(begin of section)
(declare domain or role, one domain or role can be declared in one section)
(This can be used only for role)
(Configure domain transition)
(Describe access control for files)
(Describe access control for resources other than file)