selinux/libsepol/user-declaration-in-module/foo.te

module foo 0.0.1;
require {
  role staff_r;
  sensitivity s0;
  category c0;
  category c1023;
}
user foo_u roles staff_r level s0 range s0 - s0:c0.c1023;