%user ALL=(ALL) TYPE=unconfined_t ROLE=unconfined_r ALL