1 files changed, 21 insertions, 0 deletions
diff --git a/src/sys.cil b/src/sys.cil
new file mode 100644
index 0000000..feb4c6d
--- /dev/null
+++ b/src/sys.cil
@@ -0,0 +1,21 @@
+;; SPDX-FileCopyrightText: © 2023 Dominick Grift <dominick.grift@defensec.nl>
+;; SPDX-License-Identifier: Unlicense
+
+(sidcontext kernel (sys.id sys.role sys.subj lowlevelrange))
+
+(block sys
+
+  (role role)
+  (roletype role subj)
+
+  (user id)
+  (userrole id role)
+
+  (userlevel id systemlow)
+  (userrange id lowhighlevelrange)
+
+  (blockinherit .subj.template)
+
+  (call .obj.role (role))
+
+  (call .unconfined.type (subj)))