/usr/sbin/lockdev	--	gen_context(system_u:object_r:lockdev_exec_t,s0)

/var/lock/lockdev(/.*)?	gen_context(system_u:object_r:lockdev_lock_t,s0)