1module modreq_role_opt 1.0;
2
3require {
4	class file {read write};
5
6}
7
8type mod_global_t;
9
10optional {
11	require {
12		role role_req_r, user_r;
13	}
14	type mod_opt_t;
15
16	allow role_req_r user_r;
17}
18