[
  t=user_t & r=user_r & u!=system_u, TRUE+;
  t=fsadm_t, TRUE+;
]
  t=fixed_disk_device_t;
