policy_module(su,1.0) ######################################## # # Declarations # type su_exec_t; files_type(su_exec_t) # Remaining policy in the per-user domain template