;; SPDX-FileCopyrightText: © 2024 Dominick Grift <dominick.grift@defensec.nl>
;; SPDX-License-Identifier: Unlicense

(sidcontext init (sys.id sys.role sys.subj lowlevelrange)) ;; userspace_initial_context
(sidcontext kernel (sys.id sys.role sys.subj lowlevelrange))

(block sys

  (role role)
  (roletype role subj)

  (user id)
  (userrole id role)

  (userlevel id systemlow)
  (userrange id lowhighlevelrange)

  (blockinherit .subj.template)

  (call .obj.role (role))

  (call .unconfined.type (subj)))