## interface(`access_to_home',` require { type home_root_t; type local_login_t, fs_t, proc_t, sshd_t; } type $1_home_t; type_transition $1_t $1_home_t:{file dir} $1_home_t; allow local_login_t $1_home_t:dir search; allow $1_t $1_home_t:dir { write search read create open getattr add_name }; allow $1_t $1_home_t:file { read write create open getattr append }; allow $1_t home_root_t:dir { search read open getattr }; allow $1_home_t fs_t:filesystem associate; allow $1_t proc_t:file { read open }; allow sshd_t $1_home_t:dir search; ')