module seadrive 1.1; require { type init_t; type fusermount_exec_t; class file { open read execute }; } #============= init_t ============== allow init_t fusermount_exec_t:file { open read execute };