policy_module(mytest, 1.0)

type mytest_t;
role mytest_r;

role mytest_r types { mytest_t };
allow mytest_t self:file read;
#gen_user( mytest_u, user, mytest_r, s0, s0 )