1type su, domain; 2permissive su; 3type su_exec, file_type; 4domain_auto_trans(shell, su_exec, su) 5 6# su is unconfined. 7unconfined_domain(su) 8