files:
    make anyone associated with "has_unconfined_access_to_files_assets"
    create files, dirs and symlinks with a type transition to file_t

    file_t is in my policy what it default_t in reference policy

    the idea is that everything one creates in / is unknown to selinux
    and so that is created with the file_t "location unknown to SELinux" type

    it is a catchall rule

    stuff like kernel boot parameters in / should be specified with a name-based
    file type transition (the more specific rule wins)

    other "known locations to SELinux" that do are not installed by installer or
    by packge managers should also be specified with a name-based file type transition