1# The vm role is used as part of user separation.  Allow all domain types to use
2# this role except dom0.
3role vm_r;
4role vm_r types { domain_type -dom0_t };
5
6# Define some users that must use this role (full type "user_1:vm_r:domU_t").
7gen_user(user_1,, vm_r, s0, s0)
8gen_user(user_2,, vm_r, s0, s0)
9gen_user(user_3,, vm_r, s0, s0)
10
11# Alternate: define and use a macro to generate 1000 users
12define(`def_vm_users',`gen_user(user_$1,, vm_r, s0, s0)
13ifelse(`$1',`$2',,`def_vm_users(incr($1),$2)')dnl
14')
15
16# def_vm_users(0,999)
17