(roleattributeset cil_gen_require system_r)

(optional permissivedomains_optional_1
    (typeattributeset cil_gen_require tangd_t)
    (typepermissive tangd_t)
)