1type su, domain; 2type su_exec, file_type; 3domain_auto_trans(shell, su_exec, su) 4 5# su is unconfined. 6unconfined_domain(su) 7