# Life begins with the kernel. type kernel, domain, mlstrustedsubject;