/etc/snort(/.*)? gen_context(system_u:object_r:snort_etc_t,s0) /usr/s?bin/snort -- gen_context(system_u:object_r:snort_exec_t,s0) /var/log/snort(/.*)? gen_context(system_u:object_r:snort_log_t,s0)