add 3rd party interface for transition out of unconfined

refpolicy/policy/modules/system/unconfined.if

@@ -184,6 +184,44 @@ interface(`unconfined_shell_domtrans',`
 	corecmd_shell_domtrans($1,unconfined_t)
 ')
 
+########################################
+## <summary>
+##	Allow unconfined to execute the specified program in
+##	the specified domain.
+## </summary>
+## <desc>
+##	<p>
+##	Allow unconfined to execute the specified program in
+##	the specified domain.
+##	</p>
+##	<p>
+##	This is a interface to support third party modules
+##	and its use is not allowed in upstream reference
+##	policy.
+##	</p>
+## </desc>
+## <param name="domain">
+##	<summary>
+##	Domain to execute in.
+##	</summary>
+## </param>
+## <param name="entry_file">
+##	<summary>
+##	Domain entry point file.
+##	</summary>
+## </param>
+#
+interface(`unconfined_domtrans_to',`
+	gen_require(`
+		type unconfined_t;
+	')
+
+	domain_auto_trans(unconfined_t,$2,$1)
+	allow $1 unconfined_t:fd use;
+	allow $1 unconfined_t:fifo_file rw_file_perms;
+	allow $1 unconfined_t:process sigchld;
+')
+
 ########################################
 ## <summary>
 ##	Inherit file descriptors from the unconfined domain.