# init is its own domain.
type init, domain;
type init_exec, system_file_type, exec_type, file_type;
type init_tmpfs, file_type;

allow init tmpfs:chr_file relabelfrom;
allow init kmsg_device:chr_file { getattr write relabelto };
allow init kmsg_debug_device:chr_file { open write relabelto };