(begin of section)
(declare domain or role, one domain or role can be declared in one section)
(This can be used only for role)
| (Configure domain transition)
| (Describe access control for files, access control for resources other than file)
(end of section)