policy_module(ssh_additional, 0.0.2) require { type ssh_keygen_t; type sshd_t; } miscfiles_read_localization(ssh_keygen_t) unconfined_shell_domtrans(sshd_t)