process = "system_u:system_r:container_t"
content = "system_u:object_r:virt_var_lib_t"
file = "system_u:object_r:container_file_t"
ro_file = "system_u:object_r:container_ro_file_t:s0"
sandbox_lxc_process = "system_u:system_r:container_t:s0"