type sepfs, fs_type; allow file_type sepfs:filesystem associate;