module argeoctl 1.0; require { type var_lib_t; type init_t; class lnk_file { getattr read }; } #============= init_t ============== allow init_t var_lib_t:lnk_file { getattr read };