module my-pklacheckauth 1.0; require { type admin_home_t; type policykit_auth_t; class file map; } #============= policykit_auth_t ============== allow policykit_auth_t admin_home_t:file map;