# domain.te

# Make sure that labels are used correctly
neverallow { domain -vendor_init -ueventd } r_fs_type:file write;