Chapter 3. Targeted Policy Overview

45

# root is retained as a separate user identity simply as a

# compatibility measure with the "strict" policy.

It could

# be dropped and mapped to user_u but this allows existing

# file contexts that have "root" as the user identity to

# remain valid.

user root roles { user_r sysadm_r system_r };

/*

^user name ^  set of roles

*/