module foo 1.0;
require {
type foo, bar;
class file { read write };
}
allow foo bar : file { read write };