policy_module(permissivedomains,21) optional_policy(` gen_require(` type osad_t; ') permissive osad_t; ')