search)))
                (allow sysadm_t nfsd_fs_t (file (ioctl read write getattr lock append open)))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t nfsd_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t nfsd_t (process (transition)))
                (dontaudit sysadm_t nfsd_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t nfsd_exec_t process nfsd_t)
                (allow nfsd_t sysadm_t (fd (use)))
                (allow nfsd_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow nfsd_t sysadm_t (process (sigchld)))
                (optional sysadm_optional_445
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                    (optional sysadm_optional_446
                        (roleattributeset cil_gen_require run_init_roles)
                        (typeattributeset cil_gen_require bin_t)
                        (typeattributeset cil_gen_require usr_t)
                        (typeattributeset cil_gen_require run_init_t)
                        (typeattributeset cil_gen_require run_init_exec_t)
                        (roleattributeset cil_gen_require run_init_roles)
                        (roleattributeset run_init_roles (sysadm_r ))
                        (allow sysadm_t usr_t (dir (getattr open search)))
                        (allow sysadm_t bin_t (dir (getattr open search)))
                        (allow sysadm_t bin_t (lnk_file (read getattr)))
                        (allow sysadm_t usr_t (dir (getattr open search)))
                        (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                        (allow sysadm_t run_init_t (process (transition)))
                        (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                        (typetransition sysadm_t run_init_exec_t process run_init_t)
                        (allow run_init_t sysadm_t (fd (use)))
                        (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                        (allow run_init_t sysadm_t (process (sigchld)))
                    )
                )
            )
            (optional sysadm_optional_447
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require rpcbind_t)
                (typeattributeset cil_gen_require rpcbind_var_lib_t)
                (typeattributeset cil_gen_require rpcbind_runtime_t)
                (typeattributeset cil_gen_require rpcbind_initrc_exec_t)
                (allow sysadm_t rpcbind_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t rpcbind_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t rpcbind_t (file (ioctl read getattr lock open)))
                (allow sysadm_t rpcbind_t (lnk_file (read getattr)))
                (allow sysadm_t rpcbind_t (process (getattr)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t rpcbind_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpcbind_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t rpcbind_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpcbind_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rpcbind_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpcbind_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t rpcbind_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpcbind_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rpcbind_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpcbind_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rpcbind_runtime_t (dir (getattr open search)))
                (allow sysadm_t rpcbind_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t rpcbind_runtime_t (dir (getattr open search)))
                (allow sysadm_t rpcbind_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t rpcbind_runtime_t (dir (getattr open search)))
                (allow sysadm_t rpcbind_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t rpcbind_runtime_t (dir (getattr open search)))
                (allow sysadm_t rpcbind_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t rpcbind_runtime_t (dir (getattr open search)))
                (allow sysadm_t rpcbind_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t rpcbind_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpcbind_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t rpcbind_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpcbind_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rpcbind_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpcbind_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t rpcbind_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpcbind_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rpcbind_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpcbind_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rpcbind_var_lib_t (dir (getattr open search)))
                (allow sysadm_t rpcbind_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t rpcbind_var_lib_t (dir (getattr open search)))
                (allow sysadm_t rpcbind_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t rpcbind_var_lib_t (dir (getattr open search)))
                (allow sysadm_t rpcbind_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t rpcbind_var_lib_t (dir (getattr open search)))
                (allow sysadm_t rpcbind_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t rpcbind_var_lib_t (dir (getattr open search)))
                (allow sysadm_t rpcbind_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t rpcbind_runtime_t (dir (getattr open search)))
                (allow sysadm_t rpcbind_runtime_t (sock_file (write getattr append open)))
                (allow sysadm_t rpcbind_t (unix_stream_socket (connectto)))
                (optional sysadm_optional_448
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_449
                (roleattributeset cil_gen_require rpm_roles)
                (typeattributeset cil_gen_require rpm_t)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require tmpfs_t)
                (typeattributeset cil_gen_require rpm_var_lib_t)
                (typeattributeset cil_gen_require var_lock_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require rpm_exec_t)
                (typeattributeset cil_gen_require rpm_script_t)
                (typeattributeset cil_gen_require rpm_initrc_exec_t)
                (typeattributeset cil_gen_require rpm_var_cache_t)
                (typeattributeset cil_gen_require rpm_lock_t)
                (typeattributeset cil_gen_require rpm_log_t)
                (typeattributeset cil_gen_require rpm_tmpfs_t)
                (typeattributeset cil_gen_require rpm_tmp_t)
                (typeattributeset cil_gen_require rpm_runtime_t)
                (typeattributeset cil_gen_require rpm_script_tmp_t)
                (typeattributeset cil_gen_require rpm_script_tmpfs_t)
                (typeattributeset cil_gen_require rpm_file_t)
                (roleattributeset cil_gen_require rpm_roles)
                (roleattributeset rpm_roles (sysadm_r ))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t rpm_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t rpm_t (process (transition)))
                (dontaudit sysadm_t rpm_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t rpm_exec_t process rpm_t)
                (allow rpm_t sysadm_t (fd (use)))
                (allow rpm_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow rpm_t sysadm_t (process (sigchld)))
                (allow sysadm_t rpm_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t rpm_script_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t rpm_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t rpm_script_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t rpm_t (file (ioctl read getattr lock open)))
                (allow sysadm_t rpm_script_t (file (ioctl read getattr lock open)))
                (allow sysadm_t rpm_t (lnk_file (read getattr)))
                (allow sysadm_t rpm_script_t (lnk_file (read getattr)))
                (allow sysadm_t rpm_t (process (getattr)))
                (allow sysadm_t rpm_script_t (process (getattr)))
                (allow sysadm_t rpm_file_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpm_file_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t rpm_file_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpm_file_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rpm_file_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpm_file_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t rpm_file_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpm_file_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rpm_file_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpm_file_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rpm_file_t (dir (getattr open search)))
                (allow sysadm_t rpm_file_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t rpm_file_t (dir (getattr open search)))
                (allow sysadm_t rpm_file_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t rpm_file_t (dir (getattr open search)))
                (allow sysadm_t rpm_file_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t rpm_file_t (dir (getattr open search)))
                (allow sysadm_t rpm_file_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t rpm_file_t (dir (getattr open search)))
                (allow sysadm_t rpm_file_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t rpm_var_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpm_var_cache_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t rpm_var_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpm_var_cache_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rpm_var_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpm_var_cache_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t rpm_var_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpm_var_cache_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rpm_var_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpm_var_cache_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rpm_var_cache_t (dir (getattr open search)))
                (allow sysadm_t rpm_var_cache_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t rpm_var_cache_t (dir (getattr open search)))
                (allow sysadm_t rpm_var_cache_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t rpm_var_cache_t (dir (getattr open search)))
                (allow sysadm_t rpm_var_cache_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t rpm_var_cache_t (dir (getattr open search)))
                (allow sysadm_t rpm_var_cache_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t rpm_var_cache_t (dir (getattr open search)))
                (allow sysadm_t rpm_var_cache_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t rpm_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpm_script_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpm_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t rpm_script_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t rpm_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpm_script_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpm_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rpm_script_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rpm_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpm_script_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpm_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t rpm_script_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t rpm_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpm_script_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpm_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rpm_script_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rpm_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpm_script_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpm_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rpm_script_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rpm_tmp_t (dir (getattr open search)))
                (allow sysadm_t rpm_script_tmp_t (dir (getattr open search)))
                (allow sysadm_t rpm_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t rpm_script_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t rpm_tmp_t (dir (getattr open search)))
                (allow sysadm_t rpm_script_tmp_t (dir (getattr open search)))
                (allow sysadm_t rpm_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t rpm_script_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t rpm_tmp_t (dir (getattr open search)))
                (allow sysadm_t rpm_script_tmp_t (dir (getattr open search)))
                (allow sysadm_t rpm_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t rpm_script_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t rpm_tmp_t (dir (getattr open search)))
                (allow sysadm_t rpm_script_tmp_t (dir (getattr open search)))
                (allow sysadm_t rpm_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t rpm_script_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t rpm_tmp_t (dir (getattr open search)))
                (allow sysadm_t rpm_script_tmp_t (dir (getattr open search)))
                (allow sysadm_t rpm_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t rpm_script_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t rpm_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpm_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t rpm_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpm_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rpm_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpm_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t rpm_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpm_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rpm_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpm_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rpm_var_lib_t (dir (getattr open search)))
                (allow sysadm_t rpm_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t rpm_var_lib_t (dir (getattr open search)))
                (allow sysadm_t rpm_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t rpm_var_lib_t (dir (getattr open search)))
                (allow sysadm_t rpm_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t rpm_var_lib_t (dir (getattr open search)))
                (allow sysadm_t rpm_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t rpm_var_lib_t (dir (getattr open search)))
                (allow sysadm_t rpm_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_lock_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lock_t (dir (getattr open search)))
                (allow sysadm_t rpm_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpm_lock_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t rpm_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpm_lock_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rpm_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpm_lock_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t rpm_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpm_lock_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rpm_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpm_lock_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rpm_lock_t (dir (getattr open search)))
                (allow sysadm_t rpm_lock_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t rpm_lock_t (dir (getattr open search)))
                (allow sysadm_t rpm_lock_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t rpm_lock_t (dir (getattr open search)))
                (allow sysadm_t rpm_lock_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t rpm_lock_t (dir (getattr open search)))
                (allow sysadm_t rpm_lock_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t rpm_lock_t (dir (getattr open search)))
                (allow sysadm_t rpm_lock_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t rpm_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpm_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t rpm_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpm_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rpm_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpm_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t rpm_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpm_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rpm_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpm_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rpm_log_t (dir (getattr open search)))
                (allow sysadm_t rpm_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t rpm_log_t (dir (getattr open search)))
                (allow sysadm_t rpm_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t rpm_log_t (dir (getattr open search)))
                (allow sysadm_t rpm_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t rpm_log_t (dir (getattr open search)))
                (allow sysadm_t rpm_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t rpm_log_t (dir (getattr open search)))
                (allow sysadm_t rpm_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t rpm_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpm_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t rpm_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpm_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rpm_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpm_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t rpm_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpm_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rpm_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpm_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rpm_runtime_t (dir (getattr open search)))
                (allow sysadm_t rpm_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t rpm_runtime_t (dir (getattr open search)))
                (allow sysadm_t rpm_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t rpm_runtime_t (dir (getattr open search)))
                (allow sysadm_t rpm_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t rpm_runtime_t (dir (getattr open search)))
                (allow sysadm_t rpm_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t rpm_runtime_t (dir (getattr open search)))
                (allow sysadm_t rpm_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmpfs_t (dir (getattr open search)))
                (allow sysadm_t rpm_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpm_script_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpm_tmpfs_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t rpm_script_tmpfs_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t rpm_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpm_script_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpm_tmpfs_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rpm_script_tmpfs_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rpm_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpm_script_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpm_tmpfs_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t rpm_script_tmpfs_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t rpm_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpm_script_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpm_tmpfs_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rpm_script_tmpfs_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rpm_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpm_script_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rpm_tmpfs_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rpm_script_tmpfs_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rpm_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t rpm_script_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t rpm_tmpfs_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t rpm_script_tmpfs_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t rpm_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t rpm_script_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t rpm_tmpfs_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t rpm_script_tmpfs_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t rpm_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t rpm_script_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t rpm_tmpfs_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t rpm_script_tmpfs_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t rpm_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t rpm_script_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t rpm_tmpfs_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t rpm_script_tmpfs_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t rpm_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t rpm_script_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t rpm_tmpfs_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t rpm_script_tmpfs_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_450
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_451
                (roleattributeset cil_gen_require rssh_roles)
                (typeattributeset cil_gen_require rssh_t)
                (typeattributeset cil_gen_require rssh_exec_t)
                (typeattributeset cil_gen_require rssh_ro_t)
                (typeattributeset cil_gen_require rssh_rw_t)
                (roleattributeset cil_gen_require rssh_roles)
                (roleattributeset rssh_roles (sysadm_r ))
                (allow sysadm_t rssh_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t rssh_t (process (transition)))
                (dontaudit sysadm_t rssh_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t rssh_exec_t process rssh_t)
                (allow rssh_t sysadm_t (fd (use)))
                (allow rssh_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow rssh_t sysadm_t (process (sigchld)))
                (allow sysadm_t rssh_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t rssh_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t rssh_t (file (ioctl read getattr lock open)))
                (allow sysadm_t rssh_t (lnk_file (read getattr)))
                (allow sysadm_t rssh_t (process (getattr)))
                (allow sysadm_t rssh_ro_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t rssh_rw_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t rssh_ro_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t rssh_rw_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
            )
            (optional sysadm_optional_452
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require rsync_t)
                (typeattributeset cil_gen_require rsync_etc_t)
                (typeattributeset cil_gen_require rsync_data_t)
                (typeattributeset cil_gen_require rsync_log_t)
                (typeattributeset cil_gen_require rsync_tmp_t)
                (typeattributeset cil_gen_require rsync_runtime_t)
                (typeattributeset cil_gen_require rsync_exec_t)
                (allow sysadm_t rsync_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t rsync_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t rsync_t (file (ioctl read getattr lock open)))
                (allow sysadm_t rsync_t (lnk_file (read getattr)))
                (allow sysadm_t rsync_t (process (getattr)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t rsync_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rsync_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t rsync_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rsync_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rsync_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rsync_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t rsync_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rsync_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rsync_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rsync_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rsync_etc_t (dir (getattr open search)))
                (allow sysadm_t rsync_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t rsync_etc_t (dir (getattr open search)))
                (allow sysadm_t rsync_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t rsync_etc_t (dir (getattr open search)))
                (allow sysadm_t rsync_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t rsync_etc_t (dir (getattr open search)))
                (allow sysadm_t rsync_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t rsync_etc_t (dir (getattr open search)))
                (allow sysadm_t rsync_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t rsync_data_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rsync_data_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t rsync_data_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rsync_data_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rsync_data_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rsync_data_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t rsync_data_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rsync_data_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rsync_data_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rsync_data_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rsync_data_t (dir (getattr open search)))
                (allow sysadm_t rsync_data_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t rsync_data_t (dir (getattr open search)))
                (allow sysadm_t rsync_data_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t rsync_data_t (dir (getattr open search)))
                (allow sysadm_t rsync_data_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t rsync_data_t (dir (getattr open search)))
                (allow sysadm_t rsync_data_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t rsync_data_t (dir (getattr open search)))
                (allow sysadm_t rsync_data_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t rsync_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rsync_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t rsync_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rsync_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rsync_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rsync_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t rsync_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rsync_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rsync_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rsync_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rsync_log_t (dir (getattr open search)))
                (allow sysadm_t rsync_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t rsync_log_t (dir (getattr open search)))
                (allow sysadm_t rsync_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t rsync_log_t (dir (getattr open search)))
                (allow sysadm_t rsync_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t rsync_log_t (dir (getattr open search)))
                (allow sysadm_t rsync_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t rsync_log_t (dir (getattr open search)))
                (allow sysadm_t rsync_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (getattr open search)))
                (allow sysadm_t rsync_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rsync_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t rsync_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rsync_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rsync_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rsync_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t rsync_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rsync_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rsync_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rsync_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rsync_tmp_t (dir (getattr open search)))
                (allow sysadm_t rsync_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t rsync_tmp_t (dir (getattr open search)))
                (allow sysadm_t rsync_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t rsync_tmp_t (dir (getattr open search)))
                (allow sysadm_t rsync_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t rsync_tmp_t (dir (getattr open search)))
                (allow sysadm_t rsync_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t rsync_tmp_t (dir (getattr open search)))
                (allow sysadm_t rsync_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t rsync_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rsync_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t rsync_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rsync_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rsync_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rsync_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t rsync_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rsync_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rsync_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rsync_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rsync_runtime_t (dir (getattr open search)))
                (allow sysadm_t rsync_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t rsync_runtime_t (dir (getattr open search)))
                (allow sysadm_t rsync_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t rsync_runtime_t (dir (getattr open search)))
                (allow sysadm_t rsync_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t rsync_runtime_t (dir (getattr open search)))
                (allow sysadm_t rsync_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t rsync_runtime_t (dir (getattr open search)))
                (allow sysadm_t rsync_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t rsync_exec_t (file (ioctl read getattr lock map execute open execute_no_trans)))
            )
            (optional sysadm_optional_453
                (typeattributeset cil_gen_require rtkit_daemon_t)
                (typeattributeset cil_gen_require rtkit_daemon_initrc_exec_t)
                (allow sysadm_t rtkit_daemon_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t rtkit_daemon_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t rtkit_daemon_t (file (ioctl read getattr lock open)))
                (allow sysadm_t rtkit_daemon_t (lnk_file (read getattr)))
                (allow sysadm_t rtkit_daemon_t (process (getattr)))
                (optional sysadm_optional_454
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_455
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_spool_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require rwho_t)
                (typeattributeset cil_gen_require rwho_log_t)
                (typeattributeset cil_gen_require rwho_spool_t)
                (typeattributeset cil_gen_require rwho_initrc_exec_t)
                (allow sysadm_t rwho_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t rwho_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t rwho_t (file (ioctl read getattr lock open)))
                (allow sysadm_t rwho_t (lnk_file (read getattr)))
                (allow sysadm_t rwho_t (process (getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t rwho_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rwho_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t rwho_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rwho_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rwho_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rwho_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t rwho_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rwho_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rwho_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rwho_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rwho_log_t (dir (getattr open search)))
                (allow sysadm_t rwho_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t rwho_log_t (dir (getattr open search)))
                (allow sysadm_t rwho_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t rwho_log_t (dir (getattr open search)))
                (allow sysadm_t rwho_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t rwho_log_t (dir (getattr open search)))
                (allow sysadm_t rwho_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t rwho_log_t (dir (getattr open search)))
                (allow sysadm_t rwho_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_spool_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t rwho_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rwho_spool_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t rwho_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rwho_spool_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rwho_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rwho_spool_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t rwho_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rwho_spool_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rwho_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rwho_spool_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rwho_spool_t (dir (getattr open search)))
                (allow sysadm_t rwho_spool_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t rwho_spool_t (dir (getattr open search)))
                (allow sysadm_t rwho_spool_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t rwho_spool_t (dir (getattr open search)))
                (allow sysadm_t rwho_spool_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t rwho_spool_t (dir (getattr open search)))
                (allow sysadm_t rwho_spool_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t rwho_spool_t (dir (getattr open search)))
                (allow sysadm_t rwho_spool_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_456
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_457
                (roleattributeset cil_gen_require smbcontrol_roles)
                (roleattributeset cil_gen_require smbmount_roles)
                (roleattributeset cil_gen_require samba_net_roles)
                (roleattributeset cil_gen_require winbind_helper_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require var_spool_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require samba_var_t)
                (typeattributeset cil_gen_require winbind_runtime_t)
                (typeattributeset cil_gen_require samba_runtime_t)
                (typeattributeset cil_gen_require nmbd_t)
                (typeattributeset cil_gen_require smbd_t)
                (typeattributeset cil_gen_require smbd_tmp_t)
                (typeattributeset cil_gen_require samba_log_t)
                (typeattributeset cil_gen_require samba_secrets_t)
                (typeattributeset cil_gen_require samba_etc_t)
                (typeattributeset cil_gen_require samba_share_t)
                (typeattributeset cil_gen_require samba_initrc_exec_t)
                (typeattributeset cil_gen_require swat_runtime_t)
                (typeattributeset cil_gen_require swat_tmp_t)
                (typeattributeset cil_gen_require winbind_log_t)
                (typeattributeset cil_gen_require winbind_tmp_t)
                (typeattributeset cil_gen_require smbd_keytab_t)
                (typeattributeset cil_gen_require smbcontrol_t)
                (typeattributeset cil_gen_require smbcontrol_exec_t)
                (typeattributeset cil_gen_require smbmount_t)
                (typeattributeset cil_gen_require smbmount_exec_t)
                (typeattributeset cil_gen_require samba_net_t)
                (typeattributeset cil_gen_require samba_net_exec_t)
                (typeattributeset cil_gen_require winbind_helper_t)
                (typeattributeset cil_gen_require winbind_helper_exec_t)
                (roleattributeset cil_gen_require samba_net_roles)
                (roleattributeset samba_net_roles (sysadm_r ))
                (roleattributeset cil_gen_require smbmount_roles)
                (roleattributeset smbmount_roles (sysadm_r ))
                (roleattributeset cil_gen_require winbind_helper_roles)
                (roleattributeset winbind_helper_roles (sysadm_r ))
                (roleattributeset cil_gen_require smbcontrol_roles)
                (roleattributeset smbcontrol_roles (sysadm_r ))
                (allow sysadm_t nmbd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t smbd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t nmbd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t smbd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t nmbd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t smbd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t nmbd_t (lnk_file (read getattr)))
                (allow sysadm_t smbd_t (lnk_file (read getattr)))
                (allow sysadm_t nmbd_t (process (getattr)))
                (allow sysadm_t smbd_t (process (getattr)))
                (allow sysadm_t etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t samba_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t smbd_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t samba_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t smbd_keytab_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t samba_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t smbd_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t samba_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t smbd_keytab_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t samba_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t smbd_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t samba_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t smbd_keytab_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t samba_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t smbd_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t samba_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t smbd_keytab_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t samba_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t smbd_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t samba_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t smbd_keytab_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t samba_etc_t (dir (getattr open search)))
                (allow sysadm_t smbd_keytab_t (dir (getattr open search)))
                (allow sysadm_t samba_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t smbd_keytab_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t samba_etc_t (dir (getattr open search)))
                (allow sysadm_t smbd_keytab_t (dir (getattr open search)))
                (allow sysadm_t samba_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t smbd_keytab_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t samba_etc_t (dir (getattr open search)))
                (allow sysadm_t smbd_keytab_t (dir (getattr open search)))
                (allow sysadm_t samba_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t smbd_keytab_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t samba_etc_t (dir (getattr open search)))
                (allow sysadm_t smbd_keytab_t (dir (getattr open search)))
                (allow sysadm_t samba_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t smbd_keytab_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t samba_etc_t (dir (getattr open search)))
                (allow sysadm_t smbd_keytab_t (dir (getattr open search)))
                (allow sysadm_t samba_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t smbd_keytab_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t samba_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t winbind_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t samba_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t winbind_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t samba_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t winbind_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t samba_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t winbind_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t samba_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t winbind_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t samba_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t winbind_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t samba_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t winbind_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t samba_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t winbind_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t samba_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t winbind_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t samba_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t winbind_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t samba_log_t (dir (getattr open search)))
                (allow sysadm_t winbind_log_t (dir (getattr open search)))
                (allow sysadm_t samba_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t winbind_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t samba_log_t (dir (getattr open search)))
                (allow sysadm_t winbind_log_t (dir (getattr open search)))
                (allow sysadm_t samba_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t winbind_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t samba_log_t (dir (getattr open search)))
                (allow sysadm_t winbind_log_t (dir (getattr open search)))
                (allow sysadm_t samba_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t winbind_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t samba_log_t (dir (getattr open search)))
                (allow sysadm_t winbind_log_t (dir (getattr open search)))
                (allow sysadm_t samba_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t winbind_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t samba_log_t (dir (getattr open search)))
                (allow sysadm_t winbind_log_t (dir (getattr open search)))
                (allow sysadm_t samba_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t winbind_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t samba_var_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t samba_secrets_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t samba_share_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t samba_var_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t samba_secrets_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t samba_share_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t samba_var_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t samba_secrets_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t samba_share_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t samba_var_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t samba_secrets_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t samba_share_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t samba_var_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t samba_secrets_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t samba_share_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t samba_var_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t samba_secrets_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t samba_share_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t samba_var_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t samba_secrets_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t samba_share_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t samba_var_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t samba_secrets_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t samba_share_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t samba_var_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t samba_secrets_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t samba_share_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t samba_var_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t samba_secrets_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t samba_share_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t samba_var_t (dir (getattr open search)))
                (allow sysadm_t samba_secrets_t (dir (getattr open search)))
                (allow sysadm_t samba_share_t (dir (getattr open search)))
                (allow sysadm_t samba_var_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t samba_secrets_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t samba_share_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t samba_var_t (dir (getattr open search)))
                (allow sysadm_t samba_secrets_t (dir (getattr open search)))
                (allow sysadm_t samba_share_t (dir (getattr open search)))
                (allow sysadm_t samba_var_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t samba_secrets_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t samba_share_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t samba_var_t (dir (getattr open search)))
                (allow sysadm_t samba_secrets_t (dir (getattr open search)))
                (allow sysadm_t samba_share_t (dir (getattr open search)))
                (allow sysadm_t samba_var_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t samba_secrets_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t samba_share_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t samba_var_t (dir (getattr open search)))
                (allow sysadm_t samba_secrets_t (dir (getattr open search)))
                (allow sysadm_t samba_share_t (dir (getattr open search)))
                (allow sysadm_t samba_var_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t samba_secrets_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t samba_share_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t samba_var_t (dir (getattr open search)))
                (allow sysadm_t samba_secrets_t (dir (getattr open search)))
                (allow sysadm_t samba_share_t (dir (getattr open search)))
                (allow sysadm_t samba_var_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t samba_secrets_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t samba_share_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_spool_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t winbind_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t samba_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t swat_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t winbind_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t samba_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t swat_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t winbind_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t samba_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t swat_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t winbind_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t samba_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t swat_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t winbind_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t samba_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t swat_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t winbind_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t samba_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t swat_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t winbind_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t samba_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t swat_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t winbind_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t samba_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t swat_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t winbind_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t samba_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t swat_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t winbind_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t samba_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t swat_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t winbind_runtime_t (dir (getattr open search)))
                (allow sysadm_t samba_runtime_t (dir (getattr open search)))
                (allow sysadm_t swat_runtime_t (dir (getattr open search)))
                (allow sysadm_t winbind_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t samba_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t swat_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t winbind_runtime_t (dir (getattr open search)))
                (allow sysadm_t samba_runtime_t (dir (getattr open search)))
                (allow sysadm_t swat_runtime_t (dir (getattr open search)))
                (allow sysadm_t winbind_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t samba_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t swat_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t winbind_runtime_t (dir (getattr open search)))
                (allow sysadm_t samba_runtime_t (dir (getattr open search)))
                (allow sysadm_t swat_runtime_t (dir (getattr open search)))
                (allow sysadm_t winbind_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t samba_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t swat_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t winbind_runtime_t (dir (getattr open search)))
                (allow sysadm_t samba_runtime_t (dir (getattr open search)))
                (allow sysadm_t swat_runtime_t (dir (getattr open search)))
                (allow sysadm_t winbind_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t samba_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t swat_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t winbind_runtime_t (dir (getattr open search)))
                (allow sysadm_t samba_runtime_t (dir (getattr open search)))
                (allow sysadm_t swat_runtime_t (dir (getattr open search)))
                (allow sysadm_t winbind_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t samba_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t swat_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t smbd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t swat_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t winbind_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t smbd_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t swat_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t winbind_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t smbd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t swat_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t winbind_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t smbd_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t swat_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t winbind_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t smbd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t swat_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t winbind_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t smbd_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t swat_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t winbind_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t smbd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t swat_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t winbind_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t smbd_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t swat_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t winbind_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t smbd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t swat_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t winbind_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t smbd_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t swat_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t winbind_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t smbd_tmp_t (dir (getattr open search)))
                (allow sysadm_t swat_tmp_t (dir (getattr open search)))
                (allow sysadm_t winbind_tmp_t (dir (getattr open search)))
                (allow sysadm_t smbd_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t swat_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t winbind_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t smbd_tmp_t (dir (getattr open search)))
                (allow sysadm_t swat_tmp_t (dir (getattr open search)))
                (allow sysadm_t winbind_tmp_t (dir (getattr open search)))
                (allow sysadm_t smbd_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t swat_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t winbind_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t smbd_tmp_t (dir (getattr open search)))
                (allow sysadm_t swat_tmp_t (dir (getattr open search)))
                (allow sysadm_t winbind_tmp_t (dir (getattr open search)))
                (allow sysadm_t smbd_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t swat_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t winbind_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t smbd_tmp_t (dir (getattr open search)))
                (allow sysadm_t swat_tmp_t (dir (getattr open search)))
                (allow sysadm_t winbind_tmp_t (dir (getattr open search)))
                (allow sysadm_t smbd_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t swat_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t winbind_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t smbd_tmp_t (dir (getattr open search)))
                (allow sysadm_t swat_tmp_t (dir (getattr open search)))
                (allow sysadm_t winbind_tmp_t (dir (getattr open search)))
                (allow sysadm_t smbd_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t swat_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t winbind_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t smbcontrol_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t smbcontrol_t (process (transition)))
                (dontaudit sysadm_t smbcontrol_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t smbcontrol_exec_t process smbcontrol_t)
                (allow smbcontrol_t sysadm_t (fd (use)))
                (allow smbcontrol_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow smbcontrol_t sysadm_t (process (sigchld)))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t smbmount_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t smbmount_t (process (transition)))
                (dontaudit sysadm_t smbmount_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t smbmount_exec_t process smbmount_t)
                (allow smbmount_t sysadm_t (fd (use)))
                (allow smbmount_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow smbmount_t sysadm_t (process (sigchld)))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t samba_net_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t samba_net_t (process (transition)))
                (dontaudit sysadm_t samba_net_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t samba_net_exec_t process samba_net_t)
                (allow samba_net_t sysadm_t (fd (use)))
                (allow samba_net_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow samba_net_t sysadm_t (process (sigchld)))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t winbind_helper_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t winbind_helper_t (process (transition)))
                (dontaudit sysadm_t winbind_helper_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t winbind_helper_exec_t process winbind_helper_t)
                (allow winbind_helper_t sysadm_t (fd (use)))
                (allow winbind_helper_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow winbind_helper_t sysadm_t (process (sigchld)))
                (optional sysadm_optional_458
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_459
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require samhain_domain)
                (typeattributeset cil_gen_require samhain_db_t)
                (typeattributeset cil_gen_require samhain_etc_t)
                (typeattributeset cil_gen_require samhain_initrc_exec_t)
                (typeattributeset cil_gen_require samhain_log_t)
                (typeattributeset cil_gen_require samhain_runtime_t)
                (allow sysadm_t samhain_domain (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t samhain_domain (dir (ioctl read getattr lock open search)))
                (allow sysadm_t samhain_domain (file (ioctl read getattr lock open)))
                (allow sysadm_t samhain_domain (lnk_file (read getattr)))
                (allow sysadm_t samhain_domain (process (getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t samhain_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t samhain_db_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t samhain_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t samhain_db_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t samhain_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t samhain_db_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t samhain_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t samhain_db_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t samhain_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t samhain_db_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t samhain_db_t (dir (getattr open search)))
                (allow sysadm_t samhain_db_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t samhain_db_t (dir (getattr open search)))
                (allow sysadm_t samhain_db_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t samhain_db_t (dir (getattr open search)))
                (allow sysadm_t samhain_db_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t samhain_db_t (dir (getattr open search)))
                (allow sysadm_t samhain_db_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t samhain_db_t (dir (getattr open search)))
                (allow sysadm_t samhain_db_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t samhain_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t samhain_initrc_exec_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t samhain_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t samhain_initrc_exec_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t samhain_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t samhain_initrc_exec_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t samhain_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t samhain_initrc_exec_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t samhain_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t samhain_initrc_exec_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t samhain_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t samhain_initrc_exec_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t samhain_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t samhain_initrc_exec_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t samhain_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t samhain_initrc_exec_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t samhain_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t samhain_initrc_exec_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t samhain_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t samhain_initrc_exec_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t samhain_etc_t (dir (getattr open search)))
                (allow sysadm_t samhain_initrc_exec_t (dir (getattr open search)))
                (allow sysadm_t samhain_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t samhain_initrc_exec_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t samhain_etc_t (dir (getattr open search)))
                (allow sysadm_t samhain_initrc_exec_t (dir (getattr open search)))
                (allow sysadm_t samhain_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t samhain_initrc_exec_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t samhain_etc_t (dir (getattr open search)))
                (allow sysadm_t samhain_initrc_exec_t (dir (getattr open search)))
                (allow sysadm_t samhain_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t samhain_initrc_exec_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t samhain_etc_t (dir (getattr open search)))
                (allow sysadm_t samhain_initrc_exec_t (dir (getattr open search)))
                (allow sysadm_t samhain_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t samhain_initrc_exec_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t samhain_etc_t (dir (getattr open search)))
                (allow sysadm_t samhain_initrc_exec_t (dir (getattr open search)))
                (allow sysadm_t samhain_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t samhain_initrc_exec_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t samhain_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t samhain_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t samhain_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t samhain_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t samhain_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t samhain_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t samhain_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t samhain_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t samhain_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t samhain_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t samhain_log_t (dir (getattr open search)))
                (allow sysadm_t samhain_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t samhain_log_t (dir (getattr open search)))
                (allow sysadm_t samhain_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t samhain_log_t (dir (getattr open search)))
                (allow sysadm_t samhain_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t samhain_log_t (dir (getattr open search)))
                (allow sysadm_t samhain_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t samhain_log_t (dir (getattr open search)))
                (allow sysadm_t samhain_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t samhain_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t samhain_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t samhain_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t samhain_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t samhain_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t samhain_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t samhain_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t samhain_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t samhain_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t samhain_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t samhain_runtime_t (dir (getattr open search)))
                (allow sysadm_t samhain_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t samhain_runtime_t (dir (getattr open search)))
                (allow sysadm_t samhain_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t samhain_runtime_t (dir (getattr open search)))
                (allow sysadm_t samhain_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t samhain_runtime_t (dir (getattr open search)))
                (allow sysadm_t samhain_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t samhain_runtime_t (dir (getattr open search)))
                (allow sysadm_t samhain_runtime_t (sock_file (getattr relabelfrom relabelto)))
            )
            (optional sysadm_optional_460
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require sanlock_t)
                (typeattributeset cil_gen_require sanlock_initrc_exec_t)
                (typeattributeset cil_gen_require sanlock_runtime_t)
                (typeattributeset cil_gen_require sanlock_log_t)
                (allow sysadm_t sanlock_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t sanlock_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t sanlock_t (file (ioctl read getattr lock open)))
                (allow sysadm_t sanlock_t (lnk_file (read getattr)))
                (allow sysadm_t sanlock_t (process (getattr)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t sanlock_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t sanlock_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t sanlock_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t sanlock_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t sanlock_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t sanlock_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t sanlock_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t sanlock_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t sanlock_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t sanlock_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t sanlock_runtime_t (dir (getattr open search)))
                (allow sysadm_t sanlock_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t sanlock_runtime_t (dir (getattr open search)))
                (allow sysadm_t sanlock_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t sanlock_runtime_t (dir (getattr open search)))
                (allow sysadm_t sanlock_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t sanlock_runtime_t (dir (getattr open search)))
                (allow sysadm_t sanlock_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t sanlock_runtime_t (dir (getattr open search)))
                (allow sysadm_t sanlock_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t sanlock_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t sanlock_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t sanlock_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t sanlock_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t sanlock_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t sanlock_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t sanlock_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t sanlock_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t sanlock_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t sanlock_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t sanlock_log_t (dir (getattr open search)))
                (allow sysadm_t sanlock_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t sanlock_log_t (dir (getattr open search)))
                (allow sysadm_t sanlock_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t sanlock_log_t (dir (getattr open search)))
                (allow sysadm_t sanlock_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t sanlock_log_t (dir (getattr open search)))
                (allow sysadm_t sanlock_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t sanlock_log_t (dir (getattr open search)))
                (allow sysadm_t sanlock_log_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_461
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_462
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require saslauthd_t)
                (typeattributeset cil_gen_require saslauthd_runtime_t)
                (typeattributeset cil_gen_require saslauthd_initrc_exec_t)
                (typeattributeset cil_gen_require saslauthd_keytab_t)
                (allow sysadm_t saslauthd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t saslauthd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t saslauthd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t saslauthd_t (lnk_file (read getattr)))
                (allow sysadm_t saslauthd_t (process (getattr)))
                (allow sysadm_t etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t saslauthd_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t saslauthd_keytab_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t saslauthd_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t saslauthd_keytab_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t saslauthd_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t saslauthd_keytab_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t saslauthd_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t saslauthd_keytab_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t saslauthd_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t saslauthd_keytab_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t saslauthd_keytab_t (dir (getattr open search)))
                (allow sysadm_t saslauthd_keytab_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t saslauthd_keytab_t (dir (getattr open search)))
                (allow sysadm_t saslauthd_keytab_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t saslauthd_keytab_t (dir (getattr open search)))
                (allow sysadm_t saslauthd_keytab_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t saslauthd_keytab_t (dir (getattr open search)))
                (allow sysadm_t saslauthd_keytab_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t saslauthd_keytab_t (dir (getattr open search)))
                (allow sysadm_t saslauthd_keytab_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t saslauthd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t saslauthd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t saslauthd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t saslauthd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t saslauthd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t saslauthd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t saslauthd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t saslauthd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t saslauthd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t saslauthd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t saslauthd_runtime_t (dir (getattr open search)))
                (allow sysadm_t saslauthd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t saslauthd_runtime_t (dir (getattr open search)))
                (allow sysadm_t saslauthd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t saslauthd_runtime_t (dir (getattr open search)))
                (allow sysadm_t saslauthd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t saslauthd_runtime_t (dir (getattr open search)))
                (allow sysadm_t saslauthd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t saslauthd_runtime_t (dir (getattr open search)))
                (allow sysadm_t saslauthd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_463
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_464
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require sblim_domain)
                (typeattributeset cil_gen_require sblim_initrc_exec_t)
                (typeattributeset cil_gen_require sblim_runtime_t)
                (allow sysadm_t sblim_domain (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t sblim_domain (dir (ioctl read getattr lock open search)))
                (allow sysadm_t sblim_domain (file (ioctl read getattr lock open)))
                (allow sysadm_t sblim_domain (lnk_file (read getattr)))
                (allow sysadm_t sblim_domain (process (getattr)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t sblim_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t sblim_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t sblim_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t sblim_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t sblim_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t sblim_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t sblim_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t sblim_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t sblim_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t sblim_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t sblim_runtime_t (dir (getattr open search)))
                (allow sysadm_t sblim_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t sblim_runtime_t (dir (getattr open search)))
                (allow sysadm_t sblim_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t sblim_runtime_t (dir (getattr open search)))
                (allow sysadm_t sblim_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t sblim_runtime_t (dir (getattr open search)))
                (allow sysadm_t sblim_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t sblim_runtime_t (dir (getattr open search)))
                (allow sysadm_t sblim_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_465
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_466
                (type sysadm_screen_t)
                (roletype object_r sysadm_screen_t)
                (roleattributeset cil_gen_require screen_roles)
                (typeattributeset cil_gen_require domain)
                (typeattributeset domain (sysadm_t ))
                (typeattributeset cil_gen_require shell_exec_t)
                (typeattributeset cil_gen_require entry_type)
                (typeattributeset entry_type (shell_exec_t bin_t ))
                (typeattributeset cil_gen_require exec_type)
                (typeattributeset exec_type (shell_exec_t bin_t ))
                (typeattributeset cil_gen_require file_type)
                (typeattributeset file_type (shell_exec_t bin_t ))
                (typeattributeset cil_gen_require non_security_file_type)
                (typeattributeset non_security_file_type (shell_exec_t bin_t ))
                (typeattributeset cil_gen_require non_auth_file_type)
                (typeattributeset non_auth_file_type (shell_exec_t bin_t ))
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require ubac_constrained_type)
                (typeattributeset ubac_constrained_type (sysadm_t ))
                (typeattributeset cil_gen_require device_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require cert_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require user_home_t)
                (typeattributeset cil_gen_require user_home_dir_t)
                (typeattributeset cil_gen_require home_root_t)
                (typeattributeset cil_gen_require nfs_t)
                (typeattributeset cil_gen_require cifs_t)
                (typeattributeset cil_gen_require urandom_device_t)
                (typeattributeset cil_gen_require privfd)
                (typeattributeset cil_gen_require application_exec_type)
                (typeattributeset cil_gen_require random_device_t)
                (typeattributeset cil_gen_require nsswitch_domain)
                (typeattributeset nsswitch_domain (sysadm_t ))
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require shadow_t)
                (typeattributeset cil_gen_require screen_domain)
                (typeattributeset cil_gen_require screen_exec_t)
                (typeattributeset cil_gen_require screen_tmp_t)
                (typeattributeset cil_gen_require screen_home_t)
                (typeattributeset cil_gen_require screen_runtime_t)
                (typeattributeset cil_gen_require application_domain_type)
                (typeattributeset cil_gen_require chkpwd_t)
                (typeattributeset cil_gen_require chkpwd_exec_t)
                (typeattributeset cil_gen_require auth_cache_t)
                (typeattributeset cil_gen_require faillog_t)
                (roleattributeset cil_gen_require screen_roles)
                (roleattributeset screen_roles (sysadm_r ))
                (roletype screen_roles sysadm_screen_t)
                (typeattributeset cil_gen_require non_auth_file_type)
                (typeattributeset non_auth_file_type (screen_exec_t ))
                (typeattributeset cil_gen_require file_type)
                (typeattributeset file_type (screen_exec_t ))
                (typeattributeset cil_gen_require domain)
                (typeattributeset domain (sysadm_screen_t ))
                (typeattributeset cil_gen_require application_domain_type)
                (typeattributeset application_domain_type (sysadm_screen_t ))
                (typeattributeset cil_gen_require nsswitch_domain)
                (typeattributeset nsswitch_domain (sysadm_screen_t ))
                (typeattributeset cil_gen_require entry_type)
                (typeattributeset entry_type (screen_exec_t ))
                (typeattributeset cil_gen_require screen_domain)
                (typeattributeset screen_domain (sysadm_screen_t ))
                (typeattributeset cil_gen_require ubac_constrained_type)
                (typeattributeset ubac_constrained_type (sysadm_screen_t ))
                (typeattributeset cil_gen_require exec_type)
                (typeattributeset exec_type (screen_exec_t ))
                (typeattributeset cil_gen_require privfd)
                (typeattributeset privfd (sysadm_screen_t ))
                (typeattributeset cil_gen_require application_exec_type)
                (typeattributeset application_exec_type (screen_exec_t ))
                (typeattributeset cil_gen_require non_security_file_type)
                (typeattributeset non_security_file_type (screen_exec_t ))
                (allow sysadm_screen_t screen_exec_t (file (entrypoint)))
                (allow sysadm_screen_t screen_exec_t (file (ioctl read getattr lock map execute open)))
                (dontaudit sysadm_screen_t self (capability (sys_tty_config)))
                (dontaudit sysadm_screen_t self (cap_userns (sys_ptrace)))
                (allow sysadm_application_exec_domain screen_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_application_exec_domain sysadm_screen_t (process (transition)))
                (dontaudit sysadm_application_exec_domain sysadm_screen_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_application_exec_domain screen_exec_t process sysadm_screen_t)
                (allow sysadm_screen_t sysadm_application_exec_domain (fd (use)))
                (allow sysadm_screen_t sysadm_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                (allow sysadm_screen_t sysadm_application_exec_domain (process (sigchld)))
                (allow sysadm_application_exec_domain sysadm_screen_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_application_exec_domain sysadm_screen_t (file (ioctl read getattr lock open)))
                (allow sysadm_application_exec_domain sysadm_screen_t (lnk_file (read getattr)))
                (allow sysadm_application_exec_domain sysadm_screen_t (process (getattr)))
                (allow sysadm_application_exec_domain sysadm_screen_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (dontaudit sysadm_application_exec_domain sysadm_screen_t (unix_stream_socket (read write)))
                (allow sysadm_screen_t sysadm_application_exec_domain (process (signal)))
                (allow sysadm_t screen_tmp_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t screen_tmp_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t screen_tmp_t (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t screen_home_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t screen_home_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t screen_home_t (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t screen_home_t (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename)))
                (allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_t screen_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t screen_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t screen_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t screen_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t screen_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t screen_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t screen_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t screen_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_screen_t bin_t (dir (getattr open search)))
                (allow sysadm_screen_t bin_t (lnk_file (read getattr)))
                (allow sysadm_screen_t usr_t (dir (getattr open search)))
                (allow sysadm_screen_t bin_t (file (ioctl read getattr map execute open)))
                (allow sysadm_screen_t sysadm_t (process (transition)))
                (dontaudit sysadm_screen_t sysadm_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_screen_t bin_t process sysadm_t)
                (allow sysadm_screen_t bin_t (dir (getattr open search)))
                (allow sysadm_screen_t bin_t (lnk_file (read getattr)))
                (allow sysadm_screen_t usr_t (dir (getattr open search)))
                (allow sysadm_screen_t bin_t (dir (getattr open search)))
                (allow sysadm_screen_t bin_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_screen_t shell_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_screen_t sysadm_t (process (transition)))
                (dontaudit sysadm_screen_t sysadm_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_screen_t shell_exec_t process sysadm_t)
                (allow sysadm_screen_t auth_cache_t (dir (getattr open search)))
                (allow sysadm_screen_t bin_t (dir (getattr open search)))
                (allow sysadm_screen_t bin_t (lnk_file (read getattr)))
                (allow sysadm_screen_t usr_t (dir (getattr open search)))
                (allow sysadm_screen_t chkpwd_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_screen_t chkpwd_t (process (transition)))
                (dontaudit sysadm_screen_t chkpwd_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_screen_t chkpwd_exec_t process chkpwd_t)
                (allow chkpwd_t sysadm_screen_t (fd (use)))
                (allow chkpwd_t sysadm_screen_t (fifo_file (ioctl read write getattr lock append)))
                (allow chkpwd_t sysadm_screen_t (process (sigchld)))
                (dontaudit sysadm_screen_t shadow_t (file (ioctl read getattr lock open)))
                (allow sysadm_screen_t device_t (dir (getattr open search)))
                (allow sysadm_screen_t random_device_t (chr_file (ioctl read getattr lock open)))
                (allow sysadm_screen_t device_t (dir (getattr open search)))
                (allow sysadm_screen_t urandom_device_t (chr_file (ioctl read getattr lock open)))
                (allow sysadm_screen_t var_t (dir (getattr open search)))
                (allow sysadm_screen_t var_log_t (dir (getattr open search)))
                (allow sysadm_screen_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_screen_t faillog_t (file (ioctl read write getattr lock append open)))
                (allow sysadm_screen_t self (capability (audit_write)))
                (allow sysadm_screen_t self (netlink_audit_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown nlmsg_read nlmsg_relay)))
                (allow sysadm_screen_t cert_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_screen_t cert_t (dir (getattr open search)))
                (allow sysadm_screen_t cert_t (file (ioctl read getattr lock open)))
                (allow sysadm_screen_t cert_t (dir (getattr open search)))
                (allow sysadm_screen_t cert_t (lnk_file (read getattr)))
                (allow sysadm_screen_t user_home_t (file (ioctl read getattr map execute open)))
                (allow sysadm_screen_t sysadm_t (process (transition)))
                (dontaudit sysadm_screen_t sysadm_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_screen_t user_home_t process sysadm_t)
                (allow sysadm_screen_t user_home_dir_t (dir (getattr open search)))
                (allow sysadm_screen_t home_root_t (dir (getattr open search)))
                (allow sysadm_screen_t home_root_t (lnk_file (read getattr)))
                (typetransition sysadm_t user_home_dir_t file ".tmux.conf" screen_home_t)
                (typetransition sysadm_t user_home_dir_t file ".screenrc" screen_home_t)
                (typetransition sysadm_t user_home_dir_t dir ".screen" screen_home_t)
                (booleanif (use_nfs_home_dirs)
                    (true
                        (typetransition sysadm_screen_t nfs_t process sysadm_t)
                        (dontaudit sysadm_screen_t sysadm_t (process (noatsecure siginh rlimitinh)))
                        (allow sysadm_screen_t sysadm_t (process (transition)))
                        (allow sysadm_screen_t nfs_t (file (ioctl read getattr map execute open)))
                        (allow sysadm_screen_t nfs_t (dir (getattr open search)))
                    )
                )
                (booleanif (use_samba_home_dirs)
                    (true
                        (typetransition sysadm_screen_t cifs_t process sysadm_t)
                        (dontaudit sysadm_screen_t sysadm_t (process (noatsecure siginh rlimitinh)))
                        (allow sysadm_screen_t sysadm_t (process (transition)))
                        (allow sysadm_screen_t cifs_t (file (ioctl read getattr map execute open)))
                        (allow sysadm_screen_t cifs_t (dir (getattr open search)))
                    )
                )
                (optional sysadm_optional_467
                    (typeattributeset cil_gen_require init_t)
                    (allow sysadm_screen_t init_t (process (sigchld)))
                    (allow sysadm_screen_t init_t (process (signull)))
                    (optional sysadm_optional_468
                        (typeattributeset cil_gen_require rpm_t)
                        (allow sysadm_screen_t rpm_t (fd (use)))
                        (allow sysadm_screen_t rpm_t (fifo_file (ioctl read getattr lock open)))
                    )
                    (optional sysadm_optional_469
                        (typeattributeset cil_gen_require security_t)
                        (typeattributeset cil_gen_require sysfs_t)
                        (dontaudit sysadm_screen_t security_t (filesystem (getattr)))
                        (dontaudit sysadm_screen_t sysfs_t (filesystem (getattr)))
                        (dontaudit sysadm_screen_t sysfs_t (dir (getattr open search)))
                        (dontaudit sysadm_screen_t security_t (dir (getattr open search)))
                        (dontaudit sysadm_screen_t security_t (file (ioctl read getattr lock open)))
                        (optional sysadm_optional_470
                            (typeattributeset cil_gen_require selinux_config_t)
                            (dontaudit sysadm_screen_t selinux_config_t (dir (getattr open search)))
                            (dontaudit sysadm_screen_t selinux_config_t (file (ioctl read getattr lock open)))
                            (optional sysadm_optional_471
                                (typeattributeset cil_gen_require etc_t)
                                (typeattributeset cil_gen_require krb5_keytab_t)
                                (allow sysadm_screen_t etc_t (dir (getattr open search)))
                                (allow sysadm_screen_t krb5_keytab_t (file (ioctl read getattr lock open)))
                            )
                            (optional sysadm_optional_472
                                (typeattributeset cil_gen_require var_run_t)
                                (typeattributeset cil_gen_require var_t)
                                (typeattributeset cil_gen_require pcscd_t)
                                (typeattributeset cil_gen_require pcscd_runtime_t)
                                (allow sysadm_screen_t var_run_t (lnk_file (read getattr)))
                                (allow sysadm_screen_t var_t (dir (getattr open search)))
                                (allow sysadm_screen_t var_run_t (dir (getattr open search)))
                                (allow sysadm_screen_t pcscd_runtime_t (dir (getattr open search)))
                                (allow sysadm_screen_t pcscd_runtime_t (file (ioctl read getattr lock open)))
                                (allow sysadm_screen_t var_run_t (lnk_file (read getattr)))
                                (allow sysadm_screen_t var_t (dir (getattr open search)))
                                (allow sysadm_screen_t var_run_t (dir (getattr open search)))
                                (allow sysadm_screen_t pcscd_runtime_t (dir (getattr open search)))
                                (allow sysadm_screen_t pcscd_runtime_t (sock_file (write getattr append open)))
                                (allow sysadm_screen_t pcscd_t (unix_stream_socket (connectto)))
                                (allow pcscd_t sysadm_screen_t (dir (ioctl read getattr lock open search)))
                                (allow pcscd_t sysadm_screen_t (file (ioctl read getattr lock open)))
                            )
                            (optional sysadm_optional_473
                                (typeattributeset cil_gen_require sysadm_systemd_t)
                                (allow sysadm_systemd_t sysadm_screen_t (dir (ioctl read getattr lock open search)))
                                (allow sysadm_systemd_t sysadm_screen_t (file (ioctl read getattr lock open)))
                                (allow sysadm_systemd_t sysadm_screen_t (lnk_file (read getattr)))
                                (allow sysadm_systemd_t sysadm_screen_t (process (getattr)))
                                (allow sysadm_systemd_t sysadm_screen_t (process (sigchld sigkill sigstop signull signal)))
                                (allow sysadm_screen_t sysadm_systemd_t (fd (use)))
                                (allow sysadm_screen_t sysadm_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                                (allow sysadm_screen_t sysadm_systemd_t (dir (ioctl read getattr lock open search)))
                                (allow sysadm_screen_t sysadm_systemd_t (file (ioctl read getattr lock open)))
                                (allow sysadm_screen_t sysadm_systemd_t (lnk_file (read getattr)))
                                (allow sysadm_screen_t sysadm_systemd_t (process (getattr)))
                                (allow sysadm_screen_t sysadm_systemd_t (process (sigchld)))
                            )
                        )
                    )
                )
            )
            (optional sysadm_optional_474
                (roleattributeset cil_gen_require secadm_r)
                (roleallow sysadm_r secadm_r)
            )
            (optional sysadm_optional_475
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require sensord_t)
                (typeattributeset cil_gen_require sensord_initrc_exec_t)
                (typeattributeset cil_gen_require sensord_runtime_t)
                (allow sysadm_t sensord_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t sensord_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t sensord_t (file (ioctl read getattr lock open)))
                (allow sysadm_t sensord_t (lnk_file (read getattr)))
                (allow sysadm_t sensord_t (process (getattr)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t sensord_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t sensord_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t sensord_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t sensord_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t sensord_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t sensord_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t sensord_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t sensord_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t sensord_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t sensord_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t sensord_runtime_t (dir (getattr open search)))
                (allow sysadm_t sensord_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t sensord_runtime_t (dir (getattr open search)))
                (allow sysadm_t sensord_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t sensord_runtime_t (dir (getattr open search)))
                (allow sysadm_t sensord_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t sensord_runtime_t (dir (getattr open search)))
                (allow sysadm_t sensord_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t sensord_runtime_t (dir (getattr open search)))
                (allow sysadm_t sensord_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_476
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_477
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require setrans_t)
                (typeattributeset cil_gen_require setrans_initrc_exec_t)
                (typeattributeset cil_gen_require setrans_runtime_t)
                (typeattributeset cil_gen_require setrans_unit_t)
                (allow sysadm_t setrans_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t setrans_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t setrans_t (file (ioctl read getattr lock open)))
                (allow sysadm_t setrans_t (lnk_file (read getattr)))
                (allow sysadm_t setrans_t (process (getattr)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t setrans_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t setrans_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t setrans_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t setrans_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t setrans_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t setrans_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t setrans_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t setrans_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t setrans_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t setrans_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t setrans_runtime_t (dir (getattr open search)))
                (allow sysadm_t setrans_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t setrans_runtime_t (dir (getattr open search)))
                (allow sysadm_t setrans_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t setrans_runtime_t (dir (getattr open search)))
                (allow sysadm_t setrans_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t setrans_runtime_t (dir (getattr open search)))
                (allow sysadm_t setrans_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t setrans_runtime_t (dir (getattr open search)))
                (allow sysadm_t setrans_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_478
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_479
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require setroubleshootd_t)
                (typeattributeset cil_gen_require setroubleshoot_var_log_t)
                (typeattributeset cil_gen_require setroubleshoot_fixit_t)
                (typeattributeset cil_gen_require setroubleshoot_var_lib_t)
                (typeattributeset cil_gen_require setroubleshoot_runtime_t)
                (allow sysadm_t setroubleshootd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t setroubleshoot_fixit_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t setroubleshootd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t setroubleshoot_fixit_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t setroubleshootd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t setroubleshoot_fixit_t (file (ioctl read getattr lock open)))
                (allow sysadm_t setroubleshootd_t (lnk_file (read getattr)))
                (allow sysadm_t setroubleshoot_fixit_t (lnk_file (read getattr)))
                (allow sysadm_t setroubleshootd_t (process (getattr)))
                (allow sysadm_t setroubleshoot_fixit_t (process (getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t setroubleshoot_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t setroubleshoot_var_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t setroubleshoot_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t setroubleshoot_var_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t setroubleshoot_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t setroubleshoot_var_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t setroubleshoot_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t setroubleshoot_var_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t setroubleshoot_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t setroubleshoot_var_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t setroubleshoot_var_log_t (dir (getattr open search)))
                (allow sysadm_t setroubleshoot_var_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t setroubleshoot_var_log_t (dir (getattr open search)))
                (allow sysadm_t setroubleshoot_var_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t setroubleshoot_var_log_t (dir (getattr open search)))
                (allow sysadm_t setroubleshoot_var_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t setroubleshoot_var_log_t (dir (getattr open search)))
                (allow sysadm_t setroubleshoot_var_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t setroubleshoot_var_log_t (dir (getattr open search)))
                (allow sysadm_t setroubleshoot_var_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t setroubleshoot_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t setroubleshoot_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t setroubleshoot_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t setroubleshoot_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t setroubleshoot_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t setroubleshoot_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t setroubleshoot_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t setroubleshoot_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t setroubleshoot_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t setroubleshoot_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t setroubleshoot_var_lib_t (dir (getattr open search)))
                (allow sysadm_t setroubleshoot_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t setroubleshoot_var_lib_t (dir (getattr open search)))
                (allow sysadm_t setroubleshoot_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t setroubleshoot_var_lib_t (dir (getattr open search)))
                (allow sysadm_t setroubleshoot_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t setroubleshoot_var_lib_t (dir (getattr open search)))
                (allow sysadm_t setroubleshoot_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t setroubleshoot_var_lib_t (dir (getattr open search)))
                (allow sysadm_t setroubleshoot_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t setroubleshoot_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t setroubleshoot_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t setroubleshoot_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t setroubleshoot_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t setroubleshoot_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t setroubleshoot_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t setroubleshoot_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t setroubleshoot_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t setroubleshoot_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t setroubleshoot_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t setroubleshoot_runtime_t (dir (getattr open search)))
                (allow sysadm_t setroubleshoot_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t setroubleshoot_runtime_t (dir (getattr open search)))
                (allow sysadm_t setroubleshoot_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t setroubleshoot_runtime_t (dir (getattr open search)))
                (allow sysadm_t setroubleshoot_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t setroubleshoot_runtime_t (dir (getattr open search)))
                (allow sysadm_t setroubleshoot_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t setroubleshoot_runtime_t (dir (getattr open search)))
                (allow sysadm_t setroubleshoot_runtime_t (sock_file (getattr relabelfrom relabelto)))
            )
            (optional sysadm_optional_480
                (roleattributeset cil_gen_require run_init_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require setfiles_exec_t)
                (typeattributeset cil_gen_require run_init_t)
                (typeattributeset cil_gen_require run_init_exec_t)
                (typeattributeset cil_gen_require setfiles_t)
                (roleattributeset cil_gen_require run_init_roles)
                (roleattributeset run_init_roles (sysadm_r ))
                (roleattributeset cil_gen_require sysadm_r)
                (roletype sysadm_r setfiles_t)
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t setfiles_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t setfiles_t (process (transition)))
                (dontaudit sysadm_t setfiles_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t setfiles_exec_t process setfiles_t)
                (allow setfiles_t sysadm_t (fd (use)))
                (allow setfiles_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow setfiles_t sysadm_t (process (sigchld)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t run_init_t (process (transition)))
                (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t run_init_exec_t process run_init_t)
                (allow run_init_t sysadm_t (fd (use)))
                (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow run_init_t sysadm_t (process (sigchld)))
            )
            (optional sysadm_optional_481
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require var_lock_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require shorewall_t)
                (typeattributeset cil_gen_require shorewall_lock_t)
                (typeattributeset cil_gen_require shorewall_log_t)
                (typeattributeset cil_gen_require shorewall_exec_t)
                (typeattributeset cil_gen_require shorewall_initrc_exec_t)
                (typeattributeset cil_gen_require shorewall_var_lib_t)
                (typeattributeset cil_gen_require shorewall_tmp_t)
                (typeattributeset cil_gen_require shorewall_etc_t)
                (allow sysadm_t shorewall_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t shorewall_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t shorewall_t (file (ioctl read getattr lock open)))
                (allow sysadm_t shorewall_t (lnk_file (read getattr)))
                (allow sysadm_t shorewall_t (process (getattr)))
                (allow sysadm_t shorewall_exec_t (file (ioctl read getattr lock map execute open execute_no_trans)))
                (allow sysadm_t etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t shorewall_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t shorewall_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t shorewall_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t shorewall_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t shorewall_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t shorewall_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t shorewall_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t shorewall_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t shorewall_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t shorewall_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t shorewall_etc_t (dir (getattr open search)))
                (allow sysadm_t shorewall_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t shorewall_etc_t (dir (getattr open search)))
                (allow sysadm_t shorewall_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t shorewall_etc_t (dir (getattr open search)))
                (allow sysadm_t shorewall_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t shorewall_etc_t (dir (getattr open search)))
                (allow sysadm_t shorewall_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t shorewall_etc_t (dir (getattr open search)))
                (allow sysadm_t shorewall_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_lock_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lock_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t shorewall_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t shorewall_lock_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t shorewall_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t shorewall_lock_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t shorewall_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t shorewall_lock_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t shorewall_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t shorewall_lock_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t shorewall_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t shorewall_lock_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t shorewall_lock_t (dir (getattr open search)))
                (allow sysadm_t shorewall_lock_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t shorewall_lock_t (dir (getattr open search)))
                (allow sysadm_t shorewall_lock_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t shorewall_lock_t (dir (getattr open search)))
                (allow sysadm_t shorewall_lock_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t shorewall_lock_t (dir (getattr open search)))
                (allow sysadm_t shorewall_lock_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t shorewall_lock_t (dir (getattr open search)))
                (allow sysadm_t shorewall_lock_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t shorewall_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t shorewall_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t shorewall_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t shorewall_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t shorewall_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t shorewall_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t shorewall_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t shorewall_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t shorewall_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t shorewall_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t shorewall_log_t (dir (getattr open search)))
                (allow sysadm_t shorewall_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t shorewall_log_t (dir (getattr open search)))
                (allow sysadm_t shorewall_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t shorewall_log_t (dir (getattr open search)))
                (allow sysadm_t shorewall_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t shorewall_log_t (dir (getattr open search)))
                (allow sysadm_t shorewall_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t shorewall_log_t (dir (getattr open search)))
                (allow sysadm_t shorewall_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t shorewall_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t shorewall_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t shorewall_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t shorewall_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t shorewall_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t shorewall_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t shorewall_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t shorewall_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t shorewall_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t shorewall_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t shorewall_var_lib_t (dir (getattr open search)))
                (allow sysadm_t shorewall_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t shorewall_var_lib_t (dir (getattr open search)))
                (allow sysadm_t shorewall_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t shorewall_var_lib_t (dir (getattr open search)))
                (allow sysadm_t shorewall_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t shorewall_var_lib_t (dir (getattr open search)))
                (allow sysadm_t shorewall_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t shorewall_var_lib_t (dir (getattr open search)))
                (allow sysadm_t shorewall_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t shorewall_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t shorewall_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t shorewall_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t shorewall_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t shorewall_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t shorewall_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t shorewall_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t shorewall_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t shorewall_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t shorewall_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t shorewall_tmp_t (dir (getattr open search)))
                (allow sysadm_t shorewall_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t shorewall_tmp_t (dir (getattr open search)))
                (allow sysadm_t shorewall_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t shorewall_tmp_t (dir (getattr open search)))
                (allow sysadm_t shorewall_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t shorewall_tmp_t (dir (getattr open search)))
                (allow sysadm_t shorewall_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t shorewall_tmp_t (dir (getattr open search)))
                (allow sysadm_t shorewall_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_482
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_483
                (roleattributeset cil_gen_require shutdown_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require shutdown_t)
                (typeattributeset cil_gen_require shutdown_exec_t)
                (roleattributeset cil_gen_require shutdown_roles)
                (roleattributeset shutdown_roles (sysadm_r ))
                (booleanif (shutdown_allow_user_exec_domains)
                    (true
                        (allow sysadm_application_exec_domain shutdown_t (process (getattr)))
                        (allow sysadm_application_exec_domain shutdown_t (lnk_file (read getattr)))
                        (allow sysadm_application_exec_domain shutdown_t (file (ioctl read getattr lock open)))
                        (allow sysadm_application_exec_domain shutdown_t (dir (ioctl read getattr lock open search)))
                        (allow sysadm_application_exec_domain shutdown_t (process (sigchld sigkill sigstop signull signal ptrace)))
                        (allow shutdown_t sysadm_application_exec_domain (process (sigchld)))
                        (allow shutdown_t sysadm_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                        (allow shutdown_t sysadm_application_exec_domain (fd (use)))
                        (typetransition sysadm_application_exec_domain shutdown_exec_t process shutdown_t)
                        (dontaudit sysadm_application_exec_domain shutdown_t (process (noatsecure siginh rlimitinh)))
                        (allow sysadm_application_exec_domain shutdown_t (process (transition)))
                        (allow sysadm_application_exec_domain shutdown_exec_t (file (ioctl read getattr map execute open)))
                        (allow sysadm_application_exec_domain usr_t (dir (getattr open search)))
                        (allow sysadm_application_exec_domain bin_t (lnk_file (read getattr)))
                        (allow sysadm_application_exec_domain bin_t (dir (getattr open search)))
                    )
                    (false
                        (allow sysadm_t shutdown_t (process (getattr)))
                        (allow sysadm_t shutdown_t (lnk_file (read getattr)))
                        (allow sysadm_t shutdown_t (file (ioctl read getattr lock open)))
                        (allow sysadm_t shutdown_t (dir (ioctl read getattr lock open search)))
                        (allow sysadm_t shutdown_t (process (sigchld sigkill sigstop signull signal ptrace)))
                        (allow shutdown_t sysadm_t (process (sigchld)))
                        (allow shutdown_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                        (allow shutdown_t sysadm_t (fd (use)))
                        (typetransition sysadm_t shutdown_exec_t process shutdown_t)
                        (dontaudit sysadm_t shutdown_t (process (noatsecure siginh rlimitinh)))
                        (allow sysadm_t shutdown_t (process (transition)))
                        (allow sysadm_t shutdown_exec_t (file (ioctl read getattr map execute open)))
                        (allow sysadm_t usr_t (dir (getattr open search)))
                        (allow sysadm_t bin_t (lnk_file (read getattr)))
                        (allow sysadm_t bin_t (dir (getattr open search)))
                    )
                )
                (optional sysadm_optional_484
                    (typeattributeset cil_gen_require sysadm_systemd_t)
                    (allow sysadm_systemd_t shutdown_t (dir (ioctl read getattr lock open search)))
                    (allow sysadm_systemd_t shutdown_t (file (ioctl read getattr lock open)))
                    (allow sysadm_systemd_t shutdown_t (lnk_file (read getattr)))
                    (allow sysadm_systemd_t shutdown_t (process (getattr)))
                    (allow sysadm_systemd_t shutdown_t (process (sigchld sigkill sigstop signull signal)))
                    (allow shutdown_t sysadm_systemd_t (fd (use)))
                    (allow shutdown_t sysadm_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                    (allow shutdown_t sysadm_systemd_t (dir (ioctl read getattr lock open search)))
                    (allow shutdown_t sysadm_systemd_t (file (ioctl read getattr lock open)))
                    (allow shutdown_t sysadm_systemd_t (lnk_file (read getattr)))
                    (allow shutdown_t sysadm_systemd_t (process (getattr)))
                    (allow shutdown_t sysadm_systemd_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_485
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require slpd_t)
                (typeattributeset cil_gen_require slpd_initrc_exec_t)
                (typeattributeset cil_gen_require slpd_log_t)
                (typeattributeset cil_gen_require slpd_runtime_t)
                (allow sysadm_t slpd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t slpd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t slpd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t slpd_t (lnk_file (read getattr)))
                (allow sysadm_t slpd_t (process (getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t slpd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t slpd_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t slpd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t slpd_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t slpd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t slpd_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t slpd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t slpd_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t slpd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t slpd_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t slpd_log_t (dir (getattr open search)))
                (allow sysadm_t slpd_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t slpd_log_t (dir (getattr open search)))
                (allow sysadm_t slpd_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t slpd_log_t (dir (getattr open search)))
                (allow sysadm_t slpd_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t slpd_log_t (dir (getattr open search)))
                (allow sysadm_t slpd_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t slpd_log_t (dir (getattr open search)))
                (allow sysadm_t slpd_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t slpd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t slpd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t slpd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t slpd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t slpd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t slpd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t slpd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t slpd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t slpd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t slpd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t slpd_runtime_t (dir (getattr open search)))
                (allow sysadm_t slpd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t slpd_runtime_t (dir (getattr open search)))
                (allow sysadm_t slpd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t slpd_runtime_t (dir (getattr open search)))
                (allow sysadm_t slpd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t slpd_runtime_t (dir (getattr open search)))
                (allow sysadm_t slpd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t slpd_runtime_t (dir (getattr open search)))
                (allow sysadm_t slpd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_486
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_487
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require fsdaemon_t)
                (typeattributeset cil_gen_require fsdaemon_tmp_t)
                (typeattributeset cil_gen_require fsdaemon_runtime_t)
                (typeattributeset cil_gen_require fsdaemon_var_lib_t)
                (typeattributeset cil_gen_require fsdaemon_initrc_exec_t)
                (allow sysadm_t fsdaemon_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t fsdaemon_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t fsdaemon_t (file (ioctl read getattr lock open)))
                (allow sysadm_t fsdaemon_t (lnk_file (read getattr)))
                (allow sysadm_t fsdaemon_t (process (getattr)))
                (allow sysadm_t tmp_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t fsdaemon_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fsdaemon_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t fsdaemon_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fsdaemon_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t fsdaemon_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fsdaemon_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t fsdaemon_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fsdaemon_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t fsdaemon_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fsdaemon_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t fsdaemon_tmp_t (dir (getattr open search)))
                (allow sysadm_t fsdaemon_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t fsdaemon_tmp_t (dir (getattr open search)))
                (allow sysadm_t fsdaemon_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t fsdaemon_tmp_t (dir (getattr open search)))
                (allow sysadm_t fsdaemon_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t fsdaemon_tmp_t (dir (getattr open search)))
                (allow sysadm_t fsdaemon_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t fsdaemon_tmp_t (dir (getattr open search)))
                (allow sysadm_t fsdaemon_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t fsdaemon_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fsdaemon_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t fsdaemon_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fsdaemon_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t fsdaemon_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fsdaemon_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t fsdaemon_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fsdaemon_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t fsdaemon_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fsdaemon_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t fsdaemon_runtime_t (dir (getattr open search)))
                (allow sysadm_t fsdaemon_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t fsdaemon_runtime_t (dir (getattr open search)))
                (allow sysadm_t fsdaemon_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t fsdaemon_runtime_t (dir (getattr open search)))
                (allow sysadm_t fsdaemon_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t fsdaemon_runtime_t (dir (getattr open search)))
                (allow sysadm_t fsdaemon_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t fsdaemon_runtime_t (dir (getattr open search)))
                (allow sysadm_t fsdaemon_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t fsdaemon_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fsdaemon_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t fsdaemon_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fsdaemon_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t fsdaemon_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fsdaemon_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t fsdaemon_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fsdaemon_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t fsdaemon_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t fsdaemon_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t fsdaemon_var_lib_t (dir (getattr open search)))
                (allow sysadm_t fsdaemon_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t fsdaemon_var_lib_t (dir (getattr open search)))
                (allow sysadm_t fsdaemon_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t fsdaemon_var_lib_t (dir (getattr open search)))
                (allow sysadm_t fsdaemon_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t fsdaemon_var_lib_t (dir (getattr open search)))
                (allow sysadm_t fsdaemon_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t fsdaemon_var_lib_t (dir (getattr open search)))
                (allow sysadm_t fsdaemon_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_488
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_489
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require smokeping_t)
                (typeattributeset cil_gen_require smokeping_initrc_exec_t)
                (typeattributeset cil_gen_require smokeping_var_lib_t)
                (typeattributeset cil_gen_require smokeping_runtime_t)
                (allow sysadm_t smokeping_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t smokeping_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t smokeping_t (file (ioctl read getattr lock open)))
                (allow sysadm_t smokeping_t (lnk_file (read getattr)))
                (allow sysadm_t smokeping_t (process (getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t smokeping_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t smokeping_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t smokeping_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t smokeping_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t smokeping_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t smokeping_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t smokeping_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t smokeping_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t smokeping_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t smokeping_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t smokeping_var_lib_t (dir (getattr open search)))
                (allow sysadm_t smokeping_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t smokeping_var_lib_t (dir (getattr open search)))
                (allow sysadm_t smokeping_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t smokeping_var_lib_t (dir (getattr open search)))
                (allow sysadm_t smokeping_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t smokeping_var_lib_t (dir (getattr open search)))
                (allow sysadm_t smokeping_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t smokeping_var_lib_t (dir (getattr open search)))
                (allow sysadm_t smokeping_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t smokeping_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t smokeping_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t smokeping_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t smokeping_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t smokeping_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t smokeping_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t smokeping_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t smokeping_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t smokeping_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t smokeping_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t smokeping_runtime_t (dir (getattr open search)))
                (allow sysadm_t smokeping_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t smokeping_runtime_t (dir (getattr open search)))
                (allow sysadm_t smokeping_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t smokeping_runtime_t (dir (getattr open search)))
                (allow sysadm_t smokeping_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t smokeping_runtime_t (dir (getattr open search)))
                (allow sysadm_t smokeping_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t smokeping_runtime_t (dir (getattr open search)))
                (allow sysadm_t smokeping_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_490
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_491
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require var_spool_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require smsd_t)
                (typeattributeset cil_gen_require smsd_initrc_exec_t)
                (typeattributeset cil_gen_require smsd_conf_t)
                (typeattributeset cil_gen_require smsd_log_t)
                (typeattributeset cil_gen_require smsd_var_lib_t)
                (typeattributeset cil_gen_require smsd_runtime_t)
                (typeattributeset cil_gen_require smsd_spool_t)
                (allow sysadm_t smsd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t smsd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t smsd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t smsd_t (lnk_file (read getattr)))
                (allow sysadm_t smsd_t (process (getattr)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t smsd_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t smsd_conf_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t smsd_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t smsd_conf_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t smsd_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t smsd_conf_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t smsd_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t smsd_conf_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t smsd_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t smsd_conf_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t smsd_conf_t (dir (getattr open search)))
                (allow sysadm_t smsd_conf_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t smsd_conf_t (dir (getattr open search)))
                (allow sysadm_t smsd_conf_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t smsd_conf_t (dir (getattr open search)))
                (allow sysadm_t smsd_conf_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t smsd_conf_t (dir (getattr open search)))
                (allow sysadm_t smsd_conf_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t smsd_conf_t (dir (getattr open search)))
                (allow sysadm_t smsd_conf_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t smsd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t smsd_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t smsd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t smsd_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t smsd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t smsd_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t smsd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t smsd_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t smsd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t smsd_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t smsd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t smsd_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t smsd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t smsd_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t smsd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t smsd_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t smsd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t smsd_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t smsd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t smsd_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_spool_t (dir (getattr open search)))
                (allow sysadm_t smsd_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t smsd_spool_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t smsd_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t smsd_spool_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t smsd_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t smsd_spool_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t smsd_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t smsd_spool_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t smsd_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t smsd_spool_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t smsd_spool_t (dir (getattr open search)))
                (allow sysadm_t smsd_spool_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t smsd_spool_t (dir (getattr open search)))
                (allow sysadm_t smsd_spool_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t smsd_spool_t (dir (getattr open search)))
                (allow sysadm_t smsd_spool_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t smsd_spool_t (dir (getattr open search)))
                (allow sysadm_t smsd_spool_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t smsd_spool_t (dir (getattr open search)))
                (allow sysadm_t smsd_spool_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t smsd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t smsd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t smsd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t smsd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t smsd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t smsd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t smsd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t smsd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t smsd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t smsd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t smsd_runtime_t (dir (getattr open search)))
                (allow sysadm_t smsd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t smsd_runtime_t (dir (getattr open search)))
                (allow sysadm_t smsd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t smsd_runtime_t (dir (getattr open search)))
                (allow sysadm_t smsd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t smsd_runtime_t (dir (getattr open search)))
                (allow sysadm_t smsd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t smsd_runtime_t (dir (getattr open search)))
                (allow sysadm_t smsd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t smsd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t smsd_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t smsd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t smsd_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t smsd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t smsd_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t smsd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t smsd_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t smsd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t smsd_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t smsd_log_t (dir (getattr open search)))
                (allow sysadm_t smsd_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t smsd_log_t (dir (getattr open search)))
                (allow sysadm_t smsd_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t smsd_log_t (dir (getattr open search)))
                (allow sysadm_t smsd_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t smsd_log_t (dir (getattr open search)))
                (allow sysadm_t smsd_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t smsd_log_t (dir (getattr open search)))
                (allow sysadm_t smsd_log_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_492
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_493
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require snmpd_t)
                (typeattributeset cil_gen_require snmpd_log_t)
                (typeattributeset cil_gen_require snmpd_initrc_exec_t)
                (typeattributeset cil_gen_require snmpd_var_lib_t)
                (typeattributeset cil_gen_require snmpd_runtime_t)
                (allow sysadm_t snmpd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t snmpd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t snmpd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t snmpd_t (lnk_file (read getattr)))
                (allow sysadm_t snmpd_t (process (getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t snmpd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t snmpd_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t snmpd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t snmpd_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t snmpd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t snmpd_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t snmpd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t snmpd_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t snmpd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t snmpd_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t snmpd_log_t (dir (getattr open search)))
                (allow sysadm_t snmpd_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t snmpd_log_t (dir (getattr open search)))
                (allow sysadm_t snmpd_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t snmpd_log_t (dir (getattr open search)))
                (allow sysadm_t snmpd_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t snmpd_log_t (dir (getattr open search)))
                (allow sysadm_t snmpd_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t snmpd_log_t (dir (getattr open search)))
                (allow sysadm_t snmpd_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t snmpd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t snmpd_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t snmpd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t snmpd_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t snmpd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t snmpd_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t snmpd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t snmpd_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t snmpd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t snmpd_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t snmpd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t snmpd_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t snmpd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t snmpd_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t snmpd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t snmpd_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t snmpd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t snmpd_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t snmpd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t snmpd_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t snmpd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t snmpd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t snmpd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t snmpd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t snmpd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t snmpd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t snmpd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t snmpd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t snmpd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t snmpd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t snmpd_runtime_t (dir (getattr open search)))
                (allow sysadm_t snmpd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t snmpd_runtime_t (dir (getattr open search)))
                (allow sysadm_t snmpd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t snmpd_runtime_t (dir (getattr open search)))
                (allow sysadm_t snmpd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t snmpd_runtime_t (dir (getattr open search)))
                (allow sysadm_t snmpd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t snmpd_runtime_t (dir (getattr open search)))
                (allow sysadm_t snmpd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_494
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_495
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require snort_t)
                (typeattributeset cil_gen_require snort_runtime_t)
                (typeattributeset cil_gen_require snort_log_t)
                (typeattributeset cil_gen_require snort_etc_t)
                (typeattributeset cil_gen_require snort_initrc_exec_t)
                (allow sysadm_t snort_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t snort_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t snort_t (file (ioctl read getattr lock open)))
                (allow sysadm_t snort_t (lnk_file (read getattr)))
                (allow sysadm_t snort_t (process (getattr)))
                (allow sysadm_t snort_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t snort_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t snort_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t snort_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t snort_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t snort_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t snort_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t snort_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t snort_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t snort_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t snort_etc_t (dir (getattr open search)))
                (allow sysadm_t snort_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t snort_etc_t (dir (getattr open search)))
                (allow sysadm_t snort_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t snort_etc_t (dir (getattr open search)))
                (allow sysadm_t snort_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t snort_etc_t (dir (getattr open search)))
                (allow sysadm_t snort_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t snort_etc_t (dir (getattr open search)))
                (allow sysadm_t snort_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t snort_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t snort_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t snort_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t snort_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t snort_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t snort_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t snort_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t snort_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t snort_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t snort_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t snort_log_t (dir (getattr open search)))
                (allow sysadm_t snort_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t snort_log_t (dir (getattr open search)))
                (allow sysadm_t snort_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t snort_log_t (dir (getattr open search)))
                (allow sysadm_t snort_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t snort_log_t (dir (getattr open search)))
                (allow sysadm_t snort_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t snort_log_t (dir (getattr open search)))
                (allow sysadm_t snort_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t snort_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t snort_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t snort_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t snort_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t snort_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t snort_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t snort_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t snort_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t snort_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t snort_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t snort_runtime_t (dir (getattr open search)))
                (allow sysadm_t snort_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t snort_runtime_t (dir (getattr open search)))
                (allow sysadm_t snort_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t snort_runtime_t (dir (getattr open search)))
                (allow sysadm_t snort_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t snort_runtime_t (dir (getattr open search)))
                (allow sysadm_t snort_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t snort_runtime_t (dir (getattr open search)))
                (allow sysadm_t snort_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (optional sysadm_optional_496
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_497
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require tmpfs_t)
                (typeattributeset cil_gen_require soundd_t)
                (typeattributeset cil_gen_require soundd_etc_t)
                (typeattributeset cil_gen_require soundd_initrc_exec_t)
                (typeattributeset cil_gen_require soundd_tmp_t)
                (typeattributeset cil_gen_require soundd_runtime_t)
                (typeattributeset cil_gen_require soundd_tmpfs_t)
                (typeattributeset cil_gen_require soundd_state_t)
                (allow sysadm_t soundd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t soundd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t soundd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t soundd_t (lnk_file (read getattr)))
                (allow sysadm_t soundd_t (process (getattr)))
                (allow sysadm_t etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t soundd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t soundd_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t soundd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t soundd_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t soundd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t soundd_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t soundd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t soundd_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t soundd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t soundd_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t soundd_etc_t (dir (getattr open search)))
                (allow sysadm_t soundd_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t soundd_etc_t (dir (getattr open search)))
                (allow sysadm_t soundd_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t soundd_etc_t (dir (getattr open search)))
                (allow sysadm_t soundd_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t soundd_etc_t (dir (getattr open search)))
                (allow sysadm_t soundd_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t soundd_etc_t (dir (getattr open search)))
                (allow sysadm_t soundd_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t soundd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t soundd_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t soundd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t soundd_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t soundd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t soundd_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t soundd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t soundd_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t soundd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t soundd_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t soundd_tmp_t (dir (getattr open search)))
                (allow sysadm_t soundd_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t soundd_tmp_t (dir (getattr open search)))
                (allow sysadm_t soundd_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t soundd_tmp_t (dir (getattr open search)))
                (allow sysadm_t soundd_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t soundd_tmp_t (dir (getattr open search)))
                (allow sysadm_t soundd_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t soundd_tmp_t (dir (getattr open search)))
                (allow sysadm_t soundd_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmpfs_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t soundd_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t soundd_tmpfs_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t soundd_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t soundd_tmpfs_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t soundd_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t soundd_tmpfs_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t soundd_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t soundd_tmpfs_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t soundd_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t soundd_tmpfs_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t soundd_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t soundd_tmpfs_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t soundd_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t soundd_tmpfs_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t soundd_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t soundd_tmpfs_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t soundd_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t soundd_tmpfs_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t soundd_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t soundd_tmpfs_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t soundd_state_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t soundd_state_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t soundd_state_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t soundd_state_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t soundd_state_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t soundd_state_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t soundd_state_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t soundd_state_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t soundd_state_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t soundd_state_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t soundd_state_t (dir (getattr open search)))
                (allow sysadm_t soundd_state_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t soundd_state_t (dir (getattr open search)))
                (allow sysadm_t soundd_state_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t soundd_state_t (dir (getattr open search)))
                (allow sysadm_t soundd_state_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t soundd_state_t (dir (getattr open search)))
                (allow sysadm_t soundd_state_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t soundd_state_t (dir (getattr open search)))
                (allow sysadm_t soundd_state_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t soundd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t soundd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t soundd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t soundd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t soundd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t soundd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t soundd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t soundd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t soundd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t soundd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t soundd_runtime_t (dir (getattr open search)))
                (allow sysadm_t soundd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t soundd_runtime_t (dir (getattr open search)))
                (allow sysadm_t soundd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t soundd_runtime_t (dir (getattr open search)))
                (allow sysadm_t soundd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t soundd_runtime_t (dir (getattr open search)))
                (allow sysadm_t soundd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t soundd_runtime_t (dir (getattr open search)))
                (allow sysadm_t soundd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_498
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_499
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require user_home_dir_t)
                (typeattributeset cil_gen_require home_root_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require var_spool_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require spamd_t)
                (typeattributeset cil_gen_require spamd_tmp_t)
                (typeattributeset cil_gen_require spamd_log_t)
                (typeattributeset cil_gen_require spamd_spool_t)
                (typeattributeset cil_gen_require spamd_var_lib_t)
                (typeattributeset cil_gen_require spamd_runtime_t)
                (typeattributeset cil_gen_require spamd_initrc_exec_t)
                (typeattributeset cil_gen_require spamassassin_unit_t)
                (typeattributeset cil_gen_require spamd_update_t)
                (typeattributeset cil_gen_require spamd_update_exec_t)
                (typeattributeset cil_gen_require spamc_t)
                (typeattributeset cil_gen_require spamc_exec_t)
                (typeattributeset cil_gen_require spamc_tmp_t)
                (typeattributeset cil_gen_require spamassassin_t)
                (typeattributeset cil_gen_require spamassassin_exec_t)
                (typeattributeset cil_gen_require spamd_home_t)
                (typeattributeset cil_gen_require spamassassin_home_t)
                (typeattributeset cil_gen_require spamassassin_tmp_t)
                (roleattributeset cil_gen_require sysadm_r)
                (roletype sysadm_r spamd_update_t)
                (roletype sysadm_r spamc_t)
                (roletype sysadm_r spamassassin_t)
                (allow sysadm_t spamd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t spamd_update_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t spamd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t spamd_update_t (file (ioctl read getattr lock open)))
                (allow sysadm_t spamd_t (lnk_file (read getattr)))
                (allow sysadm_t spamd_update_t (lnk_file (read getattr)))
                (allow sysadm_t spamd_t (process (getattr)))
                (allow sysadm_t spamd_update_t (process (getattr)))
                (allow sysadm_t spamd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t spamd_update_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t tmp_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t spamd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t spamd_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t spamd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t spamd_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t spamd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t spamd_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t spamd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t spamd_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t spamd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t spamd_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t spamd_tmp_t (dir (getattr open search)))
                (allow sysadm_t spamd_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t spamd_tmp_t (dir (getattr open search)))
                (allow sysadm_t spamd_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t spamd_tmp_t (dir (getattr open search)))
                (allow sysadm_t spamd_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t spamd_tmp_t (dir (getattr open search)))
                (allow sysadm_t spamd_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t spamd_tmp_t (dir (getattr open search)))
                (allow sysadm_t spamd_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t spamd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t spamd_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t spamd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t spamd_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t spamd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t spamd_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t spamd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t spamd_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t spamd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t spamd_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t spamd_log_t (dir (getattr open search)))
                (allow sysadm_t spamd_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t spamd_log_t (dir (getattr open search)))
                (allow sysadm_t spamd_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t spamd_log_t (dir (getattr open search)))
                (allow sysadm_t spamd_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t spamd_log_t (dir (getattr open search)))
                (allow sysadm_t spamd_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t spamd_log_t (dir (getattr open search)))
                (allow sysadm_t spamd_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_spool_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t spamd_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t spamd_spool_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t spamd_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t spamd_spool_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t spamd_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t spamd_spool_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t spamd_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t spamd_spool_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t spamd_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t spamd_spool_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t spamd_spool_t (dir (getattr open search)))
                (allow sysadm_t spamd_spool_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t spamd_spool_t (dir (getattr open search)))
                (allow sysadm_t spamd_spool_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t spamd_spool_t (dir (getattr open search)))
                (allow sysadm_t spamd_spool_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t spamd_spool_t (dir (getattr open search)))
                (allow sysadm_t spamd_spool_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t spamd_spool_t (dir (getattr open search)))
                (allow sysadm_t spamd_spool_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t spamd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t spamd_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t spamd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t spamd_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t spamd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t spamd_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t spamd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t spamd_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t spamd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t spamd_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t spamd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t spamd_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t spamd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t spamd_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t spamd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t spamd_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t spamd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t spamd_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t spamd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t spamd_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t spamd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t spamd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t spamd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t spamd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t spamd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t spamd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t spamd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t spamd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t spamd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t spamd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t spamd_runtime_t (dir (getattr open search)))
                (allow sysadm_t spamd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t spamd_runtime_t (dir (getattr open search)))
                (allow sysadm_t spamd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t spamd_runtime_t (dir (getattr open search)))
                (allow sysadm_t spamd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t spamd_runtime_t (dir (getattr open search)))
                (allow sysadm_t spamd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t spamd_runtime_t (dir (getattr open search)))
                (allow sysadm_t spamd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t spamd_update_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t spamd_update_t (process (transition)))
                (dontaudit sysadm_t spamd_update_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t spamd_update_exec_t process spamd_update_t)
                (allow spamd_update_t sysadm_t (fd (use)))
                (allow spamd_update_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow spamd_update_t sysadm_t (process (sigchld)))
                (allow sysadm_application_exec_domain spamassassin_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_application_exec_domain spamassassin_t (process (transition)))
                (dontaudit sysadm_application_exec_domain spamassassin_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_application_exec_domain spamassassin_exec_t process spamassassin_t)
                (allow spamassassin_t sysadm_application_exec_domain (fd (use)))
                (allow spamassassin_t sysadm_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                (allow spamassassin_t sysadm_application_exec_domain (process (sigchld)))
                (allow sysadm_application_exec_domain spamc_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_application_exec_domain spamc_t (process (transition)))
                (dontaudit sysadm_application_exec_domain spamc_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_application_exec_domain spamc_exec_t process spamc_t)
                (allow spamc_t sysadm_application_exec_domain (fd (use)))
                (allow spamc_t sysadm_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                (allow spamc_t sysadm_application_exec_domain (process (sigchld)))
                (allow sysadm_application_exec_domain spamd_update_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_application_exec_domain spamd_update_t (process (transition)))
                (dontaudit sysadm_application_exec_domain spamd_update_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_application_exec_domain spamd_update_exec_t process spamd_update_t)
                (allow spamd_update_t sysadm_application_exec_domain (fd (use)))
                (allow spamd_update_t sysadm_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                (allow spamd_update_t sysadm_application_exec_domain (process (sigchld)))
                (allow sysadm_application_exec_domain spamd_update_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_application_exec_domain spamc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_application_exec_domain spamassassin_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_application_exec_domain spamd_update_t (file (ioctl read getattr lock open)))
                (allow sysadm_application_exec_domain spamc_t (file (ioctl read getattr lock open)))
                (allow sysadm_application_exec_domain spamassassin_t (file (ioctl read getattr lock open)))
                (allow sysadm_application_exec_domain spamd_update_t (lnk_file (read getattr)))
                (allow sysadm_application_exec_domain spamc_t (lnk_file (read getattr)))
                (allow sysadm_application_exec_domain spamassassin_t (lnk_file (read getattr)))
                (allow sysadm_application_exec_domain spamd_update_t (process (getattr)))
                (allow sysadm_application_exec_domain spamc_t (process (getattr)))
                (allow sysadm_application_exec_domain spamassassin_t (process (getattr)))
                (allow sysadm_application_exec_domain spamd_update_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_application_exec_domain spamc_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_application_exec_domain spamassassin_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t spamc_tmp_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t spamd_home_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t spamassassin_home_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t spamassassin_tmp_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t spamc_tmp_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t spamd_home_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t spamassassin_home_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t spamassassin_tmp_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t spamc_tmp_t (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename)))
                (allow sysadm_t spamd_home_t (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename)))
                (allow sysadm_t spamassassin_home_t (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename)))
                (allow sysadm_t spamassassin_tmp_t (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename)))
                (allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (typetransition sysadm_t user_home_dir_t dir ".spamd" spamd_home_t)
                (typetransition sysadm_t user_home_dir_t dir ".spamassassin" spamassassin_home_t)
                (optional sysadm_optional_500
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
                (optional sysadm_optional_501
                    (typeattributeset cil_gen_require sysadm_systemd_t)
                    (allow sysadm_systemd_t spamassassin_t (dir (ioctl read getattr lock open search)))
                    (allow sysadm_systemd_t spamassassin_t (file (ioctl read getattr lock open)))
                    (allow sysadm_systemd_t spamassassin_t (lnk_file (read getattr)))
                    (allow sysadm_systemd_t spamassassin_t (process (getattr)))
                    (allow sysadm_systemd_t spamassassin_t (process (sigchld sigkill sigstop signull signal)))
                    (allow spamassassin_t sysadm_systemd_t (fd (use)))
                    (allow spamassassin_t sysadm_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                    (allow spamassassin_t sysadm_systemd_t (dir (ioctl read getattr lock open search)))
                    (allow spamassassin_t sysadm_systemd_t (file (ioctl read getattr lock open)))
                    (allow spamassassin_t sysadm_systemd_t (lnk_file (read getattr)))
                    (allow spamassassin_t sysadm_systemd_t (process (getattr)))
                    (allow spamassassin_t sysadm_systemd_t (process (sigchld)))
                    (allow sysadm_systemd_t spamc_t (dir (ioctl read getattr lock open search)))
                    (allow sysadm_systemd_t spamc_t (file (ioctl read getattr lock open)))
                    (allow sysadm_systemd_t spamc_t (lnk_file (read getattr)))
                    (allow sysadm_systemd_t spamc_t (process (getattr)))
                    (allow sysadm_systemd_t spamc_t (process (sigchld sigkill sigstop signull signal)))
                    (allow spamc_t sysadm_systemd_t (fd (use)))
                    (allow spamc_t sysadm_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                    (allow spamc_t sysadm_systemd_t (dir (ioctl read getattr lock open search)))
                    (allow spamc_t sysadm_systemd_t (file (ioctl read getattr lock open)))
                    (allow spamc_t sysadm_systemd_t (lnk_file (read getattr)))
                    (allow spamc_t sysadm_systemd_t (process (getattr)))
                    (allow spamc_t sysadm_systemd_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_502
                (type sysadm_ssh_agent_t)
                (roletype object_r sysadm_ssh_agent_t)
                (typeattributeset cil_gen_require user_devpts_t)
                (typeattributeset cil_gen_require user_tty_device_t)
                (typeattributeset cil_gen_require domain)
                (typeattributeset domain (sysadm_t ))
                (typeattributeset cil_gen_require selinux_config_t)
                (typeattributeset cil_gen_require shell_exec_t)
                (typeattributeset cil_gen_require entry_type)
                (typeattributeset entry_type (shell_exec_t bin_t ))
                (typeattributeset cil_gen_require exec_type)
                (typeattributeset exec_type (shell_exec_t bin_t ))
                (typeattributeset cil_gen_require file_type)
                (typeattributeset file_type (shell_exec_t bin_t ))
                (typeattributeset cil_gen_require non_security_file_type)
                (typeattributeset non_security_file_type (shell_exec_t bin_t ))
                (typeattributeset cil_gen_require non_auth_file_type)
                (typeattributeset non_auth_file_type (shell_exec_t bin_t ))
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require ubac_constrained_type)
                (typeattributeset ubac_constrained_type (sysadm_t ))
                (typeattributeset cil_gen_require devpts_t)
                (typeattributeset cil_gen_require console_device_t)
                (typeattributeset cil_gen_require device_t)
                (typeattributeset cil_gen_require proc_t)
                (typeattributeset cil_gen_require sysctl_t)
                (typeattributeset cil_gen_require sysctl_kernel_t)
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require etc_runtime_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require lib_t)
                (typeattributeset cil_gen_require locale_t)
                (typeattributeset cil_gen_require cert_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require syslogd_t)
                (typeattributeset cil_gen_require syslogd_runtime_t)
                (typeattributeset cil_gen_require devlog_t)
                (typeattributeset cil_gen_require init_runtime_t)
                (typeattributeset cil_gen_require user_home_t)
                (typeattributeset cil_gen_require user_home_dir_t)
                (typeattributeset cil_gen_require home_root_t)
                (typeattributeset cil_gen_require nfs_t)
                (typeattributeset cil_gen_require cifs_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require urandom_device_t)
                (typeattributeset cil_gen_require privfd)
                (typeattributeset cil_gen_require autofs_t)
                (typeattributeset cil_gen_require application_exec_type)
                (typeattributeset cil_gen_require random_device_t)
                (typeattributeset cil_gen_require application_domain_type)
                (typeattributeset cil_gen_require ssh_server)
                (typeattributeset cil_gen_require ssh_agent_type)
                (typeattributeset cil_gen_require ssh_t)
                (typeattributeset cil_gen_require ssh_exec_t)
                (typeattributeset cil_gen_require ssh_home_t)
                (typeattributeset cil_gen_require ssh_agent_exec_t)
                (typeattributeset cil_gen_require ssh_agent_tmp_t)
                (roleattributeset cil_gen_require sysadm_r)
                (roletype sysadm_r ssh_t)
                (roletype sysadm_r sysadm_ssh_agent_t)
                (typeattributeset cil_gen_require non_auth_file_type)
                (typeattributeset non_auth_file_type (ssh_agent_exec_t ))
                (typeattributeset cil_gen_require file_type)
                (typeattributeset file_type (ssh_agent_exec_t ))
                (typeattributeset cil_gen_require domain)
                (typeattributeset domain (sysadm_ssh_agent_t ))
                (typeattributeset cil_gen_require application_domain_type)
                (typeattributeset application_domain_type (sysadm_ssh_agent_t ))
                (typeattributeset cil_gen_require ssh_agent_type)
                (typeattributeset ssh_agent_type (sysadm_ssh_agent_t ))
                (typeattributeset cil_gen_require entry_type)
                (typeattributeset entry_type (ssh_agent_exec_t ))
                (typeattributeset cil_gen_require ubac_constrained_type)
                (typeattributeset ubac_constrained_type (sysadm_ssh_agent_t ))
                (typeattributeset cil_gen_require exec_type)
                (typeattributeset exec_type (ssh_agent_exec_t ))
                (typeattributeset cil_gen_require privfd)
                (typeattributeset privfd (sysadm_ssh_agent_t ))
                (typeattributeset cil_gen_require application_exec_type)
                (typeattributeset application_exec_type (ssh_agent_exec_t ))
                (typeattributeset cil_gen_require non_security_file_type)
                (typeattributeset non_security_file_type (ssh_agent_exec_t ))
                (allow sysadm_ssh_agent_t ssh_agent_exec_t (file (entrypoint)))
                (allow sysadm_ssh_agent_t ssh_agent_exec_t (file (ioctl read getattr lock map execute open)))
                (allow sysadm_application_exec_domain ssh_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_application_exec_domain ssh_t (process (transition)))
                (dontaudit sysadm_application_exec_domain ssh_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_application_exec_domain ssh_exec_t process ssh_t)
                (allow ssh_t sysadm_application_exec_domain (fd (use)))
                (allow ssh_t sysadm_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                (allow ssh_t sysadm_application_exec_domain (process (sigchld)))
                (allow sysadm_application_exec_domain ssh_server (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                (allow sysadm_application_exec_domain ssh_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_application_exec_domain ssh_t (file (ioctl read getattr lock open)))
                (allow sysadm_application_exec_domain ssh_t (lnk_file (read getattr)))
                (allow sysadm_application_exec_domain ssh_t (process (getattr)))
                (allow sysadm_application_exec_domain ssh_t (process (signal)))
                (allow ssh_t sysadm_application_exec_domain (unix_stream_socket (ioctl read write getattr setattr append bind connect getopt setopt shutdown)))
                (allow ssh_t sysadm_application_exec_domain (unix_stream_socket (connectto)))
                (allow ssh_t sysadm_application_exec_domain (key (view read write search link setattr create)))
                (allow sysadm_t ssh_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ssh_home_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ssh_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ssh_home_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t ssh_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ssh_home_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t user_home_dir_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_ssh_agent_t self (process (signal setrlimit)))
                (allow sysadm_ssh_agent_t self (capability (setgid)))
                (allow sysadm_ssh_agent_t self (fifo_file (ioctl read write getattr lock append open)))
                (allow sysadm_ssh_agent_t sysadm_application_exec_domain (process (signull)))
                (allow sysadm_ssh_agent_t sysadm_ssh_agent_t (process (signull)))
                (allow sysadm_ssh_agent_t self (unix_stream_socket (ioctl read write create getattr setattr append bind connect listen accept getopt setopt shutdown connectto)))
                (allow sysadm_ssh_agent_t ssh_agent_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_ssh_agent_t ssh_agent_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_ssh_agent_t ssh_agent_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_ssh_agent_t ssh_agent_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_ssh_agent_t tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (typetransition sysadm_ssh_agent_t tmp_t sock_file ssh_agent_tmp_t)
                (typetransition sysadm_ssh_agent_t tmp_t dir ssh_agent_tmp_t)
                (allow sysadm_application_exec_domain ssh_agent_tmp_t (dir (getattr open search)))
                (allow sysadm_application_exec_domain ssh_agent_tmp_t (sock_file (write getattr append open)))
                (allow sysadm_application_exec_domain sysadm_ssh_agent_t (unix_stream_socket (connectto)))
                (allow sysadm_application_exec_domain sysadm_ssh_agent_t (process (signal)))
                (allow sysadm_application_exec_domain sysadm_ssh_agent_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_application_exec_domain sysadm_ssh_agent_t (file (ioctl read getattr lock open)))
                (allow sysadm_application_exec_domain sysadm_ssh_agent_t (lnk_file (read getattr)))
                (allow sysadm_application_exec_domain sysadm_ssh_agent_t (process (getattr)))
                (allow sysadm_application_exec_domain ssh_agent_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_application_exec_domain sysadm_ssh_agent_t (process (transition)))
                (dontaudit sysadm_application_exec_domain sysadm_ssh_agent_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_application_exec_domain ssh_agent_exec_t process sysadm_ssh_agent_t)
                (allow sysadm_ssh_agent_t sysadm_application_exec_domain (fd (use)))
                (allow sysadm_ssh_agent_t sysadm_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                (allow sysadm_ssh_agent_t sysadm_application_exec_domain (process (sigchld)))
                (allow sysadm_ssh_agent_t proc_t (dir (getattr open search)))
                (allow sysadm_ssh_agent_t sysctl_t (dir (getattr open search)))
                (allow sysadm_ssh_agent_t sysctl_kernel_t (dir (getattr open search)))
                (allow sysadm_ssh_agent_t sysctl_kernel_t (file (ioctl read getattr lock open)))
                (allow sysadm_ssh_agent_t proc_t (dir (getattr open search)))
                (allow sysadm_ssh_agent_t sysctl_t (dir (getattr open search)))
                (allow sysadm_ssh_agent_t sysctl_kernel_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_ssh_agent_t device_t (dir (getattr open search)))
                (allow sysadm_ssh_agent_t urandom_device_t (chr_file (ioctl read getattr lock open)))
                (allow sysadm_ssh_agent_t device_t (dir (getattr open search)))
                (allow sysadm_ssh_agent_t random_device_t (chr_file (ioctl read getattr lock open)))
                (allow sysadm_ssh_agent_t autofs_t (dir (getattr open search)))
                (allow sysadm_ssh_agent_t bin_t (dir (getattr open search)))
                (allow sysadm_ssh_agent_t bin_t (lnk_file (read getattr)))
                (allow sysadm_ssh_agent_t usr_t (dir (getattr open search)))
                (allow sysadm_ssh_agent_t bin_t (dir (getattr open search)))
                (allow sysadm_ssh_agent_t bin_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_ssh_agent_t shell_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_ssh_agent_t sysadm_t (process (transition)))
                (dontaudit sysadm_ssh_agent_t sysadm_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_ssh_agent_t shell_exec_t process sysadm_t)
                (allow sysadm_ssh_agent_t bin_t (dir (getattr open search)))
                (allow sysadm_ssh_agent_t bin_t (lnk_file (read getattr)))
                (allow sysadm_ssh_agent_t usr_t (dir (getattr open search)))
                (allow sysadm_ssh_agent_t bin_t (file (ioctl read getattr map execute open)))
                (allow sysadm_ssh_agent_t sysadm_t (process (transition)))
                (dontaudit sysadm_ssh_agent_t sysadm_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_ssh_agent_t bin_t process sysadm_t)
                (allow sysadm_ssh_agent_t privfd (fd (use)))
                (allow sysadm_ssh_agent_t etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_ssh_agent_t etc_t (dir (getattr open search)))
                (allow sysadm_ssh_agent_t etc_t (file (ioctl read getattr lock open)))
                (allow sysadm_ssh_agent_t etc_t (dir (getattr open search)))
                (allow sysadm_ssh_agent_t etc_t (lnk_file (read getattr)))
                (allow sysadm_ssh_agent_t etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_ssh_agent_t etc_t (dir (getattr open search)))
                (allow sysadm_ssh_agent_t etc_runtime_t (file (ioctl read getattr lock open)))
                (allow sysadm_ssh_agent_t etc_t (dir (getattr open search)))
                (allow sysadm_ssh_agent_t etc_runtime_t (lnk_file (read getattr)))
                (allow sysadm_ssh_agent_t usr_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_ssh_agent_t usr_t (dir (getattr open search)))
                (allow sysadm_ssh_agent_t usr_t (file (ioctl read getattr lock open)))
                (allow sysadm_ssh_agent_t usr_t (dir (getattr open search)))
                (allow sysadm_ssh_agent_t usr_t (lnk_file (read getattr)))
                (allow sysadm_ssh_agent_t home_root_t (dir (getattr open search)))
                (allow sysadm_ssh_agent_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_ssh_agent_t usr_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_ssh_agent_t lib_t (dir (getattr open search)))
                (allow sysadm_ssh_agent_t lib_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_ssh_agent_t lib_t (dir (getattr open search)))
                (allow sysadm_ssh_agent_t lib_t (file (ioctl read getattr lock open)))
                (allow sysadm_ssh_agent_t lib_t (dir (getattr open search)))
                (allow sysadm_ssh_agent_t lib_t (lnk_file (read getattr)))
                (allow sysadm_ssh_agent_t devlog_t (sock_file (write getattr append open)))
                (allow sysadm_ssh_agent_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_ssh_agent_t var_t (dir (getattr open search)))
                (allow sysadm_ssh_agent_t var_run_t (dir (getattr open search)))
                (allow sysadm_ssh_agent_t init_runtime_t (dir (getattr open search)))
                (allow sysadm_ssh_agent_t syslogd_runtime_t (dir (getattr open search)))
                (allow sysadm_ssh_agent_t syslogd_t (unix_dgram_socket (sendto)))
                (allow sysadm_ssh_agent_t syslogd_t (unix_stream_socket (connectto)))
                (allow sysadm_ssh_agent_t self (unix_dgram_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
                (allow sysadm_ssh_agent_t self (unix_stream_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
                (allow sysadm_ssh_agent_t device_t (dir (getattr open search)))
                (allow sysadm_ssh_agent_t device_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_ssh_agent_t device_t (dir (getattr open search)))
                (allow sysadm_ssh_agent_t device_t (lnk_file (read getattr)))
                (allow sysadm_ssh_agent_t console_device_t (chr_file (ioctl write getattr lock append open)))
                (dontaudit sysadm_ssh_agent_t console_device_t (chr_file (ioctl read getattr lock open)))
                (allow sysadm_ssh_agent_t etc_t (dir (getattr open search)))
                (allow sysadm_ssh_agent_t etc_t (lnk_file (read getattr)))
                (allow sysadm_ssh_agent_t usr_t (dir (getattr open search)))
                (allow sysadm_ssh_agent_t locale_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_ssh_agent_t locale_t (dir (getattr open search)))
                (allow sysadm_ssh_agent_t locale_t (file (ioctl read getattr lock open)))
                (allow sysadm_ssh_agent_t locale_t (dir (getattr open search)))
                (allow sysadm_ssh_agent_t locale_t (lnk_file (read getattr)))
                (allow sysadm_ssh_agent_t locale_t (file (map)))
                (allow sysadm_ssh_agent_t cert_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_ssh_agent_t cert_t (dir (getattr open search)))
                (allow sysadm_ssh_agent_t cert_t (file (ioctl read getattr lock open)))
                (allow sysadm_ssh_agent_t cert_t (dir (getattr open search)))
                (allow sysadm_ssh_agent_t cert_t (lnk_file (read getattr)))
                (dontaudit sysadm_ssh_agent_t selinux_config_t (dir (getattr open search)))
                (dontaudit sysadm_ssh_agent_t selinux_config_t (file (ioctl read getattr lock open)))
                (allow sysadm_ssh_agent_t device_t (dir (getattr open search)))
                (allow sysadm_ssh_agent_t device_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_ssh_agent_t device_t (dir (getattr open search)))
                (allow sysadm_ssh_agent_t device_t (lnk_file (read getattr)))
                (allow sysadm_ssh_agent_t devpts_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_ssh_agent_t user_devpts_t (chr_file (ioctl read write getattr append open)))
                (allow sysadm_ssh_agent_t user_tty_device_t (chr_file (ioctl read write getattr append open)))
                (allow sysadm_ssh_agent_t home_root_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_ssh_agent_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_ssh_agent_t user_home_t (dir (getattr open search)))
                (allow sysadm_ssh_agent_t user_home_dir_t (dir (getattr open search)))
                (allow sysadm_ssh_agent_t user_home_t (file (ioctl read getattr map execute open)))
                (allow sysadm_ssh_agent_t sysadm_t (process (transition)))
                (dontaudit sysadm_ssh_agent_t sysadm_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_ssh_agent_t user_home_t process sysadm_t)
                (allow sysadm_ssh_agent_t user_home_dir_t (dir (getattr open search)))
                (allow sysadm_ssh_agent_t home_root_t (dir (getattr open search)))
                (allow sysadm_ssh_agent_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_application_exec_domain sysadm_ssh_agent_t (fd (use)))
                (allow sysadm_application_exec_domain sysadm_ssh_agent_t (fifo_file (ioctl read write getattr lock append)))
                (allow sysadm_application_exec_domain sysadm_ssh_agent_t (process (sigchld)))
                (booleanif (use_samba_home_dirs)
                    (true
                        (typetransition sysadm_ssh_agent_t cifs_t process sysadm_t)
                        (dontaudit sysadm_ssh_agent_t sysadm_t (process (noatsecure siginh rlimitinh)))
                        (allow sysadm_ssh_agent_t sysadm_t (process (transition)))
                        (allow sysadm_ssh_agent_t cifs_t (file (ioctl read getattr map execute open)))
                        (allow sysadm_ssh_agent_t cifs_t (dir (getattr open search)))
                        (allow sysadm_ssh_agent_t cifs_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                        (allow sysadm_ssh_agent_t cifs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                    )
                )
                (booleanif (use_nfs_home_dirs)
                    (true
                        (typetransition sysadm_ssh_agent_t nfs_t process sysadm_t)
                        (dontaudit sysadm_ssh_agent_t sysadm_t (process (noatsecure siginh rlimitinh)))
                        (allow sysadm_ssh_agent_t sysadm_t (process (transition)))
                        (allow sysadm_ssh_agent_t nfs_t (file (ioctl read getattr map execute open)))
                        (allow sysadm_ssh_agent_t nfs_t (dir (getattr open search)))
                        (allow sysadm_ssh_agent_t nfs_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                        (allow sysadm_ssh_agent_t nfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                    )
                )
                (optional sysadm_optional_503
                    (typeattributeset cil_gen_require init_t)
                    (allow sysadm_ssh_agent_t init_t (process (sigchld)))
                    (allow sysadm_ssh_agent_t init_t (process (signull)))
                    (optional sysadm_optional_504
                        (typeattributeset cil_gen_require rpm_t)
                        (allow sysadm_ssh_agent_t rpm_t (fd (use)))
                        (allow sysadm_ssh_agent_t rpm_t (fifo_file (ioctl read getattr lock open)))
                    )
                    (optional sysadm_optional_505
                        (typeattributeset cil_gen_require security_t)
                        (typeattributeset cil_gen_require sysfs_t)
                        (dontaudit sysadm_ssh_agent_t security_t (filesystem (getattr)))
                        (dontaudit sysadm_ssh_agent_t sysfs_t (filesystem (getattr)))
                        (dontaudit sysadm_ssh_agent_t sysfs_t (dir (getattr open search)))
                        (dontaudit sysadm_ssh_agent_t security_t (dir (getattr open search)))
                        (dontaudit sysadm_ssh_agent_t security_t (file (ioctl read getattr lock open)))
                        (optional sysadm_optional_506
                            (typeattributeset cil_gen_require selinux_config_t)
                            (dontaudit sysadm_ssh_agent_t selinux_config_t (dir (getattr open search)))
                            (dontaudit sysadm_ssh_agent_t selinux_config_t (file (ioctl read getattr lock open)))
                            (optional sysadm_optional_507
                                (typeattributeset cil_gen_require sysadm_systemd_t)
                                (allow sysadm_systemd_t ssh_t (dir (ioctl read getattr lock open search)))
                                (allow sysadm_systemd_t ssh_t (file (ioctl read getattr lock open)))
                                (allow sysadm_systemd_t ssh_t (lnk_file (read getattr)))
                                (allow sysadm_systemd_t ssh_t (process (getattr)))
                                (allow sysadm_systemd_t ssh_t (process (sigchld sigkill sigstop signull signal)))
                                (allow ssh_t sysadm_systemd_t (fd (use)))
                                (allow ssh_t sysadm_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                                (allow ssh_t sysadm_systemd_t (dir (ioctl read getattr lock open search)))
                                (allow ssh_t sysadm_systemd_t (file (ioctl read getattr lock open)))
                                (allow ssh_t sysadm_systemd_t (lnk_file (read getattr)))
                                (allow ssh_t sysadm_systemd_t (process (getattr)))
                                (allow ssh_t sysadm_systemd_t (process (sigchld)))
                            )
                            (optional sysadm_optional_508
                                (typeattributeset cil_gen_require cockpit_session_t)
                                (allow sysadm_ssh_agent_t cockpit_session_t (fd (use)))
                                (allow sysadm_ssh_agent_t cockpit_session_t (fifo_file (ioctl read write getattr lock append open)))
                                (allow cockpit_session_t sysadm_ssh_agent_t (process (signal)))
                            )
                            (optional sysadm_optional_509
                                (typeattributeset cil_gen_require etc_t)
                                (typeattributeset cil_gen_require var_run_t)
                                (typeattributeset cil_gen_require net_conf_t)
                                (typeattributeset cil_gen_require var_t)
                                (typeattributeset cil_gen_require netlabel_peer_t)
                                (typeattributeset cil_gen_require netif_t)
                                (typeattributeset cil_gen_require node_t)
                                (typeattributeset cil_gen_require port_type)
                                (typeattributeset cil_gen_require port_t)
                                (typeattributeset cil_gen_require defined_port_type)
                                (typeattributeset cil_gen_require var_yp_t)
                                (typeattributeset cil_gen_require reserved_port_type)
                                (typeattributeset cil_gen_require portmap_port_t)
                                (typeattributeset cil_gen_require reserved_port_t)
                                (typeattributeset cil_gen_require portmap_client_packet_t)
                                (typeattributeset cil_gen_require client_packet_t)
                                (typeattributeset cil_gen_require server_packet_t)
                                (booleanif (allow_ypbind)
                                    (true
                                        (allow sysadm_ssh_agent_t net_conf_t (lnk_file (read getattr)))
                                        (allow sysadm_ssh_agent_t net_conf_t (file (ioctl read getattr lock open)))
                                        (allow sysadm_ssh_agent_t net_conf_t (dir (ioctl read getattr lock open search)))
                                        (allow sysadm_ssh_agent_t var_run_t (dir (getattr open search)))
                                        (allow sysadm_ssh_agent_t var_t (dir (getattr open search)))
                                        (allow sysadm_ssh_agent_t var_run_t (lnk_file (read getattr)))
                                        (allow sysadm_ssh_agent_t etc_t (dir (getattr open search)))
                                        (allow sysadm_ssh_agent_t server_packet_t (packet (recv)))
                                        (allow sysadm_ssh_agent_t server_packet_t (packet (send)))
                                        (allow sysadm_ssh_agent_t client_packet_t (packet (recv)))
                                        (allow sysadm_ssh_agent_t client_packet_t (packet (send)))
                                        (allow sysadm_ssh_agent_t portmap_client_packet_t (packet (recv)))
                                        (allow sysadm_ssh_agent_t portmap_client_packet_t (packet (send)))
                                        (dontaudit sysadm_ssh_agent_t port_type (tcp_socket (name_connect)))
                                        (allow sysadm_ssh_agent_t port_t (tcp_socket (name_connect)))
                                        (allow sysadm_ssh_agent_t reserved_port_t (tcp_socket (name_connect)))
                                        (allow sysadm_ssh_agent_t portmap_port_t (tcp_socket (name_connect)))
                                        (dontaudit sysadm_ssh_agent_t port_type (udp_socket (name_bind)))
                                        (dontaudit sysadm_ssh_agent_t port_type (tcp_socket (name_bind)))
                                        (dontaudit sysadm_ssh_agent_t reserved_port_type (udp_socket (name_bind)))
                                        (dontaudit sysadm_ssh_agent_t reserved_port_type (tcp_socket (name_bind)))
                                        (dontaudit sysadm_ssh_agent_t defined_port_type (udp_socket (name_bind)))
                                        (allow sysadm_ssh_agent_t port_t (udp_socket (name_bind)))
                                        (dontaudit sysadm_ssh_agent_t defined_port_type (tcp_socket (name_bind)))
                                        (allow sysadm_ssh_agent_t port_t (tcp_socket (name_bind)))
                                        (allow sysadm_ssh_agent_t node_t (udp_socket (node_bind)))
                                        (allow sysadm_ssh_agent_t node_t (tcp_socket (node_bind)))
                                        (allow sysadm_ssh_agent_t node_t (node (recvfrom)))
                                        (allow sysadm_ssh_agent_t node_t (node (sendto)))
                                        (allow sysadm_ssh_agent_t node_t (node (recvfrom sendto)))
                                        (allow sysadm_ssh_agent_t netif_t (netif (ingress)))
                                        (allow sysadm_ssh_agent_t netif_t (netif (egress)))
                                        (allow sysadm_ssh_agent_t netif_t (netif (ingress egress)))
                                        (allow sysadm_ssh_agent_t netlabel_peer_t (tcp_socket (recvfrom)))
                                        (allow sysadm_ssh_agent_t netlabel_peer_t (udp_socket (recvfrom)))
                                        (allow sysadm_ssh_agent_t netlabel_peer_t (rawip_socket (recvfrom)))
                                        (allow sysadm_ssh_agent_t netlabel_peer_t (peer (recv)))
                                        (allow sysadm_ssh_agent_t var_yp_t (lnk_file (read getattr)))
                                        (allow sysadm_ssh_agent_t var_yp_t (file (ioctl read getattr lock open)))
                                        (allow sysadm_ssh_agent_t var_yp_t (dir (ioctl read getattr lock open search)))
                                        (allow sysadm_ssh_agent_t self (udp_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
                                        (allow sysadm_ssh_agent_t self (tcp_socket (ioctl read write create getattr setattr append bind connect listen accept getopt setopt shutdown)))
                                        (allow sysadm_ssh_agent_t self (capability (net_bind_service)))
                                    )
                                )
                            )
                            (optional sysadm_optional_510
                                (typeattributeset cil_gen_require sysadm_systemd_t)
                                (allow sysadm_systemd_t sysadm_ssh_agent_t (dir (ioctl read getattr lock open search)))
                                (allow sysadm_systemd_t sysadm_ssh_agent_t (file (ioctl read getattr lock open)))
                                (allow sysadm_systemd_t sysadm_ssh_agent_t (lnk_file (read getattr)))
                                (allow sysadm_systemd_t sysadm_ssh_agent_t (process (getattr)))
                                (allow sysadm_systemd_t sysadm_ssh_agent_t (process (sigchld sigkill sigstop signull signal)))
                                (allow sysadm_ssh_agent_t sysadm_systemd_t (fd (use)))
                                (allow sysadm_ssh_agent_t sysadm_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                                (allow sysadm_ssh_agent_t sysadm_systemd_t (dir (ioctl read getattr lock open search)))
                                (allow sysadm_ssh_agent_t sysadm_systemd_t (file (ioctl read getattr lock open)))
                                (allow sysadm_ssh_agent_t sysadm_systemd_t (lnk_file (read getattr)))
                                (allow sysadm_ssh_agent_t sysadm_systemd_t (process (getattr)))
                                (allow sysadm_ssh_agent_t sysadm_systemd_t (process (sigchld)))
                            )
                            (optional sysadm_optional_511
                                (typeattributeset cil_gen_require var_run_t)
                                (typeattributeset cil_gen_require var_t)
                                (typeattributeset cil_gen_require user_home_dir_t)
                                (typeattributeset cil_gen_require home_root_t)
                                (typeattributeset cil_gen_require user_runtime_t)
                                (typeattributeset cil_gen_require user_runtime_root_t)
                                (typeattributeset cil_gen_require gpg_agent_t)
                                (typeattributeset cil_gen_require gpg_agent_tmp_t)
                                (typeattributeset cil_gen_require gpg_secret_t)
                                (typeattributeset cil_gen_require gpg_runtime_t)
                                (booleanif (ssh_use_gpg_agent)
                                    (true
                                        (allow sysadm_application_exec_domain home_root_t (lnk_file (read getattr)))
                                        (allow sysadm_application_exec_domain home_root_t (dir (getattr open search)))
                                        (allow sysadm_application_exec_domain user_home_dir_t (dir (getattr open search)))
                                        (allow sysadm_application_exec_domain var_run_t (dir (getattr open search)))
                                        (allow sysadm_application_exec_domain var_t (dir (getattr open search)))
                                        (allow sysadm_application_exec_domain var_run_t (lnk_file (read getattr)))
                                        (allow sysadm_application_exec_domain user_runtime_root_t (dir (getattr open search)))
                                        (allow sysadm_application_exec_domain user_runtime_t (dir (getattr open search)))
                                        (allow sysadm_application_exec_domain gpg_secret_t (dir (getattr open search)))
                                        (allow sysadm_application_exec_domain gpg_runtime_t (dir (getattr open search)))
                                        (allow sysadm_application_exec_domain gpg_agent_t (unix_stream_socket (connectto)))
                                        (allow sysadm_application_exec_domain gpg_agent_tmp_t (sock_file (write getattr append open)))
                                        (allow sysadm_application_exec_domain gpg_agent_tmp_t (dir (getattr open search)))
                                    )
                                )
                            )
                            (optional sysadm_optional_512
                                (typeattributeset cil_gen_require xdm_t)
                                (typeattributeset cil_gen_require xsession_log_t)
                                (allow sysadm_ssh_agent_t xdm_t (fd (use)))
                                (allow sysadm_ssh_agent_t xdm_t (fifo_file (ioctl read write getattr lock append)))
                                (allow sysadm_ssh_agent_t xdm_t (process (sigchld)))
                                (allow sysadm_ssh_agent_t xsession_log_t (file (ioctl write getattr lock append)))
                            )
                        )
                    )
                )
            )
            (optional sysadm_optional_513
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require sssd_public_t)
                (typeattributeset cil_gen_require sssd_var_lib_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require sssd_t)
                (typeattributeset cil_gen_require sssd_initrc_exec_t)
                (typeattributeset cil_gen_require sssd_runtime_t)
                (typeattributeset cil_gen_require sssd_conf_t)
                (typeattributeset cil_gen_require sssd_var_log_t)
                (allow sysadm_t sssd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t sssd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t sssd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t sssd_t (lnk_file (read getattr)))
                (allow sysadm_t sssd_t (process (getattr)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t sssd_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t sssd_conf_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t sssd_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t sssd_conf_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t sssd_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t sssd_conf_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t sssd_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t sssd_conf_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t sssd_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t sssd_conf_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t sssd_conf_t (dir (getattr open search)))
                (allow sysadm_t sssd_conf_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t sssd_conf_t (dir (getattr open search)))
                (allow sysadm_t sssd_conf_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t sssd_conf_t (dir (getattr open search)))
                (allow sysadm_t sssd_conf_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t sssd_conf_t (dir (getattr open search)))
                (allow sysadm_t sssd_conf_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t sssd_conf_t (dir (getattr open search)))
                (allow sysadm_t sssd_conf_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t sssd_public_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t sssd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t sssd_public_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t sssd_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t sssd_public_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t sssd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t sssd_public_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t sssd_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t sssd_public_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t sssd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t sssd_public_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t sssd_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t sssd_public_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t sssd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t sssd_public_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t sssd_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t sssd_public_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t sssd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t sssd_public_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t sssd_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t sssd_public_t (dir (getattr open search)))
                (allow sysadm_t sssd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t sssd_public_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t sssd_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t sssd_public_t (dir (getattr open search)))
                (allow sysadm_t sssd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t sssd_public_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t sssd_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t sssd_public_t (dir (getattr open search)))
                (allow sysadm_t sssd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t sssd_public_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t sssd_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t sssd_public_t (dir (getattr open search)))
                (allow sysadm_t sssd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t sssd_public_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t sssd_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t sssd_public_t (dir (getattr open search)))
                (allow sysadm_t sssd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t sssd_public_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t sssd_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t sssd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t sssd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t sssd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t sssd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t sssd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t sssd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t sssd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t sssd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t sssd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t sssd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t sssd_runtime_t (dir (getattr open search)))
                (allow sysadm_t sssd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t sssd_runtime_t (dir (getattr open search)))
                (allow sysadm_t sssd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t sssd_runtime_t (dir (getattr open search)))
                (allow sysadm_t sssd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t sssd_runtime_t (dir (getattr open search)))
                (allow sysadm_t sssd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t sssd_runtime_t (dir (getattr open search)))
                (allow sysadm_t sssd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t sssd_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t sssd_var_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t sssd_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t sssd_var_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t sssd_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t sssd_var_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t sssd_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t sssd_var_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t sssd_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t sssd_var_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t sssd_var_log_t (dir (getattr open search)))
                (allow sysadm_t sssd_var_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t sssd_var_log_t (dir (getattr open search)))
                (allow sysadm_t sssd_var_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t sssd_var_log_t (dir (getattr open search)))
                (allow sysadm_t sssd_var_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t sssd_var_log_t (dir (getattr open search)))
                (allow sysadm_t sssd_var_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t sssd_var_log_t (dir (getattr open search)))
                (allow sysadm_t sssd_var_log_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_514
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_515
                (roleattributeset cil_gen_require staff_r)
                (roleallow sysadm_r staff_r)
            )
            (optional sysadm_optional_516
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require stapserver_t)
                (typeattributeset cil_gen_require stapserver_conf_t)
                (typeattributeset cil_gen_require stapserver_log_t)
                (typeattributeset cil_gen_require stapserver_runtime_t)
                (typeattributeset cil_gen_require stapserver_initrc_exec_t)
                (typeattributeset cil_gen_require stapserver_var_lib_t)
                (allow sysadm_t stapserver_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t stapserver_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t stapserver_t (file (ioctl read getattr lock open)))
                (allow sysadm_t stapserver_t (lnk_file (read getattr)))
                (allow sysadm_t stapserver_t (process (getattr)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t stapserver_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t stapserver_conf_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t stapserver_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t stapserver_conf_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t stapserver_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t stapserver_conf_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t stapserver_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t stapserver_conf_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t stapserver_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t stapserver_conf_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t stapserver_conf_t (dir (getattr open search)))
                (allow sysadm_t stapserver_conf_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t stapserver_conf_t (dir (getattr open search)))
                (allow sysadm_t stapserver_conf_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t stapserver_conf_t (dir (getattr open search)))
                (allow sysadm_t stapserver_conf_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t stapserver_conf_t (dir (getattr open search)))
                (allow sysadm_t stapserver_conf_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t stapserver_conf_t (dir (getattr open search)))
                (allow sysadm_t stapserver_conf_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t stapserver_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t stapserver_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t stapserver_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t stapserver_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t stapserver_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t stapserver_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t stapserver_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t stapserver_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t stapserver_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t stapserver_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t stapserver_var_lib_t (dir (getattr open search)))
                (allow sysadm_t stapserver_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t stapserver_var_lib_t (dir (getattr open search)))
                (allow sysadm_t stapserver_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t stapserver_var_lib_t (dir (getattr open search)))
                (allow sysadm_t stapserver_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t stapserver_var_lib_t (dir (getattr open search)))
                (allow sysadm_t stapserver_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t stapserver_var_lib_t (dir (getattr open search)))
                (allow sysadm_t stapserver_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t stapserver_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t stapserver_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t stapserver_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t stapserver_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t stapserver_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t stapserver_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t stapserver_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t stapserver_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t stapserver_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t stapserver_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t stapserver_log_t (dir (getattr open search)))
                (allow sysadm_t stapserver_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t stapserver_log_t (dir (getattr open search)))
                (allow sysadm_t stapserver_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t stapserver_log_t (dir (getattr open search)))
                (allow sysadm_t stapserver_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t stapserver_log_t (dir (getattr open search)))
                (allow sysadm_t stapserver_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t stapserver_log_t (dir (getattr open search)))
                (allow sysadm_t stapserver_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t stapserver_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t stapserver_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t stapserver_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t stapserver_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t stapserver_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t stapserver_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t stapserver_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t stapserver_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t stapserver_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t stapserver_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t stapserver_runtime_t (dir (getattr open search)))
                (allow sysadm_t stapserver_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t stapserver_runtime_t (dir (getattr open search)))
                (allow sysadm_t stapserver_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t stapserver_runtime_t (dir (getattr open search)))
                (allow sysadm_t stapserver_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t stapserver_runtime_t (dir (getattr open search)))
                (allow sysadm_t stapserver_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t stapserver_runtime_t (dir (getattr open search)))
                (allow sysadm_t stapserver_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_517
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_518
                (type sysadm_su_t)
                (roletype object_r sysadm_su_t)
                (typeattributeset cil_gen_require user_devpts_t)
                (typeattributeset cil_gen_require user_tty_device_t)
                (typeattributeset cil_gen_require domain)
                (typeattributeset domain (sysadm_t ))
                (typeattributeset cil_gen_require init_t)
                (typeattributeset cil_gen_require security_t)
                (typeattributeset cil_gen_require sysfs_t)
                (typeattributeset cil_gen_require selinux_config_t)
                (typeattributeset cil_gen_require shell_exec_t)
                (typeattributeset cil_gen_require entry_type)
                (typeattributeset entry_type (shell_exec_t bin_t ))
                (typeattributeset cil_gen_require exec_type)
                (typeattributeset exec_type (shell_exec_t bin_t ))
                (typeattributeset cil_gen_require file_type)
                (typeattributeset file_type (shell_exec_t bin_t ))
                (typeattributeset cil_gen_require non_security_file_type)
                (typeattributeset non_security_file_type (shell_exec_t bin_t ))
                (typeattributeset cil_gen_require non_auth_file_type)
                (typeattributeset non_auth_file_type (shell_exec_t bin_t ))
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require ubac_constrained_type)
                (typeattributeset ubac_constrained_type (sysadm_t ))
                (typeattributeset cil_gen_require devpts_t)
                (typeattributeset cil_gen_require console_device_t)
                (typeattributeset cil_gen_require device_t)
                (typeattributeset cil_gen_require proc_t)
                (typeattributeset cil_gen_require sysctl_t)
                (typeattributeset cil_gen_require sysctl_kernel_t)
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require etc_runtime_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require locale_t)
                (typeattributeset cil_gen_require cert_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require syslogd_t)
                (typeattributeset cil_gen_require syslogd_runtime_t)
                (typeattributeset cil_gen_require devlog_t)
                (typeattributeset cil_gen_require init_runtime_t)
                (typeattributeset cil_gen_require user_home_dir_t)
                (typeattributeset cil_gen_require home_root_t)
                (typeattributeset cil_gen_require nfs_t)
                (typeattributeset cil_gen_require cifs_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require urandom_device_t)
                (typeattributeset cil_gen_require privfd)
                (typeattributeset cil_gen_require autofs_t)
                (typeattributeset cil_gen_require wtmp_t)
                (typeattributeset cil_gen_require application_exec_type)
                (typeattributeset cil_gen_require initrc_runtime_t)
                (typeattributeset cil_gen_require kernel_t)
                (typeattributeset cil_gen_require random_device_t)
                (typeattributeset cil_gen_require nsswitch_domain)
                (typeattributeset nsswitch_domain (sysadm_t ))
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require fs_t)
                (typeattributeset cil_gen_require shadow_t)
                (typeattributeset cil_gen_require application_domain_type)
                (typeattributeset cil_gen_require chkpwd_t)
                (typeattributeset cil_gen_require chkpwd_exec_t)
                (typeattributeset cil_gen_require auth_cache_t)
                (typeattributeset cil_gen_require faillog_t)
                (typeattributeset cil_gen_require su_exec_t)
                (typeattributeset cil_gen_require sudomain)
                (typeattributeset cil_gen_require lastlog_t)
                (typeattributeset cil_gen_require mlsfilewrite)
                (roleattributeset cil_gen_require sysadm_r)
                (roletype sysadm_r sysadm_su_t)
                (typeattributeset cil_gen_require non_auth_file_type)
                (typeattributeset non_auth_file_type (su_exec_t ))
                (typeattributeset cil_gen_require sudomain)
                (typeattributeset sudomain (sysadm_su_t ))
                (typeattributeset cil_gen_require file_type)
                (typeattributeset file_type (su_exec_t ))
                (typeattributeset cil_gen_require domain)
                (typeattributeset domain (sysadm_su_t ))
                (typeattributeset cil_gen_require application_domain_type)
                (typeattributeset application_domain_type (sysadm_su_t ))
                (typeattributeset cil_gen_require mlsfilewrite)
                (typeattributeset mlsfilewrite (sysadm_su_t ))
                (typeattributeset cil_gen_require nsswitch_domain)
                (typeattributeset nsswitch_domain (sysadm_su_t ))
                (typeattributeset cil_gen_require entry_type)
                (typeattributeset entry_type (su_exec_t ))
                (typeattributeset cil_gen_require ubac_constrained_type)
                (typeattributeset ubac_constrained_type (sysadm_su_t ))
                (typeattributeset cil_gen_require exec_type)
                (typeattributeset exec_type (su_exec_t ))
                (typeattributeset cil_gen_require privfd)
                (typeattributeset privfd (sysadm_su_t ))
                (typeattributeset cil_gen_require application_exec_type)
                (typeattributeset application_exec_type (su_exec_t ))
                (typeattributeset cil_gen_require non_security_file_type)
                (typeattributeset non_security_file_type (su_exec_t ))
                (allow sysadm_su_t su_exec_t (file (entrypoint)))
                (allow sysadm_su_t su_exec_t (file (ioctl read getattr lock map execute open)))
                (allow sysadm_su_t sysadm_t (process (sigkill signal)))
                (allow sysadm_su_t self (capability (chown dac_override fowner setgid setuid net_bind_service sys_nice sys_resource audit_write audit_control)))
                (dontaudit sysadm_su_t self (capability (net_admin sys_tty_config)))
                (allow sysadm_su_t self (process (signal setsched setexec setrlimit)))
                (allow sysadm_su_t self (fifo_file (ioctl read write getattr lock append open)))
                (allow sysadm_su_t self (netlink_audit_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown nlmsg_read nlmsg_write nlmsg_relay)))
                (allow sysadm_su_t self (key (write search)))
                (allow sysadm_su_t bin_t (dir (getattr open search)))
                (allow sysadm_su_t bin_t (lnk_file (read getattr)))
                (allow sysadm_su_t usr_t (dir (getattr open search)))
                (allow sysadm_su_t bin_t (dir (getattr open search)))
                (allow sysadm_su_t bin_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_su_t shell_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_su_t sysadm_t (process (transition)))
                (dontaudit sysadm_su_t sysadm_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_su_t shell_exec_t process sysadm_t)
                (allow sysadm_su_t proc_t (dir (getattr open search)))
                (allow sysadm_su_t proc_t (file (ioctl read getattr lock open)))
                (allow sysadm_su_t proc_t (dir (getattr open search)))
                (allow sysadm_su_t proc_t (lnk_file (read getattr)))
                (allow sysadm_su_t proc_t (dir (getattr open search)))
                (allow sysadm_su_t proc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_su_t proc_t (dir (getattr open search)))
                (allow sysadm_su_t sysctl_t (dir (getattr open search)))
                (allow sysadm_su_t sysctl_kernel_t (dir (getattr open search)))
                (allow sysadm_su_t sysctl_kernel_t (file (ioctl read getattr lock open)))
                (allow sysadm_su_t proc_t (dir (getattr open search)))
                (allow sysadm_su_t sysctl_t (dir (getattr open search)))
                (allow sysadm_su_t sysctl_kernel_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_su_t kernel_t (key (search)))
                (allow sysadm_su_t kernel_t (key (link)))
                (dontaudit sysadm_su_t proc_t (filesystem (getattr)))
                (allow sysadm_su_t device_t (dir (getattr open search)))
                (allow sysadm_su_t urandom_device_t (chr_file (ioctl read getattr lock open)))
                (allow sysadm_su_t autofs_t (dir (getattr open search)))
                (allow sysadm_su_t sysfs_t (dir (getattr open search)))
                (allow sysadm_su_t sysfs_t (dir (getattr open search)))
                (allow sysadm_su_t self (netlink_selinux_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
                (allow sysadm_su_t security_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_su_t security_t (file (ioctl read write getattr map open)))
                (allow sysadm_su_t security_t (security (compute_av)))
                (allow sysadm_su_t sysfs_t (dir (getattr open search)))
                (allow sysadm_su_t sysfs_t (dir (getattr open search)))
                (allow sysadm_su_t security_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_su_t security_t (file (ioctl read getattr map open)))
                (allow sysadm_su_t auth_cache_t (dir (getattr open search)))
                (allow sysadm_su_t bin_t (dir (getattr open search)))
                (allow sysadm_su_t bin_t (lnk_file (read getattr)))
                (allow sysadm_su_t usr_t (dir (getattr open search)))
                (allow sysadm_su_t chkpwd_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_su_t chkpwd_t (process (transition)))
                (dontaudit sysadm_su_t chkpwd_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_su_t chkpwd_exec_t process chkpwd_t)
                (allow chkpwd_t sysadm_su_t (fd (use)))
                (allow chkpwd_t sysadm_su_t (fifo_file (ioctl read write getattr lock append)))
                (allow chkpwd_t sysadm_su_t (process (sigchld)))
                (dontaudit sysadm_su_t shadow_t (file (ioctl read getattr lock open)))
                (allow sysadm_su_t device_t (dir (getattr open search)))
                (allow sysadm_su_t random_device_t (chr_file (ioctl read getattr lock open)))
                (allow sysadm_su_t device_t (dir (getattr open search)))
                (allow sysadm_su_t urandom_device_t (chr_file (ioctl read getattr lock open)))
                (allow sysadm_su_t var_t (dir (getattr open search)))
                (allow sysadm_su_t var_log_t (dir (getattr open search)))
                (allow sysadm_su_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_su_t faillog_t (file (ioctl read write getattr lock append open)))
                (allow sysadm_su_t self (capability (audit_write)))
                (allow sysadm_su_t self (netlink_audit_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown nlmsg_read nlmsg_relay)))
                (allow sysadm_su_t cert_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_su_t cert_t (dir (getattr open search)))
                (allow sysadm_su_t cert_t (file (ioctl read getattr lock open)))
                (allow sysadm_su_t cert_t (dir (getattr open search)))
                (allow sysadm_su_t cert_t (lnk_file (read getattr)))
                (dontaudit sysadm_su_t shadow_t (file (ioctl read getattr lock open)))
                (allow sysadm_su_t faillog_t (dir (ioctl write getattr lock open add_name search)))
                (allow sysadm_su_t faillog_t (file (create getattr open)))
                (allow sysadm_su_t var_t (dir (getattr open search)))
                (allow sysadm_su_t var_log_t (dir (getattr open search)))
                (allow sysadm_su_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_su_t faillog_t (file (ioctl read write getattr lock append open)))
                (allow sysadm_su_t faillog_t (dir (getattr open search)))
                (allow sysadm_su_t faillog_t (file (setattr)))
                (allow sysadm_su_t var_t (dir (getattr open search)))
                (allow sysadm_su_t var_log_t (dir (getattr open search)))
                (allow sysadm_su_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_su_t lastlog_t (file (ioctl read write getattr setattr lock append open)))
                (allow sysadm_su_t wtmp_t (file (ioctl write getattr lock append open)))
                (allow sysadm_su_t bin_t (dir (getattr open search)))
                (allow sysadm_su_t bin_t (lnk_file (read getattr)))
                (allow sysadm_su_t usr_t (dir (getattr open search)))
                (allow sysadm_su_t privfd (fd (use)))
                (allow sysadm_su_t etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_su_t etc_t (dir (getattr open search)))
                (allow sysadm_su_t etc_t (file (ioctl read getattr lock open)))
                (allow sysadm_su_t etc_t (dir (getattr open search)))
                (allow sysadm_su_t etc_t (lnk_file (read getattr)))
                (allow sysadm_su_t etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_su_t etc_t (dir (getattr open search)))
                (allow sysadm_su_t etc_runtime_t (file (ioctl read getattr lock open)))
                (allow sysadm_su_t etc_t (dir (getattr open search)))
                (allow sysadm_su_t etc_runtime_t (lnk_file (read getattr)))
                (allow sysadm_su_t var_t (dir (getattr open search)))
                (allow sysadm_su_t var_lib_t (dir (getattr open search)))
                (dontaudit sysadm_su_t tmp_t (dir (getattr)))
                (dontaudit sysadm_su_t init_t (fd (use)))
                (dontaudit sysadm_su_t init_t (dir (getattr open search)))
                (dontaudit sysadm_su_t init_t (file (ioctl read getattr lock open)))
                (dontaudit sysadm_su_t init_t (lnk_file (read getattr)))
                (allow sysadm_su_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_su_t var_t (dir (getattr open search)))
                (allow sysadm_su_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_su_t initrc_runtime_t (file (ioctl read write getattr lock append open)))
                (allow sysadm_su_t devlog_t (sock_file (write getattr append open)))
                (allow sysadm_su_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_su_t var_t (dir (getattr open search)))
                (allow sysadm_su_t var_run_t (dir (getattr open search)))
                (allow sysadm_su_t init_runtime_t (dir (getattr open search)))
                (allow sysadm_su_t syslogd_runtime_t (dir (getattr open search)))
                (allow sysadm_su_t syslogd_t (unix_dgram_socket (sendto)))
                (allow sysadm_su_t syslogd_t (unix_stream_socket (connectto)))
                (allow sysadm_su_t self (unix_dgram_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
                (allow sysadm_su_t self (unix_stream_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
                (allow sysadm_su_t device_t (dir (getattr open search)))
                (allow sysadm_su_t device_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_su_t device_t (dir (getattr open search)))
                (allow sysadm_su_t device_t (lnk_file (read getattr)))
                (allow sysadm_su_t console_device_t (chr_file (ioctl write getattr lock append open)))
                (dontaudit sysadm_su_t console_device_t (chr_file (ioctl read getattr lock open)))
                (allow sysadm_su_t etc_t (dir (getattr open search)))
                (allow sysadm_su_t etc_t (lnk_file (read getattr)))
                (allow sysadm_su_t usr_t (dir (getattr open search)))
                (allow sysadm_su_t locale_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_su_t locale_t (dir (getattr open search)))
                (allow sysadm_su_t locale_t (file (ioctl read getattr lock open)))
                (allow sysadm_su_t locale_t (dir (getattr open search)))
                (allow sysadm_su_t locale_t (lnk_file (read getattr)))
                (allow sysadm_su_t locale_t (file (map)))
                (allow sysadm_su_t security_t (filesystem (getattr)))
                (allow sysadm_su_t sysfs_t (filesystem (getattr)))
                (allow sysadm_su_t sysfs_t (dir (getattr open search)))
                (allow sysadm_su_t sysfs_t (dir (getattr open search)))
                (allow sysadm_su_t proc_t (dir (getattr open search)))
                (allow sysadm_su_t proc_t (file (ioctl read getattr lock open)))
                (allow sysadm_su_t proc_t (dir (getattr open search)))
                (allow sysadm_su_t proc_t (lnk_file (read getattr)))
                (allow sysadm_su_t proc_t (dir (getattr open search)))
                (allow sysadm_su_t proc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_su_t etc_t (dir (getattr open search)))
                (allow sysadm_su_t selinux_config_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_su_t selinux_config_t (dir (getattr open search)))
                (allow sysadm_su_t selinux_config_t (file (ioctl read getattr lock open)))
                (allow sysadm_su_t selinux_config_t (dir (getattr open search)))
                (allow sysadm_su_t selinux_config_t (lnk_file (read getattr)))
                (allow sysadm_su_t device_t (dir (getattr open search)))
                (allow sysadm_su_t device_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_su_t device_t (dir (getattr open search)))
                (allow sysadm_su_t device_t (lnk_file (read getattr)))
                (allow sysadm_su_t devpts_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_su_t user_devpts_t (chr_file (ioctl read write getattr append open)))
                (allow sysadm_su_t user_tty_device_t (chr_file (ioctl read write getattr append open)))
                (allow sysadm_su_t user_home_dir_t (dir (getattr open search)))
                (allow sysadm_su_t home_root_t (dir (getattr open search)))
                (allow sysadm_su_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_su_t security_t (filesystem (getattr)))
                (allow sysadm_su_t sysfs_t (filesystem (getattr)))
                (allow sysadm_su_t sysfs_t (dir (getattr open search)))
                (allow sysadm_su_t sysfs_t (dir (getattr open search)))
                (allow sysadm_su_t proc_t (dir (getattr open search)))
                (allow sysadm_su_t proc_t (file (ioctl read getattr lock open)))
                (allow sysadm_su_t proc_t (dir (getattr open search)))
                (allow sysadm_su_t proc_t (lnk_file (read getattr)))
                (allow sysadm_su_t proc_t (dir (getattr open search)))
                (allow sysadm_su_t proc_t (dir (ioctl read getattr lock open search)))
                (booleanif (use_samba_home_dirs)
                    (true
                        (allow sysadm_su_t cifs_t (dir (getattr open search)))
                    )
                )
                (booleanif (use_nfs_home_dirs)
                    (true
                        (allow sysadm_su_t nfs_t (dir (getattr open search)))
                    )
                )
                (booleanif (allow_polyinstantiation)
                    (true
                        (allow sysadm_su_t fs_t (filesystem (unmount)))
                        (allow sysadm_su_t fs_t (filesystem (mount)))
                    )
                )
                (booleanif (su_allow_user_exec_domains)
                    (true
                        (allow sysadm_application_exec_domain sysadm_su_t (process (sigchld)))
                        (allow sysadm_application_exec_domain sysadm_su_t (fifo_file (ioctl read write getattr lock append)))
                        (allow sysadm_application_exec_domain sysadm_su_t (fd (use)))
                        (allow sysadm_application_exec_domain sysadm_su_t (process (getattr)))
                        (allow sysadm_application_exec_domain sysadm_su_t (lnk_file (read getattr)))
                        (allow sysadm_application_exec_domain sysadm_su_t (file (ioctl read getattr lock open)))
                        (allow sysadm_application_exec_domain sysadm_su_t (dir (ioctl read getattr lock open search)))
                        (allow sysadm_su_t sysadm_application_exec_domain (process (sigchld)))
                        (allow sysadm_su_t sysadm_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                        (allow sysadm_su_t sysadm_application_exec_domain (fd (use)))
                        (typetransition sysadm_application_exec_domain su_exec_t process sysadm_su_t)
                        (dontaudit sysadm_application_exec_domain sysadm_su_t (process (noatsecure siginh rlimitinh)))
                        (allow sysadm_application_exec_domain sysadm_su_t (process (transition)))
                        (allow sysadm_application_exec_domain su_exec_t (file (ioctl read getattr map execute open)))
                        (allow sysadm_su_t sysadm_application_exec_domain (key (search)))
                        (allow sysadm_application_exec_domain sysadm_su_t (process (signal)))
                    )
                    (false
                        (allow sysadm_t sysadm_su_t (process (sigchld)))
                        (allow sysadm_t sysadm_su_t (fifo_file (ioctl read write getattr lock append)))
                        (allow sysadm_t sysadm_su_t (fd (use)))
                        (allow sysadm_t sysadm_su_t (process (getattr)))
                        (allow sysadm_t sysadm_su_t (lnk_file (read getattr)))
                        (allow sysadm_t sysadm_su_t (file (ioctl read getattr lock open)))
                        (allow sysadm_t sysadm_su_t (dir (ioctl read getattr lock open search)))
                        (allow sysadm_su_t sysadm_t (process (sigchld)))
                        (allow sysadm_su_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                        (allow sysadm_su_t sysadm_t (fd (use)))
                        (typetransition sysadm_t su_exec_t process sysadm_su_t)
                        (dontaudit sysadm_t sysadm_su_t (process (noatsecure siginh rlimitinh)))
                        (allow sysadm_t sysadm_su_t (process (transition)))
                        (allow sysadm_t su_exec_t (file (ioctl read getattr map execute open)))
                        (allow sysadm_su_t sysadm_t (key (search)))
                        (allow sysadm_t sysadm_su_t (process (signal)))
                    )
                )
                (optional sysadm_optional_519
                    (typeattributeset cil_gen_require init_t)
                    (allow sysadm_su_t init_t (process (sigchld)))
                    (allow sysadm_su_t init_t (process (signull)))
                    (optional sysadm_optional_520
                        (typeattributeset cil_gen_require rpm_t)
                        (allow sysadm_su_t rpm_t (fd (use)))
                        (allow sysadm_su_t rpm_t (fifo_file (ioctl read getattr lock open)))
                    )
                    (optional sysadm_optional_521
                        (typeattributeset cil_gen_require security_t)
                        (typeattributeset cil_gen_require sysfs_t)
                        (dontaudit sysadm_su_t security_t (filesystem (getattr)))
                        (dontaudit sysadm_su_t sysfs_t (filesystem (getattr)))
                        (dontaudit sysadm_su_t sysfs_t (dir (getattr open search)))
                        (dontaudit sysadm_su_t security_t (dir (getattr open search)))
                        (dontaudit sysadm_su_t security_t (file (ioctl read getattr lock open)))
                        (optional sysadm_optional_522
                            (typeattributeset cil_gen_require selinux_config_t)
                            (dontaudit sysadm_su_t selinux_config_t (dir (getattr open search)))
                            (dontaudit sysadm_su_t selinux_config_t (file (ioctl read getattr lock open)))
                            (optional sysadm_optional_523
                                (typeattributeset cil_gen_require etc_t)
                                (typeattributeset cil_gen_require krb5_keytab_t)
                                (allow sysadm_su_t etc_t (dir (getattr open search)))
                                (allow sysadm_su_t krb5_keytab_t (file (ioctl read getattr lock open)))
                            )
                            (optional sysadm_optional_524
                                (typeattributeset cil_gen_require var_run_t)
                                (typeattributeset cil_gen_require var_t)
                                (typeattributeset cil_gen_require pcscd_t)
                                (typeattributeset cil_gen_require pcscd_runtime_t)
                                (allow sysadm_su_t var_run_t (lnk_file (read getattr)))
                                (allow sysadm_su_t var_t (dir (getattr open search)))
                                (allow sysadm_su_t var_run_t (dir (getattr open search)))
                                (allow sysadm_su_t pcscd_runtime_t (dir (getattr open search)))
                                (allow sysadm_su_t pcscd_runtime_t (file (ioctl read getattr lock open)))
                                (allow sysadm_su_t var_run_t (lnk_file (read getattr)))
                                (allow sysadm_su_t var_t (dir (getattr open search)))
                                (allow sysadm_su_t var_run_t (dir (getattr open search)))
                                (allow sysadm_su_t pcscd_runtime_t (dir (getattr open search)))
                                (allow sysadm_su_t pcscd_runtime_t (sock_file (write getattr append open)))
                                (allow sysadm_su_t pcscd_t (unix_stream_socket (connectto)))
                                (allow pcscd_t sysadm_su_t (dir (ioctl read getattr lock open search)))
                                (allow pcscd_t sysadm_su_t (file (ioctl read getattr lock open)))
                            )
                            (optional sysadm_optional_525
                                (typeattributeset cil_gen_require etc_t)
                                (typeattributeset cil_gen_require etc_runtime_t)
                                (typeattributeset cil_gen_require var_run_t)
                                (typeattributeset cil_gen_require var_t)
                                (typeattributeset cil_gen_require var_lib_t)
                                (typeattributeset cil_gen_require system_dbusd_t)
                                (typeattributeset cil_gen_require session_dbusd_tmp_t)
                                (typeattributeset cil_gen_require dbusd_system_bus_client)
                                (typeattributeset cil_gen_require system_dbusd_runtime_t)
                                (typeattributeset cil_gen_require system_dbusd_var_lib_t)
                                (typeattributeset cil_gen_require dbusd_etc_t)
                                (typeattributeset cil_gen_require systemd_machined_t)
                                (typeattributeset cil_gen_require systemd_logind_t)
                                (typeattributeset cil_gen_require dbusd_system_bus_client)
                                (typeattributeset dbusd_system_bus_client (sysadm_su_t ))
                                (allow sysadm_su_t system_dbusd_t (dbus (send_msg)))
                                (allow sysadm_su_t self (dbus (send_msg)))
                                (allow system_dbusd_t sysadm_su_t (dbus (send_msg)))
                                (allow sysadm_su_t var_t (dir (getattr open search)))
                                (allow sysadm_su_t var_lib_t (dir (getattr open search)))
                                (allow sysadm_su_t system_dbusd_var_lib_t (dir (getattr open search)))
                                (allow sysadm_su_t system_dbusd_var_lib_t (file (ioctl read getattr lock open)))
                                (allow sysadm_su_t system_dbusd_var_lib_t (dir (getattr open search)))
                                (allow sysadm_su_t system_dbusd_var_lib_t (lnk_file (read getattr)))
                                (allow sysadm_su_t session_dbusd_tmp_t (dir (getattr open search)))
                                (allow sysadm_su_t session_dbusd_tmp_t (sock_file (read write getattr append open)))
                                (allow sysadm_su_t var_run_t (lnk_file (read getattr)))
                                (allow sysadm_su_t var_t (dir (getattr open search)))
                                (allow sysadm_su_t var_run_t (dir (getattr open search)))
                                (allow sysadm_su_t system_dbusd_runtime_t (dir (getattr open search)))
                                (allow sysadm_su_t system_dbusd_runtime_t (sock_file (write getattr append open)))
                                (allow sysadm_su_t system_dbusd_t (unix_stream_socket (connectto)))
                                (allow sysadm_su_t dbusd_etc_t (dir (ioctl read getattr lock open search)))
                                (allow sysadm_su_t dbusd_etc_t (file (ioctl read getattr lock open)))
                                (allow sysadm_su_t system_dbusd_runtime_t (dir (ioctl read getattr lock open search)))
                                (allow sysadm_su_t system_dbusd_runtime_t (sock_file (read)))
                                (allow sysadm_su_t system_dbusd_var_lib_t (dir (getattr open search)))
                                (allow sysadm_su_t system_dbusd_var_lib_t (lnk_file (read getattr)))
                                (allow sysadm_su_t systemd_machined_t (unix_stream_socket (connectto)))
                                (allow sysadm_su_t systemd_logind_t (dbus (send_msg)))
                                (allow systemd_logind_t sysadm_su_t (dbus (send_msg)))
                                (allow systemd_logind_t sysadm_su_t (dir (ioctl read getattr lock open search)))
                                (allow systemd_logind_t sysadm_su_t (file (ioctl read getattr lock open)))
                                (allow sysadm_su_t etc_t (dir (ioctl read getattr lock open search)))
                                (allow sysadm_su_t etc_t (dir (getattr open search)))
                                (allow sysadm_su_t etc_runtime_t (file (ioctl read getattr lock open)))
                                (allow sysadm_su_t etc_t (dir (getattr open search)))
                                (allow sysadm_su_t etc_runtime_t (lnk_file (read getattr)))
                            )
                            (optional sysadm_optional_526
                                (typeattributeset cil_gen_require crond_t)
                                (allow sysadm_su_t crond_t (fifo_file (ioctl read getattr lock open)))
                            )
                            (optional sysadm_optional_527
                                (typeattributeset cil_gen_require security_t)
                                (typeattributeset cil_gen_require selinux_config_t)
                                (typeattributeset cil_gen_require etc_t)
                                (typeattributeset cil_gen_require user_home_dir_t)
                                (typeattributeset cil_gen_require home_root_t)
                                (typeattributeset cil_gen_require krb5kdc_conf_t)
                                (typeattributeset cil_gen_require krb5_host_rcache_t)
                                (typeattributeset cil_gen_require krb5_conf_t)
                                (typeattributeset cil_gen_require krb5_home_t)
                                (typeattributeset cil_gen_require default_context_t)
                                (typeattributeset cil_gen_require file_context_t)
                                (typeattributeset cil_gen_require netlabel_peer_t)
                                (typeattributeset cil_gen_require netif_t)
                                (typeattributeset cil_gen_require node_t)
                                (typeattributeset cil_gen_require kerberos_client_packet_t)
                                (typeattributeset cil_gen_require kerberos_port_t)
                                (typeattributeset cil_gen_require ocsp_client_packet_t)
                                (typeattributeset cil_gen_require ocsp_port_t)
                                (allow sysadm_su_t etc_t (dir (getattr open search)))
                                (allow sysadm_su_t krb5_conf_t (file (ioctl read getattr lock open)))
                                (allow sysadm_su_t user_home_dir_t (dir (getattr open search)))
                                (allow sysadm_su_t home_root_t (dir (getattr open search)))
                                (allow sysadm_su_t home_root_t (lnk_file (read getattr)))
                                (allow sysadm_su_t krb5_home_t (file (ioctl read getattr lock open)))
                                (dontaudit sysadm_su_t krb5_conf_t (file (ioctl write getattr lock append open)))
                                (dontaudit sysadm_su_t krb5kdc_conf_t (dir (ioctl read getattr lock open search)))
                                (dontaudit sysadm_su_t krb5kdc_conf_t (file (ioctl read write getattr lock append open)))
                                (dontaudit sysadm_su_t self (process (setfscreate)))
                                (dontaudit sysadm_su_t security_t (dir (ioctl read getattr lock open search)))
                                (dontaudit sysadm_su_t security_t (file (ioctl read write getattr map open)))
                                (dontaudit sysadm_su_t security_t (security (check_context)))
                                (dontaudit sysadm_su_t selinux_config_t (dir (getattr open search)))
                                (dontaudit sysadm_su_t default_context_t (dir (getattr open search)))
                                (dontaudit sysadm_su_t file_context_t (dir (getattr open search)))
                                (dontaudit sysadm_su_t file_context_t (file (ioctl read getattr lock open)))
                                (dontaudit sysadm_su_t file_context_t (file (map)))
                                (booleanif (allow_kerberos)
                                    (true
                                        (allow sysadm_su_t krb5_host_rcache_t (file (getattr)))
                                        (allow sysadm_su_t ocsp_port_t (tcp_socket (name_connect)))
                                        (allow sysadm_su_t ocsp_client_packet_t (packet (recv)))
                                        (allow sysadm_su_t ocsp_client_packet_t (packet (send)))
                                        (allow sysadm_su_t kerberos_port_t (tcp_socket (name_connect)))
                                        (allow sysadm_su_t kerberos_client_packet_t (packet (recv)))
                                        (allow sysadm_su_t kerberos_client_packet_t (packet (send)))
                                        (allow sysadm_su_t node_t (node (recvfrom)))
                                        (allow sysadm_su_t node_t (node (sendto)))
                                        (allow sysadm_su_t node_t (node (recvfrom sendto)))
                                        (allow sysadm_su_t netif_t (netif (ingress)))
                                        (allow sysadm_su_t netif_t (netif (egress)))
                                        (allow sysadm_su_t netif_t (netif (ingress egress)))
                                        (allow sysadm_su_t netlabel_peer_t (tcp_socket (recvfrom)))
                                        (allow sysadm_su_t netlabel_peer_t (udp_socket (recvfrom)))
                                        (allow sysadm_su_t netlabel_peer_t (rawip_socket (recvfrom)))
                                        (allow sysadm_su_t netlabel_peer_t (peer (recv)))
                                        (allow sysadm_su_t self (udp_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
                                        (allow sysadm_su_t self (tcp_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
                                    )
                                )
                                (optional sysadm_optional_528
                                    (typeattributeset cil_gen_require var_run_t)
                                    (typeattributeset cil_gen_require var_t)
                                    (typeattributeset cil_gen_require pcscd_t)
                                    (typeattributeset cil_gen_require pcscd_runtime_t)
                                    (booleanif (allow_kerberos)
                                        (true
                                            (allow pcscd_t sysadm_su_t (file (ioctl read getattr lock open)))
                                            (allow pcscd_t sysadm_su_t (dir (ioctl read getattr lock open search)))
                                            (allow sysadm_su_t pcscd_t (unix_stream_socket (connectto)))
                                            (allow sysadm_su_t pcscd_runtime_t (sock_file (write getattr append open)))
                                            (allow sysadm_su_t pcscd_runtime_t (dir (getattr open search)))
                                            (allow sysadm_su_t var_run_t (dir (getattr open search)))
                                            (allow sysadm_su_t var_t (dir (getattr open search)))
                                            (allow sysadm_su_t var_run_t (lnk_file (read getattr)))
                                        )
                                    )
                                )
                                (optional sysadm_optional_529
                                    (typeattributeset cil_gen_require var_t)
                                    (typeattributeset cil_gen_require var_lib_t)
                                    (typeattributeset cil_gen_require sssd_public_t)
                                    (typeattributeset cil_gen_require sssd_var_lib_t)
                                    (allow sysadm_su_t sssd_var_lib_t (dir (getattr open search)))
                                    (allow sysadm_su_t var_t (dir (getattr open search)))
                                    (allow sysadm_su_t var_lib_t (dir (getattr open search)))
                                    (allow sysadm_su_t sssd_public_t (dir (ioctl read getattr lock open search)))
                                    (allow sysadm_su_t sssd_public_t (dir (getattr open search)))
                                    (allow sysadm_su_t sssd_public_t (file (ioctl read getattr lock open)))
                                )
                            )
                            (optional sysadm_optional_530
                                (typeattributeset cil_gen_require var_t)
                                (typeattributeset cil_gen_require crack_db_t)
                                (allow sysadm_su_t var_t (dir (getattr open search)))
                                (allow sysadm_su_t crack_db_t (dir (getattr open search)))
                                (allow sysadm_su_t crack_db_t (file (ioctl read getattr lock open)))
                                (allow sysadm_su_t crack_db_t (dir (getattr open search)))
                                (allow sysadm_su_t crack_db_t (lnk_file (read getattr)))
                            )
                            (optional sysadm_optional_531
                                (typeattributeset cil_gen_require user_home_dir_t)
                                (typeattributeset cil_gen_require home_root_t)
                                (typeattributeset cil_gen_require xauth_home_t)
                                (typeattributeset cil_gen_require xauth_t)
                                (typeattributeset cil_gen_require xauth_exec_t)
                                (allow sysadm_su_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                                (typetransition sysadm_su_t user_home_dir_t file xauth_home_t)
                                (allow sysadm_su_t home_root_t (dir (getattr open search)))
                                (allow sysadm_su_t home_root_t (lnk_file (read getattr)))
                                (allow sysadm_su_t xauth_exec_t (file (ioctl read getattr map execute open)))
                                (allow sysadm_su_t xauth_t (process (transition)))
                                (dontaudit sysadm_su_t xauth_t (process (noatsecure siginh rlimitinh)))
                                (typetransition sysadm_su_t xauth_exec_t process xauth_t)
                                (allow xauth_t sysadm_su_t (fd (use)))
                                (allow xauth_t sysadm_su_t (fifo_file (ioctl read write getattr lock append)))
                                (allow xauth_t sysadm_su_t (process (sigchld)))
                            )
                        )
                    )
                )
            )
            (optional sysadm_optional_532
                (type sysadm_sudo_t)
                (roletype object_r sysadm_sudo_t)
                (typeattributeset cil_gen_require userdomain)
                (typeattributeset userdomain (sysadm_t ))
                (typeattributeset cil_gen_require user_devpts_t)
                (typeattributeset cil_gen_require user_tty_device_t)
                (typeattributeset cil_gen_require domain)
                (typeattributeset domain (sysadm_t ))
                (typeattributeset cil_gen_require init_t)
                (typeattributeset cil_gen_require security_t)
                (typeattributeset cil_gen_require sysfs_t)
                (typeattributeset cil_gen_require selinux_config_t)
                (typeattributeset cil_gen_require shell_exec_t)
                (typeattributeset cil_gen_require entry_type)
                (typeattributeset entry_type (shell_exec_t bin_t ))
                (typeattributeset cil_gen_require exec_type)
                (typeattributeset exec_type (shell_exec_t bin_t ))
                (typeattributeset cil_gen_require file_type)
                (typeattributeset file_type (shell_exec_t bin_t ))
                (typeattributeset cil_gen_require non_security_file_type)
                (typeattributeset non_security_file_type (shell_exec_t bin_t ))
                (typeattributeset cil_gen_require non_auth_file_type)
                (typeattributeset non_auth_file_type (shell_exec_t bin_t ))
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require ubac_constrained_type)
                (typeattributeset ubac_constrained_type (sysadm_t ))
                (typeattributeset cil_gen_require ptynode)
                (typeattributeset ptynode (user_devpts_t ))
                (typeattributeset cil_gen_require devpts_t)
                (typeattributeset cil_gen_require device_node)
                (typeattributeset device_node (user_devpts_t user_tty_device_t ))
                (typeattributeset cil_gen_require ttynode)
                (typeattributeset ttynode (user_tty_device_t ))
                (typeattributeset cil_gen_require console_device_t)
                (typeattributeset cil_gen_require tty_device_t)
                (typeattributeset cil_gen_require bsdpty_device_t)
                (typeattributeset cil_gen_require ptmx_t)
                (typeattributeset cil_gen_require device_t)
                (typeattributeset cil_gen_require proc_t)
                (typeattributeset cil_gen_require sysctl_t)
                (typeattributeset cil_gen_require sysctl_kernel_t)
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require locale_t)
                (typeattributeset cil_gen_require cert_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require syslogd_t)
                (typeattributeset cil_gen_require syslogd_runtime_t)
                (typeattributeset cil_gen_require devlog_t)
                (typeattributeset cil_gen_require init_runtime_t)
                (typeattributeset cil_gen_require user_home_t)
                (typeattributeset cil_gen_require user_home_dir_t)
                (typeattributeset cil_gen_require home_root_t)
                (typeattributeset cil_gen_require nfs_t)
                (typeattributeset cil_gen_require cifs_t)
                (typeattributeset cil_gen_require user_tmp_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require user_runtime_t)
                (typeattributeset cil_gen_require user_runtime_root_t)
                (typeattributeset cil_gen_require urandom_device_t)
                (typeattributeset cil_gen_require privfd)
                (typeattributeset cil_gen_require autofs_t)
                (typeattributeset cil_gen_require application_exec_type)
                (typeattributeset cil_gen_require initrc_runtime_t)
                (typeattributeset cil_gen_require default_context_t)
                (typeattributeset cil_gen_require kernel_t)
                (typeattributeset cil_gen_require random_device_t)
                (typeattributeset cil_gen_require nsswitch_domain)
                (typeattributeset nsswitch_domain (sysadm_t ))
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require usb_device_t)
                (typeattributeset cil_gen_require fs_t)
                (typeattributeset cil_gen_require shadow_t)
                (typeattributeset cil_gen_require application_domain_type)
                (typeattributeset cil_gen_require chkpwd_t)
                (typeattributeset cil_gen_require chkpwd_exec_t)
                (typeattributeset cil_gen_require auth_cache_t)
                (typeattributeset cil_gen_require faillog_t)
                (typeattributeset cil_gen_require sudo_exec_t)
                (typeattributeset cil_gen_require sudo_log_t)
                (typeattributeset cil_gen_require sudodomain)
                (typeattributeset cil_gen_require can_change_process_role)
                (typeattributeset cil_gen_require pam_runtime_t)
                (typeattributeset cil_gen_require can_read_shadow_passwords)
                (typeattributeset cil_gen_require pam_domain)
                (roleattributeset cil_gen_require sysadm_r)
                (roletype sysadm_r chkpwd_t)
                (roletype sysadm_r sysadm_sudo_t)
                (typeattributeset cil_gen_require non_auth_file_type)
                (typeattributeset non_auth_file_type (sudo_exec_t ))
                (typeattributeset cil_gen_require file_type)
                (typeattributeset file_type (sudo_exec_t ))
                (typeattributeset cil_gen_require domain)
                (typeattributeset domain (sysadm_sudo_t ))
                (typeattributeset cil_gen_require pam_domain)
                (typeattributeset pam_domain (sysadm_sudo_t ))
                (typeattributeset cil_gen_require application_domain_type)
                (typeattributeset application_domain_type (sysadm_sudo_t ))
                (typeattributeset cil_gen_require sudodomain)
                (typeattributeset sudodomain (sysadm_sudo_t ))
                (typeattributeset cil_gen_require can_read_shadow_passwords)
                (typeattributeset can_read_shadow_passwords (sysadm_sudo_t ))
                (typeattributeset cil_gen_require can_change_process_role)
                (typeattributeset can_change_process_role (sysadm_sudo_t ))
                (typeattributeset cil_gen_require nsswitch_domain)
                (typeattributeset nsswitch_domain (sysadm_sudo_t ))
                (typeattributeset cil_gen_require entry_type)
                (typeattributeset entry_type (sudo_exec_t ))
                (typeattributeset cil_gen_require ubac_constrained_type)
                (typeattributeset ubac_constrained_type (sysadm_sudo_t ))
                (typeattributeset cil_gen_require exec_type)
                (typeattributeset exec_type (sudo_exec_t ))
                (typeattributeset cil_gen_require privfd)
                (typeattributeset privfd (sysadm_sudo_t ))
                (typeattributeset cil_gen_require application_exec_type)
                (typeattributeset application_exec_type (sudo_exec_t ))
                (typeattributeset cil_gen_require non_security_file_type)
                (typeattributeset non_security_file_type (sudo_exec_t ))
                (allow sysadm_sudo_t sudo_exec_t (file (entrypoint)))
                (allow sysadm_sudo_t sudo_exec_t (file (ioctl read getattr lock map execute open)))
                (allow sysadm_sudo_t self (capability (chown dac_override fowner kill setgid setuid sys_nice sys_resource)))
                (allow sysadm_sudo_t self (process (transition sigchld sigkill sigstop signull signal getsched setsched getsession getpgid setpgid getcap setcap share getattr noatsecure siginh rlimitinh dyntransition setkeycreate setsockcreate getrlimit)))
                (allow sysadm_sudo_t self (process (setexec setrlimit)))
                (allow sysadm_sudo_t self (fd (use)))
                (allow sysadm_sudo_t self (fifo_file (ioctl read write getattr lock append open)))
                (allow sysadm_sudo_t self (shm (create destroy getattr setattr read write associate unix_read unix_write lock)))
                (allow sysadm_sudo_t self (sem (create destroy getattr setattr read write associate unix_read unix_write)))
                (allow sysadm_sudo_t self (msgq (create destroy getattr setattr read write associate unix_read unix_write enqueue)))
                (allow sysadm_sudo_t self (msg (send receive)))
                (allow sysadm_sudo_t self (netlink_selinux_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
                (allow sysadm_sudo_t self (unix_dgram_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
                (allow sysadm_sudo_t self (unix_stream_socket (ioctl read write create getattr setattr append bind connect listen accept getopt setopt shutdown)))
                (allow sysadm_sudo_t self (unix_dgram_socket (sendto)))
                (allow sysadm_sudo_t self (unix_stream_socket (connectto)))
                (allow sysadm_sudo_t self (key (view read write search link setattr create)))
                (dontaudit sysadm_sudo_t self (capability (dac_read_search sys_ptrace)))
                (allow sysadm_sudo_t sudo_log_t (dir (ioctl write getattr lock open add_name search)))
                (allow sysadm_sudo_t sudo_log_t (file (ioctl create getattr lock append open)))
                (allow sysadm_sudo_t var_t (dir (getattr open search)))
                (allow sysadm_sudo_t var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (typetransition sysadm_sudo_t var_log_t file sudo_log_t)
                (allow sysadm_sudo_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_sudo_t sysadm_t (process (getpgid)))
                (allow sysadm_sudo_t sysadm_t (unix_stream_socket (ioctl read write getattr setattr append bind connect getopt setopt shutdown)))
                (allow sysadm_sudo_t sysadm_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_sudo_t sysadm_t (file (ioctl read getattr lock open)))
                (allow sysadm_sudo_t sysadm_t (lnk_file (read getattr)))
                (allow sysadm_sudo_t sysadm_t (process (getattr)))
                (dontaudit sysadm_sudo_t sysadm_application_exec_domain (tcp_socket (read write)))
                (dontaudit sysadm_sudo_t sysadm_application_exec_domain (udp_socket (read write)))
                (dontaudit sysadm_sudo_t sysadm_application_exec_domain (rawip_socket (read write)))
                (dontaudit sysadm_sudo_t sysadm_application_exec_domain (netlink_socket (read write)))
                (dontaudit sysadm_sudo_t sysadm_application_exec_domain (packet_socket (read write)))
                (dontaudit sysadm_sudo_t sysadm_application_exec_domain (unix_stream_socket (read write)))
                (dontaudit sysadm_sudo_t sysadm_application_exec_domain (unix_dgram_socket (read write)))
                (dontaudit sysadm_sudo_t sysadm_application_exec_domain (netlink_route_socket (read write)))
                (dontaudit sysadm_sudo_t sysadm_application_exec_domain (netlink_tcpdiag_socket (read write)))
                (dontaudit sysadm_sudo_t sysadm_application_exec_domain (netlink_nflog_socket (read write)))
                (dontaudit sysadm_sudo_t sysadm_application_exec_domain (netlink_xfrm_socket (read write)))
                (dontaudit sysadm_sudo_t sysadm_application_exec_domain (netlink_selinux_socket (read write)))
                (dontaudit sysadm_sudo_t sysadm_application_exec_domain (netlink_audit_socket (read write)))
                (dontaudit sysadm_sudo_t sysadm_application_exec_domain (netlink_dnrt_socket (read write)))
                (dontaudit sysadm_sudo_t sysadm_application_exec_domain (netlink_kobject_uevent_socket (read write)))
                (dontaudit sysadm_sudo_t sysadm_application_exec_domain (appletalk_socket (read write)))
                (dontaudit sysadm_sudo_t sysadm_application_exec_domain (tun_socket (read write)))
                (dontaudit sysadm_sudo_t sysadm_application_exec_domain (netlink_iscsi_socket (read write)))
                (dontaudit sysadm_sudo_t sysadm_application_exec_domain (netlink_fib_lookup_socket (read write)))
                (dontaudit sysadm_sudo_t sysadm_application_exec_domain (netlink_connector_socket (read write)))
                (dontaudit sysadm_sudo_t sysadm_application_exec_domain (netlink_netfilter_socket (read write)))
                (dontaudit sysadm_sudo_t sysadm_application_exec_domain (netlink_generic_socket (read write)))
                (dontaudit sysadm_sudo_t sysadm_application_exec_domain (netlink_scsitransport_socket (read write)))
                (dontaudit sysadm_sudo_t sysadm_application_exec_domain (netlink_rdma_socket (read write)))
                (dontaudit sysadm_sudo_t sysadm_application_exec_domain (netlink_crypto_socket (read write)))
                (dontaudit sysadm_sudo_t sysadm_application_exec_domain (sctp_socket (read write)))
                (dontaudit sysadm_sudo_t sysadm_application_exec_domain (icmp_socket (read write)))
                (dontaudit sysadm_sudo_t sysadm_application_exec_domain (ax25_socket (read write)))
                (dontaudit sysadm_sudo_t sysadm_application_exec_domain (ipx_socket (read write)))
                (dontaudit sysadm_sudo_t sysadm_application_exec_domain (netrom_socket (read write)))
                (dontaudit sysadm_sudo_t sysadm_application_exec_domain (atmpvc_socket (read write)))
                (dontaudit sysadm_sudo_t sysadm_application_exec_domain (x25_socket (read write)))
                (dontaudit sysadm_sudo_t sysadm_application_exec_domain (rose_socket (read write)))
                (dontaudit sysadm_sudo_t sysadm_application_exec_domain (decnet_socket (read write)))
                (dontaudit sysadm_sudo_t sysadm_application_exec_domain (atmsvc_socket (read write)))
                (dontaudit sysadm_sudo_t sysadm_application_exec_domain (rds_socket (read write)))
                (dontaudit sysadm_sudo_t sysadm_application_exec_domain (irda_socket (read write)))
                (dontaudit sysadm_sudo_t sysadm_application_exec_domain (pppox_socket (read write)))
                (dontaudit sysadm_sudo_t sysadm_application_exec_domain (llc_socket (read write)))
                (dontaudit sysadm_sudo_t sysadm_application_exec_domain (can_socket (read write)))
                (dontaudit sysadm_sudo_t sysadm_application_exec_domain (tipc_socket (read write)))
                (dontaudit sysadm_sudo_t sysadm_application_exec_domain (bluetooth_socket (read write)))
                (dontaudit sysadm_sudo_t sysadm_application_exec_domain (iucv_socket (read write)))
                (dontaudit sysadm_sudo_t sysadm_application_exec_domain (rxrpc_socket (read write)))
                (dontaudit sysadm_sudo_t sysadm_application_exec_domain (isdn_socket (read write)))
                (dontaudit sysadm_sudo_t sysadm_application_exec_domain (phonet_socket (read write)))
                (dontaudit sysadm_sudo_t sysadm_application_exec_domain (ieee802154_socket (read write)))
                (dontaudit sysadm_sudo_t sysadm_application_exec_domain (caif_socket (read write)))
                (dontaudit sysadm_sudo_t sysadm_application_exec_domain (alg_socket (read write)))
                (dontaudit sysadm_sudo_t sysadm_application_exec_domain (nfc_socket (read write)))
                (dontaudit sysadm_sudo_t sysadm_application_exec_domain (vsock_socket (read write)))
                (dontaudit sysadm_sudo_t sysadm_application_exec_domain (kcm_socket (read write)))
                (dontaudit sysadm_sudo_t sysadm_application_exec_domain (qipcrtr_socket (read write)))
                (dontaudit sysadm_sudo_t sysadm_application_exec_domain (smc_socket (read write)))
                (dontaudit sysadm_sudo_t sysadm_application_exec_domain (xdp_socket (read write)))
                (allow sysadm_sudo_t bin_t (dir (getattr open search)))
                (allow sysadm_sudo_t bin_t (lnk_file (read getattr)))
                (allow sysadm_sudo_t usr_t (dir (getattr open search)))
                (allow sysadm_sudo_t bin_t (dir (getattr open search)))
                (allow sysadm_sudo_t bin_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_sudo_t shell_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_sudo_t sysadm_t (process (transition)))
                (dontaudit sysadm_sudo_t sysadm_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_sudo_t shell_exec_t process sysadm_t)
                (allow sysadm_sudo_t bin_t (dir (getattr open search)))
                (allow sysadm_sudo_t bin_t (lnk_file (read getattr)))
                (allow sysadm_sudo_t usr_t (dir (getattr open search)))
                (allow sysadm_sudo_t bin_t (file (ioctl read getattr map execute open)))
                (allow sysadm_sudo_t sysadm_t (process (transition)))
                (dontaudit sysadm_sudo_t sysadm_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_sudo_t bin_t process sysadm_t)
                (allow sysadm_sudo_t proc_t (dir (getattr open search)))
                (allow sysadm_sudo_t sysctl_t (dir (getattr open search)))
                (allow sysadm_sudo_t sysctl_kernel_t (dir (getattr open search)))
                (allow sysadm_sudo_t sysctl_kernel_t (file (ioctl read getattr lock open)))
                (allow sysadm_sudo_t proc_t (dir (getattr open search)))
                (allow sysadm_sudo_t sysctl_t (dir (getattr open search)))
                (allow sysadm_sudo_t sysctl_kernel_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_sudo_t proc_t (dir (getattr open search)))
                (allow sysadm_sudo_t proc_t (file (ioctl read getattr lock open)))
                (allow sysadm_sudo_t proc_t (dir (getattr open search)))
                (allow sysadm_sudo_t proc_t (lnk_file (read getattr)))
                (allow sysadm_sudo_t proc_t (dir (getattr open search)))
                (allow sysadm_sudo_t proc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_sudo_t kernel_t (key (link)))
                (dontaudit sysadm_sudo_t proc_t (filesystem (getattr)))
                (allow sysadm_sudo_t bin_t (dir (getattr open search)))
                (allow sysadm_sudo_t bin_t (lnk_file (read getattr)))
                (allow sysadm_sudo_t usr_t (dir (getattr open search)))
                (allow sysadm_sudo_t bin_t (dir (getattr open search)))
                (allow sysadm_sudo_t bin_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_sudo_t exec_type (file (ioctl read getattr lock map execute open execute_no_trans)))
                (allow sysadm_sudo_t bin_t (dir (getattr open search)))
                (allow sysadm_sudo_t exec_type (lnk_file (read getattr)))
                (allow sysadm_sudo_t device_t (filesystem (getattr)))
                (allow sysadm_sudo_t device_t (dir (getattr open search)))
                (allow sysadm_sudo_t urandom_device_t (chr_file (ioctl read getattr lock open)))
                (allow sysadm_sudo_t device_t (dir (getattr open search)))
                (allow sysadm_sudo_t usb_device_t (chr_file (ioctl read write getattr lock append open)))
                (allow sysadm_sudo_t sysfs_t (dir (getattr open search)))
                (allow sysadm_sudo_t sysfs_t (file (ioctl read getattr lock open)))
                (allow sysadm_sudo_t sysfs_t (dir (getattr open search)))
                (allow sysadm_sudo_t sysfs_t (lnk_file (read getattr)))
                (allow sysadm_sudo_t sysfs_t (dir (getattr open search)))
                (allow sysadm_sudo_t sysfs_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_sudo_t privfd (fd (use)))
                (allow sysadm_sudo_t privfd (process (sigchld)))
                (allow sysadm_sudo_t entry_type (lnk_file (read getattr)))
                (allow sysadm_sudo_t entry_type (file (getattr)))
                (allow sysadm_sudo_t etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_sudo_t etc_t (dir (getattr open search)))
                (allow sysadm_sudo_t etc_t (file (ioctl read getattr lock open)))
                (allow sysadm_sudo_t etc_t (dir (getattr open search)))
                (allow sysadm_sudo_t etc_t (lnk_file (read getattr)))
                (allow sysadm_sudo_t var_t (dir (getattr open search)))
                (allow sysadm_sudo_t var_t (file (ioctl read getattr lock open)))
                (allow sysadm_sudo_t usr_t (dir (getattr open search)))
                (allow sysadm_sudo_t usr_t (lnk_file (read getattr)))
                (allow sysadm_sudo_t usr_t (dir (getattr open search)))
                (allow sysadm_sudo_t usr_t (file (getattr)))
                (dontaudit sysadm_sudo_t home_root_t (dir (getattr open search)))
                (dontaudit sysadm_sudo_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_sudo_t tmp_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_sudo_t autofs_t (dir (getattr open search)))
                (allow sysadm_sudo_t fs_t (filesystem (getattr)))
                (allow sysadm_sudo_t sysfs_t (dir (getattr open search)))
                (allow sysadm_sudo_t sysfs_t (dir (getattr open search)))
                (allow sysadm_sudo_t security_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_sudo_t security_t (file (ioctl read write getattr map open)))
                (allow sysadm_sudo_t security_t (security (check_context)))
                (allow sysadm_sudo_t sysfs_t (dir (getattr open search)))
                (allow sysadm_sudo_t sysfs_t (dir (getattr open search)))
                (allow sysadm_sudo_t security_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_sudo_t security_t (file (ioctl read write getattr map open)))
                (allow sysadm_sudo_t security_t (security (compute_relabel)))
                (allow sysadm_sudo_t devpts_t (filesystem (getattr)))
                (dontaudit sysadm_sudo_t tty_device_t (chr_file (getattr)))
                (allow sysadm_sudo_t device_t (dir (getattr open search)))
                (allow sysadm_sudo_t device_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_sudo_t device_t (dir (getattr open search)))
                (allow sysadm_sudo_t device_t (lnk_file (read getattr)))
                (allow sysadm_sudo_t ttynode (chr_file (getattr relabelfrom relabelto)))
                (allow sysadm_sudo_t device_t (dir (getattr open search)))
                (allow sysadm_sudo_t device_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_sudo_t device_t (dir (getattr open search)))
                (allow sysadm_sudo_t device_t (lnk_file (read getattr)))
                (allow sysadm_sudo_t devpts_t (dir (getattr open search)))
                (allow sysadm_sudo_t ptynode (chr_file (getattr relabelfrom relabelto)))
                (allow sysadm_sudo_t auth_cache_t (dir (getattr open search)))
                (allow sysadm_sudo_t bin_t (dir (getattr open search)))
                (allow sysadm_sudo_t bin_t (lnk_file (read getattr)))
                (allow sysadm_sudo_t usr_t (dir (getattr open search)))
                (allow sysadm_sudo_t chkpwd_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_sudo_t chkpwd_t (process (transition)))
                (dontaudit sysadm_sudo_t chkpwd_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_sudo_t chkpwd_exec_t process chkpwd_t)
                (allow chkpwd_t sysadm_sudo_t (fd (use)))
                (allow chkpwd_t sysadm_sudo_t (fifo_file (ioctl read write getattr lock append)))
                (allow chkpwd_t sysadm_sudo_t (process (sigchld)))
                (dontaudit sysadm_sudo_t shadow_t (file (ioctl read getattr lock open)))
                (allow sysadm_sudo_t device_t (dir (getattr open search)))
                (allow sysadm_sudo_t random_device_t (chr_file (ioctl read getattr lock open)))
                (allow sysadm_sudo_t device_t (dir (getattr open search)))
                (allow sysadm_sudo_t urandom_device_t (chr_file (ioctl read getattr lock open)))
                (allow sysadm_sudo_t var_t (dir (getattr open search)))
                (allow sysadm_sudo_t var_log_t (dir (getattr open search)))
                (allow sysadm_sudo_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_sudo_t faillog_t (file (ioctl read write getattr lock append open)))
                (allow sysadm_sudo_t self (capability (audit_write)))
                (allow sysadm_sudo_t self (netlink_audit_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown nlmsg_read nlmsg_relay)))
                (allow sysadm_sudo_t cert_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_sudo_t cert_t (dir (getattr open search)))
                (allow sysadm_sudo_t cert_t (file (ioctl read getattr lock open)))
                (allow sysadm_sudo_t cert_t (dir (getattr open search)))
                (allow sysadm_sudo_t cert_t (lnk_file (read getattr)))
                (allow sysadm_sudo_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_sudo_t var_t (dir (getattr open search)))
                (allow sysadm_sudo_t var_run_t (dir (getattr open search)))
                (allow sysadm_sudo_t pam_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_sudo_t pam_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_sudo_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_sudo_t var_t (dir (getattr open search)))
                (allow sysadm_sudo_t var_run_t (dir (getattr open search)))
                (allow sysadm_sudo_t pam_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_sudo_t pam_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_sudo_t auth_cache_t (dir (getattr open search)))
                (allow sysadm_sudo_t bin_t (dir (getattr open search)))
                (allow sysadm_sudo_t bin_t (lnk_file (read getattr)))
                (allow sysadm_sudo_t usr_t (dir (getattr open search)))
                (allow sysadm_sudo_t chkpwd_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_sudo_t chkpwd_t (process (transition)))
                (dontaudit sysadm_sudo_t chkpwd_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_sudo_t chkpwd_exec_t process chkpwd_t)
                (allow chkpwd_t sysadm_sudo_t (fd (use)))
                (allow chkpwd_t sysadm_sudo_t (fifo_file (ioctl read write getattr lock append)))
                (allow chkpwd_t sysadm_sudo_t (process (sigchld)))
                (dontaudit sysadm_sudo_t shadow_t (file (ioctl read getattr lock open)))
                (allow sysadm_sudo_t device_t (dir (getattr open search)))
                (allow sysadm_sudo_t random_device_t (chr_file (ioctl read getattr lock open)))
                (allow sysadm_sudo_t device_t (dir (getattr open search)))
                (allow sysadm_sudo_t urandom_device_t (chr_file (ioctl read getattr lock open)))
                (allow sysadm_sudo_t var_t (dir (getattr open search)))
                (allow sysadm_sudo_t var_log_t (dir (getattr open search)))
                (allow sysadm_sudo_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_sudo_t faillog_t (file (ioctl read write getattr lock append open)))
                (allow sysadm_sudo_t self (capability (audit_write)))
                (allow sysadm_sudo_t self (netlink_audit_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown nlmsg_read nlmsg_relay)))
                (allow sysadm_sudo_t cert_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_sudo_t cert_t (dir (getattr open search)))
                (allow sysadm_sudo_t cert_t (file (ioctl read getattr lock open)))
                (allow sysadm_sudo_t cert_t (dir (getattr open search)))
                (allow sysadm_sudo_t cert_t (lnk_file (read getattr)))
                (allow sysadm_sudo_t security_t (filesystem (getattr)))
                (allow sysadm_sudo_t sysfs_t (filesystem (getattr)))
                (allow sysadm_sudo_t sysfs_t (dir (getattr open search)))
                (allow sysadm_sudo_t sysfs_t (dir (getattr open search)))
                (allow sysadm_sudo_t sysfs_t (dir (getattr open search)))
                (allow sysadm_sudo_t sysfs_t (dir (getattr open search)))
                (allow sysadm_sudo_t security_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_sudo_t security_t (file (ioctl read getattr map open)))
                (allow sysadm_sudo_t var_t (dir (getattr open search)))
                (allow sysadm_sudo_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_sudo_t var_run_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_sudo_t init_t (process (getpgid)))
                (allow sysadm_sudo_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_sudo_t var_t (dir (getattr open search)))
                (allow sysadm_sudo_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_sudo_t initrc_runtime_t (file (ioctl read write getattr lock append open)))
                (allow sysadm_sudo_t self (capability (audit_write)))
                (allow sysadm_sudo_t self (netlink_audit_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown nlmsg_read nlmsg_relay)))
                (allow sysadm_sudo_t devlog_t (sock_file (write getattr append open)))
                (allow sysadm_sudo_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_sudo_t var_t (dir (getattr open search)))
                (allow sysadm_sudo_t var_run_t (dir (getattr open search)))
                (allow sysadm_sudo_t init_runtime_t (dir (getattr open search)))
                (allow sysadm_sudo_t syslogd_runtime_t (dir (getattr open search)))
                (allow sysadm_sudo_t syslogd_t (unix_dgram_socket (sendto)))
                (allow sysadm_sudo_t syslogd_t (unix_stream_socket (connectto)))
                (allow sysadm_sudo_t self (unix_dgram_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
                (allow sysadm_sudo_t self (unix_stream_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
                (allow sysadm_sudo_t device_t (dir (getattr open search)))
                (allow sysadm_sudo_t device_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_sudo_t device_t (dir (getattr open search)))
                (allow sysadm_sudo_t device_t (lnk_file (read getattr)))
                (allow sysadm_sudo_t console_device_t (chr_file (ioctl write getattr lock append open)))
                (dontaudit sysadm_sudo_t console_device_t (chr_file (ioctl read getattr lock open)))
                (allow sysadm_sudo_t etc_t (dir (getattr open search)))
                (allow sysadm_sudo_t etc_t (lnk_file (read getattr)))
                (allow sysadm_sudo_t usr_t (dir (getattr open search)))
                (allow sysadm_sudo_t locale_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_sudo_t locale_t (dir (getattr open search)))
                (allow sysadm_sudo_t locale_t (file (ioctl read getattr lock open)))
                (allow sysadm_sudo_t locale_t (dir (getattr open search)))
                (allow sysadm_sudo_t locale_t (lnk_file (read getattr)))
                (allow sysadm_sudo_t locale_t (file (map)))
                (allow sysadm_sudo_t etc_t (dir (getattr open search)))
                (allow sysadm_sudo_t selinux_config_t (dir (getattr open search)))
                (allow sysadm_sudo_t default_context_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_sudo_t default_context_t (dir (getattr open search)))
                (allow sysadm_sudo_t default_context_t (file (ioctl read getattr lock open)))
                (allow sysadm_sudo_t security_t (filesystem (getattr)))
                (allow sysadm_sudo_t sysfs_t (filesystem (getattr)))
                (allow sysadm_sudo_t sysfs_t (dir (getattr open search)))
                (allow sysadm_sudo_t sysfs_t (dir (getattr open search)))
                (allow sysadm_sudo_t proc_t (dir (getattr open search)))
                (allow sysadm_sudo_t proc_t (file (ioctl read getattr lock open)))
                (allow sysadm_sudo_t proc_t (dir (getattr open search)))
                (allow sysadm_sudo_t proc_t (lnk_file (read getattr)))
                (allow sysadm_sudo_t proc_t (dir (getattr open search)))
                (allow sysadm_sudo_t proc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_sudo_t etc_t (dir (getattr open search)))
                (allow sysadm_sudo_t selinux_config_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_sudo_t selinux_config_t (dir (getattr open search)))
                (allow sysadm_sudo_t selinux_config_t (file (ioctl read getattr lock open)))
                (allow sysadm_sudo_t selinux_config_t (dir (getattr open search)))
                (allow sysadm_sudo_t selinux_config_t (lnk_file (read getattr)))
                (allow sysadm_sudo_t bin_t (dir (getattr open search)))
                (allow sysadm_sudo_t bin_t (lnk_file (read getattr)))
                (allow sysadm_sudo_t usr_t (dir (getattr open search)))
                (allow sysadm_sudo_t bin_t (dir (getattr open search)))
                (allow sysadm_sudo_t bin_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_sudo_t shell_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_sudo_t userdomain (process (transition)))
                (dontaudit sysadm_sudo_t userdomain (process (noatsecure siginh rlimitinh)))
                (allow userdomain sysadm_sudo_t (fd (use)))
                (allow userdomain sysadm_sudo_t (fifo_file (ioctl read write getattr lock append)))
                (allow userdomain sysadm_sudo_t (process (sigchld)))
                (allow sysadm_sudo_t userdomain (key (create)))
                (allow sysadm_sudo_t device_t (dir (getattr open search)))
                (allow sysadm_sudo_t device_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_sudo_t device_t (dir (getattr open search)))
                (allow sysadm_sudo_t device_t (lnk_file (read getattr)))
                (allow sysadm_sudo_t ptmx_t (chr_file (ioctl read write getattr lock append open)))
                (allow sysadm_sudo_t devpts_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_sudo_t devpts_t (filesystem (getattr)))
                (dontaudit sysadm_sudo_t bsdpty_device_t (chr_file (read write getattr)))
                (typetransition sysadm_sudo_t devpts_t chr_file user_devpts_t)
                (allow sysadm_sudo_t user_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_sudo_t user_home_t (file (ioctl read write create getattr setattr lock append map unlink link rename open)))
                (allow sysadm_sudo_t user_home_dir_t (dir (getattr open search)))
                (allow sysadm_sudo_t home_root_t (dir (getattr open search)))
                (allow sysadm_sudo_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_sudo_t user_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_sudo_t user_home_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_sudo_t user_home_dir_t (dir (getattr open search)))
                (allow sysadm_sudo_t home_root_t (dir (getattr open search)))
                (allow sysadm_sudo_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_sudo_t user_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_sudo_t user_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_sudo_t tmp_t (dir (getattr open search)))
                (allow sysadm_sudo_t user_runtime_t (dir (getattr open search)))
                (allow sysadm_sudo_t user_runtime_root_t (dir (getattr open search)))
                (allow sysadm_sudo_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_sudo_t var_t (dir (getattr open search)))
                (allow sysadm_sudo_t var_run_t (dir (getattr open search)))
                (allow sysadm_sudo_t user_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_sudo_t user_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_sudo_t tmp_t (dir (getattr open search)))
                (allow sysadm_sudo_t user_runtime_t (dir (getattr open search)))
                (allow sysadm_sudo_t user_runtime_root_t (dir (getattr open search)))
                (allow sysadm_sudo_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_sudo_t var_t (dir (getattr open search)))
                (allow sysadm_sudo_t var_run_t (dir (getattr open search)))
                (allow sysadm_sudo_t user_devpts_t (chr_file (setattr)))
                (allow sysadm_sudo_t device_t (dir (getattr open search)))
                (allow sysadm_sudo_t device_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_sudo_t device_t (dir (getattr open search)))
                (allow sysadm_sudo_t device_t (lnk_file (read getattr)))
                (allow sysadm_sudo_t devpts_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_sudo_t user_devpts_t (chr_file (ioctl read write getattr append open)))
                (allow sysadm_sudo_t user_tty_device_t (chr_file (ioctl read write getattr append open)))
                (dontaudit sysadm_sudo_t user_tmp_t (fifo_file (ioctl read write getattr lock append open)))
                (dontaudit sysadm_sudo_t user_home_t (dir (getattr open search)))
                (dontaudit sysadm_sudo_t user_home_dir_t (dir (getattr open search)))
                (allow sysadm_sudo_t userdomain (process (signal)))
                (dontaudit sysadm_sudo_t device_node (blk_file (getattr)))
                (dontaudit sysadm_sudo_t device_t (blk_file (getattr)))
                (dontaudit sysadm_sudo_t device_node (chr_file (getattr)))
                (dontaudit sysadm_sudo_t device_t (chr_file (getattr)))
                (typetransition sysadm_sudo_t var_run_t dir "sudo" pam_runtime_t)
                (booleanif (use_samba_home_dirs)
                    (true
                        (allow sysadm_sudo_t cifs_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                        (allow sysadm_sudo_t cifs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                    )
                )
                (booleanif (use_nfs_home_dirs)
                    (true
                        (allow sysadm_sudo_t nfs_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                        (allow sysadm_sudo_t nfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                    )
                )
                (booleanif (sudo_allow_user_exec_domains)
                    (true
                        (allow sysadm_application_exec_domain sysadm_sudo_t (process (sigchld sigkill sigstop signull signal)))
                        (allow sysadm_application_exec_domain sysadm_sudo_t (fifo_file (ioctl read write getattr lock append open)))
                        (allow sysadm_application_exec_domain sysadm_sudo_t (fd (use)))
                        (allow sysadm_sudo_t sysadm_application_exec_domain (process (sigchld)))
                        (allow sysadm_sudo_t sysadm_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                        (allow sysadm_sudo_t sysadm_application_exec_domain (fd (use)))
                        (typetransition sysadm_application_exec_domain sudo_exec_t process sysadm_sudo_t)
                        (dontaudit sysadm_application_exec_domain sysadm_sudo_t (process (noatsecure siginh rlimitinh)))
                        (allow sysadm_application_exec_domain sysadm_sudo_t (process (transition)))
                        (allow sysadm_application_exec_domain sudo_exec_t (file (ioctl read getattr map execute open)))
                        (allow sysadm_sudo_t sysadm_application_exec_domain (process (signal)))
                        (allow sysadm_sudo_t sysadm_application_exec_domain (process (getattr)))
                        (allow sysadm_sudo_t sysadm_application_exec_domain (lnk_file (read getattr)))
                        (allow sysadm_sudo_t sysadm_application_exec_domain (file (ioctl read getattr lock open)))
                        (allow sysadm_sudo_t sysadm_application_exec_domain (dir (ioctl read getattr lock open search)))
                        (allow sysadm_sudo_t sysadm_application_exec_domain (key (search)))
                    )
                    (false
                        (allow sysadm_t sysadm_sudo_t (process (sigchld sigkill sigstop signull signal)))
                        (allow sysadm_t sysadm_sudo_t (fifo_file (ioctl read write getattr lock append open)))
                        (allow sysadm_t sysadm_sudo_t (fd (use)))
                        (allow sysadm_sudo_t sysadm_t (process (sigchld)))
                        (allow sysadm_sudo_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                        (allow sysadm_sudo_t sysadm_t (fd (use)))
                        (typetransition sysadm_t sudo_exec_t process sysadm_sudo_t)
                        (dontaudit sysadm_t sysadm_sudo_t (process (noatsecure siginh rlimitinh)))
                        (allow sysadm_t sysadm_sudo_t (process (transition)))
                        (allow sysadm_t sudo_exec_t (file (ioctl read getattr map execute open)))
                        (allow sysadm_sudo_t sysadm_t (process (signal)))
                        (allow sysadm_sudo_t sysadm_t (key (search)))
                    )
                )
                (booleanif (allow_polyinstantiation)
                    (true
                        (allow sysadm_sudo_t fs_t (filesystem (unmount)))
                        (allow sysadm_sudo_t fs_t (filesystem (mount)))
                        (allow sysadm_sudo_t self (capability (sys_admin)))
                    )
                )
                (optional sysadm_optional_533
                    (typeattributeset cil_gen_require init_t)
                    (allow sysadm_sudo_t init_t (process (sigchld)))
                    (allow sysadm_sudo_t init_t (process (signull)))
                    (optional sysadm_optional_534
                        (typeattributeset cil_gen_require rpm_t)
                        (allow sysadm_sudo_t rpm_t (fd (use)))
                        (allow sysadm_sudo_t rpm_t (fifo_file (ioctl read getattr lock open)))
                    )
                    (optional sysadm_optional_535
                        (typeattributeset cil_gen_require security_t)
                        (typeattributeset cil_gen_require sysfs_t)
                        (dontaudit sysadm_sudo_t security_t (filesystem (getattr)))
                        (dontaudit sysadm_sudo_t sysfs_t (filesystem (getattr)))
                        (dontaudit sysadm_sudo_t sysfs_t (dir (getattr open search)))
                        (dontaudit sysadm_sudo_t security_t (dir (getattr open search)))
                        (dontaudit sysadm_sudo_t security_t (file (ioctl read getattr lock open)))
                        (optional sysadm_optional_536
                            (typeattributeset cil_gen_require selinux_config_t)
                            (dontaudit sysadm_sudo_t selinux_config_t (dir (getattr open search)))
                            (dontaudit sysadm_sudo_t selinux_config_t (file (ioctl read getattr lock open)))
                            (optional sysadm_optional_537
                                (typeattributeset cil_gen_require etc_t)
                                (typeattributeset cil_gen_require krb5_keytab_t)
                                (allow sysadm_sudo_t etc_t (dir (getattr open search)))
                                (allow sysadm_sudo_t krb5_keytab_t (file (ioctl read getattr lock open)))
                            )
                            (optional sysadm_optional_538
                                (typeattributeset cil_gen_require var_run_t)
                                (typeattributeset cil_gen_require var_t)
                                (typeattributeset cil_gen_require pcscd_t)
                                (typeattributeset cil_gen_require pcscd_runtime_t)
                                (allow sysadm_sudo_t var_run_t (lnk_file (read getattr)))
                                (allow sysadm_sudo_t var_t (dir (getattr open search)))
                                (allow sysadm_sudo_t var_run_t (dir (getattr open search)))
                                (allow sysadm_sudo_t pcscd_runtime_t (dir (getattr open search)))
                                (allow sysadm_sudo_t pcscd_runtime_t (file (ioctl read getattr lock open)))
                                (allow sysadm_sudo_t var_run_t (lnk_file (read getattr)))
                                (allow sysadm_sudo_t var_t (dir (getattr open search)))
                                (allow sysadm_sudo_t var_run_t (dir (getattr open search)))
                                (allow sysadm_sudo_t pcscd_runtime_t (dir (getattr open search)))
                                (allow sysadm_sudo_t pcscd_runtime_t (sock_file (write getattr append open)))
                                (allow sysadm_sudo_t pcscd_t (unix_stream_socket (connectto)))
                                (allow pcscd_t sysadm_sudo_t (dir (ioctl read getattr lock open search)))
                                (allow pcscd_t sysadm_sudo_t (file (ioctl read getattr lock open)))
                            )
                            (optional sysadm_optional_539
                                (typeattributeset cil_gen_require etc_t)
                                (typeattributeset cil_gen_require krb5_keytab_t)
                                (allow sysadm_sudo_t etc_t (dir (getattr open search)))
                                (allow sysadm_sudo_t krb5_keytab_t (file (ioctl read getattr lock open)))
                            )
                            (optional sysadm_optional_540
                                (typeattributeset cil_gen_require var_run_t)
                                (typeattributeset cil_gen_require var_t)
                                (typeattributeset cil_gen_require pcscd_t)
                                (typeattributeset cil_gen_require pcscd_runtime_t)
                                (allow sysadm_sudo_t var_run_t (lnk_file (read getattr)))
                                (allow sysadm_sudo_t var_t (dir (getattr open search)))
                                (allow sysadm_sudo_t var_run_t (dir (getattr open search)))
                                (allow sysadm_sudo_t pcscd_runtime_t (dir (getattr open search)))
                                (allow sysadm_sudo_t pcscd_runtime_t (file (ioctl read getattr lock open)))
                                (allow sysadm_sudo_t var_run_t (lnk_file (read getattr)))
                                (allow sysadm_sudo_t var_t (dir (getattr open search)))
                                (allow sysadm_sudo_t var_run_t (dir (getattr open search)))
                                (allow sysadm_sudo_t pcscd_runtime_t (dir (getattr open search)))
                                (allow sysadm_sudo_t pcscd_runtime_t (sock_file (write getattr append open)))
                                (allow sysadm_sudo_t pcscd_t (unix_stream_socket (connectto)))
                                (allow pcscd_t sysadm_sudo_t (dir (ioctl read getattr lock open search)))
                                (allow pcscd_t sysadm_sudo_t (file (ioctl read getattr lock open)))
                            )
                            (optional sysadm_optional_541
                                (typeattributeset cil_gen_require var_run_t)
                                (typeattributeset cil_gen_require var_t)
                                (typeattributeset cil_gen_require var_lib_t)
                                (typeattributeset cil_gen_require system_dbusd_t)
                                (typeattributeset cil_gen_require session_dbusd_tmp_t)
                                (typeattributeset cil_gen_require dbusd_system_bus_client)
                                (typeattributeset cil_gen_require system_dbusd_runtime_t)
                                (typeattributeset cil_gen_require system_dbusd_var_lib_t)
                                (typeattributeset cil_gen_require dbusd_etc_t)
                                (typeattributeset cil_gen_require dbusd_system_bus_client)
                                (typeattributeset dbusd_system_bus_client (sysadm_sudo_t ))
                                (allow sysadm_sudo_t system_dbusd_t (dbus (send_msg)))
                                (allow sysadm_sudo_t self (dbus (send_msg)))
                                (allow system_dbusd_t sysadm_sudo_t (dbus (send_msg)))
                                (allow sysadm_sudo_t var_t (dir (getattr open search)))
                                (allow sysadm_sudo_t var_lib_t (dir (getattr open search)))
                                (allow sysadm_sudo_t system_dbusd_var_lib_t (dir (getattr open search)))
                                (allow sysadm_sudo_t system_dbusd_var_lib_t (file (ioctl read getattr lock open)))
                                (allow sysadm_sudo_t system_dbusd_var_lib_t (dir (getattr open search)))
                                (allow sysadm_sudo_t system_dbusd_var_lib_t (lnk_file (read getattr)))
                                (allow sysadm_sudo_t session_dbusd_tmp_t (dir (getattr open search)))
                                (allow sysadm_sudo_t session_dbusd_tmp_t (sock_file (read write getattr append open)))
                                (allow sysadm_sudo_t var_run_t (lnk_file (read getattr)))
                                (allow sysadm_sudo_t var_t (dir (getattr open search)))
                                (allow sysadm_sudo_t var_run_t (dir (getattr open search)))
                                (allow sysadm_sudo_t system_dbusd_runtime_t (dir (getattr open search)))
                                (allow sysadm_sudo_t system_dbusd_runtime_t (sock_file (write getattr append open)))
                                (allow sysadm_sudo_t system_dbusd_t (unix_stream_socket (connectto)))
                                (allow sysadm_sudo_t dbusd_etc_t (dir (ioctl read getattr lock open search)))
                                (allow sysadm_sudo_t dbusd_etc_t (file (ioctl read getattr lock open)))
                                (allow sysadm_sudo_t system_dbusd_runtime_t (dir (ioctl read getattr lock open search)))
                                (allow sysadm_sudo_t system_dbusd_runtime_t (sock_file (read)))
                                (allow sysadm_sudo_t system_dbusd_var_lib_t (dir (getattr open search)))
                                (allow sysadm_sudo_t system_dbusd_var_lib_t (lnk_file (read getattr)))
                                (optional sysadm_optional_542
                                    (typeattributeset cil_gen_require fprintd_t)
                                    (allow sysadm_sudo_t fprintd_t (dbus (send_msg)))
                                    (allow fprintd_t sysadm_sudo_t (dbus (send_msg)))
                                )
                                (optional sysadm_optional_543
                                    (typeattributeset cil_gen_require systemd_logind_t)
                                    (typeattributeset cil_gen_require systemd_sessions_runtime_t)
                                    (allow sysadm_sudo_t systemd_logind_t (dbus (send_msg)))
                                    (allow systemd_logind_t sysadm_sudo_t (dbus (send_msg)))
                                    (allow sysadm_sudo_t systemd_logind_t (fd (use)))
                                    (allow sysadm_sudo_t systemd_sessions_runtime_t (fifo_file (write)))
                                    (allow systemd_logind_t sysadm_sudo_t (process (signal)))
                                )
                            )
                            (optional sysadm_optional_544
                                (typeattributeset cil_gen_require security_t)
                                (typeattributeset cil_gen_require sysfs_t)
                                (typeattributeset cil_gen_require selinux_config_t)
                                (typeattributeset cil_gen_require etc_t)
                                (typeattributeset cil_gen_require user_home_dir_t)
                                (typeattributeset cil_gen_require home_root_t)
                                (typeattributeset cil_gen_require tmp_t)
                                (typeattributeset cil_gen_require krb5_host_rcache_t)
                                (typeattributeset cil_gen_require krb5_conf_t)
                                (typeattributeset cil_gen_require krb5_home_t)
                                (typeattributeset cil_gen_require default_context_t)
                                (typeattributeset cil_gen_require file_context_t)
                                (typeattributeset cil_gen_require can_change_object_identity)
                                (typeattributeset can_change_object_identity (sysadm_t ))
                                (typeattributeset cil_gen_require can_change_object_identity)
                                (typeattributeset can_change_object_identity (sysadm_sudo_t ))
                                (allow sysadm_sudo_t etc_t (dir (getattr open search)))
                                (allow sysadm_sudo_t krb5_conf_t (file (ioctl read getattr lock open)))
                                (allow sysadm_sudo_t user_home_dir_t (dir (getattr open search)))
                                (allow sysadm_sudo_t home_root_t (dir (getattr open search)))
                                (allow sysadm_sudo_t home_root_t (lnk_file (read getattr)))
                                (allow sysadm_sudo_t krb5_home_t (file (ioctl read getattr lock open)))
                                (booleanif (allow_kerberos)
                                    (true
                                        (allow sysadm_sudo_t krb5_host_rcache_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                                        (allow sysadm_sudo_t tmp_t (dir (getattr open search)))
                                        (allow sysadm_sudo_t file_context_t (file (map)))
                                        (allow sysadm_sudo_t file_context_t (file (ioctl read getattr lock open)))
                                        (allow sysadm_sudo_t file_context_t (dir (getattr open search)))
                                        (allow sysadm_sudo_t selinux_config_t (dir (getattr open search)))
                                        (allow sysadm_sudo_t default_context_t (dir (getattr open search)))
                                        (allow sysadm_sudo_t etc_t (dir (getattr open search)))
                                        (allow sysadm_sudo_t security_t (security (check_context)))
                                        (allow sysadm_sudo_t security_t (file (ioctl read write getattr map open)))
                                        (allow sysadm_sudo_t security_t (dir (ioctl read getattr lock open search)))
                                        (allow sysadm_sudo_t sysfs_t (dir (getattr open search)))
                                        (allow sysadm_sudo_t sysfs_t (dir (getattr open search)))
                                        (allow sysadm_sudo_t self (process (setfscreate)))
                                    )
                                )
                            )
                            (optional sysadm_optional_545
                                (typeattributeset cil_gen_require etc_t)
                                (typeattributeset cil_gen_require etc_runtime_t)
                                (typeattributeset cil_gen_require var_run_t)
                                (typeattributeset cil_gen_require var_t)
                                (typeattributeset cil_gen_require var_lib_t)
                                (typeattributeset cil_gen_require system_dbusd_t)
                                (typeattributeset cil_gen_require session_dbusd_tmp_t)
                                (typeattributeset cil_gen_require dbusd_system_bus_client)
                                (typeattributeset cil_gen_require system_dbusd_runtime_t)
                                (typeattributeset cil_gen_require system_dbusd_var_lib_t)
                                (typeattributeset cil_gen_require dbusd_etc_t)
                                (typeattributeset cil_gen_require systemd_machined_t)
                                (typeattributeset cil_gen_require systemd_logind_t)
                                (typeattributeset cil_gen_require systemd_sessions_runtime_t)
                                (typeattributeset cil_gen_require dbusd_system_bus_client)
                                (typeattributeset dbusd_system_bus_client (sysadm_sudo_t ))
                                (allow sysadm_sudo_t system_dbusd_t (dbus (send_msg)))
                                (allow sysadm_sudo_t self (dbus (send_msg)))
                                (allow system_dbusd_t sysadm_sudo_t (dbus (send_msg)))
                                (allow sysadm_sudo_t var_t (dir (getattr open search)))
                                (allow sysadm_sudo_t var_lib_t (dir (getattr open search)))
                                (allow sysadm_sudo_t system_dbusd_var_lib_t (dir (getattr open search)))
                                (allow sysadm_sudo_t system_dbusd_var_lib_t (file (ioctl read getattr lock open)))
                                (allow sysadm_sudo_t system_dbusd_var_lib_t (dir (getattr open search)))
                                (allow sysadm_sudo_t system_dbusd_var_lib_t (lnk_file (read getattr)))
                                (allow sysadm_sudo_t session_dbusd_tmp_t (dir (getattr open search)))
                                (allow sysadm_sudo_t session_dbusd_tmp_t (sock_file (read write getattr append open)))
                                (allow sysadm_sudo_t var_run_t (lnk_file (read getattr)))
                                (allow sysadm_sudo_t var_t (dir (getattr open search)))
                                (allow sysadm_sudo_t var_run_t (dir (getattr open search)))
                                (allow sysadm_sudo_t system_dbusd_runtime_t (dir (getattr open search)))
                                (allow sysadm_sudo_t system_dbusd_runtime_t (sock_file (write getattr append open)))
                                (allow sysadm_sudo_t system_dbusd_t (unix_stream_socket (connectto)))
                                (allow sysadm_sudo_t dbusd_etc_t (dir (ioctl read getattr lock open search)))
                                (allow sysadm_sudo_t dbusd_etc_t (file (ioctl read getattr lock open)))
                                (allow sysadm_sudo_t system_dbusd_runtime_t (dir (ioctl read getattr lock open search)))
                                (allow sysadm_sudo_t system_dbusd_runtime_t (sock_file (read)))
                                (allow sysadm_sudo_t system_dbusd_var_lib_t (dir (getattr open search)))
                                (allow sysadm_sudo_t system_dbusd_var_lib_t (lnk_file (read getattr)))
                                (allow sysadm_sudo_t systemd_machined_t (unix_stream_socket (connectto)))
                                (allow sysadm_sudo_t systemd_logind_t (dbus (send_msg)))
                                (allow systemd_logind_t sysadm_sudo_t (dbus (send_msg)))
                                (allow systemd_logind_t sysadm_sudo_t (dir (ioctl read getattr lock open search)))
                                (allow systemd_logind_t sysadm_sudo_t (file (ioctl read getattr lock open)))
                                (allow sysadm_sudo_t etc_t (dir (ioctl read getattr lock open search)))
                                (allow sysadm_sudo_t etc_t (dir (getattr open search)))
                                (allow sysadm_sudo_t etc_runtime_t (file (ioctl read getattr lock open)))
                                (allow sysadm_sudo_t etc_t (dir (getattr open search)))
                                (allow sysadm_sudo_t etc_runtime_t (lnk_file (read getattr)))
                                (allow sysadm_sudo_t systemd_logind_t (dbus (send_msg)))
                                (allow systemd_logind_t sysadm_sudo_t (dbus (send_msg)))
                                (allow sysadm_sudo_t systemd_logind_t (fd (use)))
                                (allow sysadm_sudo_t systemd_sessions_runtime_t (fifo_file (write)))
                                (allow systemd_logind_t sysadm_sudo_t (process (signal)))
                            )
                            (optional sysadm_optional_546
                                (typeattributeset cil_gen_require fprintd_t)
                                (allow sysadm_sudo_t fprintd_t (dbus (send_msg)))
                                (allow fprintd_t sysadm_sudo_t (dbus (send_msg)))
                            )
                            (optional sysadm_optional_547
                                (typeattributeset cil_gen_require sudomain)
                                (allow sysadm_sudo_t sudomain (process (signal)))
                            )
                        )
                    )
                )
            )
            (optional sysadm_optional_548
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require svnserve_t)
                (typeattributeset cil_gen_require svnserve_initrc_exec_t)
                (typeattributeset cil_gen_require svnserve_runtime_t)
                (allow sysadm_t svnserve_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t svnserve_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t svnserve_t (file (ioctl read getattr lock open)))
                (allow sysadm_t svnserve_t (lnk_file (read getattr)))
                (allow sysadm_t svnserve_t (process (getattr)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t svnserve_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t svnserve_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t svnserve_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t svnserve_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t svnserve_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t svnserve_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t svnserve_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t svnserve_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t svnserve_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t svnserve_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t svnserve_runtime_t (dir (getattr open search)))
                (allow sysadm_t svnserve_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t svnserve_runtime_t (dir (getattr open search)))
                (allow sysadm_t svnserve_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t svnserve_runtime_t (dir (getattr open search)))
                (allow sysadm_t svnserve_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t svnserve_runtime_t (dir (getattr open search)))
                (allow sysadm_t svnserve_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t svnserve_runtime_t (dir (getattr open search)))
                (allow sysadm_t svnserve_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_549
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_550
                (roleattributeset cil_gen_require dhcpc_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require ifconfig_t)
                (typeattributeset cil_gen_require ifconfig_exec_t)
                (typeattributeset cil_gen_require dhcpc_t)
                (typeattributeset cil_gen_require dhcpc_exec_t)
                (roleattributeset cil_gen_require dhcpc_roles)
                (roleattributeset dhcpc_roles (sysadm_r ))
                (roleattributeset cil_gen_require sysadm_r)
                (roletype sysadm_r ifconfig_t)
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t ifconfig_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t ifconfig_t (process (transition)))
                (dontaudit sysadm_t ifconfig_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t ifconfig_exec_t process ifconfig_t)
                (allow ifconfig_t sysadm_t (fd (use)))
                (allow ifconfig_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow ifconfig_t sysadm_t (process (sigchld)))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t dhcpc_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t dhcpc_t (process (transition)))
                (dontaudit sysadm_t dhcpc_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t dhcpc_exec_t process dhcpc_t)
                (allow dhcpc_t sysadm_t (fd (use)))
                (allow dhcpc_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow dhcpc_t sysadm_t (process (sigchld)))
            )
            (optional sysadm_optional_551
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require sysstat_t)
                (typeattributeset cil_gen_require sysstat_initrc_exec_t)
                (typeattributeset cil_gen_require sysstat_log_t)
                (allow sysadm_t sysstat_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t sysstat_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t sysstat_t (file (ioctl read getattr lock open)))
                (allow sysadm_t sysstat_t (lnk_file (read getattr)))
                (allow sysadm_t sysstat_t (process (getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t sysstat_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t sysstat_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t sysstat_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t sysstat_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t sysstat_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t sysstat_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t sysstat_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t sysstat_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t sysstat_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t sysstat_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t sysstat_log_t (dir (getattr open search)))
                (allow sysadm_t sysstat_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t sysstat_log_t (dir (getattr open search)))
                (allow sysadm_t sysstat_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t sysstat_log_t (dir (getattr open search)))
                (allow sysadm_t sysstat_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t sysstat_log_t (dir (getattr open search)))
                (allow sysadm_t sysstat_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t sysstat_log_t (dir (getattr open search)))
                (allow sysadm_t sysstat_log_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_552
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_553
                (typeattributeset cil_gen_require systemd_hostnamed_t)
                (allow sysadm_t systemd_hostnamed_t (dbus (send_msg)))
                (allow systemd_hostnamed_t sysadm_t (dbus (send_msg)))
            )
            (optional sysadm_optional_554
                (roleattributeset cil_gen_require txtstat_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require txtstat_t)
                (typeattributeset cil_gen_require txtstat_exec_t)
                (roleattributeset cil_gen_require txtstat_roles)
                (roleattributeset txtstat_roles (sysadm_r ))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t txtstat_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t txtstat_t (process (transition)))
                (dontaudit sysadm_t txtstat_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t txtstat_exec_t process txtstat_t)
                (allow txtstat_t sysadm_t (fd (use)))
                (allow txtstat_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow txtstat_t sysadm_t (process (sigchld)))
            )
            (optional sysadm_optional_555
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require tcsd_t)
                (typeattributeset cil_gen_require tcsd_initrc_exec_t)
                (typeattributeset cil_gen_require tcsd_var_lib_t)
                (allow sysadm_t tcsd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t tcsd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t tcsd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t tcsd_t (lnk_file (read getattr)))
                (allow sysadm_t tcsd_t (process (getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t tcsd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tcsd_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t tcsd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tcsd_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t tcsd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tcsd_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t tcsd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tcsd_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t tcsd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tcsd_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t tcsd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t tcsd_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t tcsd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t tcsd_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t tcsd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t tcsd_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tcsd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t tcsd_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tcsd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t tcsd_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_556
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_557
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require tftpd_t)
                (typeattributeset cil_gen_require tftpdir_t)
                (typeattributeset cil_gen_require tftpdir_rw_t)
                (typeattributeset cil_gen_require tftpd_runtime_t)
                (typeattributeset cil_gen_require tftpd_conf_t)
                (allow sysadm_t tftpd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t tftpd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t tftpd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t tftpd_t (lnk_file (read getattr)))
                (allow sysadm_t tftpd_t (process (getattr)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t tftpd_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tftpd_conf_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t tftpd_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tftpd_conf_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t tftpd_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tftpd_conf_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t tftpd_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tftpd_conf_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t tftpd_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tftpd_conf_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t tftpd_conf_t (dir (getattr open search)))
                (allow sysadm_t tftpd_conf_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t tftpd_conf_t (dir (getattr open search)))
                (allow sysadm_t tftpd_conf_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t tftpd_conf_t (dir (getattr open search)))
                (allow sysadm_t tftpd_conf_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tftpd_conf_t (dir (getattr open search)))
                (allow sysadm_t tftpd_conf_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tftpd_conf_t (dir (getattr open search)))
                (allow sysadm_t tftpd_conf_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t tftpdir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tftpdir_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tftpdir_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t tftpdir_rw_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t tftpdir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tftpdir_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tftpdir_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t tftpdir_rw_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t tftpdir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tftpdir_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tftpdir_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t tftpdir_rw_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t tftpdir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tftpdir_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tftpdir_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t tftpdir_rw_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t tftpdir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tftpdir_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tftpdir_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t tftpdir_rw_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t tftpdir_t (dir (getattr open search)))
                (allow sysadm_t tftpdir_rw_t (dir (getattr open search)))
                (allow sysadm_t tftpdir_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t tftpdir_rw_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t tftpdir_t (dir (getattr open search)))
                (allow sysadm_t tftpdir_rw_t (dir (getattr open search)))
                (allow sysadm_t tftpdir_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t tftpdir_rw_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t tftpdir_t (dir (getattr open search)))
                (allow sysadm_t tftpdir_rw_t (dir (getattr open search)))
                (allow sysadm_t tftpdir_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tftpdir_rw_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tftpdir_t (dir (getattr open search)))
                (allow sysadm_t tftpdir_rw_t (dir (getattr open search)))
                (allow sysadm_t tftpdir_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tftpdir_rw_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tftpdir_t (dir (getattr open search)))
                (allow sysadm_t tftpdir_rw_t (dir (getattr open search)))
                (allow sysadm_t tftpdir_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tftpdir_rw_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t tftpd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tftpd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t tftpd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tftpd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t tftpd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tftpd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t tftpd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tftpd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t tftpd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tftpd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t tftpd_runtime_t (dir (getattr open search)))
                (allow sysadm_t tftpd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t tftpd_runtime_t (dir (getattr open search)))
                (allow sysadm_t tftpd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t tftpd_runtime_t (dir (getattr open search)))
                (allow sysadm_t tftpd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tftpd_runtime_t (dir (getattr open search)))
                (allow sysadm_t tftpd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tftpd_runtime_t (dir (getattr open search)))
                (allow sysadm_t tftpd_runtime_t (sock_file (getattr relabelfrom relabelto)))
            )
            (optional sysadm_optional_558
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require tmpfs_t)
                (typeattributeset cil_gen_require tgtd_t)
                (typeattributeset cil_gen_require tgtd_initrc_exec_t)
                (typeattributeset cil_gen_require tgtd_var_lib_t)
                (typeattributeset cil_gen_require tgtd_runtime_t)
                (typeattributeset cil_gen_require tgtd_tmp_t)
                (typeattributeset cil_gen_require tgtd_tmpfs_t)
                (allow sysadm_t tgtd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t tgtd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t tgtd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t tgtd_t (lnk_file (read getattr)))
                (allow sysadm_t tgtd_t (process (getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t tgtd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tgtd_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t tgtd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tgtd_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t tgtd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tgtd_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t tgtd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tgtd_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t tgtd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tgtd_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t tgtd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t tgtd_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t tgtd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t tgtd_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t tgtd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t tgtd_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tgtd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t tgtd_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tgtd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t tgtd_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t tgtd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tgtd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t tgtd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tgtd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t tgtd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tgtd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t tgtd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tgtd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t tgtd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tgtd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t tgtd_runtime_t (dir (getattr open search)))
                (allow sysadm_t tgtd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t tgtd_runtime_t (dir (getattr open search)))
                (allow sysadm_t tgtd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t tgtd_runtime_t (dir (getattr open search)))
                (allow sysadm_t tgtd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tgtd_runtime_t (dir (getattr open search)))
                (allow sysadm_t tgtd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tgtd_runtime_t (dir (getattr open search)))
                (allow sysadm_t tgtd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (getattr open search)))
                (allow sysadm_t tgtd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tgtd_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t tgtd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tgtd_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t tgtd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tgtd_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t tgtd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tgtd_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t tgtd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tgtd_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t tgtd_tmp_t (dir (getattr open search)))
                (allow sysadm_t tgtd_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t tgtd_tmp_t (dir (getattr open search)))
                (allow sysadm_t tgtd_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t tgtd_tmp_t (dir (getattr open search)))
                (allow sysadm_t tgtd_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tgtd_tmp_t (dir (getattr open search)))
                (allow sysadm_t tgtd_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tgtd_tmp_t (dir (getattr open search)))
                (allow sysadm_t tgtd_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmpfs_t (dir (getattr open search)))
                (allow sysadm_t tgtd_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tgtd_tmpfs_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t tgtd_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tgtd_tmpfs_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t tgtd_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tgtd_tmpfs_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t tgtd_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tgtd_tmpfs_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t tgtd_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tgtd_tmpfs_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t tgtd_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t tgtd_tmpfs_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t tgtd_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t tgtd_tmpfs_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t tgtd_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t tgtd_tmpfs_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tgtd_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t tgtd_tmpfs_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tgtd_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t tgtd_tmpfs_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_559
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_560
                (roleattributeset cil_gen_require thunderbird_roles)
                (typeattributeset cil_gen_require user_home_dir_t)
                (typeattributeset cil_gen_require home_root_t)
                (typeattributeset cil_gen_require thunderbird_t)
                (typeattributeset cil_gen_require thunderbird_exec_t)
                (typeattributeset cil_gen_require thunderbird_home_t)
                (typeattributeset cil_gen_require thunderbird_tmpfs_t)
                (roleattributeset cil_gen_require thunderbird_roles)
                (roleattributeset thunderbird_roles (sysadm_r ))
                (allow sysadm_application_exec_domain thunderbird_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_application_exec_domain thunderbird_t (process (transition)))
                (dontaudit sysadm_application_exec_domain thunderbird_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_application_exec_domain thunderbird_exec_t process thunderbird_t)
                (allow thunderbird_t sysadm_application_exec_domain (fd (use)))
                (allow thunderbird_t sysadm_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                (allow thunderbird_t sysadm_application_exec_domain (process (sigchld)))
                (allow sysadm_application_exec_domain thunderbird_tmpfs_t (dir (getattr open search)))
                (allow sysadm_application_exec_domain thunderbird_tmpfs_t (sock_file (write getattr append open)))
                (allow sysadm_application_exec_domain thunderbird_t (unix_stream_socket (connectto)))
                (allow thunderbird_t sysadm_application_exec_domain (unix_stream_socket (connectto)))
                (allow sysadm_application_exec_domain thunderbird_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_application_exec_domain thunderbird_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_application_exec_domain thunderbird_t (file (ioctl read getattr lock open)))
                (allow sysadm_application_exec_domain thunderbird_t (lnk_file (read getattr)))
                (allow sysadm_application_exec_domain thunderbird_t (process (getattr)))
                (allow sysadm_t thunderbird_home_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t thunderbird_home_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t thunderbird_home_t (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename)))
                (allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (typetransition sysadm_t user_home_dir_t dir ".thunderbird" thunderbird_home_t)
                (optional sysadm_optional_561
                    (typeattributeset cil_gen_require sysadm_systemd_t)
                    (allow sysadm_systemd_t thunderbird_t (dir (ioctl read getattr lock open search)))
                    (allow sysadm_systemd_t thunderbird_t (file (ioctl read getattr lock open)))
                    (allow sysadm_systemd_t thunderbird_t (lnk_file (read getattr)))
                    (allow sysadm_systemd_t thunderbird_t (process (getattr)))
                    (allow sysadm_systemd_t thunderbird_t (process (sigchld sigkill sigstop signull signal)))
                    (allow thunderbird_t sysadm_systemd_t (fd (use)))
                    (allow thunderbird_t sysadm_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                    (allow thunderbird_t sysadm_systemd_t (dir (ioctl read getattr lock open search)))
                    (allow thunderbird_t sysadm_systemd_t (file (ioctl read getattr lock open)))
                    (allow thunderbird_t sysadm_systemd_t (lnk_file (read getattr)))
                    (allow thunderbird_t sysadm_systemd_t (process (getattr)))
                    (allow thunderbird_t sysadm_systemd_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_562
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require tor_t)
                (typeattributeset cil_gen_require tor_var_log_t)
                (typeattributeset cil_gen_require tor_etc_t)
                (typeattributeset cil_gen_require tor_var_lib_t)
                (typeattributeset cil_gen_require tor_runtime_t)
                (typeattributeset cil_gen_require tor_initrc_exec_t)
                (allow sysadm_t tor_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t tor_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t tor_t (file (ioctl read getattr lock open)))
                (allow sysadm_t tor_t (lnk_file (read getattr)))
                (allow sysadm_t tor_t (process (getattr)))
                (allow sysadm_t etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t tor_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tor_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t tor_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tor_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t tor_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tor_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t tor_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tor_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t tor_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tor_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t tor_etc_t (dir (getattr open search)))
                (allow sysadm_t tor_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t tor_etc_t (dir (getattr open search)))
                (allow sysadm_t tor_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t tor_etc_t (dir (getattr open search)))
                (allow sysadm_t tor_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tor_etc_t (dir (getattr open search)))
                (allow sysadm_t tor_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tor_etc_t (dir (getattr open search)))
                (allow sysadm_t tor_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t tor_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tor_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t tor_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tor_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t tor_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tor_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t tor_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tor_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t tor_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tor_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t tor_var_lib_t (dir (getattr open search)))
                (allow sysadm_t tor_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t tor_var_lib_t (dir (getattr open search)))
                (allow sysadm_t tor_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t tor_var_lib_t (dir (getattr open search)))
                (allow sysadm_t tor_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tor_var_lib_t (dir (getattr open search)))
                (allow sysadm_t tor_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tor_var_lib_t (dir (getattr open search)))
                (allow sysadm_t tor_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t tor_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tor_var_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t tor_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tor_var_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t tor_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tor_var_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t tor_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tor_var_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t tor_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tor_var_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t tor_var_log_t (dir (getattr open search)))
                (allow sysadm_t tor_var_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t tor_var_log_t (dir (getattr open search)))
                (allow sysadm_t tor_var_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t tor_var_log_t (dir (getattr open search)))
                (allow sysadm_t tor_var_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tor_var_log_t (dir (getattr open search)))
                (allow sysadm_t tor_var_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tor_var_log_t (dir (getattr open search)))
                (allow sysadm_t tor_var_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t tor_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tor_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t tor_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tor_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t tor_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tor_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t tor_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tor_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t tor_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t tor_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t tor_runtime_t (dir (getattr open search)))
                (allow sysadm_t tor_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t tor_runtime_t (dir (getattr open search)))
                (allow sysadm_t tor_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t tor_runtime_t (dir (getattr open search)))
                (allow sysadm_t tor_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tor_runtime_t (dir (getattr open search)))
                (allow sysadm_t tor_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tor_runtime_t (dir (getattr open search)))
                (allow sysadm_t tor_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_563
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_564
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require transproxy_t)
                (typeattributeset cil_gen_require transproxy_initrc_exec_t)
                (typeattributeset cil_gen_require transproxy_runtime_t)
                (allow sysadm_t transproxy_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t transproxy_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t transproxy_t (file (ioctl read getattr lock open)))
                (allow sysadm_t transproxy_t (lnk_file (read getattr)))
                (allow sysadm_t transproxy_t (process (getattr)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t transproxy_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t transproxy_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t transproxy_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t transproxy_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t transproxy_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t transproxy_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t transproxy_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t transproxy_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t transproxy_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t transproxy_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t transproxy_runtime_t (dir (getattr open search)))
                (allow sysadm_t transproxy_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t transproxy_runtime_t (dir (getattr open search)))
                (allow sysadm_t transproxy_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t transproxy_runtime_t (dir (getattr open search)))
                (allow sysadm_t transproxy_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t transproxy_runtime_t (dir (getattr open search)))
                (allow sysadm_t transproxy_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t transproxy_runtime_t (dir (getattr open search)))
                (allow sysadm_t transproxy_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_565
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_566
                (roleattributeset cil_gen_require siggen_roles)
                (roleattributeset cil_gen_require tripwire_roles)
                (roleattributeset cil_gen_require twadmin_roles)
                (roleattributeset cil_gen_require twprint_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require siggen_t)
                (typeattributeset cil_gen_require siggen_exec_t)
                (typeattributeset cil_gen_require tripwire_t)
                (typeattributeset cil_gen_require tripwire_exec_t)
                (typeattributeset cil_gen_require twadmin_t)
                (typeattributeset cil_gen_require twadmin_exec_t)
                (typeattributeset cil_gen_require twprint_t)
                (typeattributeset cil_gen_require twprint_exec_t)
                (roleattributeset cil_gen_require twadmin_roles)
                (roleattributeset twadmin_roles (sysadm_r ))
                (roleattributeset cil_gen_require tripwire_roles)
                (roleattributeset tripwire_roles (sysadm_r ))
                (roleattributeset cil_gen_require siggen_roles)
                (roleattributeset siggen_roles (sysadm_r ))
                (roleattributeset cil_gen_require twprint_roles)
                (roleattributeset twprint_roles (sysadm_r ))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t siggen_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t siggen_t (process (transition)))
                (dontaudit sysadm_t siggen_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t siggen_exec_t process siggen_t)
                (allow siggen_t sysadm_t (fd (use)))
                (allow siggen_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow siggen_t sysadm_t (process (sigchld)))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t tripwire_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t tripwire_t (process (transition)))
                (dontaudit sysadm_t tripwire_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t tripwire_exec_t process tripwire_t)
                (allow tripwire_t sysadm_t (fd (use)))
                (allow tripwire_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow tripwire_t sysadm_t (process (sigchld)))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t twadmin_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t twadmin_t (process (transition)))
                (dontaudit sysadm_t twadmin_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t twadmin_exec_t process twadmin_t)
                (allow twadmin_t sysadm_t (fd (use)))
                (allow twadmin_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow twadmin_t sysadm_t (process (sigchld)))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t twprint_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t twprint_t (process (transition)))
                (dontaudit sysadm_t twprint_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t twprint_exec_t process twprint_t)
                (allow twprint_t sysadm_t (fd (use)))
                (allow twprint_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow twprint_t sysadm_t (process (sigchld)))
            )
            (optional sysadm_optional_567
                (roleattributeset cil_gen_require tvtime_roles)
                (typeattributeset cil_gen_require user_home_dir_t)
                (typeattributeset cil_gen_require home_root_t)
                (typeattributeset cil_gen_require tvtime_t)
                (typeattributeset cil_gen_require tvtime_exec_t)
                (typeattributeset cil_gen_require tvtime_tmp_t)
                (typeattributeset cil_gen_require tvtime_home_t)
                (typeattributeset cil_gen_require tvtime_tmpfs_t)
                (roleattributeset cil_gen_require tvtime_roles)
                (roleattributeset tvtime_roles (sysadm_r ))
                (allow sysadm_application_exec_domain tvtime_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_application_exec_domain tvtime_t (process (transition)))
                (dontaudit sysadm_application_exec_domain tvtime_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_application_exec_domain tvtime_exec_t process tvtime_t)
                (allow tvtime_t sysadm_application_exec_domain (fd (use)))
                (allow tvtime_t sysadm_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                (allow tvtime_t sysadm_application_exec_domain (process (sigchld)))
                (allow sysadm_application_exec_domain tvtime_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_application_exec_domain tvtime_t (file (ioctl read getattr lock open)))
                (allow sysadm_application_exec_domain tvtime_t (lnk_file (read getattr)))
                (allow sysadm_application_exec_domain tvtime_t (process (getattr)))
                (allow sysadm_application_exec_domain tvtime_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t tvtime_tmp_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t tvtime_home_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t tvtime_tmp_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t tvtime_home_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t tvtime_tmpfs_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t tvtime_home_t (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename)))
                (allow sysadm_t tvtime_tmpfs_t (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename)))
                (allow sysadm_t tvtime_tmpfs_t (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t tvtime_tmpfs_t (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (typetransition sysadm_t user_home_dir_t dir ".tvtime" tvtime_home_t)
                (optional sysadm_optional_568
                    (typeattributeset cil_gen_require sysadm_systemd_t)
                    (allow sysadm_systemd_t tvtime_t (dir (ioctl read getattr lock open search)))
                    (allow sysadm_systemd_t tvtime_t (file (ioctl read getattr lock open)))
                    (allow sysadm_systemd_t tvtime_t (lnk_file (read getattr)))
                    (allow sysadm_systemd_t tvtime_t (process (getattr)))
                    (allow sysadm_systemd_t tvtime_t (process (sigchld sigkill sigstop signull signal)))
                    (allow tvtime_t sysadm_systemd_t (fd (use)))
                    (allow tvtime_t sysadm_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                    (allow tvtime_t sysadm_systemd_t (dir (ioctl read getattr lock open search)))
                    (allow tvtime_t sysadm_systemd_t (file (ioctl read getattr lock open)))
                    (allow tvtime_t sysadm_systemd_t (lnk_file (read getattr)))
                    (allow tvtime_t sysadm_systemd_t (process (getattr)))
                    (allow tvtime_t sysadm_systemd_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_569
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require tzdata_t)
                (typeattributeset cil_gen_require tzdata_exec_t)
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t tzdata_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t tzdata_t (process (transition)))
                (dontaudit sysadm_t tzdata_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t tzdata_exec_t process tzdata_t)
                (allow tzdata_t sysadm_t (fd (use)))
                (allow tzdata_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow tzdata_t sysadm_t (process (sigchld)))
            )
            (optional sysadm_optional_570
                (roleattributeset cil_gen_require udevadm_roles)
                (typeattributeset cil_gen_require udevadm_t)
                (typeattributeset cil_gen_require udev_exec_t)
                (roleattributeset cil_gen_require udevadm_roles)
                (roleattributeset udevadm_roles (sysadm_r ))
                (allow sysadm_t udev_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t udevadm_t (process (transition)))
                (dontaudit sysadm_t udevadm_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t udev_exec_t process udevadm_t)
                (allow udevadm_t sysadm_t (fd (use)))
                (allow udevadm_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow udevadm_t sysadm_t (process (sigchld)))
            )
            (optional sysadm_optional_571
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require ulogd_t)
                (typeattributeset cil_gen_require ulogd_etc_t)
                (typeattributeset cil_gen_require ulogd_modules_t)
                (typeattributeset cil_gen_require ulogd_var_log_t)
                (typeattributeset cil_gen_require ulogd_initrc_exec_t)
                (allow sysadm_t ulogd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t ulogd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t ulogd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t ulogd_t (lnk_file (read getattr)))
                (allow sysadm_t ulogd_t (process (getattr)))
                (allow sysadm_t etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t ulogd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ulogd_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t ulogd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ulogd_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ulogd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ulogd_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t ulogd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ulogd_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ulogd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ulogd_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ulogd_etc_t (dir (getattr open search)))
                (allow sysadm_t ulogd_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t ulogd_etc_t (dir (getattr open search)))
                (allow sysadm_t ulogd_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t ulogd_etc_t (dir (getattr open search)))
                (allow sysadm_t ulogd_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ulogd_etc_t (dir (getattr open search)))
                (allow sysadm_t ulogd_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ulogd_etc_t (dir (getattr open search)))
                (allow sysadm_t ulogd_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t ulogd_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ulogd_var_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t ulogd_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ulogd_var_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ulogd_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ulogd_var_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t ulogd_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ulogd_var_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ulogd_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ulogd_var_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ulogd_var_log_t (dir (getattr open search)))
                (allow sysadm_t ulogd_var_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t ulogd_var_log_t (dir (getattr open search)))
                (allow sysadm_t ulogd_var_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t ulogd_var_log_t (dir (getattr open search)))
                (allow sysadm_t ulogd_var_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ulogd_var_log_t (dir (getattr open search)))
                (allow sysadm_t ulogd_var_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ulogd_var_log_t (dir (getattr open search)))
                (allow sysadm_t ulogd_var_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t usr_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t ulogd_modules_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ulogd_modules_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t ulogd_modules_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ulogd_modules_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ulogd_modules_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ulogd_modules_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t ulogd_modules_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ulogd_modules_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ulogd_modules_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ulogd_modules_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ulogd_modules_t (dir (getattr open search)))
                (allow sysadm_t ulogd_modules_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t ulogd_modules_t (dir (getattr open search)))
                (allow sysadm_t ulogd_modules_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t ulogd_modules_t (dir (getattr open search)))
                (allow sysadm_t ulogd_modules_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ulogd_modules_t (dir (getattr open search)))
                (allow sysadm_t ulogd_modules_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ulogd_modules_t (dir (getattr open search)))
                (allow sysadm_t ulogd_modules_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_572
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_573
                (roleattributeset cil_gen_require uml_roles)
                (typeattributeset cil_gen_require user_home_dir_t)
                (typeattributeset cil_gen_require home_root_t)
                (typeattributeset cil_gen_require uml_t)
                (typeattributeset cil_gen_require uml_exec_t)
                (typeattributeset cil_gen_require uml_ro_t)
                (typeattributeset cil_gen_require uml_rw_t)
                (typeattributeset cil_gen_require uml_tmp_t)
                (typeattributeset cil_gen_require uml_tmpfs_t)
                (roleattributeset cil_gen_require uml_roles)
                (roleattributeset uml_roles (sysadm_r ))
                (allow sysadm_application_exec_domain uml_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_application_exec_domain uml_t (process (transition)))
                (dontaudit sysadm_application_exec_domain uml_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_application_exec_domain uml_exec_t process uml_t)
                (allow uml_t sysadm_application_exec_domain (fd (use)))
                (allow uml_t sysadm_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                (allow uml_t sysadm_application_exec_domain (process (sigchld)))
                (allow sysadm_application_exec_domain uml_tmpfs_t (dir (getattr open search)))
                (allow sysadm_application_exec_domain uml_tmpfs_t (sock_file (write getattr append open)))
                (allow sysadm_application_exec_domain uml_t (unix_dgram_socket (sendto)))
                (allow uml_t sysadm_application_exec_domain (unix_dgram_socket (sendto)))
                (allow sysadm_application_exec_domain uml_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_application_exec_domain uml_t (file (ioctl read getattr lock open)))
                (allow sysadm_application_exec_domain uml_t (lnk_file (read getattr)))
                (allow sysadm_application_exec_domain uml_t (process (getattr)))
                (allow sysadm_application_exec_domain uml_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t uml_ro_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t uml_rw_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t uml_tmp_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t uml_ro_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t uml_rw_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t uml_tmp_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t uml_tmpfs_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t uml_ro_t (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename)))
                (allow sysadm_t uml_rw_t (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename)))
                (allow sysadm_t uml_tmpfs_t (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename)))
                (allow sysadm_t uml_ro_t (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t uml_rw_t (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t uml_tmpfs_t (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t uml_ro_t (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t uml_rw_t (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t uml_tmpfs_t (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (typetransition sysadm_t user_home_dir_t dir ".uml" uml_rw_t)
                (optional sysadm_optional_574
                    (typeattributeset cil_gen_require sysadm_systemd_t)
                    (allow sysadm_systemd_t uml_t (dir (ioctl read getattr lock open search)))
                    (allow sysadm_systemd_t uml_t (file (ioctl read getattr lock open)))
                    (allow sysadm_systemd_t uml_t (lnk_file (read getattr)))
                    (allow sysadm_systemd_t uml_t (process (getattr)))
                    (allow sysadm_systemd_t uml_t (process (sigchld sigkill sigstop signull signal)))
                    (allow uml_t sysadm_systemd_t (fd (use)))
                    (allow uml_t sysadm_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                    (allow uml_t sysadm_systemd_t (dir (ioctl read getattr lock open search)))
                    (allow uml_t sysadm_systemd_t (file (ioctl read getattr lock open)))
                    (allow uml_t sysadm_systemd_t (lnk_file (read getattr)))
                    (allow uml_t sysadm_systemd_t (process (getattr)))
                    (allow uml_t sysadm_systemd_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_575
                (typeattributeset cil_gen_require unconfined_t)
                (typeattributeset cil_gen_require unconfined_exec_t)
                (allow sysadm_t unconfined_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t unconfined_t (process (transition)))
                (dontaudit sysadm_t unconfined_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t unconfined_exec_t process unconfined_t)
                (allow unconfined_t sysadm_t (fd (use)))
                (allow unconfined_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow unconfined_t sysadm_t (process (sigchld)))
            )
            (optional sysadm_optional_576
                (roleattributeset cil_gen_require user_r)
                (roleallow sysadm_r user_r)
            )
            (optional sysadm_optional_577
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_spool_t)
                (typeattributeset cil_gen_require uptimed_t)
                (typeattributeset cil_gen_require uptimed_initrc_exec_t)
                (typeattributeset cil_gen_require uptimed_etc_t)
                (typeattributeset cil_gen_require uptimed_spool_t)
                (typeattributeset cil_gen_require uptimed_runtime_t)
                (allow sysadm_t uptimed_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t uptimed_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t uptimed_t (file (ioctl read getattr lock open)))
                (allow sysadm_t uptimed_t (lnk_file (read getattr)))
                (allow sysadm_t uptimed_t (process (getattr)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t uptimed_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t uptimed_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t uptimed_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t uptimed_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t uptimed_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t uptimed_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t uptimed_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t uptimed_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t uptimed_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t uptimed_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t uptimed_etc_t (dir (getattr open search)))
                (allow sysadm_t uptimed_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t uptimed_etc_t (dir (getattr open search)))
                (allow sysadm_t uptimed_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t uptimed_etc_t (dir (getattr open search)))
                (allow sysadm_t uptimed_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t uptimed_etc_t (dir (getattr open search)))
                (allow sysadm_t uptimed_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t uptimed_etc_t (dir (getattr open search)))
                (allow sysadm_t uptimed_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_spool_t (dir (getattr open search)))
                (allow sysadm_t uptimed_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t uptimed_spool_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t uptimed_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t uptimed_spool_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t uptimed_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t uptimed_spool_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t uptimed_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t uptimed_spool_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t uptimed_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t uptimed_spool_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t uptimed_spool_t (dir (getattr open search)))
                (allow sysadm_t uptimed_spool_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t uptimed_spool_t (dir (getattr open search)))
                (allow sysadm_t uptimed_spool_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t uptimed_spool_t (dir (getattr open search)))
                (allow sysadm_t uptimed_spool_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t uptimed_spool_t (dir (getattr open search)))
                (allow sysadm_t uptimed_spool_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t uptimed_spool_t (dir (getattr open search)))
                (allow sysadm_t uptimed_spool_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t uptimed_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t uptimed_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t uptimed_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t uptimed_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t uptimed_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t uptimed_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t uptimed_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t uptimed_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t uptimed_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t uptimed_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t uptimed_runtime_t (dir (getattr open search)))
                (allow sysadm_t uptimed_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t uptimed_runtime_t (dir (getattr open search)))
                (allow sysadm_t uptimed_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t uptimed_runtime_t (dir (getattr open search)))
                (allow sysadm_t uptimed_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t uptimed_runtime_t (dir (getattr open search)))
                (allow sysadm_t uptimed_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t uptimed_runtime_t (dir (getattr open search)))
                (allow sysadm_t uptimed_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_578
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_579
                (roleattributeset cil_gen_require usbmodules_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require usbmodules_t)
                (typeattributeset cil_gen_require usbmodules_exec_t)
                (roleattributeset cil_gen_require usbmodules_roles)
                (roleattributeset usbmodules_roles (sysadm_r ))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t usbmodules_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t usbmodules_t (process (transition)))
                (dontaudit sysadm_t usbmodules_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t usbmodules_exec_t process usbmodules_t)
                (allow usbmodules_t sysadm_t (fd (use)))
                (allow usbmodules_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow usbmodules_t sysadm_t (process (sigchld)))
            )
            (optional sysadm_optional_580
                (type sysadm_consolehelper_t)
                (roletype object_r sysadm_consolehelper_t)
                (type sysadm_userhelper_t)
                (roletype object_r sysadm_userhelper_t)
                (roleattributeset cil_gen_require userhelper_roles)
                (roleattributeset cil_gen_require consolehelper_roles)
                (typeattributeset cil_gen_require domain)
                (typeattributeset domain (sysadm_t ))
                (typeattributeset cil_gen_require security_t)
                (typeattributeset cil_gen_require sysfs_t)
                (typeattributeset cil_gen_require entry_type)
                (typeattributeset entry_type (shell_exec_t bin_t ))
                (typeattributeset cil_gen_require exec_type)
                (typeattributeset exec_type (shell_exec_t bin_t ))
                (typeattributeset cil_gen_require file_type)
                (typeattributeset file_type (shell_exec_t bin_t ))
                (typeattributeset cil_gen_require non_security_file_type)
                (typeattributeset non_security_file_type (shell_exec_t bin_t ))
                (typeattributeset cil_gen_require non_auth_file_type)
                (typeattributeset non_auth_file_type (shell_exec_t bin_t ))
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require ubac_constrained_type)
                (typeattributeset ubac_constrained_type (sysadm_t ))
                (typeattributeset cil_gen_require device_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require cert_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require urandom_device_t)
                (typeattributeset cil_gen_require privfd)
                (typeattributeset cil_gen_require application_exec_type)
                (typeattributeset cil_gen_require unpriv_userdomain)
                (typeattributeset cil_gen_require random_device_t)
                (typeattributeset cil_gen_require nsswitch_domain)
                (typeattributeset nsswitch_domain (sysadm_t ))
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require can_change_object_identity)
                (typeattributeset can_change_object_identity (sysadm_t ))
                (typeattributeset cil_gen_require shadow_t)
                (typeattributeset cil_gen_require userhelper_exec_t)
                (typeattributeset cil_gen_require application_domain_type)
                (typeattributeset cil_gen_require chkpwd_t)
                (typeattributeset cil_gen_require chkpwd_exec_t)
                (typeattributeset cil_gen_require auth_cache_t)
                (typeattributeset cil_gen_require faillog_t)
                (typeattributeset cil_gen_require can_change_process_role)
                (typeattributeset cil_gen_require can_read_shadow_passwords)
                (typeattributeset cil_gen_require pam_domain)
                (typeattributeset cil_gen_require userhelper_type)
                (typeattributeset cil_gen_require consolehelper_type)
                (typeattributeset cil_gen_require consolehelper_exec_t)
                (typeattributeset cil_gen_require can_change_process_identity)
                (roleattributeset cil_gen_require userhelper_roles)
                (roleattributeset userhelper_roles (sysadm_r ))
                (roletype userhelper_roles sysadm_userhelper_t)
                (roleattributeset cil_gen_require consolehelper_roles)
                (roleattributeset consolehelper_roles (sysadm_r ))
                (roletype consolehelper_roles sysadm_consolehelper_t)
                (typeattributeset cil_gen_require non_auth_file_type)
                (typeattributeset non_auth_file_type (userhelper_exec_t consolehelper_exec_t ))
                (typeattributeset cil_gen_require file_type)
                (typeattributeset file_type (userhelper_exec_t consolehelper_exec_t ))
                (typeattributeset cil_gen_require domain)
                (typeattributeset domain (sysadm_consolehelper_t sysadm_userhelper_t ))
                (typeattributeset cil_gen_require pam_domain)
                (typeattributeset pam_domain (sysadm_consolehelper_t ))
                (typeattributeset cil_gen_require application_domain_type)
                (typeattributeset application_domain_type (sysadm_consolehelper_t sysadm_userhelper_t ))
                (typeattributeset cil_gen_require can_change_process_identity)
                (typeattributeset can_change_process_identity (sysadm_userhelper_t ))
                (typeattributeset cil_gen_require can_read_shadow_passwords)
                (typeattributeset can_read_shadow_passwords (sysadm_consolehelper_t ))
                (typeattributeset cil_gen_require can_change_process_role)
                (typeattributeset can_change_process_role (sysadm_userhelper_t ))
                (typeattributeset cil_gen_require can_change_object_identity)
                (typeattributeset can_change_object_identity (sysadm_userhelper_t ))
                (typeattributeset cil_gen_require consolehelper_type)
                (typeattributeset consolehelper_type (sysadm_consolehelper_t ))
                (typeattributeset cil_gen_require nsswitch_domain)
                (typeattributeset nsswitch_domain (sysadm_consolehelper_t sysadm_userhelper_t ))
                (typeattributeset cil_gen_require userhelper_type)
                (typeattributeset userhelper_type (sysadm_userhelper_t ))
                (typeattributeset cil_gen_require entry_type)
                (typeattributeset entry_type (userhelper_exec_t consolehelper_exec_t ))
                (typeattributeset cil_gen_require ubac_constrained_type)
                (typeattributeset ubac_constrained_type (sysadm_consolehelper_t sysadm_userhelper_t ))
                (typeattributeset cil_gen_require exec_type)
                (typeattributeset exec_type (userhelper_exec_t consolehelper_exec_t ))
                (typeattributeset cil_gen_require privfd)
                (typeattributeset privfd (sysadm_userhelper_t ))
                (typeattributeset cil_gen_require application_exec_type)
                (typeattributeset application_exec_type (userhelper_exec_t consolehelper_exec_t ))
                (typeattributeset cil_gen_require non_security_file_type)
                (typeattributeset non_security_file_type (userhelper_exec_t consolehelper_exec_t ))
                (allow sysadm_consolehelper_t consolehelper_exec_t (file (entrypoint)))
                (allow sysadm_consolehelper_t consolehelper_exec_t (file (ioctl read getattr lock map execute open)))
                (allow sysadm_userhelper_t userhelper_exec_t (file (entrypoint)))
                (allow sysadm_userhelper_t userhelper_exec_t (file (ioctl read getattr lock map execute open)))
                (allow sysadm_consolehelper_t sysadm_application_exec_domain (unix_stream_socket (connectto)))
                (allow sysadm_application_exec_domain consolehelper_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_application_exec_domain sysadm_consolehelper_t (process (transition)))
                (dontaudit sysadm_application_exec_domain sysadm_consolehelper_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_application_exec_domain consolehelper_exec_t process sysadm_consolehelper_t)
                (allow sysadm_consolehelper_t sysadm_application_exec_domain (fd (use)))
                (allow sysadm_consolehelper_t sysadm_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                (allow sysadm_consolehelper_t sysadm_application_exec_domain (process (sigchld)))
                (allow sysadm_application_exec_domain sysadm_consolehelper_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_application_exec_domain sysadm_consolehelper_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_application_exec_domain sysadm_consolehelper_t (file (ioctl read getattr lock open)))
                (allow sysadm_application_exec_domain sysadm_consolehelper_t (lnk_file (read getattr)))
                (allow sysadm_application_exec_domain sysadm_consolehelper_t (process (getattr)))
                (allow sysadm_consolehelper_t auth_cache_t (dir (getattr open search)))
                (allow sysadm_consolehelper_t bin_t (dir (getattr open search)))
                (allow sysadm_consolehelper_t bin_t (lnk_file (read getattr)))
                (allow sysadm_consolehelper_t usr_t (dir (getattr open search)))
                (allow sysadm_consolehelper_t chkpwd_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_consolehelper_t chkpwd_t (process (transition)))
                (dontaudit sysadm_consolehelper_t chkpwd_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_consolehelper_t chkpwd_exec_t process chkpwd_t)
                (allow chkpwd_t sysadm_consolehelper_t (fd (use)))
                (allow chkpwd_t sysadm_consolehelper_t (fifo_file (ioctl read write getattr lock append)))
                (allow chkpwd_t sysadm_consolehelper_t (process (sigchld)))
                (dontaudit sysadm_consolehelper_t shadow_t (file (ioctl read getattr lock open)))
                (allow sysadm_consolehelper_t device_t (dir (getattr open search)))
                (allow sysadm_consolehelper_t random_device_t (chr_file (ioctl read getattr lock open)))
                (allow sysadm_consolehelper_t device_t (dir (getattr open search)))
                (allow sysadm_consolehelper_t urandom_device_t (chr_file (ioctl read getattr lock open)))
                (allow sysadm_consolehelper_t var_t (dir (getattr open search)))
                (allow sysadm_consolehelper_t var_log_t (dir (getattr open search)))
                (allow sysadm_consolehelper_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_consolehelper_t faillog_t (file (ioctl read write getattr lock append open)))
                (allow sysadm_consolehelper_t self (capability (audit_write)))
                (allow sysadm_consolehelper_t self (netlink_audit_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown nlmsg_read nlmsg_relay)))
                (allow sysadm_consolehelper_t cert_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_consolehelper_t cert_t (dir (getattr open search)))
                (allow sysadm_consolehelper_t cert_t (file (ioctl read getattr lock open)))
                (allow sysadm_consolehelper_t cert_t (dir (getattr open search)))
                (allow sysadm_consolehelper_t cert_t (lnk_file (read getattr)))
                (allow sysadm_consolehelper_t security_t (filesystem (getattr)))
                (allow sysadm_consolehelper_t sysfs_t (filesystem (getattr)))
                (allow sysadm_consolehelper_t sysfs_t (dir (getattr open search)))
                (allow sysadm_consolehelper_t sysfs_t (dir (getattr open search)))
                (allow sysadm_consolehelper_t sysfs_t (dir (getattr open search)))
                (allow sysadm_consolehelper_t sysfs_t (dir (getattr open search)))
                (allow sysadm_consolehelper_t security_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_consolehelper_t security_t (file (ioctl read getattr map open)))
                (allow sysadm_application_exec_domain userhelper_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_application_exec_domain sysadm_userhelper_t (process (transition)))
                (dontaudit sysadm_application_exec_domain sysadm_userhelper_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_application_exec_domain userhelper_exec_t process sysadm_userhelper_t)
                (allow sysadm_userhelper_t sysadm_application_exec_domain (fd (use)))
                (allow sysadm_userhelper_t sysadm_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                (allow sysadm_userhelper_t sysadm_application_exec_domain (process (sigchld)))
                (dontaudit sysadm_application_exec_domain sysadm_userhelper_t (process (signal)))
                (allow sysadm_userhelper_t bin_t (dir (getattr open search)))
                (allow sysadm_userhelper_t bin_t (lnk_file (read getattr)))
                (allow sysadm_userhelper_t usr_t (dir (getattr open search)))
                (allow sysadm_userhelper_t bin_t (file (ioctl read getattr map execute open)))
                (allow sysadm_userhelper_t sysadm_t (process (transition)))
                (dontaudit sysadm_userhelper_t sysadm_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_userhelper_t bin_t process sysadm_t)
                (allow sysadm_userhelper_t auth_cache_t (dir (getattr open search)))
                (allow sysadm_userhelper_t bin_t (dir (getattr open search)))
                (allow sysadm_userhelper_t bin_t (lnk_file (read getattr)))
                (allow sysadm_userhelper_t usr_t (dir (getattr open search)))
                (allow sysadm_userhelper_t chkpwd_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_userhelper_t chkpwd_t (process (transition)))
                (dontaudit sysadm_userhelper_t chkpwd_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_userhelper_t chkpwd_exec_t process chkpwd_t)
                (allow chkpwd_t sysadm_userhelper_t (fd (use)))
                (allow chkpwd_t sysadm_userhelper_t (fifo_file (ioctl read write getattr lock append)))
                (allow chkpwd_t sysadm_userhelper_t (process (sigchld)))
                (dontaudit sysadm_userhelper_t shadow_t (file (ioctl read getattr lock open)))
                (allow sysadm_userhelper_t device_t (dir (getattr open search)))
                (allow sysadm_userhelper_t random_device_t (chr_file (ioctl read getattr lock open)))
                (allow sysadm_userhelper_t device_t (dir (getattr open search)))
                (allow sysadm_userhelper_t urandom_device_t (chr_file (ioctl read getattr lock open)))
                (allow sysadm_userhelper_t var_t (dir (getattr open search)))
                (allow sysadm_userhelper_t var_log_t (dir (getattr open search)))
                (allow sysadm_userhelper_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_userhelper_t faillog_t (file (ioctl read write getattr lock append open)))
                (allow sysadm_userhelper_t self (capability (audit_write)))
                (allow sysadm_userhelper_t self (netlink_audit_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown nlmsg_read nlmsg_relay)))
                (allow sysadm_userhelper_t cert_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_userhelper_t cert_t (dir (getattr open search)))
                (allow sysadm_userhelper_t cert_t (file (ioctl read getattr lock open)))
                (allow sysadm_userhelper_t cert_t (dir (getattr open search)))
                (allow sysadm_userhelper_t cert_t (lnk_file (read getattr)))
                (allow sysadm_userhelper_t bin_t (dir (getattr open search)))
                (allow sysadm_userhelper_t bin_t (lnk_file (read getattr)))
                (allow sysadm_userhelper_t usr_t (dir (getattr open search)))
                (allow sysadm_userhelper_t bin_t (file (ioctl read getattr map execute open)))
                (allow sysadm_userhelper_t unpriv_userdomain (process (transition)))
                (dontaudit sysadm_userhelper_t unpriv_userdomain (process (noatsecure siginh rlimitinh)))
                (allow unpriv_userdomain sysadm_userhelper_t (fd (use)))
                (allow unpriv_userdomain sysadm_userhelper_t (fifo_file (ioctl read write getattr lock append)))
                (allow unpriv_userdomain sysadm_userhelper_t (process (sigchld)))
                (allow sysadm_userhelper_t entry_type (file (ioctl read getattr map execute open)))
                (allow sysadm_userhelper_t unpriv_userdomain (process (transition)))
                (dontaudit sysadm_userhelper_t unpriv_userdomain (process (noatsecure siginh rlimitinh)))
                (allow unpriv_userdomain sysadm_userhelper_t (fd (use)))
                (allow unpriv_userdomain sysadm_userhelper_t (fifo_file (ioctl read write getattr lock append)))
                (allow unpriv_userdomain sysadm_userhelper_t (process (sigchld)))
                (optional sysadm_optional_581
                    (typeattributeset cil_gen_require init_t)
                    (allow sysadm_consolehelper_t init_t (process (sigchld)))
                    (allow sysadm_consolehelper_t init_t (process (signull)))
                    (optional sysadm_optional_582
                        (typeattributeset cil_gen_require rpm_t)
                        (allow sysadm_consolehelper_t rpm_t (fd (use)))
                        (allow sysadm_consolehelper_t rpm_t (fifo_file (ioctl read getattr lock open)))
                    )
                    (optional sysadm_optional_583
                        (typeattributeset cil_gen_require security_t)
                        (typeattributeset cil_gen_require sysfs_t)
                        (dontaudit sysadm_consolehelper_t security_t (filesystem (getattr)))
                        (dontaudit sysadm_consolehelper_t sysfs_t (filesystem (getattr)))
                        (dontaudit sysadm_consolehelper_t sysfs_t (dir (getattr open search)))
                        (dontaudit sysadm_consolehelper_t security_t (dir (getattr open search)))
                        (dontaudit sysadm_consolehelper_t security_t (file (ioctl read getattr lock open)))
                        (optional sysadm_optional_584
                            (typeattributeset cil_gen_require selinux_config_t)
                            (dontaudit sysadm_consolehelper_t selinux_config_t (dir (getattr open search)))
                            (dontaudit sysadm_consolehelper_t selinux_config_t (file (ioctl read getattr lock open)))
                            (optional sysadm_optional_585
                                (typeattributeset cil_gen_require init_t)
                                (allow sysadm_userhelper_t init_t (process (sigchld)))
                                (allow sysadm_userhelper_t init_t (process (signull)))
                                (optional sysadm_optional_586
                                    (typeattributeset cil_gen_require rpm_t)
                                    (allow sysadm_userhelper_t rpm_t (fd (use)))
                                    (allow sysadm_userhelper_t rpm_t (fifo_file (ioctl read getattr lock open)))
                                )
                                (optional sysadm_optional_587
                                    (typeattributeset cil_gen_require security_t)
                                    (typeattributeset cil_gen_require sysfs_t)
                                    (dontaudit sysadm_userhelper_t security_t (filesystem (getattr)))
                                    (dontaudit sysadm_userhelper_t sysfs_t (filesystem (getattr)))
                                    (dontaudit sysadm_userhelper_t sysfs_t (dir (getattr open search)))
                                    (dontaudit sysadm_userhelper_t security_t (dir (getattr open search)))
                                    (dontaudit sysadm_userhelper_t security_t (file (ioctl read getattr lock open)))
                                    (optional sysadm_optional_588
                                        (typeattributeset cil_gen_require selinux_config_t)
                                        (dontaudit sysadm_userhelper_t selinux_config_t (dir (getattr open search)))
                                        (dontaudit sysadm_userhelper_t selinux_config_t (file (ioctl read getattr lock open)))
                                        (optional sysadm_optional_589
                                            (typeattributeset cil_gen_require etc_t)
                                            (typeattributeset cil_gen_require krb5_keytab_t)
                                            (allow sysadm_consolehelper_t etc_t (dir (getattr open search)))
                                            (allow sysadm_consolehelper_t krb5_keytab_t (file (ioctl read getattr lock open)))
                                        )
                                        (optional sysadm_optional_590
                                            (typeattributeset cil_gen_require var_run_t)
                                            (typeattributeset cil_gen_require var_t)
                                            (typeattributeset cil_gen_require pcscd_t)
                                            (typeattributeset cil_gen_require pcscd_runtime_t)
                                            (allow sysadm_consolehelper_t var_run_t (lnk_file (read getattr)))
                                            (allow sysadm_consolehelper_t var_t (dir (getattr open search)))
                                            (allow sysadm_consolehelper_t var_run_t (dir (getattr open search)))
                                            (allow sysadm_consolehelper_t pcscd_runtime_t (dir (getattr open search)))
                                            (allow sysadm_consolehelper_t pcscd_runtime_t (file (ioctl read getattr lock open)))
                                            (allow sysadm_consolehelper_t var_run_t (lnk_file (read getattr)))
                                            (allow sysadm_consolehelper_t var_t (dir (getattr open search)))
                                            (allow sysadm_consolehelper_t var_run_t (dir (getattr open search)))
                                            (allow sysadm_consolehelper_t pcscd_runtime_t (dir (getattr open search)))
                                            (allow sysadm_consolehelper_t pcscd_runtime_t (sock_file (write getattr append open)))
                                            (allow sysadm_consolehelper_t pcscd_t (unix_stream_socket (connectto)))
                                            (allow pcscd_t sysadm_consolehelper_t (dir (ioctl read getattr lock open search)))
                                            (allow pcscd_t sysadm_consolehelper_t (file (ioctl read getattr lock open)))
                                        )
                                        (optional sysadm_optional_591
                                            (typeattributeset cil_gen_require var_run_t)
                                            (typeattributeset cil_gen_require var_t)
                                            (typeattributeset cil_gen_require var_lib_t)
                                            (typeattributeset cil_gen_require system_dbusd_t)
                                            (typeattributeset cil_gen_require session_dbusd_tmp_t)
                                            (typeattributeset cil_gen_require dbusd_system_bus_client)
                                            (typeattributeset cil_gen_require system_dbusd_runtime_t)
                                            (typeattributeset cil_gen_require system_dbusd_var_lib_t)
                                            (typeattributeset cil_gen_require dbusd_etc_t)
                                            (typeattributeset cil_gen_require dbusd_system_bus_client)
                                            (typeattributeset dbusd_system_bus_client (sysadm_consolehelper_t ))
                                            (allow sysadm_consolehelper_t system_dbusd_t (dbus (send_msg)))
                                            (allow sysadm_consolehelper_t self (dbus (send_msg)))
                                            (allow system_dbusd_t sysadm_consolehelper_t (dbus (send_msg)))
                                            (allow sysadm_consolehelper_t var_t (dir (getattr open search)))
                                            (allow sysadm_consolehelper_t var_lib_t (dir (getattr open search)))
                                            (allow sysadm_consolehelper_t system_dbusd_var_lib_t (dir (getattr open search)))
                                            (allow sysadm_consolehelper_t system_dbusd_var_lib_t (file (ioctl read getattr lock open)))
                                            (allow sysadm_consolehelper_t system_dbusd_var_lib_t (dir (getattr open search)))
                                            (allow sysadm_consolehelper_t system_dbusd_var_lib_t (lnk_file (read getattr)))
                                            (allow sysadm_consolehelper_t session_dbusd_tmp_t (dir (getattr open search)))
                                            (allow sysadm_consolehelper_t session_dbusd_tmp_t (sock_file (read write getattr append open)))
                                            (allow sysadm_consolehelper_t var_run_t (lnk_file (read getattr)))
                                            (allow sysadm_consolehelper_t var_t (dir (getattr open search)))
                                            (allow sysadm_consolehelper_t var_run_t (dir (getattr open search)))
                                            (allow sysadm_consolehelper_t system_dbusd_runtime_t (dir (getattr open search)))
                                            (allow sysadm_consolehelper_t system_dbusd_runtime_t (sock_file (write getattr append open)))
                                            (allow sysadm_consolehelper_t system_dbusd_t (unix_stream_socket (connectto)))
                                            (allow sysadm_consolehelper_t dbusd_etc_t (dir (ioctl read getattr lock open search)))
                                            (allow sysadm_consolehelper_t dbusd_etc_t (file (ioctl read getattr lock open)))
                                            (allow sysadm_consolehelper_t system_dbusd_runtime_t (dir (ioctl read getattr lock open search)))
                                            (allow sysadm_consolehelper_t system_dbusd_runtime_t (sock_file (read)))
                                            (allow sysadm_consolehelper_t system_dbusd_var_lib_t (dir (getattr open search)))
                                            (allow sysadm_consolehelper_t system_dbusd_var_lib_t (lnk_file (read getattr)))
                                            (optional sysadm_optional_592
                                                (typeattributeset cil_gen_require fprintd_t)
                                                (allow sysadm_consolehelper_t fprintd_t (dbus (send_msg)))
                                                (allow fprintd_t sysadm_consolehelper_t (dbus (send_msg)))
                                            )
                                            (optional sysadm_optional_593
                                                (typeattributeset cil_gen_require systemd_logind_t)
                                                (typeattributeset cil_gen_require systemd_sessions_runtime_t)
                                                (allow sysadm_consolehelper_t systemd_logind_t (dbus (send_msg)))
                                                (allow systemd_logind_t sysadm_consolehelper_t (dbus (send_msg)))
                                                (allow sysadm_consolehelper_t systemd_logind_t (fd (use)))
                                                (allow sysadm_consolehelper_t systemd_sessions_runtime_t (fifo_file (write)))
                                                (allow systemd_logind_t sysadm_consolehelper_t (process (signal)))
                                            )
                                        )
                                        (optional sysadm_optional_594
                                            (typeattributeset cil_gen_require security_t)
                                            (typeattributeset cil_gen_require sysfs_t)
                                            (typeattributeset cil_gen_require selinux_config_t)
                                            (typeattributeset cil_gen_require etc_t)
                                            (typeattributeset cil_gen_require user_home_dir_t)
                                            (typeattributeset cil_gen_require home_root_t)
                                            (typeattributeset cil_gen_require tmp_t)
                                            (typeattributeset cil_gen_require krb5_host_rcache_t)
                                            (typeattributeset cil_gen_require krb5_conf_t)
                                            (typeattributeset cil_gen_require krb5_home_t)
                                            (typeattributeset cil_gen_require default_context_t)
                                            (typeattributeset cil_gen_require file_context_t)
                                            (typeattributeset cil_gen_require can_change_object_identity)
                                            (typeattributeset can_change_object_identity (sysadm_t ))
                                            (typeattributeset cil_gen_require can_change_object_identity)
                                            (typeattributeset can_change_object_identity (sysadm_consolehelper_t ))
                                            (allow sysadm_consolehelper_t etc_t (dir (getattr open search)))
                                            (allow sysadm_consolehelper_t krb5_conf_t (file (ioctl read getattr lock open)))
                                            (allow sysadm_consolehelper_t user_home_dir_t (dir (getattr open search)))
                                            (allow sysadm_consolehelper_t home_root_t (dir (getattr open search)))
                                            (allow sysadm_consolehelper_t home_root_t (lnk_file (read getattr)))
                                            (allow sysadm_consolehelper_t krb5_home_t (file (ioctl read getattr lock open)))
                                            (booleanif (allow_kerberos)
                                                (true
                                                    (allow sysadm_consolehelper_t krb5_host_rcache_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                                                    (allow sysadm_consolehelper_t tmp_t (dir (getattr open search)))
                                                    (allow sysadm_consolehelper_t file_context_t (file (map)))
                                                    (allow sysadm_consolehelper_t file_context_t (file (ioctl read getattr lock open)))
                                                    (allow sysadm_consolehelper_t file_context_t (dir (getattr open search)))
                                                    (allow sysadm_consolehelper_t selinux_config_t (dir (getattr open search)))
                                                    (allow sysadm_consolehelper_t default_context_t (dir (getattr open search)))
                                                    (allow sysadm_consolehelper_t etc_t (dir (getattr open search)))
                                                    (allow sysadm_consolehelper_t security_t (security (check_context)))
                                                    (allow sysadm_consolehelper_t security_t (file (ioctl read write getattr map open)))
                                                    (allow sysadm_consolehelper_t security_t (dir (ioctl read getattr lock open search)))
                                                    (allow sysadm_consolehelper_t sysfs_t (dir (getattr open search)))
                                                    (allow sysadm_consolehelper_t sysfs_t (dir (getattr open search)))
                                                    (allow sysadm_consolehelper_t self (process (setfscreate)))
                                                )
                                            )
                                        )
                                        (optional sysadm_optional_595
                                            (typeattributeset cil_gen_require session_bus_type)
                                            (allow sysadm_consolehelper_t session_bus_type (dbus (acquire_svc)))
                                            (optional sysadm_optional_596
                                                (typeattributeset cil_gen_require consolehelper_type)
                                                (allow sysadm_application_exec_domain consolehelper_type (dbus (send_msg)))
                                                (allow consolehelper_type sysadm_application_exec_domain (dbus (send_msg)))
                                            )
                                        )
                                        (optional sysadm_optional_597
                                            (typeattributeset cil_gen_require sysadm_systemd_t)
                                            (allow sysadm_systemd_t sysadm_consolehelper_t (dir (ioctl read getattr lock open search)))
                                            (allow sysadm_systemd_t sysadm_consolehelper_t (file (ioctl read getattr lock open)))
                                            (allow sysadm_systemd_t sysadm_consolehelper_t (lnk_file (read getattr)))
                                            (allow sysadm_systemd_t sysadm_consolehelper_t (process (getattr)))
                                            (allow sysadm_systemd_t sysadm_consolehelper_t (process (sigchld sigkill sigstop signull signal)))
                                            (allow sysadm_consolehelper_t sysadm_systemd_t (fd (use)))
                                            (allow sysadm_consolehelper_t sysadm_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                                            (allow sysadm_consolehelper_t sysadm_systemd_t (dir (ioctl read getattr lock open search)))
                                            (allow sysadm_consolehelper_t sysadm_systemd_t (file (ioctl read getattr lock open)))
                                            (allow sysadm_consolehelper_t sysadm_systemd_t (lnk_file (read getattr)))
                                            (allow sysadm_consolehelper_t sysadm_systemd_t (process (getattr)))
                                            (allow sysadm_consolehelper_t sysadm_systemd_t (process (sigchld)))
                                        )
                                        (optional sysadm_optional_598
                                            (typeattributeset cil_gen_require etc_t)
                                            (typeattributeset cil_gen_require krb5_keytab_t)
                                            (allow sysadm_userhelper_t etc_t (dir (getattr open search)))
                                            (allow sysadm_userhelper_t krb5_keytab_t (file (ioctl read getattr lock open)))
                                        )
                                        (optional sysadm_optional_599
                                            (typeattributeset cil_gen_require var_run_t)
                                            (typeattributeset cil_gen_require var_t)
                                            (typeattributeset cil_gen_require pcscd_t)
                                            (typeattributeset cil_gen_require pcscd_runtime_t)
                                            (allow sysadm_userhelper_t var_run_t (lnk_file (read getattr)))
                                            (allow sysadm_userhelper_t var_t (dir (getattr open search)))
                                            (allow sysadm_userhelper_t var_run_t (dir (getattr open search)))
                                            (allow sysadm_userhelper_t pcscd_runtime_t (dir (getattr open search)))
                                            (allow sysadm_userhelper_t pcscd_runtime_t (file (ioctl read getattr lock open)))
                                            (allow sysadm_userhelper_t var_run_t (lnk_file (read getattr)))
                                            (allow sysadm_userhelper_t var_t (dir (getattr open search)))
                                            (allow sysadm_userhelper_t var_run_t (dir (getattr open search)))
                                            (allow sysadm_userhelper_t pcscd_runtime_t (dir (getattr open search)))
                                            (allow sysadm_userhelper_t pcscd_runtime_t (sock_file (write getattr append open)))
                                            (allow sysadm_userhelper_t pcscd_t (unix_stream_socket (connectto)))
                                            (allow pcscd_t sysadm_userhelper_t (dir (ioctl read getattr lock open search)))
                                            (allow pcscd_t sysadm_userhelper_t (file (ioctl read getattr lock open)))
                                        )
                                        (optional sysadm_optional_600
                                            (typeattributeset cil_gen_require sysadm_t)
                                            (roletype system_r sysadm_t)
                                            (roletype sysadm_r sysadm_t)
                                            (typeattributeset cil_gen_require entry_type)
                                            (typeattributeset entry_type (shell_exec_t bin_t ))
                                            (typeattributeset cil_gen_require bin_t)
                                            (typeattributeset cil_gen_require usr_t)
                                            (booleanif (secure_mode)
                                                (false
                                                    (allow sysadm_t sysadm_userhelper_t (process (sigchld)))
                                                    (allow sysadm_t sysadm_userhelper_t (fifo_file (ioctl read write getattr lock append)))
                                                    (allow sysadm_t sysadm_userhelper_t (fd (use)))
                                                    (dontaudit sysadm_userhelper_t sysadm_t (process (noatsecure siginh rlimitinh)))
                                                    (allow sysadm_userhelper_t sysadm_t (process (transition)))
                                                    (allow sysadm_userhelper_t entry_type (file (ioctl read getattr map execute open)))
                                                    (allow sysadm_t sysadm_userhelper_t (process (sigchld)))
                                                    (allow sysadm_t sysadm_userhelper_t (fifo_file (ioctl read write getattr lock append)))
                                                    (allow sysadm_t sysadm_userhelper_t (fd (use)))
                                                    (dontaudit sysadm_userhelper_t sysadm_t (process (noatsecure siginh rlimitinh)))
                                                    (allow sysadm_userhelper_t sysadm_t (process (transition)))
                                                    (allow sysadm_userhelper_t bin_t (file (ioctl read getattr map execute open)))
                                                    (allow sysadm_userhelper_t usr_t (dir (getattr open search)))
                                                    (allow sysadm_userhelper_t bin_t (lnk_file (read getattr)))
                                                    (allow sysadm_userhelper_t bin_t (dir (getattr open search)))
                                                )
                                            )
                                        )
                                        (optional sysadm_optional_601
                                            (typeattributeset cil_gen_require sysadm_systemd_t)
                                            (allow sysadm_systemd_t sysadm_userhelper_t (dir (ioctl read getattr lock open search)))
                                            (allow sysadm_systemd_t sysadm_userhelper_t (file (ioctl read getattr lock open)))
                                            (allow sysadm_systemd_t sysadm_userhelper_t (lnk_file (read getattr)))
                                            (allow sysadm_systemd_t sysadm_userhelper_t (process (getattr)))
                                            (allow sysadm_systemd_t sysadm_userhelper_t (process (sigchld sigkill sigstop signull signal)))
                                            (allow sysadm_userhelper_t sysadm_systemd_t (fd (use)))
                                            (allow sysadm_userhelper_t sysadm_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                                            (allow sysadm_userhelper_t sysadm_systemd_t (dir (ioctl read getattr lock open search)))
                                            (allow sysadm_userhelper_t sysadm_systemd_t (file (ioctl read getattr lock open)))
                                            (allow sysadm_userhelper_t sysadm_systemd_t (lnk_file (read getattr)))
                                            (allow sysadm_userhelper_t sysadm_systemd_t (process (getattr)))
                                            (allow sysadm_userhelper_t sysadm_systemd_t (process (sigchld)))
                                        )
                                    )
                                )
                            )
                        )
                    )
                )
            )
            (optional sysadm_optional_602
                (roleattributeset cil_gen_require sysadm_passwd_roles)
                (roleattributeset cil_gen_require groupadd_roles)
                (roleattributeset cil_gen_require useradd_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require sysadm_passwd_t)
                (typeattributeset cil_gen_require admin_passwd_exec_t)
                (typeattributeset cil_gen_require groupadd_t)
                (typeattributeset cil_gen_require groupadd_exec_t)
                (typeattributeset cil_gen_require useradd_t)
                (typeattributeset cil_gen_require useradd_exec_t)
                (roleattributeset cil_gen_require sysadm_passwd_roles)
                (roleattributeset sysadm_passwd_roles (sysadm_r ))
                (roleattributeset cil_gen_require groupadd_roles)
                (roleattributeset groupadd_roles (sysadm_r ))
                (roleattributeset cil_gen_require useradd_roles)
                (roleattributeset useradd_roles (sysadm_r ))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t admin_passwd_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t sysadm_passwd_t (process (transition)))
                (dontaudit sysadm_t sysadm_passwd_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t admin_passwd_exec_t process sysadm_passwd_t)
                (allow sysadm_passwd_t sysadm_t (fd (use)))
                (allow sysadm_passwd_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow sysadm_passwd_t sysadm_t (process (sigchld)))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t groupadd_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t groupadd_t (process (transition)))
                (dontaudit sysadm_t groupadd_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t groupadd_exec_t process groupadd_t)
                (allow groupadd_t sysadm_t (fd (use)))
                (allow groupadd_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow groupadd_t sysadm_t (process (sigchld)))
                (dontaudit groupadd_t sysadm_t (tcp_socket (read write)))
                (dontaudit groupadd_t sysadm_t (udp_socket (read write)))
                (dontaudit groupadd_t sysadm_t (rawip_socket (read write)))
                (dontaudit groupadd_t sysadm_t (netlink_socket (read write)))
                (dontaudit groupadd_t sysadm_t (packet_socket (read write)))
                (dontaudit groupadd_t sysadm_t (unix_stream_socket (read write)))
                (dontaudit groupadd_t sysadm_t (unix_dgram_socket (read write)))
                (dontaudit groupadd_t sysadm_t (netlink_route_socket (read write)))
                (dontaudit groupadd_t sysadm_t (netlink_tcpdiag_socket (read write)))
                (dontaudit groupadd_t sysadm_t (netlink_nflog_socket (read write)))
                (dontaudit groupadd_t sysadm_t (netlink_xfrm_socket (read write)))
                (dontaudit groupadd_t sysadm_t (netlink_selinux_socket (read write)))
                (dontaudit groupadd_t sysadm_t (netlink_audit_socket (read write)))
                (dontaudit groupadd_t sysadm_t (netlink_dnrt_socket (read write)))
                (dontaudit groupadd_t sysadm_t (netlink_kobject_uevent_socket (read write)))
                (dontaudit groupadd_t sysadm_t (appletalk_socket (read write)))
                (dontaudit groupadd_t sysadm_t (tun_socket (read write)))
                (dontaudit groupadd_t sysadm_t (netlink_iscsi_socket (read write)))
                (dontaudit groupadd_t sysadm_t (netlink_fib_lookup_socket (read write)))
                (dontaudit groupadd_t sysadm_t (netlink_connector_socket (read write)))
                (dontaudit groupadd_t sysadm_t (netlink_netfilter_socket (read write)))
                (dontaudit groupadd_t sysadm_t (netlink_generic_socket (read write)))
                (dontaudit groupadd_t sysadm_t (netlink_scsitransport_socket (read write)))
                (dontaudit groupadd_t sysadm_t (netlink_rdma_socket (read write)))
                (dontaudit groupadd_t sysadm_t (netlink_crypto_socket (read write)))
                (dontaudit groupadd_t sysadm_t (sctp_socket (read write)))
                (dontaudit groupadd_t sysadm_t (icmp_socket (read write)))
                (dontaudit groupadd_t sysadm_t (ax25_socket (read write)))
                (dontaudit groupadd_t sysadm_t (ipx_socket (read write)))
                (dontaudit groupadd_t sysadm_t (netrom_socket (read write)))
                (dontaudit groupadd_t sysadm_t (atmpvc_socket (read write)))
                (dontaudit groupadd_t sysadm_t (x25_socket (read write)))
                (dontaudit groupadd_t sysadm_t (rose_socket (read write)))
                (dontaudit groupadd_t sysadm_t (decnet_socket (read write)))
                (dontaudit groupadd_t sysadm_t (atmsvc_socket (read write)))
                (dontaudit groupadd_t sysadm_t (rds_socket (read write)))
                (dontaudit groupadd_t sysadm_t (irda_socket (read write)))
                (dontaudit groupadd_t sysadm_t (pppox_socket (read write)))
                (dontaudit groupadd_t sysadm_t (llc_socket (read write)))
                (dontaudit groupadd_t sysadm_t (can_socket (read write)))
                (dontaudit groupadd_t sysadm_t (tipc_socket (read write)))
                (dontaudit groupadd_t sysadm_t (bluetooth_socket (read write)))
                (dontaudit groupadd_t sysadm_t (iucv_socket (read write)))
                (dontaudit groupadd_t sysadm_t (rxrpc_socket (read write)))
                (dontaudit groupadd_t sysadm_t (isdn_socket (read write)))
                (dontaudit groupadd_t sysadm_t (phonet_socket (read write)))
                (dontaudit groupadd_t sysadm_t (ieee802154_socket (read write)))
                (dontaudit groupadd_t sysadm_t (caif_socket (read write)))
                (dontaudit groupadd_t sysadm_t (alg_socket (read write)))
                (dontaudit groupadd_t sysadm_t (nfc_socket (read write)))
                (dontaudit groupadd_t sysadm_t (vsock_socket (read write)))
                (dontaudit groupadd_t sysadm_t (kcm_socket (read write)))
                (dontaudit groupadd_t sysadm_t (qipcrtr_socket (read write)))
                (dontaudit groupadd_t sysadm_t (smc_socket (read write)))
                (dontaudit groupadd_t sysadm_t (xdp_socket (read write)))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t useradd_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t useradd_t (process (transition)))
                (dontaudit sysadm_t useradd_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t useradd_exec_t process useradd_t)
                (allow useradd_t sysadm_t (fd (use)))
                (allow useradd_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow useradd_t sysadm_t (process (sigchld)))
                (dontaudit useradd_t sysadm_t (tcp_socket (read write)))
                (dontaudit useradd_t sysadm_t (udp_socket (read write)))
                (dontaudit useradd_t sysadm_t (rawip_socket (read write)))
                (dontaudit useradd_t sysadm_t (netlink_socket (read write)))
                (dontaudit useradd_t sysadm_t (packet_socket (read write)))
                (dontaudit useradd_t sysadm_t (unix_stream_socket (read write)))
                (dontaudit useradd_t sysadm_t (unix_dgram_socket (read write)))
                (dontaudit useradd_t sysadm_t (netlink_route_socket (read write)))
                (dontaudit useradd_t sysadm_t (netlink_tcpdiag_socket (read write)))
                (dontaudit useradd_t sysadm_t (netlink_nflog_socket (read write)))
                (dontaudit useradd_t sysadm_t (netlink_xfrm_socket (read write)))
                (dontaudit useradd_t sysadm_t (netlink_selinux_socket (read write)))
                (dontaudit useradd_t sysadm_t (netlink_audit_socket (read write)))
                (dontaudit useradd_t sysadm_t (netlink_dnrt_socket (read write)))
                (dontaudit useradd_t sysadm_t (netlink_kobject_uevent_socket (read write)))
                (dontaudit useradd_t sysadm_t (appletalk_socket (read write)))
                (dontaudit useradd_t sysadm_t (tun_socket (read write)))
                (dontaudit useradd_t sysadm_t (netlink_iscsi_socket (read write)))
                (dontaudit useradd_t sysadm_t (netlink_fib_lookup_socket (read write)))
                (dontaudit useradd_t sysadm_t (netlink_connector_socket (read write)))
                (dontaudit useradd_t sysadm_t (netlink_netfilter_socket (read write)))
                (dontaudit useradd_t sysadm_t (netlink_generic_socket (read write)))
                (dontaudit useradd_t sysadm_t (netlink_scsitransport_socket (read write)))
                (dontaudit useradd_t sysadm_t (netlink_rdma_socket (read write)))
                (dontaudit useradd_t sysadm_t (netlink_crypto_socket (read write)))
                (dontaudit useradd_t sysadm_t (sctp_socket (read write)))
                (dontaudit useradd_t sysadm_t (icmp_socket (read write)))
                (dontaudit useradd_t sysadm_t (ax25_socket (read write)))
                (dontaudit useradd_t sysadm_t (ipx_socket (read write)))
                (dontaudit useradd_t sysadm_t (netrom_socket (read write)))
                (dontaudit useradd_t sysadm_t (atmpvc_socket (read write)))
                (dontaudit useradd_t sysadm_t (x25_socket (read write)))
                (dontaudit useradd_t sysadm_t (rose_socket (read write)))
                (dontaudit useradd_t sysadm_t (decnet_socket (read write)))
                (dontaudit useradd_t sysadm_t (atmsvc_socket (read write)))
                (dontaudit useradd_t sysadm_t (rds_socket (read write)))
                (dontaudit useradd_t sysadm_t (irda_socket (read write)))
                (dontaudit useradd_t sysadm_t (pppox_socket (read write)))
                (dontaudit useradd_t sysadm_t (llc_socket (read write)))
                (dontaudit useradd_t sysadm_t (can_socket (read write)))
                (dontaudit useradd_t sysadm_t (tipc_socket (read write)))
                (dontaudit useradd_t sysadm_t (bluetooth_socket (read write)))
                (dontaudit useradd_t sysadm_t (iucv_socket (read write)))
                (dontaudit useradd_t sysadm_t (rxrpc_socket (read write)))
                (dontaudit useradd_t sysadm_t (isdn_socket (read write)))
                (dontaudit useradd_t sysadm_t (phonet_socket (read write)))
                (dontaudit useradd_t sysadm_t (ieee802154_socket (read write)))
                (dontaudit useradd_t sysadm_t (caif_socket (read write)))
                (dontaudit useradd_t sysadm_t (alg_socket (read write)))
                (dontaudit useradd_t sysadm_t (nfc_socket (read write)))
                (dontaudit useradd_t sysadm_t (vsock_socket (read write)))
                (dontaudit useradd_t sysadm_t (kcm_socket (read write)))
                (dontaudit useradd_t sysadm_t (qipcrtr_socket (read write)))
                (dontaudit useradd_t sysadm_t (smc_socket (read write)))
                (dontaudit useradd_t sysadm_t (xdp_socket (read write)))
            )
            (optional sysadm_optional_603
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require var_spool_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require uucpd_t)
                (typeattributeset cil_gen_require uucpd_tmp_t)
                (typeattributeset cil_gen_require uucpd_log_t)
                (typeattributeset cil_gen_require uucpd_spool_t)
                (typeattributeset cil_gen_require uucpd_ro_t)
                (typeattributeset cil_gen_require uucpd_rw_t)
                (typeattributeset cil_gen_require uucpd_runtime_t)
                (typeattributeset cil_gen_require uucpd_initrc_exec_t)
                (allow sysadm_t uucpd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t uucpd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t uucpd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t uucpd_t (lnk_file (read getattr)))
                (allow sysadm_t uucpd_t (process (getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t uucpd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t uucpd_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t uucpd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t uucpd_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t uucpd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t uucpd_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t uucpd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t uucpd_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t uucpd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t uucpd_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t uucpd_log_t (dir (getattr open search)))
                (allow sysadm_t uucpd_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t uucpd_log_t (dir (getattr open search)))
                (allow sysadm_t uucpd_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t uucpd_log_t (dir (getattr open search)))
                (allow sysadm_t uucpd_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t uucpd_log_t (dir (getattr open search)))
                (allow sysadm_t uucpd_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t uucpd_log_t (dir (getattr open search)))
                (allow sysadm_t uucpd_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_spool_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t uucpd_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t uucpd_spool_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t uucpd_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t uucpd_spool_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t uucpd_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t uucpd_spool_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t uucpd_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t uucpd_spool_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t uucpd_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t uucpd_spool_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t uucpd_spool_t (dir (getattr open search)))
                (allow sysadm_t uucpd_spool_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t uucpd_spool_t (dir (getattr open search)))
                (allow sysadm_t uucpd_spool_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t uucpd_spool_t (dir (getattr open search)))
                (allow sysadm_t uucpd_spool_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t uucpd_spool_t (dir (getattr open search)))
                (allow sysadm_t uucpd_spool_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t uucpd_spool_t (dir (getattr open search)))
                (allow sysadm_t uucpd_spool_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t uucpd_ro_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t uucpd_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t uucpd_ro_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t uucpd_rw_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t uucpd_ro_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t uucpd_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t uucpd_ro_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t uucpd_rw_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t uucpd_ro_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t uucpd_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t uucpd_ro_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t uucpd_rw_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t uucpd_ro_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t uucpd_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t uucpd_ro_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t uucpd_rw_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t uucpd_ro_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t uucpd_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t uucpd_ro_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t uucpd_rw_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t uucpd_ro_t (dir (getattr open search)))
                (allow sysadm_t uucpd_rw_t (dir (getattr open search)))
                (allow sysadm_t uucpd_ro_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t uucpd_rw_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t uucpd_ro_t (dir (getattr open search)))
                (allow sysadm_t uucpd_rw_t (dir (getattr open search)))
                (allow sysadm_t uucpd_ro_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t uucpd_rw_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t uucpd_ro_t (dir (getattr open search)))
                (allow sysadm_t uucpd_rw_t (dir (getattr open search)))
                (allow sysadm_t uucpd_ro_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t uucpd_rw_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t uucpd_ro_t (dir (getattr open search)))
                (allow sysadm_t uucpd_rw_t (dir (getattr open search)))
                (allow sysadm_t uucpd_ro_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t uucpd_rw_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t uucpd_ro_t (dir (getattr open search)))
                (allow sysadm_t uucpd_rw_t (dir (getattr open search)))
                (allow sysadm_t uucpd_ro_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t uucpd_rw_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t uucpd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t uucpd_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t uucpd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t uucpd_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t uucpd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t uucpd_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t uucpd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t uucpd_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t uucpd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t uucpd_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t uucpd_tmp_t (dir (getattr open search)))
                (allow sysadm_t uucpd_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t uucpd_tmp_t (dir (getattr open search)))
                (allow sysadm_t uucpd_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t uucpd_tmp_t (dir (getattr open search)))
                (allow sysadm_t uucpd_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t uucpd_tmp_t (dir (getattr open search)))
                (allow sysadm_t uucpd_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t uucpd_tmp_t (dir (getattr open search)))
                (allow sysadm_t uucpd_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t uucpd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t uucpd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t uucpd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t uucpd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t uucpd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t uucpd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t uucpd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t uucpd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t uucpd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t uucpd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t uucpd_runtime_t (dir (getattr open search)))
                (allow sysadm_t uucpd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t uucpd_runtime_t (dir (getattr open search)))
                (allow sysadm_t uucpd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t uucpd_runtime_t (dir (getattr open search)))
                (allow sysadm_t uucpd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t uucpd_runtime_t (dir (getattr open search)))
                (allow sysadm_t uucpd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t uucpd_runtime_t (dir (getattr open search)))
                (allow sysadm_t uucpd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_604
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_605
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require uuidd_t)
                (typeattributeset cil_gen_require uuidd_initrc_exec_t)
                (typeattributeset cil_gen_require uuidd_runtime_t)
                (typeattributeset cil_gen_require uuidd_var_lib_t)
                (allow sysadm_t uuidd_t (process (sigchld sigkill sigstop signull signal)))
                (allow sysadm_t uuidd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t uuidd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t uuidd_t (lnk_file (read getattr)))
                (allow sysadm_t uuidd_t (process (getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t uuidd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t uuidd_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t uuidd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t uuidd_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t uuidd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t uuidd_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t uuidd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t uuidd_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t uuidd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t uuidd_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t uuidd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t uuidd_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t uuidd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t uuidd_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t uuidd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t uuidd_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t uuidd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t uuidd_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t uuidd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t uuidd_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t uuidd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t uuidd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t uuidd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t uuidd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t uuidd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t uuidd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t uuidd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t uuidd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t uuidd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t uuidd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t uuidd_runtime_t (dir (getattr open search)))
                (allow sysadm_t uuidd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t uuidd_runtime_t (dir (getattr open search)))
                (allow sysadm_t uuidd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t uuidd_runtime_t (dir (getattr open search)))
                (allow sysadm_t uuidd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t uuidd_runtime_t (dir (getattr open search)))
                (allow sysadm_t uuidd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t uuidd_runtime_t (dir (getattr open search)))
                (allow sysadm_t uuidd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_606
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_607
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require varnishd_t)
                (typeattributeset cil_gen_require varnishd_var_lib_t)
                (typeattributeset cil_gen_require varnishd_etc_t)
                (typeattributeset cil_gen_require varnishd_runtime_t)
                (typeattributeset cil_gen_require varnishd_tmp_t)
                (typeattributeset cil_gen_require varnishd_initrc_exec_t)
                (allow sysadm_t varnishd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t varnishd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t varnishd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t varnishd_t (lnk_file (read getattr)))
                (allow sysadm_t varnishd_t (process (getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t varnishd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t varnishd_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t varnishd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t varnishd_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t varnishd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t varnishd_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t varnishd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t varnishd_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t varnishd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t varnishd_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t varnishd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t varnishd_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t varnishd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t varnishd_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t varnishd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t varnishd_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t varnishd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t varnishd_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t varnishd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t varnishd_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t varnishd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t varnishd_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t varnishd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t varnishd_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t varnishd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t varnishd_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t varnishd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t varnishd_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t varnishd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t varnishd_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t varnishd_etc_t (dir (getattr open search)))
                (allow sysadm_t varnishd_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t varnishd_etc_t (dir (getattr open search)))
                (allow sysadm_t varnishd_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t varnishd_etc_t (dir (getattr open search)))
                (allow sysadm_t varnishd_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t varnishd_etc_t (dir (getattr open search)))
                (allow sysadm_t varnishd_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t varnishd_etc_t (dir (getattr open search)))
                (allow sysadm_t varnishd_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t varnishd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t varnishd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t varnishd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t varnishd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t varnishd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t varnishd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t varnishd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t varnishd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t varnishd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t varnishd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t varnishd_runtime_t (dir (getattr open search)))
                (allow sysadm_t varnishd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t varnishd_runtime_t (dir (getattr open search)))
                (allow sysadm_t varnishd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t varnishd_runtime_t (dir (getattr open search)))
                (allow sysadm_t varnishd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t varnishd_runtime_t (dir (getattr open search)))
                (allow sysadm_t varnishd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t varnishd_runtime_t (dir (getattr open search)))
                (allow sysadm_t varnishd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t varnishd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t varnishd_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t varnishd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t varnishd_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t varnishd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t varnishd_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t varnishd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t varnishd_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t varnishd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t varnishd_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t varnishd_tmp_t (dir (getattr open search)))
                (allow sysadm_t varnishd_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t varnishd_tmp_t (dir (getattr open search)))
                (allow sysadm_t varnishd_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t varnishd_tmp_t (dir (getattr open search)))
                (allow sysadm_t varnishd_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t varnishd_tmp_t (dir (getattr open search)))
                (allow sysadm_t varnishd_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t varnishd_tmp_t (dir (getattr open search)))
                (allow sysadm_t varnishd_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_608
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_609
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require varnishlog_t)
                (typeattributeset cil_gen_require varnishlog_initrc_exec_t)
                (typeattributeset cil_gen_require varnishlog_log_t)
                (typeattributeset cil_gen_require varnishlog_runtime_t)
                (allow sysadm_t varnishlog_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t varnishlog_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t varnishlog_t (file (ioctl read getattr lock open)))
                (allow sysadm_t varnishlog_t (lnk_file (read getattr)))
                (allow sysadm_t varnishlog_t (process (getattr)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t varnishlog_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t varnishlog_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t varnishlog_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t varnishlog_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t varnishlog_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t varnishlog_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t varnishlog_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t varnishlog_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t varnishlog_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t varnishlog_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t varnishlog_runtime_t (dir (getattr open search)))
                (allow sysadm_t varnishlog_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t varnishlog_runtime_t (dir (getattr open search)))
                (allow sysadm_t varnishlog_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t varnishlog_runtime_t (dir (getattr open search)))
                (allow sysadm_t varnishlog_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t varnishlog_runtime_t (dir (getattr open search)))
                (allow sysadm_t varnishlog_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t varnishlog_runtime_t (dir (getattr open search)))
                (allow sysadm_t varnishlog_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t varnishlog_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t varnishlog_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t varnishlog_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t varnishlog_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t varnishlog_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t varnishlog_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t varnishlog_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t varnishlog_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t varnishlog_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t varnishlog_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t varnishlog_log_t (dir (getattr open search)))
                (allow sysadm_t varnishlog_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t varnishlog_log_t (dir (getattr open search)))
                (allow sysadm_t varnishlog_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t varnishlog_log_t (dir (getattr open search)))
                (allow sysadm_t varnishlog_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t varnishlog_log_t (dir (getattr open search)))
                (allow sysadm_t varnishlog_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t varnishlog_log_t (dir (getattr open search)))
                (allow sysadm_t varnishlog_log_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_610
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_611
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require vdagent_t)
                (typeattributeset cil_gen_require vdagent_runtime_t)
                (typeattributeset cil_gen_require vdagentd_initrc_exec_t)
                (typeattributeset cil_gen_require vdagent_log_t)
                (allow sysadm_t vdagent_t (process (sigchld sigkill sigstop signull signal)))
                (allow sysadm_t vdagent_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t vdagent_t (file (ioctl read getattr lock open)))
                (allow sysadm_t vdagent_t (lnk_file (read getattr)))
                (allow sysadm_t vdagent_t (process (getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t vdagent_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t vdagent_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t vdagent_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t vdagent_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t vdagent_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t vdagent_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t vdagent_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t vdagent_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t vdagent_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t vdagent_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t vdagent_log_t (dir (getattr open search)))
                (allow sysadm_t vdagent_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t vdagent_log_t (dir (getattr open search)))
                (allow sysadm_t vdagent_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t vdagent_log_t (dir (getattr open search)))
                (allow sysadm_t vdagent_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t vdagent_log_t (dir (getattr open search)))
                (allow sysadm_t vdagent_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t vdagent_log_t (dir (getattr open search)))
                (allow sysadm_t vdagent_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t vdagent_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t vdagent_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t vdagent_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t vdagent_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t vdagent_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t vdagent_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t vdagent_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t vdagent_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t vdagent_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t vdagent_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t vdagent_runtime_t (dir (getattr open search)))
                (allow sysadm_t vdagent_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t vdagent_runtime_t (dir (getattr open search)))
                (allow sysadm_t vdagent_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t vdagent_runtime_t (dir (getattr open search)))
                (allow sysadm_t vdagent_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t vdagent_runtime_t (dir (getattr open search)))
                (allow sysadm_t vdagent_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t vdagent_runtime_t (dir (getattr open search)))
                (allow sysadm_t vdagent_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_612
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_613
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require tmpfs_t)
                (typeattributeset cil_gen_require vhostmd_t)
                (typeattributeset cil_gen_require vhostmd_initrc_exec_t)
                (typeattributeset cil_gen_require vhostmd_runtime_t)
                (typeattributeset cil_gen_require vhostmd_tmpfs_t)
                (allow sysadm_t vhostmd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t vhostmd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t vhostmd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t vhostmd_t (lnk_file (read getattr)))
                (allow sysadm_t vhostmd_t (process (getattr)))
                (allow sysadm_t tmpfs_t (dir (getattr open search)))
                (allow sysadm_t vhostmd_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t vhostmd_tmpfs_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t vhostmd_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t vhostmd_tmpfs_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t vhostmd_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t vhostmd_tmpfs_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t vhostmd_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t vhostmd_tmpfs_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t vhostmd_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t vhostmd_tmpfs_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t vhostmd_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t vhostmd_tmpfs_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t vhostmd_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t vhostmd_tmpfs_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t vhostmd_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t vhostmd_tmpfs_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t vhostmd_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t vhostmd_tmpfs_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t vhostmd_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t vhostmd_tmpfs_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t vhostmd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t vhostmd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t vhostmd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t vhostmd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t vhostmd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t vhostmd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t vhostmd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t vhostmd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t vhostmd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t vhostmd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t vhostmd_runtime_t (dir (getattr open search)))
                (allow sysadm_t vhostmd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t vhostmd_runtime_t (dir (getattr open search)))
                (allow sysadm_t vhostmd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t vhostmd_runtime_t (dir (getattr open search)))
                (allow sysadm_t vhostmd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t vhostmd_runtime_t (dir (getattr open search)))
                (allow sysadm_t vhostmd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t vhostmd_runtime_t (dir (getattr open search)))
                (allow sysadm_t vhostmd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_614
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_615
                (typeattributeset cil_gen_require device_t)
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require tmpfs_t)
                (typeattributeset cil_gen_require var_lock_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require virt_domain)
                (typeattributeset cil_gen_require virt_image_type)
                (typeattributeset cil_gen_require virt_tmpfs_type)
                (typeattributeset cil_gen_require virt_ptynode)
                (typeattributeset cil_gen_require virt_tmp_type)
                (typeattributeset cil_gen_require virtd_t)
                (typeattributeset cil_gen_require virtd_initrc_exec_t)
                (typeattributeset cil_gen_require virtd_lxc_t)
                (typeattributeset cil_gen_require virsh_t)
                (typeattributeset cil_gen_require virtd_lxc_runtime_t)
                (typeattributeset cil_gen_require virt_bridgehelper_t)
                (typeattributeset cil_gen_require virt_qmf_t)
                (typeattributeset cil_gen_require virt_var_lib_t)
                (typeattributeset cil_gen_require virt_runtime_t)
                (typeattributeset cil_gen_require virt_tmp_t)
                (typeattributeset cil_gen_require virt_log_t)
                (typeattributeset cil_gen_require virt_lock_t)
                (typeattributeset cil_gen_require svirt_runtime_t)
                (typeattributeset cil_gen_require virt_etc_rw_t)
                (typeattributeset cil_gen_require virt_etc_t)
                (typeattributeset cil_gen_require svirt_cache_t)
                (typeattributeset cil_gen_require virtd_keytab_t)
                (allow sysadm_t virt_domain (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t virtd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t virtd_lxc_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t virsh_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t virt_bridgehelper_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t virt_qmf_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t virt_domain (dir (ioctl read getattr lock open search)))
                (allow sysadm_t virtd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t virt_domain (file (ioctl read getattr lock open)))
                (allow sysadm_t virtd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t virt_domain (lnk_file (read getattr)))
                (allow sysadm_t virtd_t (lnk_file (read getattr)))
                (allow sysadm_t virt_domain (process (getattr)))
                (allow sysadm_t virtd_t (process (getattr)))
                (allow sysadm_t virtd_lxc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t virsh_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t virt_bridgehelper_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t virt_qmf_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t virtd_lxc_t (file (ioctl read getattr lock open)))
                (allow sysadm_t virsh_t (file (ioctl read getattr lock open)))
                (allow sysadm_t virt_bridgehelper_t (file (ioctl read getattr lock open)))
                (allow sysadm_t virt_qmf_t (file (ioctl read getattr lock open)))
                (allow sysadm_t virtd_lxc_t (lnk_file (read getattr)))
                (allow sysadm_t virsh_t (lnk_file (read getattr)))
                (allow sysadm_t virt_bridgehelper_t (lnk_file (read getattr)))
                (allow sysadm_t virt_qmf_t (lnk_file (read getattr)))
                (allow sysadm_t virtd_lxc_t (process (getattr)))
                (allow sysadm_t virsh_t (process (getattr)))
                (allow sysadm_t virt_bridgehelper_t (process (getattr)))
                (allow sysadm_t virt_qmf_t (process (getattr)))
                (allow sysadm_t tmpfs_t (dir (getattr open search)))
                (allow sysadm_t virt_tmpfs_type (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virt_tmpfs_type (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t virt_tmpfs_type (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virt_tmpfs_type (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t virt_tmpfs_type (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virt_tmpfs_type (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t virt_tmpfs_type (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virt_tmpfs_type (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t virt_tmpfs_type (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virt_tmpfs_type (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t virt_tmpfs_type (dir (getattr open search)))
                (allow sysadm_t virt_tmpfs_type (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t virt_tmpfs_type (dir (getattr open search)))
                (allow sysadm_t virt_tmpfs_type (file (getattr relabelfrom relabelto)))
                (allow sysadm_t virt_tmpfs_type (dir (getattr open search)))
                (allow sysadm_t virt_tmpfs_type (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t virt_tmpfs_type (dir (getattr open search)))
                (allow sysadm_t virt_tmpfs_type (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t virt_tmpfs_type (dir (getattr open search)))
                (allow sysadm_t virt_tmpfs_type (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (getattr open search)))
                (allow sysadm_t virt_tmp_type (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virt_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virt_tmp_type (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t virt_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t virt_tmp_type (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virt_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virt_tmp_type (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t virt_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t virt_tmp_type (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virt_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virt_tmp_type (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t virt_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t virt_tmp_type (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virt_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virt_tmp_type (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t virt_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t virt_tmp_type (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virt_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virt_tmp_type (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t virt_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t virt_tmp_type (dir (getattr open search)))
                (allow sysadm_t virt_tmp_t (dir (getattr open search)))
                (allow sysadm_t virt_tmp_type (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t virt_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t virt_tmp_type (dir (getattr open search)))
                (allow sysadm_t virt_tmp_t (dir (getattr open search)))
                (allow sysadm_t virt_tmp_type (file (getattr relabelfrom relabelto)))
                (allow sysadm_t virt_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t virt_tmp_type (dir (getattr open search)))
                (allow sysadm_t virt_tmp_t (dir (getattr open search)))
                (allow sysadm_t virt_tmp_type (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t virt_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t virt_tmp_type (dir (getattr open search)))
                (allow sysadm_t virt_tmp_t (dir (getattr open search)))
                (allow sysadm_t virt_tmp_type (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t virt_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t virt_tmp_type (dir (getattr open search)))
                (allow sysadm_t virt_tmp_t (dir (getattr open search)))
                (allow sysadm_t virt_tmp_type (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t virt_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t virt_etc_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virt_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virtd_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virt_etc_rw_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t virt_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t virtd_keytab_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t virt_etc_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virt_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virtd_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virt_etc_rw_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t virt_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t virtd_keytab_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t virt_etc_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virt_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virtd_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virt_etc_rw_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t virt_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t virtd_keytab_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t virt_etc_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virt_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virtd_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virt_etc_rw_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t virt_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t virtd_keytab_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t virt_etc_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virt_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virtd_keytab_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virt_etc_rw_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t virt_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t virtd_keytab_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t virt_etc_rw_t (dir (getattr open search)))
                (allow sysadm_t virt_etc_t (dir (getattr open search)))
                (allow sysadm_t virtd_keytab_t (dir (getattr open search)))
                (allow sysadm_t virt_etc_rw_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t virt_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t virtd_keytab_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t virt_etc_rw_t (dir (getattr open search)))
                (allow sysadm_t virt_etc_t (dir (getattr open search)))
                (allow sysadm_t virtd_keytab_t (dir (getattr open search)))
                (allow sysadm_t virt_etc_rw_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t virt_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t virtd_keytab_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t virt_etc_rw_t (dir (getattr open search)))
                (allow sysadm_t virt_etc_t (dir (getattr open search)))
                (allow sysadm_t virtd_keytab_t (dir (getattr open search)))
                (allow sysadm_t virt_etc_rw_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t virt_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t virtd_keytab_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t virt_etc_rw_t (dir (getattr open search)))
                (allow sysadm_t virt_etc_t (dir (getattr open search)))
                (allow sysadm_t virtd_keytab_t (dir (getattr open search)))
                (allow sysadm_t virt_etc_rw_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t virt_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t virtd_keytab_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t virt_etc_rw_t (dir (getattr open search)))
                (allow sysadm_t virt_etc_t (dir (getattr open search)))
                (allow sysadm_t virtd_keytab_t (dir (getattr open search)))
                (allow sysadm_t virt_etc_rw_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t virt_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t virtd_keytab_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t virt_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virt_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t virt_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virt_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t virt_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virt_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t virt_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virt_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t virt_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virt_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t virt_log_t (dir (getattr open search)))
                (allow sysadm_t virt_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t virt_log_t (dir (getattr open search)))
                (allow sysadm_t virt_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t virt_log_t (dir (getattr open search)))
                (allow sysadm_t virt_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t virt_log_t (dir (getattr open search)))
                (allow sysadm_t virt_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t virt_log_t (dir (getattr open search)))
                (allow sysadm_t virt_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t virtd_lxc_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virt_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t svirt_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virtd_lxc_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t virt_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t svirt_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t virtd_lxc_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virt_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t svirt_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virtd_lxc_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t virt_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t svirt_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t virtd_lxc_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virt_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t svirt_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virtd_lxc_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t virt_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t svirt_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t virtd_lxc_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virt_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t svirt_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virtd_lxc_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t virt_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t svirt_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t virtd_lxc_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virt_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t svirt_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virtd_lxc_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t virt_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t svirt_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t virtd_lxc_runtime_t (dir (getattr open search)))
                (allow sysadm_t virt_runtime_t (dir (getattr open search)))
                (allow sysadm_t svirt_runtime_t (dir (getattr open search)))
                (allow sysadm_t virtd_lxc_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t virt_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t svirt_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t virtd_lxc_runtime_t (dir (getattr open search)))
                (allow sysadm_t virt_runtime_t (dir (getattr open search)))
                (allow sysadm_t svirt_runtime_t (dir (getattr open search)))
                (allow sysadm_t virtd_lxc_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t virt_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t svirt_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t virtd_lxc_runtime_t (dir (getattr open search)))
                (allow sysadm_t virt_runtime_t (dir (getattr open search)))
                (allow sysadm_t svirt_runtime_t (dir (getattr open search)))
                (allow sysadm_t virtd_lxc_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t virt_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t svirt_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t virtd_lxc_runtime_t (dir (getattr open search)))
                (allow sysadm_t virt_runtime_t (dir (getattr open search)))
                (allow sysadm_t svirt_runtime_t (dir (getattr open search)))
                (allow sysadm_t virtd_lxc_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t virt_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t svirt_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t virtd_lxc_runtime_t (dir (getattr open search)))
                (allow sysadm_t virt_runtime_t (dir (getattr open search)))
                (allow sysadm_t svirt_runtime_t (dir (getattr open search)))
                (allow sysadm_t virtd_lxc_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t virt_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t svirt_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t svirt_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t svirt_cache_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t svirt_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t svirt_cache_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t svirt_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t svirt_cache_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t svirt_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t svirt_cache_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t svirt_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t svirt_cache_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t svirt_cache_t (dir (getattr open search)))
                (allow sysadm_t svirt_cache_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t svirt_cache_t (dir (getattr open search)))
                (allow sysadm_t svirt_cache_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t svirt_cache_t (dir (getattr open search)))
                (allow sysadm_t svirt_cache_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t svirt_cache_t (dir (getattr open search)))
                (allow sysadm_t svirt_cache_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t svirt_cache_t (dir (getattr open search)))
                (allow sysadm_t svirt_cache_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t virt_image_type (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virt_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virt_image_type (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t virt_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t virt_image_type (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virt_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virt_image_type (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t virt_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t virt_image_type (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virt_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virt_image_type (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t virt_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t virt_image_type (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virt_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virt_image_type (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t virt_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t virt_image_type (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virt_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virt_image_type (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t virt_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t virt_image_type (dir (getattr open search)))
                (allow sysadm_t virt_var_lib_t (dir (getattr open search)))
                (allow sysadm_t virt_image_type (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t virt_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t virt_image_type (dir (getattr open search)))
                (allow sysadm_t virt_var_lib_t (dir (getattr open search)))
                (allow sysadm_t virt_image_type (file (getattr relabelfrom relabelto)))
                (allow sysadm_t virt_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t virt_image_type (dir (getattr open search)))
                (allow sysadm_t virt_var_lib_t (dir (getattr open search)))
                (allow sysadm_t virt_image_type (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t virt_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t virt_image_type (dir (getattr open search)))
                (allow sysadm_t virt_var_lib_t (dir (getattr open search)))
                (allow sysadm_t virt_image_type (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t virt_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t virt_image_type (dir (getattr open search)))
                (allow sysadm_t virt_var_lib_t (dir (getattr open search)))
                (allow sysadm_t virt_image_type (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t virt_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_lock_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lock_t (dir (getattr open search)))
                (allow sysadm_t virt_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virt_lock_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t virt_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virt_lock_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t virt_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virt_lock_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t virt_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virt_lock_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t virt_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t virt_lock_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t virt_lock_t (dir (getattr open search)))
                (allow sysadm_t virt_lock_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t virt_lock_t (dir (getattr open search)))
                (allow sysadm_t virt_lock_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t virt_lock_t (dir (getattr open search)))
                (allow sysadm_t virt_lock_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t virt_lock_t (dir (getattr open search)))
                (allow sysadm_t virt_lock_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t virt_lock_t (dir (getattr open search)))
                (allow sysadm_t virt_lock_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t device_t (dir (getattr open search)))
                (allow sysadm_t device_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t device_t (dir (getattr open search)))
                (allow sysadm_t device_t (lnk_file (read getattr)))
                (allow sysadm_t virt_ptynode (chr_file (ioctl read write getattr append open)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t virt_runtime_t (dir (getattr open search)))
                (allow sysadm_t virt_runtime_t (sock_file (write getattr append open)))
                (allow sysadm_t virtd_t (unix_stream_socket (connectto)))
                (optional sysadm_optional_616
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_617
                (typeattributeset cil_gen_require user_home_dir_t)
                (typeattributeset cil_gen_require home_root_t)
                (typeattributeset cil_gen_require vmware_t)
                (typeattributeset cil_gen_require vmware_exec_t)
                (typeattributeset cil_gen_require vmware_file_t)
                (typeattributeset cil_gen_require vmware_conf_t)
                (typeattributeset cil_gen_require vmware_tmp_t)
                (typeattributeset cil_gen_require vmware_tmpfs_t)
                (roleattributeset cil_gen_require sysadm_r)
                (roletype sysadm_r vmware_t)
                (allow sysadm_application_exec_domain vmware_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_application_exec_domain vmware_t (process (transition)))
                (dontaudit sysadm_application_exec_domain vmware_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_application_exec_domain vmware_exec_t process vmware_t)
                (allow vmware_t sysadm_application_exec_domain (fd (use)))
                (allow vmware_t sysadm_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                (allow vmware_t sysadm_application_exec_domain (process (sigchld)))
                (allow sysadm_application_exec_domain vmware_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_application_exec_domain vmware_t (file (ioctl read getattr lock open)))
                (allow sysadm_application_exec_domain vmware_t (lnk_file (read getattr)))
                (allow sysadm_application_exec_domain vmware_t (process (getattr)))
                (allow sysadm_application_exec_domain vmware_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t vmware_file_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t vmware_tmp_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t vmware_file_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t vmware_conf_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t vmware_tmp_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t vmware_tmpfs_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t vmware_tmp_t (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t vmware_tmpfs_t (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t vmware_tmpfs_t (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename)))
                (allow sysadm_t vmware_tmpfs_t (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (typetransition sysadm_t user_home_dir_t dir "vmware" vmware_file_t)
                (typetransition sysadm_t user_home_dir_t dir ".vmware" vmware_file_t)
                (optional sysadm_optional_618
                    (typeattributeset cil_gen_require sysadm_systemd_t)
                    (allow sysadm_systemd_t vmware_t (dir (ioctl read getattr lock open search)))
                    (allow sysadm_systemd_t vmware_t (file (ioctl read getattr lock open)))
                    (allow sysadm_systemd_t vmware_t (lnk_file (read getattr)))
                    (allow sysadm_systemd_t vmware_t (process (getattr)))
                    (allow sysadm_systemd_t vmware_t (process (sigchld sigkill sigstop signull signal)))
                    (allow vmware_t sysadm_systemd_t (fd (use)))
                    (allow vmware_t sysadm_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                    (allow vmware_t sysadm_systemd_t (dir (ioctl read getattr lock open search)))
                    (allow vmware_t sysadm_systemd_t (file (ioctl read getattr lock open)))
                    (allow vmware_t sysadm_systemd_t (lnk_file (read getattr)))
                    (allow vmware_t sysadm_systemd_t (process (getattr)))
                    (allow vmware_t sysadm_systemd_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_619
                (roleattributeset cil_gen_require vnstat_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require vnstatd_t)
                (typeattributeset cil_gen_require vnstatd_initrc_exec_t)
                (typeattributeset cil_gen_require vnstatd_pid_t)
                (typeattributeset cil_gen_require vnstatd_unit_t)
                (typeattributeset cil_gen_require vnstatd_var_lib_t)
                (typeattributeset cil_gen_require vnstat_t)
                (typeattributeset cil_gen_require vnstat_exec_t)
                (roleattributeset cil_gen_require vnstat_roles)
                (roleattributeset vnstat_roles (sysadm_r ))
                (allow sysadm_t vnstatd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t vnstatd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t vnstatd_t (lnk_file (read getattr)))
                (allow sysadm_t vnstatd_t (process (getattr)))
                (allow sysadm_t vnstatd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t vnstatd_pid_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t vnstatd_pid_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t vnstatd_pid_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t vnstatd_pid_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t vnstatd_pid_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t vnstatd_pid_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t vnstatd_pid_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t vnstatd_pid_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t vnstatd_pid_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t vnstatd_pid_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t vnstatd_pid_t (dir (getattr open search)))
                (allow sysadm_t vnstatd_pid_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t vnstatd_pid_t (dir (getattr open search)))
                (allow sysadm_t vnstatd_pid_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t vnstatd_pid_t (dir (getattr open search)))
                (allow sysadm_t vnstatd_pid_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t vnstatd_pid_t (dir (getattr open search)))
                (allow sysadm_t vnstatd_pid_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t vnstatd_pid_t (dir (getattr open search)))
                (allow sysadm_t vnstatd_pid_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t vnstatd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t vnstatd_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t vnstatd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t vnstatd_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t vnstatd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t vnstatd_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t vnstatd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t vnstatd_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t vnstatd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t vnstatd_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t vnstatd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t vnstatd_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t vnstatd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t vnstatd_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t vnstatd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t vnstatd_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t vnstatd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t vnstatd_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t vnstatd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t vnstatd_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t vnstat_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t vnstat_t (process (transition)))
                (dontaudit sysadm_t vnstat_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t vnstat_exec_t process vnstat_t)
                (allow vnstat_t sysadm_t (fd (use)))
                (allow vnstat_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow vnstat_t sysadm_t (process (sigchld)))
                (optional sysadm_optional_620
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_621
                (roleattributeset cil_gen_require vpnc_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require vpnc_t)
                (typeattributeset cil_gen_require vpnc_exec_t)
                (roleattributeset cil_gen_require vpnc_roles)
                (roleattributeset vpnc_roles (sysadm_r ))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t vpnc_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t vpnc_t (process (transition)))
                (dontaudit sysadm_t vpnc_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t vpnc_exec_t process vpnc_t)
                (allow vpnc_t sysadm_t (fd (use)))
                (allow vpnc_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow vpnc_t sysadm_t (process (sigchld)))
            )
            (optional sysadm_optional_622
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require watchdog_t)
                (typeattributeset cil_gen_require watchdog_initrc_exec_t)
                (typeattributeset cil_gen_require watchdog_log_t)
                (typeattributeset cil_gen_require watchdog_runtime_t)
                (allow sysadm_t watchdog_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t watchdog_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t watchdog_t (file (ioctl read getattr lock open)))
                (allow sysadm_t watchdog_t (lnk_file (read getattr)))
                (allow sysadm_t watchdog_t (process (getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t watchdog_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t watchdog_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t watchdog_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t watchdog_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t watchdog_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t watchdog_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t watchdog_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t watchdog_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t watchdog_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t watchdog_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t watchdog_log_t (dir (getattr open search)))
                (allow sysadm_t watchdog_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t watchdog_log_t (dir (getattr open search)))
                (allow sysadm_t watchdog_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t watchdog_log_t (dir (getattr open search)))
                (allow sysadm_t watchdog_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t watchdog_log_t (dir (getattr open search)))
                (allow sysadm_t watchdog_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t watchdog_log_t (dir (getattr open search)))
                (allow sysadm_t watchdog_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t watchdog_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t watchdog_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t watchdog_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t watchdog_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t watchdog_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t watchdog_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t watchdog_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t watchdog_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t watchdog_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t watchdog_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t watchdog_runtime_t (dir (getattr open search)))
                (allow sysadm_t watchdog_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t watchdog_runtime_t (dir (getattr open search)))
                (allow sysadm_t watchdog_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t watchdog_runtime_t (dir (getattr open search)))
                (allow sysadm_t watchdog_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t watchdog_runtime_t (dir (getattr open search)))
                (allow sysadm_t watchdog_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t watchdog_runtime_t (dir (getattr open search)))
                (allow sysadm_t watchdog_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_623
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_624
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require wdmd_t)
                (typeattributeset cil_gen_require wdmd_initrc_exec_t)
                (typeattributeset cil_gen_require wdmd_runtime_t)
                (allow sysadm_t wdmd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t wdmd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t wdmd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t wdmd_t (lnk_file (read getattr)))
                (allow sysadm_t wdmd_t (process (getattr)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t wdmd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t wdmd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t wdmd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t wdmd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t wdmd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t wdmd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t wdmd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t wdmd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t wdmd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t wdmd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t wdmd_runtime_t (dir (getattr open search)))
                (allow sysadm_t wdmd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t wdmd_runtime_t (dir (getattr open search)))
                (allow sysadm_t wdmd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t wdmd_runtime_t (dir (getattr open search)))
                (allow sysadm_t wdmd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t wdmd_runtime_t (dir (getattr open search)))
                (allow sysadm_t wdmd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t wdmd_runtime_t (dir (getattr open search)))
                (allow sysadm_t wdmd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_625
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_626
                (roleattributeset cil_gen_require webalizer_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require webalizer_t)
                (typeattributeset cil_gen_require webalizer_exec_t)
                (roleattributeset cil_gen_require webalizer_roles)
                (roleattributeset webalizer_roles (sysadm_r ))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t webalizer_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t webalizer_t (process (transition)))
                (dontaudit sysadm_t webalizer_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t webalizer_exec_t process webalizer_t)
                (allow webalizer_t sysadm_t (fd (use)))
                (allow webalizer_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow webalizer_t sysadm_t (process (sigchld)))
            )
            (optional sysadm_optional_627
                (roleattributeset cil_gen_require wireguard_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require wireguard_t)
                (typeattributeset cil_gen_require wireguard_etc_t)
                (typeattributeset cil_gen_require wireguard_initrc_exec_t)
                (typeattributeset cil_gen_require wireguard_unit_t)
                (typeattributeset cil_gen_require wireguard_exec_t)
                (roleattributeset cil_gen_require wireguard_roles)
                (roleattributeset wireguard_roles (sysadm_r ))
                (allow sysadm_t wireguard_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t wireguard_t (file (ioctl read getattr lock open)))
                (allow sysadm_t wireguard_t (lnk_file (read getattr)))
                (allow sysadm_t wireguard_t (process (getattr)))
                (allow sysadm_t wireguard_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t wireguard_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t wireguard_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t wireguard_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t wireguard_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t wireguard_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t wireguard_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t wireguard_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t wireguard_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t wireguard_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t wireguard_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t wireguard_etc_t (dir (getattr open search)))
                (allow sysadm_t wireguard_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t wireguard_etc_t (dir (getattr open search)))
                (allow sysadm_t wireguard_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t wireguard_etc_t (dir (getattr open search)))
                (allow sysadm_t wireguard_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t wireguard_etc_t (dir (getattr open search)))
                (allow sysadm_t wireguard_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t wireguard_etc_t (dir (getattr open search)))
                (allow sysadm_t wireguard_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t wireguard_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t wireguard_t (process (transition)))
                (dontaudit sysadm_t wireguard_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t wireguard_exec_t process wireguard_t)
                (allow wireguard_t sysadm_t (fd (use)))
                (allow wireguard_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow wireguard_t sysadm_t (process (sigchld)))
                (optional sysadm_optional_628
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_629
                (roleattributeset cil_gen_require wireshark_roles)
                (typeattributeset cil_gen_require user_home_dir_t)
                (typeattributeset cil_gen_require home_root_t)
                (typeattributeset cil_gen_require wireshark_t)
                (typeattributeset cil_gen_require wireshark_exec_t)
                (typeattributeset cil_gen_require wireshark_home_t)
                (typeattributeset cil_gen_require wireshark_tmp_t)
                (typeattributeset cil_gen_require wireshark_tmpfs_t)
                (roleattributeset cil_gen_require wireshark_roles)
                (roleattributeset wireshark_roles (sysadm_r ))
                (allow sysadm_application_exec_domain wireshark_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_application_exec_domain wireshark_t (process (transition)))
                (dontaudit sysadm_application_exec_domain wireshark_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_application_exec_domain wireshark_exec_t process wireshark_t)
                (allow wireshark_t sysadm_application_exec_domain (fd (use)))
                (allow wireshark_t sysadm_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                (allow wireshark_t sysadm_application_exec_domain (process (sigchld)))
                (allow sysadm_application_exec_domain wireshark_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_application_exec_domain wireshark_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_application_exec_domain wireshark_t (file (ioctl read getattr lock open)))
                (allow sysadm_application_exec_domain wireshark_t (lnk_file (read getattr)))
                (allow sysadm_application_exec_domain wireshark_t (process (getattr)))
                (allow sysadm_t wireshark_home_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t wireshark_tmp_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t wireshark_tmpfs_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t wireshark_home_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t wireshark_tmp_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t wireshark_tmpfs_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t wireshark_home_t (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename)))
                (allow sysadm_t wireshark_tmpfs_t (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename)))
                (allow sysadm_t wireshark_tmpfs_t (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t wireshark_tmpfs_t (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (typetransition sysadm_t user_home_dir_t dir ".wireshark" wireshark_home_t)
                (optional sysadm_optional_630
                    (typeattributeset cil_gen_require sysadm_systemd_t)
                    (allow sysadm_systemd_t wireshark_t (dir (ioctl read getattr lock open search)))
                    (allow sysadm_systemd_t wireshark_t (file (ioctl read getattr lock open)))
                    (allow sysadm_systemd_t wireshark_t (lnk_file (read getattr)))
                    (allow sysadm_systemd_t wireshark_t (process (getattr)))
                    (allow sysadm_systemd_t wireshark_t (process (sigchld sigkill sigstop signull signal)))
                    (allow wireshark_t sysadm_systemd_t (fd (use)))
                    (allow wireshark_t sysadm_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                    (allow wireshark_t sysadm_systemd_t (dir (ioctl read getattr lock open search)))
                    (allow wireshark_t sysadm_systemd_t (file (ioctl read getattr lock open)))
                    (allow wireshark_t sysadm_systemd_t (lnk_file (read getattr)))
                    (allow wireshark_t sysadm_systemd_t (process (getattr)))
                    (allow wireshark_t sysadm_systemd_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_631
                (roleattributeset cil_gen_require vlock_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require vlock_t)
                (typeattributeset cil_gen_require vlock_exec_t)
                (roleattributeset cil_gen_require vlock_roles)
                (roleattributeset vlock_roles (sysadm_r ))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t vlock_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t vlock_t (process (transition)))
                (dontaudit sysadm_t vlock_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t vlock_exec_t process vlock_t)
                (allow vlock_t sysadm_t (fd (use)))
                (allow vlock_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow vlock_t sysadm_t (process (sigchld)))
            )
            (optional sysadm_optional_632
                (roleattributeset cil_gen_require xscreensaver_roles)
                (roleattributeset cil_gen_require xscreensaver_helper_roles)
                (typeattributeset cil_gen_require xscreensaver_t)
                (typeattributeset cil_gen_require xscreensaver_exec_t)
                (typeattributeset cil_gen_require xscreensaver_helper_t)
                (typeattributeset cil_gen_require xscreensaver_config_t)
                (typeattributeset cil_gen_require xscreensaver_tmpfs_t)
                (roleattributeset cil_gen_require xscreensaver_roles)
                (roleattributeset xscreensaver_roles (sysadm_r ))
                (roleattributeset cil_gen_require xscreensaver_helper_roles)
                (roleattributeset xscreensaver_helper_roles (sysadm_r ))
                (allow sysadm_application_exec_domain xscreensaver_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_application_exec_domain xscreensaver_t (process (transition)))
                (dontaudit sysadm_application_exec_domain xscreensaver_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_application_exec_domain xscreensaver_exec_t process xscreensaver_t)
                (allow xscreensaver_t sysadm_application_exec_domain (fd (use)))
                (allow xscreensaver_t sysadm_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                (allow xscreensaver_t sysadm_application_exec_domain (process (sigchld)))
                (allow sysadm_application_exec_domain xscreensaver_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_application_exec_domain xscreensaver_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_application_exec_domain xscreensaver_t (file (ioctl read getattr lock open)))
                (allow sysadm_application_exec_domain xscreensaver_t (lnk_file (read getattr)))
                (allow sysadm_application_exec_domain xscreensaver_t (process (getattr)))
                (allow sysadm_t xscreensaver_config_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t xscreensaver_tmpfs_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t xscreensaver_tmpfs_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow xscreensaver_helper_t sysadm_application_exec_domain (fd (use)))
                (optional sysadm_optional_633
                    (typeattributeset cil_gen_require sysadm_systemd_t)
                    (allow sysadm_systemd_t xscreensaver_t (dir (ioctl read getattr lock open search)))
                    (allow sysadm_systemd_t xscreensaver_t (file (ioctl read getattr lock open)))
                    (allow sysadm_systemd_t xscreensaver_t (lnk_file (read getattr)))
                    (allow sysadm_systemd_t xscreensaver_t (process (getattr)))
                    (allow sysadm_systemd_t xscreensaver_t (process (sigchld sigkill sigstop signull signal)))
                    (allow xscreensaver_t sysadm_systemd_t (fd (use)))
                    (allow xscreensaver_t sysadm_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                    (allow xscreensaver_t sysadm_systemd_t (dir (ioctl read getattr lock open search)))
                    (allow xscreensaver_t sysadm_systemd_t (file (ioctl read getattr lock open)))
                    (allow xscreensaver_t sysadm_systemd_t (lnk_file (read getattr)))
                    (allow xscreensaver_t sysadm_systemd_t (process (getattr)))
                    (allow xscreensaver_t sysadm_systemd_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_634
                (typeattributeset cil_gen_require entry_type)
                (typeattributeset entry_type (shell_exec_t bin_t ))
                (typeattributeset cil_gen_require exec_type)
                (typeattributeset exec_type (shell_exec_t bin_t ))
                (typeattributeset cil_gen_require file_type)
                (typeattributeset file_type (shell_exec_t bin_t ))
                (typeattributeset cil_gen_require non_security_file_type)
                (typeattributeset non_security_file_type (shell_exec_t bin_t ))
                (typeattributeset cil_gen_require non_auth_file_type)
                (typeattributeset non_auth_file_type (shell_exec_t bin_t ))
                (typeattributeset cil_gen_require device_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require lib_t)
                (typeattributeset cil_gen_require fonts_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require user_home_dir_t)
                (typeattributeset cil_gen_require home_root_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require xdm_t)
                (typeattributeset cil_gen_require xsession_log_t)
                (typeattributeset cil_gen_require xauth_home_t)
                (typeattributeset cil_gen_require xauth_t)
                (typeattributeset cil_gen_require xauth_exec_t)
                (typeattributeset cil_gen_require iceauth_home_t)
                (typeattributeset cil_gen_require xserver_t)
                (typeattributeset cil_gen_require xserver_tmp_t)
                (typeattributeset cil_gen_require xserver_tmpfs_t)
                (typeattributeset cil_gen_require user_fonts_t)
                (typeattributeset cil_gen_require user_fonts_cache_t)
                (typeattributeset cil_gen_require user_fonts_config_t)
                (typeattributeset cil_gen_require mesa_shader_cache_t)
                (typeattributeset cil_gen_require iceauth_t)
                (typeattributeset cil_gen_require iceauth_exec_t)
                (typeattributeset cil_gen_require xdm_tmp_t)
                (typeattributeset cil_gen_require xserver_misc_device_t)
                (typeattributeset cil_gen_require power_device_t)
                (typeattributeset cil_gen_require event_device_t)
                (typeattributeset cil_gen_require misc_device_t)
                (typeattributeset cil_gen_require agp_device_t)
                (typeattributeset cil_gen_require dri_device_t)
                (typeattributeset cil_gen_require usbfs_t)
                (typeattributeset cil_gen_require fonts_cache_t)
                (typeattributeset cil_gen_require root_xdrawable_t)
                (typeattributeset cil_gen_require xevent_t)
                (typeattributeset cil_gen_require client_xevent_t)
                (typeattributeset cil_gen_require input_xevent_t)
                (typeattributeset cil_gen_require user_input_xevent_t)
                (typeattributeset cil_gen_require x_domain)
                (typeattributeset cil_gen_require xdrawable_type)
                (typeattributeset cil_gen_require xcolormap_type)
                (typeattributeset cil_gen_require input_xevent_type)
                (typeattributeset cil_gen_require xserver_exec_t)
                (typeattributeset cil_gen_require xserver_unconfined_type)
                (typeattributeset cil_gen_require xsession_exec_t)
                (typeattributeset cil_gen_require xserver_log_t)
                (typeattributeset cil_gen_require xdg_cache_t)
                (typeattributeset cil_gen_require xdm_var_run_t)
                (typeattributeset cil_gen_require xkb_var_lib_t)
                (roleattributeset cil_gen_require sysadm_r)
                (roletype sysadm_r xauth_t)
                (roletype sysadm_r xserver_t)
                (roletype sysadm_r iceauth_t)
                (typeattributeset cil_gen_require x_domain)
                (typeattributeset x_domain (sysadm_t ))
                (typeattributeset cil_gen_require non_auth_file_type)
                (typeattributeset non_auth_file_type (xsession_exec_t ))
                (typeattributeset cil_gen_require file_type)
                (typeattributeset file_type (xsession_exec_t ))
                (typeattributeset cil_gen_require xdrawable_type)
                (typeattributeset xdrawable_type (sysadm_t ))
                (typeattributeset cil_gen_require entry_type)
                (typeattributeset entry_type (xsession_exec_t ))
                (typeattributeset cil_gen_require exec_type)
                (typeattributeset exec_type (xsession_exec_t ))
                (typeattributeset cil_gen_require xserver_unconfined_type)
                (typeattributeset xserver_unconfined_type (sysadm_t ))
                (typeattributeset cil_gen_require xcolormap_type)
                (typeattributeset xcolormap_type (sysadm_t ))
                (typeattributeset cil_gen_require non_security_file_type)
                (typeattributeset non_security_file_type (xsession_exec_t ))
                (allow xserver_t sysadm_t (fd (use)))
                (allow xserver_t sysadm_t (shm (getattr read write associate unix_read unix_write lock)))
                (allow xserver_t sysadm_t (process (signal)))
                (allow sysadm_t user_fonts_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t user_fonts_t (file (ioctl read getattr lock open)))
                (allow sysadm_t user_fonts_config_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t user_fonts_config_t (file (ioctl read getattr lock open)))
                (allow sysadm_t user_fonts_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t user_fonts_cache_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t user_fonts_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t user_fonts_cache_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t xserver_tmp_t (dir (getattr open search)))
                (allow sysadm_t xserver_tmp_t (sock_file (write getattr append open)))
                (allow sysadm_t xserver_t (unix_stream_socket (connectto)))
                (allow sysadm_t tmp_t (dir (getattr open search)))
                (allow sysadm_t xserver_t (fd (use)))
                (allow sysadm_t xserver_t (shm (getattr read associate unix_read)))
                (allow sysadm_t xserver_tmpfs_t (file (ioctl read getattr lock map open)))
                (allow sysadm_t iceauth_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t iceauth_t (file (ioctl read getattr lock open)))
                (allow sysadm_t iceauth_t (lnk_file (read getattr)))
                (allow sysadm_t iceauth_t (process (getattr)))
                (allow sysadm_t iceauth_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t iceauth_t (process (transition)))
                (dontaudit sysadm_t iceauth_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t iceauth_exec_t process iceauth_t)
                (allow iceauth_t sysadm_t (fd (use)))
                (allow iceauth_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow iceauth_t sysadm_t (process (sigchld)))
                (allow sysadm_t iceauth_home_t (file (ioctl read getattr lock open)))
                (allow sysadm_t xauth_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t xauth_t (process (transition)))
                (dontaudit sysadm_t xauth_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t xauth_exec_t process xauth_t)
                (allow xauth_t sysadm_t (fd (use)))
                (allow xauth_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow xauth_t sysadm_t (process (sigchld)))
                (allow sysadm_t xauth_t (process (signal)))
                (allow sysadm_t xauth_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t xauth_t (file (ioctl read getattr lock open)))
                (allow sysadm_t xauth_t (lnk_file (read getattr)))
                (allow sysadm_t xauth_t (process (getattr)))
                (allow sysadm_t xserver_t (process (signal)))
                (allow sysadm_t xauth_home_t (file (ioctl read getattr lock open)))
                (allow sysadm_t xdm_t (fd (use)))
                (allow sysadm_t xdm_t (fifo_file (ioctl read write getattr lock append)))
                (allow sysadm_t xdm_tmp_t (dir (search)))
                (allow sysadm_t xdm_tmp_t (sock_file (read write)))
                (dontaudit sysadm_t xdm_t (tcp_socket (read write)))
                (allow sysadm_t xserver_tmp_t (file (ioctl read getattr lock)))
                (allow sysadm_t device_t (dir (getattr open search)))
                (allow sysadm_t xserver_misc_device_t (chr_file (ioctl read write getattr lock append open)))
                (allow sysadm_t xserver_misc_device_t (chr_file (map)))
                (allow sysadm_t device_t (dir (getattr open search)))
                (allow sysadm_t power_device_t (chr_file (ioctl read write getattr lock append open)))
                (allow sysadm_t device_t (dir (getattr open search)))
                (allow sysadm_t event_device_t (chr_file (ioctl read getattr lock open)))
                (allow sysadm_t device_t (dir (getattr open search)))
                (allow sysadm_t misc_device_t (chr_file (ioctl read getattr lock open)))
                (allow sysadm_t device_t (dir (getattr open search)))
                (allow sysadm_t misc_device_t (chr_file (ioctl write getattr lock append open)))
                (allow sysadm_t device_t (dir (getattr open search)))
                (allow sysadm_t agp_device_t (chr_file (getattr)))
                (dontaudit sysadm_t dri_device_t (chr_file (ioctl read write getattr lock append open)))
                (allow sysadm_t usbfs_t (dir (getattr open search)))
                (allow sysadm_t usbfs_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t usbfs_t (dir (getattr open search)))
                (allow sysadm_t usbfs_t (file (ioctl read write getattr lock append open)))
                (allow sysadm_t usbfs_t (dir (getattr open search)))
                (allow sysadm_t usbfs_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t lib_t (dir (getattr open search)))
                (allow sysadm_t fonts_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t fonts_t (dir (getattr open search)))
                (allow sysadm_t fonts_t (file (ioctl read getattr lock open)))
                (allow sysadm_t fonts_t (file (map)))
                (allow sysadm_t fonts_t (dir (getattr open search)))
                (allow sysadm_t fonts_t (lnk_file (read getattr)))
                (allow sysadm_t fonts_cache_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t fonts_cache_t (dir (getattr open search)))
                (allow sysadm_t fonts_cache_t (file (ioctl read getattr lock open)))
                (allow sysadm_t fonts_cache_t (file (map)))
                (allow sysadm_t fonts_cache_t (dir (getattr open search)))
                (allow sysadm_t fonts_cache_t (lnk_file (read getattr)))
                (allow sysadm_t fonts_t (dir (watch)))
                (typetransition sysadm_t root_xdrawable_t x_drawable sysadm_t)
                (typetransition sysadm_t input_xevent_t x_event user_input_xevent_t)
                (allow sysadm_t user_input_xevent_t (x_event (send)))
                (allow sysadm_t user_input_xevent_t (x_synthetic_event (send)))
                (allow sysadm_t user_input_xevent_t (x_event (receive)))
                (allow sysadm_t user_input_xevent_t (x_synthetic_event (receive)))
                (allow sysadm_t client_xevent_t (x_event (receive)))
                (allow sysadm_t client_xevent_t (x_synthetic_event (receive)))
                (allow sysadm_t xevent_t (x_event (receive)))
                (allow sysadm_t xevent_t (x_synthetic_event (receive)))
                (dontaudit sysadm_t input_xevent_type (x_event (send)))
                (allow sysadm_t xserver_t (process (siginh)))
                (allow sysadm_t xserver_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t xserver_t (process (transition)))
                (dontaudit sysadm_t xserver_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t xserver_exec_t process xserver_t)
                (allow xserver_t sysadm_t (fd (use)))
                (allow xserver_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow xserver_t sysadm_t (process (sigchld)))
                (allow sysadm_t xsession_exec_t (file (entrypoint)))
                (allow sysadm_t xsession_exec_t (file (ioctl read getattr lock map execute open)))
                (dontaudit sysadm_t xserver_log_t (file (ioctl write append)))
                (allow sysadm_t tmp_t (dir (getattr open search)))
                (allow sysadm_t xdm_tmp_t (dir (getattr open search)))
                (allow sysadm_t xdm_tmp_t (sock_file (write getattr append open)))
                (allow sysadm_t xdm_t (unix_stream_socket (connectto)))
                (allow sysadm_t user_fonts_t (dir (ioctl read getattr lock open watch search)))
                (allow sysadm_t user_fonts_t (file (ioctl read getattr lock map open)))
                (allow sysadm_t user_fonts_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t user_fonts_cache_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t user_fonts_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t user_fonts_cache_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t user_fonts_cache_t (file (ioctl read getattr lock map open)))
                (allow sysadm_t user_fonts_config_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t user_fonts_config_t (file (ioctl read getattr lock open)))
                (allow sysadm_t user_home_dir_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_t xdg_cache_t (dir (getattr open search)))
                (allow sysadm_t xdg_cache_t (dir (getattr open search)))
                (allow sysadm_t user_home_dir_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t xdm_var_run_t (dir (getattr open search)))
                (allow sysadm_t xdm_var_run_t (file (ioctl read getattr lock open)))
                (allow sysadm_t tmp_t (dir (getattr open search)))
                (allow sysadm_t xdm_tmp_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t xdm_tmp_t (dir (ioctl write getattr lock open add_name search)))
                (allow sysadm_t xdm_tmp_t (sock_file (create getattr open)))
                (allow sysadm_t xdm_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t xdm_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_t xsession_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t xserver_tmp_t (file (ioctl read write getattr lock append open)))
                (allow sysadm_t iceauth_home_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t iceauth_home_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t xauth_home_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t xauth_home_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t user_fonts_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t user_fonts_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t user_fonts_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t user_fonts_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t user_fonts_t (dir (getattr open search)))
                (allow sysadm_t user_fonts_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t user_fonts_t (dir (getattr open search)))
                (allow sysadm_t user_fonts_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t user_fonts_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t user_fonts_cache_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t user_fonts_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t user_fonts_cache_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t user_fonts_cache_t (dir (getattr open search)))
                (allow sysadm_t user_fonts_cache_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t user_fonts_cache_t (dir (getattr open search)))
                (allow sysadm_t user_fonts_cache_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t user_fonts_config_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t user_fonts_config_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t user_fonts_config_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t user_fonts_config_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t user_fonts_config_t (dir (getattr open search)))
                (allow sysadm_t user_fonts_config_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t user_fonts_config_t (dir (getattr open search)))
                (allow sysadm_t user_fonts_config_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t mesa_shader_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mesa_shader_cache_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t mesa_shader_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mesa_shader_cache_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mesa_shader_cache_t (file (map)))
                (allow sysadm_t mesa_shader_cache_t (dir (getattr open search)))
                (allow sysadm_t mesa_shader_cache_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t mesa_shader_cache_t (dir (getattr open search)))
                (allow sysadm_t mesa_shader_cache_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t xkb_var_lib_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t xkb_var_lib_t (dir (getattr open search)))
                (allow sysadm_t xkb_var_lib_t (file (ioctl read getattr lock open)))
                (allow sysadm_t xkb_var_lib_t (dir (getattr open search)))
                (allow sysadm_t xkb_var_lib_t (lnk_file (read getattr)))
                (allow sysadm_t xkb_var_lib_t (file (map)))
                (allow sysadm_t xdm_t (unix_stream_socket (accept)))
                (typetransition sysadm_t user_home_dir_t file ".ICEauthority" iceauth_home_t)
                (typetransition sysadm_t user_home_dir_t file ".xsession-errors" xsession_log_t)
                (booleanif (xserver_allow_dri)
                    (true
                        (allow sysadm_t dri_device_t (chr_file (map)))
                        (allow sysadm_t dri_device_t (chr_file (ioctl read write getattr lock append open)))
                        (allow sysadm_t device_t (dir (getattr open search)))
                    )
                )
                (booleanif (or (allow_write_xshm) (xserver_client_writes_xserver_tmpfs))
                    (true
                        (allow sysadm_t xserver_tmpfs_t (file (ioctl read write getattr lock append open)))
                        (allow sysadm_t xserver_tmpfs_t (file (ioctl read write getattr lock append open)))
                    )
                )
                (booleanif (allow_write_xshm)
                    (true
                        (allow sysadm_t xserver_t (shm (getattr read write associate unix_read unix_write lock)))
                        (allow sysadm_t xserver_t (shm (getattr read write associate unix_read unix_write lock)))
                    )
                )
                (optional sysadm_optional_635
                    (typeattributeset cil_gen_require sysadm_systemd_t)
                    (allow sysadm_systemd_t iceauth_t (dir (ioctl read getattr lock open search)))
                    (allow sysadm_systemd_t iceauth_t (file (ioctl read getattr lock open)))
                    (allow sysadm_systemd_t iceauth_t (lnk_file (read getattr)))
                    (allow sysadm_systemd_t iceauth_t (process (getattr)))
                    (allow sysadm_systemd_t iceauth_t (process (sigchld sigkill sigstop signull signal)))
                    (allow iceauth_t sysadm_systemd_t (fd (use)))
                    (allow iceauth_t sysadm_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                    (allow iceauth_t sysadm_systemd_t (dir (ioctl read getattr lock open search)))
                    (allow iceauth_t sysadm_systemd_t (file (ioctl read getattr lock open)))
                    (allow iceauth_t sysadm_systemd_t (lnk_file (read getattr)))
                    (allow iceauth_t sysadm_systemd_t (process (getattr)))
                    (allow iceauth_t sysadm_systemd_t (process (sigchld)))
                    (allow sysadm_systemd_t xauth_t (dir (ioctl read getattr lock open search)))
                    (allow sysadm_systemd_t xauth_t (file (ioctl read getattr lock open)))
                    (allow sysadm_systemd_t xauth_t (lnk_file (read getattr)))
                    (allow sysadm_systemd_t xauth_t (process (getattr)))
                    (allow sysadm_systemd_t xauth_t (process (sigchld sigkill sigstop signull signal)))
                    (allow xauth_t sysadm_systemd_t (fd (use)))
                    (allow xauth_t sysadm_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                    (allow xauth_t sysadm_systemd_t (dir (ioctl read getattr lock open search)))
                    (allow xauth_t sysadm_systemd_t (file (ioctl read getattr lock open)))
                    (allow xauth_t sysadm_systemd_t (lnk_file (read getattr)))
                    (allow xauth_t sysadm_systemd_t (process (getattr)))
                    (allow xauth_t sysadm_systemd_t (process (sigchld)))
                    (allow sysadm_systemd_t xserver_t (dir (ioctl read getattr lock open search)))
                    (allow sysadm_systemd_t xserver_t (file (ioctl read getattr lock open)))
                    (allow sysadm_systemd_t xserver_t (lnk_file (read getattr)))
                    (allow sysadm_systemd_t xserver_t (process (getattr)))
                    (allow sysadm_systemd_t xserver_t (process (sigchld sigkill sigstop signull signal)))
                    (allow xserver_t sysadm_systemd_t (fd (use)))
                    (allow xserver_t sysadm_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                    (allow xserver_t sysadm_systemd_t (dir (ioctl read getattr lock open search)))
                    (allow xserver_t sysadm_systemd_t (file (ioctl read getattr lock open)))
                    (allow xserver_t sysadm_systemd_t (lnk_file (read getattr)))
                    (allow xserver_t sysadm_systemd_t (process (getattr)))
                    (allow xserver_t sysadm_systemd_t (process (sigchld)))
                    (optional sysadm_optional_636
                        (typeattributeset cil_gen_require sysadm_systemd_t)
                        (allow sysadm_systemd_t xserver_t (dir (ioctl read getattr lock open search)))
                        (allow sysadm_systemd_t xserver_t (file (ioctl read getattr lock open)))
                        (allow sysadm_systemd_t xserver_t (lnk_file (read getattr)))
                        (allow sysadm_systemd_t xserver_t (process (getattr)))
                        (allow sysadm_systemd_t xserver_t (process (sigchld sigkill sigstop signull signal)))
                        (allow xserver_t sysadm_systemd_t (fd (use)))
                        (allow xserver_t sysadm_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                        (allow xserver_t sysadm_systemd_t (dir (ioctl read getattr lock open search)))
                        (allow xserver_t sysadm_systemd_t (file (ioctl read getattr lock open)))
                        (allow xserver_t sysadm_systemd_t (lnk_file (read getattr)))
                        (allow xserver_t sysadm_systemd_t (process (getattr)))
                        (allow xserver_t sysadm_systemd_t (process (sigchld)))
                    )
                )
                (optional sysadm_optional_637
                    (typeattributeset cil_gen_require user_home_dir_t)
                    (typeattributeset cil_gen_require home_root_t)
                    (typeattributeset cil_gen_require xdg_cache_t)
                    (allow sysadm_t user_home_dir_t (dir (getattr open search)))
                    (allow sysadm_t home_root_t (dir (getattr open search)))
                    (allow sysadm_t home_root_t (lnk_file (read getattr)))
                    (allow sysadm_t xdg_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                    (allow sysadm_t xdg_cache_t (dir (create getattr)))
                    (typetransition sysadm_t xdg_cache_t dir "mesa_shader_cache" mesa_shader_cache_t)
                )
            )
            (optional sysadm_optional_638
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require xfs_t)
                (typeattributeset cil_gen_require xfs_initrc_exec_t)
                (typeattributeset cil_gen_require xfs_runtime_t)
                (typeattributeset cil_gen_require xfs_tmp_t)
                (allow sysadm_t xfs_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t xfs_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t xfs_t (file (ioctl read getattr lock open)))
                (allow sysadm_t xfs_t (lnk_file (read getattr)))
                (allow sysadm_t xfs_t (process (getattr)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t xfs_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t xfs_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t xfs_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t xfs_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t xfs_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t xfs_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t xfs_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t xfs_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t xfs_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t xfs_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t xfs_runtime_t (dir (getattr open search)))
                (allow sysadm_t xfs_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t xfs_runtime_t (dir (getattr open search)))
                (allow sysadm_t xfs_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t xfs_runtime_t (dir (getattr open search)))
                (allow sysadm_t xfs_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t xfs_runtime_t (dir (getattr open search)))
                (allow sysadm_t xfs_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t xfs_runtime_t (dir (getattr open search)))
                (allow sysadm_t xfs_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (getattr open search)))
                (allow sysadm_t xfs_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t xfs_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t xfs_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t xfs_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t xfs_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t xfs_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t xfs_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t xfs_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t xfs_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t xfs_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t xfs_tmp_t (dir (getattr open search)))
                (allow sysadm_t xfs_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t xfs_tmp_t (dir (getattr open search)))
                (allow sysadm_t xfs_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t xfs_tmp_t (dir (getattr open search)))
                (allow sysadm_t xfs_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t xfs_tmp_t (dir (getattr open search)))
                (allow sysadm_t xfs_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t xfs_tmp_t (dir (getattr open search)))
                (allow sysadm_t xfs_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_639
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_640
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require tmpfs_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require zabbix_t)
                (typeattributeset cil_gen_require zabbix_agent_t)
                (typeattributeset cil_gen_require zabbix_log_t)
                (typeattributeset cil_gen_require zabbix_runtime_t)
                (typeattributeset cil_gen_require zabbix_initrc_exec_t)
                (typeattributeset cil_gen_require zabbix_agent_initrc_exec_t)
                (typeattributeset cil_gen_require zabbix_tmp_t)
                (typeattributeset cil_gen_require zabbix_tmpfs_t)
                (allow sysadm_t zabbix_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t zabbix_agent_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t zabbix_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t zabbix_agent_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t zabbix_t (file (ioctl read getattr lock open)))
                (allow sysadm_t zabbix_agent_t (file (ioctl read getattr lock open)))
                (allow sysadm_t zabbix_t (lnk_file (read getattr)))
                (allow sysadm_t zabbix_agent_t (lnk_file (read getattr)))
                (allow sysadm_t zabbix_t (process (getattr)))
                (allow sysadm_t zabbix_agent_t (process (getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t zabbix_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zabbix_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t zabbix_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zabbix_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t zabbix_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zabbix_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t zabbix_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zabbix_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t zabbix_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zabbix_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t zabbix_log_t (dir (getattr open search)))
                (allow sysadm_t zabbix_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t zabbix_log_t (dir (getattr open search)))
                (allow sysadm_t zabbix_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t zabbix_log_t (dir (getattr open search)))
                (allow sysadm_t zabbix_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t zabbix_log_t (dir (getattr open search)))
                (allow sysadm_t zabbix_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t zabbix_log_t (dir (getattr open search)))
                (allow sysadm_t zabbix_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t zabbix_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zabbix_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t zabbix_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zabbix_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t zabbix_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zabbix_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t zabbix_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zabbix_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t zabbix_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zabbix_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t zabbix_runtime_t (dir (getattr open search)))
                (allow sysadm_t zabbix_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t zabbix_runtime_t (dir (getattr open search)))
                (allow sysadm_t zabbix_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t zabbix_runtime_t (dir (getattr open search)))
                (allow sysadm_t zabbix_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t zabbix_runtime_t (dir (getattr open search)))
                (allow sysadm_t zabbix_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t zabbix_runtime_t (dir (getattr open search)))
                (allow sysadm_t zabbix_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t zabbix_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zabbix_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t zabbix_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zabbix_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t zabbix_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zabbix_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t zabbix_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zabbix_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t zabbix_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zabbix_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t zabbix_tmp_t (dir (getattr open search)))
                (allow sysadm_t zabbix_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t zabbix_tmp_t (dir (getattr open search)))
                (allow sysadm_t zabbix_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t zabbix_tmp_t (dir (getattr open search)))
                (allow sysadm_t zabbix_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t zabbix_tmp_t (dir (getattr open search)))
                (allow sysadm_t zabbix_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t zabbix_tmp_t (dir (getattr open search)))
                (allow sysadm_t zabbix_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmpfs_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t zabbix_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zabbix_tmpfs_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t zabbix_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zabbix_tmpfs_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t zabbix_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zabbix_tmpfs_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t zabbix_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zabbix_tmpfs_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t zabbix_tmpfs_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zabbix_tmpfs_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t zabbix_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t zabbix_tmpfs_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t zabbix_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t zabbix_tmpfs_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t zabbix_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t zabbix_tmpfs_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t zabbix_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t zabbix_tmpfs_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t zabbix_tmpfs_t (dir (getattr open search)))
                (allow sysadm_t zabbix_tmpfs_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_641
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                    (optional sysadm_optional_642
                        (roleattributeset cil_gen_require run_init_roles)
                        (typeattributeset cil_gen_require bin_t)
                        (typeattributeset cil_gen_require usr_t)
                        (typeattributeset cil_gen_require run_init_t)
                        (typeattributeset cil_gen_require run_init_exec_t)
                        (roleattributeset cil_gen_require run_init_roles)
                        (roleattributeset run_init_roles (sysadm_r ))
                        (allow sysadm_t usr_t (dir (getattr open search)))
                        (allow sysadm_t bin_t (dir (getattr open search)))
                        (allow sysadm_t bin_t (lnk_file (read getattr)))
                        (allow sysadm_t usr_t (dir (getattr open search)))
                        (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                        (allow sysadm_t run_init_t (process (transition)))
                        (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                        (typetransition sysadm_t run_init_exec_t process run_init_t)
                        (allow run_init_t sysadm_t (fd (use)))
                        (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                        (allow run_init_t sysadm_t (process (sigchld)))
                    )
                )
            )
            (optional sysadm_optional_643
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require zarafa_domain)
                (typeattributeset cil_gen_require zarafa_logfile)
                (typeattributeset cil_gen_require zarafa_pidfile)
                (typeattributeset cil_gen_require zarafa_etc_t)
                (typeattributeset cil_gen_require zarafa_initrc_exec_t)
                (typeattributeset cil_gen_require zarafa_deliver_tmp_t)
                (typeattributeset cil_gen_require zarafa_indexer_tmp_t)
                (typeattributeset cil_gen_require zarafa_server_tmp_t)
                (typeattributeset cil_gen_require zarafa_share_t)
                (typeattributeset cil_gen_require zarafa_var_lib_t)
                (allow sysadm_t zarafa_domain (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t zarafa_domain (dir (ioctl read getattr lock open search)))
                (allow sysadm_t zarafa_domain (file (ioctl read getattr lock open)))
                (allow sysadm_t zarafa_domain (lnk_file (read getattr)))
                (allow sysadm_t zarafa_domain (process (getattr)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t zarafa_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zarafa_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t zarafa_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zarafa_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t zarafa_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zarafa_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t zarafa_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zarafa_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t zarafa_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zarafa_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t zarafa_etc_t (dir (getattr open search)))
                (allow sysadm_t zarafa_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t zarafa_etc_t (dir (getattr open search)))
                (allow sysadm_t zarafa_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t zarafa_etc_t (dir (getattr open search)))
                (allow sysadm_t zarafa_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t zarafa_etc_t (dir (getattr open search)))
                (allow sysadm_t zarafa_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t zarafa_etc_t (dir (getattr open search)))
                (allow sysadm_t zarafa_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (getattr open search)))
                (allow sysadm_t zarafa_deliver_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zarafa_indexer_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zarafa_server_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zarafa_deliver_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t zarafa_indexer_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t zarafa_server_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t zarafa_deliver_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zarafa_indexer_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zarafa_server_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zarafa_deliver_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t zarafa_indexer_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t zarafa_server_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t zarafa_deliver_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zarafa_indexer_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zarafa_server_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zarafa_deliver_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t zarafa_indexer_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t zarafa_server_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t zarafa_deliver_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zarafa_indexer_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zarafa_server_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zarafa_deliver_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t zarafa_indexer_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t zarafa_server_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t zarafa_deliver_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zarafa_indexer_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zarafa_server_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zarafa_deliver_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t zarafa_indexer_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t zarafa_server_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t zarafa_deliver_tmp_t (dir (getattr open search)))
                (allow sysadm_t zarafa_indexer_tmp_t (dir (getattr open search)))
                (allow sysadm_t zarafa_server_tmp_t (dir (getattr open search)))
                (allow sysadm_t zarafa_deliver_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t zarafa_indexer_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t zarafa_server_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t zarafa_deliver_tmp_t (dir (getattr open search)))
                (allow sysadm_t zarafa_indexer_tmp_t (dir (getattr open search)))
                (allow sysadm_t zarafa_server_tmp_t (dir (getattr open search)))
                (allow sysadm_t zarafa_deliver_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t zarafa_indexer_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t zarafa_server_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t zarafa_deliver_tmp_t (dir (getattr open search)))
                (allow sysadm_t zarafa_indexer_tmp_t (dir (getattr open search)))
                (allow sysadm_t zarafa_server_tmp_t (dir (getattr open search)))
                (allow sysadm_t zarafa_deliver_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t zarafa_indexer_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t zarafa_server_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t zarafa_deliver_tmp_t (dir (getattr open search)))
                (allow sysadm_t zarafa_indexer_tmp_t (dir (getattr open search)))
                (allow sysadm_t zarafa_server_tmp_t (dir (getattr open search)))
                (allow sysadm_t zarafa_deliver_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t zarafa_indexer_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t zarafa_server_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t zarafa_deliver_tmp_t (dir (getattr open search)))
                (allow sysadm_t zarafa_indexer_tmp_t (dir (getattr open search)))
                (allow sysadm_t zarafa_server_tmp_t (dir (getattr open search)))
                (allow sysadm_t zarafa_deliver_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t zarafa_indexer_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t zarafa_server_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t zarafa_logfile (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zarafa_logfile (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t zarafa_logfile (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zarafa_logfile (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t zarafa_logfile (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zarafa_logfile (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t zarafa_logfile (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zarafa_logfile (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t zarafa_logfile (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zarafa_logfile (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t zarafa_logfile (dir (getattr open search)))
                (allow sysadm_t zarafa_logfile (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t zarafa_logfile (dir (getattr open search)))
                (allow sysadm_t zarafa_logfile (file (getattr relabelfrom relabelto)))
                (allow sysadm_t zarafa_logfile (dir (getattr open search)))
                (allow sysadm_t zarafa_logfile (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t zarafa_logfile (dir (getattr open search)))
                (allow sysadm_t zarafa_logfile (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t zarafa_logfile (dir (getattr open search)))
                (allow sysadm_t zarafa_logfile (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t zarafa_share_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zarafa_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zarafa_share_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t zarafa_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t zarafa_share_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zarafa_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zarafa_share_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t zarafa_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t zarafa_share_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zarafa_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zarafa_share_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t zarafa_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t zarafa_share_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zarafa_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zarafa_share_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t zarafa_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t zarafa_share_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zarafa_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zarafa_share_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t zarafa_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t zarafa_share_t (dir (getattr open search)))
                (allow sysadm_t zarafa_var_lib_t (dir (getattr open search)))
                (allow sysadm_t zarafa_share_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t zarafa_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t zarafa_share_t (dir (getattr open search)))
                (allow sysadm_t zarafa_var_lib_t (dir (getattr open search)))
                (allow sysadm_t zarafa_share_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t zarafa_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t zarafa_share_t (dir (getattr open search)))
                (allow sysadm_t zarafa_var_lib_t (dir (getattr open search)))
                (allow sysadm_t zarafa_share_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t zarafa_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t zarafa_share_t (dir (getattr open search)))
                (allow sysadm_t zarafa_var_lib_t (dir (getattr open search)))
                (allow sysadm_t zarafa_share_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t zarafa_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t zarafa_share_t (dir (getattr open search)))
                (allow sysadm_t zarafa_var_lib_t (dir (getattr open search)))
                (allow sysadm_t zarafa_share_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t zarafa_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t zarafa_pidfile (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zarafa_pidfile (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t zarafa_pidfile (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zarafa_pidfile (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t zarafa_pidfile (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zarafa_pidfile (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t zarafa_pidfile (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zarafa_pidfile (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t zarafa_pidfile (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zarafa_pidfile (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t zarafa_pidfile (dir (getattr open search)))
                (allow sysadm_t zarafa_pidfile (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t zarafa_pidfile (dir (getattr open search)))
                (allow sysadm_t zarafa_pidfile (file (getattr relabelfrom relabelto)))
                (allow sysadm_t zarafa_pidfile (dir (getattr open search)))
                (allow sysadm_t zarafa_pidfile (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t zarafa_pidfile (dir (getattr open search)))
                (allow sysadm_t zarafa_pidfile (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t zarafa_pidfile (dir (getattr open search)))
                (allow sysadm_t zarafa_pidfile (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_644
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_645
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require zebra_t)
                (typeattributeset cil_gen_require zebra_tmp_t)
                (typeattributeset cil_gen_require zebra_log_t)
                (typeattributeset cil_gen_require zebra_conf_t)
                (typeattributeset cil_gen_require zebra_runtime_t)
                (typeattributeset cil_gen_require zebra_initrc_exec_t)
                (allow sysadm_t zebra_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t zebra_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t zebra_t (file (ioctl read getattr lock open)))
                (allow sysadm_t zebra_t (lnk_file (read getattr)))
                (allow sysadm_t zebra_t (process (getattr)))
                (allow sysadm_t etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t zebra_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zebra_conf_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t zebra_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zebra_conf_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t zebra_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zebra_conf_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t zebra_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zebra_conf_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t zebra_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zebra_conf_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t zebra_conf_t (dir (getattr open search)))
                (allow sysadm_t zebra_conf_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t zebra_conf_t (dir (getattr open search)))
                (allow sysadm_t zebra_conf_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t zebra_conf_t (dir (getattr open search)))
                (allow sysadm_t zebra_conf_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t zebra_conf_t (dir (getattr open search)))
                (allow sysadm_t zebra_conf_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t zebra_conf_t (dir (getattr open search)))
                (allow sysadm_t zebra_conf_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t zebra_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zebra_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t zebra_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zebra_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t zebra_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zebra_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t zebra_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zebra_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t zebra_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zebra_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t zebra_log_t (dir (getattr open search)))
                (allow sysadm_t zebra_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t zebra_log_t (dir (getattr open search)))
                (allow sysadm_t zebra_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t zebra_log_t (dir (getattr open search)))
                (allow sysadm_t zebra_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t zebra_log_t (dir (getattr open search)))
                (allow sysadm_t zebra_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t zebra_log_t (dir (getattr open search)))
                (allow sysadm_t zebra_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t zebra_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zebra_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t zebra_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zebra_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t zebra_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zebra_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t zebra_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zebra_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t zebra_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zebra_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t zebra_tmp_t (dir (getattr open search)))
                (allow sysadm_t zebra_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t zebra_tmp_t (dir (getattr open search)))
                (allow sysadm_t zebra_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t zebra_tmp_t (dir (getattr open search)))
                (allow sysadm_t zebra_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t zebra_tmp_t (dir (getattr open search)))
                (allow sysadm_t zebra_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t zebra_tmp_t (dir (getattr open search)))
                (allow sysadm_t zebra_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t zebra_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zebra_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t zebra_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zebra_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t zebra_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zebra_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t zebra_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zebra_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t zebra_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zebra_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t zebra_runtime_t (dir (getattr open search)))
                (allow sysadm_t zebra_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t zebra_runtime_t (dir (getattr open search)))
                (allow sysadm_t zebra_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t zebra_runtime_t (dir (getattr open search)))
                (allow sysadm_t zebra_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t zebra_runtime_t (dir (getattr open search)))
                (allow sysadm_t zebra_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t zebra_runtime_t (dir (getattr open search)))
                (allow sysadm_t zebra_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_646
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_647
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require zfs_t)
                (typeattributeset cil_gen_require zed_t)
                (typeattributeset cil_gen_require zfs_config_t)
                (typeattributeset cil_gen_require zfs_zpool_cache_t)
                (typeattributeset cil_gen_require zfs_runtime_t)
                (typeattributeset cil_gen_require zfs_exec_t)
                (roleattributeset cil_gen_require sysadm_r)
                (roletype sysadm_r zfs_t)
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t zfs_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t zfs_t (process (transition)))
                (dontaudit sysadm_t zfs_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t zfs_exec_t process zfs_t)
                (allow zfs_t sysadm_t (fd (use)))
                (allow zfs_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow zfs_t sysadm_t (process (sigchld)))
                (allow sysadm_t zfs_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t zfs_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t zfs_t (file (ioctl read getattr lock open)))
                (allow sysadm_t zfs_t (lnk_file (read getattr)))
                (allow sysadm_t zfs_t (process (getattr)))
                (allow sysadm_t zed_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t zed_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t zed_t (file (ioctl read getattr lock open)))
                (allow sysadm_t zed_t (lnk_file (read getattr)))
                (allow sysadm_t zed_t (process (getattr)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t zfs_config_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zfs_config_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t zfs_config_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zfs_config_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t zfs_config_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zfs_config_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t zfs_config_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zfs_config_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t zfs_config_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zfs_config_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t zfs_config_t (dir (getattr open search)))
                (allow sysadm_t zfs_config_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t zfs_config_t (dir (getattr open search)))
                (allow sysadm_t zfs_config_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t zfs_config_t (dir (getattr open search)))
                (allow sysadm_t zfs_config_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t zfs_config_t (dir (getattr open search)))
                (allow sysadm_t zfs_config_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t zfs_config_t (dir (getattr open search)))
                (allow sysadm_t zfs_config_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t zfs_zpool_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zfs_zpool_cache_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t zfs_zpool_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zfs_zpool_cache_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t zfs_zpool_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zfs_zpool_cache_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t zfs_zpool_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zfs_zpool_cache_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t zfs_zpool_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zfs_zpool_cache_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t zfs_zpool_cache_t (dir (getattr open search)))
                (allow sysadm_t zfs_zpool_cache_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t zfs_zpool_cache_t (dir (getattr open search)))
                (allow sysadm_t zfs_zpool_cache_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t zfs_zpool_cache_t (dir (getattr open search)))
                (allow sysadm_t zfs_zpool_cache_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t zfs_zpool_cache_t (dir (getattr open search)))
                (allow sysadm_t zfs_zpool_cache_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t zfs_zpool_cache_t (dir (getattr open search)))
                (allow sysadm_t zfs_zpool_cache_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t zfs_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zfs_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t zfs_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zfs_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t zfs_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zfs_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t zfs_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zfs_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t zfs_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t zfs_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t zfs_runtime_t (dir (getattr open search)))
                (allow sysadm_t zfs_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t zfs_runtime_t (dir (getattr open search)))
                (allow sysadm_t zfs_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t zfs_runtime_t (dir (getattr open search)))
                (allow sysadm_t zfs_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t zfs_runtime_t (dir (getattr open search)))
                (allow sysadm_t zfs_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t zfs_runtime_t (dir (getattr open search)))
                (allow sysadm_t zfs_runtime_t (sock_file (getattr relabelfrom relabelto)))
            )
            (optional sysadm_optional_648
                (typeattributeset cil_gen_require shadow_t)
                (typeattributeset cil_gen_require chkpwd_t)
                (typeattributeset cil_gen_require chkpwd_exec_t)
                (roleattributeset cil_gen_require sysadm_r)
                (roletype sysadm_r chkpwd_t)
                (allow sysadm_t chkpwd_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t chkpwd_t (process (transition)))
                (dontaudit sysadm_t chkpwd_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t chkpwd_exec_t process chkpwd_t)
                (allow chkpwd_t sysadm_t (fd (use)))
                (allow chkpwd_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow chkpwd_t sysadm_t (process (sigchld)))
                (allow sysadm_t chkpwd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t chkpwd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t chkpwd_t (lnk_file (read getattr)))
                (allow sysadm_t chkpwd_t (process (getattr)))
                (dontaudit sysadm_t shadow_t (file (ioctl read getattr lock open)))
            )
            (optional sysadm_optional_649
                (roleattributeset cil_gen_require bluetooth_helper_roles)
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require bluetooth_t)
                (typeattributeset cil_gen_require bluetooth_tmp_t)
                (typeattributeset cil_gen_require bluetooth_lock_t)
                (typeattributeset cil_gen_require bluetooth_var_lib_t)
                (typeattributeset cil_gen_require bluetooth_runtime_t)
                (typeattributeset cil_gen_require bluetooth_conf_t)
                (typeattributeset cil_gen_require bluetooth_conf_rw_t)
                (typeattributeset cil_gen_require bluetooth_initrc_exec_t)
                (typeattributeset cil_gen_require bluetooth_helper_t)
                (typeattributeset cil_gen_require bluetooth_helper_exec_t)
                (typeattributeset cil_gen_require bluetooth_helper_tmp_t)
                (typeattributeset cil_gen_require bluetooth_helper_tmpfs_t)
                (roleattributeset cil_gen_require bluetooth_helper_roles)
                (roleattributeset bluetooth_helper_roles (sysadm_r ))
                (allow sysadm_t bluetooth_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t bluetooth_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t bluetooth_t (file (ioctl read getattr lock open)))
                (allow sysadm_t bluetooth_t (lnk_file (read getattr)))
                (allow sysadm_t bluetooth_t (process (getattr)))
                (allow sysadm_t tmp_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t bluetooth_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bluetooth_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t bluetooth_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bluetooth_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bluetooth_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bluetooth_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t bluetooth_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bluetooth_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bluetooth_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bluetooth_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bluetooth_tmp_t (dir (getattr open search)))
                (allow sysadm_t bluetooth_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t bluetooth_tmp_t (dir (getattr open search)))
                (allow sysadm_t bluetooth_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t bluetooth_tmp_t (dir (getattr open search)))
                (allow sysadm_t bluetooth_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bluetooth_tmp_t (dir (getattr open search)))
                (allow sysadm_t bluetooth_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bluetooth_tmp_t (dir (getattr open search)))
                (allow sysadm_t bluetooth_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t bluetooth_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bluetooth_lock_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t bluetooth_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bluetooth_lock_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bluetooth_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bluetooth_lock_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t bluetooth_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bluetooth_lock_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bluetooth_lock_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bluetooth_lock_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bluetooth_lock_t (dir (getattr open search)))
                (allow sysadm_t bluetooth_lock_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t bluetooth_lock_t (dir (getattr open search)))
                (allow sysadm_t bluetooth_lock_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t bluetooth_lock_t (dir (getattr open search)))
                (allow sysadm_t bluetooth_lock_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bluetooth_lock_t (dir (getattr open search)))
                (allow sysadm_t bluetooth_lock_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bluetooth_lock_t (dir (getattr open search)))
                (allow sysadm_t bluetooth_lock_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t bluetooth_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bluetooth_conf_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bluetooth_conf_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t bluetooth_conf_rw_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t bluetooth_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bluetooth_conf_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bluetooth_conf_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bluetooth_conf_rw_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bluetooth_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bluetooth_conf_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bluetooth_conf_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t bluetooth_conf_rw_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t bluetooth_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bluetooth_conf_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bluetooth_conf_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bluetooth_conf_rw_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bluetooth_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bluetooth_conf_rw_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bluetooth_conf_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bluetooth_conf_rw_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bluetooth_conf_t (dir (getattr open search)))
                (allow sysadm_t bluetooth_conf_rw_t (dir (getattr open search)))
                (allow sysadm_t bluetooth_conf_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t bluetooth_conf_rw_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t bluetooth_conf_t (dir (getattr open search)))
                (allow sysadm_t bluetooth_conf_rw_t (dir (getattr open search)))
                (allow sysadm_t bluetooth_conf_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t bluetooth_conf_rw_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t bluetooth_conf_t (dir (getattr open search)))
                (allow sysadm_t bluetooth_conf_rw_t (dir (getattr open search)))
                (allow sysadm_t bluetooth_conf_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bluetooth_conf_rw_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bluetooth_conf_t (dir (getattr open search)))
                (allow sysadm_t bluetooth_conf_rw_t (dir (getattr open search)))
                (allow sysadm_t bluetooth_conf_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bluetooth_conf_rw_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bluetooth_conf_t (dir (getattr open search)))
                (allow sysadm_t bluetooth_conf_rw_t (dir (getattr open search)))
                (allow sysadm_t bluetooth_conf_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bluetooth_conf_rw_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t bluetooth_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bluetooth_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t bluetooth_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bluetooth_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bluetooth_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bluetooth_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t bluetooth_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bluetooth_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bluetooth_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bluetooth_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bluetooth_var_lib_t (dir (getattr open search)))
                (allow sysadm_t bluetooth_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t bluetooth_var_lib_t (dir (getattr open search)))
                (allow sysadm_t bluetooth_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t bluetooth_var_lib_t (dir (getattr open search)))
                (allow sysadm_t bluetooth_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bluetooth_var_lib_t (dir (getattr open search)))
                (allow sysadm_t bluetooth_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bluetooth_var_lib_t (dir (getattr open search)))
                (allow sysadm_t bluetooth_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t bluetooth_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bluetooth_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t bluetooth_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bluetooth_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bluetooth_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bluetooth_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t bluetooth_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bluetooth_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bluetooth_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bluetooth_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bluetooth_runtime_t (dir (getattr open search)))
                (allow sysadm_t bluetooth_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t bluetooth_runtime_t (dir (getattr open search)))
                (allow sysadm_t bluetooth_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t bluetooth_runtime_t (dir (getattr open search)))
                (allow sysadm_t bluetooth_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bluetooth_runtime_t (dir (getattr open search)))
                (allow sysadm_t bluetooth_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bluetooth_runtime_t (dir (getattr open search)))
                (allow sysadm_t bluetooth_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_application_exec_domain bluetooth_helper_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_application_exec_domain bluetooth_helper_t (process (transition)))
                (dontaudit sysadm_application_exec_domain bluetooth_helper_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_application_exec_domain bluetooth_helper_exec_t process bluetooth_helper_t)
                (allow bluetooth_helper_t sysadm_application_exec_domain (fd (use)))
                (allow bluetooth_helper_t sysadm_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                (allow bluetooth_helper_t sysadm_application_exec_domain (process (sigchld)))
                (allow sysadm_application_exec_domain bluetooth_helper_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_application_exec_domain bluetooth_helper_t (file (ioctl read getattr lock open)))
                (allow sysadm_application_exec_domain bluetooth_helper_t (lnk_file (read getattr)))
                (allow sysadm_application_exec_domain bluetooth_helper_t (process (getattr)))
                (allow sysadm_application_exec_domain bluetooth_helper_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_application_exec_domain bluetooth_t (socket (ioctl read write getattr setattr append bind connect getopt setopt shutdown)))
                (allow sysadm_t bluetooth_helper_tmp_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t bluetooth_helper_tmpfs_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t bluetooth_helper_tmp_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t bluetooth_helper_tmpfs_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t bluetooth_helper_tmp_t (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_application_exec_domain bluetooth_runtime_t (dir (getattr open search)))
                (allow sysadm_application_exec_domain bluetooth_runtime_t (sock_file (write getattr append open)))
                (allow sysadm_application_exec_domain bluetooth_t (unix_stream_socket (connectto)))
                (allow sysadm_application_exec_domain var_run_t (lnk_file (read getattr)))
                (allow sysadm_application_exec_domain var_t (dir (getattr open search)))
                (allow sysadm_application_exec_domain var_run_t (dir (getattr open search)))
                (optional sysadm_optional_650
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
                (optional sysadm_optional_651
                    (typeattributeset cil_gen_require sysadm_systemd_t)
                    (allow sysadm_systemd_t bluetooth_helper_t (dir (ioctl read getattr lock open search)))
                    (allow sysadm_systemd_t bluetooth_helper_t (file (ioctl read getattr lock open)))
                    (allow sysadm_systemd_t bluetooth_helper_t (lnk_file (read getattr)))
                    (allow sysadm_systemd_t bluetooth_helper_t (process (getattr)))
                    (allow sysadm_systemd_t bluetooth_helper_t (process (sigchld sigkill sigstop signull signal)))
                    (allow bluetooth_helper_t sysadm_systemd_t (fd (use)))
                    (allow bluetooth_helper_t sysadm_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                    (allow bluetooth_helper_t sysadm_systemd_t (dir (ioctl read getattr lock open search)))
                    (allow bluetooth_helper_t sysadm_systemd_t (file (ioctl read getattr lock open)))
                    (allow bluetooth_helper_t sysadm_systemd_t (lnk_file (read getattr)))
                    (allow bluetooth_helper_t sysadm_systemd_t (process (getattr)))
                    (allow bluetooth_helper_t sysadm_systemd_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_652
                (roleattributeset cil_gen_require cdrecord_roles)
                (typeattributeset cil_gen_require cdrecord_t)
                (typeattributeset cil_gen_require cdrecord_exec_t)
                (roleattributeset cil_gen_require cdrecord_roles)
                (roleattributeset cdrecord_roles (sysadm_r ))
                (allow sysadm_application_exec_domain cdrecord_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_application_exec_domain cdrecord_t (process (transition)))
                (dontaudit sysadm_application_exec_domain cdrecord_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_application_exec_domain cdrecord_exec_t process cdrecord_t)
                (allow cdrecord_t sysadm_application_exec_domain (fd (use)))
                (allow cdrecord_t sysadm_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                (allow cdrecord_t sysadm_application_exec_domain (process (sigchld)))
                (allow cdrecord_t sysadm_application_exec_domain (unix_stream_socket (ioctl read write getattr setattr append bind connect getopt setopt shutdown)))
                (allow sysadm_application_exec_domain cdrecord_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_application_exec_domain cdrecord_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_application_exec_domain cdrecord_t (file (ioctl read getattr lock open)))
                (allow sysadm_application_exec_domain cdrecord_t (lnk_file (read getattr)))
                (allow sysadm_application_exec_domain cdrecord_t (process (getattr)))
                (optional sysadm_optional_653
                    (typeattributeset cil_gen_require sysadm_systemd_t)
                    (allow sysadm_systemd_t cdrecord_t (dir (ioctl read getattr lock open search)))
                    (allow sysadm_systemd_t cdrecord_t (file (ioctl read getattr lock open)))
                    (allow sysadm_systemd_t cdrecord_t (lnk_file (read getattr)))
                    (allow sysadm_systemd_t cdrecord_t (process (getattr)))
                    (allow sysadm_systemd_t cdrecord_t (process (sigchld sigkill sigstop signull signal)))
                    (allow cdrecord_t sysadm_systemd_t (fd (use)))
                    (allow cdrecord_t sysadm_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                    (allow cdrecord_t sysadm_systemd_t (dir (ioctl read getattr lock open search)))
                    (allow cdrecord_t sysadm_systemd_t (file (ioctl read getattr lock open)))
                    (allow cdrecord_t sysadm_systemd_t (lnk_file (read getattr)))
                    (allow cdrecord_t sysadm_systemd_t (process (getattr)))
                    (allow cdrecord_t sysadm_systemd_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_654
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require chromium_t)
                (typeattributeset cil_gen_require chromium_renderer_t)
                (typeattributeset cil_gen_require chromium_sandbox_t)
                (typeattributeset cil_gen_require chromium_naclhelper_t)
                (typeattributeset cil_gen_require chromium_exec_t)
                (roleattributeset cil_gen_require sysadm_r)
                (roletype sysadm_r chromium_t)
                (roletype sysadm_r chromium_renderer_t)
                (roletype sysadm_r chromium_sandbox_t)
                (roletype sysadm_r chromium_naclhelper_t)
                (allow sysadm_application_exec_domain bin_t (dir (getattr open search)))
                (allow sysadm_application_exec_domain bin_t (lnk_file (read getattr)))
                (allow sysadm_application_exec_domain usr_t (dir (getattr open search)))
                (allow sysadm_application_exec_domain chromium_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_application_exec_domain chromium_t (process (transition)))
                (dontaudit sysadm_application_exec_domain chromium_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_application_exec_domain chromium_exec_t process chromium_t)
                (allow chromium_t sysadm_application_exec_domain (fd (use)))
                (allow chromium_t sysadm_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                (allow chromium_t sysadm_application_exec_domain (process (sigchld)))
                (allow sysadm_application_exec_domain chromium_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_application_exec_domain chromium_t (file (ioctl read getattr lock open)))
                (allow sysadm_application_exec_domain chromium_t (lnk_file (read getattr)))
                (allow sysadm_application_exec_domain chromium_t (process (getattr)))
                (allow sysadm_application_exec_domain chromium_renderer_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_application_exec_domain chromium_renderer_t (file (ioctl read getattr lock open)))
                (allow sysadm_application_exec_domain chromium_renderer_t (lnk_file (read getattr)))
                (allow sysadm_application_exec_domain chromium_renderer_t (process (getattr)))
                (allow sysadm_application_exec_domain chromium_t (process (sigchld sigkill sigstop signull signal)))
                (allow sysadm_application_exec_domain chromium_renderer_t (process (sigchld sigkill sigstop signull signal)))
                (allow sysadm_application_exec_domain chromium_sandbox_t (process (sigchld sigkill sigstop signull signal)))
                (allow sysadm_application_exec_domain chromium_naclhelper_t (process (sigchld sigkill sigstop signull signal)))
                (allow chromium_t sysadm_application_exec_domain (process (signull signal)))
                (allow sysadm_application_exec_domain chromium_t (unix_stream_socket (connectto)))
                (allow chromium_t sysadm_application_exec_domain (unix_stream_socket (connectto)))
                (allow chromium_sandbox_t sysadm_application_exec_domain (fd (use)))
                (allow chromium_naclhelper_t sysadm_application_exec_domain (fd (use)))
                (allow sysadm_application_exec_domain chromium_t (dbus (send_msg)))
                (allow chromium_t sysadm_application_exec_domain (dbus (send_msg)))
                (optional sysadm_optional_655
                    (typeattributeset cil_gen_require sysadm_systemd_t)
                    (allow sysadm_systemd_t chromium_t (dir (ioctl read getattr lock open search)))
                    (allow sysadm_systemd_t chromium_t (file (ioctl read getattr lock open)))
                    (allow sysadm_systemd_t chromium_t (lnk_file (read getattr)))
                    (allow sysadm_systemd_t chromium_t (process (getattr)))
                    (allow sysadm_systemd_t chromium_t (process (sigchld sigkill sigstop signull signal)))
                    (allow chromium_t sysadm_systemd_t (fd (use)))
                    (allow chromium_t sysadm_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                    (allow chromium_t sysadm_systemd_t (dir (ioctl read getattr lock open search)))
                    (allow chromium_t sysadm_systemd_t (file (ioctl read getattr lock open)))
                    (allow chromium_t sysadm_systemd_t (lnk_file (read getattr)))
                    (allow chromium_t sysadm_systemd_t (process (getattr)))
                    (allow chromium_t sysadm_systemd_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_656
                (typeattributeset cil_gen_require shell_exec_t)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require crond_t)
                (typeattributeset cil_gen_require cronjob_t)
                (typeattributeset cil_gen_require crond_runtime_t)
                (typeattributeset cil_gen_require crontab_exec_t)
                (typeattributeset cil_gen_require admin_crontab_t)
                (typeattributeset cil_gen_require user_cron_spool_t)
                (roleattributeset cil_gen_require sysadm_r)
                (roletype sysadm_r cronjob_t)
                (roletype sysadm_r admin_crontab_t)
                (allow sysadm_t crontab_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t admin_crontab_t (process (transition)))
                (dontaudit sysadm_t admin_crontab_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t crontab_exec_t process admin_crontab_t)
                (allow admin_crontab_t sysadm_t (fd (use)))
                (allow admin_crontab_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow admin_crontab_t sysadm_t (process (sigchld)))
                (dontaudit crond_t sysadm_t (process (noatsecure siginh rlimitinh)))
                (allow sysadm_t crond_t (process (sigchld)))
                (allow sysadm_t user_cron_spool_t (file (ioctl read write getattr lock append)))
                (allow sysadm_t admin_crontab_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t admin_crontab_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t admin_crontab_t (file (ioctl read getattr lock open)))
                (allow sysadm_t admin_crontab_t (lnk_file (read getattr)))
                (allow sysadm_t admin_crontab_t (process (getattr)))
                (allow sysadm_t self (passwd (crontab)))
                (allow admin_crontab_t bin_t (dir (getattr open search)))
                (allow admin_crontab_t bin_t (lnk_file (read getattr)))
                (allow admin_crontab_t usr_t (dir (getattr open search)))
                (allow admin_crontab_t bin_t (dir (getattr open search)))
                (allow admin_crontab_t bin_t (dir (ioctl read getattr lock open search)))
                (allow admin_crontab_t bin_t (file (ioctl read getattr lock map execute open execute_no_trans)))
                (allow admin_crontab_t bin_t (dir (getattr open search)))
                (allow admin_crontab_t bin_t (lnk_file (read getattr)))
                (allow admin_crontab_t usr_t (dir (getattr open search)))
                (allow admin_crontab_t bin_t (dir (getattr open search)))
                (allow admin_crontab_t bin_t (dir (ioctl read getattr lock open search)))
                (allow admin_crontab_t shell_exec_t (file (ioctl read getattr lock map execute open execute_no_trans)))
                (booleanif (fcron_crond)
                    (true
                        (allow sysadm_t crond_t (unix_stream_socket (connectto)))
                        (allow sysadm_t crond_runtime_t (sock_file (write getattr append open)))
                        (allow sysadm_t crond_runtime_t (dir (getattr open search)))
                    )
                )
                (booleanif (cron_userdomain_transition)
                    (true
                        (allow sysadm_t cronjob_t (process (getattr)))
                        (allow sysadm_t cronjob_t (lnk_file (read getattr)))
                        (allow sysadm_t cronjob_t (file (ioctl read getattr lock open)))
                        (allow sysadm_t cronjob_t (dir (ioctl read getattr lock open search)))
                        (allow sysadm_t cronjob_t (process (sigchld sigkill sigstop signull signal ptrace)))
                        (allow sysadm_t crond_t (fifo_file (ioctl read write getattr lock append open)))
                        (allow sysadm_t user_cron_spool_t (file (entrypoint)))
                        (allow crond_t sysadm_t (key (view read write search link setattr create)))
                        (allow crond_t sysadm_t (fd (use)))
                        (allow crond_t sysadm_t (process (transition)))
                    )
                    (false
                        (dontaudit sysadm_t cronjob_t (process (sigchld sigkill sigstop signull signal ptrace)))
                        (dontaudit sysadm_t crond_t (fifo_file (ioctl read write getattr lock append open)))
                        (dontaudit sysadm_t user_cron_spool_t (file (entrypoint)))
                        (dontaudit crond_t sysadm_t (key (view read write search link setattr create)))
                        (dontaudit crond_t sysadm_t (fd (use)))
                        (dontaudit crond_t sysadm_t (process (transition)))
                    )
                )
                (optional sysadm_optional_657
                    (typeattributeset cil_gen_require system_dbusd_t)
                    (allow cronjob_t sysadm_t (dbus (send_msg)))
                )
            )
            (optional sysadm_optional_658
                (roleattributeset cil_gen_require cryfs_roles)
                (typeattributeset cil_gen_require cryfs_t)
                (typeattributeset cil_gen_require cryfs_exec_t)
                (roleattributeset cil_gen_require cryfs_roles)
                (roleattributeset cryfs_roles (sysadm_r ))
                (allow sysadm_application_exec_domain cryfs_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_application_exec_domain cryfs_t (process (transition)))
                (dontaudit sysadm_application_exec_domain cryfs_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_application_exec_domain cryfs_exec_t process cryfs_t)
                (allow cryfs_t sysadm_application_exec_domain (fd (use)))
                (allow cryfs_t sysadm_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                (allow cryfs_t sysadm_application_exec_domain (process (sigchld)))
                (allow sysadm_application_exec_domain cryfs_t (process (sigchld sigkill sigstop signull signal)))
                (allow sysadm_application_exec_domain cryfs_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_application_exec_domain cryfs_t (file (ioctl read getattr lock open)))
                (allow sysadm_application_exec_domain cryfs_t (lnk_file (read getattr)))
                (allow sysadm_application_exec_domain cryfs_t (process (getattr)))
                (optional sysadm_optional_659
                    (typeattributeset cil_gen_require sysadm_systemd_t)
                    (allow sysadm_systemd_t cryfs_t (dir (ioctl read getattr lock open search)))
                    (allow sysadm_systemd_t cryfs_t (file (ioctl read getattr lock open)))
                    (allow sysadm_systemd_t cryfs_t (lnk_file (read getattr)))
                    (allow sysadm_systemd_t cryfs_t (process (getattr)))
                    (allow sysadm_systemd_t cryfs_t (process (sigchld sigkill sigstop signull signal)))
                    (allow cryfs_t sysadm_systemd_t (fd (use)))
                    (allow cryfs_t sysadm_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                    (allow cryfs_t sysadm_systemd_t (dir (ioctl read getattr lock open search)))
                    (allow cryfs_t sysadm_systemd_t (file (ioctl read getattr lock open)))
                    (allow cryfs_t sysadm_systemd_t (lnk_file (read getattr)))
                    (allow cryfs_t sysadm_systemd_t (process (getattr)))
                    (allow cryfs_t sysadm_systemd_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_660
                (typeattributeset cil_gen_require dirmngr_t)
                (typeattributeset cil_gen_require dirmngr_exec_t)
                (typeattributeset cil_gen_require dirmngr_tmp_t)
                (roleattributeset cil_gen_require sysadm_r)
                (roletype sysadm_r dirmngr_t)
                (allow sysadm_application_exec_domain dirmngr_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_application_exec_domain dirmngr_t (process (transition)))
                (dontaudit sysadm_application_exec_domain dirmngr_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_application_exec_domain dirmngr_exec_t process dirmngr_t)
                (allow dirmngr_t sysadm_application_exec_domain (fd (use)))
                (allow dirmngr_t sysadm_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                (allow dirmngr_t sysadm_application_exec_domain (process (sigchld)))
                (allow sysadm_application_exec_domain dirmngr_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_application_exec_domain dirmngr_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_application_exec_domain dirmngr_t (file (ioctl read getattr lock open)))
                (allow sysadm_application_exec_domain dirmngr_t (lnk_file (read getattr)))
                (allow sysadm_application_exec_domain dirmngr_t (process (getattr)))
                (allow dirmngr_t sysadm_application_exec_domain (fd (use)))
                (allow dirmngr_t sysadm_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                (allow sysadm_t dirmngr_tmp_t (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (optional sysadm_optional_661
                    (typeattributeset cil_gen_require sysadm_systemd_t)
                    (allow sysadm_systemd_t dirmngr_t (dir (ioctl read getattr lock open search)))
                    (allow sysadm_systemd_t dirmngr_t (file (ioctl read getattr lock open)))
                    (allow sysadm_systemd_t dirmngr_t (lnk_file (read getattr)))
                    (allow sysadm_systemd_t dirmngr_t (process (getattr)))
                    (allow sysadm_systemd_t dirmngr_t (process (sigchld sigkill sigstop signull signal)))
                    (allow dirmngr_t sysadm_systemd_t (fd (use)))
                    (allow dirmngr_t sysadm_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                    (allow dirmngr_t sysadm_systemd_t (dir (ioctl read getattr lock open search)))
                    (allow dirmngr_t sysadm_systemd_t (file (ioctl read getattr lock open)))
                    (allow dirmngr_t sysadm_systemd_t (lnk_file (read getattr)))
                    (allow dirmngr_t sysadm_systemd_t (process (getattr)))
                    (allow dirmngr_t sysadm_systemd_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_662
                (roleattributeset cil_gen_require evolution_roles)
                (typeattributeset cil_gen_require user_home_dir_t)
                (typeattributeset cil_gen_require home_root_t)
                (typeattributeset cil_gen_require evolution_t)
                (typeattributeset cil_gen_require evolution_exec_t)
                (typeattributeset cil_gen_require evolution_home_t)
                (typeattributeset cil_gen_require evolution_alarm_t)
                (typeattributeset cil_gen_require evolution_alarm_exec_t)
                (typeattributeset cil_gen_require evolution_alarm_orbit_tmp_t)
                (typeattributeset cil_gen_require evolution_exchange_t)
                (typeattributeset cil_gen_require evolution_exchange_exec_t)
                (typeattributeset cil_gen_require evolution_exchange_tmp_t)
                (typeattributeset cil_gen_require evolution_exchange_orbit_tmp_t)
                (typeattributeset cil_gen_require evolution_orbit_tmp_t)
                (typeattributeset cil_gen_require evolution_server_orbit_tmp_t)
                (typeattributeset cil_gen_require evolution_server_t)
                (typeattributeset cil_gen_require evolution_server_exec_t)
                (typeattributeset cil_gen_require evolution_webcal_t)
                (typeattributeset cil_gen_require evolution_webcal_exec_t)
                (typeattributeset cil_gen_require evolution_alarm_tmpfs_t)
                (typeattributeset cil_gen_require evolution_exchange_tmpfs_t)
                (typeattributeset cil_gen_require evolution_tmpfs_t)
                (typeattributeset cil_gen_require evolution_webcal_tmpfs_t)
                (roleattributeset cil_gen_require evolution_roles)
                (roleattributeset evolution_roles (sysadm_r ))
                (allow sysadm_application_exec_domain evolution_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_application_exec_domain evolution_t (process (transition)))
                (dontaudit sysadm_application_exec_domain evolution_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_application_exec_domain evolution_exec_t process evolution_t)
                (allow evolution_t sysadm_application_exec_domain (fd (use)))
                (allow evolution_t sysadm_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                (allow evolution_t sysadm_application_exec_domain (process (sigchld)))
                (allow sysadm_application_exec_domain evolution_alarm_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_application_exec_domain evolution_alarm_t (process (transition)))
                (dontaudit sysadm_application_exec_domain evolution_alarm_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_application_exec_domain evolution_alarm_exec_t process evolution_alarm_t)
                (allow evolution_alarm_t sysadm_application_exec_domain (fd (use)))
                (allow evolution_alarm_t sysadm_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                (allow evolution_alarm_t sysadm_application_exec_domain (process (sigchld)))
                (allow sysadm_application_exec_domain evolution_exchange_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_application_exec_domain evolution_exchange_t (process (transition)))
                (dontaudit sysadm_application_exec_domain evolution_exchange_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_application_exec_domain evolution_exchange_exec_t process evolution_exchange_t)
                (allow evolution_exchange_t sysadm_application_exec_domain (fd (use)))
                (allow evolution_exchange_t sysadm_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                (allow evolution_exchange_t sysadm_application_exec_domain (process (sigchld)))
                (allow sysadm_application_exec_domain evolution_server_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_application_exec_domain evolution_server_t (process (transition)))
                (dontaudit sysadm_application_exec_domain evolution_server_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_application_exec_domain evolution_server_exec_t process evolution_server_t)
                (allow evolution_server_t sysadm_application_exec_domain (fd (use)))
                (allow evolution_server_t sysadm_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                (allow evolution_server_t sysadm_application_exec_domain (process (sigchld)))
                (allow sysadm_application_exec_domain evolution_webcal_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_application_exec_domain evolution_webcal_t (process (transition)))
                (dontaudit sysadm_application_exec_domain evolution_webcal_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_application_exec_domain evolution_webcal_exec_t process evolution_webcal_t)
                (allow evolution_webcal_t sysadm_application_exec_domain (fd (use)))
                (allow evolution_webcal_t sysadm_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                (allow evolution_webcal_t sysadm_application_exec_domain (process (sigchld)))
                (allow sysadm_application_exec_domain evolution_t (process (sigchld sigkill sigstop signull signal ptrace noatsecure)))
                (allow sysadm_application_exec_domain evolution_alarm_t (process (sigchld sigkill sigstop signull signal ptrace noatsecure)))
                (allow sysadm_application_exec_domain evolution_exchange_t (process (sigchld sigkill sigstop signull signal ptrace noatsecure)))
                (allow sysadm_application_exec_domain evolution_server_t (process (sigchld sigkill sigstop signull signal ptrace noatsecure)))
                (allow sysadm_application_exec_domain evolution_webcal_t (process (sigchld sigkill sigstop signull signal ptrace noatsecure)))
                (allow sysadm_application_exec_domain evolution_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_application_exec_domain evolution_alarm_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_application_exec_domain evolution_exchange_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_application_exec_domain evolution_t (file (ioctl read getattr lock open)))
                (allow sysadm_application_exec_domain evolution_alarm_t (file (ioctl read getattr lock open)))
                (allow sysadm_application_exec_domain evolution_exchange_t (file (ioctl read getattr lock open)))
                (allow sysadm_application_exec_domain evolution_t (lnk_file (read getattr)))
                (allow sysadm_application_exec_domain evolution_alarm_t (lnk_file (read getattr)))
                (allow sysadm_application_exec_domain evolution_exchange_t (lnk_file (read getattr)))
                (allow sysadm_application_exec_domain evolution_t (process (getattr)))
                (allow sysadm_application_exec_domain evolution_alarm_t (process (getattr)))
                (allow sysadm_application_exec_domain evolution_exchange_t (process (getattr)))
                (allow sysadm_application_exec_domain evolution_server_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_application_exec_domain evolution_webcal_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_application_exec_domain evolution_server_t (file (ioctl read getattr lock open)))
                (allow sysadm_application_exec_domain evolution_webcal_t (file (ioctl read getattr lock open)))
                (allow sysadm_application_exec_domain evolution_server_t (lnk_file (read getattr)))
                (allow sysadm_application_exec_domain evolution_webcal_t (lnk_file (read getattr)))
                (allow sysadm_application_exec_domain evolution_server_t (process (getattr)))
                (allow sysadm_application_exec_domain evolution_webcal_t (process (getattr)))
                (allow evolution_t sysadm_application_exec_domain (dir (getattr open search)))
                (allow evolution_t sysadm_application_exec_domain (file (ioctl read getattr lock open)))
                (allow evolution_t sysadm_application_exec_domain (lnk_file (read getattr)))
                (allow sysadm_t evolution_home_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t evolution_home_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t evolution_home_t (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename)))
                (allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_t evolution_exchange_tmp_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t evolution_alarm_orbit_tmp_t (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t evolution_exchange_orbit_tmp_t (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t evolution_orbit_tmp_t (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t evolution_server_orbit_tmp_t (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t evolution_alarm_tmpfs_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t evolution_exchange_tmpfs_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t evolution_tmpfs_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t evolution_webcal_tmpfs_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t evolution_alarm_tmpfs_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t evolution_exchange_tmpfs_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t evolution_tmpfs_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t evolution_webcal_tmpfs_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t evolution_alarm_tmpfs_t (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename)))
                (allow sysadm_t evolution_exchange_tmpfs_t (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename)))
                (allow sysadm_t evolution_tmpfs_t (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename)))
                (allow sysadm_t evolution_webcal_tmpfs_t (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename)))
                (allow sysadm_t evolution_alarm_tmpfs_t (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t evolution_exchange_tmpfs_t (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t evolution_tmpfs_t (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t evolution_webcal_tmpfs_t (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t evolution_alarm_tmpfs_t (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t evolution_exchange_tmpfs_t (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t evolution_tmpfs_t (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t evolution_webcal_tmpfs_t (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow evolution_t sysadm_application_exec_domain (unix_stream_socket (connectto)))
                (allow evolution_exchange_t sysadm_application_exec_domain (unix_stream_socket (connectto)))
                (allow sysadm_application_exec_domain evolution_orbit_tmp_t (dir (getattr open search)))
                (allow sysadm_application_exec_domain evolution_orbit_tmp_t (sock_file (write getattr append open)))
                (allow sysadm_application_exec_domain evolution_t (unix_stream_socket (connectto)))
                (allow sysadm_application_exec_domain evolution_exchange_orbit_tmp_t (dir (getattr open search)))
                (allow sysadm_application_exec_domain evolution_exchange_orbit_tmp_t (sock_file (write getattr append open)))
                (allow sysadm_application_exec_domain evolution_exchange_t (unix_stream_socket (connectto)))
                (typetransition sysadm_t user_home_dir_t dir ".evolution" evolution_home_t)
                (typetransition sysadm_t user_home_dir_t dir ".camel_certs" evolution_home_t)
                (optional sysadm_optional_663
                    (typeattributeset cil_gen_require evolution_t)
                    (typeattributeset cil_gen_require evolution_alarm_t)
                    (allow sysadm_application_exec_domain evolution_t (dbus (send_msg)))
                    (allow evolution_t sysadm_application_exec_domain (dbus (send_msg)))
                    (allow sysadm_application_exec_domain evolution_alarm_t (dbus (send_msg)))
                    (allow evolution_alarm_t sysadm_application_exec_domain (dbus (send_msg)))
                )
                (optional sysadm_optional_664
                    (typeattributeset cil_gen_require sysadm_systemd_t)
                    (allow sysadm_systemd_t evolution_t (dir (ioctl read getattr lock open search)))
                    (allow sysadm_systemd_t evolution_t (file (ioctl read getattr lock open)))
                    (allow sysadm_systemd_t evolution_t (lnk_file (read getattr)))
                    (allow sysadm_systemd_t evolution_t (process (getattr)))
                    (allow sysadm_systemd_t evolution_t (process (sigchld sigkill sigstop signull signal)))
                    (allow evolution_t sysadm_systemd_t (fd (use)))
                    (allow evolution_t sysadm_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                    (allow evolution_t sysadm_systemd_t (dir (ioctl read getattr lock open search)))
                    (allow evolution_t sysadm_systemd_t (file (ioctl read getattr lock open)))
                    (allow evolution_t sysadm_systemd_t (lnk_file (read getattr)))
                    (allow evolution_t sysadm_systemd_t (process (getattr)))
                    (allow evolution_t sysadm_systemd_t (process (sigchld)))
                    (allow sysadm_systemd_t evolution_alarm_t (dir (ioctl read getattr lock open search)))
                    (allow sysadm_systemd_t evolution_alarm_t (file (ioctl read getattr lock open)))
                    (allow sysadm_systemd_t evolution_alarm_t (lnk_file (read getattr)))
                    (allow sysadm_systemd_t evolution_alarm_t (process (getattr)))
                    (allow sysadm_systemd_t evolution_alarm_t (process (sigchld sigkill sigstop signull signal)))
                    (allow evolution_alarm_t sysadm_systemd_t (fd (use)))
                    (allow evolution_alarm_t sysadm_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                    (allow evolution_alarm_t sysadm_systemd_t (dir (ioctl read getattr lock open search)))
                    (allow evolution_alarm_t sysadm_systemd_t (file (ioctl read getattr lock open)))
                    (allow evolution_alarm_t sysadm_systemd_t (lnk_file (read getattr)))
                    (allow evolution_alarm_t sysadm_systemd_t (process (getattr)))
                    (allow evolution_alarm_t sysadm_systemd_t (process (sigchld)))
                    (allow sysadm_systemd_t evolution_exchange_t (dir (ioctl read getattr lock open search)))
                    (allow sysadm_systemd_t evolution_exchange_t (file (ioctl read getattr lock open)))
                    (allow sysadm_systemd_t evolution_exchange_t (lnk_file (read getattr)))
                    (allow sysadm_systemd_t evolution_exchange_t (process (getattr)))
                    (allow sysadm_systemd_t evolution_exchange_t (process (sigchld sigkill sigstop signull signal)))
                    (allow evolution_exchange_t sysadm_systemd_t (fd (use)))
                    (allow evolution_exchange_t sysadm_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                    (allow evolution_exchange_t sysadm_systemd_t (dir (ioctl read getattr lock open search)))
                    (allow evolution_exchange_t sysadm_systemd_t (file (ioctl read getattr lock open)))
                    (allow evolution_exchange_t sysadm_systemd_t (lnk_file (read getattr)))
                    (allow evolution_exchange_t sysadm_systemd_t (process (getattr)))
                    (allow evolution_exchange_t sysadm_systemd_t (process (sigchld)))
                    (allow sysadm_systemd_t evolution_server_t (dir (ioctl read getattr lock open search)))
                    (allow sysadm_systemd_t evolution_server_t (file (ioctl read getattr lock open)))
                    (allow sysadm_systemd_t evolution_server_t (lnk_file (read getattr)))
                    (allow sysadm_systemd_t evolution_server_t (process (getattr)))
                    (allow sysadm_systemd_t evolution_server_t (process (sigchld sigkill sigstop signull signal)))
                    (allow evolution_server_t sysadm_systemd_t (fd (use)))
                    (allow evolution_server_t sysadm_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                    (allow evolution_server_t sysadm_systemd_t (dir (ioctl read getattr lock open search)))
                    (allow evolution_server_t sysadm_systemd_t (file (ioctl read getattr lock open)))
                    (allow evolution_server_t sysadm_systemd_t (lnk_file (read getattr)))
                    (allow evolution_server_t sysadm_systemd_t (process (getattr)))
                    (allow evolution_server_t sysadm_systemd_t (process (sigchld)))
                    (allow sysadm_systemd_t evolution_webcal_t (dir (ioctl read getattr lock open search)))
                    (allow sysadm_systemd_t evolution_webcal_t (file (ioctl read getattr lock open)))
                    (allow sysadm_systemd_t evolution_webcal_t (lnk_file (read getattr)))
                    (allow sysadm_systemd_t evolution_webcal_t (process (getattr)))
                    (allow sysadm_systemd_t evolution_webcal_t (process (sigchld sigkill sigstop signull signal)))
                    (allow evolution_webcal_t sysadm_systemd_t (fd (use)))
                    (allow evolution_webcal_t sysadm_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                    (allow evolution_webcal_t sysadm_systemd_t (dir (ioctl read getattr lock open search)))
                    (allow evolution_webcal_t sysadm_systemd_t (file (ioctl read getattr lock open)))
                    (allow evolution_webcal_t sysadm_systemd_t (lnk_file (read getattr)))
                    (allow evolution_webcal_t sysadm_systemd_t (process (getattr)))
                    (allow evolution_webcal_t sysadm_systemd_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_665
                (roleattributeset cil_gen_require games_roles)
                (typeattributeset cil_gen_require games_t)
                (typeattributeset cil_gen_require games_exec_t)
                (typeattributeset cil_gen_require games_tmp_t)
                (typeattributeset cil_gen_require games_tmpfs_t)
                (roleattributeset cil_gen_require games_roles)
                (roleattributeset games_roles (sysadm_r ))
                (allow sysadm_application_exec_domain games_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_application_exec_domain games_t (process (transition)))
                (dontaudit sysadm_application_exec_domain games_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_application_exec_domain games_exec_t process games_t)
                (allow games_t sysadm_application_exec_domain (fd (use)))
                (allow games_t sysadm_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                (allow games_t sysadm_application_exec_domain (process (sigchld)))
                (allow sysadm_t games_tmp_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t games_tmp_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t games_tmpfs_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t games_tmpfs_t (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t games_tmpfs_t (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_application_exec_domain games_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_application_exec_domain games_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_application_exec_domain games_t (file (ioctl read getattr lock open)))
                (allow sysadm_application_exec_domain games_t (lnk_file (read getattr)))
                (allow sysadm_application_exec_domain games_t (process (getattr)))
                (allow sysadm_application_exec_domain games_tmpfs_t (dir (getattr open search)))
                (allow sysadm_application_exec_domain games_tmpfs_t (sock_file (write getattr append open)))
                (allow sysadm_application_exec_domain games_t (unix_stream_socket (connectto)))
                (allow games_t sysadm_application_exec_domain (unix_stream_socket (connectto)))
                (optional sysadm_optional_666
                    (typeattributeset cil_gen_require sysadm_systemd_t)
                    (allow sysadm_systemd_t games_t (dir (ioctl read getattr lock open search)))
                    (allow sysadm_systemd_t games_t (file (ioctl read getattr lock open)))
                    (allow sysadm_systemd_t games_t (lnk_file (read getattr)))
                    (allow sysadm_systemd_t games_t (process (getattr)))
                    (allow sysadm_systemd_t games_t (process (sigchld sigkill sigstop signull signal)))
                    (allow games_t sysadm_systemd_t (fd (use)))
                    (allow games_t sysadm_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                    (allow games_t sysadm_systemd_t (dir (ioctl read getattr lock open search)))
                    (allow games_t sysadm_systemd_t (file (ioctl read getattr lock open)))
                    (allow games_t sysadm_systemd_t (lnk_file (read getattr)))
                    (allow games_t sysadm_systemd_t (process (getattr)))
                    (allow games_t sysadm_systemd_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_667
                (type sysadm_gkeyringd_t)
                (roletype object_r sysadm_gkeyringd_t)
                (roleattributeset cil_gen_require gconfd_roles)
                (typeattributeset cil_gen_require domain)
                (typeattributeset domain (sysadm_t ))
                (typeattributeset cil_gen_require shell_exec_t)
                (typeattributeset cil_gen_require entry_type)
                (typeattributeset entry_type (shell_exec_t bin_t ))
                (typeattributeset cil_gen_require exec_type)
                (typeattributeset exec_type (shell_exec_t bin_t ))
                (typeattributeset cil_gen_require file_type)
                (typeattributeset file_type (shell_exec_t bin_t ))
                (typeattributeset cil_gen_require non_security_file_type)
                (typeattributeset non_security_file_type (shell_exec_t bin_t ))
                (typeattributeset cil_gen_require non_auth_file_type)
                (typeattributeset non_auth_file_type (shell_exec_t bin_t ))
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require process_user_target)
                (typeattributeset process_user_target (sysadm_t ))
                (typeattributeset cil_gen_require ubac_constrained_type)
                (typeattributeset ubac_constrained_type (sysadm_t ))
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require user_home_dir_t)
                (typeattributeset cil_gen_require home_root_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require user_runtime_t)
                (typeattributeset cil_gen_require user_runtime_root_t)
                (typeattributeset cil_gen_require application_exec_type)
                (typeattributeset cil_gen_require application_domain_type)
                (typeattributeset cil_gen_require gnomedomain)
                (typeattributeset cil_gen_require gkeyringd_domain)
                (typeattributeset cil_gen_require gkeyringd_exec_t)
                (typeattributeset cil_gen_require gnome_keyring_home_t)
                (typeattributeset cil_gen_require gnome_keyring_tmp_t)
                (typeattributeset cil_gen_require gconfd_t)
                (typeattributeset cil_gen_require gconfd_exec_t)
                (typeattributeset cil_gen_require gconf_tmp_t)
                (typeattributeset cil_gen_require gconf_home_t)
                (typeattributeset cil_gen_require gnome_home_t)
                (typeattributeset cil_gen_require sysadm_gkeyringd_t)
                (roleattributeset cil_gen_require sysadm_r)
                (roletype sysadm_r sysadm_gkeyringd_t)
                (roleattributeset cil_gen_require gconfd_roles)
                (roleattributeset gconfd_roles (sysadm_r ))
                (typeattributeset cil_gen_require non_auth_file_type)
                (typeattributeset non_auth_file_type (gkeyringd_exec_t ))
                (typeattributeset cil_gen_require file_type)
                (typeattributeset file_type (gkeyringd_exec_t ))
                (typeattributeset cil_gen_require domain)
                (typeattributeset domain (sysadm_gkeyringd_t ))
                (typeattributeset cil_gen_require application_domain_type)
                (typeattributeset application_domain_type (sysadm_gkeyringd_t ))
                (typeattributeset cil_gen_require gnomedomain)
                (typeattributeset gnomedomain (sysadm_gkeyringd_t ))
                (typeattributeset cil_gen_require process_user_target)
                (typeattributeset process_user_target (sysadm_gkeyringd_t ))
                (typeattributeset cil_gen_require entry_type)
                (typeattributeset entry_type (gkeyringd_exec_t ))
                (typeattributeset cil_gen_require ubac_constrained_type)
                (typeattributeset ubac_constrained_type (sysadm_gkeyringd_t ))
                (typeattributeset cil_gen_require exec_type)
                (typeattributeset exec_type (gkeyringd_exec_t ))
                (typeattributeset cil_gen_require application_exec_type)
                (typeattributeset application_exec_type (gkeyringd_exec_t ))
                (typeattributeset cil_gen_require gkeyringd_domain)
                (typeattributeset gkeyringd_domain (sysadm_gkeyringd_t ))
                (typeattributeset cil_gen_require non_security_file_type)
                (typeattributeset non_security_file_type (gkeyringd_exec_t ))
                (allow sysadm_gkeyringd_t gkeyringd_exec_t (file (entrypoint)))
                (allow sysadm_gkeyringd_t gkeyringd_exec_t (file (ioctl read getattr lock map execute open)))
                (allow sysadm_application_exec_domain gconfd_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_application_exec_domain gconfd_t (process (transition)))
                (dontaudit sysadm_application_exec_domain gconfd_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_application_exec_domain gconfd_exec_t process gconfd_t)
                (allow gconfd_t sysadm_application_exec_domain (fd (use)))
                (allow gconfd_t sysadm_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                (allow gconfd_t sysadm_application_exec_domain (process (sigchld)))
                (allow sysadm_t gconf_tmp_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t gconf_home_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t gconf_tmp_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t gconf_home_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_application_exec_domain gconfd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_application_exec_domain gconfd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_application_exec_domain gconfd_t (file (ioctl read getattr lock open)))
                (allow sysadm_application_exec_domain gconfd_t (lnk_file (read getattr)))
                (allow sysadm_application_exec_domain gconfd_t (process (getattr)))
                (allow sysadm_application_exec_domain gkeyringd_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_application_exec_domain sysadm_gkeyringd_t (process (transition)))
                (dontaudit sysadm_application_exec_domain sysadm_gkeyringd_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_application_exec_domain gkeyringd_exec_t process sysadm_gkeyringd_t)
                (allow sysadm_gkeyringd_t sysadm_application_exec_domain (fd (use)))
                (allow sysadm_gkeyringd_t sysadm_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                (allow sysadm_gkeyringd_t sysadm_application_exec_domain (process (sigchld)))
                (allow sysadm_t gnome_keyring_home_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t gnome_keyring_tmp_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t gnome_home_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t gnome_keyring_home_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t gnome_home_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_t user_home_dir_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_t gnome_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t gnome_keyring_tmp_t (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_application_exec_domain sysadm_gkeyringd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_application_exec_domain sysadm_gkeyringd_t (file (ioctl read getattr lock open)))
                (allow sysadm_application_exec_domain sysadm_gkeyringd_t (lnk_file (read getattr)))
                (allow sysadm_application_exec_domain sysadm_gkeyringd_t (process (getattr)))
                (allow sysadm_application_exec_domain sysadm_gkeyringd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_gkeyringd_t bin_t (dir (getattr open search)))
                (allow sysadm_gkeyringd_t bin_t (lnk_file (read getattr)))
                (allow sysadm_gkeyringd_t usr_t (dir (getattr open search)))
                (allow sysadm_gkeyringd_t bin_t (file (ioctl read getattr map execute open)))
                (allow sysadm_gkeyringd_t sysadm_t (process (transition)))
                (dontaudit sysadm_gkeyringd_t sysadm_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_gkeyringd_t bin_t process sysadm_t)
                (allow sysadm_gkeyringd_t bin_t (dir (getattr open search)))
                (allow sysadm_gkeyringd_t bin_t (lnk_file (read getattr)))
                (allow sysadm_gkeyringd_t usr_t (dir (getattr open search)))
                (allow sysadm_gkeyringd_t bin_t (dir (getattr open search)))
                (allow sysadm_gkeyringd_t bin_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_gkeyringd_t shell_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_gkeyringd_t sysadm_t (process (transition)))
                (dontaudit sysadm_gkeyringd_t sysadm_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_gkeyringd_t shell_exec_t process sysadm_t)
                (allow sysadm_application_exec_domain tmp_t (dir (getattr open search)))
                (allow sysadm_application_exec_domain user_runtime_t (dir (getattr open search)))
                (allow sysadm_application_exec_domain user_runtime_root_t (dir (getattr open search)))
                (allow sysadm_application_exec_domain var_run_t (lnk_file (read getattr)))
                (allow sysadm_application_exec_domain var_t (dir (getattr open search)))
                (allow sysadm_application_exec_domain var_run_t (dir (getattr open search)))
                (allow sysadm_application_exec_domain gnome_keyring_tmp_t (dir (getattr open search)))
                (allow sysadm_application_exec_domain gnome_keyring_tmp_t (sock_file (write getattr append open)))
                (allow sysadm_application_exec_domain sysadm_gkeyringd_t (unix_stream_socket (connectto)))
                (typetransition sysadm_t gnome_home_t dir "keyrings" gnome_keyring_home_t)
                (typetransition sysadm_t user_home_dir_t dir ".gnome2_private" gnome_home_t)
                (typetransition sysadm_t user_home_dir_t dir ".gnome2" gnome_home_t)
                (typetransition sysadm_t user_home_dir_t dir ".gnome" gnome_home_t)
                (typetransition sysadm_t user_home_dir_t dir ".gconfd" gconf_home_t)
                (typetransition sysadm_t user_home_dir_t dir ".gconf" gconf_home_t)
                (optional sysadm_optional_668
                    (typeattributeset cil_gen_require init_t)
                    (allow sysadm_gkeyringd_t init_t (process (sigchld)))
                    (allow sysadm_gkeyringd_t init_t (process (signull)))
                    (optional sysadm_optional_669
                        (typeattributeset cil_gen_require rpm_t)
                        (allow sysadm_gkeyringd_t rpm_t (fd (use)))
                        (allow sysadm_gkeyringd_t rpm_t (fifo_file (ioctl read getattr lock open)))
                    )
                    (optional sysadm_optional_670
                        (typeattributeset cil_gen_require security_t)
                        (typeattributeset cil_gen_require sysfs_t)
                        (dontaudit sysadm_gkeyringd_t security_t (filesystem (getattr)))
                        (dontaudit sysadm_gkeyringd_t sysfs_t (filesystem (getattr)))
                        (dontaudit sysadm_gkeyringd_t sysfs_t (dir (getattr open search)))
                        (dontaudit sysadm_gkeyringd_t security_t (dir (getattr open search)))
                        (dontaudit sysadm_gkeyringd_t security_t (file (ioctl read getattr lock open)))
                        (optional sysadm_optional_671
                            (typeattributeset cil_gen_require selinux_config_t)
                            (dontaudit sysadm_gkeyringd_t selinux_config_t (dir (getattr open search)))
                            (dontaudit sysadm_gkeyringd_t selinux_config_t (file (ioctl read getattr lock open)))
                            (optional sysadm_optional_672
                                (typeattributeset cil_gen_require sysadm_systemd_t)
                                (allow sysadm_systemd_t gconfd_t (dir (ioctl read getattr lock open search)))
                                (allow sysadm_systemd_t gconfd_t (file (ioctl read getattr lock open)))
                                (allow sysadm_systemd_t gconfd_t (lnk_file (read getattr)))
                                (allow sysadm_systemd_t gconfd_t (process (getattr)))
                                (allow sysadm_systemd_t gconfd_t (process (sigchld sigkill sigstop signull signal)))
                                (allow gconfd_t sysadm_systemd_t (fd (use)))
                                (allow gconfd_t sysadm_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                                (allow gconfd_t sysadm_systemd_t (dir (ioctl read getattr lock open search)))
                                (allow gconfd_t sysadm_systemd_t (file (ioctl read getattr lock open)))
                                (allow gconfd_t sysadm_systemd_t (lnk_file (read getattr)))
                                (allow gconfd_t sysadm_systemd_t (process (getattr)))
                                (allow gconfd_t sysadm_systemd_t (process (sigchld)))
                            )
                            (optional sysadm_optional_673
                                (typeattributeset cil_gen_require var_run_t)
                                (typeattributeset cil_gen_require var_t)
                                (typeattributeset cil_gen_require var_lib_t)
                                (typeattributeset cil_gen_require system_dbusd_t)
                                (typeattributeset cil_gen_require session_dbusd_tmp_t)
                                (typeattributeset cil_gen_require sysadm_dbusd_t)
                                (typeattributeset cil_gen_require dbusd_system_bus_client)
                                (typeattributeset cil_gen_require system_dbusd_runtime_t)
                                (typeattributeset cil_gen_require system_dbusd_var_lib_t)
                                (typeattributeset cil_gen_require dbusd_etc_t)
                                (typeattributeset cil_gen_require dbusd_session_bus_client)
                                (typeattributeset cil_gen_require dbusd_system_bus_client)
                                (typeattributeset dbusd_system_bus_client (sysadm_gkeyringd_t ))
                                (typeattributeset cil_gen_require dbusd_session_bus_client)
                                (typeattributeset dbusd_session_bus_client (sysadm_gkeyringd_t ))
                                (allow sysadm_dbusd_t gkeyringd_exec_t (file (ioctl read getattr map execute open)))
                                (allow sysadm_dbusd_t sysadm_gkeyringd_t (process (transition)))
                                (dontaudit sysadm_dbusd_t sysadm_gkeyringd_t (process (noatsecure siginh rlimitinh)))
                                (typetransition sysadm_dbusd_t gkeyringd_exec_t process sysadm_gkeyringd_t)
                                (allow sysadm_gkeyringd_t sysadm_dbusd_t (fd (use)))
                                (allow sysadm_gkeyringd_t sysadm_dbusd_t (fifo_file (ioctl read write getattr lock append)))
                                (allow sysadm_gkeyringd_t sysadm_dbusd_t (process (sigchld)))
                                (allow sysadm_gkeyringd_t sysadm_dbusd_t (dbus (send_msg)))
                                (allow sysadm_gkeyringd_t self (dbus (send_msg)))
                                (allow sysadm_dbusd_t sysadm_gkeyringd_t (dbus (send_msg)))
                                (allow sysadm_gkeyringd_t sysadm_dbusd_t (unix_stream_socket (connectto)))
                                (allow sysadm_gkeyringd_t sysadm_dbusd_t (fd (use)))
                                (allow sysadm_gkeyringd_t sysadm_dbusd_t (dbus (acquire_svc)))
                                (allow sysadm_gkeyringd_t system_dbusd_t (dbus (send_msg)))
                                (allow sysadm_gkeyringd_t self (dbus (send_msg)))
                                (allow system_dbusd_t sysadm_gkeyringd_t (dbus (send_msg)))
                                (allow sysadm_gkeyringd_t var_t (dir (getattr open search)))
                                (allow sysadm_gkeyringd_t var_lib_t (dir (getattr open search)))
                                (allow sysadm_gkeyringd_t system_dbusd_var_lib_t (dir (getattr open search)))
                                (allow sysadm_gkeyringd_t system_dbusd_var_lib_t (file (ioctl read getattr lock open)))
                                (allow sysadm_gkeyringd_t system_dbusd_var_lib_t (dir (getattr open search)))
                                (allow sysadm_gkeyringd_t system_dbusd_var_lib_t (lnk_file (read getattr)))
                                (allow sysadm_gkeyringd_t session_dbusd_tmp_t (dir (getattr open search)))
                                (allow sysadm_gkeyringd_t session_dbusd_tmp_t (sock_file (read write getattr append open)))
                                (allow sysadm_gkeyringd_t var_run_t (lnk_file (read getattr)))
                                (allow sysadm_gkeyringd_t var_t (dir (getattr open search)))
                                (allow sysadm_gkeyringd_t var_run_t (dir (getattr open search)))
                                (allow sysadm_gkeyringd_t system_dbusd_runtime_t (dir (getattr open search)))
                                (allow sysadm_gkeyringd_t system_dbusd_runtime_t (sock_file (write getattr append open)))
                                (allow sysadm_gkeyringd_t system_dbusd_t (unix_stream_socket (connectto)))
                                (allow sysadm_gkeyringd_t dbusd_etc_t (dir (ioctl read getattr lock open search)))
                                (allow sysadm_gkeyringd_t dbusd_etc_t (file (ioctl read getattr lock open)))
                                (allow sysadm_gkeyringd_t system_dbusd_runtime_t (dir (ioctl read getattr lock open search)))
                                (allow sysadm_gkeyringd_t system_dbusd_runtime_t (sock_file (read)))
                                (allow sysadm_gkeyringd_t system_dbusd_var_lib_t (dir (getattr open search)))
                                (allow sysadm_gkeyringd_t system_dbusd_var_lib_t (lnk_file (read getattr)))
                                (optional sysadm_optional_674
                                    (typeattributeset cil_gen_require evolution_t)
                                    (allow sysadm_gkeyringd_t evolution_t (dbus (send_msg)))
                                    (allow evolution_t sysadm_gkeyringd_t (dbus (send_msg)))
                                )
                                (optional sysadm_optional_675
                                    (typeattributeset cil_gen_require gconfd_t)
                                    (typeattributeset cil_gen_require sysadm_gkeyringd_t)
                                    (allow sysadm_application_exec_domain gconfd_t (dbus (send_msg)))
                                    (allow gconfd_t sysadm_application_exec_domain (dbus (send_msg)))
                                    (allow sysadm_application_exec_domain sysadm_gkeyringd_t (dbus (send_msg)))
                                    (allow sysadm_gkeyringd_t sysadm_application_exec_domain (dbus (send_msg)))
                                    (optional sysadm_optional_676
                                        (typeattributeset cil_gen_require sysadm_wm_t)
                                        (allow sysadm_gkeyringd_t sysadm_wm_t (dbus (send_msg)))
                                        (allow sysadm_wm_t sysadm_gkeyringd_t (dbus (send_msg)))
                                    )
                                )
                            )
                            (optional sysadm_optional_677
                                (typeattributeset cil_gen_require sysadm_systemd_t)
                                (allow sysadm_systemd_t sysadm_gkeyringd_t (dir (ioctl read getattr lock open search)))
                                (allow sysadm_systemd_t sysadm_gkeyringd_t (file (ioctl read getattr lock open)))
                                (allow sysadm_systemd_t sysadm_gkeyringd_t (lnk_file (read getattr)))
                                (allow sysadm_systemd_t sysadm_gkeyringd_t (process (getattr)))
                                (allow sysadm_systemd_t sysadm_gkeyringd_t (process (sigchld sigkill sigstop signull signal)))
                                (allow sysadm_gkeyringd_t sysadm_systemd_t (fd (use)))
                                (allow sysadm_gkeyringd_t sysadm_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                                (allow sysadm_gkeyringd_t sysadm_systemd_t (dir (ioctl read getattr lock open search)))
                                (allow sysadm_gkeyringd_t sysadm_systemd_t (file (ioctl read getattr lock open)))
                                (allow sysadm_gkeyringd_t sysadm_systemd_t (lnk_file (read getattr)))
                                (allow sysadm_gkeyringd_t sysadm_systemd_t (process (getattr)))
                                (allow sysadm_gkeyringd_t sysadm_systemd_t (process (sigchld)))
                            )
                        )
                    )
                )
            )
            (optional sysadm_optional_678
                (roleattributeset cil_gen_require gpg_roles)
                (roleattributeset cil_gen_require gpg_agent_roles)
                (roleattributeset cil_gen_require gpg_helper_roles)
                (roleattributeset cil_gen_require gpg_pinentry_roles)
                (typeattributeset cil_gen_require user_home_dir_t)
                (typeattributeset cil_gen_require home_root_t)
                (typeattributeset cil_gen_require gpg_agent_t)
                (typeattributeset cil_gen_require gpg_agent_tmp_t)
                (typeattributeset cil_gen_require gpg_secret_t)
                (typeattributeset cil_gen_require gpg_t)
                (typeattributeset cil_gen_require gpg_exec_t)
                (typeattributeset cil_gen_require gpg_agent_exec_t)
                (typeattributeset cil_gen_require gpg_helper_t)
                (typeattributeset cil_gen_require gpg_pinentry_t)
                (typeattributeset cil_gen_require gpg_pinentry_tmp_t)
                (roleattributeset cil_gen_require gpg_pinentry_roles)
                (roleattributeset gpg_pinentry_roles (sysadm_r ))
                (roleattributeset cil_gen_require gpg_agent_roles)
                (roleattributeset gpg_agent_roles (sysadm_r ))
                (roleattributeset cil_gen_require gpg_helper_roles)
                (roleattributeset gpg_helper_roles (sysadm_r ))
                (roleattributeset cil_gen_require gpg_roles)
                (roleattributeset gpg_roles (sysadm_r ))
                (allow sysadm_application_exec_domain gpg_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_application_exec_domain gpg_t (process (transition)))
                (dontaudit sysadm_application_exec_domain gpg_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_application_exec_domain gpg_exec_t process gpg_t)
                (allow gpg_t sysadm_application_exec_domain (fd (use)))
                (allow gpg_t sysadm_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                (allow gpg_t sysadm_application_exec_domain (process (sigchld)))
                (allow sysadm_application_exec_domain gpg_agent_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_application_exec_domain gpg_agent_t (process (transition)))
                (dontaudit sysadm_application_exec_domain gpg_agent_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_application_exec_domain gpg_agent_exec_t process gpg_agent_t)
                (allow gpg_agent_t sysadm_application_exec_domain (fd (use)))
                (allow gpg_agent_t sysadm_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                (allow gpg_agent_t sysadm_application_exec_domain (process (sigchld)))
                (allow sysadm_application_exec_domain self (process (setrlimit)))
                (allow sysadm_application_exec_domain gpg_agent_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_application_exec_domain gpg_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_application_exec_domain gpg_helper_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_application_exec_domain gpg_pinentry_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_application_exec_domain gpg_agent_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_application_exec_domain gpg_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_application_exec_domain gpg_helper_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_application_exec_domain gpg_pinentry_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_application_exec_domain gpg_agent_t (file (ioctl read getattr lock open)))
                (allow sysadm_application_exec_domain gpg_t (file (ioctl read getattr lock open)))
                (allow sysadm_application_exec_domain gpg_helper_t (file (ioctl read getattr lock open)))
                (allow sysadm_application_exec_domain gpg_pinentry_t (file (ioctl read getattr lock open)))
                (allow sysadm_application_exec_domain gpg_agent_t (lnk_file (read getattr)))
                (allow sysadm_application_exec_domain gpg_t (lnk_file (read getattr)))
                (allow sysadm_application_exec_domain gpg_helper_t (lnk_file (read getattr)))
                (allow sysadm_application_exec_domain gpg_pinentry_t (lnk_file (read getattr)))
                (allow sysadm_application_exec_domain gpg_agent_t (process (getattr)))
                (allow sysadm_application_exec_domain gpg_t (process (getattr)))
                (allow sysadm_application_exec_domain gpg_helper_t (process (getattr)))
                (allow sysadm_application_exec_domain gpg_pinentry_t (process (getattr)))
                (allow gpg_pinentry_t sysadm_application_exec_domain (process (signull)))
                (allow gpg_helper_t sysadm_application_exec_domain (fd (use)))
                (allow gpg_agent_t sysadm_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                (allow gpg_t sysadm_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                (allow gpg_helper_t sysadm_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                (allow gpg_pinentry_t sysadm_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                (allow sysadm_t gpg_agent_tmp_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t gpg_secret_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t gpg_agent_tmp_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t gpg_secret_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t gpg_secret_t (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename)))
                (allow sysadm_t gpg_agent_tmp_t (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t gpg_secret_t (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t gpg_pinentry_tmp_t (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t gpg_secret_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (typetransition sysadm_t user_home_dir_t dir ".gnupg" gpg_secret_t)
                (typetransition sysadm_t gpg_secret_t sock_file "log-socket" gpg_agent_tmp_t)
                (optional sysadm_optional_679
                    (typeattributeset cil_gen_require gpg_pinentry_t)
                    (allow sysadm_application_exec_domain gpg_pinentry_t (dbus (send_msg)))
                    (allow gpg_pinentry_t sysadm_application_exec_domain (dbus (send_msg)))
                )
                (optional sysadm_optional_680
                    (typeattributeset cil_gen_require sysadm_systemd_t)
                    (allow sysadm_systemd_t gpg_t (dir (ioctl read getattr lock open search)))
                    (allow sysadm_systemd_t gpg_t (file (ioctl read getattr lock open)))
                    (allow sysadm_systemd_t gpg_t (lnk_file (read getattr)))
                    (allow sysadm_systemd_t gpg_t (process (getattr)))
                    (allow sysadm_systemd_t gpg_t (process (sigchld sigkill sigstop signull signal)))
                    (allow gpg_t sysadm_systemd_t (fd (use)))
                    (allow gpg_t sysadm_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                    (allow gpg_t sysadm_systemd_t (dir (ioctl read getattr lock open search)))
                    (allow gpg_t sysadm_systemd_t (file (ioctl read getattr lock open)))
                    (allow gpg_t sysadm_systemd_t (lnk_file (read getattr)))
                    (allow gpg_t sysadm_systemd_t (process (getattr)))
                    (allow gpg_t sysadm_systemd_t (process (sigchld)))
                    (allow sysadm_systemd_t gpg_agent_t (dir (ioctl read getattr lock open search)))
                    (allow sysadm_systemd_t gpg_agent_t (file (ioctl read getattr lock open)))
                    (allow sysadm_systemd_t gpg_agent_t (lnk_file (read getattr)))
                    (allow sysadm_systemd_t gpg_agent_t (process (getattr)))
                    (allow sysadm_systemd_t gpg_agent_t (process (sigchld sigkill sigstop signull signal)))
                    (allow gpg_agent_t sysadm_systemd_t (fd (use)))
                    (allow gpg_agent_t sysadm_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                    (allow gpg_agent_t sysadm_systemd_t (dir (ioctl read getattr lock open search)))
                    (allow gpg_agent_t sysadm_systemd_t (file (ioctl read getattr lock open)))
                    (allow gpg_agent_t sysadm_systemd_t (lnk_file (read getattr)))
                    (allow gpg_agent_t sysadm_systemd_t (process (getattr)))
                    (allow gpg_agent_t sysadm_systemd_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_681
                (roleattributeset cil_gen_require irc_roles)
                (typeattributeset cil_gen_require user_home_dir_t)
                (typeattributeset cil_gen_require home_root_t)
                (typeattributeset cil_gen_require irc_t)
                (typeattributeset cil_gen_require irc_exec_t)
                (typeattributeset cil_gen_require irc_home_t)
                (typeattributeset cil_gen_require irc_tmp_t)
                (typeattributeset cil_gen_require irc_log_home_t)
                (roleattributeset cil_gen_require irc_roles)
                (roleattributeset irc_roles (sysadm_r ))
                (allow sysadm_application_exec_domain irc_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_application_exec_domain irc_t (process (transition)))
                (dontaudit sysadm_application_exec_domain irc_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_application_exec_domain irc_exec_t process irc_t)
                (allow irc_t sysadm_application_exec_domain (fd (use)))
                (allow irc_t sysadm_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                (allow irc_t sysadm_application_exec_domain (process (sigchld)))
                (allow sysadm_application_exec_domain irc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_application_exec_domain irc_t (file (ioctl read getattr lock open)))
                (allow sysadm_application_exec_domain irc_t (lnk_file (read getattr)))
                (allow sysadm_application_exec_domain irc_t (process (getattr)))
                (allow sysadm_application_exec_domain irc_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t irc_home_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t irc_tmp_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t irc_log_home_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t irc_home_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t irc_tmp_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t irc_log_home_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t irc_home_t (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename)))
                (allow sysadm_t irc_tmp_t (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename)))
                (allow sysadm_t irc_log_home_t (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename)))
                (allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t home_root_t (dir (getattr open search)))
                (allow sysadm_t home_root_t (lnk_file (read getattr)))
                (typetransition sysadm_t user_home_dir_t dir "irclogs" irc_log_home_t)
                (typetransition sysadm_t user_home_dir_t file ".ircmotd" irc_home_t)
                (typetransition sysadm_t user_home_dir_t dir ".irssi" irc_home_t)
                (optional sysadm_optional_682
                    (typeattributeset cil_gen_require sysadm_systemd_t)
                    (allow sysadm_systemd_t irc_t (dir (ioctl read getattr lock open search)))
                    (allow sysadm_systemd_t irc_t (file (ioctl read getattr lock open)))
                    (allow sysadm_systemd_t irc_t (lnk_file (read getattr)))
                    (allow sysadm_systemd_t irc_t (process (getattr)))
                    (allow sysadm_systemd_t irc_t (process (sigchld sigkill sigstop signull signal)))
                    (allow irc_t sysadm_systemd_t (fd (use)))
                    (allow irc_t sysadm_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                    (allow irc_t sysadm_systemd_t (dir (ioctl read getattr lock open search)))
                    (allow irc_t sysadm_systemd_t (file (ioctl read getattr lock open)))
                    (allow irc_t sysadm_systemd_t (lnk_file (read getattr)))
                    (allow irc_t sysadm_systemd_t (process (getattr)))
                    (allow irc_t sysadm_systemd_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_683
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require ircd_t)
                (typeattributeset cil_gen_require ircd_initrc_exec_t)
                (typeattributeset cil_gen_require ircd_etc_t)
                (typeattributeset cil_gen_require ircd_log_t)
                (typeattributeset cil_gen_require ircd_var_lib_t)
                (typeattributeset cil_gen_require ircd_runtime_t)
                (allow sysadm_t ircd_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t ircd_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t ircd_t (file (ioctl read getattr lock open)))
                (allow sysadm_t ircd_t (lnk_file (read getattr)))
                (allow sysadm_t ircd_t (process (getattr)))
                (allow sysadm_t etc_t (dir (getattr open search)))
                (allow sysadm_t ircd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ircd_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t ircd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ircd_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ircd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ircd_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t ircd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ircd_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ircd_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ircd_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ircd_etc_t (dir (getattr open search)))
                (allow sysadm_t ircd_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t ircd_etc_t (dir (getattr open search)))
                (allow sysadm_t ircd_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t ircd_etc_t (dir (getattr open search)))
                (allow sysadm_t ircd_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ircd_etc_t (dir (getattr open search)))
                (allow sysadm_t ircd_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ircd_etc_t (dir (getattr open search)))
                (allow sysadm_t ircd_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t ircd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ircd_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t ircd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ircd_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ircd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ircd_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t ircd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ircd_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ircd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ircd_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ircd_log_t (dir (getattr open search)))
                (allow sysadm_t ircd_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t ircd_log_t (dir (getattr open search)))
                (allow sysadm_t ircd_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t ircd_log_t (dir (getattr open search)))
                (allow sysadm_t ircd_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ircd_log_t (dir (getattr open search)))
                (allow sysadm_t ircd_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ircd_log_t (dir (getattr open search)))
                (allow sysadm_t ircd_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_t ircd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ircd_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t ircd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ircd_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ircd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ircd_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t ircd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ircd_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ircd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ircd_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ircd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t ircd_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t ircd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t ircd_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t ircd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t ircd_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ircd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t ircd_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ircd_var_lib_t (dir (getattr open search)))
                (allow sysadm_t ircd_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t ircd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ircd_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t ircd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ircd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ircd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ircd_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t ircd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ircd_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ircd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ircd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ircd_runtime_t (dir (getattr open search)))
                (allow sysadm_t ircd_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t ircd_runtime_t (dir (getattr open search)))
                (allow sysadm_t ircd_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t ircd_runtime_t (dir (getattr open search)))
                (allow sysadm_t ircd_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ircd_runtime_t (dir (getattr open search)))
                (allow sysadm_t ircd_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ircd_runtime_t (dir (getattr open search)))
                (allow sysadm_t ircd_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_684
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_685
                (roleattributeset cil_gen_require java_roles)
                (typeattributeset cil_gen_require java_t)
                (typeattributeset cil_gen_require java_exec_t)
                (typeattributeset cil_gen_require java_tmp_t)
                (typeattributeset cil_gen_require java_tmpfs_t)
                (typeattributeset cil_gen_require java_home_t)
                (roleattributeset cil_gen_require java_roles)
                (roleattributeset java_roles (sysadm_r ))
                (allow sysadm_application_exec_domain java_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_application_exec_domain java_t (process (transition)))
                (dontaudit sysadm_application_exec_domain java_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_application_exec_domain java_exec_t process java_t)
                (allow java_t sysadm_application_exec_domain (fd (use)))
                (allow java_t sysadm_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                (allow java_t sysadm_application_exec_domain (process (sigchld)))
                (allow sysadm_application_exec_domain java_t (process (sigchld sigkill sigstop signull signal ptrace noatsecure siginh rlimitinh)))
                (allow sysadm_application_exec_domain java_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_application_exec_domain java_t (file (ioctl read getattr lock open)))
                (allow sysadm_application_exec_domain java_t (lnk_file (read getattr)))
                (allow sysadm_application_exec_domain java_t (process (getattr)))
                (allow sysadm_t java_tmp_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t java_tmp_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t java_tmpfs_t (file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t java_tmpfs_t (fifo_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow sysadm_t java_tmpfs_t (lnk_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename)))
                (allow sysadm_t java_tmpfs_t (sock_file (ioctl read write create getattr setattr lock relabelfrom relabelto append unlink link rename open)))
                (allow java_t sysadm_application_exec_domain (process (signull)))
                (allow java_t sysadm_application_exec_domain (unix_stream_socket (connectto)))
                (allow java_t sysadm_application_exec_domain (unix_stream_socket (read write)))
                (allow java_t sysadm_application_exec_domain (tcp_socket (read write)))
                (allow sysadm_t java_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t java_home_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t java_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t java_home_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (optional sysadm_optional_686
                    (typeattributeset cil_gen_require sysadm_systemd_t)
                    (allow sysadm_systemd_t java_t (dir (ioctl read getattr lock open search)))
                    (allow sysadm_systemd_t java_t (file (ioctl read getattr lock open)))
                    (allow sysadm_systemd_t java_t (lnk_file (read getattr)))
                    (allow sysadm_systemd_t java_t (process (getattr)))
                    (allow sysadm_systemd_t java_t (process (sigchld sigkill sigstop signull signal)))
                    (allow java_t sysadm_systemd_t (fd (use)))
                    (allow java_t sysadm_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                    (allow java_t sysadm_systemd_t (dir (ioctl read getattr lock open search)))
                    (allow java_t sysadm_systemd_t (file (ioctl read getattr lock open)))
                    (allow java_t sysadm_systemd_t (lnk_file (read getattr)))
                    (allow java_t sysadm_systemd_t (process (getattr)))
                    (allow java_t sysadm_systemd_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_687
                (type sysadm_wm_t)
                (roletype object_r sysadm_wm_t)
                (typeattributeset cil_gen_require sysadm_application_exec_domain)
                (typeattributeset sysadm_application_exec_domain (sysadm_t ))
                (typeattributeset cil_gen_require domain)
                (typeattributeset domain (sysadm_t ))
                (typeattributeset cil_gen_require shell_exec_t)
                (typeattributeset cil_gen_require entry_type)
                (typeattributeset entry_type (shell_exec_t bin_t ))
                (typeattributeset cil_gen_require exec_type)
                (typeattributeset exec_type (shell_exec_t bin_t ))
                (typeattributeset cil_gen_require file_type)
                (typeattributeset file_type (shell_exec_t bin_t ))
                (typeattributeset cil_gen_require non_security_file_type)
                (typeattributeset non_security_file_type (shell_exec_t bin_t ))
                (typeattributeset cil_gen_require non_auth_file_type)
                (typeattributeset non_auth_file_type (shell_exec_t bin_t ))
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require ubac_constrained_type)
                (typeattributeset ubac_constrained_type (sysadm_t ))
                (typeattributeset cil_gen_require device_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require lib_t)
                (typeattributeset cil_gen_require fonts_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require user_home_dir_t)
                (typeattributeset cil_gen_require home_root_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require application_exec_type)
                (typeattributeset cil_gen_require nsswitch_domain)
                (typeattributeset nsswitch_domain (sysadm_t ))
                (typeattributeset cil_gen_require xdm_t)
                (typeattributeset cil_gen_require application_domain_type)
                (typeattributeset cil_gen_require xsession_log_t)
                (typeattributeset cil_gen_require mlsfilewrite)
                (typeattributeset cil_gen_require xauth_home_t)
                (typeattributeset cil_gen_require xauth_t)
                (typeattributeset cil_gen_require xauth_exec_t)
                (typeattributeset cil_gen_require iceauth_home_t)
                (typeattributeset cil_gen_require xserver_t)
                (typeattributeset cil_gen_require xserver_tmp_t)
                (typeattributeset cil_gen_require xserver_tmpfs_t)
                (typeattributeset cil_gen_require user_fonts_t)
                (typeattributeset cil_gen_require user_fonts_cache_t)
                (typeattributeset cil_gen_require user_fonts_config_t)
                (typeattributeset cil_gen_require mesa_shader_cache_t)
                (typeattributeset cil_gen_require iceauth_t)
                (typeattributeset cil_gen_require iceauth_exec_t)
                (typeattributeset cil_gen_require xdm_tmp_t)
                (typeattributeset cil_gen_require xserver_misc_device_t)
                (typeattributeset cil_gen_require power_device_t)
                (typeattributeset cil_gen_require event_device_t)
                (typeattributeset cil_gen_require misc_device_t)
                (typeattributeset cil_gen_require agp_device_t)
                (typeattributeset cil_gen_require dri_device_t)
                (typeattributeset cil_gen_require usbfs_t)
                (typeattributeset cil_gen_require fonts_cache_t)
                (typeattributeset cil_gen_require root_xdrawable_t)
                (typeattributeset cil_gen_require xevent_t)
                (typeattributeset cil_gen_require client_xevent_t)
                (typeattributeset cil_gen_require input_xevent_t)
                (typeattributeset cil_gen_require user_input_xevent_t)
                (typeattributeset cil_gen_require x_domain)
                (typeattributeset cil_gen_require xdrawable_type)
                (typeattributeset cil_gen_require xcolormap_type)
                (typeattributeset cil_gen_require input_xevent_type)
                (typeattributeset cil_gen_require xserver_exec_t)
                (typeattributeset cil_gen_require xserver_unconfined_type)
                (typeattributeset cil_gen_require xsession_exec_t)
                (typeattributeset cil_gen_require xserver_log_t)
                (typeattributeset cil_gen_require xdg_cache_t)
                (typeattributeset cil_gen_require xdm_var_run_t)
                (typeattributeset cil_gen_require xkb_var_lib_t)
                (typeattributeset cil_gen_require sysadm_wm_t)
                (typeattributeset cil_gen_require wm_domain)
                (typeattributeset cil_gen_require wm_exec_t)
                (typeattributeset cil_gen_require mlsfileread)
                (typeattributeset cil_gen_require mlsxwinread)
                (typeattributeset cil_gen_require mlsxwinwrite)
                (typeattributeset cil_gen_require mlsfduse)
                (roleattributeset cil_gen_require sysadm_r)
                (roletype sysadm_r xauth_t)
                (roletype sysadm_r xserver_t)
                (roletype sysadm_r iceauth_t)
                (roletype sysadm_r sysadm_wm_t)
                (typeattributeset cil_gen_require wm_domain)
                (typeattributeset wm_domain (sysadm_wm_t ))
                (typeattributeset cil_gen_require mlsxwinwrite)
                (typeattributeset mlsxwinwrite (sysadm_wm_t ))
                (typeattributeset cil_gen_require x_domain)
                (typeattributeset x_domain (sysadm_wm_t ))
                (typeattributeset cil_gen_require mlsfileread)
                (typeattributeset mlsfileread (sysadm_wm_t ))
                (typeattributeset cil_gen_require non_auth_file_type)
                (typeattributeset non_auth_file_type (xsession_exec_t wm_exec_t ))
                (typeattributeset cil_gen_require file_type)
                (typeattributeset file_type (xsession_exec_t wm_exec_t ))
                (typeattributeset cil_gen_require domain)
                (typeattributeset domain (sysadm_wm_t ))
                (typeattributeset cil_gen_require application_domain_type)
                (typeattributeset application_domain_type (sysadm_wm_t ))
                (typeattributeset cil_gen_require sysadm_application_exec_domain)
                (typeattributeset sysadm_application_exec_domain (sysadm_wm_t ))
                (typeattributeset cil_gen_require mlsfilewrite)
                (typeattributeset mlsfilewrite (sysadm_wm_t ))
                (typeattributeset cil_gen_require mlsxwinread)
                (typeattributeset mlsxwinread (sysadm_wm_t ))
                (typeattributeset cil_gen_require xdrawable_type)
                (typeattributeset xdrawable_type (sysadm_wm_t ))
                (typeattributeset cil_gen_require nsswitch_domain)
                (typeattributeset nsswitch_domain (sysadm_wm_t ))
                (typeattributeset cil_gen_require entry_type)
                (typeattributeset entry_type (xsession_exec_t wm_exec_t ))
                (typeattributeset cil_gen_require mlsfduse)
                (typeattributeset mlsfduse (sysadm_wm_t ))
                (typeattributeset cil_gen_require ubac_constrained_type)
                (typeattributeset ubac_constrained_type (sysadm_wm_t ))
                (typeattributeset cil_gen_require exec_type)
                (typeattributeset exec_type (xsession_exec_t wm_exec_t ))
                (typeattributeset cil_gen_require xserver_unconfined_type)
                (typeattributeset xserver_unconfined_type (sysadm_wm_t ))
                (typeattributeset cil_gen_require xcolormap_type)
                (typeattributeset xcolormap_type (sysadm_wm_t ))
                (typeattributeset cil_gen_require application_exec_type)
                (typeattributeset application_exec_type (wm_exec_t ))
                (typeattributeset cil_gen_require non_security_file_type)
                (typeattributeset non_security_file_type (xsession_exec_t wm_exec_t ))
                (allow sysadm_wm_t wm_exec_t (file (entrypoint)))
                (allow sysadm_wm_t wm_exec_t (file (ioctl read getattr lock map execute open)))
                (allow sysadm_application_exec_domain sysadm_wm_t (fd (use)))
                (allow sysadm_wm_t sysadm_application_exec_domain (unix_stream_socket (connectto)))
                (allow sysadm_application_exec_domain sysadm_wm_t (unix_stream_socket (connectto)))
                (allow sysadm_application_exec_domain sysadm_wm_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_application_exec_domain sysadm_wm_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_application_exec_domain sysadm_wm_t (file (ioctl read getattr lock open)))
                (allow sysadm_application_exec_domain sysadm_wm_t (lnk_file (read getattr)))
                (allow sysadm_application_exec_domain sysadm_wm_t (process (getattr)))
                (allow sysadm_wm_t sysadm_application_exec_domain (process (sigkill signull)))
                (allow sysadm_application_exec_domain wm_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_application_exec_domain sysadm_wm_t (process (transition)))
                (dontaudit sysadm_application_exec_domain sysadm_wm_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_application_exec_domain wm_exec_t process sysadm_wm_t)
                (allow sysadm_wm_t sysadm_application_exec_domain (fd (use)))
                (allow sysadm_wm_t sysadm_application_exec_domain (fifo_file (ioctl read write getattr lock append)))
                (allow sysadm_wm_t sysadm_application_exec_domain (process (sigchld)))
                (allow sysadm_wm_t bin_t (dir (getattr open search)))
                (allow sysadm_wm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_wm_t usr_t (dir (getattr open search)))
                (allow sysadm_wm_t bin_t (file (ioctl read getattr map execute open)))
                (allow sysadm_wm_t sysadm_t (process (transition)))
                (dontaudit sysadm_wm_t sysadm_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_wm_t bin_t process sysadm_t)
                (allow sysadm_wm_t bin_t (dir (getattr open search)))
                (allow sysadm_wm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_wm_t usr_t (dir (getattr open search)))
                (allow sysadm_wm_t bin_t (dir (getattr open search)))
                (allow sysadm_wm_t bin_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_wm_t shell_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_wm_t sysadm_t (process (transition)))
                (dontaudit sysadm_wm_t sysadm_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_wm_t shell_exec_t process sysadm_t)
                (allow sysadm_wm_t var_t (dir (getattr open search)))
                (allow sysadm_wm_t fonts_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_wm_t fonts_cache_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_wm_t fonts_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_wm_t fonts_cache_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_wm_t fonts_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_wm_t fonts_cache_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow xserver_t sysadm_wm_t (fd (use)))
                (allow xserver_t sysadm_wm_t (shm (getattr read write associate unix_read unix_write lock)))
                (allow xserver_t sysadm_wm_t (process (signal)))
                (allow sysadm_wm_t user_fonts_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_wm_t user_fonts_t (file (ioctl read getattr lock open)))
                (allow sysadm_wm_t user_fonts_config_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_wm_t user_fonts_config_t (file (ioctl read getattr lock open)))
                (allow sysadm_wm_t user_fonts_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_wm_t user_fonts_cache_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_wm_t user_fonts_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_wm_t user_fonts_cache_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_wm_t xserver_tmp_t (dir (getattr open search)))
                (allow sysadm_wm_t xserver_tmp_t (sock_file (write getattr append open)))
                (allow sysadm_wm_t xserver_t (unix_stream_socket (connectto)))
                (allow sysadm_wm_t tmp_t (dir (getattr open search)))
                (allow sysadm_wm_t xserver_t (fd (use)))
                (allow sysadm_wm_t xserver_t (shm (getattr read associate unix_read)))
                (allow sysadm_wm_t xserver_tmpfs_t (file (ioctl read getattr lock map open)))
                (allow sysadm_wm_t iceauth_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_wm_t iceauth_t (file (ioctl read getattr lock open)))
                (allow sysadm_wm_t iceauth_t (lnk_file (read getattr)))
                (allow sysadm_wm_t iceauth_t (process (getattr)))
                (allow sysadm_wm_t iceauth_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_wm_t iceauth_t (process (transition)))
                (dontaudit sysadm_wm_t iceauth_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_wm_t iceauth_exec_t process iceauth_t)
                (allow iceauth_t sysadm_wm_t (fd (use)))
                (allow iceauth_t sysadm_wm_t (fifo_file (ioctl read write getattr lock append)))
                (allow iceauth_t sysadm_wm_t (process (sigchld)))
                (allow sysadm_wm_t iceauth_home_t (file (ioctl read getattr lock open)))
                (allow sysadm_wm_t xauth_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_wm_t xauth_t (process (transition)))
                (dontaudit sysadm_wm_t xauth_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_wm_t xauth_exec_t process xauth_t)
                (allow xauth_t sysadm_wm_t (fd (use)))
                (allow xauth_t sysadm_wm_t (fifo_file (ioctl read write getattr lock append)))
                (allow xauth_t sysadm_wm_t (process (sigchld)))
                (allow sysadm_wm_t xauth_t (process (signal)))
                (allow sysadm_wm_t xauth_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_wm_t xauth_t (file (ioctl read getattr lock open)))
                (allow sysadm_wm_t xauth_t (lnk_file (read getattr)))
                (allow sysadm_wm_t xauth_t (process (getattr)))
                (allow sysadm_wm_t xserver_t (process (signal)))
                (allow sysadm_wm_t xauth_home_t (file (ioctl read getattr lock open)))
                (allow sysadm_wm_t xdm_t (fd (use)))
                (allow sysadm_wm_t xdm_t (fifo_file (ioctl read write getattr lock append)))
                (allow sysadm_wm_t xdm_tmp_t (dir (search)))
                (allow sysadm_wm_t xdm_tmp_t (sock_file (read write)))
                (dontaudit sysadm_wm_t xdm_t (tcp_socket (read write)))
                (allow sysadm_wm_t xserver_tmp_t (file (ioctl read getattr lock)))
                (allow sysadm_wm_t device_t (dir (getattr open search)))
                (allow sysadm_wm_t xserver_misc_device_t (chr_file (ioctl read write getattr lock append open)))
                (allow sysadm_wm_t xserver_misc_device_t (chr_file (map)))
                (allow sysadm_wm_t device_t (dir (getattr open search)))
                (allow sysadm_wm_t power_device_t (chr_file (ioctl read write getattr lock append open)))
                (allow sysadm_wm_t device_t (dir (getattr open search)))
                (allow sysadm_wm_t event_device_t (chr_file (ioctl read getattr lock open)))
                (allow sysadm_wm_t device_t (dir (getattr open search)))
                (allow sysadm_wm_t misc_device_t (chr_file (ioctl read getattr lock open)))
                (allow sysadm_wm_t device_t (dir (getattr open search)))
                (allow sysadm_wm_t misc_device_t (chr_file (ioctl write getattr lock append open)))
                (allow sysadm_wm_t device_t (dir (getattr open search)))
                (allow sysadm_wm_t agp_device_t (chr_file (getattr)))
                (dontaudit sysadm_wm_t dri_device_t (chr_file (ioctl read write getattr lock append open)))
                (allow sysadm_wm_t usbfs_t (dir (getattr open search)))
                (allow sysadm_wm_t usbfs_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_wm_t usbfs_t (dir (getattr open search)))
                (allow sysadm_wm_t usbfs_t (file (ioctl read write getattr lock append open)))
                (allow sysadm_wm_t usbfs_t (dir (getattr open search)))
                (allow sysadm_wm_t usbfs_t (lnk_file (read getattr)))
                (allow sysadm_wm_t usr_t (dir (getattr open search)))
                (allow sysadm_wm_t lib_t (dir (getattr open search)))
                (allow sysadm_wm_t fonts_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_wm_t fonts_t (dir (getattr open search)))
                (allow sysadm_wm_t fonts_t (file (ioctl read getattr lock open)))
                (allow sysadm_wm_t fonts_t (file (map)))
                (allow sysadm_wm_t fonts_t (dir (getattr open search)))
                (allow sysadm_wm_t fonts_t (lnk_file (read getattr)))
                (allow sysadm_wm_t fonts_cache_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_wm_t fonts_cache_t (dir (getattr open search)))
                (allow sysadm_wm_t fonts_cache_t (file (ioctl read getattr lock open)))
                (allow sysadm_wm_t fonts_cache_t (file (map)))
                (allow sysadm_wm_t fonts_cache_t (dir (getattr open search)))
                (allow sysadm_wm_t fonts_cache_t (lnk_file (read getattr)))
                (allow sysadm_wm_t fonts_t (dir (watch)))
                (typetransition sysadm_wm_t root_xdrawable_t x_drawable sysadm_wm_t)
                (typetransition sysadm_wm_t input_xevent_t x_event user_input_xevent_t)
                (allow sysadm_wm_t user_input_xevent_t (x_event (send)))
                (allow sysadm_wm_t user_input_xevent_t (x_synthetic_event (send)))
                (allow sysadm_wm_t user_input_xevent_t (x_event (receive)))
                (allow sysadm_wm_t user_input_xevent_t (x_synthetic_event (receive)))
                (allow sysadm_wm_t client_xevent_t (x_event (receive)))
                (allow sysadm_wm_t client_xevent_t (x_synthetic_event (receive)))
                (allow sysadm_wm_t xevent_t (x_event (receive)))
                (allow sysadm_wm_t xevent_t (x_synthetic_event (receive)))
                (dontaudit sysadm_wm_t input_xevent_type (x_event (send)))
                (allow sysadm_wm_t xserver_t (process (siginh)))
                (allow sysadm_wm_t xserver_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_wm_t xserver_t (process (transition)))
                (dontaudit sysadm_wm_t xserver_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_wm_t xserver_exec_t process xserver_t)
                (allow xserver_t sysadm_wm_t (fd (use)))
                (allow xserver_t sysadm_wm_t (fifo_file (ioctl read write getattr lock append)))
                (allow xserver_t sysadm_wm_t (process (sigchld)))
                (allow sysadm_wm_t xsession_exec_t (file (entrypoint)))
                (allow sysadm_wm_t xsession_exec_t (file (ioctl read getattr lock map execute open)))
                (dontaudit sysadm_wm_t xserver_log_t (file (ioctl write append)))
                (allow sysadm_wm_t tmp_t (dir (getattr open search)))
                (allow sysadm_wm_t xdm_tmp_t (dir (getattr open search)))
                (allow sysadm_wm_t xdm_tmp_t (sock_file (write getattr append open)))
                (allow sysadm_wm_t xdm_t (unix_stream_socket (connectto)))
                (allow sysadm_wm_t user_fonts_t (dir (ioctl read getattr lock open watch search)))
                (allow sysadm_wm_t user_fonts_t (file (ioctl read getattr lock map open)))
                (allow sysadm_wm_t user_fonts_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_wm_t user_fonts_cache_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_wm_t user_fonts_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_wm_t user_fonts_cache_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_wm_t user_fonts_cache_t (file (ioctl read getattr lock map open)))
                (allow sysadm_wm_t user_fonts_config_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_wm_t user_fonts_config_t (file (ioctl read getattr lock open)))
                (allow sysadm_wm_t user_home_dir_t (dir (getattr open search)))
                (allow sysadm_wm_t home_root_t (dir (getattr open search)))
                (allow sysadm_wm_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_wm_t xdg_cache_t (dir (getattr open search)))
                (allow sysadm_wm_t xdg_cache_t (dir (getattr open search)))
                (allow sysadm_wm_t user_home_dir_t (dir (getattr open search)))
                (allow sysadm_wm_t home_root_t (dir (getattr open search)))
                (allow sysadm_wm_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_wm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_wm_t var_t (dir (getattr open search)))
                (allow sysadm_wm_t var_run_t (dir (getattr open search)))
                (allow sysadm_wm_t xdm_var_run_t (dir (getattr open search)))
                (allow sysadm_wm_t xdm_var_run_t (file (ioctl read getattr lock open)))
                (allow sysadm_wm_t tmp_t (dir (getattr open search)))
                (allow sysadm_wm_t xdm_tmp_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_wm_t xdm_tmp_t (dir (ioctl write getattr lock open add_name search)))
                (allow sysadm_wm_t xdm_tmp_t (sock_file (create getattr open)))
                (allow sysadm_wm_t xdm_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_wm_t xdm_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_wm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_wm_t home_root_t (dir (getattr open search)))
                (allow sysadm_wm_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_wm_t xsession_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_wm_t xserver_tmp_t (file (ioctl read write getattr lock append open)))
                (allow sysadm_wm_t iceauth_home_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_wm_t iceauth_home_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_wm_t xauth_home_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_wm_t xauth_home_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_wm_t user_fonts_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_wm_t user_fonts_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_wm_t user_fonts_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_wm_t user_fonts_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_wm_t user_fonts_t (dir (getattr open search)))
                (allow sysadm_wm_t user_fonts_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_wm_t user_fonts_t (dir (getattr open search)))
                (allow sysadm_wm_t user_fonts_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_wm_t user_fonts_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_wm_t user_fonts_cache_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_wm_t user_fonts_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_wm_t user_fonts_cache_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_wm_t user_fonts_cache_t (dir (getattr open search)))
                (allow sysadm_wm_t user_fonts_cache_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_wm_t user_fonts_cache_t (dir (getattr open search)))
                (allow sysadm_wm_t user_fonts_cache_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_wm_t user_fonts_config_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_wm_t user_fonts_config_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_wm_t user_fonts_config_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_wm_t user_fonts_config_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_wm_t user_fonts_config_t (dir (getattr open search)))
                (allow sysadm_wm_t user_fonts_config_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_wm_t user_fonts_config_t (dir (getattr open search)))
                (allow sysadm_wm_t user_fonts_config_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_wm_t mesa_shader_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_wm_t mesa_shader_cache_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_wm_t mesa_shader_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_wm_t mesa_shader_cache_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_wm_t mesa_shader_cache_t (file (map)))
                (allow sysadm_wm_t mesa_shader_cache_t (dir (getattr open search)))
                (allow sysadm_wm_t mesa_shader_cache_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_wm_t mesa_shader_cache_t (dir (getattr open search)))
                (allow sysadm_wm_t mesa_shader_cache_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_wm_t user_home_dir_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_wm_t home_root_t (dir (getattr open search)))
                (allow sysadm_wm_t home_root_t (lnk_file (read getattr)))
                (allow sysadm_wm_t var_t (dir (getattr open search)))
                (allow sysadm_wm_t var_lib_t (dir (getattr open search)))
                (allow sysadm_wm_t xkb_var_lib_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_wm_t xkb_var_lib_t (dir (getattr open search)))
                (allow sysadm_wm_t xkb_var_lib_t (file (ioctl read getattr lock open)))
                (allow sysadm_wm_t xkb_var_lib_t (dir (getattr open search)))
                (allow sysadm_wm_t xkb_var_lib_t (lnk_file (read getattr)))
                (allow sysadm_wm_t xkb_var_lib_t (file (map)))
                (allow sysadm_wm_t xdm_t (unix_stream_socket (accept)))
                (allow sysadm_wm_t xserver_t (x_device (getattr setattr use read write getfocus setfocus bell force_cursor freeze grab manage list_property get_property set_property add remove create destroy)))
                (allow sysadm_wm_t xserver_t (x_pointer (getattr setattr use read write getfocus setfocus bell force_cursor freeze grab manage list_property get_property set_property add remove create destroy)))
                (allow sysadm_wm_t xserver_t (x_keyboard (getattr setattr use read write getfocus setfocus bell force_cursor freeze grab manage list_property get_property set_property add remove create destroy)))
                (allow sysadm_application_exec_domain sysadm_wm_t (fifo_file (write)))
                (typetransition sysadm_wm_t user_home_dir_t file ".ICEauthority" iceauth_home_t)
                (typetransition sysadm_wm_t user_home_dir_t file ".xsession-errors" xsession_log_t)
                (booleanif (xserver_allow_dri)
                    (true
                        (allow sysadm_wm_t dri_device_t (chr_file (map)))
                        (allow sysadm_wm_t dri_device_t (chr_file (ioctl read write getattr lock append open)))
                        (allow sysadm_wm_t device_t (dir (getattr open search)))
                    )
                )
                (booleanif (or (allow_write_xshm) (xserver_client_writes_xserver_tmpfs))
                    (true
                        (allow sysadm_wm_t xserver_tmpfs_t (file (ioctl read write getattr lock append open)))
                        (allow sysadm_wm_t xserver_tmpfs_t (file (ioctl read write getattr lock append open)))
                    )
                )
                (booleanif (allow_write_xshm)
                    (true
                        (allow sysadm_wm_t xserver_t (shm (getattr read write associate unix_read unix_write lock)))
                        (allow sysadm_wm_t xserver_t (shm (getattr read write associate unix_read unix_write lock)))
                    )
                )
                (optional sysadm_optional_688
                    (typeattributeset cil_gen_require init_t)
                    (allow sysadm_wm_t init_t (process (sigchld)))
                    (allow sysadm_wm_t init_t (process (signull)))
                    (optional sysadm_optional_689
                        (typeattributeset cil_gen_require rpm_t)
                        (allow sysadm_wm_t rpm_t (fd (use)))
                        (allow sysadm_wm_t rpm_t (fifo_file (ioctl read getattr lock open)))
                    )
                    (optional sysadm_optional_690
                        (typeattributeset cil_gen_require security_t)
                        (typeattributeset cil_gen_require sysfs_t)
                        (dontaudit sysadm_wm_t security_t (filesystem (getattr)))
                        (dontaudit sysadm_wm_t sysfs_t (filesystem (getattr)))
                        (dontaudit sysadm_wm_t sysfs_t (dir (getattr open search)))
                        (dontaudit sysadm_wm_t security_t (dir (getattr open search)))
                        (dontaudit sysadm_wm_t security_t (file (ioctl read getattr lock open)))
                        (optional sysadm_optional_691
                            (typeattributeset cil_gen_require selinux_config_t)
                            (dontaudit sysadm_wm_t selinux_config_t (dir (getattr open search)))
                            (dontaudit sysadm_wm_t selinux_config_t (file (ioctl read getattr lock open)))
                            (optional sysadm_optional_692
                                (typeattributeset cil_gen_require sysadm_systemd_t)
                                (allow sysadm_systemd_t iceauth_t (dir (ioctl read getattr lock open search)))
                                (allow sysadm_systemd_t iceauth_t (file (ioctl read getattr lock open)))
                                (allow sysadm_systemd_t iceauth_t (lnk_file (read getattr)))
                                (allow sysadm_systemd_t iceauth_t (process (getattr)))
                                (allow sysadm_systemd_t iceauth_t (process (sigchld sigkill sigstop signull signal)))
                                (allow iceauth_t sysadm_systemd_t (fd (use)))
                                (allow iceauth_t sysadm_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                                (allow iceauth_t sysadm_systemd_t (dir (ioctl read getattr lock open search)))
                                (allow iceauth_t sysadm_systemd_t (file (ioctl read getattr lock open)))
                                (allow iceauth_t sysadm_systemd_t (lnk_file (read getattr)))
                                (allow iceauth_t sysadm_systemd_t (process (getattr)))
                                (allow iceauth_t sysadm_systemd_t (process (sigchld)))
                                (allow sysadm_systemd_t xauth_t (dir (ioctl read getattr lock open search)))
                                (allow sysadm_systemd_t xauth_t (file (ioctl read getattr lock open)))
                                (allow sysadm_systemd_t xauth_t (lnk_file (read getattr)))
                                (allow sysadm_systemd_t xauth_t (process (getattr)))
                                (allow sysadm_systemd_t xauth_t (process (sigchld sigkill sigstop signull signal)))
                                (allow xauth_t sysadm_systemd_t (fd (use)))
                                (allow xauth_t sysadm_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                                (allow xauth_t sysadm_systemd_t (dir (ioctl read getattr lock open search)))
                                (allow xauth_t sysadm_systemd_t (file (ioctl read getattr lock open)))
                                (allow xauth_t sysadm_systemd_t (lnk_file (read getattr)))
                                (allow xauth_t sysadm_systemd_t (process (getattr)))
                                (allow xauth_t sysadm_systemd_t (process (sigchld)))
                                (allow sysadm_systemd_t xserver_t (dir (ioctl read getattr lock open search)))
                                (allow sysadm_systemd_t xserver_t (file (ioctl read getattr lock open)))
                                (allow sysadm_systemd_t xserver_t (lnk_file (read getattr)))
                                (allow sysadm_systemd_t xserver_t (process (getattr)))
                                (allow sysadm_systemd_t xserver_t (process (sigchld sigkill sigstop signull signal)))
                                (allow xserver_t sysadm_systemd_t (fd (use)))
                                (allow xserver_t sysadm_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                                (allow xserver_t sysadm_systemd_t (dir (ioctl read getattr lock open search)))
                                (allow xserver_t sysadm_systemd_t (file (ioctl read getattr lock open)))
                                (allow xserver_t sysadm_systemd_t (lnk_file (read getattr)))
                                (allow xserver_t sysadm_systemd_t (process (getattr)))
                                (allow xserver_t sysadm_systemd_t (process (sigchld)))
                                (optional sysadm_optional_693
                                    (typeattributeset cil_gen_require sysadm_systemd_t)
                                    (allow sysadm_systemd_t xserver_t (dir (ioctl read getattr lock open search)))
                                    (allow sysadm_systemd_t xserver_t (file (ioctl read getattr lock open)))
                                    (allow sysadm_systemd_t xserver_t (lnk_file (read getattr)))
                                    (allow sysadm_systemd_t xserver_t (process (getattr)))
                                    (allow sysadm_systemd_t xserver_t (process (sigchld sigkill sigstop signull signal)))
                                    (allow xserver_t sysadm_systemd_t (fd (use)))
                                    (allow xserver_t sysadm_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                                    (allow xserver_t sysadm_systemd_t (dir (ioctl read getattr lock open search)))
                                    (allow xserver_t sysadm_systemd_t (file (ioctl read getattr lock open)))
                                    (allow xserver_t sysadm_systemd_t (lnk_file (read getattr)))
                                    (allow xserver_t sysadm_systemd_t (process (getattr)))
                                    (allow xserver_t sysadm_systemd_t (process (sigchld)))
                                )
                            )
                            (optional sysadm_optional_694
                                (typeattributeset cil_gen_require user_home_dir_t)
                                (typeattributeset cil_gen_require home_root_t)
                                (typeattributeset cil_gen_require xdg_cache_t)
                                (allow sysadm_wm_t user_home_dir_t (dir (getattr open search)))
                                (allow sysadm_wm_t home_root_t (dir (getattr open search)))
                                (allow sysadm_wm_t home_root_t (lnk_file (read getattr)))
                                (allow sysadm_wm_t xdg_cache_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                                (allow sysadm_wm_t xdg_cache_t (dir (create getattr)))
                                (typetransition sysadm_wm_t xdg_cache_t dir "mesa_shader_cache" mesa_shader_cache_t)
                                (optional sysadm_optional_695
                                    (typeattributeset cil_gen_require var_run_t)
                                    (typeattributeset cil_gen_require var_t)
                                    (typeattributeset cil_gen_require var_lib_t)
                                    (typeattributeset cil_gen_require system_dbusd_t)
                                    (typeattributeset cil_gen_require session_dbusd_tmp_t)
                                    (typeattributeset cil_gen_require sysadm_dbusd_t)
                                    (typeattributeset cil_gen_require dbusd_system_bus_client)
                                    (typeattributeset cil_gen_require system_dbusd_runtime_t)
                                    (typeattributeset cil_gen_require system_dbusd_var_lib_t)
                                    (typeattributeset cil_gen_require dbusd_etc_t)
                                    (typeattributeset cil_gen_require dbusd_session_bus_client)
                                    (typeattributeset cil_gen_require dbusd_system_bus_client)
                                    (typeattributeset dbusd_system_bus_client (sysadm_wm_t ))
                                    (typeattributeset cil_gen_require dbusd_session_bus_client)
                                    (typeattributeset dbusd_session_bus_client (sysadm_wm_t ))
                                    (allow sysadm_wm_t sysadm_dbusd_t (dbus (acquire_svc)))
                                    (allow sysadm_wm_t sysadm_dbusd_t (dbus (send_msg)))
                                    (allow sysadm_wm_t self (dbus (send_msg)))
                                    (allow sysadm_dbusd_t sysadm_wm_t (dbus (send_msg)))
                                    (allow sysadm_wm_t sysadm_dbusd_t (unix_stream_socket (connectto)))
                                    (allow sysadm_wm_t sysadm_dbusd_t (fd (use)))
                                    (allow sysadm_wm_t system_dbusd_t (dbus (send_msg)))
                                    (allow sysadm_wm_t self (dbus (send_msg)))
                                    (allow system_dbusd_t sysadm_wm_t (dbus (send_msg)))
                                    (allow sysadm_wm_t var_t (dir (getattr open search)))
                                    (allow sysadm_wm_t var_lib_t (dir (getattr open search)))
                                    (allow sysadm_wm_t system_dbusd_var_lib_t (dir (getattr open search)))
                                    (allow sysadm_wm_t system_dbusd_var_lib_t (file (ioctl read getattr lock open)))
                                    (allow sysadm_wm_t system_dbusd_var_lib_t (dir (getattr open search)))
                                    (allow sysadm_wm_t system_dbusd_var_lib_t (lnk_file (read getattr)))
                                    (allow sysadm_wm_t session_dbusd_tmp_t (dir (getattr open search)))
                                    (allow sysadm_wm_t session_dbusd_tmp_t (sock_file (read write getattr append open)))
                                    (allow sysadm_wm_t var_run_t (lnk_file (read getattr)))
                                    (allow sysadm_wm_t var_t (dir (getattr open search)))
                                    (allow sysadm_wm_t var_run_t (dir (getattr open search)))
                                    (allow sysadm_wm_t system_dbusd_runtime_t (dir (getattr open search)))
                                    (allow sysadm_wm_t system_dbusd_runtime_t (sock_file (write getattr append open)))
                                    (allow sysadm_wm_t system_dbusd_t (unix_stream_socket (connectto)))
                                    (allow sysadm_wm_t dbusd_etc_t (dir (ioctl read getattr lock open search)))
                                    (allow sysadm_wm_t dbusd_etc_t (file (ioctl read getattr lock open)))
                                    (allow sysadm_wm_t system_dbusd_runtime_t (dir (ioctl read getattr lock open search)))
                                    (allow sysadm_wm_t system_dbusd_runtime_t (sock_file (read)))
                                    (allow sysadm_wm_t system_dbusd_var_lib_t (dir (getattr open search)))
                                    (allow sysadm_wm_t system_dbusd_var_lib_t (lnk_file (read getattr)))
                                    (optional sysadm_optional_696
                                        (typeattributeset cil_gen_require sysadm_wm_t)
                                        (allow sysadm_application_exec_domain sysadm_wm_t (dbus (send_msg)))
                                        (allow sysadm_wm_t sysadm_application_exec_domain (dbus (send_msg)))
                                    )
                                )
                                (optional sysadm_optional_697
                                    (typeattributeset cil_gen_require var_run_t)
                                    (typeattributeset cil_gen_require var_t)
                                    (typeattributeset cil_gen_require tmp_t)
                                    (typeattributeset cil_gen_require user_runtime_t)
                                    (typeattributeset cil_gen_require user_runtime_root_t)
                                    (typeattributeset cil_gen_require gkeyringd_domain)
                                    (typeattributeset cil_gen_require gnome_keyring_tmp_t)
                                    (allow sysadm_wm_t tmp_t (dir (getattr open search)))
                                    (allow sysadm_wm_t user_runtime_t (dir (getattr open search)))
                                    (allow sysadm_wm_t user_runtime_root_t (dir (getattr open search)))
                                    (allow sysadm_wm_t var_run_t (lnk_file (read getattr)))
                                    (allow sysadm_wm_t var_t (dir (getattr open search)))
                                    (allow sysadm_wm_t var_run_t (dir (getattr open search)))
                                    (allow sysadm_wm_t gnome_keyring_tmp_t (dir (getattr open search)))
                                    (allow sysadm_wm_t gnome_keyring_tmp_t (sock_file (write getattr append open)))
                                    (allow sysadm_wm_t gkeyringd_domain (unix_stream_socket (connectto)))
                                )
                                (optional sysadm_optional_698
                                    (typeattributeset cil_gen_require NetworkManager_etc_t)
                                    (allow sysadm_wm_t NetworkManager_etc_t (dir (watch)))
                                )
                                (optional sysadm_optional_699
                                    (roleattributeset cil_gen_require policykit_auth_roles)
                                    (typeattributeset cil_gen_require bin_t)
                                    (typeattributeset cil_gen_require usr_t)
                                    (typeattributeset cil_gen_require policykit_auth_t)
                                    (typeattributeset cil_gen_require policykit_auth_exec_t)
                                    (roleattributeset cil_gen_require policykit_auth_roles)
                                    (roleattributeset policykit_auth_roles (sysadm_r ))
                                    (allow sysadm_wm_t bin_t (dir (getattr open search)))
                                    (allow sysadm_wm_t bin_t (lnk_file (read getattr)))
                                    (allow sysadm_wm_t usr_t (dir (getattr open search)))
                                    (allow sysadm_wm_t policykit_auth_exec_t (file (ioctl read getattr map execute open)))
                                    (allow sysadm_wm_t policykit_auth_t (process (transition)))
                                    (dontaudit sysadm_wm_t policykit_auth_t (process (noatsecure siginh rlimitinh)))
                                    (typetransition sysadm_wm_t policykit_auth_exec_t process policykit_auth_t)
                                    (allow policykit_auth_t sysadm_wm_t (fd (use)))
                                    (allow policykit_auth_t sysadm_wm_t (fifo_file (ioctl read write getattr lock append)))
                                    (allow policykit_auth_t sysadm_wm_t (process (sigchld)))
                                    (allow sysadm_wm_t policykit_auth_t (process (signal)))
                                )
                                (optional sysadm_optional_700
                                    (roleattributeset cil_gen_require pulseaudio_roles)
                                    (typeattributeset cil_gen_require bin_t)
                                    (typeattributeset cil_gen_require usr_t)
                                    (typeattributeset cil_gen_require pulseaudio_client)
                                    (typeattributeset cil_gen_require pulseaudio_t)
                                    (typeattributeset cil_gen_require pulseaudio_exec_t)
                                    (roleattributeset cil_gen_require pulseaudio_roles)
                                    (roleattributeset pulseaudio_roles (sysadm_r ))
                                    (typeattributeset cil_gen_require pulseaudio_client)
                                    (typeattributeset pulseaudio_client (sysadm_wm_t ))
                                    (allow sysadm_wm_t bin_t (dir (getattr open search)))
                                    (allow sysadm_wm_t bin_t (lnk_file (read getattr)))
                                    (allow sysadm_wm_t usr_t (dir (getattr open search)))
                                    (allow sysadm_wm_t pulseaudio_exec_t (file (ioctl read getattr map execute open)))
                                    (allow sysadm_wm_t pulseaudio_t (process (transition)))
                                    (dontaudit sysadm_wm_t pulseaudio_t (process (noatsecure siginh rlimitinh)))
                                    (typetransition sysadm_wm_t pulseaudio_exec_t process pulseaudio_t)
                                    (allow pulseaudio_t sysadm_wm_t (fd (use)))
                                    (allow pulseaudio_t sysadm_wm_t (fifo_file (ioctl read write getattr lock append)))
                                    (allow pulseaudio_t sysadm_wm_t (process (sigchld)))
                                )
                                (optional sysadm_optional_701
                                    (typeattributeset cil_gen_require sysadm_systemd_t)
                                    (allow sysadm_systemd_t sysadm_wm_t (dir (ioctl read getattr lock open search)))
                                    (allow sysadm_systemd_t sysadm_wm_t (file (ioctl read getattr lock open)))
                                    (allow sysadm_systemd_t sysadm_wm_t (lnk_file (read getattr)))
                                    (allow sysadm_systemd_t sysadm_wm_t (process (getattr)))
                                    (allow sysadm_systemd_t sysadm_wm_t (process (sigchld sigkill sigstop signull signal)))
                                    (allow sysadm_wm_t sysadm_systemd_t (fd (use)))
                                    (allow sysadm_wm_t sysadm_systemd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect listen accept getopt setopt shutdown)))
                                    (allow sysadm_wm_t sysadm_systemd_t (dir (ioctl read getattr lock open search)))
                                    (allow sysadm_wm_t sysadm_systemd_t (file (ioctl read getattr lock open)))
                                    (allow sysadm_wm_t sysadm_systemd_t (lnk_file (read getattr)))
                                    (allow sysadm_wm_t sysadm_systemd_t (process (getattr)))
                                    (allow sysadm_wm_t sysadm_systemd_t (process (sigchld)))
                                )
                                (optional sysadm_optional_702
                                    (roleattributeset cil_gen_require xscreensaver_roles)
                                    (typeattributeset cil_gen_require bin_t)
                                    (typeattributeset cil_gen_require usr_t)
                                    (typeattributeset cil_gen_require xscreensaver_t)
                                    (typeattributeset cil_gen_require xscreensaver_exec_t)
                                    (roleattributeset cil_gen_require xscreensaver_roles)
                                    (roleattributeset xscreensaver_roles (sysadm_r ))
                                    (allow sysadm_wm_t bin_t (dir (getattr open search)))
                                    (allow sysadm_wm_t bin_t (lnk_file (read getattr)))
                                    (allow sysadm_wm_t usr_t (dir (getattr open search)))
                                    (allow sysadm_wm_t xscreensaver_exec_t (file (ioctl read getattr map execute open)))
                                    (allow sysadm_wm_t xscreensaver_t (process (transition)))
                                    (dontaudit sysadm_wm_t xscreensaver_t (process (noatsecure siginh rlimitinh)))
                                    (typetransition sysadm_wm_t xscreensaver_exec_t process xscreensaver_t)
                                    (allow xscreensaver_t sysadm_wm_t (fd (use)))
                                    (allow xscreensaver_t sysadm_wm_t (fifo_file (ioctl read write getattr lock append)))
                                    (allow xscreensaver_t sysadm_wm_t (process (sigchld)))
                                )
                            )
                        )
                    )
                )
            )
            (optional sysadm_optional_703
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require var_spool_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require asterisk_t)
                (typeattributeset cil_gen_require asterisk_runtime_t)
                (typeattributeset cil_gen_require asterisk_spool_t)
                (typeattributeset cil_gen_require asterisk_etc_t)
                (typeattributeset cil_gen_require asterisk_tmp_t)
                (typeattributeset cil_gen_require asterisk_log_t)
                (typeattributeset cil_gen_require asterisk_var_lib_t)
                (typeattributeset cil_gen_require asterisk_initrc_exec_t)
                (typeattributeset cil_gen_require asterisk_exec_t)
                (allow sysadm_t asterisk_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t asterisk_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t asterisk_t (file (ioctl read getattr lock open)))
                (allow sysadm_t asterisk_t (lnk_file (read getattr)))
                (allow sysadm_t asterisk_t (process (getattr)))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t asterisk_exec_t (file (ioctl read getattr lock map execute open execute_no_trans)))
                (allow sysadm_t tmp_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t asterisk_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t asterisk_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t asterisk_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t asterisk_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t asterisk_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t asterisk_tmp_t (dir (getattr open search)))
                (allow sysadm_t asterisk_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t asterisk_tmp_t (dir (getattr open search)))
                (allow sysadm_t asterisk_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t asterisk_tmp_t (dir (getattr open search)))
                (allow sysadm_t asterisk_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t asterisk_tmp_t (dir (getattr open search)))
                (allow sysadm_t asterisk_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t asterisk_tmp_t (dir (getattr open search)))
                (allow sysadm_t asterisk_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t asterisk_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t asterisk_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t asterisk_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t asterisk_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t asterisk_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t asterisk_etc_t (dir (getattr open search)))
                (allow sysadm_t asterisk_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t asterisk_etc_t (dir (getattr open search)))
                (allow sysadm_t asterisk_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t asterisk_etc_t (dir (getattr open search)))
                (allow sysadm_t asterisk_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t asterisk_etc_t (dir (getattr open search)))
                (allow sysadm_t asterisk_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t asterisk_etc_t (dir (getattr open search)))
                (allow sysadm_t asterisk_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t asterisk_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t asterisk_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t asterisk_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t asterisk_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t asterisk_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t asterisk_log_t (dir (getattr open search)))
                (allow sysadm_t asterisk_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t asterisk_log_t (dir (getattr open search)))
                (allow sysadm_t asterisk_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t asterisk_log_t (dir (getattr open search)))
                (allow sysadm_t asterisk_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t asterisk_log_t (dir (getattr open search)))
                (allow sysadm_t asterisk_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t asterisk_log_t (dir (getattr open search)))
                (allow sysadm_t asterisk_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_spool_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t asterisk_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_spool_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t asterisk_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_spool_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t asterisk_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_spool_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t asterisk_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_spool_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t asterisk_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_spool_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t asterisk_spool_t (dir (getattr open search)))
                (allow sysadm_t asterisk_spool_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t asterisk_spool_t (dir (getattr open search)))
                (allow sysadm_t asterisk_spool_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t asterisk_spool_t (dir (getattr open search)))
                (allow sysadm_t asterisk_spool_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t asterisk_spool_t (dir (getattr open search)))
                (allow sysadm_t asterisk_spool_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t asterisk_spool_t (dir (getattr open search)))
                (allow sysadm_t asterisk_spool_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t asterisk_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t asterisk_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t asterisk_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t asterisk_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t asterisk_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t asterisk_var_lib_t (dir (getattr open search)))
                (allow sysadm_t asterisk_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t asterisk_var_lib_t (dir (getattr open search)))
                (allow sysadm_t asterisk_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t asterisk_var_lib_t (dir (getattr open search)))
                (allow sysadm_t asterisk_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t asterisk_var_lib_t (dir (getattr open search)))
                (allow sysadm_t asterisk_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t asterisk_var_lib_t (dir (getattr open search)))
                (allow sysadm_t asterisk_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t asterisk_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t asterisk_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t asterisk_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t asterisk_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t asterisk_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t asterisk_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t asterisk_runtime_t (dir (getattr open search)))
                (allow sysadm_t asterisk_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t asterisk_runtime_t (dir (getattr open search)))
                (allow sysadm_t asterisk_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t asterisk_runtime_t (dir (getattr open search)))
                (allow sysadm_t asterisk_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t asterisk_runtime_t (dir (getattr open search)))
                (allow sysadm_t asterisk_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t asterisk_runtime_t (dir (getattr open search)))
                (allow sysadm_t asterisk_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_704
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_705
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require bitcoin_t)
                (typeattributeset cil_gen_require bitcoin_etc_t)
                (typeattributeset cil_gen_require bitcoin_tmp_t)
                (typeattributeset cil_gen_require bitcoin_log_t)
                (typeattributeset cil_gen_require bitcoin_var_lib_t)
                (typeattributeset cil_gen_require bitcoin_runtime_t)
                (typeattributeset cil_gen_require bitcoin_initrc_exec_t)
                (allow sysadm_t bitcoin_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t bitcoin_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t bitcoin_t (file (ioctl read getattr lock open)))
                (allow sysadm_t bitcoin_t (lnk_file (read getattr)))
                (allow sysadm_t bitcoin_t (process (getattr)))
                (allow sysadm_t tmp_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t bitcoin_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bitcoin_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t bitcoin_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bitcoin_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bitcoin_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bitcoin_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t bitcoin_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bitcoin_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bitcoin_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bitcoin_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bitcoin_tmp_t (dir (getattr open search)))
                (allow sysadm_t bitcoin_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t bitcoin_tmp_t (dir (getattr open search)))
                (allow sysadm_t bitcoin_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t bitcoin_tmp_t (dir (getattr open search)))
                (allow sysadm_t bitcoin_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bitcoin_tmp_t (dir (getattr open search)))
                (allow sysadm_t bitcoin_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bitcoin_tmp_t (dir (getattr open search)))
                (allow sysadm_t bitcoin_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t bitcoin_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bitcoin_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t bitcoin_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bitcoin_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bitcoin_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bitcoin_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t bitcoin_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bitcoin_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bitcoin_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bitcoin_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bitcoin_log_t (dir (getattr open search)))
                (allow sysadm_t bitcoin_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t bitcoin_log_t (dir (getattr open search)))
                (allow sysadm_t bitcoin_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t bitcoin_log_t (dir (getattr open search)))
                (allow sysadm_t bitcoin_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bitcoin_log_t (dir (getattr open search)))
                (allow sysadm_t bitcoin_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bitcoin_log_t (dir (getattr open search)))
                (allow sysadm_t bitcoin_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t bitcoin_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bitcoin_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t bitcoin_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bitcoin_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bitcoin_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bitcoin_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t bitcoin_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bitcoin_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bitcoin_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bitcoin_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bitcoin_etc_t (dir (getattr open search)))
                (allow sysadm_t bitcoin_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t bitcoin_etc_t (dir (getattr open search)))
                (allow sysadm_t bitcoin_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t bitcoin_etc_t (dir (getattr open search)))
                (allow sysadm_t bitcoin_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bitcoin_etc_t (dir (getattr open search)))
                (allow sysadm_t bitcoin_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bitcoin_etc_t (dir (getattr open search)))
                (allow sysadm_t bitcoin_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t bitcoin_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bitcoin_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t bitcoin_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bitcoin_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bitcoin_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bitcoin_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t bitcoin_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bitcoin_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bitcoin_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bitcoin_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bitcoin_var_lib_t (dir (getattr open search)))
                (allow sysadm_t bitcoin_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t bitcoin_var_lib_t (dir (getattr open search)))
                (allow sysadm_t bitcoin_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t bitcoin_var_lib_t (dir (getattr open search)))
                (allow sysadm_t bitcoin_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bitcoin_var_lib_t (dir (getattr open search)))
                (allow sysadm_t bitcoin_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bitcoin_var_lib_t (dir (getattr open search)))
                (allow sysadm_t bitcoin_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t bitcoin_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bitcoin_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t bitcoin_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bitcoin_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bitcoin_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bitcoin_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t bitcoin_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bitcoin_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bitcoin_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t bitcoin_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t bitcoin_runtime_t (dir (getattr open search)))
                (allow sysadm_t bitcoin_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t bitcoin_runtime_t (dir (getattr open search)))
                (allow sysadm_t bitcoin_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t bitcoin_runtime_t (dir (getattr open search)))
                (allow sysadm_t bitcoin_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bitcoin_runtime_t (dir (getattr open search)))
                (allow sysadm_t bitcoin_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t bitcoin_runtime_t (dir (getattr open search)))
                (allow sysadm_t bitcoin_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_706
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_707
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require cephdomain)
                (typeattributeset cil_gen_require cephdata)
                (typeattributeset cil_gen_require ceph_initrc_exec_t)
                (typeattributeset cil_gen_require ceph_log_t)
                (typeattributeset cil_gen_require ceph_conf_t)
                (typeattributeset cil_gen_require ceph_key_t)
                (allow sysadm_t cephdomain (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t cephdomain (dir (ioctl read getattr lock open search)))
                (allow sysadm_t cephdomain (file (ioctl read getattr lock open)))
                (allow sysadm_t cephdomain (lnk_file (read getattr)))
                (allow sysadm_t cephdomain (process (getattr)))
                (allow sysadm_t ceph_initrc_exec_t (lnk_file (read getattr)))
                (allow sysadm_t ceph_initrc_exec_t (file (ioctl read getattr lock open)))
                (allow sysadm_t etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t ceph_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ceph_conf_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t ceph_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ceph_conf_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ceph_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ceph_conf_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t ceph_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ceph_conf_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ceph_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ceph_conf_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ceph_conf_t (dir (getattr open search)))
                (allow sysadm_t ceph_conf_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t ceph_conf_t (dir (getattr open search)))
                (allow sysadm_t ceph_conf_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t ceph_conf_t (dir (getattr open search)))
                (allow sysadm_t ceph_conf_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ceph_conf_t (dir (getattr open search)))
                (allow sysadm_t ceph_conf_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ceph_conf_t (dir (getattr open search)))
                (allow sysadm_t ceph_conf_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ceph_key_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ceph_key_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t ceph_key_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ceph_key_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ceph_key_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ceph_key_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t ceph_key_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ceph_key_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ceph_key_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ceph_key_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ceph_key_t (dir (getattr open search)))
                (allow sysadm_t ceph_key_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t ceph_key_t (dir (getattr open search)))
                (allow sysadm_t ceph_key_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t ceph_key_t (dir (getattr open search)))
                (allow sysadm_t ceph_key_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ceph_key_t (dir (getattr open search)))
                (allow sysadm_t ceph_key_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ceph_key_t (dir (getattr open search)))
                (allow sysadm_t ceph_key_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cephdata (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cephdata (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t cephdata (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cephdata (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cephdata (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cephdata (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t cephdata (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cephdata (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cephdata (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t cephdata (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t cephdata (dir (getattr open search)))
                (allow sysadm_t cephdata (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t cephdata (dir (getattr open search)))
                (allow sysadm_t cephdata (file (getattr relabelfrom relabelto)))
                (allow sysadm_t cephdata (dir (getattr open search)))
                (allow sysadm_t cephdata (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cephdata (dir (getattr open search)))
                (allow sysadm_t cephdata (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t cephdata (dir (getattr open search)))
                (allow sysadm_t cephdata (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ceph_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ceph_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t ceph_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ceph_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ceph_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ceph_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t ceph_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ceph_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ceph_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t ceph_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t ceph_log_t (dir (getattr open search)))
                (allow sysadm_t ceph_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t ceph_log_t (dir (getattr open search)))
                (allow sysadm_t ceph_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t ceph_log_t (dir (getattr open search)))
                (allow sysadm_t ceph_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ceph_log_t (dir (getattr open search)))
                (allow sysadm_t ceph_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t ceph_log_t (dir (getattr open search)))
                (allow sysadm_t ceph_log_t (sock_file (getattr relabelfrom relabelto)))
                (optional sysadm_optional_708
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_709
                (typeattributeset cil_gen_require sysfs_t)
                (typeattributeset cil_gen_require cgroup_types)
                (typeattributeset cil_gen_require cgmanager_t)
                (typeattributeset cil_gen_require cgmanager_cgroup_t)
                (allow sysadm_t cgroup_types (dir (getattr open search)))
                (allow sysadm_t cgroup_types (dir (getattr open search)))
                (allow sysadm_t sysfs_t (dir (getattr open search)))
                (allow sysadm_t sysfs_t (dir (getattr open search)))
                (allow sysadm_t cgmanager_cgroup_t (dir (getattr open search)))
                (allow sysadm_t cgmanager_cgroup_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t cgmanager_cgroup_t (dir (getattr open search)))
                (allow sysadm_t cgmanager_cgroup_t (sock_file (write getattr append open)))
                (allow sysadm_t cgmanager_t (unix_stream_socket (connectto)))
            )
            (optional sysadm_optional_710
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require dmesg_exec_t)
                (typeattributeset cil_gen_require dmesg_t)
                (roleattributeset cil_gen_require sysadm_r)
                (roletype sysadm_r dmesg_t)
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t dmesg_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t dmesg_t (process (transition)))
                (dontaudit sysadm_t dmesg_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t dmesg_exec_t process dmesg_t)
                (allow dmesg_t sysadm_t (fd (use)))
                (allow dmesg_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow dmesg_t sysadm_t (process (sigchld)))
            )
            (optional sysadm_optional_711
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require dracut_t)
                (typeattributeset cil_gen_require dracut_exec_t)
                (roleattributeset cil_gen_require sysadm_r)
                (roletype sysadm_r dracut_t)
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t dracut_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t dracut_t (process (transition)))
                (dontaudit sysadm_t dracut_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t dracut_exec_t process dracut_t)
                (allow dracut_t sysadm_t (fd (use)))
                (allow dracut_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow dracut_t sysadm_t (process (sigchld)))
            )
            (optional sysadm_optional_712
                (roleattributeset cil_gen_require fail2ban_client_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require fail2ban_client_t)
                (typeattributeset cil_gen_require fail2ban_client_exec_t)
                (roleattributeset cil_gen_require fail2ban_client_roles)
                (roleattributeset fail2ban_client_roles (sysadm_r ))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t fail2ban_client_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t fail2ban_client_t (process (transition)))
                (dontaudit sysadm_t fail2ban_client_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t fail2ban_client_exec_t process fail2ban_client_t)
                (allow fail2ban_client_t sysadm_t (fd (use)))
                (allow fail2ban_client_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow fail2ban_client_t sysadm_t (process (sigchld)))
            )
            (optional sysadm_optional_713
                (typeattributeset cil_gen_require gorg_t)
                (typeattributeset cil_gen_require gorg_exec_t)
                (roleattributeset cil_gen_require sysadm_r)
                (roletype sysadm_r gorg_t)
                (allow sysadm_t gorg_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t gorg_t (process (transition)))
                (dontaudit sysadm_t gorg_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t gorg_exec_t process gorg_t)
                (allow sysadm_t gorg_t (process (noatsecure siginh rlimitinh)))
                (allow gorg_t sysadm_t (fd (use)))
                (allow gorg_t sysadm_t (process (sigchld signull)))
                (allow sysadm_t gorg_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t gorg_t (file (ioctl read getattr lock open)))
                (allow sysadm_t gorg_t (lnk_file (read getattr)))
                (allow sysadm_t gorg_t (process (getattr)))
                (allow sysadm_t gorg_t (process (sigchld sigkill sigstop signull signal)))
                (allow gorg_t sysadm_t (fifo_file (write)))
            )
            (optional sysadm_optional_714
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require logsentry_t)
                (typeattributeset cil_gen_require logsentry_etc_t)
                (typeattributeset cil_gen_require logsentry_tmp_t)
                (typeattributeset cil_gen_require logsentry_filter_t)
                (allow sysadm_t logsentry_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t logsentry_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t logsentry_t (file (ioctl read getattr lock open)))
                (allow sysadm_t logsentry_t (lnk_file (read getattr)))
                (allow sysadm_t logsentry_t (process (getattr)))
                (allow sysadm_t etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t logsentry_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t logsentry_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t logsentry_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t logsentry_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t logsentry_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t logsentry_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t logsentry_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t logsentry_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t logsentry_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t logsentry_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t logsentry_etc_t (dir (getattr open search)))
                (allow sysadm_t logsentry_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t logsentry_etc_t (dir (getattr open search)))
                (allow sysadm_t logsentry_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t logsentry_etc_t (dir (getattr open search)))
                (allow sysadm_t logsentry_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t logsentry_etc_t (dir (getattr open search)))
                (allow sysadm_t logsentry_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t logsentry_etc_t (dir (getattr open search)))
                (allow sysadm_t logsentry_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t logsentry_filter_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t logsentry_filter_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t logsentry_filter_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t logsentry_filter_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t logsentry_filter_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t logsentry_filter_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t logsentry_filter_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t logsentry_filter_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t logsentry_filter_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t logsentry_filter_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t logsentry_filter_t (dir (getattr open search)))
                (allow sysadm_t logsentry_filter_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t logsentry_filter_t (dir (getattr open search)))
                (allow sysadm_t logsentry_filter_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t logsentry_filter_t (dir (getattr open search)))
                (allow sysadm_t logsentry_filter_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t logsentry_filter_t (dir (getattr open search)))
                (allow sysadm_t logsentry_filter_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t logsentry_filter_t (dir (getattr open search)))
                (allow sysadm_t logsentry_filter_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t logsentry_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t logsentry_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t logsentry_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t logsentry_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t logsentry_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t logsentry_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t logsentry_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t logsentry_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t logsentry_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t logsentry_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t logsentry_tmp_t (dir (getattr open search)))
                (allow sysadm_t logsentry_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t logsentry_tmp_t (dir (getattr open search)))
                (allow sysadm_t logsentry_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t logsentry_tmp_t (dir (getattr open search)))
                (allow sysadm_t logsentry_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t logsentry_tmp_t (dir (getattr open search)))
                (allow sysadm_t logsentry_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t logsentry_tmp_t (dir (getattr open search)))
                (allow sysadm_t logsentry_tmp_t (sock_file (getattr relabelfrom relabelto)))
            )
            (optional sysadm_optional_715
                (typeattributeset cil_gen_require mutt_t)
                (typeattributeset cil_gen_require mutt_exec_t)
                (typeattributeset cil_gen_require mutt_home_t)
                (typeattributeset cil_gen_require mutt_conf_t)
                (typeattributeset cil_gen_require mutt_tmp_t)
                (roleattributeset cil_gen_require sysadm_r)
                (roletype sysadm_r mutt_t)
                (allow sysadm_t mutt_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t mutt_t (process (transition)))
                (dontaudit sysadm_t mutt_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t mutt_exec_t process mutt_t)
                (allow mutt_t sysadm_t (fd (use)))
                (allow mutt_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow mutt_t sysadm_t (process (sigchld)))
                (allow sysadm_t mutt_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t mutt_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mutt_home_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t mutt_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mutt_home_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mutt_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mutt_conf_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t mutt_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t mutt_conf_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t mutt_home_t (dir (getattr open search)))
                (allow sysadm_t mutt_home_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t mutt_home_t (dir (getattr open search)))
                (allow sysadm_t mutt_home_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t mutt_conf_t (dir (getattr open search)))
                (allow sysadm_t mutt_conf_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t mutt_conf_t (dir (getattr open search)))
                (allow sysadm_t mutt_conf_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t mutt_tmp_t (dir (getattr open search)))
                (allow sysadm_t mutt_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t mutt_tmp_t (dir (getattr open search)))
                (allow sysadm_t mutt_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t mutt_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t mutt_t (file (ioctl read getattr lock open)))
                (allow sysadm_t mutt_t (lnk_file (read getattr)))
                (allow sysadm_t mutt_t (process (getattr)))
            )
            (optional sysadm_optional_716
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require wpa_cli_t)
                (typeattributeset cil_gen_require wpa_cli_exec_t)
                (roleattributeset cil_gen_require sysadm_r)
                (roletype sysadm_r wpa_cli_t)
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t wpa_cli_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t wpa_cli_t (process (transition)))
                (dontaudit sysadm_t wpa_cli_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t wpa_cli_exec_t process wpa_cli_t)
                (allow wpa_cli_t sysadm_t (fd (use)))
                (allow wpa_cli_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow wpa_cli_t sysadm_t (process (sigchld)))
            )
            (optional sysadm_optional_717
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require var_lib_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require nginx_t)
                (typeattributeset cil_gen_require nginx_conf_t)
                (typeattributeset cil_gen_require nginx_log_t)
                (typeattributeset cil_gen_require nginx_var_lib_t)
                (typeattributeset cil_gen_require nginx_runtime_t)
                (typeattributeset cil_gen_require nginx_exec_t)
                (allow sysadm_t nginx_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t nginx_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t nginx_t (file (ioctl read getattr lock open)))
                (allow sysadm_t nginx_t (lnk_file (read getattr)))
                (allow sysadm_t nginx_t (process (getattr)))
                (allow sysadm_t etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t nginx_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nginx_conf_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t nginx_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nginx_conf_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nginx_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nginx_conf_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t nginx_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nginx_conf_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nginx_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nginx_conf_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nginx_conf_t (dir (getattr open search)))
                (allow sysadm_t nginx_conf_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t nginx_conf_t (dir (getattr open search)))
                (allow sysadm_t nginx_conf_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t nginx_conf_t (dir (getattr open search)))
                (allow sysadm_t nginx_conf_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nginx_conf_t (dir (getattr open search)))
                (allow sysadm_t nginx_conf_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nginx_conf_t (dir (getattr open search)))
                (allow sysadm_t nginx_conf_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nginx_exec_t (file (ioctl read getattr lock map execute open execute_no_trans)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_lib_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t nginx_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nginx_var_lib_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t nginx_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nginx_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nginx_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nginx_var_lib_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t nginx_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nginx_var_lib_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nginx_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nginx_var_lib_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nginx_var_lib_t (dir (getattr open search)))
                (allow sysadm_t nginx_var_lib_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t nginx_var_lib_t (dir (getattr open search)))
                (allow sysadm_t nginx_var_lib_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t nginx_var_lib_t (dir (getattr open search)))
                (allow sysadm_t nginx_var_lib_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nginx_var_lib_t (dir (getattr open search)))
                (allow sysadm_t nginx_var_lib_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nginx_var_lib_t (dir (getattr open search)))
                (allow sysadm_t nginx_var_lib_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t nginx_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nginx_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t nginx_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nginx_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nginx_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nginx_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t nginx_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nginx_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nginx_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nginx_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nginx_log_t (dir (getattr open search)))
                (allow sysadm_t nginx_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t nginx_log_t (dir (getattr open search)))
                (allow sysadm_t nginx_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t nginx_log_t (dir (getattr open search)))
                (allow sysadm_t nginx_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nginx_log_t (dir (getattr open search)))
                (allow sysadm_t nginx_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nginx_log_t (dir (getattr open search)))
                (allow sysadm_t nginx_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t nginx_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nginx_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t nginx_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nginx_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nginx_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nginx_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t nginx_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nginx_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nginx_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t nginx_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t nginx_runtime_t (dir (getattr open search)))
                (allow sysadm_t nginx_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t nginx_runtime_t (dir (getattr open search)))
                (allow sysadm_t nginx_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t nginx_runtime_t (dir (getattr open search)))
                (allow sysadm_t nginx_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nginx_runtime_t (dir (getattr open search)))
                (allow sysadm_t nginx_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t nginx_runtime_t (dir (getattr open search)))
                (allow sysadm_t nginx_runtime_t (sock_file (getattr relabelfrom relabelto)))
            )
            (optional sysadm_optional_718
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require var_log_t)
                (typeattributeset cil_gen_require phpfpm_t)
                (typeattributeset cil_gen_require phpfpm_log_t)
                (typeattributeset cil_gen_require phpfpm_tmp_t)
                (typeattributeset cil_gen_require phpfpm_runtime_t)
                (allow sysadm_t phpfpm_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t phpfpm_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t phpfpm_t (file (ioctl read getattr lock open)))
                (allow sysadm_t phpfpm_t (lnk_file (read getattr)))
                (allow sysadm_t phpfpm_t (process (getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_log_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t var_log_t (lnk_file (read getattr)))
                (allow sysadm_t phpfpm_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t phpfpm_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t phpfpm_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t phpfpm_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t phpfpm_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t phpfpm_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t phpfpm_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t phpfpm_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t phpfpm_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t phpfpm_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t phpfpm_log_t (dir (getattr open search)))
                (allow sysadm_t phpfpm_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t phpfpm_log_t (dir (getattr open search)))
                (allow sysadm_t phpfpm_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t phpfpm_log_t (dir (getattr open search)))
                (allow sysadm_t phpfpm_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t phpfpm_log_t (dir (getattr open search)))
                (allow sysadm_t phpfpm_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t phpfpm_log_t (dir (getattr open search)))
                (allow sysadm_t phpfpm_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t tmp_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t phpfpm_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t phpfpm_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t phpfpm_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t phpfpm_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t phpfpm_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t phpfpm_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t phpfpm_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t phpfpm_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t phpfpm_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t phpfpm_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t phpfpm_tmp_t (dir (getattr open search)))
                (allow sysadm_t phpfpm_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t phpfpm_tmp_t (dir (getattr open search)))
                (allow sysadm_t phpfpm_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t phpfpm_tmp_t (dir (getattr open search)))
                (allow sysadm_t phpfpm_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t phpfpm_tmp_t (dir (getattr open search)))
                (allow sysadm_t phpfpm_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t phpfpm_tmp_t (dir (getattr open search)))
                (allow sysadm_t phpfpm_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t phpfpm_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t phpfpm_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t phpfpm_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t phpfpm_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t phpfpm_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t phpfpm_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t phpfpm_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t phpfpm_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t phpfpm_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t phpfpm_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t phpfpm_runtime_t (dir (getattr open search)))
                (allow sysadm_t phpfpm_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t phpfpm_runtime_t (dir (getattr open search)))
                (allow sysadm_t phpfpm_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t phpfpm_runtime_t (dir (getattr open search)))
                (allow sysadm_t phpfpm_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t phpfpm_runtime_t (dir (getattr open search)))
                (allow sysadm_t phpfpm_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t phpfpm_runtime_t (dir (getattr open search)))
                (allow sysadm_t phpfpm_runtime_t (sock_file (getattr relabelfrom relabelto)))
            )
            (optional sysadm_optional_719
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require tmp_t)
                (typeattributeset cil_gen_require netlabel_peer_t)
                (typeattributeset cil_gen_require postgresql_t)
                (typeattributeset cil_gen_require postgresql_runtime_t)
                (typeattributeset cil_gen_require postgresql_tmp_t)
                (typeattributeset cil_gen_require postgresql_port_t)
                (typeattributeset cil_gen_require postgresql_client_packet_t)
                (typeattributeset cil_gen_require sepgsql_admin_type)
                (typeattributeset cil_gen_require postgresql_db_t)
                (typeattributeset cil_gen_require postgresql_etc_t)
                (typeattributeset cil_gen_require postgresql_log_t)
                (typeattributeset cil_gen_require postgresql_initrc_exec_t)
                (typeattributeset cil_gen_require postgresql_unit_t)
                (typeattributeset cil_gen_require postgresql_exec_t)
                (typeattributeset cil_gen_require sepgsql_admin_type)
                (typeattributeset sepgsql_admin_type (sysadm_t ))
                (allow sysadm_t postgresql_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t postgresql_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t postgresql_t (file (ioctl read getattr lock open)))
                (allow sysadm_t postgresql_t (lnk_file (read getattr)))
                (allow sysadm_t postgresql_t (process (getattr)))
                (allow sysadm_t postgresql_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postgresql_runtime_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t postgresql_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postgresql_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postgresql_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postgresql_runtime_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t postgresql_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postgresql_runtime_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postgresql_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postgresql_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postgresql_runtime_t (dir (getattr open search)))
                (allow sysadm_t postgresql_runtime_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t postgresql_runtime_t (dir (getattr open search)))
                (allow sysadm_t postgresql_runtime_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t postgresql_runtime_t (dir (getattr open search)))
                (allow sysadm_t postgresql_runtime_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t postgresql_runtime_t (dir (getattr open search)))
                (allow sysadm_t postgresql_runtime_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t postgresql_runtime_t (dir (getattr open search)))
                (allow sysadm_t postgresql_runtime_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t postgresql_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postgresql_db_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t postgresql_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postgresql_db_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postgresql_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postgresql_db_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t postgresql_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postgresql_db_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postgresql_db_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postgresql_db_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postgresql_db_t (dir (getattr open search)))
                (allow sysadm_t postgresql_db_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t postgresql_db_t (dir (getattr open search)))
                (allow sysadm_t postgresql_db_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t postgresql_db_t (dir (getattr open search)))
                (allow sysadm_t postgresql_db_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t postgresql_db_t (dir (getattr open search)))
                (allow sysadm_t postgresql_db_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t postgresql_db_t (dir (getattr open search)))
                (allow sysadm_t postgresql_db_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t postgresql_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postgresql_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t postgresql_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postgresql_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postgresql_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postgresql_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t postgresql_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postgresql_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postgresql_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postgresql_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postgresql_etc_t (dir (getattr open search)))
                (allow sysadm_t postgresql_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t postgresql_etc_t (dir (getattr open search)))
                (allow sysadm_t postgresql_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t postgresql_etc_t (dir (getattr open search)))
                (allow sysadm_t postgresql_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t postgresql_etc_t (dir (getattr open search)))
                (allow sysadm_t postgresql_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t postgresql_etc_t (dir (getattr open search)))
                (allow sysadm_t postgresql_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t postgresql_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postgresql_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t postgresql_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postgresql_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postgresql_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postgresql_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t postgresql_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postgresql_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postgresql_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postgresql_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postgresql_log_t (dir (getattr open search)))
                (allow sysadm_t postgresql_log_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t postgresql_log_t (dir (getattr open search)))
                (allow sysadm_t postgresql_log_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t postgresql_log_t (dir (getattr open search)))
                (allow sysadm_t postgresql_log_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t postgresql_log_t (dir (getattr open search)))
                (allow sysadm_t postgresql_log_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t postgresql_log_t (dir (getattr open search)))
                (allow sysadm_t postgresql_log_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t postgresql_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postgresql_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t postgresql_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postgresql_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postgresql_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postgresql_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t postgresql_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postgresql_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postgresql_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t postgresql_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t postgresql_tmp_t (dir (getattr open search)))
                (allow sysadm_t postgresql_tmp_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t postgresql_tmp_t (dir (getattr open search)))
                (allow sysadm_t postgresql_tmp_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t postgresql_tmp_t (dir (getattr open search)))
                (allow sysadm_t postgresql_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t postgresql_tmp_t (dir (getattr open search)))
                (allow sysadm_t postgresql_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t postgresql_tmp_t (dir (getattr open search)))
                (allow sysadm_t postgresql_tmp_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t self (association (sendto)))
                (allow postgresql_t self (association (sendto)))
                (allow sysadm_t postgresql_t (tcp_socket (recvfrom)))
                (allow sysadm_t postgresql_t (association (recvfrom)))
                (allow postgresql_t sysadm_t (tcp_socket (recvfrom)))
                (allow postgresql_t sysadm_t (association (recvfrom)))
                (allow sysadm_t postgresql_t (peer (recv)))
                (allow postgresql_t sysadm_t (peer (recv)))
                (allow sysadm_t netlabel_peer_t (peer (recv)))
                (allow sysadm_t netlabel_peer_t (tcp_socket (recvfrom)))
                (allow postgresql_t netlabel_peer_t (peer (recv)))
                (allow postgresql_t netlabel_peer_t (tcp_socket (recvfrom)))
                (allow sysadm_t postgresql_port_t (tcp_socket (name_connect)))
                (allow sysadm_t postgresql_client_packet_t (packet (send)))
                (allow sysadm_t postgresql_client_packet_t (packet (recv)))
                (allow sysadm_t postgresql_runtime_t (dir (getattr open search)))
                (allow sysadm_t postgresql_tmp_t (dir (getattr open search)))
                (allow sysadm_t postgresql_runtime_t (sock_file (write getattr append open)))
                (allow sysadm_t postgresql_tmp_t (sock_file (write getattr append open)))
                (allow sysadm_t postgresql_t (unix_stream_socket (connectto)))
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t tmp_t (dir (getattr open search)))
                (allow sysadm_t postgresql_exec_t (file (ioctl read getattr lock map execute open execute_no_trans)))
                (optional sysadm_optional_720
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                )
            )
            (optional sysadm_optional_721
                (roleattributeset cil_gen_require qemu_roles)
                (typeattributeset cil_gen_require bin_t)
                (typeattributeset cil_gen_require proc_t)
                (typeattributeset cil_gen_require usr_t)
                (typeattributeset cil_gen_require qemu_t)
                (typeattributeset cil_gen_require qemu_exec_t)
                (roleattributeset cil_gen_require qemu_roles)
                (roleattributeset qemu_roles (sysadm_r ))
                (allow sysadm_t proc_t (dir (getattr open search)))
                (allow sysadm_t proc_t (dir (getattr open search)))
                (allow sysadm_t qemu_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t qemu_t (file (ioctl read getattr lock open)))
                (allow sysadm_t qemu_t (lnk_file (read getattr)))
                (allow sysadm_t qemu_t (process (signal)))
                (allow sysadm_t qemu_t (process (sigkill)))
                (allow sysadm_t qemu_t (process (setsched)))
                (allow sysadm_t bin_t (dir (getattr open search)))
                (allow sysadm_t bin_t (lnk_file (read getattr)))
                (allow sysadm_t usr_t (dir (getattr open search)))
                (allow sysadm_t qemu_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t qemu_t (process (transition)))
                (dontaudit sysadm_t qemu_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t qemu_exec_t process qemu_t)
                (allow qemu_t sysadm_t (fd (use)))
                (allow qemu_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow qemu_t sysadm_t (process (sigchld)))
            )
            (optional sysadm_optional_722
                (typeattributeset cil_gen_require var_run_t)
                (typeattributeset cil_gen_require var_t)
                (typeattributeset cil_gen_require rpcbind_t)
                (typeattributeset cil_gen_require rpcbind_runtime_t)
                (allow sysadm_t var_run_t (lnk_file (read getattr)))
                (allow sysadm_t var_t (dir (getattr open search)))
                (allow sysadm_t var_run_t (dir (getattr open search)))
                (allow sysadm_t rpcbind_runtime_t (dir (getattr open search)))
                (allow sysadm_t rpcbind_runtime_t (sock_file (write getattr append open)))
                (allow sysadm_t rpcbind_t (unix_stream_socket (connectto)))
            )
            (optional sysadm_optional_723
                (typeattributeset cil_gen_require rtorrent_t)
                (typeattributeset cil_gen_require rtorrent_exec_t)
                (typeattributeset cil_gen_require rtorrent_home_t)
                (typeattributeset cil_gen_require rtorrent_session_t)
                (roleattributeset cil_gen_require sysadm_r)
                (roletype sysadm_r rtorrent_t)
                (allow sysadm_t rtorrent_t (process (ptrace)))
                (allow sysadm_t rtorrent_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t rtorrent_t (process (transition)))
                (dontaudit sysadm_t rtorrent_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t rtorrent_exec_t process rtorrent_t)
                (allow rtorrent_t sysadm_t (fd (use)))
                (allow rtorrent_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow rtorrent_t sysadm_t (process (sigchld)))
                (allow sysadm_t rtorrent_t (process (sigchld sigkill sigstop signull signal)))
                (allow sysadm_t rtorrent_home_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rtorrent_home_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rtorrent_session_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rtorrent_session_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t rtorrent_session_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t rtorrent_session_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t rtorrent_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t rtorrent_t (file (ioctl read getattr lock open)))
                (allow sysadm_t rtorrent_t (lnk_file (read getattr)))
                (allow sysadm_t rtorrent_t (process (getattr)))
            )
            (optional sysadm_optional_724
                (roleattributeset cil_gen_require salt_master_roles)
                (roleattributeset cil_gen_require salt_minion_roles)
                (typeattributeset cil_gen_require etc_t)
                (typeattributeset cil_gen_require salt_master_t)
                (typeattributeset cil_gen_require salt_master_initrc_exec_t)
                (typeattributeset cil_gen_require salt_master_exec_t)
                (typeattributeset cil_gen_require salt_etc_t)
                (typeattributeset cil_gen_require salt_runtime_t)
                (typeattributeset cil_gen_require salt_master_runtime_t)
                (typeattributeset cil_gen_require salt_minion_t)
                (typeattributeset cil_gen_require salt_minion_initrc_exec_t)
                (typeattributeset cil_gen_require salt_minion_exec_t)
                (roleattributeset cil_gen_require salt_minion_roles)
                (roleattributeset salt_minion_roles (sysadm_r ))
                (roleattributeset cil_gen_require salt_master_roles)
                (roleattributeset salt_master_roles (sysadm_r ))
                (allow sysadm_t salt_master_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t salt_master_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t salt_master_t (file (ioctl read getattr lock open)))
                (allow sysadm_t salt_master_t (lnk_file (read getattr)))
                (allow sysadm_t salt_master_t (process (getattr)))
                (allow sysadm_t salt_master_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t salt_master_t (process (transition)))
                (dontaudit sysadm_t salt_master_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t salt_master_exec_t process salt_master_t)
                (allow salt_master_t sysadm_t (fd (use)))
                (allow salt_master_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow salt_master_t sysadm_t (process (sigchld)))
                (allow sysadm_t etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t salt_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t salt_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t salt_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t salt_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t salt_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t salt_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t salt_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t salt_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t salt_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t salt_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t salt_etc_t (dir (getattr open search)))
                (allow sysadm_t salt_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t salt_etc_t (dir (getattr open search)))
                (allow sysadm_t salt_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t salt_etc_t (dir (getattr open search)))
                (allow sysadm_t salt_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t salt_etc_t (dir (getattr open search)))
                (allow sysadm_t salt_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t salt_etc_t (dir (getattr open search)))
                (allow sysadm_t salt_etc_t (sock_file (getattr relabelfrom relabelto)))
                (allow sysadm_t salt_runtime_t (dir (getattr open search)))
                (allow sysadm_t salt_master_runtime_t (dir (getattr open search)))
                (allow sysadm_t salt_master_runtime_t (sock_file (write getattr append open)))
                (allow sysadm_t salt_master_t (unix_stream_socket (connectto)))
                (allow sysadm_t salt_minion_t (process (sigchld sigkill sigstop signull signal ptrace)))
                (allow sysadm_t salt_minion_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t salt_minion_t (file (ioctl read getattr lock open)))
                (allow sysadm_t salt_minion_t (lnk_file (read getattr)))
                (allow sysadm_t salt_minion_t (process (getattr)))
                (allow sysadm_t salt_minion_exec_t (file (ioctl read getattr map execute open)))
                (allow sysadm_t salt_minion_t (process (transition)))
                (dontaudit sysadm_t salt_minion_t (process (noatsecure siginh rlimitinh)))
                (typetransition sysadm_t salt_minion_exec_t process salt_minion_t)
                (allow salt_minion_t sysadm_t (fd (use)))
                (allow salt_minion_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                (allow salt_minion_t sysadm_t (process (sigchld)))
                (allow sysadm_t etc_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t salt_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t salt_etc_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                (allow sysadm_t salt_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t salt_etc_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t salt_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t salt_etc_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                (allow sysadm_t salt_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t salt_etc_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t salt_etc_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                (allow sysadm_t salt_etc_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                (allow sysadm_t salt_etc_t (dir (getattr open search)))
                (allow sysadm_t salt_etc_t (dir (getattr relabelfrom relabelto)))
                (allow sysadm_t salt_etc_t (dir (getattr open search)))
                (allow sysadm_t salt_etc_t (file (getattr relabelfrom relabelto)))
                (allow sysadm_t salt_etc_t (dir (getattr open search)))
                (allow sysadm_t salt_etc_t (lnk_file (getattr relabelfrom relabelto)))
                (allow sysadm_t salt_etc_t (dir (getattr open search)))
                (allow sysadm_t salt_etc_t (fifo_file (getattr relabelfrom relabelto)))
                (allow sysadm_t salt_etc_t (dir (getattr open search)))
                (allow sysadm_t salt_etc_t (sock_file (getattr relabelfrom relabelto)))
                (roletransition sysadm_r salt_minion_exec_t process system_r)
                (roletransition sysadm_r salt_master_exec_t process system_r)
                (optional sysadm_optional_725
                    (roleattributeset cil_gen_require run_init_roles)
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require run_init_t)
                    (typeattributeset cil_gen_require run_init_exec_t)
                    (roleattributeset cil_gen_require run_init_roles)
                    (roleattributeset run_init_roles (sysadm_r ))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t run_init_t (process (transition)))
                    (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t run_init_exec_t process run_init_t)
                    (allow run_init_t sysadm_t (fd (use)))
                    (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow run_init_t sysadm_t (process (sigchld)))
                    (optional sysadm_optional_726
                        (roleattributeset cil_gen_require run_init_roles)
                        (typeattributeset cil_gen_require bin_t)
                        (typeattributeset cil_gen_require usr_t)
                        (typeattributeset cil_gen_require run_init_t)
                        (typeattributeset cil_gen_require run_init_exec_t)
                        (roleattributeset cil_gen_require run_init_roles)
                        (roleattributeset run_init_roles (sysadm_r ))
                        (allow sysadm_t usr_t (dir (getattr open search)))
                        (allow sysadm_t bin_t (dir (getattr open search)))
                        (allow sysadm_t bin_t (lnk_file (read getattr)))
                        (allow sysadm_t usr_t (dir (getattr open search)))
                        (allow sysadm_t run_init_exec_t (file (ioctl read getattr map execute open)))
                        (allow sysadm_t run_init_t (process (transition)))
                        (dontaudit sysadm_t run_init_t (process (noatsecure siginh rlimitinh)))
                        (typetransition sysadm_t run_init_exec_t process run_init_t)
                        (allow run_init_t sysadm_t (fd (use)))
                        (allow run_init_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                        (allow run_init_t sysadm_t (process (sigchld)))
                    )
                )
            )
            (optional sysadm_optional_727
                (typeattributeset cil_gen_require security_t)
                (typeattributeset cil_gen_require sysfs_t)
                (allow sysadm_t sysfs_t (dir (getattr open search)))
                (allow sysadm_t sysfs_t (dir (getattr open search)))
                (allow sysadm_t security_t (dir (ioctl read getattr lock open search)))
                (allow sysadm_t security_t (file (ioctl read getattr map open)))
                (allow sysadm_t security_t (security (read_policy)))
                (optional sysadm_optional_728
                    (typeattributeset cil_gen_require bin_t)
                    (typeattributeset cil_gen_require etc_t)
                    (typeattributeset cil_gen_require usr_t)
                    (typeattributeset cil_gen_require var_run_t)
                    (typeattributeset cil_gen_require var_t)
                    (typeattributeset cil_gen_require tmp_t)
                    (typeattributeset cil_gen_require var_log_t)
                    (typeattributeset cil_gen_require uwsgi_t)
                    (typeattributeset cil_gen_require uwsgi_exec_t)
                    (typeattributeset cil_gen_require uwsgi_conf_t)
                    (typeattributeset cil_gen_require uwsgi_run_t)
                    (typeattributeset cil_gen_require uwsgi_var_log_t)
                    (typeattributeset cil_gen_require uwsgi_tmp_t)
                    (typeattributeset cil_gen_require uwsgi_content_t)
                    (typeattributeset cil_gen_require uwsgi_content_exec_t)
                    (allow sysadm_t uwsgi_t (process (sigchld sigkill sigstop signull signal ptrace)))
                    (allow sysadm_t uwsgi_t (dir (ioctl read getattr lock open search)))
                    (allow sysadm_t uwsgi_t (file (ioctl read getattr lock open)))
                    (allow sysadm_t uwsgi_t (lnk_file (read getattr)))
                    (allow sysadm_t uwsgi_t (process (getattr)))
                    (allow sysadm_t etc_t (dir (getattr open search)))
                    (allow sysadm_t uwsgi_exec_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                    (allow sysadm_t uwsgi_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                    (allow sysadm_t uwsgi_exec_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                    (allow sysadm_t uwsgi_conf_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                    (allow sysadm_t uwsgi_exec_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                    (allow sysadm_t uwsgi_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                    (allow sysadm_t uwsgi_exec_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                    (allow sysadm_t uwsgi_conf_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                    (allow sysadm_t uwsgi_exec_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                    (allow sysadm_t uwsgi_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                    (allow sysadm_t uwsgi_exec_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                    (allow sysadm_t uwsgi_conf_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                    (allow sysadm_t uwsgi_exec_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                    (allow sysadm_t uwsgi_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                    (allow sysadm_t uwsgi_exec_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                    (allow sysadm_t uwsgi_conf_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                    (allow sysadm_t uwsgi_exec_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                    (allow sysadm_t uwsgi_conf_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                    (allow sysadm_t uwsgi_exec_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                    (allow sysadm_t uwsgi_conf_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                    (allow sysadm_t uwsgi_exec_t (dir (getattr open search)))
                    (allow sysadm_t uwsgi_conf_t (dir (getattr open search)))
                    (allow sysadm_t uwsgi_exec_t (dir (getattr relabelfrom relabelto)))
                    (allow sysadm_t uwsgi_conf_t (dir (getattr relabelfrom relabelto)))
                    (allow sysadm_t uwsgi_exec_t (dir (getattr open search)))
                    (allow sysadm_t uwsgi_conf_t (dir (getattr open search)))
                    (allow sysadm_t uwsgi_exec_t (file (getattr relabelfrom relabelto)))
                    (allow sysadm_t uwsgi_conf_t (file (getattr relabelfrom relabelto)))
                    (allow sysadm_t uwsgi_exec_t (dir (getattr open search)))
                    (allow sysadm_t uwsgi_conf_t (dir (getattr open search)))
                    (allow sysadm_t uwsgi_exec_t (lnk_file (getattr relabelfrom relabelto)))
                    (allow sysadm_t uwsgi_conf_t (lnk_file (getattr relabelfrom relabelto)))
                    (allow sysadm_t uwsgi_exec_t (dir (getattr open search)))
                    (allow sysadm_t uwsgi_conf_t (dir (getattr open search)))
                    (allow sysadm_t uwsgi_exec_t (fifo_file (getattr relabelfrom relabelto)))
                    (allow sysadm_t uwsgi_conf_t (fifo_file (getattr relabelfrom relabelto)))
                    (allow sysadm_t uwsgi_exec_t (dir (getattr open search)))
                    (allow sysadm_t uwsgi_conf_t (dir (getattr open search)))
                    (allow sysadm_t uwsgi_exec_t (sock_file (getattr relabelfrom relabelto)))
                    (allow sysadm_t uwsgi_conf_t (sock_file (getattr relabelfrom relabelto)))
                    (allow sysadm_t var_t (dir (getattr open search)))
                    (allow sysadm_t uwsgi_content_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                    (allow sysadm_t uwsgi_content_exec_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                    (allow sysadm_t uwsgi_content_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                    (allow sysadm_t uwsgi_content_exec_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                    (allow sysadm_t uwsgi_content_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                    (allow sysadm_t uwsgi_content_exec_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                    (allow sysadm_t uwsgi_content_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                    (allow sysadm_t uwsgi_content_exec_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                    (allow sysadm_t uwsgi_content_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                    (allow sysadm_t uwsgi_content_exec_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                    (allow sysadm_t uwsgi_content_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                    (allow sysadm_t uwsgi_content_exec_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                    (allow sysadm_t uwsgi_content_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                    (allow sysadm_t uwsgi_content_exec_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                    (allow sysadm_t uwsgi_content_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                    (allow sysadm_t uwsgi_content_exec_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                    (allow sysadm_t uwsgi_content_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                    (allow sysadm_t uwsgi_content_exec_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                    (allow sysadm_t uwsgi_content_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                    (allow sysadm_t uwsgi_content_exec_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                    (allow sysadm_t uwsgi_content_t (dir (getattr open search)))
                    (allow sysadm_t uwsgi_content_exec_t (dir (getattr open search)))
                    (allow sysadm_t uwsgi_content_t (dir (getattr relabelfrom relabelto)))
                    (allow sysadm_t uwsgi_content_exec_t (dir (getattr relabelfrom relabelto)))
                    (allow sysadm_t uwsgi_content_t (dir (getattr open search)))
                    (allow sysadm_t uwsgi_content_exec_t (dir (getattr open search)))
                    (allow sysadm_t uwsgi_content_t (file (getattr relabelfrom relabelto)))
                    (allow sysadm_t uwsgi_content_exec_t (file (getattr relabelfrom relabelto)))
                    (allow sysadm_t uwsgi_content_t (dir (getattr open search)))
                    (allow sysadm_t uwsgi_content_exec_t (dir (getattr open search)))
                    (allow sysadm_t uwsgi_content_t (lnk_file (getattr relabelfrom relabelto)))
                    (allow sysadm_t uwsgi_content_exec_t (lnk_file (getattr relabelfrom relabelto)))
                    (allow sysadm_t uwsgi_content_t (dir (getattr open search)))
                    (allow sysadm_t uwsgi_content_exec_t (dir (getattr open search)))
                    (allow sysadm_t uwsgi_content_t (fifo_file (getattr relabelfrom relabelto)))
                    (allow sysadm_t uwsgi_content_exec_t (fifo_file (getattr relabelfrom relabelto)))
                    (allow sysadm_t uwsgi_content_t (dir (getattr open search)))
                    (allow sysadm_t uwsgi_content_exec_t (dir (getattr open search)))
                    (allow sysadm_t uwsgi_content_t (sock_file (getattr relabelfrom relabelto)))
                    (allow sysadm_t uwsgi_content_exec_t (sock_file (getattr relabelfrom relabelto)))
                    (allow sysadm_t var_t (dir (getattr open search)))
                    (allow sysadm_t var_log_t (dir (getattr open search)))
                    (allow sysadm_t var_log_t (lnk_file (read getattr)))
                    (allow sysadm_t uwsgi_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                    (allow sysadm_t uwsgi_var_log_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                    (allow sysadm_t uwsgi_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                    (allow sysadm_t uwsgi_var_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                    (allow sysadm_t uwsgi_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                    (allow sysadm_t uwsgi_var_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                    (allow sysadm_t uwsgi_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                    (allow sysadm_t uwsgi_var_log_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                    (allow sysadm_t uwsgi_var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                    (allow sysadm_t uwsgi_var_log_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                    (allow sysadm_t uwsgi_var_log_t (dir (getattr open search)))
                    (allow sysadm_t uwsgi_var_log_t (dir (getattr relabelfrom relabelto)))
                    (allow sysadm_t uwsgi_var_log_t (dir (getattr open search)))
                    (allow sysadm_t uwsgi_var_log_t (file (getattr relabelfrom relabelto)))
                    (allow sysadm_t uwsgi_var_log_t (dir (getattr open search)))
                    (allow sysadm_t uwsgi_var_log_t (lnk_file (getattr relabelfrom relabelto)))
                    (allow sysadm_t uwsgi_var_log_t (dir (getattr open search)))
                    (allow sysadm_t uwsgi_var_log_t (fifo_file (getattr relabelfrom relabelto)))
                    (allow sysadm_t uwsgi_var_log_t (dir (getattr open search)))
                    (allow sysadm_t uwsgi_var_log_t (sock_file (getattr relabelfrom relabelto)))
                    (allow sysadm_t var_run_t (lnk_file (read getattr)))
                    (allow sysadm_t var_t (dir (getattr open search)))
                    (allow sysadm_t var_run_t (dir (getattr open search)))
                    (allow sysadm_t uwsgi_run_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                    (allow sysadm_t uwsgi_run_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                    (allow sysadm_t uwsgi_run_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                    (allow sysadm_t uwsgi_run_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                    (allow sysadm_t uwsgi_run_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                    (allow sysadm_t uwsgi_run_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                    (allow sysadm_t uwsgi_run_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                    (allow sysadm_t uwsgi_run_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                    (allow sysadm_t uwsgi_run_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                    (allow sysadm_t uwsgi_run_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                    (allow sysadm_t uwsgi_run_t (dir (getattr open search)))
                    (allow sysadm_t uwsgi_run_t (dir (getattr relabelfrom relabelto)))
                    (allow sysadm_t uwsgi_run_t (dir (getattr open search)))
                    (allow sysadm_t uwsgi_run_t (file (getattr relabelfrom relabelto)))
                    (allow sysadm_t uwsgi_run_t (dir (getattr open search)))
                    (allow sysadm_t uwsgi_run_t (lnk_file (getattr relabelfrom relabelto)))
                    (allow sysadm_t uwsgi_run_t (dir (getattr open search)))
                    (allow sysadm_t uwsgi_run_t (fifo_file (getattr relabelfrom relabelto)))
                    (allow sysadm_t uwsgi_run_t (dir (getattr open search)))
                    (allow sysadm_t uwsgi_run_t (sock_file (getattr relabelfrom relabelto)))
                    (allow sysadm_t tmp_t (dir (getattr open search)))
                    (allow sysadm_t uwsgi_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                    (allow sysadm_t uwsgi_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                    (allow sysadm_t uwsgi_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                    (allow sysadm_t uwsgi_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                    (allow sysadm_t uwsgi_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                    (allow sysadm_t uwsgi_tmp_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                    (allow sysadm_t uwsgi_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                    (allow sysadm_t uwsgi_tmp_t (fifo_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                    (allow sysadm_t uwsgi_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                    (allow sysadm_t uwsgi_tmp_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
                    (allow sysadm_t uwsgi_tmp_t (dir (getattr open search)))
                    (allow sysadm_t uwsgi_tmp_t (dir (getattr relabelfrom relabelto)))
                    (allow sysadm_t uwsgi_tmp_t (dir (getattr open search)))
                    (allow sysadm_t uwsgi_tmp_t (file (getattr relabelfrom relabelto)))
                    (allow sysadm_t uwsgi_tmp_t (dir (getattr open search)))
                    (allow sysadm_t uwsgi_tmp_t (lnk_file (getattr relabelfrom relabelto)))
                    (allow sysadm_t uwsgi_tmp_t (dir (getattr open search)))
                    (allow sysadm_t uwsgi_tmp_t (fifo_file (getattr relabelfrom relabelto)))
                    (allow sysadm_t uwsgi_tmp_t (dir (getattr open search)))
                    (allow sysadm_t uwsgi_tmp_t (sock_file (getattr relabelfrom relabelto)))
                    (allow sysadm_t bin_t (dir (getattr open search)))
                    (allow sysadm_t bin_t (lnk_file (read getattr)))
                    (allow sysadm_t usr_t (dir (getattr open search)))
                    (allow sysadm_t uwsgi_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t uwsgi_t (process (transition)))
                    (dontaudit sysadm_t uwsgi_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t uwsgi_exec_t process uwsgi_t)
                    (allow uwsgi_t sysadm_t (fd (use)))
                    (allow uwsgi_t sysadm_t (fifo_file (ioctl read write getattr lock append)))
                    (allow uwsgi_t sysadm_t (process (sigchld)))
                    (allow sysadm_t uwsgi_content_exec_t (file (ioctl read getattr lock map execute open execute_no_trans)))
                    (optional sysadm_optional_729
                        (typeattributeset cil_gen_require var_t)
                        (typeattributeset cil_gen_require httpd_sys_content_t)
                        (allow sysadm_t var_t (dir (getattr open search)))
                        (allow sysadm_t httpd_sys_content_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                        (allow sysadm_t httpd_sys_content_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
                        (allow sysadm_t httpd_sys_content_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                        (allow sysadm_t httpd_sys_content_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                        (allow sysadm_t httpd_sys_content_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                        (allow sysadm_t httpd_sys_content_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
                    )
                )
                (optional sysadm_optional_730
                    (typeattributeset cil_gen_require vde_t)
                    (typeattributeset cil_gen_require vde_exec_t)
                    (roleattributeset cil_gen_require sysadm_r)
                    (roletype sysadm_r vde_t)
                    (allow sysadm_t vde_t (process (sigchld sigkill sigstop signull signal ptrace)))
                    (allow sysadm_t vde_t (unix_stream_socket (connectto)))
                    (allow vde_t sysadm_t (process (sigchld signull)))
                    (allow vde_t sysadm_t (fd (use)))
                    (allow vde_t sysadm_t (tun_socket (relabelfrom)))
                    (allow vde_t self (tun_socket (relabelfrom relabelto)))
                    (allow sysadm_t vde_t (dir (ioctl read getattr lock open search)))
                    (allow sysadm_t vde_t (file (ioctl read getattr lock open)))
                    (allow sysadm_t vde_t (lnk_file (read getattr)))
                    (allow sysadm_t vde_t (process (getattr)))
                    (allow sysadm_t vde_exec_t (file (ioctl read getattr map execute open)))
                    (allow sysadm_t vde_t (process (transition)))
                    (dontaudit sysadm_t vde_t (process (noatsecure siginh rlimitinh)))
                    (typetransition sysadm_t vde_exec_t process vde_t)
                )
            )
        )
    )
)
