module shorewall 1.0;

require {
	type shorewall_t;
	type usr_t;
	class file { execute execute_no_trans };
}

#============= shorewall_t ==============
allow shorewall_t usr_t:file { execute execute_no_trans };