module svirtdev 1.0; require { type unconfined_t; type virtd_t; class process transition; } #============= unconfined_t ============== allow unconfined_t virtd_t:process transition; auditallow unconfined_t virtd_t:process transition;