blob: 7baccfdc73c161e8c7558205e653db7cb13aca4c [file] [log] [blame]
# Use `type_transition` statement to affect type. Computation
# should be:
# (source_u:source_r:source_t:s0:c0-s2:c0.c1, target_u:target_r:target_t:s1:c1) ->
# source_u:object_r:target_t:s1:c1-s2:c1.c2
type source_t;
type target_t;
role source_r;
role source_r types { source_t };
role target_r;
role target_r types { target_t };
role object_r;
role object_r types { target_t };
user source_u roles { source_r object_r } level s0 range s0 - s2:c0.c2;
user target_u roles { target_r } level s0 range s0 - s2:c0.c2;
range_transition source_t target_t:file s1:c1 - s2:c1.c2;