policy_module(guest, 1.1.1) ######################################## # # Declarations # role guest_r; userdom_restricted_user_template(guest) kernel_read_system_state(guest_t) ######################################## # # Local policy # optional_policy(` apache_role(guest_r, guest_t) ') gen_user(guest_u, user, guest_r, s0, s0)