1# Allow all domains to use system_r so that systems that are not using the 2# user/role separation feature will work properly. 3role system_r types domain_type; 4