default		allowed_privs		all
default		public
forced_privs	sbin/init		file_chown,file_dac_read,file_dac_write,file_mac_write,proc_audit_tcb
forced_privs    sbin/sulogin            all
forced_privs    sbin/uadmin             proc_audit_tcb
forced_privs    sbin/uname              proc_audit_tcb
mld		var/spool/cron/atjobs
mld		var/spool/cron/crontabs
mld		var/mail
mld		var/tmp
label		var/log/privdebug.log 	admin_high[admin_high]
label		var/log/syslog	 	admin_high[admin_high]
mld		tmp
