sepolicy/policy/base/file.te

# Filesystem types
type labeledfs, fs_type;
type pipefs, fs_type;
type sockfs, fs_type;
type rootfs, fs_type;
type proc, fs_type, proc_type;
type debugfs, fs_type, debugfs_type;

# File types
type unlabeled, file_type;
type media_rw_data_file, file_type, data_file_type, core_data_file_type, mlstrustedobject;

type selinuxfs, fs_type, mlstrustedobject;
type devpts, fs_type, mlstrustedobject;
type tmpfs, fs_type;
type shm, fs_type;
type mqueue, fs_type;
type sysfs, fs_type, sysfs_type, mlstrustedobject;

allow file_type labeledfs:filesystem associate;
allow file_type tmpfs:filesystem associate;
allow file_type rootfs:filesystem associate;
allow dev_type tmpfs:filesystem associate;
allow dev_type device:filesystem associate;
allow debugfs_type debugfs:filesystem associate;
neverallow fs_type file_type:filesystem associate;