module mypolicypackage 1.0; require { type semanage_t; type security_t; type proc_net_t; type irqbalance_t; class security check_context; class udp_so ioctl; class dir search; class file { read getattr }; class udp_socket create; } #============= irqbalance_t ============== allow irqbalance_t proc_net_t:dir search; allow irqbalance_t proc_net_t:file { read getattr }; allow irqbalance_t self:udp_so ioctl; allow irqbalance_t self:udp_socket create; #============= semanage_t ============== allow semanage_t security_t:security check_context;