reqd_mask/users

user u roles { r } level s0 range s0 - mls_systemhigh;