type SMD-daemon, domain; permissive SMD-daemon; type SMD-daemon_exec, exec_type, file_type; allow SMD-daemon system_file:file { execute_no_trans };