# Labels for initial SIDs. These initial SIDs are used by the hypervisor for
# objects created before the policy is loaded or for objects that do not have a
# label defined in some other manner.

sid xenboot gen_context(system_u:system_r:xenboot_t,s0)
sid xen gen_context(system_u:system_r:xen_t,s0)
sid dom0 gen_context(system_u:system_r:dom0_t,s0)
sid domxen gen_context(system_u:system_r:domxen_t,s0)
sid domio gen_context(system_u:system_r:domio_t,s0)
sid unlabeled gen_context(system_u:system_r:unlabeled_t,s0)
sid security gen_context(system_u:system_r:security_t,s0)
sid irq gen_context(system_u:object_r:irq_t,s0)
sid iomem gen_context(system_u:object_r:iomem_t,s0)
sid ioport gen_context(system_u:object_r:ioport_t,s0)
sid device gen_context(system_u:object_r:device_t,s0)

# Initial SIDs used by the toolstack for domains without defined labels
sid domU gen_context(system_u:system_r:domU_t,s0)
sid domDM gen_context(system_u:system_r:dm_dom_t,s0)
