process = "system_u:system_r:container_t" content = "system_u:object_r:virt_var_lib_t" file = "system_u:object_r:container_file_t"