/usr/sbin/lockdev -- gen_context(system_u:object_r:lockdev_exec_t,s0) /run/lock/lockdev(/.*)? gen_context(system_u:object_r:lockdev_lock_t,s0)