1module modreq_role_opt 1.0; 2 3require { 4 class file {read write}; 5 6} 7 8type mod_global_t; 9 10optional { 11 require { 12 role role_req_r, user_r; 13 } 14 type mod_opt_t; 15 16 allow role_req_r user_r; 17} 18