(roleattributeset cil_gen_require system_r)
(optional permissivedomains_optional_1
(typeattributeset cil_gen_require tangd_t)
(typepermissive tangd_t)
)