require { type ical_file_t; type ical_t; class file { read write getattr }; } #============= ical_t ============== allow ical_t ical_file_t:file { read write getattr }; files_read_usr_files(ical_t) kernel_read_system_state(ical_t) miscfiles_read_fonts(ical_t) sysnet_read_config(ical_t) userdom_read_generic_user_home_content_files(ical_t) xserver_read_xdm_pid(ical_t) xserver_stream_connect_xdm_xserver(ical_t)