module modreq_role_opt 1.0;
require {
class file {read write};
}
type mod_global_t;
optional {
role role_req_r, user_r;
type mod_opt_t;
allow role_req_r user_r;