policy for rshim
Execute rshim_exec_t in the rshim domain.
Domain allowed to transition.
Execute rshim in the caller domain.
Domain allowed access.