admin,acct,acct_domtrans,allow $1 acct_t:fd use;,
admin,acct,acct_domtrans,allow acct_t $1:fd use;,
admin,acct,acct_domtrans,allow acct_t $1:fifo_file { getattr read write append ioctl lock };,
admin,acct,acct_domtrans,allow acct_t $1:process sigchld;,
admin,acct,acct_manage_data,allow $1 acct_data_t:dir { read getattr lock search ioctl add_name remove_name write };,
admin,acct,acct_manage_data,allow $1 acct_data_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
admin,acct,acct_manage_data,allow $1 acct_data_t:lnk_file { create read getattr setattr link unlink rename };,
admin,alsa,alsa_domtrans,allow $1 alsa_t:fd use;,
admin,alsa,alsa_domtrans,allow alsa_t $1:fd use;,
admin,alsa,alsa_domtrans,allow alsa_t $1:fifo_file { getattr read write append ioctl lock };,
admin,alsa,alsa_domtrans,allow alsa_t $1:process sigchld;,
admin,alsa,alsa_rw_semaphores,allow $1 alsa_t:sem { unix_read unix_write associate read write };,
admin,alsa,alsa_rw_shared_mem,allow $1 alsa_t:shm { unix_read unix_write { associate getattr setattr create destroy read write lock unix_read unix_write } };,
admin,amanda,amanda_domtrans_recover,allow $1 amanda_recover_t:fd use;,
admin,amanda,amanda_domtrans_recover,allow amanda_recover_t $1:fd use;,
admin,amanda,amanda_domtrans_recover,allow amanda_recover_t $1:fifo_file { getattr read write append ioctl lock };,
admin,amanda,amanda_domtrans_recover,allow amanda_recover_t $1:process sigchld;,
admin,amanda,amanda_run_recover,allow amanda_recover_t $3:chr_file { getattr read write ioctl };,
admin,amanda,amanda_search_lib,allow $1 amanda_usr_lib_t:dir search;,
admin,amanda,amanda_rw_dumpdates_files,allow $1 amanda_dumpdates_t:file { getattr read write append ioctl lock };,
admin,amanda,amanda_append_log_files,allow $1 amanda_log_t:file { ioctl read getattr lock append };,
admin,bootloader,bootloader_domtrans,allow $1 bootloader_t:fd use;,
admin,bootloader,bootloader_domtrans,allow bootloader_t $1:fd use;,
admin,bootloader,bootloader_domtrans,allow bootloader_t $1:fifo_file { getattr read write append ioctl lock };,
admin,bootloader,bootloader_domtrans,allow bootloader_t $1:process sigchld;,
admin,bootloader,bootloader_run,allow bootloader_t $3:chr_file { getattr read write append ioctl lock };,
admin,bootloader,bootloader_read_config,allow $1 bootloader_etc_t:file { read getattr lock ioctl };,
admin,bootloader,bootloader_rw_config,allow $1 bootloader_etc_t:file { getattr read write append ioctl lock };,
admin,bootloader,bootloader_rw_tmp_files,allow $1 bootloader_tmp_t:file { getattr read write append ioctl lock };,
admin,bootloader,bootloader_create_runtime_file,allow $1 boot_t:dir { read getattr lock search ioctl add_name remove_name write };,
admin,bootloader,bootloader_create_runtime_file,allow $1 boot_runtime_t:file { { getattr read write append ioctl lock } create unlink };,
admin,certwatch,certwatch_domtrans,allow $1 certwatch_t:fd use;,
admin,certwatch,certwatch_domtrans,allow certwatch_t $1:fd use;,
admin,certwatch,certwatch_domtrans,allow certwatch_t $1:fifo_file { getattr read write append ioctl lock };,
admin,certwatch,certwatch_domtrans,allow certwatch_t $1:process sigchld;,
admin,certwatch,certwatach_run,allow certwatch_t $3:chr_file { getattr read write ioctl };,
admin,consoletype,consoletype_domtrans,allow $1 consoletype_t:fd use;,
admin,consoletype,consoletype_domtrans,allow consoletype_t $1:fd use;,
admin,consoletype,consoletype_domtrans,allow consoletype_t $1:fifo_file { getattr read write append ioctl lock };,
admin,consoletype,consoletype_domtrans,allow consoletype_t $1:process sigchld;,
admin,consoletype,consoletype_run,allow consoletype_t $3:chr_file { getattr read write ioctl };,
admin,ddcprobe,ddcprobe_domtrans,allow $1 ddcprobe_t:fd use;,
admin,ddcprobe,ddcprobe_domtrans,allow ddcprobe_t $1:fd use;,
admin,ddcprobe,ddcprobe_domtrans,allow ddcprobe_t $1:fifo_file { getattr read write append ioctl lock };,
admin,ddcprobe,ddcprobe_domtrans,allow ddcprobe_t $1:process sigchld;,
admin,ddcprobe,ddcprobe_run,allow ddcprobe_t $3:chr_file { getattr read write ioctl };,
admin,dmidecode,dmidecode_domtrans,allow $1 dmidecode_t:fd use;,
admin,dmidecode,dmidecode_domtrans,allow dmidecode_t $1:fd use;,
admin,dmidecode,dmidecode_domtrans,allow dmidecode_t $1:fifo_file { getattr read write append ioctl lock };,
admin,dmidecode,dmidecode_domtrans,allow dmidecode_t $1:process sigchld;,
admin,dmidecode,dmidecode_run,allow dmidecode_t $3:chr_file { getattr read write ioctl };,
admin,firstboot,firstboot_domtrans,allow $1 firstboot_t:fd use;,
admin,firstboot,firstboot_domtrans,allow firstboot_t $1:fd use;,
admin,firstboot,firstboot_domtrans,allow firstboot_t $1:fifo_file { getattr read write append ioctl lock };,
admin,firstboot,firstboot_domtrans,allow firstboot_t $1:process sigchld;,
admin,firstboot,firstboot_run,allow firstboot_t $3:chr_file { getattr read write ioctl };,
admin,firstboot,firstboot_use_fds,allow $1 firstboot_t:fd use;,
admin,firstboot,firstboot_write_pipes,allow $1 firstboot_t:fifo_file write;,
admin,kudzu,kudzu_domtrans,allow $1 kudzu_t:fd use;,
admin,kudzu,kudzu_domtrans,allow kudzu_t $1:fd use;,
admin,kudzu,kudzu_domtrans,allow kudzu_t $1:fifo_file { getattr read write append ioctl lock };,
admin,kudzu,kudzu_domtrans,allow kudzu_t $1:process sigchld;,
admin,kudzu,kudzu_run,allow kudzu_t $3:chr_file { getattr read write ioctl };,
admin,kudzu,kudzu_getattr_exec_files,allow $1 kudzu_exec_t:file getattr;,
admin,logrotate,logrotate_domtrans,allow $1 logrotate_t:fd use;,
admin,logrotate,logrotate_domtrans,allow logrotate_t $1:fd use;,
admin,logrotate,logrotate_domtrans,allow logrotate_t $1:fifo_file { getattr read write append ioctl lock };,
admin,logrotate,logrotate_domtrans,allow logrotate_t $1:process sigchld;,
admin,logrotate,logrotate_run,allow logrotate_t $3:chr_file { getattr read write ioctl };,
admin,logrotate,logrotate_use_fds,allow $1 logrotate_t:fd use;,
admin,logrotate,logrotate_read_tmp_files,allow $1 logrotate_tmp_t:file { read getattr lock ioctl };,
admin,logwatch,logwatch_read_tmp_files,allow $1 logwatch_tmp_t:file { read getattr lock ioctl };,
admin,mrtg,mrtg_append_create_logs,allow $1 mrtg_log_t:dir { read getattr lock search ioctl add_name remove_name write };,
admin,mrtg,mrtg_append_create_logs,allow $1 mrtg_log_t:file { create append getattr };,
admin,netutils,netutils_domtrans,allow $1 netutils_t:fd use;,
admin,netutils,netutils_domtrans,allow netutils_t $1:fd use;,
admin,netutils,netutils_domtrans,allow netutils_t $1:fifo_file { getattr read write append ioctl lock };,
admin,netutils,netutils_domtrans,allow netutils_t $1:process sigchld;,
admin,netutils,netutils_run,allow netutils_t $3:chr_file { getattr read write ioctl };,
admin,netutils,netutils_domtrans_ping,allow $1 ping_t:fd use;,
admin,netutils,netutils_domtrans_ping,allow ping_t $1:fd use;,
admin,netutils,netutils_domtrans_ping,allow ping_t $1:fifo_file { getattr read write append ioctl lock };,
admin,netutils,netutils_domtrans_ping,allow ping_t $1:process sigchld;,
admin,netutils,netutils_run_ping,allow ping_t $3:chr_file { getattr read write ioctl };,
admin,netutils,netutils_domtrans_traceroute,allow $1 traceroute_t:fd use;,
admin,netutils,netutils_domtrans_traceroute,allow traceroute_t $1:fd use;,
admin,netutils,netutils_domtrans_traceroute,allow traceroute_t $1:fifo_file { getattr read write append ioctl lock };,
admin,netutils,netutils_domtrans_traceroute,allow traceroute_t $1:process sigchld;,
admin,netutils,netutils_run_traceroute,allow traceroute_t $3:chr_file { getattr read write ioctl };,
admin,portage,portage_domtrans,allow $1 portage_t:fd use;,
admin,portage,portage_domtrans,allow portage_t $1:fd use;,
admin,portage,portage_domtrans,allow portage_t $1:fifo_file { getattr read write append ioctl lock };,
admin,portage,portage_domtrans,allow portage_t $1:process sigchld;,
admin,portage,portage_run,allow portage_t $3:chr_file { getattr read write ioctl };,
admin,portage,portage_run,allow portage_fetch_t $3:chr_file { getattr read write ioctl };,
admin,portage,portage_run,allow portage_sandbox_t $3:chr_file { getattr read write ioctl };,
admin,portage,portage_run,allow portage_t $1:udp_socket write;,
admin,portage,portage_run,allow $1 portage_t:udp_socket write;,
admin,portage,portage_run,allow $1_t self:capability { fowner fsetid mknod setgid setuid chown dac_override net_raw };,
admin,portage,portage_run,allow $1_t self:process { setpgid setsched setrlimit { sigchld sigkill sigstop signull signal } execmem };,
admin,portage,portage_run,allow $1_t self:process ~{ ptrace setcurrent setexec setfscreate setrlimit execmem execstack execheap };,
admin,portage,portage_run,allow $1_t self:fd use;,
admin,portage,portage_run,allow $1_t self:fifo_file { getattr read write append ioctl lock };,
admin,portage,portage_run,allow $1_t self:shm { associate getattr setattr create destroy read write lock unix_read unix_write };,
admin,portage,portage_run,allow $1_t self:sem { associate getattr setattr create destroy read write unix_read unix_write };,
admin,portage,portage_run,allow $1_t self:msgq { associate getattr setattr create destroy read write enqueue unix_read unix_write };,
admin,portage,portage_run,allow $1_t self:msg { send receive };,
admin,portage,portage_run,allow $1_t self:unix_dgram_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown };,
admin,portage,portage_run,allow $1_t self:unix_stream_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown listen accept };,
admin,portage,portage_run,allow $1_t self:unix_dgram_socket sendto;,
admin,portage,portage_run,allow $1_t self:unix_stream_socket connectto;,
admin,portage,portage_run,allow $1_t self:tcp_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown listen accept };,
admin,portage,portage_run,allow $1_t self:udp_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown };,
admin,portage,portage_run,allow $1_t self:rawip_socket { create ioctl };,
admin,portage,portage_run,allow $1_t self:udp_socket recvfrom;,
admin,portage,portage_run,allow $1_t self:netlink_selinux_socket { bind create read };,
admin,portage,portage_run,allow $1_t $1_devpts_t:chr_file { { getattr read write append ioctl lock } setattr };,
admin,portage,portage_run,allow $1_t $1_tmp_t:dir { create getattr setattr read write link unlink rename search add_name remove_name reparent rmdir lock ioctl };,
admin,portage,portage_run,allow $1_t $1_tmp_t:file { create getattr setattr read write append rename link unlink ioctl lock };,
admin,portage,portage_run,allow $1_t $1_tmp_t:lnk_file { create read getattr setattr link unlink rename };,
admin,portage,portage_run,allow $1_t $1_tmp_t:fifo_file { create getattr setattr read write append rename link unlink ioctl lock };,
admin,portage,portage_run,allow $1_t $1_tmp_t:sock_file { create getattr setattr read write append rename link unlink ioctl lock };,
admin,portage,portage_run,allow $1_t $1_tmpfs_t:dir { read getattr lock search ioctl add_name remove_name write };,
admin,portage,portage_run,allow $1_t $1_tmpfs_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
admin,portage,portage_run,allow $1_t $1_tmpfs_t:lnk_file { create read getattr setattr link unlink rename };,
admin,portage,portage_run,allow $1_t $1_tmpfs_t:sock_file { create ioctl read getattr lock write setattr append link unlink rename };,
admin,portage,portage_run,allow $1_t $1_tmpfs_t:fifo_file { create ioctl read getattr lock write setattr append link unlink rename };,
admin,portage,portage_run,allow $1_t portage_log_t:dir setattr;,
admin,portage,portage_run,allow $1_t portage_log_t:file { append write setattr };,
admin,prelink,prelink_domtrans,allow $1 prelink_t:fd use;,
admin,prelink,prelink_domtrans,allow prelink_t $1:fd use;,
admin,prelink,prelink_domtrans,allow prelink_t $1:fifo_file { getattr read write append ioctl lock };,
admin,prelink,prelink_domtrans,allow prelink_t $1:process sigchld;,
admin,prelink,prelink_read_cache,allow $1 prelink_cache_t:file { getattr read };,
admin,prelink,prelink_delete_cache,allow $1 prelink_cache_t:file unlink;,
admin,prelink,prelink_manage_log,allow $1 prelink_log_t:dir { read getattr lock search ioctl add_name remove_name write };,
admin,prelink,prelink_manage_log,allow $1 prelink_log_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
admin,quota,quota_domtrans,allow $1 quota_t:fd use;,
admin,quota,quota_domtrans,allow quota_t $1:fd use;,
admin,quota,quota_domtrans,allow quota_t $1:fifo_file { getattr read write append ioctl lock };,
admin,quota,quota_domtrans,allow quota_t $1:process sigchld;,
admin,quota,quota_run,allow quota_t $3:chr_file { getattr read write ioctl };,
admin,quota,quota_manage_flags,allow $1 quota_flag_t:dir { read getattr lock search ioctl add_name remove_name write };,
admin,quota,quota_manage_flags,allow $1 quota_flag_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
admin,rpm,rpm_domtrans,allow $1 rpm_t:fd use;,
admin,rpm,rpm_domtrans,allow rpm_t $1:fd use;,
admin,rpm,rpm_domtrans,allow rpm_t $1:fifo_file { getattr read write append ioctl lock };,
admin,rpm,rpm_domtrans,allow rpm_t $1:process sigchld;,
admin,rpm,rpm_domtrans_script,allow $1 rpm_script_t:fd use;,
admin,rpm,rpm_domtrans_script,allow rpm_script_t $1:fd use;,
admin,rpm,rpm_domtrans_script,allow rpm_script_t $1:fifo_file { getattr read write append ioctl lock };,
admin,rpm,rpm_domtrans_script,allow rpm_script_t $1:process sigchld;,
admin,rpm,rpm_run,allow rpm_t $3:chr_file { getattr read write ioctl };,
admin,rpm,rpm_use_fds,allow $1 rpm_t:fd use;,
admin,rpm,rpm_read_pipes,allow $1 rpm_t:fifo_file { read getattr lock ioctl };,
admin,rpm,rpm_rw_pipes,allow $1 rpm_t:fifo_file { getattr read write append ioctl lock };,
admin,rpm,rpm_manage_log,allow $1 rpm_log_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
admin,rpm,rpm_use_script_fds,allow $1 rpm_script_t:fd use;,
admin,rpm,rpm_read_db,allow $1 rpm_var_lib_t:dir { read getattr lock search ioctl };,
admin,rpm,rpm_read_db,allow $1 rpm_var_lib_t:file { getattr read };,
admin,rpm,rpm_read_db,allow $1 rpm_var_lib_t:lnk_file { read getattr lock ioctl };,
admin,rpm,rpm_manage_db,allow $1 rpm_var_lib_t:dir { read getattr lock search ioctl add_name remove_name write };,
admin,rpm,rpm_manage_db,allow $1 rpm_var_lib_t:file { getattr create read write append unlink };,
admin,rpm,rpm_manage_db,allow $1 rpm_var_lib_t:lnk_file { getattr read write unlink };,
admin,su,allow $2 $1_su_t:process signal;,
admin,su,allow $1_su_t self:capability { audit_control audit_write setuid setgid net_bind_service chown dac_override fowner sys_nice sys_resource };,
admin,su,allow $1_su_t self:process { setexec setsched setrlimit };,
admin,su,allow $1_su_t self:fifo_file { getattr read write append ioctl lock };,
admin,su,allow $1_su_t self:netlink_audit_socket { nlmsg_relay { create ioctl read getattr write setattr append bind connect getopt setopt shutdown nlmsg_read nlmsg_write } };,
admin,su,allow $1_su_t self:unix_stream_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown listen accept };,
admin,su,allow $1_su_t $2:fd use;,
admin,su,allow $1_su_t $2:fifo_file { getattr read write append ioctl lock };,
admin,su,allow $1_su_t $2:process sigchld;,
admin,su,allow $2 $1_su_t:fd use;,
admin,su,allow $2 $1_su_t:fifo_file { getattr read write append ioctl lock };,
admin,su,allow $2 $1_su_t:process sigchld;,
admin,su,allow $2 $1_su_t:process signal;,
admin,su,allow $1_su_t self:capability { audit_control audit_write setuid setgid net_bind_service chown dac_override fowner sys_nice sys_resource };,
admin,su,allow $1_su_t self:process { setexec setsched setrlimit };,
admin,su,allow $1_su_t self:fifo_file { getattr read write append ioctl lock };,
admin,su,allow $1_su_t self:netlink_audit_socket { nlmsg_relay { create ioctl read getattr write setattr append bind connect getopt setopt shutdown nlmsg_read nlmsg_write } };,
admin,su,allow $2 $1_su_t:fd use;,
admin,su,allow $1_su_t $2:fd use;,
admin,su,allow $1_su_t $2:fifo_file { getattr read write append ioctl lock };,
admin,su,allow $1_su_t $2:process sigchld;,
admin,su,allow $2 $1_su_t:fd use;,
admin,su,allow $1_su_t $2:fd use;,
admin,su,allow $1_su_t $2:fifo_file { getattr read write append ioctl lock };,
admin,su,allow $1_su_t $2:process sigchld;,
admin,su,allow $1_su_t $1_home_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
admin,su,allow $1_su_t home_dir_type:dir { search write };,
admin,su,allow $1_su_t sshd_tmp_t:file { getattr read write append ioctl lock };,
admin,sudo,allow $1_sudo_t self:capability { fowner setuid setgid dac_override sys_resource };,
admin,sudo,allow $1_sudo_t self:process ~{ ptrace setcurrent setexec setfscreate setrlimit execmem execstack execheap };,
admin,sudo,allow $1_sudo_t self:process { setexec setrlimit };,
admin,sudo,allow $1_sudo_t self:fd use;,
admin,sudo,allow $1_sudo_t self:fifo_file { getattr read write append ioctl lock };,
admin,sudo,allow $1_sudo_t self:shm { associate getattr setattr create destroy read write lock unix_read unix_write };,
admin,sudo,allow $1_sudo_t self:sem { associate getattr setattr create destroy read write unix_read unix_write };,
admin,sudo,allow $1_sudo_t self:msgq { associate getattr setattr create destroy read write enqueue unix_read unix_write };,
admin,sudo,allow $1_sudo_t self:msg { send receive };,
admin,sudo,allow $1_sudo_t self:unix_dgram_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown };,
admin,sudo,allow $1_sudo_t self:unix_stream_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown listen accept };,
admin,sudo,allow $1_sudo_t self:unix_dgram_socket sendto;,
admin,sudo,allow $1_sudo_t self:unix_stream_socket connectto;,
admin,sudo,allow $1_sudo_t self:netlink_audit_socket { create bind write nlmsg_read read };,
admin,sudo,allow $1_sudo_t $2:fd use;,
admin,sudo,allow $2 $1_sudo_t:fd use;,
admin,sudo,allow $2 $1_sudo_t:fifo_file { getattr read write append ioctl lock };,
admin,sudo,allow $2 $1_sudo_t:process sigchld;,
admin,sudo,allow $2 $1_sudo_t:fd use;,
admin,sudo,allow $1_sudo_t $2:fd use;,
admin,sudo,allow $1_sudo_t $2:fifo_file { getattr read write append ioctl lock };,
admin,sudo,allow $1_sudo_t $2:process sigchld;,
admin,sudo,allow $1_mail_t $1_sudo_t:fifo_file { getattr read write append ioctl lock };,
admin,sudo,allow $1_sudo_t pam_var_run_t:dir { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir };,
admin,sudo,allow $1_sudo_t pam_var_run_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
admin,updfstab,updfstab_domtrans,allow $1 updfstab_t:fd use;,
admin,updfstab,updfstab_domtrans,allow updfstab_t $1:fd use;,
admin,updfstab,updfstab_domtrans,allow updfstab_t $1:fifo_file { getattr read write append ioctl lock };,
admin,updfstab,updfstab_domtrans,allow updfstab_t $1:process sigchld;,
admin,usbmodules,usbmodules_domtrans,allow $1 usbmodules_t:fd use;,
admin,usbmodules,usbmodules_domtrans,allow usbmodules_t $1:fd use;,
admin,usbmodules,usbmodules_domtrans,allow usbmodules_t $1:fifo_file { getattr read write append ioctl lock };,
admin,usbmodules,usbmodules_domtrans,allow usbmodules_t $1:process sigchld;,
admin,usbmodules,usbmodules_run,allow usbmodules_t $3:chr_file { getattr read write ioctl };,
admin,usermanage,usermanage_domtrans_chfn,allow $1 chfn_t:fd use;,
admin,usermanage,usermanage_domtrans_chfn,allow chfn_t $1:fd use;,
admin,usermanage,usermanage_domtrans_chfn,allow chfn_t $1:fifo_file { getattr read write append ioctl lock };,
admin,usermanage,usermanage_domtrans_chfn,allow chfn_t $1:process sigchld;,
admin,usermanage,usermanage_run_chfn,allow chfn_t $3:chr_file { getattr read write ioctl };,
admin,usermanage,usermanage_domtrans_groupadd,allow $1 groupadd_t:fd use;,
admin,usermanage,usermanage_domtrans_groupadd,allow groupadd_t $1:fd use;,
admin,usermanage,usermanage_domtrans_groupadd,allow groupadd_t $1:fifo_file { getattr read write append ioctl lock };,
admin,usermanage,usermanage_domtrans_groupadd,allow groupadd_t $1:process sigchld;,
admin,usermanage,usermanage_run_groupadd,allow groupadd_t $3:chr_file { getattr read write ioctl };,
admin,usermanage,usermanage_domtrans_passwd,allow $1 passwd_t:fd use;,
admin,usermanage,usermanage_domtrans_passwd,allow passwd_t $1:fd use;,
admin,usermanage,usermanage_domtrans_passwd,allow passwd_t $1:fifo_file { getattr read write append ioctl lock };,
admin,usermanage,usermanage_domtrans_passwd,allow passwd_t $1:process sigchld;,
admin,usermanage,usermanage_run_passwd,allow passwd_t $3:chr_file { getattr read write ioctl };,
admin,usermanage,usermanage_domtrans_admin_passwd,allow $1 sysadm_passwd_t:fd use;,
admin,usermanage,usermanage_domtrans_admin_passwd,allow sysadm_passwd_t $1:fd use;,
admin,usermanage,usermanage_domtrans_admin_passwd,allow sysadm_passwd_t $1:fifo_file { getattr read write append ioctl lock };,
admin,usermanage,usermanage_domtrans_admin_passwd,allow sysadm_passwd_t $1:process sigchld;,
admin,usermanage,usermanage_run_admin_passwd,allow sysadm_passwd_t $3:chr_file { getattr read write ioctl };,
admin,usermanage,usermanage_domtrans_useradd,allow $1 useradd_t:fd use;,
admin,usermanage,usermanage_domtrans_useradd,allow useradd_t $1:fd use;,
admin,usermanage,usermanage_domtrans_useradd,allow useradd_t $1:fifo_file { getattr read write append ioctl lock };,
admin,usermanage,usermanage_domtrans_useradd,allow useradd_t $1:process sigchld;,
admin,usermanage,usermanage_run_useradd,allow useradd_t $3:chr_file { getattr read write ioctl };,
admin,usermanage,usermanage_read_crack_db,allow $1 crack_db_t:file { read getattr lock ioctl };,
admin,vbetool,vbetool_domtrans,allow $1 vbetool_t:fd use;,
admin,vbetool,vbetool_domtrans,allow vbetool_t $1:fd use;,
admin,vbetool,vbetool_domtrans,allow vbetool_t $1:fifo_file { getattr read write append ioctl lock };,
admin,vbetool,vbetool_domtrans,allow vbetool_t $1:process sigchld;,
admin,vpn,vpn_domtrans,allow $1 vpnc_t:fd use;,
admin,vpn,vpn_domtrans,allow vpnc_t $1:fd use;,
admin,vpn,vpn_domtrans,allow vpnc_t $1:fifo_file { getattr read write append ioctl lock };,
admin,vpn,vpn_domtrans,allow vpnc_t $1:process sigchld;,
admin,vpn,vpn_run,allow vpnc_t $3:chr_file { getattr read write ioctl };,
admin,vpn,vpn_signal,allow $1 vpnc_t:process signal;,
apps,cdrecord,allow $1_cdrecord_t self:capability { ipc_lock sys_nice setuid dac_override sys_rawio };,
apps,cdrecord,allow $1_cdrecord_t self:process { getsched setsched sigkill };,
apps,cdrecord,allow $1_cdrecord_t self:unix_dgram_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown };,
apps,cdrecord,allow $1_cdrecord_t self:unix_stream_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown listen accept };,
apps,cdrecord,allow $1_cdrecord_t $2:unix_stream_socket { getattr read write ioctl };,
apps,cdrecord,allow $2 $1_cdrecord_t:dir { search getattr read };,
apps,cdrecord,allow $2 $1_cdrecord_t:{ file lnk_file } { read getattr };,
apps,cdrecord,allow $2 $1_cdrecord_t:process getattr;,
apps,cdrecord,allow $2 $1_cdrecord_t:process signal;,
apps,cdrecord,allow $2 $1_cdrecord_t:fd use;,
apps,cdrecord,allow $1_cdrecord_t $2:fd use;,
apps,cdrecord,allow $1_cdrecord_t $2:fifo_file { getattr read write append ioctl lock };,
apps,cdrecord,allow $1_cdrecord_t $2:process sigchld;,
apps,gpg,allow $2 $1_gpg_t:fd use;,
apps,gpg,allow $1_gpg_t $2:fd use;,
apps,gpg,allow $1_gpg_t $2:fifo_file { getattr read write append ioctl lock };,
apps,gpg,allow $1_gpg_t $2:process sigchld;,
apps,gpg,allow $1_gpg_t self:capability { ipc_lock setuid };,
apps,gpg,allow { $2 $1_gpg_t } $1_gpg_t:process signal;,
apps,gpg,allow $1_gpg_t self:process { setrlimit setcap setpgid };,
apps,gpg,allow $1_gpg_t self:fifo_file { getattr read write append ioctl lock };,
apps,gpg,allow $1_gpg_t self:tcp_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown listen accept };,
apps,gpg,allow $1_gpg_t $1_gpg_secret_t:dir { read getattr lock search ioctl add_name remove_name write };,
apps,gpg,allow $1_gpg_t $1_gpg_secret_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
apps,gpg,allow $1_gpg_t $1_gpg_secret_t:lnk_file { create read getattr setattr link unlink rename };,
apps,gpg,allow $1_gpg_helper_t $2:fd use;,
apps,gpg,allow $1_gpg_helper_t $2:fifo_file write;,
apps,gpg,allow $1_gpg_t $1_gpg_helper_t:fd use;,
apps,gpg,allow $1_gpg_helper_t $1_gpg_t:fd use;,
apps,gpg,allow $1_gpg_helper_t $1_gpg_t:fifo_file { getattr read write append ioctl lock };,
apps,gpg,allow $1_gpg_helper_t $1_gpg_t:process sigchld;,
apps,gpg,allow $1_gpg_helper_t self:unix_stream_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown listen accept };,
apps,gpg,allow $1_gpg_helper_t self:tcp_socket { connect { create ioctl read getattr write setattr append bind getopt setopt shutdown } };,
apps,gpg,allow $1_gpg_helper_t self:udp_socket { connect { create ioctl read getattr write setattr append bind getopt setopt shutdown } };,
apps,gpg,allow $1_gpg_agent_t self:process setrlimit;,
apps,gpg,allow $1_gpg_agent_t self:unix_stream_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown listen accept } ;,
apps,gpg,allow $1_gpg_agent_t self:fifo_file { getattr read write append ioctl lock };,
apps,gpg,allow $1_gpg_agent_t $1_gpg_secret_t:dir { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir };,
apps,gpg,allow $1_gpg_agent_t $1_gpg_secret_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
apps,gpg,allow $1_gpg_agent_t $1_gpg_secret_t:lnk_file { create read getattr setattr link unlink rename };,
apps,gpg,allow $1_gpg_t $1_gpg_agent_tmp_t:dir search;,
apps,gpg,allow $1_gpg_t $1_gpg_agent_tmp_t:sock_file write;,
apps,gpg,allow $1_gpg_t $1_gpg_agent_t:unix_stream_socket connectto;,
apps,gpg,allow $2 $1_gpg_agent_t:process { signal sigkill };,
apps,gpg,allow $2 $1_gpg_agent_tmp_t:dir { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir };,
apps,gpg,allow $2 $1_gpg_agent_tmp_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
apps,gpg,allow $2 $1_gpg_agent_tmp_t:sock_file { create ioctl read getattr lock write setattr append link unlink rename };,
apps,gpg,allow $1_gpg_agent_t proc_t:dir search;,
apps,gpg,allow $1_gpg_agent_t proc_t:lnk_file read;,
apps,gpg,allow $1_gpg_agent_t { home_root_t $1_home_dir_t }:dir search;,
apps,gpg,allow $1_gpg_pinentry_t $1_gpg_agent_t:fd use;,
apps,gpg,allow $1_gpg_agent_t $1_gpg_pinentry_t:fd use;,
apps,gpg,allow $1_gpg_agent_t $1_gpg_pinentry_t:fifo_file { getattr read write append ioctl lock };,
apps,gpg,allow $1_gpg_agent_t $1_gpg_pinentry_t:process sigchld;,
apps,gpg,allow $1_gpg_pinentry_t self:unix_stream_socket { connect create getattr read shutdown write };,
apps,gpg,allow $1_gpg_pinentry_t self:fifo_file { getattr read write append ioctl lock };,
apps,gpg,allow $1_gpg_pinentry_t { tmp_t home_root_t }:dir { getattr search };,
apps,gpg,allow $1_gpg_pinentry_t $1_home_dir_t:dir { getattr search };,
apps,gpg,allow $1_gpg_pinentry_t $1_home_t:file { read getattr lock ioctl };,
apps,irc,allow $1_irc_t self:dir search;,
apps,irc,allow $1_irc_t self:lnk_file read;,
apps,irc,allow $1_irc_t self:unix_stream_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown listen accept };,
apps,irc,allow $1_irc_t self:tcp_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown };,
apps,irc,allow $1_irc_t self:udp_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown };,
apps,irc,allow $1_irc_t $1_irc_home_t:dir { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir };,
apps,irc,allow $1_irc_t $1_irc_home_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
apps,irc,allow $1_irc_t $1_irc_home_t:lnk_file { create read getattr setattr link unlink rename };,
apps,irc,allow $1_irc_t $1_irc_tmp_t:dir { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir };,
apps,irc,allow $1_irc_t $1_irc_tmp_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
apps,irc,allow $1_irc_t $1_irc_tmp_t:lnk_file { create read getattr setattr link unlink rename };,
apps,irc,allow $1_irc_t $1_irc_tmp_t:sock_file { create ioctl read getattr lock write setattr append link unlink rename };,
apps,irc,allow $1_irc_t $1_irc_tmp_t:fifo_file { create ioctl read getattr lock write setattr append link unlink rename };,
apps,irc,allow $2 $1_irc_t:fd use;,
apps,irc,allow $1_irc_t $2:fd use;,
apps,irc,allow $1_irc_t $2:fifo_file { getattr read write append ioctl lock };,
apps,irc,allow $1_irc_t $2:process sigchld;,
apps,irc,allow $2 $1_irc_t:process signal;,
apps,irc,allow $2 $1_irc_exec_t:file { relabelfrom relabelto { create ioctl read getattr lock write setattr append link unlink rename } };,
apps,irc,allow $2 $1_irc_t:dir { search getattr read };,
apps,irc,allow $2 $1_irc_t:{ file lnk_file } { read getattr };,
apps,irc,allow $2 $1_irc_t:process getattr;,
apps,java,allow $1_javaplugin_t self:process { { sigchld sigkill sigstop signull signal } getsched setsched execmem };,
apps,java,allow $1_javaplugin_t self:fifo_file { getattr read write append ioctl lock };,
apps,java,allow $1_javaplugin_t self:tcp_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown };,
apps,java,allow $1_javaplugin_t self:udp_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown };,
apps,java,allow $1_javaplugin_t $2:unix_stream_socket connectto;,
apps,java,allow $1_javaplugin_t $2:unix_stream_socket { read write };,
apps,java,allow $1_javaplugin_t $1_javaplugin_tmp_t:dir { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir };,
apps,java,allow $1_javaplugin_t $1_javaplugin_tmp_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
apps,java,allow $1_javaplugin_t $1_javaplugin_tmpfs_t:dir { read getattr lock search ioctl add_name remove_name write };,
apps,java,allow $1_javaplugin_t $1_javaplugin_tmpfs_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
apps,java,allow $1_javaplugin_t $1_javaplugin_tmpfs_t:lnk_file { create read getattr setattr link unlink rename };,
apps,java,allow $1_javaplugin_t $1_javaplugin_tmpfs_t:sock_file { create ioctl read getattr lock write setattr append link unlink rename };,
apps,java,allow $1_javaplugin_t $1_javaplugin_tmpfs_t:fifo_file { create ioctl read getattr lock write setattr append link unlink rename };,
apps,java,allow $1_javaplugin_t $1_home_t:dir { read getattr lock search ioctl add_name remove_name write };,
apps,java,allow $1_javaplugin_t $1_home_t:file { getattr read write append ioctl lock };,
apps,java,allow $1_javaplugin_t $1_home_t:lnk_file { getattr read };,
apps,java,allow $1_javaplugin_t $2:fd use;,
apps,java,allow $2 $1_javaplugin_t:process { noatsecure siginh rlimitinh };,
apps,java,allow $1_javaplugin_t $2:process signull;,
apps,lockdev,allow $1_lockdev_t self:capability setgid;,
apps,lockdev,allow $1_lockdev_t $2:process signull;,
apps,lockdev,allow $2 $1_lockdev_t:fd use;,
apps,lockdev,allow $1_lockdev_t $2:fd use;,
apps,lockdev,allow $1_lockdev_t $2:fifo_file { getattr read write append ioctl lock };,
apps,lockdev,allow $1_lockdev_t $2:process sigchld;,
apps,lockdev,allow $1_lockdev_t $1_lockdev_lock_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
apps,mono,mono_domtrans,allow $1 mono_t:fd use;,
apps,mono,mono_domtrans,allow mono_t $1:fd use;,
apps,mono,mono_domtrans,allow mono_t $1:fifo_file { getattr read write append ioctl lock };,
apps,mono,mono_domtrans,allow mono_t $1:process sigchld;,
apps,screen,allow $1_screen_t self:capability { setuid setgid fsetid };,
apps,screen,allow $1_screen_t self:process { sigchld sigkill sigstop signull signal };,
apps,screen,allow $1_screen_t self:tcp_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown listen accept };,
apps,screen,allow $1_screen_t self:udp_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown };,
apps,screen,allow $1_screen_t self:fd use;,
apps,screen,allow $1_screen_t self:unix_stream_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown };,
apps,screen,allow $1_screen_t self:unix_dgram_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown };,
apps,screen,allow $1_screen_t $1_screen_tmp_t:dir { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir };,
apps,screen,allow $1_screen_t $1_screen_tmp_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
apps,screen,allow $1_screen_t $1_screen_tmp_t:fifo_file { create ioctl read getattr lock write setattr append link unlink rename };,
apps,screen,allow $1_screen_t screen_dir_t:dir { read getattr lock search ioctl add_name remove_name write };,
apps,screen,allow $1_screen_t screen_dir_t:dir { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir };,
apps,screen,allow $1_screen_t $1_screen_var_run_t:fifo_file { create ioctl read getattr lock write setattr append link unlink rename };,
apps,screen,allow $1_screen_t $1_screen_ro_home_t:dir { read getattr lock search ioctl };,
apps,screen,allow $1_screen_t $1_screen_ro_home_t:file { read getattr lock ioctl };,
apps,screen,allow $1_screen_t $1_screen_ro_home_t:lnk_file { read getattr };,
apps,screen,allow $2 $1_screen_t:process signal;,
apps,screen,allow $1_screen_t $2:process { signal sigchld };,
apps,screen,allow $1_screen_t $2:fd use;,
apps,screen,allow $1_screen_t $2:fifo_file { getattr read write append ioctl lock };,
apps,screen,allow $1_screen_t $1_home_dir_t:dir { search getattr };,
apps,screen,allow $2 $1_screen_ro_home_t:dir { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir };,
apps,screen,allow $2 $1_screen_ro_home_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
apps,screen,allow $2 $1_screen_ro_home_t:lnk_file { create read getattr setattr link unlink rename };,
apps,screen,allow $2 $1_screen_ro_home_t:{ dir file lnk_file } { relabelfrom relabelto };,
apps,slocate,slocate_create_append_log,allow $1 locate_log_t:dir { read getattr lock search ioctl add_name write };,
apps,slocate,slocate_create_append_log,allow $1 locate_log_t:file { create append getattr };,
apps,tvtime,allow $1_tvtime_t self:capability { setuid sys_nice sys_resource };,
apps,tvtime,allow $1_tvtime_t self:process setsched;,
apps,tvtime,allow $1_tvtime_t self:unix_dgram_socket { ioctl read getattr write setattr append bind connect getopt setopt shutdown };,
apps,tvtime,allow $1_tvtime_t self:unix_stream_socket { ioctl read getattr write setattr append bind connect getopt setopt shutdown listen accept };,
apps,tvtime,allow $1_tvtime_t $1_tvtime_home_t:dir { create getattr setattr read write link unlink rename search add_name remove_name reparent rmdir lock ioctl };,
apps,tvtime,allow $1_tvtime_t $1_tvtime_home_t:file { create getattr setattr read write append rename link unlink ioctl lock };,
apps,tvtime,allow $1_tvtime_t $1_tvtime_home_t:lnk_file { create read getattr setattr link unlink rename };,
apps,tvtime,allow $1_tvtime_t $1_tvtime_tmp_t:dir { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir };,
apps,tvtime,allow $1_tvtime_t $1_tvtime_tmp_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
apps,tvtime,allow $1_tvtime_t $1_tvtime_tmpfs_t:dir { read getattr lock search ioctl add_name remove_name write };,
apps,tvtime,allow $1_tvtime_t $1_tvtime_tmpfs_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
apps,tvtime,allow $1_tvtime_t $1_tvtime_tmpfs_t:lnk_file { create read getattr setattr link unlink rename };,
apps,tvtime,allow $1_tvtime_t $1_tvtime_tmpfs_t:sock_file { create ioctl read getattr lock write setattr append link unlink rename };,
apps,tvtime,allow $1_tvtime_t $1_tvtime_tmpfs_t:fifo_file { create ioctl read getattr lock write setattr append link unlink rename };,
apps,tvtime,allow $2 $1_tvtime_t:fd use;,
apps,tvtime,allow $1_tvtime_t $2:fd use;,
apps,tvtime,allow $1_tvtime_t $2:fifo_file { getattr read write append ioctl lock };,
apps,tvtime,allow $1_tvtime_t $2:process sigchld;,
apps,tvtime,allow $2 $1_tvtime_home_t:dir { create getattr setattr read write link unlink rename search add_name remove_name reparent rmdir lock ioctl };,
apps,tvtime,allow $2 $1_tvtime_home_t:file { create getattr setattr read write append rename link unlink ioctl lock };,
apps,tvtime,allow $2 $1_tvtime_home_t:lnk_file { create read getattr setattr link unlink rename };,
apps,tvtime,allow $2 $1_tvtime_home_t:{ dir file lnk_file } { relabelfrom relabelto };,
apps,tvtime,allow $2 $1_tvtime_t:dir { search getattr read };,
apps,tvtime,allow $2 $1_tvtime_t:{ file lnk_file } { read getattr };,
apps,tvtime,allow $2 $1_tvtime_t:process getattr;,
apps,tvtime,allow $2 $1_tvtime_t:process { sigchld sigkill sigstop signull signal };,
apps,uml,allow $1_uml_t self:fifo_file { getattr read write append ioctl lock };,
apps,uml,allow $1_uml_t self:process { fork { sigchld sigkill sigstop signull signal } ptrace };,
apps,uml,allow $1_uml_t self:unix_stream_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown listen accept };,
apps,uml,allow $1_uml_t self:unix_dgram_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown };,
apps,uml,allow $1_uml_t self:tcp_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown listen accept };,
apps,uml,allow $1_uml_t self:udp_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown };,
apps,uml,allow $1_uml_t $2:process sigchld;,
apps,uml,allow $1_uml_t $2:fifo_file { ioctl read write getattr lock append };,
apps,uml,allow $1_uml_t $1_uml_devpts_t:chr_file { { getattr read write append ioctl lock } setattr };,
apps,uml,allow $1_uml_t $1_uml_tmp_t:dir { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir };,
apps,uml,allow $1_uml_t $1_uml_tmp_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
apps,uml,allow $1_uml_t $1_uml_tmpfs_t:dir { read getattr lock search ioctl add_name remove_name write };,
apps,uml,allow $1_uml_t $1_uml_tmpfs_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
apps,uml,allow $1_uml_t $1_uml_tmpfs_t:lnk_file { create read getattr setattr link unlink rename };,
apps,uml,allow $1_uml_t $1_uml_tmpfs_t:sock_file { create ioctl read getattr lock write setattr append link unlink rename };,
apps,uml,allow $1_uml_t $1_uml_tmpfs_t:fifo_file { create ioctl read getattr lock write setattr append link unlink rename };,
apps,uml,allow $1_uml_t { $1_uml_ro_t uml_ro_t }:dir { read getattr lock search ioctl };,
apps,uml,allow $1_uml_t { $1_uml_ro_t uml_ro_t }:file { read getattr lock ioctl };,
apps,uml,allow $1_uml_t { $1_uml_ro_t uml_ro_t }:lnk_file { getattr read };,
apps,uml,allow $1_uml_t $1_uml_rw_t:dir { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir };,
apps,uml,allow $1_uml_t $1_uml_rw_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
apps,uml,allow $1_uml_t $1_uml_rw_t:lnk_file { create read getattr setattr link unlink rename };,
apps,uml,allow $1_uml_t $1_uml_rw_t:sock_file { create ioctl read getattr lock write setattr append link unlink rename };,
apps,uml,allow $1_uml_t $1_uml_rw_t:fifo_file { create ioctl read getattr lock write setattr append link unlink rename };,
apps,uml,allow $2 uml_ro_t:dir { read getattr lock search ioctl };,
apps,uml,allow $2 uml_ro_t:file { read getattr lock ioctl };,
apps,uml,allow $2 uml_ro_t:lnk_file { getattr read };,
apps,uml,allow $2 { $1_uml_ro_t $1_uml_rw_t }:{ file sock_file fifo_file } { relabelfrom relabelto { create ioctl read getattr lock write setattr append link unlink rename } };,
apps,uml,allow $2 { $1_uml_ro_t $1_uml_rw_t }:lnk_file { relabelfrom relabelto { create read getattr setattr link unlink rename } };,
apps,uml,allow $2 { $1_uml_ro_t $1_uml_rw_t $1_uml_exec_t }:dir { relabelfrom relabelto { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir } };,
apps,uml,allow $2 $1_uml_exec_t:file { relabelfrom relabelto { create ioctl read getattr lock write setattr append link unlink rename } };,
apps,uml,allow $2 $1_uml_t:process ptrace;,
apps,uml,allow $2 $1_uml_t:process { sigchld sigkill sigstop signull signal };,
apps,uml,allow $2 $1_uml_t:dir { search getattr read };,
apps,uml,allow $2 $1_uml_t:{ file lnk_file } { read getattr };,
apps,uml,allow $2 $1_uml_t:process getattr;,
apps,uml,allow $2 $1_uml_tmp_t:dir { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir };,
apps,uml,allow $2 $1_uml_tmp_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
apps,uml,allow $2 $1_uml_tmp_t:lnk_file { create read getattr setattr link unlink rename };,
apps,uml,allow $2 $1_uml_tmp_t:sock_file { create ioctl read getattr lock write setattr append link unlink rename };,
apps,uml,allow { $2 $1_uml_t } $1_uml_t:unix_dgram_socket sendto;,
apps,uml,allow $1_uml_t $2:unix_dgram_socket sendto;,
apps,uml,uml_setattr_util_sockets,allow $1 uml_switch_var_run_t:sock_file setattr;,
apps,uml,uml_manage_util_files,allow $1 uml_switch_var_run_t:dir { read getattr lock search ioctl add_name remove_name write };,
apps,uml,uml_manage_util_files,allow $1 uml_switch_var_run_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
apps,uml,uml_manage_util_files,allow $1 uml_switch_var_run_t:lnk_file { create read getattr setattr link unlink rename };,
apps,userhelper,allow $1_userhelper_t self:capability { setuid setgid net_bind_service dac_override chown sys_tty_config };,
apps,userhelper,allow $1_userhelper_t self:process ~{ ptrace setcurrent setexec setfscreate setrlimit execmem execstack execheap };,
apps,userhelper,allow $1_userhelper_t self:fd use;,
apps,userhelper,allow $1_userhelper_t self:fifo_file { getattr read write append ioctl lock };,
apps,userhelper,allow $1_userhelper_t self:shm { associate getattr setattr create destroy read write lock unix_read unix_write };,
apps,userhelper,allow $1_userhelper_t self:sem { associate getattr setattr create destroy read write unix_read unix_write };,
apps,userhelper,allow $1_userhelper_t self:msgq { associate getattr setattr create destroy read write enqueue unix_read unix_write };,
apps,userhelper,allow $1_userhelper_t self:msg { send receive };,
apps,userhelper,allow $1_userhelper_t self:unix_dgram_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown };,
apps,userhelper,allow $1_userhelper_t self:unix_stream_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown listen accept };,
apps,userhelper,allow $1_userhelper_t self:unix_dgram_socket sendto;,
apps,userhelper,allow $1_userhelper_t self:unix_stream_socket connectto;,
apps,userhelper,allow $1_userhelper_t self:sock_file { read getattr lock ioctl };,
apps,userhelper,allow $2 $1_userhelper_t:fd use;,
apps,userhelper,allow $1_userhelper_t $2:fd use;,
apps,userhelper,allow $1_userhelper_t $2:fifo_file { getattr read write append ioctl lock };,
apps,userhelper,allow $1_userhelper_t $2:process sigchld;,
apps,userhelper,allow $1_userhelper_t self:process setexec;,
apps,userhelper,allow $1_userhelper_t userhelper_conf_t:file { getattr read write append ioctl lock };,
apps,userhelper,allow $1_userhelper_t userhelper_conf_t:dir { read getattr lock search ioctl add_name remove_name write };,
apps,userhelper,userhelper_search_config,allow $1 userhelper_conf_t:dir { getattr search };,
apps,usernetctl,usernetctl_run,allow usernetctl_t $3:chr_file { getattr read write ioctl };,
apps,webalizer,webalizer_domtrans,allow $1 webalizer_t:fd use;,
apps,webalizer,webalizer_domtrans,allow webalizer_t $1:fd use;,
apps,webalizer,webalizer_domtrans,allow webalizer_t $1:fifo_file { getattr read write append ioctl lock };,
apps,webalizer,webalizer_domtrans,allow webalizer_t $1:process sigchld;,
apps,webalizer,webalizer_run,allow webalizer_t $3:chr_file { getattr read write ioctl };,
apps,wine,wine_domtrans,allow $1 wine_t:fd use;,
apps,wine,wine_domtrans,allow wine_t $1:fd use;,
apps,wine,wine_domtrans,allow wine_t $1:fifo_file { getattr read write append ioctl lock };,
apps,wine,wine_domtrans,allow wine_t $1:process sigchld;,
kernel,corecommands,corecmd_search_bin,allow $1 bin_t:dir search;,
kernel,corecommands,corecmd_list_bin,allow $1 bin_t:dir { read getattr lock search ioctl };,
kernel,corecommands,corecmd_getattr_bin_files,allow $1 bin_t:file getattr;,
kernel,corecommands,corecmd_read_bin_files,allow $1 bin_t:dir search;,
kernel,corecommands,corecmd_read_bin_files,allow $1 bin_t:file { read getattr lock ioctl };,
kernel,corecommands,corecmd_read_bin_symlinks,allow $1 bin_t:dir search;,
kernel,corecommands,corecmd_read_bin_symlinks,allow $1 bin_t:lnk_file { read getattr lock ioctl };,
kernel,corecommands,corecmd_read_bin_pipes,allow $1 bin_t:dir search;,
kernel,corecommands,corecmd_read_bin_pipes,allow $1 bin_t:fifo_file { read getattr lock ioctl };,
kernel,corecommands,corecmd_read_bin_sockets,allow $1 bin_t:dir search;,
kernel,corecommands,corecmd_read_bin_sockets,allow $1 bin_t:sock_file { read getattr lock ioctl };,
kernel,corecommands,corecmd_exec_bin,allow $1 bin_t:dir { read getattr lock search ioctl };,
kernel,corecommands,corecmd_exec_bin,allow $1 bin_t:lnk_file { read getattr lock ioctl };,
kernel,corecommands,corecmd_manage_bin_files,allow $1 bin_t:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,corecommands,corecmd_manage_bin_files,allow $1 bin_t:file { create getattr setattr read write append rename link unlink ioctl lock };,
kernel,corecommands,corecmd_relabel_bin_files,allow $1 bin_t:dir { getattr search };,
kernel,corecommands,corecmd_relabel_bin_files,allow $1 bin_t:file { relabelfrom relabelto };,
kernel,corecommands,corecmd_mmap_bin_files,allow $1 bin_t:dir { getattr search };,
kernel,corecommands,corecmd_mmap_bin_files,allow $1 bin_t:file { getattr read execute };,
kernel,corecommands,corecmd_bin_spec_domtrans,allow $1 bin_t:dir search;,
kernel,corecommands,corecmd_bin_spec_domtrans,allow $1 bin_t:lnk_file { getattr read };,
kernel,corecommands,corecmd_search_sbin,allow $1 sbin_t:dir { getattr search };,
kernel,corecommands,corecmd_list_sbin,allow $1 sbin_t:dir { read getattr lock search ioctl };,
kernel,corecommands,corecmd_getattr_sbin_files,allow $1 sbin_t:file getattr;,
kernel,corecommands,corecmd_read_sbin_files,allow $1 sbin_t:dir search;,
kernel,corecommands,corecmd_read_sbin_files,allow $1 sbin_t:file { read getattr lock ioctl };,
kernel,corecommands,corecmd_read_sbin_symlinks,allow $1 sbin_t:dir search;,
kernel,corecommands,corecmd_read_sbin_symlinks,allow $1 sbin_t:lnk_file { read getattr lock ioctl };,
kernel,corecommands,corecmd_read_sbin_pipes,allow $1 sbin_t:dir search;,
kernel,corecommands,corecmd_read_sbin_pipes,allow $1 sbin_t:fifo_file { read getattr lock ioctl };,
kernel,corecommands,corecmd_read_sbin_sockets,allow $1 sbin_t:dir search;,
kernel,corecommands,corecmd_read_sbin_sockets,allow $1 sbin_t:sock_file { read getattr lock ioctl };,
kernel,corecommands,corecmd_exec_sbin,allow $1 sbin_t:dir { read getattr lock search ioctl };,
kernel,corecommands,corecmd_exec_sbin,allow $1 sbin_t:lnk_file { read getattr lock ioctl };,
kernel,corecommands,corecmd_manage_sbin_files,allow $1 sbin_t:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,corecommands,corecmd_manage_sbin_files,allow $1 sbin_t:file { create getattr setattr read write append rename link unlink ioctl lock };,
kernel,corecommands,corecmd_relabel_sbin_files,allow $1 sbin_t:dir { getattr search };,
kernel,corecommands,corecmd_relabel_sbin_files,allow $1 sbin_t:file { relabelfrom relabelto };,
kernel,corecommands,corecmd_mmap_sbin_files,allow $1 sbin_t:dir { getattr search };,
kernel,corecommands,corecmd_mmap_sbin_files,allow $1 sbin_t:file { getattr read execute };,
kernel,corecommands,corecmd_sbin_domtrans,allow $1 sbin_t:dir search;,
kernel,corecommands,corecmd_sbin_domtrans,allow $1 sbin_t:lnk_file { getattr read };,
kernel,corecommands,corecmd_sbin_spec_domtrans,allow $1 sbin_t:dir search;,
kernel,corecommands,corecmd_sbin_spec_domtrans,allow $1 sbin_t:lnk_file { getattr read };,
kernel,corecommands,corecmd_check_exec_shell,allow $1 bin_t:dir { read getattr lock search ioctl };,
kernel,corecommands,corecmd_check_exec_shell,allow $1 bin_t:lnk_file { read getattr lock ioctl };,
kernel,corecommands,corecmd_check_exec_shell,allow $1 shell_exec_t:file execute;,
kernel,corecommands,corecmd_exec_shell,allow $1 bin_t:dir { read getattr lock search ioctl };,
kernel,corecommands,corecmd_exec_shell,allow $1 bin_t:lnk_file { read getattr lock ioctl };,
kernel,corecommands,corecmd_exec_ls,allow $1 bin_t:dir { read getattr lock search ioctl };,
kernel,corecommands,corecmd_exec_ls,allow $1 bin_t:lnk_file { read getattr lock ioctl };,
kernel,corecommands,corecmd_shell_spec_domtrans,allow $1 bin_t:dir { read getattr lock search ioctl };,
kernel,corecommands,corecmd_shell_spec_domtrans,allow $1 bin_t:lnk_file { read getattr lock ioctl };,
kernel,corecommands,corecmd_exec_chroot,allow $1 self:capability sys_chroot;,
kernel,corenetwork,corenet_tcp_sendrecv_generic_if,allow $1 netif_t:netif { tcp_send tcp_recv };,
kernel,corenetwork,corenet_udp_send_generic_if,allow $1 netif_t:netif udp_send;,
kernel,corenetwork,corenet_udp_receive_generic_if,allow $1 netif_t:netif udp_recv;,
kernel,corenetwork,corenet_raw_send_generic_if,allow $1 netif_t:netif rawip_send;,
kernel,corenetwork,corenet_raw_receive_generic_if,allow $1 netif_t:netif rawip_recv;,
kernel,corenetwork,corenet_tcp_sendrecv_all_if,allow $1 netif_type:netif { tcp_send tcp_recv };,
kernel,corenetwork,corenet_udp_send_all_if,allow $1 netif_type:netif udp_send;,
kernel,corenetwork,corenet_udp_receive_all_if,allow $1 netif_type:netif udp_recv;,
kernel,corenetwork,corenet_raw_send_all_if,allow $1 netif_type:netif rawip_send;,
kernel,corenetwork,corenet_raw_receive_all_if,allow $1 netif_type:netif rawip_recv;,
kernel,corenetwork,corenet_tcp_sendrecv_generic_node,allow $1 node_t:node { tcp_send tcp_recv };,
kernel,corenetwork,corenet_udp_send_generic_node,allow $1 node_t:node udp_send;,
kernel,corenetwork,corenet_udp_receive_generic_node,allow $1 node_t:node udp_recv;,
kernel,corenetwork,corenet_raw_send_generic_node,allow $1 node_t:node rawip_send;,
kernel,corenetwork,corenet_raw_receive_generic_node,allow $1 node_t:node rawip_recv;,
kernel,corenetwork,corenet_tcp_bind_generic_node,allow $1 node_t:tcp_socket node_bind;,
kernel,corenetwork,corenet_udp_bind_generic_node,allow $1 node_t:udp_socket node_bind;,
kernel,corenetwork,corenet_tcp_sendrecv_all_nodes,allow $1 node_type:node { tcp_send tcp_recv };,
kernel,corenetwork,corenet_udp_send_all_nodes,allow $1 node_type:node udp_send;,
kernel,corenetwork,corenet_udp_receive_all_nodes,allow $1 node_type:node udp_recv;,
kernel,corenetwork,corenet_raw_send_all_nodes,allow $1 node_type:node rawip_send;,
kernel,corenetwork,corenet_raw_receive_all_nodes,allow $1 node_type:node rawip_recv;,
kernel,corenetwork,corenet_tcp_bind_all_nodes,allow $1 node_type:tcp_socket node_bind;,
kernel,corenetwork,corenet_udp_bind_all_nodes,allow $1 node_type:udp_socket node_bind;,
kernel,corenetwork,corenet_raw_bind_all_nodes,allow $1 node_type:rawip_socket node_bind;,
kernel,corenetwork,corenet_tcp_sendrecv_generic_port,allow $1 port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_generic_port,allow $1 port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_generic_port,allow $1 port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_generic_port,allow $1 port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_generic_port,allow $1 port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_tcp_connect_generic_port,allow $1 port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_all_ports,allow $1 port_type:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_all_ports,allow $1 port_type:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_all_ports,allow $1 port_type:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_all_ports,allow $1 port_type:tcp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_all_ports,allow $1 port_type:udp_socket name_bind;,
kernel,corenetwork,corenet_tcp_connect_all_ports,allow $1 port_type:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_reserved_port,allow $1 reserved_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_reserved_port,allow $1 reserved_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_reserved_port,allow $1 reserved_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_reserved_port,allow $1 reserved_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_tcp_bind_reserved_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_udp_bind_reserved_port,allow $1 reserved_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_reserved_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_tcp_connect_reserved_port,allow $1 reserved_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_all_reserved_ports,allow $1 reserved_port_type:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_all_reserved_ports,allow $1 reserved_port_type:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_all_reserved_ports,allow $1 reserved_port_type:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_all_reserved_ports,allow $1 reserved_port_type:tcp_socket name_bind;,
kernel,corenetwork,corenet_tcp_bind_all_reserved_ports,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_udp_bind_all_reserved_ports,allow $1 reserved_port_type:udp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_all_reserved_ports,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_tcp_connect_all_reserved_ports,allow $1 reserved_port_type:tcp_socket name_connect;,
kernel,corenetwork,corenet_rw_tun_tap_dev,allow $1 tun_tap_device_t:chr_file { getattr read write ioctl  lock append };,
kernel,corenetwork,corenet_rw_ppp_dev,allow $1 ppp_device_t:chr_file { getattr read write append ioctl lock };,
kernel,corenetwork,corenet_unconfined,allow $1 node_type:node *;,
kernel,corenetwork,corenet_unconfined,allow $1 netif_type:netif *;,
kernel,corenetwork,corenet_unconfined,allow $1 port_type:tcp_socket { send_msg recv_msg name_connect };,
kernel,corenetwork,corenet_unconfined,allow $1 port_type:udp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_unconfined,allow $1 port_type:{ tcp_socket udp_socket rawip_socket } name_bind;,
kernel,corenetwork,corenet_unconfined,allow $1 node_type:{ tcp_socket udp_socket rawip_socket } node_bind;,
kernel,corenetwork,corenet_tcp_sendrecv_afs_bos_port,allow $1 afs_bos_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_afs_bos_port,allow $1 afs_bos_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_afs_bos_port,allow $1 afs_bos_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_afs_bos_port,allow $1 afs_bos_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_afs_bos_port,allow $1 afs_bos_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_tcp_connect_afs_bos_port,allow $1 afs_bos_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_afs_fs_port,allow $1 afs_fs_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_afs_fs_port,allow $1 afs_fs_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_afs_fs_port,allow $1 afs_fs_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_afs_fs_port,allow $1 afs_fs_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_afs_fs_port,allow $1 afs_fs_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_tcp_connect_afs_fs_port,allow $1 afs_fs_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_afs_ka_port,allow $1 afs_ka_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_afs_ka_port,allow $1 afs_ka_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_afs_ka_port,allow $1 afs_ka_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_afs_ka_port,allow $1 afs_ka_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_afs_ka_port,allow $1 afs_ka_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_tcp_connect_afs_ka_port,allow $1 afs_ka_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_afs_pt_port,allow $1 afs_pt_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_afs_pt_port,allow $1 afs_pt_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_afs_pt_port,allow $1 afs_pt_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_afs_pt_port,allow $1 afs_pt_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_afs_pt_port,allow $1 afs_pt_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_tcp_connect_afs_pt_port,allow $1 afs_pt_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_afs_vl_port,allow $1 afs_vl_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_afs_vl_port,allow $1 afs_vl_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_afs_vl_port,allow $1 afs_vl_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_afs_vl_port,allow $1 afs_vl_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_afs_vl_port,allow $1 afs_vl_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_tcp_connect_afs_vl_port,allow $1 afs_vl_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_amanda_port,allow $1 amanda_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_amanda_port,allow $1 amanda_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_amanda_port,allow $1 amanda_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_amanda_port,allow $1 amanda_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_amanda_port,allow $1 amanda_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_tcp_connect_amanda_port,allow $1 amanda_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_amavisd_recv_port,allow $1 amavisd_recv_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_amavisd_recv_port,allow $1 amavisd_recv_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_amavisd_recv_port,allow $1 amavisd_recv_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_amavisd_recv_port,allow $1 amavisd_recv_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_amavisd_recv_port,allow $1 amavisd_recv_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_tcp_connect_amavisd_recv_port,allow $1 amavisd_recv_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_amavisd_send_port,allow $1 amavisd_send_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_amavisd_send_port,allow $1 amavisd_send_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_amavisd_send_port,allow $1 amavisd_send_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_amavisd_send_port,allow $1 amavisd_send_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_amavisd_send_port,allow $1 amavisd_send_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_tcp_connect_amavisd_send_port,allow $1 amavisd_send_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_asterisk_port,allow $1 asterisk_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_asterisk_port,allow $1 asterisk_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_asterisk_port,allow $1 asterisk_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_asterisk_port,allow $1 asterisk_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_asterisk_port,allow $1 asterisk_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_tcp_connect_asterisk_port,allow $1 asterisk_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_auth_port,allow $1 auth_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_auth_port,allow $1 auth_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_auth_port,allow $1 auth_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_auth_port,allow $1 auth_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_tcp_bind_auth_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_udp_bind_auth_port,allow $1 auth_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_auth_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_tcp_connect_auth_port,allow $1 auth_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_bgp_port,allow $1 bgp_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_bgp_port,allow $1 bgp_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_bgp_port,allow $1 bgp_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_bgp_port,allow $1 bgp_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_tcp_bind_bgp_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_udp_bind_bgp_port,allow $1 bgp_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_bgp_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_tcp_connect_bgp_port,allow $1 bgp_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_clamd_port,allow $1 clamd_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_clamd_port,allow $1 clamd_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_clamd_port,allow $1 clamd_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_clamd_port,allow $1 clamd_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_clamd_port,allow $1 clamd_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_tcp_connect_clamd_port,allow $1 clamd_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_clockspeed_port,allow $1 clockspeed_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_clockspeed_port,allow $1 clockspeed_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_clockspeed_port,allow $1 clockspeed_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_clockspeed_port,allow $1 clockspeed_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_clockspeed_port,allow $1 clockspeed_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_tcp_connect_clockspeed_port,allow $1 clockspeed_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_comsat_port,allow $1 comsat_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_comsat_port,allow $1 comsat_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_comsat_port,allow $1 comsat_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_comsat_port,allow $1 comsat_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_tcp_bind_comsat_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_udp_bind_comsat_port,allow $1 comsat_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_comsat_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_tcp_connect_comsat_port,allow $1 comsat_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_cvs_port,allow $1 cvs_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_cvs_port,allow $1 cvs_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_cvs_port,allow $1 cvs_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_cvs_port,allow $1 cvs_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_cvs_port,allow $1 cvs_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_tcp_connect_cvs_port,allow $1 cvs_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_dcc_port,allow $1 dcc_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_dcc_port,allow $1 dcc_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_dcc_port,allow $1 dcc_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_dcc_port,allow $1 dcc_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_dcc_port,allow $1 dcc_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_tcp_connect_dcc_port,allow $1 dcc_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_dbskkd_port,allow $1 dbskkd_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_dbskkd_port,allow $1 dbskkd_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_dbskkd_port,allow $1 dbskkd_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_dbskkd_port,allow $1 dbskkd_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_dbskkd_port,allow $1 dbskkd_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_tcp_connect_dbskkd_port,allow $1 dbskkd_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_dhcpc_port,allow $1 dhcpc_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_dhcpc_port,allow $1 dhcpc_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_dhcpc_port,allow $1 dhcpc_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_dhcpc_port,allow $1 dhcpc_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_tcp_bind_dhcpc_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_udp_bind_dhcpc_port,allow $1 dhcpc_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_dhcpc_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_tcp_connect_dhcpc_port,allow $1 dhcpc_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_dhcpd_port,allow $1 dhcpd_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_dhcpd_port,allow $1 dhcpd_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_dhcpd_port,allow $1 dhcpd_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_dhcpd_port,allow $1 dhcpd_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_tcp_bind_dhcpd_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_udp_bind_dhcpd_port,allow $1 dhcpd_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_dhcpd_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_tcp_connect_dhcpd_port,allow $1 dhcpd_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_dict_port,allow $1 dict_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_dict_port,allow $1 dict_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_dict_port,allow $1 dict_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_dict_port,allow $1 dict_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_dict_port,allow $1 dict_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_tcp_connect_dict_port,allow $1 dict_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_distccd_port,allow $1 distccd_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_distccd_port,allow $1 distccd_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_distccd_port,allow $1 distccd_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_distccd_port,allow $1 distccd_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_distccd_port,allow $1 distccd_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_tcp_connect_distccd_port,allow $1 distccd_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_dns_port,allow $1 dns_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_dns_port,allow $1 dns_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_dns_port,allow $1 dns_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_dns_port,allow $1 dns_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_tcp_bind_dns_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_udp_bind_dns_port,allow $1 dns_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_dns_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_tcp_connect_dns_port,allow $1 dns_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_fingerd_port,allow $1 fingerd_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_fingerd_port,allow $1 fingerd_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_fingerd_port,allow $1 fingerd_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_fingerd_port,allow $1 fingerd_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_tcp_bind_fingerd_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_udp_bind_fingerd_port,allow $1 fingerd_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_fingerd_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_tcp_connect_fingerd_port,allow $1 fingerd_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_ftp_data_port,allow $1 ftp_data_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_ftp_data_port,allow $1 ftp_data_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_ftp_data_port,allow $1 ftp_data_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_ftp_data_port,allow $1 ftp_data_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_tcp_bind_ftp_data_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_udp_bind_ftp_data_port,allow $1 ftp_data_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_ftp_data_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_tcp_connect_ftp_data_port,allow $1 ftp_data_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_ftp_port,allow $1 ftp_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_ftp_port,allow $1 ftp_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_ftp_port,allow $1 ftp_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_ftp_port,allow $1 ftp_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_tcp_bind_ftp_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_udp_bind_ftp_port,allow $1 ftp_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_ftp_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_tcp_connect_ftp_port,allow $1 ftp_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_gatekeeper_port,allow $1 gatekeeper_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_gatekeeper_port,allow $1 gatekeeper_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_gatekeeper_port,allow $1 gatekeeper_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_gatekeeper_port,allow $1 gatekeeper_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_gatekeeper_port,allow $1 gatekeeper_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_tcp_connect_gatekeeper_port,allow $1 gatekeeper_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_giftd_port,allow $1 giftd_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_giftd_port,allow $1 giftd_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_giftd_port,allow $1 giftd_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_giftd_port,allow $1 giftd_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_giftd_port,allow $1 giftd_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_tcp_connect_giftd_port,allow $1 giftd_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_gopher_port,allow $1 gopher_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_gopher_port,allow $1 gopher_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_gopher_port,allow $1 gopher_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_gopher_port,allow $1 gopher_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_tcp_bind_gopher_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_udp_bind_gopher_port,allow $1 gopher_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_gopher_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_tcp_connect_gopher_port,allow $1 gopher_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_http_cache_port,allow $1 http_cache_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_http_cache_port,allow $1 http_cache_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_http_cache_port,allow $1 http_cache_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_http_cache_port,allow $1 http_cache_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_http_cache_port,allow $1 http_cache_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_tcp_connect_http_cache_port,allow $1 http_cache_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_http_port,allow $1 http_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_http_port,allow $1 http_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_http_port,allow $1 http_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_http_port,allow $1 http_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_tcp_bind_http_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_udp_bind_http_port,allow $1 http_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_http_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_tcp_connect_http_port,allow $1 http_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_howl_port,allow $1 howl_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_howl_port,allow $1 howl_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_howl_port,allow $1 howl_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_howl_port,allow $1 howl_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_howl_port,allow $1 howl_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_tcp_connect_howl_port,allow $1 howl_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_hplip_port,allow $1 hplip_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_hplip_port,allow $1 hplip_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_hplip_port,allow $1 hplip_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_hplip_port,allow $1 hplip_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_hplip_port,allow $1 hplip_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_tcp_connect_hplip_port,allow $1 hplip_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_i18n_input_port,allow $1 i18n_input_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_i18n_input_port,allow $1 i18n_input_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_i18n_input_port,allow $1 i18n_input_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_i18n_input_port,allow $1 i18n_input_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_i18n_input_port,allow $1 i18n_input_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_tcp_connect_i18n_input_port,allow $1 i18n_input_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_imaze_port,allow $1 imaze_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_imaze_port,allow $1 imaze_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_imaze_port,allow $1 imaze_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_imaze_port,allow $1 imaze_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_imaze_port,allow $1 imaze_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_tcp_connect_imaze_port,allow $1 imaze_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_inetd_child_port,allow $1 inetd_child_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_inetd_child_port,allow $1 inetd_child_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_inetd_child_port,allow $1 inetd_child_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_inetd_child_port,allow $1 inetd_child_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_tcp_bind_inetd_child_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_udp_bind_inetd_child_port,allow $1 inetd_child_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_inetd_child_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_tcp_connect_inetd_child_port,allow $1 inetd_child_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_innd_port,allow $1 innd_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_innd_port,allow $1 innd_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_innd_port,allow $1 innd_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_innd_port,allow $1 innd_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_tcp_bind_innd_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_udp_bind_innd_port,allow $1 innd_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_innd_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_tcp_connect_innd_port,allow $1 innd_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_ipp_port,allow $1 ipp_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_ipp_port,allow $1 ipp_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_ipp_port,allow $1 ipp_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_ipp_port,allow $1 ipp_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_tcp_bind_ipp_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_udp_bind_ipp_port,allow $1 ipp_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_ipp_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_tcp_connect_ipp_port,allow $1 ipp_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_ircd_port,allow $1 ircd_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_ircd_port,allow $1 ircd_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_ircd_port,allow $1 ircd_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_ircd_port,allow $1 ircd_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_ircd_port,allow $1 ircd_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_tcp_connect_ircd_port,allow $1 ircd_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_isakmp_port,allow $1 isakmp_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_isakmp_port,allow $1 isakmp_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_isakmp_port,allow $1 isakmp_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_isakmp_port,allow $1 isakmp_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_tcp_bind_isakmp_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_udp_bind_isakmp_port,allow $1 isakmp_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_isakmp_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_tcp_connect_isakmp_port,allow $1 isakmp_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_jabber_client_port,allow $1 jabber_client_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_jabber_client_port,allow $1 jabber_client_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_jabber_client_port,allow $1 jabber_client_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_jabber_client_port,allow $1 jabber_client_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_jabber_client_port,allow $1 jabber_client_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_tcp_connect_jabber_client_port,allow $1 jabber_client_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_jabber_interserver_port,allow $1 jabber_interserver_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_jabber_interserver_port,allow $1 jabber_interserver_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_jabber_interserver_port,allow $1 jabber_interserver_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_jabber_interserver_port,allow $1 jabber_interserver_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_jabber_interserver_port,allow $1 jabber_interserver_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_tcp_connect_jabber_interserver_port,allow $1 jabber_interserver_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_kerberos_admin_port,allow $1 kerberos_admin_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_kerberos_admin_port,allow $1 kerberos_admin_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_kerberos_admin_port,allow $1 kerberos_admin_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_kerberos_admin_port,allow $1 kerberos_admin_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_tcp_bind_kerberos_admin_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_udp_bind_kerberos_admin_port,allow $1 kerberos_admin_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_kerberos_admin_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_tcp_connect_kerberos_admin_port,allow $1 kerberos_admin_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_kerberos_master_port,allow $1 kerberos_master_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_kerberos_master_port,allow $1 kerberos_master_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_kerberos_master_port,allow $1 kerberos_master_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_kerberos_master_port,allow $1 kerberos_master_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_kerberos_master_port,allow $1 kerberos_master_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_tcp_connect_kerberos_master_port,allow $1 kerberos_master_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_kerberos_port,allow $1 kerberos_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_kerberos_port,allow $1 kerberos_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_kerberos_port,allow $1 kerberos_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_kerberos_port,allow $1 kerberos_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_tcp_bind_kerberos_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_udp_bind_kerberos_port,allow $1 kerberos_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_kerberos_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_tcp_connect_kerberos_port,allow $1 kerberos_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_ktalkd_port,allow $1 ktalkd_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_ktalkd_port,allow $1 ktalkd_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_ktalkd_port,allow $1 ktalkd_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_ktalkd_port,allow $1 ktalkd_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_tcp_bind_ktalkd_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_udp_bind_ktalkd_port,allow $1 ktalkd_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_ktalkd_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_tcp_connect_ktalkd_port,allow $1 ktalkd_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_ldap_port,allow $1 ldap_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_ldap_port,allow $1 ldap_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_ldap_port,allow $1 ldap_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_ldap_port,allow $1 ldap_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_tcp_bind_ldap_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_udp_bind_ldap_port,allow $1 ldap_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_ldap_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_tcp_connect_ldap_port,allow $1 ldap_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_mail_port,allow $1 mail_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_mail_port,allow $1 mail_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_mail_port,allow $1 mail_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_mail_port,allow $1 mail_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_mail_port,allow $1 mail_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_tcp_connect_mail_port,allow $1 mail_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_monopd_port,allow $1 monopd_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_monopd_port,allow $1 monopd_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_monopd_port,allow $1 monopd_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_monopd_port,allow $1 monopd_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_monopd_port,allow $1 monopd_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_tcp_connect_monopd_port,allow $1 monopd_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_mysqld_port,allow $1 mysqld_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_mysqld_port,allow $1 mysqld_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_mysqld_port,allow $1 mysqld_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_mysqld_port,allow $1 mysqld_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_mysqld_port,allow $1 mysqld_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_tcp_connect_mysqld_port,allow $1 mysqld_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_nessus_port,allow $1 nessus_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_nessus_port,allow $1 nessus_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_nessus_port,allow $1 nessus_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_nessus_port,allow $1 nessus_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_nessus_port,allow $1 nessus_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_tcp_connect_nessus_port,allow $1 nessus_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_nmbd_port,allow $1 nmbd_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_nmbd_port,allow $1 nmbd_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_nmbd_port,allow $1 nmbd_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_nmbd_port,allow $1 nmbd_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_tcp_bind_nmbd_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_udp_bind_nmbd_port,allow $1 nmbd_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_nmbd_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_tcp_connect_nmbd_port,allow $1 nmbd_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_ntp_port,allow $1 ntp_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_ntp_port,allow $1 ntp_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_ntp_port,allow $1 ntp_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_ntp_port,allow $1 ntp_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_tcp_bind_ntp_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_udp_bind_ntp_port,allow $1 ntp_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_ntp_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_tcp_connect_ntp_port,allow $1 ntp_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_openvpn_port,allow $1 openvpn_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_openvpn_port,allow $1 openvpn_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_openvpn_port,allow $1 openvpn_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_openvpn_port,allow $1 openvpn_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_openvpn_port,allow $1 openvpn_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_tcp_connect_openvpn_port,allow $1 openvpn_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_pegasus_http_port,allow $1 pegasus_http_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_pegasus_http_port,allow $1 pegasus_http_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_pegasus_http_port,allow $1 pegasus_http_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_pegasus_http_port,allow $1 pegasus_http_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_pegasus_http_port,allow $1 pegasus_http_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_tcp_connect_pegasus_http_port,allow $1 pegasus_http_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_pegasus_https_port,allow $1 pegasus_https_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_pegasus_https_port,allow $1 pegasus_https_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_pegasus_https_port,allow $1 pegasus_https_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_pegasus_https_port,allow $1 pegasus_https_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_pegasus_https_port,allow $1 pegasus_https_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_tcp_connect_pegasus_https_port,allow $1 pegasus_https_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_pop_port,allow $1 pop_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_pop_port,allow $1 pop_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_pop_port,allow $1 pop_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_pop_port,allow $1 pop_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_tcp_bind_pop_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_udp_bind_pop_port,allow $1 pop_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_pop_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_tcp_connect_pop_port,allow $1 pop_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_portmap_port,allow $1 portmap_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_portmap_port,allow $1 portmap_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_portmap_port,allow $1 portmap_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_portmap_port,allow $1 portmap_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_tcp_bind_portmap_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_udp_bind_portmap_port,allow $1 portmap_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_portmap_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_tcp_connect_portmap_port,allow $1 portmap_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_postgresql_port,allow $1 postgresql_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_postgresql_port,allow $1 postgresql_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_postgresql_port,allow $1 postgresql_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_postgresql_port,allow $1 postgresql_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_postgresql_port,allow $1 postgresql_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_tcp_connect_postgresql_port,allow $1 postgresql_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_postgrey_port,allow $1 postgrey_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_postgrey_port,allow $1 postgrey_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_postgrey_port,allow $1 postgrey_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_postgrey_port,allow $1 postgrey_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_postgrey_port,allow $1 postgrey_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_tcp_connect_postgrey_port,allow $1 postgrey_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_printer_port,allow $1 printer_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_printer_port,allow $1 printer_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_printer_port,allow $1 printer_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_printer_port,allow $1 printer_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_tcp_bind_printer_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_udp_bind_printer_port,allow $1 printer_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_printer_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_tcp_connect_printer_port,allow $1 printer_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_ptal_port,allow $1 ptal_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_ptal_port,allow $1 ptal_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_ptal_port,allow $1 ptal_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_ptal_port,allow $1 ptal_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_ptal_port,allow $1 ptal_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_tcp_connect_ptal_port,allow $1 ptal_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_pxe_port,allow $1 pxe_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_pxe_port,allow $1 pxe_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_pxe_port,allow $1 pxe_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_pxe_port,allow $1 pxe_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_pxe_port,allow $1 pxe_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_tcp_connect_pxe_port,allow $1 pxe_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_pyzor_port,allow $1 pyzor_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_pyzor_port,allow $1 pyzor_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_pyzor_port,allow $1 pyzor_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_pyzor_port,allow $1 pyzor_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_pyzor_port,allow $1 pyzor_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_tcp_connect_pyzor_port,allow $1 pyzor_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_radacct_port,allow $1 radacct_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_radacct_port,allow $1 radacct_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_radacct_port,allow $1 radacct_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_radacct_port,allow $1 radacct_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_radacct_port,allow $1 radacct_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_tcp_connect_radacct_port,allow $1 radacct_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_radius_port,allow $1 radius_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_radius_port,allow $1 radius_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_radius_port,allow $1 radius_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_radius_port,allow $1 radius_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_radius_port,allow $1 radius_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_tcp_connect_radius_port,allow $1 radius_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_razor_port,allow $1 razor_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_razor_port,allow $1 razor_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_razor_port,allow $1 razor_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_razor_port,allow $1 razor_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_razor_port,allow $1 razor_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_tcp_connect_razor_port,allow $1 razor_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_rlogind_port,allow $1 rlogind_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_rlogind_port,allow $1 rlogind_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_rlogind_port,allow $1 rlogind_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_rlogind_port,allow $1 rlogind_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_tcp_bind_rlogind_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_udp_bind_rlogind_port,allow $1 rlogind_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_rlogind_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_tcp_connect_rlogind_port,allow $1 rlogind_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_rndc_port,allow $1 rndc_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_rndc_port,allow $1 rndc_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_rndc_port,allow $1 rndc_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_rndc_port,allow $1 rndc_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_tcp_bind_rndc_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_udp_bind_rndc_port,allow $1 rndc_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_rndc_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_tcp_connect_rndc_port,allow $1 rndc_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_router_port,allow $1 router_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_router_port,allow $1 router_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_router_port,allow $1 router_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_router_port,allow $1 router_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_tcp_bind_router_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_udp_bind_router_port,allow $1 router_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_router_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_tcp_connect_router_port,allow $1 router_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_rsh_port,allow $1 rsh_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_rsh_port,allow $1 rsh_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_rsh_port,allow $1 rsh_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_rsh_port,allow $1 rsh_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_tcp_bind_rsh_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_udp_bind_rsh_port,allow $1 rsh_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_rsh_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_tcp_connect_rsh_port,allow $1 rsh_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_rsync_port,allow $1 rsync_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_rsync_port,allow $1 rsync_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_rsync_port,allow $1 rsync_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_rsync_port,allow $1 rsync_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_tcp_bind_rsync_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_udp_bind_rsync_port,allow $1 rsync_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_rsync_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_tcp_connect_rsync_port,allow $1 rsync_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_smbd_port,allow $1 smbd_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_smbd_port,allow $1 smbd_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_smbd_port,allow $1 smbd_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_smbd_port,allow $1 smbd_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_tcp_bind_smbd_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_udp_bind_smbd_port,allow $1 smbd_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_smbd_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_tcp_connect_smbd_port,allow $1 smbd_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_smtp_port,allow $1 smtp_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_smtp_port,allow $1 smtp_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_smtp_port,allow $1 smtp_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_smtp_port,allow $1 smtp_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_tcp_bind_smtp_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_udp_bind_smtp_port,allow $1 smtp_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_smtp_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_tcp_connect_smtp_port,allow $1 smtp_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_snmp_port,allow $1 snmp_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_snmp_port,allow $1 snmp_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_snmp_port,allow $1 snmp_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_snmp_port,allow $1 snmp_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_tcp_bind_snmp_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_udp_bind_snmp_port,allow $1 snmp_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_snmp_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_tcp_connect_snmp_port,allow $1 snmp_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_spamd_port,allow $1 spamd_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_spamd_port,allow $1 spamd_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_spamd_port,allow $1 spamd_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_spamd_port,allow $1 spamd_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_tcp_bind_spamd_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_udp_bind_spamd_port,allow $1 spamd_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_spamd_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_tcp_connect_spamd_port,allow $1 spamd_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_ssh_port,allow $1 ssh_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_ssh_port,allow $1 ssh_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_ssh_port,allow $1 ssh_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_ssh_port,allow $1 ssh_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_tcp_bind_ssh_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_udp_bind_ssh_port,allow $1 ssh_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_ssh_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_tcp_connect_ssh_port,allow $1 ssh_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_soundd_port,allow $1 soundd_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_soundd_port,allow $1 soundd_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_soundd_port,allow $1 soundd_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_soundd_port,allow $1 soundd_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_soundd_port,allow $1 soundd_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_tcp_connect_soundd_port,allow $1 soundd_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_swat_port,allow $1 swat_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_swat_port,allow $1 swat_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_swat_port,allow $1 swat_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_swat_port,allow $1 swat_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_tcp_bind_swat_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_udp_bind_swat_port,allow $1 swat_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_swat_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_tcp_connect_swat_port,allow $1 swat_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_syslogd_port,allow $1 syslogd_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_syslogd_port,allow $1 syslogd_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_syslogd_port,allow $1 syslogd_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_syslogd_port,allow $1 syslogd_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_tcp_bind_syslogd_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_udp_bind_syslogd_port,allow $1 syslogd_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_syslogd_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_tcp_connect_syslogd_port,allow $1 syslogd_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_telnetd_port,allow $1 telnetd_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_telnetd_port,allow $1 telnetd_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_telnetd_port,allow $1 telnetd_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_telnetd_port,allow $1 telnetd_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_tcp_bind_telnetd_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_udp_bind_telnetd_port,allow $1 telnetd_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_telnetd_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_tcp_connect_telnetd_port,allow $1 telnetd_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_tftp_port,allow $1 tftp_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_tftp_port,allow $1 tftp_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_tftp_port,allow $1 tftp_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_tftp_port,allow $1 tftp_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_tcp_bind_tftp_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_udp_bind_tftp_port,allow $1 tftp_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_tftp_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_tcp_connect_tftp_port,allow $1 tftp_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_transproxy_port,allow $1 transproxy_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_transproxy_port,allow $1 transproxy_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_transproxy_port,allow $1 transproxy_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_transproxy_port,allow $1 transproxy_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_transproxy_port,allow $1 transproxy_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_tcp_connect_transproxy_port,allow $1 transproxy_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_uucpd_port,allow $1 uucpd_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_uucpd_port,allow $1 uucpd_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_uucpd_port,allow $1 uucpd_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_uucpd_port,allow $1 uucpd_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_tcp_bind_uucpd_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_udp_bind_uucpd_port,allow $1 uucpd_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_uucpd_port,allow $1 self:capability net_bind_service;,
kernel,corenetwork,corenet_tcp_connect_uucpd_port,allow $1 uucpd_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_vnc_port,allow $1 vnc_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_vnc_port,allow $1 vnc_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_vnc_port,allow $1 vnc_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_vnc_port,allow $1 vnc_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_vnc_port,allow $1 vnc_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_tcp_connect_vnc_port,allow $1 vnc_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_xserver_port,allow $1 xserver_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_xserver_port,allow $1 xserver_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_xserver_port,allow $1 xserver_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_xserver_port,allow $1 xserver_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_xserver_port,allow $1 xserver_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_tcp_connect_xserver_port,allow $1 xserver_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_zebra_port,allow $1 zebra_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_zebra_port,allow $1 zebra_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_zebra_port,allow $1 zebra_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_zebra_port,allow $1 zebra_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_zebra_port,allow $1 zebra_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_tcp_connect_zebra_port,allow $1 zebra_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_zope_port,allow $1 zope_port_t:tcp_socket { send_msg recv_msg };,
kernel,corenetwork,corenet_udp_send_zope_port,allow $1 zope_port_t:udp_socket send_msg;,
kernel,corenetwork,corenet_udp_receive_zope_port,allow $1 zope_port_t:udp_socket recv_msg;,
kernel,corenetwork,corenet_tcp_bind_zope_port,allow $1 zope_port_t:tcp_socket name_bind;,
kernel,corenetwork,corenet_udp_bind_zope_port,allow $1 zope_port_t:udp_socket name_bind;,
kernel,corenetwork,corenet_tcp_connect_zope_port,allow $1 zope_port_t:tcp_socket name_connect;,
kernel,corenetwork,corenet_tcp_sendrecv_compat_ipv4_node,allow $1 compat_ipv4_node_t:node { tcp_send tcp_recv };,
kernel,corenetwork,corenet_udp_send_compat_ipv4_node,allow $1 compat_ipv4_node_t:node udp_send;,
kernel,corenetwork,corenet_udp_receive_compat_ipv4_node,allow $1 compat_ipv4_node_t:node udp_recv;,
kernel,corenetwork,corenet_raw_send_compat_ipv4_node,allow $1 compat_ipv4_node_t:node rawip_send;,
kernel,corenetwork,corenet_raw_receive_compat_ipv4_node,allow $1 compat_ipv4_node_t:node rawip_recv;,
kernel,corenetwork,corenet_tcp_bind_compat_ipv4_node,allow $1 compat_ipv4_node_t:tcp_socket node_bind;,
kernel,corenetwork,corenet_udp_bind_compat_ipv4_node,allow $1 compat_ipv4_node_t:udp_socket node_bind;,
kernel,corenetwork,corenet_tcp_sendrecv_inaddr_any_node,allow $1 inaddr_any_node_t:node { tcp_send tcp_recv };,
kernel,corenetwork,corenet_udp_send_inaddr_any_node,allow $1 inaddr_any_node_t:node udp_send;,
kernel,corenetwork,corenet_udp_receive_inaddr_any_node,allow $1 inaddr_any_node_t:node udp_recv;,
kernel,corenetwork,corenet_raw_send_inaddr_any_node,allow $1 inaddr_any_node_t:node rawip_send;,
kernel,corenetwork,corenet_raw_receive_inaddr_any_node,allow $1 inaddr_any_node_t:node rawip_recv;,
kernel,corenetwork,corenet_tcp_bind_inaddr_any_node,allow $1 inaddr_any_node_t:tcp_socket node_bind;,
kernel,corenetwork,corenet_udp_bind_inaddr_any_node,allow $1 inaddr_any_node_t:udp_socket node_bind;,
kernel,corenetwork,corenet_tcp_sendrecv_link_local_node,allow $1 link_local_node_t:node { tcp_send tcp_recv };,
kernel,corenetwork,corenet_udp_send_link_local_node,allow $1 link_local_node_t:node udp_send;,
kernel,corenetwork,corenet_udp_receive_link_local_node,allow $1 link_local_node_t:node udp_recv;,
kernel,corenetwork,corenet_raw_send_link_local_node,allow $1 link_local_node_t:node rawip_send;,
kernel,corenetwork,corenet_raw_receive_link_local_node,allow $1 link_local_node_t:node rawip_recv;,
kernel,corenetwork,corenet_tcp_bind_link_local_node,allow $1 link_local_node_t:tcp_socket node_bind;,
kernel,corenetwork,corenet_udp_bind_link_local_node,allow $1 link_local_node_t:udp_socket node_bind;,
kernel,corenetwork,corenet_tcp_sendrecv_lo_node,allow $1 lo_node_t:node { tcp_send tcp_recv };,
kernel,corenetwork,corenet_udp_send_lo_node,allow $1 lo_node_t:node udp_send;,
kernel,corenetwork,corenet_udp_receive_lo_node,allow $1 lo_node_t:node udp_recv;,
kernel,corenetwork,corenet_raw_send_lo_node,allow $1 lo_node_t:node rawip_send;,
kernel,corenetwork,corenet_raw_receive_lo_node,allow $1 lo_node_t:node rawip_recv;,
kernel,corenetwork,corenet_tcp_bind_lo_node,allow $1 lo_node_t:tcp_socket node_bind;,
kernel,corenetwork,corenet_udp_bind_lo_node,allow $1 lo_node_t:udp_socket node_bind;,
kernel,corenetwork,corenet_tcp_sendrecv_mapped_ipv4_node,allow $1 mapped_ipv4_node_t:node { tcp_send tcp_recv };,
kernel,corenetwork,corenet_udp_send_mapped_ipv4_node,allow $1 mapped_ipv4_node_t:node udp_send;,
kernel,corenetwork,corenet_udp_receive_mapped_ipv4_node,allow $1 mapped_ipv4_node_t:node udp_recv;,
kernel,corenetwork,corenet_raw_send_mapped_ipv4_node,allow $1 mapped_ipv4_node_t:node rawip_send;,
kernel,corenetwork,corenet_raw_receive_mapped_ipv4_node,allow $1 mapped_ipv4_node_t:node rawip_recv;,
kernel,corenetwork,corenet_tcp_bind_mapped_ipv4_node,allow $1 mapped_ipv4_node_t:tcp_socket node_bind;,
kernel,corenetwork,corenet_udp_bind_mapped_ipv4_node,allow $1 mapped_ipv4_node_t:udp_socket node_bind;,
kernel,corenetwork,corenet_tcp_sendrecv_multicast_node,allow $1 multicast_node_t:node { tcp_send tcp_recv };,
kernel,corenetwork,corenet_udp_send_multicast_node,allow $1 multicast_node_t:node udp_send;,
kernel,corenetwork,corenet_udp_receive_multicast_node,allow $1 multicast_node_t:node udp_recv;,
kernel,corenetwork,corenet_raw_send_multicast_node,allow $1 multicast_node_t:node rawip_send;,
kernel,corenetwork,corenet_raw_receive_multicast_node,allow $1 multicast_node_t:node rawip_recv;,
kernel,corenetwork,corenet_tcp_bind_multicast_node,allow $1 multicast_node_t:tcp_socket node_bind;,
kernel,corenetwork,corenet_udp_bind_multicast_node,allow $1 multicast_node_t:udp_socket node_bind;,
kernel,corenetwork,corenet_tcp_sendrecv_site_local_node,allow $1 site_local_node_t:node { tcp_send tcp_recv };,
kernel,corenetwork,corenet_udp_send_site_local_node,allow $1 site_local_node_t:node udp_send;,
kernel,corenetwork,corenet_udp_receive_site_local_node,allow $1 site_local_node_t:node udp_recv;,
kernel,corenetwork,corenet_raw_send_site_local_node,allow $1 site_local_node_t:node rawip_send;,
kernel,corenetwork,corenet_raw_receive_site_local_node,allow $1 site_local_node_t:node rawip_recv;,
kernel,corenetwork,corenet_tcp_bind_site_local_node,allow $1 site_local_node_t:tcp_socket node_bind;,
kernel,corenetwork,corenet_udp_bind_site_local_node,allow $1 site_local_node_t:udp_socket node_bind;,
kernel,corenetwork,corenet_tcp_sendrecv_unspec_node,allow $1 unspec_node_t:node { tcp_send tcp_recv };,
kernel,corenetwork,corenet_udp_send_unspec_node,allow $1 unspec_node_t:node udp_send;,
kernel,corenetwork,corenet_udp_receive_unspec_node,allow $1 unspec_node_t:node udp_recv;,
kernel,corenetwork,corenet_raw_send_unspec_node,allow $1 unspec_node_t:node rawip_send;,
kernel,corenetwork,corenet_raw_receive_unspec_node,allow $1 unspec_node_t:node rawip_recv;,
kernel,corenetwork,corenet_tcp_bind_unspec_node,allow $1 unspec_node_t:tcp_socket node_bind;,
kernel,corenetwork,corenet_udp_bind_unspec_node,allow $1 unspec_node_t:udp_socket node_bind;,
kernel,corenetwork,corenet_tcp_sendrecv_lo_if,allow $1 lo_netif_t:netif { tcp_send tcp_recv };,
kernel,corenetwork,corenet_udp_send_lo_if,allow $1 lo_netif_t:netif udp_send;,
kernel,corenetwork,corenet_udp_receive_lo_if,allow $1 lo_netif_t:netif udp_recv;,
kernel,corenetwork,corenet_raw_send_lo_if,allow $1 lo_netif_t:netif rawip_send;,
kernel,corenetwork,corenet_raw_receive_lo_if,allow $1 lo_netif_t:netif rawip_recv;,
kernel,devices,dev_relabel_all_dev_nodes,allow $1 device_node:dir { getattr relabelfrom };,
kernel,devices,dev_relabel_all_dev_nodes,allow $1 device_node:file { getattr relabelfrom };,
kernel,devices,dev_relabel_all_dev_nodes,allow $1 device_node:lnk_file { getattr relabelfrom };,
kernel,devices,dev_relabel_all_dev_nodes,allow $1 device_node:fifo_file { getattr relabelfrom };,
kernel,devices,dev_relabel_all_dev_nodes,allow $1 device_node:sock_file { getattr relabelfrom };,
kernel,devices,dev_relabel_all_dev_nodes,allow $1 { device_t device_node }:blk_file { getattr relabelfrom relabelto };,
kernel,devices,dev_relabel_all_dev_nodes,allow $1 { device_t device_node }:chr_file { getattr relabelfrom relabelto };,
kernel,devices,dev_list_all_dev_nodes,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_list_all_dev_nodes,allow $1 device_t:lnk_file { getattr read };,
kernel,devices,dev_setattr_generic_dirs,allow $1 device_t:dir setattr;,
kernel,devices,dev_create_generic_dirs,allow $1 device_t:dir { { read getattr lock search ioctl add_name write } create };,
kernel,devices,dev_relabel_generic_dev_dirs,allow $1 device_t:dir { { read getattr lock search ioctl } relabelfrom relabelto };,
kernel,devices,dev_rw_generic_files,allow $1 device_t:dir search;,
kernel,devices,dev_rw_generic_files,allow $1 device_t:file { getattr read write append ioctl lock };,
kernel,devices,dev_delete_generic_files,allow $1 device_t:dir { search write remove_name };,
kernel,devices,dev_delete_generic_files,allow $1 device_t:file unlink;,
kernel,devices,dev_manage_generic_files,allow $1 device_t:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,devices,dev_manage_generic_files,allow $1 device_t:file { create getattr setattr read write append rename link unlink ioctl lock };,
kernel,devices,dev_getattr_generic_blk_files,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_getattr_generic_blk_files,allow $1 device_t:blk_file getattr;,
kernel,devices,dev_create_generic_chr_files,allow $1 device_t:dir { read getattr lock search ioctl add_name write };,
kernel,devices,dev_create_generic_chr_files,allow $1 device_t:chr_file create;,
kernel,devices,dev_create_generic_chr_files,allow $1 self:capability mknod;,
kernel,devices,dev_getattr_generic_chr_files,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_getattr_generic_chr_files,allow $1 device_t:chr_file getattr;,
kernel,devices,dev_delete_generic_symlinks,allow $1 device_t:dir { getattr read write remove_name };,
kernel,devices,dev_delete_generic_symlinks,allow $1 device_t:lnk_file unlink;,
kernel,devices,dev_manage_generic_symlinks,allow $1 device_t:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,devices,dev_manage_generic_symlinks,allow $1 device_t:lnk_file { create read getattr setattr link unlink rename };,
kernel,devices,dev_relabel_generic_symlinks,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_relabel_generic_symlinks,allow $1 device_t:lnk_file { relabelfrom relabelto };,
kernel,devices,dev_manage_all_dev_nodes,allow $1 device_t:dir { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir relabelfrom relabelto };,
kernel,devices,dev_manage_all_dev_nodes,allow $1 device_t:sock_file { create ioctl read getattr lock write setattr append link unlink rename };,
kernel,devices,dev_manage_all_dev_nodes,allow $1 device_t:lnk_file { create read getattr setattr link unlink rename };,
kernel,devices,dev_manage_all_dev_nodes,allow $1 device_t:{ chr_file blk_file } { create ioctl read getattr lock write setattr append link unlink rename relabelfrom relabelto };,
kernel,devices,dev_manage_all_dev_nodes,allow $1 device_node:{ chr_file blk_file } { create ioctl read getattr lock write setattr append link unlink rename relabelfrom relabelto };,
kernel,devices,dev_manage_generic_blk_files,allow $1 device_t:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,devices,dev_manage_generic_blk_files,allow $1 device_t:blk_file { create ioctl read getattr lock write setattr append link unlink rename };,
kernel,devices,dev_manage_generic_chr_files,allow $1 device_t:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,devices,dev_manage_generic_chr_files,allow $1 device_t:chr_file { create ioctl read getattr lock write setattr append link unlink rename };,
kernel,devices,dev_filetrans,allow $1 device_t:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,devices,dev_getattr_all_blk_files,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_getattr_all_blk_files,allow $1 device_node:blk_file getattr;,
kernel,devices,dev_getattr_all_chr_files,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_getattr_all_chr_files,allow $1 device_node:chr_file getattr;,
kernel,devices,dev_setattr_all_blk_files,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_setattr_all_blk_files,allow $1 device_node:blk_file setattr;,
kernel,devices,dev_setattr_all_chr_files,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_setattr_all_chr_files,allow $1 device_node:chr_file setattr;,
kernel,devices,dev_manage_all_blk_files,allow $1 device_t:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,devices,dev_manage_all_blk_files,allow $1 device_node:blk_file { create ioctl read getattr lock write setattr append link unlink rename };,
kernel,devices,dev_manage_all_chr_files,allow $1 device_t:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,devices,dev_manage_all_chr_files,allow $1 device_node:chr_file { create ioctl read getattr lock write setattr append link unlink rename };,
kernel,devices,dev_getattr_agp_dev,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_getattr_agp_dev,allow $1 agp_device_t:chr_file getattr;,
kernel,devices,dev_rw_agp,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_rw_agp,allow $1 agp_device_t:chr_file { getattr read write append ioctl lock };,
kernel,devices,dev_getattr_apm_bios_dev,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_getattr_apm_bios_dev,allow $1 apm_bios_t:chr_file getattr;,
kernel,devices,dev_setattr_apm_bios_dev,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_setattr_apm_bios_dev,allow $1 apm_bios_t:chr_file setattr;,
kernel,devices,dev_rw_apm_bios,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_rw_apm_bios,allow $1 apm_bios_t:chr_file { getattr read write append ioctl lock };,
kernel,devices,dev_rw_cardmgr,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_rw_cardmgr,allow $1 cardmgr_dev_t:chr_file { read write };,
kernel,devices,dev_manage_cardmgr_dev,allow $1 device_t:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,devices,dev_manage_cardmgr_dev,allow $1 cardmgr_dev_t:{ chr_file blk_file } { create getattr setattr read write append rename link unlink ioctl lock };,
kernel,devices,dev_create_cardmgr_dev,allow $1 device_t:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,devices,dev_create_cardmgr_dev,allow $1 cardmgr_dev_t:{ chr_file blk_file } { create getattr setattr read write append rename link unlink ioctl lock };,
kernel,devices,dev_getattr_cpu_dev,allow $1 device_t:dir search;,
kernel,devices,dev_getattr_cpu_dev,allow $1 cpu_device_t:chr_file getattr;,
kernel,devices,dev_read_cpuid,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_read_cpuid,allow $1 cpu_device_t:chr_file { read getattr lock ioctl };,
kernel,devices,dev_rw_cpu_microcode,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_rw_cpu_microcode,allow $1 cpu_device_t:chr_file { getattr read write append ioctl lock };,
kernel,devices,dev_rw_crypto,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_rw_crypto,allow $1 crypt_device_t:chr_file { getattr read write append ioctl lock };,
kernel,devices,dev_getattr_dri_dev,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_getattr_dri_dev,allow $1 dri_device_t:chr_file getattr;,
kernel,devices,dev_setattr_dri_dev,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_setattr_dri_dev,allow $1 dri_device_t:chr_file setattr;,
kernel,devices,dev_rw_dri,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_rw_dri,allow $1 dri_device_t:chr_file { getattr read write append ioctl lock };,
kernel,devices,dev_manage_dri_dev,allow $1 device_t:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,devices,dev_manage_dri_dev,allow $1 dri_device_t:chr_file { create getattr setattr read write append rename link unlink ioctl lock };,
kernel,devices,dev_read_input,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_read_input,allow $1 event_device_t:chr_file { read getattr lock ioctl };,
kernel,devices,dev_rw_input_dev,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_rw_input_dev,allow $1 event_device_t:chr_file { getattr read write append ioctl lock };,
kernel,devices,dev_getattr_framebuffer_dev,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_getattr_framebuffer_dev,allow $1 framebuf_device_t:chr_file getattr;,
kernel,devices,dev_setattr_framebuffer_dev,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_setattr_framebuffer_dev,allow $1 framebuf_device_t:chr_file setattr;,
kernel,devices,dev_read_framebuffer,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_read_framebuffer,allow $1 framebuf_device_t:chr_file { read getattr lock ioctl };,
kernel,devices,dev_write_framebuffer,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_write_framebuffer,allow $1 framebuf_device_t:chr_file { getattr write ioctl };,
kernel,devices,dev_rw_framebuffer,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_rw_framebuffer,allow $1 framebuf_device_t:chr_file { getattr read write append ioctl lock };,
kernel,devices,dev_read_lvm_control,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_read_lvm_control,allow $1 lvm_control_t:chr_file { read getattr lock ioctl };,
kernel,devices,dev_rw_lvm_control,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_rw_lvm_control,allow $1 lvm_control_t:chr_file { getattr read write append ioctl lock };,
kernel,devices,dev_delete_lvm_control_dev,allow $1 device_t:dir { getattr search read write remove_name };,
kernel,devices,dev_delete_lvm_control_dev,allow $1 lvm_control_t:chr_file unlink;,
kernel,devices,dev_read_raw_memory,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_read_raw_memory,allow $1 memory_device_t:chr_file { read getattr lock ioctl };,
kernel,devices,dev_read_raw_memory,allow $1 self:capability sys_rawio;,
kernel,devices,dev_write_raw_memory,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_write_raw_memory,allow $1 memory_device_t:chr_file write;,
kernel,devices,dev_write_raw_memory,allow $1 self:capability sys_rawio;,
kernel,devices,dev_rx_raw_memory,allow $1 memory_device_t:chr_file execute;,
kernel,devices,dev_wx_raw_memory,allow $1 memory_device_t:chr_file execute;,
kernel,devices,dev_getattr_misc_dev,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_getattr_misc_dev,allow $1 misc_device_t:chr_file getattr;,
kernel,devices,dev_setattr_misc_dev,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_setattr_misc_dev,allow $1 misc_device_t:chr_file setattr;,
kernel,devices,dev_read_misc,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_read_misc,allow $1 misc_device_t:chr_file { read getattr lock ioctl };,
kernel,devices,dev_write_misc,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_write_misc,allow $1 misc_device_t:chr_file { getattr write ioctl };,
kernel,devices,dev_getattr_mouse_dev,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_getattr_mouse_dev,allow $1 mouse_device_t:chr_file getattr;,
kernel,devices,dev_setattr_mouse_dev,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_setattr_mouse_dev,allow $1 mouse_device_t:chr_file setattr;,
kernel,devices,dev_read_mouse,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_read_mouse,allow $1 mouse_device_t:chr_file { read getattr lock ioctl };,
kernel,devices,dev_rw_mouse,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_rw_mouse,allow $1 mouse_device_t:chr_file { getattr read write append ioctl lock };,
kernel,devices,dev_getattr_mtrr_dev,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_getattr_mtrr_dev,allow $1 mtrr_device_t:{ file chr_file } getattr;,
kernel,devices,dev_read_mtrr,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_read_mtrr,allow $1 mtrr_device_t:chr_file { read getattr lock ioctl };,
kernel,devices,dev_write_mtrr,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_write_mtrr,allow $1 mtrr_device_t:chr_file { getattr write ioctl };,
kernel,devices,dev_rw_null,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_rw_null,allow $1 null_device_t:chr_file { getattr read write append ioctl lock };,
kernel,devices,dev_setattr_printer_dev,allow $1 device_t:dir search;,
kernel,devices,dev_setattr_printer_dev,allow $1 printer_device_t:chr_file setattr;,
kernel,devices,dev_append_printer,allow $1 device_t:dir search;,
kernel,devices,dev_append_printer,allow $1 printer_device_t:chr_file { getattr append };,
kernel,devices,dev_rw_printer,allow $1 device_t:dir search;,
kernel,devices,dev_rw_printer,allow $1 printer_device_t:chr_file { getattr read write append ioctl lock };,
kernel,devices,dev_read_rand,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_read_rand,allow $1 random_device_t:chr_file { read getattr lock ioctl };,
kernel,devices,dev_write_rand,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_write_rand,allow $1 random_device_t:chr_file { getattr write ioctl };,
kernel,devices,dev_read_realtime_clock,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_read_realtime_clock,allow $1 clock_device_t:chr_file { read getattr lock ioctl };,
kernel,devices,dev_write_realtime_clock,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_write_realtime_clock,allow $1 clock_device_t:chr_file { setattr lock write append ioctl };,
kernel,devices,dev_getattr_scanner_dev,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_getattr_scanner_dev,allow $1 scanner_device_t:chr_file getattr;,
kernel,devices,dev_setattr_scanner_dev,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_setattr_scanner_dev,allow $1 scanner_device_t:chr_file setattr;,
kernel,devices,dev_rw_scanner,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_rw_scanner,allow $1 scanner_device_t:chr_file { getattr read write append ioctl lock };,
kernel,devices,dev_getattr_sound_dev,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_getattr_sound_dev,allow $1 sound_device_t:chr_file getattr;,
kernel,devices,dev_setattr_sound_dev,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_setattr_sound_dev,allow $1 sound_device_t:chr_file setattr;,
kernel,devices,dev_read_sound,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_read_sound,allow $1 sound_device_t:chr_file { read getattr lock ioctl };,
kernel,devices,dev_write_sound,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_write_sound,allow $1 sound_device_t:chr_file { getattr write ioctl };,
kernel,devices,dev_read_sound_mixer,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_read_sound_mixer,allow $1 sound_device_t:chr_file { getattr read ioctl };,
kernel,devices,dev_write_sound_mixer,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_write_sound_mixer,allow $1 sound_device_t:chr_file { getattr write ioctl };,
kernel,devices,dev_getattr_power_mgmt_dev,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_getattr_power_mgmt_dev,allow $1 power_device_t:chr_file getattr;,
kernel,devices,dev_setattr_power_mgmt_dev,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_setattr_power_mgmt_dev,allow $1 power_device_t:chr_file setattr;,
kernel,devices,dev_rw_power_management,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_rw_power_management,allow $1 power_device_t:chr_file { getattr read write append ioctl lock };,
kernel,devices,dev_getattr_sysfs_dirs,allow $1 sysfs_t:dir getattr;,
kernel,devices,dev_search_sysfs,allow $1 sysfs_t:dir search;,
kernel,devices,dev_list_sysfs,allow $1 sysfs_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_read_sysfs,allow $1 sysfs_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_read_sysfs,allow $1 sysfs_t:{ file lnk_file } { read getattr lock ioctl };,
kernel,devices,dev_rw_sysfs,allow $1 sysfs_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_rw_sysfs,allow $1 sysfs_t:lnk_file { read getattr lock ioctl };,
kernel,devices,dev_rw_sysfs,allow $1 sysfs_t:file { getattr read write append ioctl lock };,
kernel,devices,dev_read_urand,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_read_urand,allow $1 urandom_device_t:chr_file { read getattr lock ioctl };,
kernel,devices,dev_write_urand,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_write_urand,allow $1 urandom_device_t:chr_file { getattr write ioctl };,
kernel,devices,dev_rw_generic_usb_dev,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_rw_generic_usb_dev,allow $1 usb_device_t:chr_file { read write };,
kernel,devices,dev_mount_usbfs,allow $1 usbfs_t:filesystem mount;,
kernel,devices,dev_associate_usbfs,allow $1 usbfs_t:filesystem associate;,
kernel,devices,dev_getattr_usbfs_dirs,allow $1 usbfs_t:dir getattr;,
kernel,devices,dev_search_usbfs,allow $1 usbfs_t:dir search;,
kernel,devices,dev_list_usbfs,allow $1 usbfs_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_list_usbfs,allow $1 usbfs_t:lnk_file { read getattr lock ioctl };,
kernel,devices,dev_list_usbfs,allow $1 usbfs_t:file getattr;,
kernel,devices,dev_read_usbfs,allow $1 usbfs_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_read_usbfs,allow $1 usbfs_t:{ file lnk_file } { read getattr lock ioctl };,
kernel,devices,dev_rw_usbfs,allow $1 usbfs_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_rw_usbfs,allow $1 usbfs_t:lnk_file { read getattr lock ioctl };,
kernel,devices,dev_rw_usbfs,allow $1 usbfs_t:file { getattr read write append ioctl lock };,
kernel,devices,dev_getattr_video_dev,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_getattr_video_dev,allow $1 v4l_device_t:chr_file getattr;,
kernel,devices,dev_setattr_video_dev,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_setattr_video_dev,allow $1 v4l_device_t:chr_file setattr;,
kernel,devices,dev_getattr_xserver_misc_dev,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_getattr_xserver_misc_dev,allow $1 xserver_misc_device_t:chr_file getattr;,
kernel,devices,dev_setattr_xserver_misc_dev,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_setattr_xserver_misc_dev,allow $1 xserver_misc_device_t:chr_file setattr;,
kernel,devices,dev_rw_xserver_misc,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_rw_xserver_misc,allow $1 xserver_misc_device_t:chr_file { getattr read write append ioctl lock };,
kernel,devices,dev_rw_zero,allow $1 device_t:dir { read getattr lock search ioctl };,
kernel,devices,dev_rw_zero,allow $1 zero_device_t:chr_file { getattr read write append ioctl lock };,
kernel,devices,dev_rwx_zero,allow $1 zero_device_t:chr_file execute;,
kernel,devices,dev_unconfined,allow $1 device_node:devfile_class_set *;,
kernel,devices,dev_unconfined,allow $1 mtrr_device_t:{ dir file } *;,
kernel,devices,dev_unconfined,allow $1 self:capability sys_rawio;,
kernel,domain,domain_base_type,allow $1 self:dir { read getattr lock search ioctl };,
kernel,domain,domain_base_type,allow $1 self:lnk_file { read getattr lock ioctl };,
kernel,domain,domain_base_type,allow $1 self:file { getattr read write append ioctl lock };,
kernel,domain,domain_base_type,allow $1 self:process { fork sigchld };,
kernel,domain,domain_entry_file,allow $1 $2:file entrypoint;,
kernel,domain,domain_entry_file,allow $1 $2:file r{ getattr execute };,
kernel,domain,domain_use_interactive_fds,allow $1 privfd:fd use;,
kernel,domain,domain_sigchld_interactive_fds,allow $1 privfd:process sigchld;,
kernel,domain,domain_setpriority_all_domains,allow $1 domain:process setsched;,
kernel,domain,domain_signal_all_domains,allow $1 domain:process signal;,
kernel,domain,domain_signull_all_domains,allow $1 domain:process signull;,
kernel,domain,domain_sigstop_all_domains,allow $1 domain:process sigstop;,
kernel,domain,domain_sigchld_all_domains,allow $1 domain:process sigchld;,
kernel,domain,domain_kill_all_domains,allow $1 domain:process sigkill;,
kernel,domain,domain_kill_all_domains,allow $1 self:capability kill;,
kernel,domain,domain_search_all_domains_state,allow $1 domain:dir search;,
kernel,domain,domain_read_all_domains_state,allow $1 domain:dir { read getattr lock search ioctl };,
kernel,domain,domain_read_all_domains_state,allow $1 domain:lnk_file { read getattr lock ioctl };,
kernel,domain,domain_read_all_domains_state,allow $1 domain:file { read getattr lock ioctl };,
kernel,domain,domain_getattr_all_domains,allow $1 domain:process getattr;,
kernel,domain,domain_read_confined_domains_state,allow $1 { domain -unconfined_domain_type }:dir { read getattr lock search ioctl };,
kernel,domain,domain_read_confined_domains_state,allow $1 { domain -unconfined_domain_type }:lnk_file { read getattr lock ioctl };,
kernel,domain,domain_read_confined_domains_state,allow $1 { domain -unconfined_domain_type }:file { read getattr lock ioctl };,
kernel,domain,domain_getattr_confined_domains,allow $1 { domain -unconfined_domain_type }:process getattr;,
kernel,domain,domain_ptrace_all_domains,allow $1 domain:process ptrace;,
kernel,domain,domain_ptrace_all_domains,allow domain $1:process sigchld;,
kernel,domain,domain_getsession_all_domains,allow $1 domain:process getsession;,
kernel,domain,domain_getattr_all_sockets,allow $1 domain:socket_class_set getattr;,
kernel,domain,domain_getattr_all_entry_files,allow $1 entry_type:lnk_file getattr;,
kernel,domain,domain_getattr_all_entry_files,allow $1 entry_type:file { read getattr lock ioctl };,
kernel,domain,domain_read_all_entry_files,allow $1 entry_type:lnk_file { read getattr lock ioctl };,
kernel,domain,domain_read_all_entry_files,allow $1 entry_type:file { read getattr lock ioctl };,
kernel,domain,domain_manage_all_entry_files,allow $1 entry_type:file { create getattr setattr read write append rename link unlink ioctl lock };,
kernel,domain,domain_relabel_all_entry_files,allow $1 entry_type:file { relabelfrom relabelto };,
kernel,domain,domain_mmap_all_entry_files,allow $1 entry_type:file { getattr read execute };,
kernel,domain,domain_unconfined,allow $1 domain:{ socket_class_set socket key_socket } *;,
kernel,domain,domain_unconfined,allow $1 domain:fd use;,
kernel,domain,domain_unconfined,allow $1 domain:fifo_file { getattr read write append ioctl lock };,
kernel,domain,domain_unconfined,allow $1 domain:process ~{ transition dyntransition execmem execstack execheap };,
kernel,domain,domain_unconfined,allow $1 domain:{ sem msgq shm } *;,
kernel,domain,domain_unconfined,allow $1 domain:msg { send receive };,
kernel,domain,domain_unconfined,allow $1 domain:dir { read getattr lock search ioctl };,
kernel,domain,domain_unconfined,allow $1 domain:file { read getattr lock ioctl };,
kernel,domain,domain_unconfined,allow $1 domain:lnk_file { read getattr lock ioctl };,
kernel,domain,domain_unconfined,allow $1 $2:file { getattr read execute };,
kernel,domain,domain_unconfined,allow $1 $3:process transition;,
kernel,files,files_tmp_file,allow $1 tmp_t:filesystem associate;,
kernel,files,files_getattr_all_dirs,allow $1 file_type:dir { getattr search };,
kernel,files,files_list_non_security,allow $1 { file_type -security_file_type }:dir { read getattr lock search ioctl };,
kernel,files,files_getattr_all_files,allow $1 file_type:dir search;,
kernel,files,files_getattr_all_files,allow $1 file_type:file getattr;,
kernel,files,files_getattr_all_files,allow $1 file_type:lnk_file getattr;,
kernel,files,files_read_all_files,allow $1 file_type:dir search;,
kernel,files,files_read_all_files,allow $1 file_type:file { read getattr lock ioctl };,
kernel,files,files_read_non_security_files,allow $1 { file_type -security_file_type }:dir { getattr search };,
kernel,files,files_read_non_security_files,allow $1 { file_type -security_file_type }:file { read getattr lock ioctl };,
kernel,files,files_read_non_security_files,allow $1 { file_type -security_file_type }:lnk_file { getattr read };,
kernel,files,files_read_all_dirs_except,allow $1 { file_type $2 }:dir { read getattr lock search ioctl };,
kernel,files,files_read_all_files_except,allow $1 { file_type $2 }:dir search;,
kernel,files,files_read_all_files_except,allow $1 { file_type $2 }:file { read getattr lock ioctl };,
kernel,files,files_read_all_symlinks_except,allow $1 { file_type $2 }:dir search;,
kernel,files,files_read_all_symlinks_except,allow $1 { file_type $2 }:lnk_file { read getattr lock ioctl };,
kernel,files,files_getattr_all_symlinks,allow $1 file_type:dir search;,
kernel,files,files_getattr_all_symlinks,allow $1 file_type:lnk_file getattr;,
kernel,files,files_read_all_symlinks,allow $1 file_type:dir search;,
kernel,files,files_read_all_symlinks,allow $1 file_type:lnk_file { getattr read };,
kernel,files,files_getattr_all_pipes,allow $1 file_type:dir search;,
kernel,files,files_getattr_all_pipes,allow $1 file_type:fifo_file getattr;,
kernel,files,files_getattr_all_sockets,allow $1 file_type:dir search;,
kernel,files,files_getattr_all_sockets,allow $1 file_type:sock_file getattr;,
kernel,files,files_read_all_blk_files,allow $1 file_type:dir search;,
kernel,files,files_read_all_blk_files,allow $1 file_type:blk_file { getattr read };,
kernel,files,files_read_all_chr_files,allow $1 file_type:dir search;,
kernel,files,files_read_all_chr_files,allow $1 file_type:chr_file { getattr read };,
kernel,files,files_relabel_all_files,allow $1 { file_type $2 }:dir { { read getattr lock search ioctl } relabelfrom relabelto };,
kernel,files,files_relabel_all_files,allow $1 { file_type $2 }:file { getattr relabelfrom relabelto };,
kernel,files,files_relabel_all_files,allow $1 { file_type $2 }:lnk_file { getattr relabelfrom relabelto };,
kernel,files,files_relabel_all_files,allow $1 { file_type $2 }:fifo_file { getattr relabelfrom relabelto };,
kernel,files,files_relabel_all_files,allow $1 { file_type $2 }:sock_file { getattr relabelfrom relabelto };,
kernel,files,files_relabel_all_files,allow $1 { file_type $2 }:blk_file { getattr relabelfrom };,
kernel,files,files_relabel_all_files,allow $1 { file_type $2 }:chr_file { getattr relabelfrom };,
kernel,files,files_manage_all_files,allow $1 { file_type $2 }:dir { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir };,
kernel,files,files_manage_all_files,allow $1 { file_type $2 }:file { create ioctl read getattr lock write setattr append link unlink rename };,
kernel,files,files_manage_all_files,allow $1 { file_type $2 }:lnk_file { create read getattr setattr link unlink rename };,
kernel,files,files_manage_all_files,allow $1 { file_type $2 }:fifo_file { create ioctl read getattr lock write setattr append link unlink rename };,
kernel,files,files_manage_all_files,allow $1 { file_type $2 }:sock_file { create ioctl read getattr lock write setattr append link unlink rename };,
kernel,files,files_search_all,allow $1 file_type:dir search;,
kernel,files,files_list_all,allow $1 file_type:dir { read getattr lock search ioctl };,
kernel,files,files_relabelto_all_file_type_fs,allow $1 file_type:filesystem relabelto;,
kernel,files,files_mount_all_file_type_fs,allow $1 file_type:filesystem mount;,
kernel,files,files_unmount_all_file_type_fs,allow $1 file_type:filesystem unmount;,
kernel,files,files_mounton_all_mountpoints,allow $1 mountpoint:dir { getattr search mounton };,
kernel,files,files_mounton_all_mountpoints,allow $1 mountpoint:file { getattr mounton };,
kernel,files,files_list_root,allow $1 root_t:dir { read getattr lock search ioctl };,
kernel,files,files_list_root,allow $1 root_t:lnk_file { read getattr lock ioctl };,
kernel,files,files_root_filetrans,allow $1 root_t:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,files,files_delete_root_dir_entry,allow $1 root_t:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,files,files_unmount_rootfs,allow $1 root_t:filesystem unmount;,
kernel,files,files_getattr_boot_dirs,allow $1 boot_t:dir getattr;,
kernel,files,files_search_boot,allow $1 boot_t:dir { getattr search };,
kernel,files,files_create_boot_dirs,allow $1 boot_t:dir { create { read getattr lock search ioctl add_name remove_name write } };,
kernel,files,files_boot_filetrans,allow $1 boot_t:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,files,files_manage_boot_files,allow $1 boot_t:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,files,files_manage_boot_files,allow $1 boot_t:file { create getattr setattr read write append rename link unlink ioctl lock };,
kernel,files,files_relabelfrom_boot_files,allow $1 boot_t:file relabelfrom;,
kernel,files,files_rw_boot_symlinks,allow $1 boot_t:dir { read getattr lock search ioctl };,
kernel,files,files_rw_boot_symlinks,allow $1 boot_t:lnk_file { getattr read write append ioctl lock };,
kernel,files,files_manage_boot_symlinks,allow $1 boot_t:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,files,files_manage_boot_symlinks,allow $1 boot_t:lnk_file { create getattr setattr read write append rename link unlink ioctl lock };,
kernel,files,files_create_kernel_img,allow $1 boot_t:dir { read getattr lock search ioctl add_name write };,
kernel,files,files_create_kernel_img,allow $1 boot_t:file { getattr read write create };,
kernel,files,files_create_kernel_img,allow $1 boot_t:lnk_file { getattr read create unlink };,
kernel,files,files_delete_kernel,allow $1 boot_t:dir { { read getattr lock search ioctl } write remove_name };,
kernel,files,files_delete_kernel,allow $1 boot_t:file { getattr unlink };,
kernel,files,files_getattr_default_dirs,allow $1 default_t:dir getattr;,
kernel,files,files_search_default,allow $1 default_t:dir search;,
kernel,files,files_list_default,allow $1 default_t:dir { read getattr lock search ioctl };,
kernel,files,files_mounton_default,allow $1 default_t:dir { getattr search mounton };,
kernel,files,files_read_default_files,allow $1 default_t:file { read getattr lock ioctl };,
kernel,files,files_read_default_symlinks,allow $1 default_t:lnk_file { read getattr lock ioctl };,
kernel,files,files_read_default_sockets,allow $1 default_t:sock_file { read getattr lock ioctl };,
kernel,files,files_read_default_pipes,allow $1 default_t:fifo_file { read getattr lock ioctl };,
kernel,files,files_search_etc,allow $1 etc_t:dir search;,
kernel,files,files_setattr_etc_dirs,allow $1 etc_t:dir setattr;,
kernel,files,files_list_etc,allow $1 etc_t:dir { read getattr lock search ioctl };,
kernel,files,files_read_etc_files,allow $1 etc_t:dir { read getattr lock search ioctl };,
kernel,files,files_read_etc_files,allow $1 etc_t:file { read getattr lock ioctl };,
kernel,files,files_read_etc_files,allow $1 etc_t:lnk_file { read getattr lock ioctl };,
kernel,files,files_rw_etc_files,allow $1 etc_t:dir { read getattr lock search ioctl };,
kernel,files,files_rw_etc_files,allow $1 etc_t:file { getattr read write append ioctl lock };,
kernel,files,files_rw_etc_files,allow $1 etc_t:lnk_file { read getattr lock ioctl };,
kernel,files,files_manage_etc_files,allow $1 etc_t:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,files,files_manage_etc_files,allow $1 etc_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
kernel,files,files_manage_etc_files,allow $1 etc_t:lnk_file { read getattr lock ioctl };,
kernel,files,files_delete_etc_files,allow $1 etc_t:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,files,files_delete_etc_files,allow $1 etc_t:file unlink;,
kernel,files,files_exec_etc_files,allow $1 etc_t:dir { read getattr lock search ioctl };,
kernel,files,files_exec_etc_files,allow $1 etc_t:lnk_file { read getattr lock ioctl };,
kernel,files,files_relabel_etc_files,allow $1 etc_t:dir { getattr search read lock ioctl };,
kernel,files,files_relabel_etc_files,allow $1 etc_t:file { relabelfrom relabelto };,
kernel,files,files_create_boot_flag,allow $1 root_t:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,files,files_create_boot_flag,allow $1 etc_runtime_t:file { create read write setattr unlink };,
kernel,files,files_read_etc_runtime_files,allow $1 etc_t:dir { read getattr lock search ioctl };,
kernel,files,files_read_etc_runtime_files,allow $1 etc_runtime_t:file { read getattr lock ioctl };,
kernel,files,files_read_etc_runtime_files,allow $1 etc_runtime_t:lnk_file { getattr read };,
kernel,files,files_rw_etc_runtime_files,allow $1 etc_t:dir { read getattr lock search ioctl };,
kernel,files,files_rw_etc_runtime_files,allow $1 etc_runtime_t:file { getattr read write append ioctl lock };,
kernel,files,files_manage_etc_runtime_files,allow $1 etc_t:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,files,files_manage_etc_runtime_files,allow $1 etc_runtime_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
kernel,files,files_etc_filetrans,allow $1 etc_t:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,files,files_getattr_isid_type_dirs,allow $1 file_t:dir getattr;,
kernel,files,files_list_isid_type_dirs,allow $1 file_t:dir { read getattr lock search ioctl };,
kernel,files,files_rw_isid_type_dirs,allow $1 file_t:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,files,files_manage_isid_type_dirs,allow $1 file_t:dir { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir };,
kernel,files,files_mounton_isid_type_dirs,allow $1 file_t:dir { getattr search mounton };,
kernel,files,files_read_isid_type_files,allow $1 file_t:dir search;,
kernel,files,files_read_isid_type_files,allow $1 file_t:file { read getattr lock ioctl };,
kernel,files,files_manage_isid_type_files,allow $1 file_t:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,files,files_manage_isid_type_files,allow $1 file_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
kernel,files,files_manage_isid_type_symlinks,allow $1 file_t:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,files,files_manage_isid_type_symlinks,allow $1 file_t:lnk_file { create read getattr setattr link unlink rename };,
kernel,files,files_rw_isid_type_blk_files,allow $1 file_t:dir search;,
kernel,files,files_rw_isid_type_blk_files,allow $1 file_t:blk_file { getattr read write append ioctl lock };,
kernel,files,files_manage_isid_type_blk_files,allow $1 file_t:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,files,files_manage_isid_type_blk_files,allow $1 file_t:blk_file { create ioctl read getattr lock write setattr append link unlink rename };,
kernel,files,files_manage_isid_type_chr_files,allow $1 file_t:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,files,files_manage_isid_type_chr_files,allow $1 file_t:chr_file { create ioctl read getattr lock write setattr append link unlink rename };,
kernel,files,files_getattr_home_dir,allow $1 home_root_t:dir getattr;,
kernel,files,files_search_home,allow $1 home_root_t:dir { getattr search };,
kernel,files,files_list_home,allow $1 home_root_t:dir { read getattr lock search ioctl };,
kernel,files,files_home_filetrans,allow $1 home_root_t:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,files,files_manage_lost_found,allow $1 lost_found_t:dir { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir };,
kernel,files,files_manage_lost_found,allow $1 lost_found_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
kernel,files,files_manage_lost_found,allow $1 lost_found_t:sock_file { create ioctl read getattr lock write setattr append link unlink rename };,
kernel,files,files_manage_lost_found,allow $1 lost_found_t:fifo_file { create ioctl read getattr lock write setattr append link unlink rename };,
kernel,files,files_manage_lost_found,allow $1 lost_found_t:lnk_file { create read getattr setattr link unlink rename };,
kernel,files,files_search_mnt,allow $1 mnt_t:dir { getattr search };,
kernel,files,files_list_mnt,allow $1 mnt_t:dir { read getattr lock search ioctl };,
kernel,files,files_mounton_mnt,allow $1 mnt_t:dir { search mounton };,
kernel,files,files_manage_mnt_dirs,allow $1 mnt_t:dir { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir };,
kernel,files,files_manage_mnt_files,allow $1 mnt_t:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,files,files_manage_mnt_files,allow $1 mnt_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
kernel,files,files_manage_mnt_symlinks,allow $1 mnt_t:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,files,files_manage_mnt_symlinks,allow $1 mnt_t:lnk_file { create read getattr setattr link unlink rename };,
kernel,files,files_search_kernel_modules,allow $1 modules_object_t:dir search;,
kernel,files,files_list_kernel_modules,allow $1 modules_object_t:dir { read getattr lock search ioctl };,
kernel,files,files_getattr_kernel_modules,allow $1 modules_object_t:dir search;,
kernel,files,files_getattr_kernel_modules,allow $1 modules_object_t:dir getattr;,
kernel,files,files_read_kernel_modules,allow $1 modules_object_t:dir { read getattr lock search ioctl };,
kernel,files,files_read_kernel_modules,allow $1 modules_object_t:lnk_file { read getattr lock ioctl };,
kernel,files,files_read_kernel_modules,allow $1 modules_object_t:file { read getattr lock ioctl };,
kernel,files,files_write_kernel_modules,allow $1 modules_object_t:dir { read getattr lock search ioctl };,
kernel,files,files_write_kernel_modules,allow $1 modules_object_t:file { write append };,
kernel,files,files_delete_kernel_modules,allow $1 modules_object_t:dir { { getattr search read lock ioctl } write remove_name };,
kernel,files,files_delete_kernel_modules,allow $1 modules_object_t:file unlink;,
kernel,files,files_manage_kernel_modules,allow $1 modules_object_t:file { { getattr read write append ioctl lock } create setattr unlink };,
kernel,files,files_manage_kernel_modules,allow $1 modules_object_t:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,files,files_relabel_kernel_modules,allow $1 modules_object_t:file { relabelfrom relabelto };,
kernel,files,files_relabel_kernel_modules,allow $1 modules_object_t:dir { getattr search read lock ioctl };,
kernel,files,files_kernel_modules_filetrans,allow $1 modules_object_t:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,files,files_list_world_readable,allow $1 readable_t:dir { read getattr lock search ioctl };,
kernel,files,files_read_world_readable_files,allow $1 readable_t:file { read getattr lock ioctl };,
kernel,files,files_read_world_readable_symlinks,allow $1 readable_t:lnk_file { read getattr lock ioctl };,
kernel,files,files_read_world_readable_pipes,allow $1 readable_t:fifo_file { read getattr lock ioctl };,
kernel,files,files_read_world_readable_sockets,allow $1 readable_t:sock_file { read getattr lock ioctl };,
kernel,files,files_associate_tmp,allow $1 tmp_t:filesystem associate;,
kernel,files,files_getattr_tmp_dirs,allow $1 tmp_t:dir getattr;,
kernel,files,files_search_tmp,allow $1 tmp_t:dir { getattr search };,
kernel,files,files_list_tmp,allow $1 tmp_t:dir { getattr search read lock ioctl };,
kernel,files,files_read_generic_tmp_files,allow $1 tmp_t:dir { getattr search };,
kernel,files,files_read_generic_tmp_files,allow $1 tmp_t:file { read getattr lock ioctl };,
kernel,files,files_read_generic_tmp_symlinks,allow $1 tmp_t:dir { getattr search };,
kernel,files,files_read_generic_tmp_symlinks,allow $1 tmp_t:lnk_file { read getattr lock ioctl };,
kernel,files,files_rw_generic_tmp_sockets,allow $1 tmp_t:dir { getattr search };,
kernel,files,files_rw_generic_tmp_sockets,allow $1 tmp_t:sock_file { read write };,
kernel,files,files_setattr_all_tmp_dirs,allow $1 tmpfile:dir { search setattr };,
kernel,files,files_tmp_filetrans,allow $1 tmp_t:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,files,files_purge_tmp,allow $1 tmpfile:dir { { read getattr lock search ioctl add_name remove_name write } rmdir };,
kernel,files,files_purge_tmp,allow $1 tmpfile:notdevfile_class_set { getattr unlink };,
kernel,files,files_search_usr,allow $1 usr_t:dir search;,
kernel,files,files_list_usr,allow $1 usr_t:dir { read getattr lock search ioctl };,
kernel,files,files_getattr_usr_files,allow $1 usr_t:dir search;,
kernel,files,files_getattr_usr_files,allow $1 usr_t:file getattr;,
kernel,files,files_read_usr_files,allow $1 usr_t:dir { read getattr lock search ioctl };,
kernel,files,files_read_usr_files,allow $1 usr_t:{ file lnk_file } { read getattr lock ioctl };,
kernel,files,files_exec_usr_files,allow $1 usr_t:dir { read getattr lock search ioctl };,
kernel,files,files_exec_usr_files,allow $1 usr_t:lnk_file { read getattr lock ioctl };,
kernel,files,files_relabelto_usr_files,allow $1 usr_t:file relabelto;,
kernel,files,files_read_usr_symlinks,allow $1 usr_t:dir search;,
kernel,files,files_read_usr_symlinks,allow $1 usr_t:lnk_file { read getattr lock ioctl };,
kernel,files,files_usr_filetrans,allow $1 usr_t:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,files,files_exec_usr_src_files,allow $1 usr_t:dir search;,
kernel,files,files_exec_usr_src_files,allow $1 src_t:dir { read getattr lock search ioctl };,
kernel,files,files_exec_usr_src_files,allow $1 src_t:lnk_file { read getattr lock ioctl };,
kernel,files,files_read_usr_src_files,allow $1 usr_t:dir search;,
kernel,files,files_read_usr_src_files,allow $1 src_t:dir { read getattr lock search ioctl };,
kernel,files,files_read_usr_src_files,allow $1 src_t:{ file lnk_file } { read getattr lock ioctl };,
kernel,files,files_create_kernel_symbol_table,allow $1 boot_t:dir { read getattr lock search ioctl add_name write };,
kernel,files,files_create_kernel_symbol_table,allow $1 system_map_t:file { { getattr read write append ioctl lock } create };,
kernel,files,files_read_kernel_symbol_table,allow $1 boot_t:dir { read getattr lock search ioctl };,
kernel,files,files_read_kernel_symbol_table,allow $1 system_map_t:file { read getattr lock ioctl };,
kernel,files,files_read_kernel_symbol_table,allow $1 boot_t:file { getattr read };,
kernel,files,files_delete_kernel_symbol_table,allow $1 boot_t:dir { { read getattr lock search ioctl } write remove_name };,
kernel,files,files_delete_kernel_symbol_table,allow $1 system_map_t:file { getattr unlink };,
kernel,files,files_search_var,allow $1 var_t:dir { getattr search };,
kernel,files,files_list_var,allow $1 var_t:dir { read getattr lock search ioctl };,
kernel,files,files_manage_var_dirs,allow $1 var_t:dir { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir };,
kernel,files,files_read_var_files,allow $1 var_t:dir { getattr search };,
kernel,files,files_read_var_files,allow $1 var_t:file { read getattr lock ioctl };,
kernel,files,files_manage_var_files,allow $1 var_t:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,files,files_manage_var_files,allow $1 var_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
kernel,files,files_read_var_symlinks,allow $1 var_t:dir { getattr search };,
kernel,files,files_read_var_symlinks,allow $1 var_t:lnk_file { getattr read };,
kernel,files,files_manage_var_symlinks,allow $1 var_t:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,files,files_manage_var_symlinks,allow $1 var_t:lnk_file { create read getattr setattr link unlink rename };,
kernel,files,files_var_filetrans,allow $1 var_t:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,files,files_getattr_var_lib_dirs,allow $1 var_t:dir { getattr search };,
kernel,files,files_getattr_var_lib_dirs,allow $1 var_lib_t:dir getattr;,
kernel,files,files_search_var_lib,allow $1 { var_t var_lib_t }:dir { getattr search };,
kernel,files,files_list_var_lib,allow $1 var_t:dir { getattr search };,
kernel,files,files_list_var_lib,allow $1 var_lib_t:dir { read getattr lock search ioctl };,
kernel,files,files_var_lib_filetrans,allow $1 var_t:dir { getattr search };,
kernel,files,files_var_lib_filetrans,allow $1 var_lib_t:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,files,files_read_var_lib_files,allow $1 { var_t var_lib_t }:dir { getattr search };,
kernel,files,files_read_var_lib_files,allow $1 var_lib_t:file { read getattr lock ioctl };,
kernel,files,files_read_var_lib_symlinks,allow $1 { var_t var_lib_t }:dir { getattr search };,
kernel,files,files_read_var_lib_symlinks,allow $1 var_lib_t:lnk_file { getattr read };,
kernel,files,files_manage_urandom_seed,allow $1 var_t:dir { getattr search };,
kernel,files,files_manage_urandom_seed,allow $1 var_lib_t:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,files,files_manage_urandom_seed,allow $1 var_lib_t:file { create getattr setattr read write append rename link unlink ioctl lock };,
kernel,files,files_manage_mounttab,allow $1 var_t:dir { getattr search };,
kernel,files,files_manage_mounttab,allow $1 var_lib_t:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,files,files_manage_mounttab,allow $1 var_lib_t:file { create getattr setattr read write append rename link unlink ioctl lock };,
kernel,files,files_search_locks,allow $1 { var_t var_lock_t }:dir { getattr search };,
kernel,files,files_rw_lock_dirs,allow $1 var_t:dir { getattr search };,
kernel,files,files_rw_lock_dirs,allow $1 var_lock_t:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,files,files_getattr_generic_locks,allow $1 var_t:dir { getattr search };,
kernel,files,files_getattr_generic_locks,allow $1 var_lock_t:dir { read getattr lock search ioctl };,
kernel,files,files_getattr_generic_locks,allow $1 var_lock_t:file getattr;,
kernel,files,files_manage_generic_locks,allow $1 var_lock_t:dir { getattr search create read write setattr add_name remove_name rmdir };,
kernel,files,files_manage_generic_locks,allow $1 var_lock_t:file { getattr create read write setattr unlink };,
kernel,files,files_delete_all_locks,allow $1 lockfile:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,files,files_delete_all_locks,allow $1 lockfile:file { getattr unlink };,
kernel,files,files_read_all_locks,allow $1 { var_t var_lock_t }:dir { getattr search };,
kernel,files,files_read_all_locks,allow $1 lockfile:dir { read getattr lock search ioctl };,
kernel,files,files_read_all_locks,allow $1 lockfile:file { read getattr lock ioctl };,
kernel,files,files_read_all_locks,allow $1 lockfile:lnk_file { getattr read };,
kernel,files,files_lock_filetrans,allow $1 var_t:dir search;,
kernel,files,files_lock_filetrans,allow $1 var_lock_t:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,files,files_search_pids,allow $1 var_t:dir { getattr search };,
kernel,files,files_search_pids,allow $1 var_run_t:dir { getattr search };,
kernel,files,files_list_pids,allow $1 var_t:dir { getattr search };,
kernel,files,files_list_pids,allow $1 var_run_t:dir { read getattr lock search ioctl };,
kernel,files,files_pid_filetrans,allow $1 var_t:dir { getattr search };,
kernel,files,files_pid_filetrans,allow $1 var_run_t:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,files,files_rw_generic_pids,allow $1 var_t:dir search;,
kernel,files,files_rw_generic_pids,allow $1 var_run_t:dir { read getattr lock search ioctl };,
kernel,files,files_rw_generic_pids,allow $1 var_run_t:file { getattr read write append ioctl lock };,
kernel,files,files_read_all_pids,allow $1 var_t:dir { getattr search };,
kernel,files,files_read_all_pids,allow $1 pidfile:dir { read getattr lock search ioctl };,
kernel,files,files_read_all_pids,allow $1 pidfile:file { read getattr lock ioctl };,
kernel,files,files_mounton_all_poly_members,allow $1 polymember:dir mounton;,
kernel,files,files_delete_all_pids,allow $1 var_t:dir search;,
kernel,files,files_delete_all_pids,allow $1 var_run_t:{ sock_file lnk_file } { getattr unlink };,
kernel,files,files_delete_all_pids,allow $1 var_run_t:dir rmdir;,
kernel,files,files_delete_all_pids,allow $1 pidfile:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,files,files_delete_all_pids,allow $1 pidfile:file { getattr unlink };,
kernel,files,files_delete_all_pids,allow $1 pidfile:sock_file { getattr unlink };,
kernel,files,files_delete_all_pid_dirs,allow $1 var_t:dir search;,
kernel,files,files_delete_all_pid_dirs,allow $1 pidfile:dir { { read getattr lock search ioctl add_name remove_name write } rmdir };,
kernel,files,files_search_spool,allow $1 var_t:dir { getattr search };,
kernel,files,files_search_spool,allow $1 var_spool_t:dir { getattr search };,
kernel,files,files_list_spool,allow $1 var_t:dir search;,
kernel,files,files_list_spool,allow $1 var_spool_t:dir { read getattr lock search ioctl };,
kernel,files,files_manage_generic_spool_dirs,allow $1 var_t:dir search;,
kernel,files,files_manage_generic_spool_dirs,allow $1 var_spool_t:dir { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir };,
kernel,files,files_read_generic_spool,allow $1 var_t:dir search;,
kernel,files,files_read_generic_spool,allow $1 var_spool_t:dir { read getattr lock search ioctl };,
kernel,files,files_read_generic_spool,allow $1 var_spool_t:file { read getattr lock ioctl };,
kernel,files,files_manage_generic_spool,allow $1 var_t:dir search;,
kernel,files,files_manage_generic_spool,allow $1 var_spool_t:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,files,files_manage_generic_spool,allow $1 var_spool_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
kernel,files,files_polyinstantiate_all,allow $1 self:capability sys_admin;,
kernel,files,files_polyinstantiate_all,allow $1 polydir:dir { create getattr search write add_name setattr mounton };,
kernel,files,files_polyinstantiate_all,allow $1 polymember:dir { getattr search };,
kernel,files,files_polyinstantiate_all,allow $1 polyparent:dir { getattr mounton };,
kernel,files,files_polyinstantiate_all,allow $1 self:process setfscreate;,
kernel,files,files_polyinstantiate_all,allow $1 polymember: dir { create setattr };,
kernel,files,files_polyinstantiate_all,allow $1 polydir: dir { write add_name };,
kernel,files,files_polyinstantiate_all,allow $1 polyparent:dir { write add_name };,
kernel,files,files_polyinstantiate_all,allow $1 poly_t:dir { create mounton };,
kernel,files,files_unconfined,allow $1 file_type:{ file chr_file } ~execmod;,
kernel,files,files_unconfined,allow $1 file_type:{ dir lnk_file sock_file fifo_file blk_file } *;,
kernel,files,files_unconfined,allow $1 file_type:filesystem *;,
kernel,files,files_unconfined,allow $1 file_type:{ unix_stream_socket unix_dgram_socket } name_bind;,
kernel,files,files_write_non_security_dirs,allow $1 file_type:dir write;,
kernel,filesystem,fs_type,allow $1 self:filesystem associate;,
kernel,filesystem,fs_associate,allow $1 fs_t:filesystem associate;,
kernel,filesystem,fs_associate_noxattr,allow $1 noxattrfs:filesystem associate;,
kernel,filesystem,fs_mount_xattr_fs,allow $1 fs_t:filesystem mount;,
kernel,filesystem,fs_remount_xattr_fs,allow $1 fs_t:filesystem remount;,
kernel,filesystem,fs_unmount_xattr_fs,allow $1 fs_t:filesystem unmount;,
kernel,filesystem,fs_getattr_xattr_fs,allow $1 fs_t:filesystem getattr;,
kernel,filesystem,fs_relabelfrom_xattr_fs,allow $1 fs_t:filesystem relabelfrom;,
kernel,filesystem,fs_get_xattr_fs_quotas,allow $1 fs_t:filesystem quotaget;,
kernel,filesystem,fs_set_xattr_fs_quotas,allow $1 fs_t:filesystem quotamod;,
kernel,filesystem,fs_mount_autofs,allow $1 autofs_t:filesystem mount;,
kernel,filesystem,fs_remount_autofs,allow $1 autofs_t:filesystem remount;,
kernel,filesystem,fs_unmount_autofs,allow $1 autofs_t:filesystem unmount;,
kernel,filesystem,fs_getattr_autofs,allow $1 autofs_t:filesystem getattr;,
kernel,filesystem,fs_search_auto_mountpoints,allow $1 autofs_t:dir { getattr search };,
kernel,filesystem,fs_list_auto_mountpoints,allow $1 autofs_t:dir { read getattr lock search ioctl };,
kernel,filesystem,fs_register_binary_executable_type,allow $1 binfmt_misc_fs_t:dir { getattr search };,
kernel,filesystem,fs_register_binary_executable_type,allow $1 binfmt_misc_fs_t:file { getattr ioctl write };,
kernel,filesystem,fs_mount_cifs,allow $1 cifs_t:filesystem mount;,
kernel,filesystem,fs_remount_cifs,allow $1 cifs_t:filesystem remount;,
kernel,filesystem,fs_unmount_cifs,allow $1 cifs_t:filesystem unmount;,
kernel,filesystem,fs_getattr_cifs,allow $1 cifs_t:filesystem getattr;,
kernel,filesystem,fs_search_cifs,allow $1 cifs_t:dir search;,
kernel,filesystem,fs_list_cifs,allow $1 cifs_t:dir { read getattr lock search ioctl };,
kernel,filesystem,fs_read_cifs_files,allow $1 cifs_t:dir { read getattr lock search ioctl };,
kernel,filesystem,fs_read_cifs_files,allow $1 cifs_t:file { read getattr lock ioctl };,
kernel,filesystem,fs_list_noxattr_fs,allow $1 noxattrfs:dir { read getattr lock search ioctl };,
kernel,filesystem,fs_read_noxattr_fs_files,allow $1 noxattrfs:dir search;,
kernel,filesystem,fs_read_noxattr_fs_files,allow $1 noxattrfs:file { read getattr lock ioctl };,
kernel,filesystem,fs_read_noxattr_fs_symlinks,allow $1 noxattrfs:dir search;,
kernel,filesystem,fs_read_noxattr_fs_symlinks,allow $1 noxattrfs:lnk_file { read getattr lock ioctl };,
kernel,filesystem,fs_read_cifs_symlinks,allow $1 cifs_t:dir { read getattr lock search ioctl };,
kernel,filesystem,fs_read_cifs_symlinks,allow $1 cifs_t:lnk_file { read getattr lock ioctl };,
kernel,filesystem,fs_exec_cifs_files,allow $1 cifs_t:dir { read getattr lock search ioctl };,
kernel,filesystem,fs_manage_cifs_dirs,allow $1 cifs_t:dir { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir };,
kernel,filesystem,fs_manage_cifs_files,allow $1 cifs_t:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,filesystem,fs_manage_cifs_files,allow $1 cifs_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
kernel,filesystem,fs_manage_cifs_symlinks,allow $1 cifs_t:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,filesystem,fs_manage_cifs_symlinks,allow $1 cifs_t:lnk_file { create read getattr setattr link unlink rename };,
kernel,filesystem,fs_manage_cifs_named_pipes,allow $1 cifs_t:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,filesystem,fs_manage_cifs_named_pipes,allow $1 cifs_t:fifo_file { create ioctl read getattr lock write setattr append link unlink rename };,
kernel,filesystem,fs_manage_cifs_named_sockets,allow $1 cifs_t:dir { getattr read write append ioctl lock };,
kernel,filesystem,fs_manage_cifs_named_sockets,allow $1 cifs_t:sock_file { create ioctl read getattr lock write setattr append link unlink rename };,
kernel,filesystem,fs_cifs_domtrans,allow $1 cifs_t:dir search;,
kernel,filesystem,fs_mount_dos_fs,allow $1 dosfs_t:filesystem mount;,
kernel,filesystem,fs_remount_dos_fs,allow $1 dosfs_t:filesystem remount;,
kernel,filesystem,fs_unmount_dos_fs,allow $1 dosfs_t:filesystem unmount;,
kernel,filesystem,fs_getattr_dos_fs,allow $1 dosfs_t:filesystem getattr;,
kernel,filesystem,fs_relabelfrom_dos_fs,allow $1 dosfs_t:filesystem relabelfrom;,
kernel,filesystem,fs_read_eventpollfs,allow $1 eventpollfs_t:dir { getattr search };,
kernel,filesystem,fs_read_eventpollfs,allow $1 eventpollfs_t:file { read getattr lock ioctl };,
kernel,filesystem,fs_search_inotifyfs,allow $1 inotifyfs_t:dir { getattr search };,
kernel,filesystem,fs_list_inotifyfs,allow $1 inotifyfs_t:dir { read getattr lock search ioctl };,
kernel,filesystem,fs_mount_iso9660_fs,allow $1 iso9660_t:filesystem mount;,
kernel,filesystem,fs_remount_iso9660_fs,allow $1 iso9660_t:filesystem remount;,
kernel,filesystem,fs_unmount_iso9660_fs,allow $1 iso9660_t:filesystem unmount;,
kernel,filesystem,fs_getattr_iso9660_fs,allow $1 iso9660_t:filesystem getattr;,
kernel,filesystem,fs_mount_nfs,allow $1 nfs_t:filesystem mount;,
kernel,filesystem,fs_remount_nfs,allow $1 nfs_t:filesystem remount;,
kernel,filesystem,fs_unmount_nfs,allow $1 nfs_t:filesystem unmount;,
kernel,filesystem,fs_getattr_nfs,allow $1 nfs_t:filesystem getattr;,
kernel,filesystem,fs_search_nfs,allow $1 nfs_t:dir search;,
kernel,filesystem,fs_list_nfs,allow $1 nfs_t:dir { read getattr lock search ioctl };,
kernel,filesystem,fs_read_nfs_files,allow $1 nfs_t:dir { read getattr lock search ioctl };,
kernel,filesystem,fs_read_nfs_files,allow $1 nfs_t:file { read getattr lock ioctl };,
kernel,filesystem,fs_write_nfs_files,allow $1 nfs_t:dir { read getattr lock search ioctl };,
kernel,filesystem,fs_write_nfs_files,allow $1 nfs_t:file write;,
kernel,filesystem,fs_exec_nfs_files,allow $1 nfs_t:dir { read getattr lock search ioctl };,
kernel,filesystem,fs_read_nfs_symlinks,allow $1 nfs_t:dir { read getattr lock search ioctl };,
kernel,filesystem,fs_read_nfs_symlinks,allow $1 nfs_t:lnk_file { read getattr lock ioctl };,
kernel,filesystem,fs_getattr_rpc_dirs,allow $1 rpc_pipefs_t:dir getattr;,
kernel,filesystem,fs_search_rpc,allow $1 rpc_pipefs_t:dir { getattr search };,
kernel,filesystem,fs_search_removable,allow $1 removable_t:dir { getattr read search };,
kernel,filesystem,fs_read_removable_files,allow $1 removable_t:file { read getattr };,
kernel,filesystem,fs_read_removable_symlinks,allow $1 removable_t:lnk_file { getattr read };,
kernel,filesystem,fs_list_rpc,allow $1 rpc_pipefs_t:dir { getattr read search };,
kernel,filesystem,fs_read_rpc_files,allow $1 rpc_pipefs_t:file { read getattr };,
kernel,filesystem,fs_read_rpc_symlinks,allow $1 rpc_pipefs_t:lnk_file { getattr read };,
kernel,filesystem,fs_read_rpc_sockets,allow $1 rpc_pipefs_t:sock_file { read write };,
kernel,filesystem,fs_manage_nfs_dirs,allow $1 nfs_t:dir { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir };,
kernel,filesystem,fs_manage_nfs_files,allow $1 nfs_t:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,filesystem,fs_manage_nfs_files,allow $1 nfs_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
kernel,filesystem,fs_manage_nfs_symlinks,allow $1 nfs_t:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,filesystem,fs_manage_nfs_symlinks,allow $1 nfs_t:lnk_file { create read getattr setattr link unlink rename };,
kernel,filesystem,fs_manage_nfs_named_pipes,allow $1 nfs_t:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,filesystem,fs_manage_nfs_named_pipes,allow $1 nfs_t:fifo_file { create ioctl read getattr lock write setattr append link unlink rename };,
kernel,filesystem,fs_manage_nfs_named_sockets,allow $1 nfs_t:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,filesystem,fs_manage_nfs_named_sockets,allow $1 nfs_t:sock_file { create ioctl read getattr lock write setattr append link unlink rename };,
kernel,filesystem,fs_nfs_domtrans,allow $1 nfs_t:dir search;,
kernel,filesystem,fs_mount_nfsd_fs,allow $1 nfsd_fs_t:filesystem mount;,
kernel,filesystem,fs_remount_nfsd_fs,allow $1 nfsd_fs_t:filesystem remount;,
kernel,filesystem,fs_unmount_nfsd_fs,allow $1 nfsd_fs_t:filesystem unmount;,
kernel,filesystem,fs_getattr_nfsd_fs,allow $1 nfsd_fs_t:filesystem getattr;,
kernel,filesystem,fs_search_nfsd_fs,allow $1 nfsd_fs_t:dir search;,
kernel,filesystem,fs_rw_nfsd_fs,allow $1 nfsd_fs_t:file { getattr read write append ioctl lock };,
kernel,filesystem,fs_mount_ramfs,allow $1 ramfs_t:filesystem mount;,
kernel,filesystem,fs_remount_ramfs,allow $1 ramfs_t:filesystem remount;,
kernel,filesystem,fs_unmount_ramfs,allow $1 ramfs_t:filesystem unmount;,
kernel,filesystem,fs_getattr_ramfs,allow $1 ramfs_t:filesystem getattr;,
kernel,filesystem,fs_search_ramfs,allow $1 ramfs_t:dir search;,
kernel,filesystem,fs_write_ramfs_pipes,allow $1 ramfs_t:fifo_file write;,
kernel,filesystem,fs_rw_ramfs_pipes,allow $1 ramfs_t:fifo_file { getattr read write append ioctl lock };,
kernel,filesystem,fs_write_ramfs_sockets,allow $1 ramfs_t:sock_file write;,
kernel,filesystem,fs_mount_romfs,allow $1 romfs_t:filesystem mount;,
kernel,filesystem,fs_remount_romfs,allow $1 romfs_t:filesystem remount;,
kernel,filesystem,fs_unmount_romfs,allow $1 romfs_t:filesystem unmount;,
kernel,filesystem,fs_getattr_romfs,allow $1 romfs_t:filesystem getattr;,
kernel,filesystem,fs_mount_rpc_pipefs,allow $1 rpc_pipefs_t:filesystem mount;,
kernel,filesystem,fs_remount_rpc_pipefs,allow $1 rpc_pipefs_t:filesystem remount;,
kernel,filesystem,fs_unmount_rpc_pipefs,allow $1 rpc_pipefs_t:filesystem unmount;,
kernel,filesystem,fs_getattr_rpc_pipefs,allow $1 rpc_pipefs_t:filesystem getattr;,
kernel,filesystem,fs_mount_tmpfs,allow $1 tmpfs_t:filesystem mount;,
kernel,filesystem,fs_remount_tmpfs,allow $1 tmpfs_t:filesystem remount;,
kernel,filesystem,fs_unmount_tmpfs,allow $1 tmpfs_t:filesystem unmount;,
kernel,filesystem,fs_getattr_tmpfs,allow $1 tmpfs_t:filesystem getattr;,
kernel,filesystem,fs_associate_tmpfs,allow $1 tmpfs_t:filesystem associate;,
kernel,filesystem,fs_getattr_tmpfs_dirs,allow $1 tmpfs_t:dir getattr;,
kernel,filesystem,fs_setattr_tmpfs_dirs,allow $1 tmpfs_t:dir setattr;,
kernel,filesystem,fs_search_tmpfs,allow $1 tmpfs_t:dir search;,
kernel,filesystem,fs_list_tmpfs,allow $1 tmpfs_t:dir { read getattr lock search ioctl };,
kernel,filesystem,fs_manage_tmpfs_dirs,allow $1 tmpfs_t:dir { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir };,
kernel,filesystem,fs_tmpfs_filetrans,allow $2 tmpfs_t:filesystem associate;,
kernel,filesystem,fs_tmpfs_filetrans,allow $1 tmpfs_t:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,filesystem,fs_manage_auto_mountpoints,allow $1 autofs_t:dir { create getattr setattr read write link unlink rename search add_name remove_name reparent rmdir lock ioctl };,
kernel,filesystem,fs_rw_tmpfs_files,allow $1 tmpfs_t:file { getattr read write append ioctl lock };,
kernel,filesystem,fs_read_tmpfs_symlinks,allow $1 tmpfs_t:lnk_file read;,
kernel,filesystem,fs_rw_tmpfs_chr_files,allow $1 tmpfs_t:dir { read getattr lock search ioctl };,
kernel,filesystem,fs_rw_tmpfs_chr_files,allow $1 tmpfs_t:chr_file { getattr read write append ioctl lock };,
kernel,filesystem,fs_relabel_tmpfs_chr_file,allow $1 tmpfs_t:dir { read getattr lock search ioctl };,
kernel,filesystem,fs_relabel_tmpfs_chr_file,allow $1 tmpfs_t:chr_file { getattr relabelfrom relabelto };,
kernel,filesystem,fs_rw_tmpfs_blk_files,allow $1 tmpfs_t:dir { read getattr lock search ioctl };,
kernel,filesystem,fs_rw_tmpfs_blk_files,allow $1 tmpfs_t:blk_file { getattr read write append ioctl lock };,
kernel,filesystem,fs_relabel_tmpfs_blk_file,allow $1 tmpfs_t:dir { read getattr lock search ioctl };,
kernel,filesystem,fs_relabel_tmpfs_blk_file,allow $1 tmpfs_t:blk_file { getattr relabelfrom relabelto };,
kernel,filesystem,fs_manage_tmpfs_files,allow $1 tmpfs_t:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,filesystem,fs_manage_tmpfs_files,allow $1 tmpfs_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
kernel,filesystem,fs_manage_tmpfs_symlinks,allow $1 tmpfs_t:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,filesystem,fs_manage_tmpfs_symlinks,allow $1 tmpfs_t:chr_file { create read getattr setattr link unlink rename };,
kernel,filesystem,fs_manage_tmpfs_sockets,allow $1 tmpfs_t:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,filesystem,fs_manage_tmpfs_sockets,allow $1 tmpfs_t:sock_file { create ioctl read getattr lock write setattr append link unlink rename };,
kernel,filesystem,fs_manage_tmpfs_chr_files,allow $1 tmpfs_t:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,filesystem,fs_manage_tmpfs_chr_files,allow $1 tmpfs_t:chr_file { create ioctl read getattr lock write setattr append link unlink rename };,
kernel,filesystem,fs_manage_tmpfs_blk_files,allow $1 tmpfs_t:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,filesystem,fs_manage_tmpfs_blk_files,allow $1 tmpfs_t:blk_file { create ioctl read getattr lock write setattr append link unlink rename };,
kernel,filesystem,fs_mount_all_fs,allow $1 filesystem_type:filesystem mount;,
kernel,filesystem,fs_remount_all_fs,allow $1 filesystem_type:filesystem remount;,
kernel,filesystem,fs_unmount_all_fs,allow $1 filesystem_type:filesystem unmount;,
kernel,filesystem,fs_getattr_all_fs,allow $1 filesystem_type:filesystem getattr;,
kernel,filesystem,fs_get_all_fs_quotas,allow $1 filesystem_type:filesystem quotaget;,
kernel,filesystem,fs_set_all_quotas,allow $1 filesystem_type:filesystem quotamod;,
kernel,filesystem,fs_relabelfrom_all_fs,allow $1 filesystem_type:filesystem relabelfrom;,
kernel,filesystem,fs_getattr_all_dirs,allow $1 filesystem_type:dir getattr;,
kernel,filesystem,fs_search_all,allow $1 filesystem_type:dir { getattr search };,
kernel,filesystem,fs_list_all,allow $1 filesystem_type:dir { read getattr lock search ioctl };,
kernel,filesystem,fs_getattr_all_files,allow $1 filesystem_type:dir { search getattr };,
kernel,filesystem,fs_getattr_all_files,allow $1 filesystem_type:file getattr;,
kernel,filesystem,fs_getattr_all_symlinks,allow $1 filesystem_type:dir { search getattr };,
kernel,filesystem,fs_getattr_all_symlinks,allow $1 filesystem_type:lnk_file getattr;,
kernel,filesystem,fs_getattr_all_pipes,allow $1 filesystem_type:dir { search getattr };,
kernel,filesystem,fs_getattr_all_pipes,allow $1 filesystem_type:fifo_file getattr;,
kernel,filesystem,fs_getattr_all_sockets,allow $1 filesystem_type:dir { search getattr };,
kernel,filesystem,fs_getattr_all_sockets,allow $1 filesystem_type:sock_file getattr;,
kernel,filesystem,fs_unconfined,allow $1 filesystem_type:filesystem *;,
kernel,filesystem,fs_unconfined,allow $1 filesystem_type:{ dir file lnk_file sock_file fifo_file chr_file blk_file } *;,
kernel,kernel,kernel_domtrans_to,allow kernel_t $1:fd use;,
kernel,kernel,kernel_domtrans_to,allow $1 kernel_t:fd use;,
kernel,kernel,kernel_domtrans_to,allow $1 kernel_t:fifo_file { getattr read write append ioctl lock };,
kernel,kernel,kernel_domtrans_to,allow $1 kernel_t:process sigchld;,
kernel,kernel,kernel_rootfs_mountpoint,allow kernel_t $1:dir mounton;,
kernel,kernel,kernel_setpgid,allow $1 kernel_t:process setpgid;,
kernel,kernel,kernel_sigchld,allow $1 kernel_t:process sigchld;,
kernel,kernel,kernel_signal,allow kernel_t $1:process signal;,
kernel,kernel,kernel_share_state,allow kernel_t $1:process share;,
kernel,kernel,kernel_use_fds,allow $1 kernel_t:fd use;,
kernel,kernel,kernel_rw_pipes,allow $1 kernel_t:fifo_file { read write };,
kernel,kernel,kernel_rw_unix_dgram_sockets,allow $1 kernel_t:unix_dgram_socket { read write ioctl };,
kernel,kernel,kernel_dgram_send,allow $1 kernel_t:unix_dgram_socket sendto;,
kernel,kernel,kernel_tcp_recvfrom,allow $1 kernel_t:tcp_socket recvfrom;,
kernel,kernel,kernel_udp_send,allow $1 kernel_t:udp_socket sendto;,
kernel,kernel,kernel_udp_send,allow kernel_t $1:udp_socket recvfrom;,
kernel,kernel,kernel_udp_recvfrom,allow $1 kernel_t:udp_socket recvfrom;,
kernel,kernel,kernel_load_module,allow $1 self:capability sys_module;,
kernel,kernel,kernel_read_ring_buffer,allow $1 kernel_t:system syslog_read;,
kernel,kernel,kernel_change_ring_buffer_level,allow $1 kernel_t:system syslog_console;,
kernel,kernel,kernel_clear_ring_buffer,allow $1 kernel_t:system syslog_mod;,
kernel,kernel,kernel_get_sysvipc_info,allow $1 kernel_t:system ipc_info;,
kernel,kernel,kernel_getattr_debugfs,allow $1 debugfs_t:filesystem getattr;,
kernel,kernel,kernel_mount_debugfs,allow $1 debugfs_t:filesystem mount;,
kernel,kernel,kernel_unmount_debugfs,allow $1 debugfs_t:filesystem unmount;,
kernel,kernel,kernel_remount_debugfs,allow $1 debugfs_t:filesystem remount;,
kernel,kernel,kernel_search_debugfs,allow $1 debugfs_t:dir search;,
kernel,kernel,kernel_read_debugfs,allow $1 debugfs_t:dir { read getattr lock search ioctl };,
kernel,kernel,kernel_read_debugfs,allow $1 debugfs_t:file { read getattr lock ioctl };,
kernel,kernel,kernel_read_debugfs,allow $1 debugfs_t:lnk_file { getattr read };,
kernel,kernel,kernel_getattr_proc,allow $1 proc_t:filesystem getattr;,
kernel,kernel,kernel_search_proc,allow $1 proc_t:dir search;,
kernel,kernel,kernel_list_proc,allow $1 proc_t:dir { read getattr lock search ioctl };,
kernel,kernel,kernel_getattr_proc_files,allow $1 proc_t:dir search;,
kernel,kernel,kernel_getattr_proc_files,allow $1 proc_t:file getattr;,
kernel,kernel,kernel_read_proc_symlinks,allow $1 proc_t:dir search;,
kernel,kernel,kernel_read_proc_symlinks,allow $1 proc_t:lnk_file { getattr read };,
kernel,kernel,kernel_read_system_state,allow $1 proc_t:dir { read getattr lock search ioctl };,
kernel,kernel,kernel_read_system_state,allow $1 proc_t:lnk_file { getattr read };,
kernel,kernel,kernel_read_system_state,allow $1 proc_t:file { read getattr lock ioctl };,
kernel,kernel,kernel_write_proc_files,allow $1 proc_t:dir search;,
kernel,kernel,kernel_write_proc_files,allow $1 proc_t:file { append write };,
kernel,kernel,kernel_read_software_raid_state,allow $1 proc_t:dir { read getattr lock search ioctl };,
kernel,kernel,kernel_read_software_raid_state,allow $1 proc_mdstat_t:file { read getattr lock ioctl };,
kernel,kernel,kernel_rw_software_raid_state,allow $1 proc_t:dir { read getattr lock search ioctl };,
kernel,kernel,kernel_rw_software_raid_state,allow $1 proc_mdstat_t:file { getattr read write append ioctl lock };,
kernel,kernel,kernel_getattr_core_if,allow $1 proc_t:dir { read getattr lock search ioctl };,
kernel,kernel,kernel_getattr_core_if,allow $1 proc_kcore_t:file getattr;,
kernel,kernel,kernel_read_messages,allow $1 proc_t:dir search;,
kernel,kernel,kernel_read_messages,allow $1 proc_kmsg_t:file { read getattr lock ioctl };,
kernel,kernel,kernel_getattr_message_if,allow $1 proc_t:dir search;,
kernel,kernel,kernel_getattr_message_if,allow $1 proc_kmsg_t:file getattr;,
kernel,kernel,kernel_search_network_state,allow $1 proc_net_t:dir search;,
kernel,kernel,kernel_read_network_state,allow $1 proc_t:dir search;,
kernel,kernel,kernel_read_network_state,allow $1 proc_net_t:dir { read getattr lock search ioctl };,
kernel,kernel,kernel_read_network_state,allow $1 proc_net_t:file { read getattr lock ioctl };,
kernel,kernel,kernel_read_network_state,allow $1 proc_net_t:lnk_file { getattr read };,
kernel,kernel,kernel_read_network_state_symlinks,allow $1 proc_t:dir search;,
kernel,kernel,kernel_read_network_state_symlinks,allow $1 proc_net_t:dir { read getattr lock search ioctl };,
kernel,kernel,kernel_read_network_state_symlinks,allow $1 proc_net_t:lnk_file { read getattr lock ioctl };,
kernel,kernel,kernel_read_sysctl,allow $1 sysctl_t:dir { read getattr lock search ioctl };,
kernel,kernel,kernel_read_device_sysctls,allow $1 proc_t:dir search;,
kernel,kernel,kernel_read_device_sysctls,allow $1 sysctl_t:dir { read getattr lock search ioctl };,
kernel,kernel,kernel_read_device_sysctls,allow $1 sysctl_dev_t:dir { read getattr lock search ioctl };,
kernel,kernel,kernel_read_device_sysctls,allow $1 sysctl_dev_t:file { read getattr lock ioctl };,
kernel,kernel,kernel_rw_device_sysctls,allow $1 proc_t:dir search;,
kernel,kernel,kernel_rw_device_sysctls,allow $1 sysctl_t:dir { read getattr lock search ioctl };,
kernel,kernel,kernel_rw_device_sysctls,allow $1 sysctl_dev_t:file { getattr read write append ioctl lock };,
kernel,kernel,kernel_search_vm_sysctl,allow $1 { proc_t sysctl_t sysctl_vm_t }:dir { getattr search };,
kernel,kernel,kernel_read_vm_sysctls,allow $1 proc_t:dir search;,
kernel,kernel,kernel_read_vm_sysctls,allow $1 sysctl_t:dir { read getattr lock search ioctl };,
kernel,kernel,kernel_read_vm_sysctls,allow $1 sysctl_vm_t:file { read getattr lock ioctl };,
kernel,kernel,kernel_rw_vm_sysctls,allow $1 proc_t:dir search;,
kernel,kernel,kernel_rw_vm_sysctls,allow $1 sysctl_t:dir { read getattr lock search ioctl };,
kernel,kernel,kernel_rw_vm_sysctls,allow $1 sysctl_vm_t:file { getattr read write append ioctl lock };,
kernel,kernel,kernel_search_network_sysctl,allow $1 { proc_t sysctl_t sysctl_net_t }:dir search;,
kernel,kernel,kernel_read_net_sysctls,allow $1 proc_t:dir search;,
kernel,kernel,kernel_read_net_sysctls,allow $1 sysctl_t:dir { read getattr lock search ioctl };,
kernel,kernel,kernel_read_net_sysctls,allow $1 sysctl_net_t:dir { read getattr lock search ioctl };,
kernel,kernel,kernel_read_net_sysctls,allow $1 sysctl_net_t:file { read getattr lock ioctl };,
kernel,kernel,kernel_rw_net_sysctls,allow $1 proc_t:dir search;,
kernel,kernel,kernel_rw_net_sysctls,allow $1 sysctl_t:dir { read getattr lock search ioctl };,
kernel,kernel,kernel_rw_net_sysctls,allow $1 sysctl_net_t:dir { read getattr lock search ioctl };,
kernel,kernel,kernel_rw_net_sysctls,allow $1 sysctl_net_t:file { getattr read write append ioctl lock };,
kernel,kernel,kernel_read_unix_sysctls,allow $1 proc_t:dir search;,
kernel,kernel,kernel_read_unix_sysctls,allow $1 sysctl_t:dir { read getattr lock search ioctl };,
kernel,kernel,kernel_read_unix_sysctls,allow $1 sysctl_net_t:dir { read getattr lock search ioctl };,
kernel,kernel,kernel_read_unix_sysctls,allow $1 sysctl_net_unix_t:file { read getattr lock ioctl };,
kernel,kernel,kernel_rw_unix_sysctls,allow $1 proc_t:dir search;,
kernel,kernel,kernel_rw_unix_sysctls,allow $1 sysctl_t:dir { read getattr lock search ioctl };,
kernel,kernel,kernel_rw_unix_sysctls,allow $1 sysctl_net_t:dir { read getattr lock search ioctl };,
kernel,kernel,kernel_rw_unix_sysctls,allow $1 sysctl_net_unix_t:file { getattr read write append ioctl lock };,
kernel,kernel,kernel_read_hotplug_sysctls,allow $1 proc_t:dir search;,
kernel,kernel,kernel_read_hotplug_sysctls,allow $1 sysctl_t:dir { read getattr lock search ioctl };,
kernel,kernel,kernel_read_hotplug_sysctls,allow $1 sysctl_kernel_t:dir { read getattr lock search ioctl };,
kernel,kernel,kernel_read_hotplug_sysctls,allow $1 sysctl_hotplug_t:file { read getattr lock ioctl };,
kernel,kernel,kernel_rw_hotplug_sysctls,allow $1 proc_t:dir search;,
kernel,kernel,kernel_rw_hotplug_sysctls,allow $1 sysctl_t:dir { read getattr lock search ioctl };,
kernel,kernel,kernel_rw_hotplug_sysctls,allow $1 sysctl_kernel_t:dir { read getattr lock search ioctl };,
kernel,kernel,kernel_rw_hotplug_sysctls,allow $1 sysctl_hotplug_t:file { getattr read write append ioctl lock };,
kernel,kernel,kernel_read_modprobe_sysctls,allow $1 proc_t:dir search;,
kernel,kernel,kernel_read_modprobe_sysctls,allow $1 sysctl_t:dir { read getattr lock search ioctl };,
kernel,kernel,kernel_read_modprobe_sysctls,allow $1 sysctl_kernel_t:dir { read getattr lock search ioctl };,
kernel,kernel,kernel_read_modprobe_sysctls,allow $1 sysctl_modprobe_t:file { read getattr lock ioctl };,
kernel,kernel,kernel_rw_modprobe_sysctls,allow $1 proc_t:dir search;,
kernel,kernel,kernel_rw_modprobe_sysctls,allow $1 sysctl_t:dir { read getattr lock search ioctl };,
kernel,kernel,kernel_rw_modprobe_sysctls,allow $1 sysctl_kernel_t:dir { read getattr lock search ioctl };,
kernel,kernel,kernel_rw_modprobe_sysctls,allow $1 sysctl_modprobe_t:file { getattr read write append ioctl lock };,
kernel,kernel,kernel_read_kernel_sysctls,allow $1 proc_t:dir search;,
kernel,kernel,kernel_read_kernel_sysctls,allow $1 sysctl_t:dir { read getattr lock search ioctl };,
kernel,kernel,kernel_read_kernel_sysctls,allow $1 sysctl_kernel_t:dir { read getattr lock search ioctl };,
kernel,kernel,kernel_read_kernel_sysctls,allow $1 sysctl_kernel_t:file { read getattr lock ioctl };,
kernel,kernel,kernel_rw_kernel_sysctl,allow $1 proc_t:dir search;,
kernel,kernel,kernel_rw_kernel_sysctl,allow $1 sysctl_t:dir { read getattr lock search ioctl };,
kernel,kernel,kernel_rw_kernel_sysctl,allow $1 sysctl_kernel_t:dir { read getattr lock search ioctl };,
kernel,kernel,kernel_rw_kernel_sysctl,allow $1 sysctl_kernel_t:file { getattr read write append ioctl lock };,
kernel,kernel,kernel_read_fs_sysctls,allow $1 proc_t:dir search;,
kernel,kernel,kernel_read_fs_sysctls,allow $1 sysctl_t:dir { read getattr lock search ioctl };,
kernel,kernel,kernel_read_fs_sysctls,allow $1 sysctl_fs_t:dir { read getattr lock search ioctl };,
kernel,kernel,kernel_read_fs_sysctls,allow $1 sysctl_fs_t:file { read getattr lock ioctl };,
kernel,kernel,kernel_rw_fs_sysctls,allow $1 proc_t:dir search;,
kernel,kernel,kernel_rw_fs_sysctls,allow $1 sysctl_t:dir { read getattr lock search ioctl };,
kernel,kernel,kernel_rw_fs_sysctls,allow $1 sysctl_fs_t:dir { read getattr lock search ioctl };,
kernel,kernel,kernel_rw_fs_sysctls,allow $1 sysctl_fs_t:file { getattr read write append ioctl lock };,
kernel,kernel,kernel_read_irq_sysctls,allow $1 proc_t:dir search;,
kernel,kernel,kernel_read_irq_sysctls,allow $1 sysctl_irq_t:dir { read getattr lock search ioctl };,
kernel,kernel,kernel_read_irq_sysctls,allow $1 sysctl_irq_t:file { read getattr lock ioctl };,
kernel,kernel,kernel_rw_irq_sysctls,allow $1 proc_t:dir search;,
kernel,kernel,kernel_rw_irq_sysctls,allow $1 sysctl_irq_t:dir { read getattr lock search ioctl };,
kernel,kernel,kernel_rw_irq_sysctls,allow $1 sysctl_irq_t:file { getattr read write append ioctl lock };,
kernel,kernel,kernel_read_rpc_sysctls,allow $1 proc_t:dir search;,
kernel,kernel,kernel_read_rpc_sysctls,allow $1 proc_net_t:dir search;,
kernel,kernel,kernel_read_rpc_sysctls,allow $1 sysctl_rpc_t:dir { read getattr lock search ioctl };,
kernel,kernel,kernel_read_rpc_sysctls,allow $1 sysctl_rpc_t:file { read getattr lock ioctl };,
kernel,kernel,kernel_rw_rpc_sysctls,allow $1 proc_t:dir search;,
kernel,kernel,kernel_rw_rpc_sysctls,allow $1 proc_net_t:dir search;,
kernel,kernel,kernel_rw_rpc_sysctls,allow $1 sysctl_rpc_t:dir { read getattr lock search ioctl };,
kernel,kernel,kernel_rw_rpc_sysctls,allow $1 sysctl_rpc_t:file { getattr read write append ioctl lock };,
kernel,kernel,kernel_read_all_sysctls,allow $1 { proc_t proc_net_t }:dir search;,
kernel,kernel,kernel_read_all_sysctls,allow $1 sysctl_type:dir { read getattr lock search ioctl };,
kernel,kernel,kernel_read_all_sysctls,allow $1 sysctl_type:file { read getattr lock ioctl };,
kernel,kernel,kernel_rw_all_sysctls,allow $1 { proc_t proc_net_t }:dir search;,
kernel,kernel,kernel_rw_all_sysctls,allow $1 sysctl_type:dir { read getattr lock search ioctl };,
kernel,kernel,kernel_rw_all_sysctls,allow $1 sysctl_type:file { { getattr read write append ioctl lock } setattr };,
kernel,kernel,kernel_kill_unlabeled,allow $1 unlabeled_t:process sigkill;,
kernel,kernel,kernel_signal_unlabeled,allow $1 unlabeled_t:process signal;,
kernel,kernel,kernel_signull_unlabeled,allow $1 unlabeled_t:process signull;,
kernel,kernel,kernel_sigstop_unlabeled,allow $1 unlabeled_t:process sigstop;,
kernel,kernel,kernel_sigchld_unlabeled,allow $1 unlabeled_t:process sigchld;,
kernel,kernel,kernel_list_unlabeled,allow $1 unlabeled_t:dir { read getattr lock search ioctl };,
kernel,kernel,kernel_rw_unlabeled_dirs,allow $1 unlabeled_t:dir { read getattr lock search ioctl add_name remove_name write };,
kernel,kernel,kernel_rw_unlabeled_blk_files,allow $1 unlabeled_t:blk_file getattr;,
kernel,kernel,kernel_relabelfrom_unlabeled_dirs,allow $1 unlabeled_t:dir { getattr search read relabelfrom };,
kernel,kernel,kernel_relabelfrom_unlabeled_files,allow $1 unlabeled_t:file { getattr relabelfrom };,
kernel,kernel,kernel_relabelfrom_unlabeled_symlinks,allow $1 unlabeled_t:lnk_file { getattr relabelfrom };,
kernel,kernel,kernel_relabelfrom_unlabeled_pipes,allow $1 unlabeled_t:fifo_file { getattr relabelfrom };,
kernel,kernel,kernel_relabelfrom_unlabeled_sockets,allow $1 unlabeled_t:sock_file { getattr relabelfrom };,
kernel,kernel,kernel_sendrecv_unlabeled_association,allow $1 unlabeled_t:association { sendto recvfrom };,
kernel,kernel,kernel_unconfined,allow $1 proc_type:{ dir file } *;,
kernel,kernel,kernel_unconfined,allow $1 sysctl_t:{ dir file } *;,
kernel,kernel,kernel_unconfined,allow $1 kernel_t:system *;,
kernel,kernel,kernel_unconfined,allow $1 unlabeled_t:dir_file_class_set *;,
kernel,kernel,kernel_unconfined,allow $1 unlabeled_t:filesystem *;,
kernel,kernel,kernel_unconfined,allow $1 unlabeled_t:association *;,
kernel,selinux,selinux_search_fs,allow $1 security_t:dir search;,
kernel,selinux,selinux_get_enforce_mode,allow $1 security_t:dir { read search getattr };,
kernel,selinux,selinux_get_enforce_mode,allow $1 security_t:file { getattr read };,
kernel,selinux,selinux_set_enforce_mode,allow $1 security_t:dir { read search getattr };,
kernel,selinux,selinux_set_enforce_mode,allow $1 security_t:file { getattr read write };,
kernel,selinux,selinux_load_policy,allow $1 security_t:dir { read search getattr };,
kernel,selinux,selinux_load_policy,allow $1 security_t:file { getattr read write };,
kernel,selinux,selinux_set_boolean,allow $1 security_t:dir search;,
kernel,selinux,selinux_set_boolean,allow $1 security_t:dir { getattr search read };,
kernel,selinux,selinux_set_boolean,allow $1 security_t:file { getattr read write };,
kernel,selinux,selinux_set_parameters,allow $1 security_t:dir { read search getattr };,
kernel,selinux,selinux_set_parameters,allow $1 security_t:file { getattr read write };,
kernel,selinux,selinux_set_parameters,allow $1 security_t:security setsecparam;,
kernel,selinux,selinux_validate_context,allow $1 security_t:dir { read search getattr };,
kernel,selinux,selinux_validate_context,allow $1 security_t:file { getattr read write };,
kernel,selinux,selinux_validate_context,allow $1 security_t:security check_context;,
kernel,selinux,selinux_compute_access_vector,allow $1 security_t:dir { read search getattr };,
kernel,selinux,selinux_compute_access_vector,allow $1 security_t:file { getattr read write };,
kernel,selinux,selinux_compute_access_vector,allow $1 security_t:security compute_av;,
kernel,selinux,selinux_compute_create_context,allow $1 security_t:dir { read search getattr };,
kernel,selinux,selinux_compute_create_context,allow $1 security_t:file { getattr read write };,
kernel,selinux,selinux_compute_create_context,allow $1 security_t:security compute_create;,
kernel,selinux,selinux_compute_member,allow $1 security_t:dir { read search getattr };,
kernel,selinux,selinux_compute_member,allow $1 security_t:file { getattr read write };,
kernel,selinux,selinux_compute_member,allow $1 security_t:security compute_member;,
kernel,selinux,selinux_compute_relabel_context,allow $1 security_t:dir { read search getattr };,
kernel,selinux,selinux_compute_relabel_context,allow $1 security_t:file { getattr read write };,
kernel,selinux,selinux_compute_relabel_context,allow $1 security_t:security compute_relabel;,
kernel,selinux,selinux_compute_user_contexts,allow $1 security_t:dir { read search getattr };,
kernel,selinux,selinux_compute_user_contexts,allow $1 security_t:file { getattr read write };,
kernel,selinux,selinux_compute_user_contexts,allow $1 security_t:security compute_user;,
kernel,selinux,selinux_unconfined,allow $1 security_t:dir { getattr search read };,
kernel,selinux,selinux_unconfined,allow $1 security_t:file { getattr read write };,
kernel,storage,storage_getattr_fixed_disk_dev,allow $1 fixed_disk_device_t:blk_file getattr;,
kernel,storage,storage_setattr_fixed_disk_dev,allow $1 fixed_disk_device_t:blk_file setattr;,
kernel,storage,storage_raw_read_fixed_disk,allow $1 fixed_disk_device_t:blk_file { read getattr lock ioctl };,
kernel,storage,storage_raw_write_fixed_disk,allow $1 fixed_disk_device_t:blk_file { getattr write append ioctl };,
kernel,storage,storage_manage_fixed_disk,allow $1 fixed_disk_device_t:blk_file { create ioctl read getattr lock write setattr append link unlink rename };,
kernel,storage,storage_relabel_fixed_disk,allow $1 fixed_disk_device_t:blk_file { relabelfrom relabelto };,
kernel,storage,storage_swapon_fixed_disk,allow $1 fixed_disk_device_t:blk_file { getattr swapon };,
kernel,storage,storage_getattr_scsi_generic_dev,allow $1 scsi_generic_device_t:chr_file getattr;,
kernel,storage,storage_setattr_scsi_generic_dev,allow $1 scsi_generic_device_t:chr_file setattr;,
kernel,storage,storage_read_scsi_generic,allow $1 scsi_generic_device_t:chr_file { read getattr lock ioctl };,
kernel,storage,storage_write_scsi_generic,allow $1 scsi_generic_device_t:chr_file { getattr write ioctl };,
kernel,storage,storage_setattr_scsi_generic_dev_dev,allow $1 scsi_generic_device_t:chr_file setattr;,
kernel,storage,storage_getattr_removable_dev,allow $1 removable_device_t:blk_file getattr;,
kernel,storage,storage_setattr_removable_dev,allow $1 removable_device_t:blk_file setattr;,
kernel,storage,storage_raw_read_removable_device,allow $1 removable_device_t:blk_file { read getattr lock ioctl };,
kernel,storage,storage_raw_write_removable_device,allow $1 removable_device_t:blk_file { getattr write ioctl };,
kernel,storage,storage_read_tape,allow $1 tape_device_t:chr_file { read getattr lock ioctl };,
kernel,storage,storage_write_tape,allow $1 tape_device_t:chr_file { getattr write ioctl };,
kernel,storage,storage_getattr_tape_dev,allow $1 tape_device_t:chr_file getattr;,
kernel,storage,storage_setattr_tape_dev,allow $1 tape_device_t:chr_file setattr;,
kernel,storage,storage_unconfined,allow $1 { fixed_disk_device_t removable_device_t }:blk_file *;,
kernel,storage,storage_unconfined,allow $1 { scsi_generic_device_t tape_device_t }:chr_file *;,
kernel,terminal,term_pty,allow $1 devpts_t:filesystem associate;,
kernel,terminal,term_create_pty,allow $1 ptmx_t:chr_file { getattr read write append ioctl lock };,
kernel,terminal,term_create_pty,allow $1 devpts_t:dir { read getattr lock search ioctl };,
kernel,terminal,term_create_pty,allow $1 devpts_t:filesystem getattr;,
kernel,terminal,term_use_all_terms,allow $1 devpts_t:dir { read getattr lock search ioctl };,
kernel,terminal,term_use_all_terms,allow $1 { console_device_t tty_device_t ttynode ptynode }:chr_file { getattr read write append ioctl lock };,
kernel,terminal,term_write_console,allow $1 console_device_t:chr_file write;,
kernel,terminal,term_read_console,allow $1 console_device_t:chr_file read;,
kernel,terminal,term_use_console,allow $1 console_device_t:chr_file { getattr read write append ioctl lock };,
kernel,terminal,term_setattr_console,allow $1 console_device_t:chr_file setattr;,
kernel,terminal,term_search_ptys,allow $1 devpts_t:dir search;,
kernel,terminal,term_list_ptys,allow $1 devpts_t:dir { read getattr lock search ioctl };,
kernel,terminal,term_ioctl_generic_ptys,allow $1 devpts_t:dir search;,
kernel,terminal,term_ioctl_generic_ptys,allow $1 devpts_t:chr_file ioctl;,
kernel,terminal,term_use_generic_ptys,allow $1 devpts_t:dir { getattr search read lock ioctl };,
kernel,terminal,term_use_generic_ptys,allow $1 devpts_t:chr_file { { getattr read write ioctl } lock append };,
kernel,terminal,term_use_controlling_term,allow $1 devtty_t:chr_file { { getattr read write ioctl } lock append };,
kernel,terminal,term_use_ptmx,allow $1 ptmx_t:chr_file { getattr read write append ioctl lock };,
kernel,terminal,term_getattr_all_user_ptys,allow $1 devpts_t:dir { read getattr lock search ioctl };,
kernel,terminal,term_getattr_all_user_ptys,allow $1 ptynode:chr_file getattr;,
kernel,terminal,term_dontaudit_getattr_all_user_ptys,allow $1 devpts_t:dir { read getattr lock search ioctl };,
kernel,terminal,term_setattr_all_user_ptys,allow $1 devpts_t:dir { read getattr lock search ioctl };,
kernel,terminal,term_setattr_all_user_ptys,allow $1 ptynode:chr_file setattr;,
kernel,terminal,term_relabelto_all_user_ptys,allow $1 ptynode:chr_file relabelto;,
kernel,terminal,term_use_all_user_ptys,allow $1 devpts_t:dir { read getattr lock search ioctl };,
kernel,terminal,term_use_all_user_ptys,allow $1 ptynode:chr_file { { getattr read write ioctl } lock append };,
kernel,terminal,term_relabel_all_user_ptys,allow $1 devpts_t:dir search;,
kernel,terminal,term_relabel_all_user_ptys,allow $1 ptynode:chr_file { relabelfrom relabelto };,
kernel,terminal,term_getattr_unallocated_ttys,allow $1 tty_device_t:chr_file getattr;,
kernel,terminal,term_setattr_unallocated_ttys,allow $1 tty_device_t:chr_file setattr;,
kernel,terminal,term_relabel_unallocated_ttys,allow $1 tty_device_t:chr_file { relabelfrom relabelto };,
kernel,terminal,term_reset_tty_labels,allow $1 ttynode:chr_file relabelfrom;,
kernel,terminal,term_reset_tty_labels,allow $1 tty_device_t:chr_file relabelto;,
kernel,terminal,term_write_unallocated_ttys,allow $1 tty_device_t:chr_file { getattr write };,
kernel,terminal,term_use_unallocated_ttys,allow $1 tty_device_t:chr_file { { getattr read write ioctl } lock append };,
kernel,terminal,term_getattr_all_user_ttys,allow $1 ttynode:chr_file getattr;,
kernel,terminal,term_setattr_all_user_ttys,allow $1 ttynode:chr_file setattr;,
kernel,terminal,term_relabel_all_user_ttys,allow $1 ttynode:chr_file { relabelfrom relabelto };,
kernel,terminal,term_write_all_user_ttys,allow $1 ttynode:chr_file { getattr write };,
kernel,terminal,term_use_all_user_ttys,allow $1 ttynode:chr_file { { getattr read write ioctl } lock append };,
services,apache,allow httpd_t httpd_$1_htaccess_t:file { read getattr lock ioctl };,
services,apache,allow httpd_suexec_t httpd_$1_script_t:fd use;,
services,apache,allow httpd_$1_script_t httpd_suexec_t:fd use;,
services,apache,allow httpd_$1_script_t httpd_suexec_t:fifo_file { getattr read write append ioctl lock };,
services,apache,allow httpd_$1_script_t httpd_suexec_t:process sigchld;,
services,apache,allow httpd_suexec_t { httpd_$1_content_t httpd_$1_script_ro_t httpd_$1_script_rw_t httpd_$1_script_exec_t }:dir { getattr search };,
services,apache,allow httpd_$1_script_t self:fifo_file { getattr read write append ioctl lock };,
services,apache,allow httpd_$1_script_t self:unix_stream_socket connectto;,
services,apache,allow httpd_$1_script_t httpd_t:fifo_file write;,
services,apache,allow httpd_$1_script_t httpd_$1_content_t:dir { getattr search };,
services,apache,allow httpd_$1_script_t httpd_log_t:file { getattr append };,
services,apache,allow httpd_$1_script_t httpd_log_t:dir search;,
services,apache,allow httpd_$1_script_t httpd_$1_script_exec_t:dir { search getattr };,
services,apache,allow httpd_$1_script_t httpd_$1_script_ra_t:dir { read getattr lock search ioctl add_name write };,
services,apache,allow httpd_$1_script_t httpd_$1_script_ra_t:file { ioctl read getattr lock append };,
services,apache,allow httpd_$1_script_t httpd_$1_script_ra_t:lnk_file { getattr read };,
services,apache,allow httpd_$1_script_t httpd_$1_script_ro_t:dir { getattr read search };,
services,apache,allow httpd_$1_script_t httpd_$1_script_ro_t:file { read getattr };,
services,apache,allow httpd_$1_script_t httpd_$1_script_ro_t:lnk_file { getattr read };,
services,apache,allow httpd_$1_script_t httpd_$1_script_rw_t:dir { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir };,
services,apache,allow httpd_$1_script_t httpd_$1_script_rw_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
services,apache,allow httpd_$1_script_t httpd_$1_script_rw_t:lnk_file { create read getattr setattr link unlink rename };,
services,apache,allow httpd_$1_script_t httpd_$1_script_rw_t:sock_file { create ioctl read getattr lock write setattr append link unlink rename };,
services,apache,allow httpd_$1_script_t httpd_$1_script_rw_t:fifo_file { create ioctl read getattr lock write setattr append link unlink rename };,
services,apache,allow $2 httpd_$1_content_t:{ dir file lnk_file } { relabelto relabelfrom };,
services,apache,allow $2 httpd_$1_htaccess_t:file { { create ioctl read getattr lock write setattr append link unlink rename } relabelto relabelfrom };,
services,apache,allow $2 httpd_$1_script_ra_t:lnk_file { { create read getattr setattr link unlink rename } relabelto relabelfrom };,
services,apache,allow $2 httpd_$1_script_ra_t:dir { { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir } relabelto relabelfrom };,
services,apache,allow $2 httpd_$1_script_ra_t:file { { create ioctl read getattr lock write setattr append link unlink rename } relabelto relabelfrom };,
services,apache,allow $2 httpd_$1_script_ro_t:lnk_file { { create read getattr setattr link unlink rename } relabelto relabelfrom };,
services,apache,allow $2 httpd_$1_script_ro_t:dir { { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir } relabelto relabelfrom };,
services,apache,allow $2 httpd_$1_script_ro_t:file { { create ioctl read getattr lock write setattr append link unlink rename } relabelto relabelfrom };,
services,apache,allow $2 httpd_$1_script_rw_t:lnk_file { { create read getattr setattr link unlink rename } relabelto relabelfrom };,
services,apache,allow $2 httpd_$1_script_rw_t:dir { { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir } relabelto relabelfrom };,
services,apache,allow $2 httpd_$1_script_rw_t:file { { create ioctl read getattr lock write setattr append link unlink rename } relabelto relabelfrom };,
services,apache,allow $2 httpd_$1_script_exec_t:dir { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir };,
services,apache,allow $2 httpd_$1_script_exec_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
services,apache,allow $2 httpd_$1_script_exec_t:lnk_file { create read getattr setattr link unlink rename };,
services,apache,allow $2 httpd_$1_script_exec_t:dir { { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir } relabelto relabelfrom };,
services,apache,allow $2 httpd_$1_script_exec_t:file { { create ioctl read getattr lock write setattr append link unlink rename } relabelto relabelfrom };,
services,apache,allow $2 httpd_$1_script_exec_t:lnk_file { { create read getattr setattr link unlink rename } relabelto relabelfrom };,
services,apache,apache_domtrans,allow $1 httpd_t:fd use;,
services,apache,apache_domtrans,allow httpd_t $1:fd use;,
services,apache,apache_domtrans,allow httpd_t $1:fifo_file { getattr read write append ioctl lock };,
services,apache,apache_domtrans,allow httpd_t $1:process sigchld;,
services,apache,apache_signull,allow $1 httpd_t:process signull;,
services,apache,apache_sigchld,allow $1 httpd_t:process sigchld;,
services,apache,apache_use_fds,allow $1 httpd_t:fd use;,
services,apache,apache_read_config,allow $1 httpd_config_t:dir { read getattr lock search ioctl };,
services,apache,apache_read_config,allow $1 httpd_config_t:file { read getattr lock ioctl };,
services,apache,apache_read_config,allow $1 httpd_config_t:lnk_file { getattr read };,
services,apache,apache_domtrans_helper,allow $1 httpd_helper_t:fd use;,
services,apache,apache_domtrans_helper,allow httpd_helper_t $1:fd use;,
services,apache,apache_domtrans_helper,allow httpd_helper_t $1:fifo_file { getattr read write append ioctl lock };,
services,apache,apache_domtrans_helper,allow httpd_helper_t $1:process sigchld;,
services,apache,apache_run_helper,allow httpd_helper_t $3:chr_file { getattr read write ioctl };,
services,apache,apache_read_log,allow $1 httpd_log_t:dir { read getattr lock search ioctl };,
services,apache,apache_read_log,allow $1 httpd_log_t:file { read getattr lock ioctl };,
services,apache,apache_read_log,allow $1 httpd_log_t:lnk_file { getattr read };,
services,apache,apache_dontaudit_search_modules,allow $1 httpd_modules_t:dir { read getattr lock search ioctl };,
services,apache,apache_list_modules,allow $1 httpd_modules_t:dir { read getattr lock search ioctl };,
services,apache,apache_exec_modules,allow $1 httpd_modules_t:dir { read getattr lock search ioctl };,
services,apache,apache_exec_modules,allow $1 httpd_modules_t:lnk_file { read getattr lock ioctl };,
services,apache,apache_manage_sys_content,allow $1 httpd_sys_content_t:dir { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir };,
services,apache,apache_manage_sys_content,allow $1 httpd_sys_content_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
services,apache,apache_manage_sys_content,allow $1 httpd_sys_content_t:lnk_file { create read getattr setattr link unlink rename };,
services,apache,apache_read_squirrelmail_data,allow $1 httpd_squirrelmail_t:file { getattr read };,
services,apache,apache_append_squirrelmail_data,allow $1 httpd_squirrelmail_t:file { getattr append };,
services,apache,apache_read_sys_content,allow $1 httpd_sys_content_t:dir { read getattr lock search ioctl };,
services,apache,apache_read_sys_content,allow $1 httpd_sys_content_t:file { getattr read };,
services,apache,apache_search_sys_script_state,allow $1 httpd_sys_script_t:dir search;,
services,apm,apm_domtrans_client,allow $1 apm_t:fd use;,
services,apm,apm_domtrans_client,allow apm_t $1:fd use;,
services,apm,apm_domtrans_client,allow apm_t $1:fifo_file { getattr read write append ioctl lock };,
services,apm,apm_domtrans_client,allow apm_t $1:process sigchld;,
services,apm,apm_use_fds,allow $1 apmd_t:fd use; ,
services,apm,apm_write_pipes,allow $1 apmd_t:fifo_file write; ,
services,apm,apm_rw_stream_sockets,allow $1 apmd_t:unix_stream_socket { read write };,
services,apm,apm_append_log,allow $1 apmd_log_t:file append;,
services,apm,apm_stream_connect,allow $1 apmd_var_run_t:sock_file write;,
services,apm,apm_stream_connect,allow $1 apmd_t:unix_stream_socket connectto;,
services,arpwatch,arpwatch_search_data,allow $1 arpwatch_data_t:dir search;,
services,arpwatch,arpwatch_manage_data_files,allow $1 arpwatch_data_t:dir { read getattr lock search ioctl add_name remove_name write };,
services,arpwatch,arpwatch_manage_data_files,allow $1 arpwatch_data_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
services,arpwatch,arpwatch_rw_tmp_files,allow $1 arpwatch_tmp_t:file { getattr read write append ioctl lock };,
services,arpwatch,arpwatch_manage_tmp_files,allow $1 arpwatch_tmp_t:file { create getattr setattr read write append rename link unlink ioctl lock };,
services,automount,automount_domtrans,allow $1 automount_t:fd use;,
services,automount,automount_domtrans,allow automount_t $1:fd use;,
services,automount,automount_domtrans,allow automount_t $1:fifo_file { getattr read write append ioctl lock };,
services,automount,automount_domtrans,allow automount_t $1:process sigchld;,
services,avahi,avahi_dbus_chat,allow $1 avahi_t:dbus send_msg;,
services,avahi,avahi_dbus_chat,allow avahi_t $1:dbus send_msg;,
services,bind,bind_domtrans_ndc,allow $1 ndc_t:fd use;,
services,bind,bind_domtrans_ndc,allow ndc_t $1:fd use;,
services,bind,bind_domtrans_ndc,allow ndc_t $1:fifo_file { getattr read write append ioctl lock };,
services,bind,bind_domtrans_ndc,allow ndc_t $1:process sigchld;,
services,bind,bind_signal,allow $1 named_t:process signal;,
services,bind,bind_run_ndc,allow ndc_t $3:chr_file { getattr read write ioctl };,
services,bind,bind_domtrans,allow $1 named_t:fd use;,
services,bind,bind_domtrans,allow named_t $1:fd use;,
services,bind,bind_domtrans,allow named_t $1:fifo_file { getattr read write append ioctl lock };,
services,bind,bind_domtrans,allow named_t $1:process sigchld;,
services,bind,bind_read_dnssec_keys,allow $1 { named_conf_t named_zone_t }:dir search;,
services,bind,bind_read_dnssec_keys,allow $1 dnssec_t:file { getattr read };,
services,bind,bind_read_config,allow $1 named_conf_t:dir search;,
services,bind,bind_read_config,allow $1 named_conf_t:file { getattr read };,
services,bind,bind_write_config,allow $1 named_conf_t:dir search;,
services,bind,bind_write_config,allow $1 named_conf_t:file { write setattr };,
services,bind,bind_manage_config_dirs,allow $1 named_conf_t:dir { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir };,
services,bind,bind_search_cache,allow $1 named_conf_t:dir { getattr search };,
services,bind,bind_search_cache,allow $1 named_zone_t:dir { getattr search };,
services,bind,bind_search_cache,allow $1 named_cache_t:dir { getattr search };,
services,bind,bind_manage_cache,allow $1 named_zone_t:dir { getattr search };,
services,bind,bind_manage_cache,allow $1 named_cache_t:dir { read getattr lock search ioctl add_name remove_name write };,
services,bind,bind_manage_cache,allow $1 named_cache_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
services,bind,bind_manage_cache,allow $1 named_cache_t:lnk_file { create read getattr setattr link unlink rename };,
services,bind,bind_setattr_pid_dirs,allow $1 named_var_run_t:dir setattr;,
services,bind,bind_read_zone,allow $1 named_zone_t:dir { getattr search };,
services,bind,bind_read_zone,allow $1 named_zone_t:file { read getattr lock ioctl };,
services,bluetooth,bluetooth_read_config,allow $1 bluetooth_conf_t:file { getattr read ioctl };,
services,bluetooth,bluetooth_domtrans_helper,allow $1 bluetooth_helper_t:fd use;,
services,bluetooth,bluetooth_domtrans_helper,allow bluetooth_helper_t $1:fd use;,
services,bluetooth,bluetooth_domtrans_helper,allow bluetooth_helper_t $1:fifo_file { getattr read write append ioctl lock };,
services,bluetooth,bluetooth_domtrans_helper,allow bluetooth_helper_t $1:process sigchld;,
services,bluetooth,bluetooth_dbus_chat,allow $1 bluetooth_t:dbus send_msg;,
services,bluetooth,bluetooth_dbus_chat,allow bluetooth_t $1:dbus send_msg;,
services,bluetooth,bluetooth_run_helper,allow bluetooth_helper_t $3:chr_file { getattr read write ioctl };,
services,canna,canna_stream_connect,allow $1 canna_var_run_t:dir search;,
services,canna,canna_stream_connect,allow $1 canna_var_run_t:sock_file write;,
services,canna,canna_stream_connect,allow $1 canna_t:unix_stream_socket connectto;,
services,cron,allow $1_crond_t self:capability dac_override;,
services,cron,allow $1_crond_t self:process { { sigchld sigkill sigstop signull signal } setsched };,
services,cron,allow $1_crond_t self:fifo_file { getattr read write append ioctl lock };,
services,cron,allow $1_crond_t self:unix_stream_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown listen accept };,
services,cron,allow $1_crond_t self:unix_dgram_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown };,
services,cron,allow $1_crond_t $1_cron_spool_t:file entrypoint;,
services,cron,allow crond_t $1_crond_t:process transition;,
services,cron,allow crond_t $1_crond_t:fd use;,
services,cron,allow $1_crond_t crond_t:fd use;,
services,cron,allow $1_crond_t crond_t:fifo_file { getattr read write append ioctl lock };,
services,cron,allow $1_crond_t crond_t:process sigchld;,
services,cron,allow $1_crond_t tmp_t:dir { read getattr lock search ioctl add_name remove_name write };,
services,cron,allow $2 $1_crontab_t:fd use;,
services,cron,allow $1_crontab_t $2:fd use;,
services,cron,allow $1_crontab_t $2:fifo_file { getattr read write append ioctl lock };,
services,cron,allow $1_crontab_t $2:process sigchld;,
services,cron,allow $2 $1_crontab_t:dir { search getattr read };,
services,cron,allow $2 $1_crontab_t:{ file lnk_file } { read getattr };,
services,cron,allow $2 $1_crontab_t:process getattr;,
services,cron,allow $2 $1_crontab_t:process signal;,
services,cron,allow crond_t $1_cron_spool_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
services,cron,allow $1_crontab_t self:capability { setuid setgid chown dac_override };,
services,cron,allow $1_crontab_t self:process { sigchld sigkill sigstop signull signal };,
services,cron,allow $1_crontab_t $1_cron_spool_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
services,cron,allow $1_crontab_t cron_spool_t:dir { read getattr lock search ioctl add_name remove_name write };,
services,cron,allow $1_crontab_t cron_spool_t:dir setattr;,
services,cron,allow $1_crond_t tmp_t:dir { read getattr lock search ioctl add_name remove_name write };,
services,cron,allow $1_crontab_t cron_spool_type:file { getattr read unlink };,
services,cron,cron_system_entry,allow system_crond_t $1:fd use;,
services,cron,cron_system_entry,allow $1 system_crond_t:fd use;,
services,cron,cron_system_entry,allow $1 system_crond_t:fifo_file { getattr read write append ioctl lock };,
services,cron,cron_system_entry,allow $1 system_crond_t:process sigchld;,
services,cron,cron_system_entry,allow $1 crond_t:fifo_file { getattr read write append ioctl lock };,
services,cron,cron_system_entry,allow $1 crond_t:fd use;,
services,cron,cron_system_entry,allow $1 crond_t:process sigchld;,
services,cron,cron_use_fds,allow $1 crond_t:fd use;,
services,cron,cron_sigchld,allow $1 crond_t:process sigchld;,
services,cron,cron_read_pipes,allow $1 crond_t:fifo_file { read getattr lock ioctl };,
services,cron,cron_rw_pipes,allow $1 crond_t:fifo_file { getattr read write };,
services,cron,cron_rw_tcp_sockets,allow $1 crond_t:tcp_socket { read write };,
services,cron,cron_search_spool,allow $1 cron_spool_t:dir search;,
services,cron,cron_anacron_domtrans_system_job,allow $1 system_crond_t:fd use;,
services,cron,cron_anacron_domtrans_system_job,allow system_crond_t $1:fd use;,
services,cron,cron_anacron_domtrans_system_job,allow system_crond_t $1:fifo_file { getattr read write append ioctl lock };,
services,cron,cron_anacron_domtrans_system_job,allow system_crond_t $1:process sigchld;,
services,cron,cron_use_system_job_fds,allow $1 system_crond_t:fd use;,
services,cron,cron_write_system_job_pipes,allow $1 system_crond_t:file write;,
services,cron,cron_rw_system_job_pipes,allow $1 system_crond_t:fifo_file { getattr read write append ioctl lock };,
services,cron,cron_read_system_job_tmp_files,allow $1 system_crond_tmp_t:file { read getattr lock ioctl };,
services,cups,cups_domtrans,allow $1 cupsd_t:fd use;,
services,cups,cups_domtrans,allow cupsd_t $1:fd use;,
services,cups,cups_domtrans,allow cupsd_t $1:fifo_file { getattr read write append ioctl lock };,
services,cups,cups_domtrans,allow cupsd_t $1:process sigchld;,
services,cups,cups_dbus_chat,allow $1 cupsd_t:dbus send_msg;,
services,cups,cups_dbus_chat,allow cupsd_t $1:dbus send_msg;,
services,cups,cups_domtrans_config,allow $1 cupsd_config_t:fd use;,
services,cups,cups_domtrans_config,allow cupsd_config_t $1:fd use;,
services,cups,cups_domtrans_config,allow cupsd_config_t $1:fifo_file { getattr read write append ioctl lock };,
services,cups,cups_domtrans_config,allow cupsd_config_t $1:process sigchld;,
services,cups,cups_signal_config,allow $1 cupsd_config_t:process signal;,
services,cups,cups_dbus_chat_config,allow $1 cupsd_config_t:dbus send_msg;,
services,cups,cups_dbus_chat_config,allow cupsd_config_t $1:dbus send_msg;,
services,cups,cups_read_config,allow $1 cupsd_etc_t:dir { getattr search };,
services,cups,cups_read_config,allow $1 cupsd_etc_t:file { getattr read };,
services,cups,cups_read_config,allow $1 cupsd_rw_etc_t:file { getattr read };,
services,cups,cups_read_rw_config,allow $1 cupsd_etc_t:dir { getattr search };,
services,cups,cups_read_rw_config,allow $1 cupsd_rw_etc_t:file { getattr read };,
services,cups,cups_read_log,allow $1 cupsd_log_t:file { getattr read };,
services,cups,cups_write_log,allow $1 cupsd_log_t:file write;,
services,cups,cups_stream_connect_ptal,allow $1 ptal_var_run_t:dir search;,
services,cups,cups_stream_connect_ptal,allow $1 ptal_var_run_t:sock_file write;,
services,cups,cups_stream_connect_ptal,allow $1 ptal_t:unix_stream_socket connectto;,
services,cups,cups_tcp_connect,allow $1 cupsd_t:tcp_socket { connectto recvfrom };,
services,cups,cups_tcp_connect,allow cupsd_t $1:tcp_socket { acceptfrom recvfrom };,
services,cvs,cvs_read_data,allow $1 cvs_data_t:file { getattr read };,
services,cyrus,cyrus_manage_data,allow $1 cyrus_var_lib_t:dir { read getattr lock search ioctl add_name remove_name write };,
services,cyrus,cyrus_manage_data,allow $1 cyrus_var_lib_t:file { create getattr setattr read write append rename link unlink ioctl lock };,
services,dbus,dbus_stub,allow $1_dbusd_t self:process { getattr sigkill signal };,
services,dbus,dbus_stub,allow $1_dbusd_t self:file { getattr read write };,
services,dbus,dbus_stub,allow $1_dbusd_t self:dbus { send_msg acquire_svc };,
services,dbus,dbus_stub,allow $1_dbusd_t self:unix_stream_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown listen accept };,
services,dbus,dbus_stub,allow $1_dbusd_t self:unix_dgram_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown };,
services,dbus,dbus_stub,allow $1_dbusd_t self:tcp_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown listen accept };,
services,dbus,dbus_stub,allow $1_dbusd_t self:netlink_audit_socket { { create ioctl read getattr write setattr append bind connect getopt setopt shutdown nlmsg_read nlmsg_write } nlmsg_relay };,
services,dbus,dbus_stub,allow $1_dbusd_t self:netlink_selinux_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown };,
services,dbus,dbus_stub,allow $2 $1_dbusd_t:unix_stream_socket connectto;,
services,dbus,dbus_stub,allow $1_dbusd_$1_t { $1_dbusd_t self }:dbus send_msg;,
services,dbus,dbus_stub,allow $2 $1_dbusd_t:dbus { send_msg acquire_svc };,
services,dbus,dbus_stub,allow $1_t system_dbusd_t:dbus { send_msg acquire_svc };,
services,dbus,dbus_stub,allow $1_dbusd_t dbusd_etc_t:dir { read getattr lock search ioctl };,
services,dbus,dbus_stub,allow $1_dbusd_t dbusd_etc_t:file { read getattr lock ioctl };,
services,dbus,dbus_stub,allow $1_dbusd_t dbusd_etc_t:lnk_file { getattr read };,
services,dbus,dbus_stub,allow $1_dbusd_t $1_dbusd_tmp_t:dir { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir };,
services,dbus,dbus_stub,allow $1_dbusd_t $1_dbusd_tmp_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
services,dbus,dbus_stub,allow $2 $1_dbusd_t:fd use;,
services,dbus,dbus_stub,allow $1_dbusd_t $2:fd use;,
services,dbus,dbus_stub,allow $1_dbusd_t $2:fifo_file { getattr read write append ioctl lock };,
services,dbus,dbus_stub,allow $1_dbusd_t $2:process sigchld;,
services,dbus,dbus_stub,allow $2 $1_dbusd_t:process { sigkill signal };,
services,dbus,dbus_stub,allow $1_dbusd_system_t { system_dbusd_t self }:dbus send_msg;,
services,dbus,dbus_stub,allow $2 system_dbusd_var_run_t:dir search;,
services,dbus,dbus_stub,allow $2 system_dbusd_var_run_t:sock_file write;,
services,dbus,dbus_stub,allow $2 system_dbusd_t:unix_stream_socket connectto;,
services,dbus,dbus_read_config,allow $1 dbusd_etc_t:file { read getattr lock ioctl };,
services,dbus,dbus_connect_system_bus,allow $1 system_dbusd_t:dbus acquire_svc;,
services,dbus,dbus_send_system_bus,allow $1 system_dbusd_t:dbus send_msg;,
services,dbus,dbus_system_bus_unconfined,allow $1 system_dbusd_t:dbus *;,
services,dhcp,dhcpd_setattr_state_files,allow $1 dhcpd_state_t:file setattr;,
services,dictd,dictd_tcp_connect,allow $1 dictd_t:tcp_socket { connectto recvfrom };,
services,dictd,dictd_tcp_connect,allow dictd_t $1:tcp_socket { acceptfrom recvfrom };,
services,djbdns,allow djbdns_$1_t self:capability { net_bind_service setgid setuid sys_chroot };,
services,djbdns,allow djbdns_$1_t self:tcp_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown listen accept };,
services,djbdns,allow djbdns_$1_t self:udp_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown };,
services,djbdns,allow djbdns_$1_t djbdns_$1_conf_t:dir { read getattr lock search ioctl };,
services,djbdns,allow djbdns_$1_t djbdns_$1_conf_t:file { read getattr lock ioctl };,
services,dovecot,dovecot_manage_spool,allow $1 dovecot_spool_t:dir { read getattr lock search ioctl add_name remove_name write };,
services,dovecot,dovecot_manage_spool,allow $1 dovecot_spool_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
services,dovecot,dovecot_manage_spool,allow $1 dovecot_spool_t:lnk_file { create read getattr setattr link unlink rename };,
services,finger,finger_domtrans,allow $1 fingerd_t:fd use;,
services,finger,finger_domtrans,allow fingerd_t $1:fd use;,
services,finger,finger_domtrans,allow fingerd_t $1:fifo_file { getattr read write append ioctl lock };,
services,finger,finger_domtrans,allow fingerd_t $1:process sigchld;,
services,finger,finger_tcp_connect,allow $1 fingerd_t:tcp_socket { connectto recvfrom };,
services,finger,finger_tcp_connect,allow fingerd_t $1:tcp_socket { acceptfrom recvfrom };,
services,ftp,ftp_tcp_connect,allow $1 ftpd_t:tcp_socket { connectto recvfrom };,
services,ftp,ftp_tcp_connect,allow ftpd_t $1:tcp_socket { acceptfrom recvfrom };,
services,ftp,ftp_read_config,allow $1 ftpd_etc_t:file { getattr read };,
services,ftp,ftp_check_exec,allow $1 ftpd_exec_t:file { getattr execute };,
services,ftp,ftp_read_log,allow $1 xferlog_t:file { read getattr lock ioctl };,
services,gpm,gpm_stream_connect,allow $1 gpmctl_t:sock_file { getattr write };,
services,gpm,gpm_stream_connect,allow $1 gpm_t:unix_stream_socket connectto;,
services,gpm,gpm_getattr_gpmctl,allow $1 gpmctl_t:sock_file getattr;,
services,gpm,gpm_setattr_gpmctl,allow $1 gpmctl_t:sock_file setattr;,
services,hal,hal_domtrans,allow $1 hald_t:fd use;,
services,hal,hal_domtrans,allow hald_t $1:fd use;,
services,hal,hal_domtrans,allow hald_t $1:fifo_file { getattr read write append ioctl lock };,
services,hal,hal_domtrans,allow hald_t $1:process sigchld;,
services,hal,hal_dgram_send,allow $1 hald_t:unix_dgram_socket sendto;,
services,hal,hal_stream_connect,allow $1 hald_t:unix_stream_socket connectto;,
services,hal,hal_dbus_send,allow $1 hald_t:dbus send_msg;,
services,hal,hal_dbus_chat,allow $1 hald_t:dbus send_msg;,
services,hal,hal_dbus_chat,allow hald_t $1:dbus send_msg;,
services,howl,howl_signal,allow $1 howl_t:process signal;,
services,i18n_input,i18n_use,allow $1 i18n_input_t:tcp_socket { connectto recvfrom };,
services,i18n_input,i18n_use,allow i18n_input_t $1:tcp_socket { acceptfrom recvfrom };,
services,inetd,inetd_tcp_service_domain,allow $1 inetd_t:tcp_socket { ioctl read getattr write setattr append bind connect getopt setopt shutdown listen accept };,
services,inetd,inetd_udp_service_domain,allow $1 inetd_t:udp_socket { ioctl read getattr write setattr append bind connect getopt setopt shutdown };,
services,inetd,inetd_service_domain,allow $1 inetd_t:tcp_socket { ioctl read getattr write setattr append bind connect getopt setopt shutdown listen accept };,
services,inetd,inetd_service_domain,allow $1 inetd_t:udp_socket { ioctl read getattr write setattr append bind connect getopt setopt shutdown };,
services,inetd,inetd_use_fds,allow $1 inetd_t:fd use;,
services,inetd,inetd_tcp_connect,allow $1 inetd_t:tcp_socket { connectto recvfrom };,
services,inetd,inetd_tcp_connect,allow inetd_t $1:tcp_socket { acceptfrom recvfrom };,
services,inetd,inetd_domtrans_child,allow $1 inetd_child_t:fd use;,
services,inetd,inetd_domtrans_child,allow inetd_child_t $1:fd use;,
services,inetd,inetd_domtrans_child,allow inetd_child_t $1:fifo_file { getattr read write append ioctl lock };,
services,inetd,inetd_domtrans_child,allow inetd_child_t $1:process sigchld;,
services,inetd,inetd_udp_send,allow $1 inetd_t:udp_socket sendto;,
services,inetd,inetd_udp_send,allow inetd_t $1:udp_socket recvfrom;,
services,inetd,inetd_rw_tcp_sockets,allow $1 inetd_t:tcp_socket { ioctl read getattr write setattr append bind connect getopt setopt shutdown listen accept };,
services,inn,inn_manage_log,allow $1 innd_log_t:dir search;,
services,inn,inn_manage_log,allow $1 innd_log_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
services,inn,inn_manage_pid,allow $1 innd_var_run_t:dir { read getattr lock search ioctl add_name remove_name write };,
services,inn,inn_manage_pid,allow $1 innd_var_run_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
services,inn,inn_manage_pid,allow $1 innd_var_run_t:lnk_file { create read getattr setattr link unlink rename };,
services,inn,inn_read_config,allow $1 innd_etc_t:dir { getattr read search };,
services,inn,inn_read_config,allow $1 innd_etc_t:file { read getattr };,
services,inn,inn_read_config,allow $1 innd_etc_t:lnk_file { getattr read };,
services,inn,inn_read_news_lib,allow $1 innd_var_lib_t:dir { getattr read search };,
services,inn,inn_read_news_lib,allow $1 innd_var_lib_t:file { read getattr };,
services,inn,inn_read_news_lib,allow $1 innd_var_lib_t:lnk_file { getattr read };,
services,inn,inn_read_news_spool,allow $1 news_spool_t:dir { getattr read search };,
services,inn,inn_read_news_spool,allow $1 news_spool_t:file { read getattr };,
services,inn,inn_read_news_spool,allow $1 news_spool_t:lnk_file { getattr read };,
services,inn,inn_dgram_send,allow $1 innd_t:unix_dgram_socket sendto;,
services,kerberos,kerberos_use,allow $1 krb5_conf_t:file { getattr read };,
services,kerberos,kerberos_read_config,allow $1 krb5_conf_t:file { read getattr lock ioctl };,
services,kerberos,kerberos_rw_config,allow $1 krb5_conf_t:file { getattr read write append ioctl lock };,
services,kerberos,kerberos_read_keytab,allow $1 krb5_keytab_t:file { read getattr lock ioctl };,
services,ldap,ldap_list_db,allow $1 slapd_db_t:dir { read getattr lock search ioctl };,
services,ldap,ldap_read_config,allow $1 slapd_etc_t:file { getattr read };,
services,ldap,ldap_use,allow $1 slapd_t:tcp_socket { connectto recvfrom };,
services,ldap,ldap_use,allow slapd_t $1:tcp_socket { acceptfrom recvfrom };,
services,lpd,allow $1_lpr_t self:capability { setuid dac_override net_bind_service chown };,
services,lpd,allow $1_lpr_t self:unix_stream_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown listen accept };,
services,lpd,allow $1_lpr_t self:tcp_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown };,
services,lpd,allow $1_lpr_t self:udp_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown };,
services,lpd,allow $1_lpr_t lpd_var_run_t:dir search;,
services,lpd,allow $1_lpr_t lpd_var_run_t:sock_file write;,
services,lpd,allow $1_lpr_t printer_t:sock_file { getattr read write append ioctl lock };,
services,lpd,allow $1_lpr_t lpd_t:unix_stream_socket connectto;,
services,lpd,allow $1_lpr_t lpd_t:tcp_socket { connectto recvfrom };,
services,lpd,allow lpd_t $1_lpr_t:tcp_socket { acceptfrom recvfrom };,
services,lpd,allow $1_lpr_t lpd_t:process signal;,
services,lpd,allow $1_lpr_t $1_lpr_tmp_t:dir { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir };,
services,lpd,allow $1_lpr_t $1_lpr_tmp_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
services,lpd,allow $1_lpr_t $1_print_spool_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
services,lpd,allow $1_lpr_t print_spool_t:dir { read getattr lock search ioctl add_name remove_name write };,
services,lpd,allow $1_lpr_t print_spool_t:file { getattr read write append ioctl lock };,
services,lpd,allow $1_lpr_t printconf_t:dir { read getattr lock search ioctl };,
services,lpd,allow $1_lpr_t printconf_t:file { read getattr lock ioctl };,
services,lpd,allow $1_lpr_t printconf_t:lnk_file { getattr read };,
services,lpd,allow $2 $1_lpr_t:fd use;,
services,lpd,allow $1_lpr_t $2:fd use;,
services,lpd,allow $1_lpr_t $2:fifo_file { getattr read write append ioctl lock };,
services,lpd,allow $1_lpr_t $2:process sigchld;,
services,lpd,allow $2 $1_lpr_t:process signull;,
services,lpd,allow lpd_t $1_print_spool_t:file { read getattr lock ioctl };,
services,lpd,allow lpd_t $1_print_spool_t:file { getattr link unlink rename };,
services,lpd,lpd_domtrans_checkpc,allow $1 checkpc_t:fd use;,
services,lpd,lpd_domtrans_checkpc,allow checkpc_t $1:fd use;,
services,lpd,lpd_domtrans_checkpc,allow checkpc_t $1:fifo_file { getattr read write append ioctl lock };,
services,lpd,lpd_domtrans_checkpc,allow checkpc_t $1:process sigchld;,
services,lpd,lpd_run_checkpc,allow checkpc_t $3:chr_file { getattr read write ioctl };,
services,lpd,lpd_list_spool,allow $1 print_spool_t:dir { getattr search read lock ioctl };,
services,lpd,lpd_manage_spool,allow $1 print_spool_t:dir { { read getattr lock search ioctl add_name remove_name write } setattr };,
services,lpd,lpd_manage_spool,allow $1 print_spool_t:file { create getattr setattr read write append rename link unlink ioctl lock };,
services,lpd,lpd_read_config,allow $1 printconf_t:dir { getattr search read lock ioctl };,
services,lpd,lpd_read_config,allow $1 printconf_t:file { read getattr lock ioctl };,
services,mailman,allow mailman_$1_t self:{ unix_stream_socket unix_dgram_socket } { create ioctl read getattr write setattr append bind connect getopt setopt shutdown };,
services,mailman,allow mailman_$1_t self:tcp_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown listen accept };,
services,mailman,allow mailman_$1_t self:udp_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown };,
services,mailman,allow mailman_$1_t mailman_data_t:dir { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir };,
services,mailman,allow mailman_$1_t mailman_data_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
services,mailman,allow mailman_$1_t mailman_data_t:lnk_file { create read getattr setattr link unlink rename };,
services,mailman,allow mailman_$1_t mailman_lock_t:dir { read getattr lock search ioctl add_name remove_name write };,
services,mailman,allow mailman_$1_t mailman_lock_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
services,mailman,allow mailman_$1_t mailman_log_t:dir { read getattr lock search ioctl add_name remove_name write };,
services,mailman,allow mailman_$1_t mailman_log_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
services,mailman,allow mailman_$1_t mailman_$1_tmp_t:dir { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir };,
services,mailman,allow mailman_$1_t mailman_$1_tmp_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
services,mailman,mailman_domtrans,allow $1 mailman_mail_t:fd use;,
services,mailman,mailman_domtrans,allow mailman_mail_t $1:fd use;,
services,mailman,mailman_domtrans,allow mailman_mail_t $1:fifo_file { getattr read write append ioctl lock };,
services,mailman,mailman_domtrans,allow mailman_mail_t $1:process sigchld;,
services,mailman,mailman_domtrans_cgi,allow $1 mailman_cgi_t:fd use;,
services,mailman,mailman_domtrans_cgi,allow mailman_cgi_t $1:fd use;,
services,mailman,mailman_domtrans_cgi,allow mailman_cgi_t $1:fifo_file { getattr read write append ioctl lock };,
services,mailman,mailman_domtrans_cgi,allow mailman_cgi_t $1:process sigchld;,
services,mailman,mailman_signal_cgi,allow $1 mailman_cgi_t:process signal;,
services,mailman,mailman_search_data,allow $1 mailman_data_t:dir { getattr search };,
services,mailman,mailman_list_data,allow $1 mailman_data_t:dir { read getattr lock search ioctl };,
services,mailman,mailman_read_data_symlinks,allow $1 mailman_data_t:dir search;,
services,mailman,mailman_read_data_symlinks,allow $1 mailman_data_t:lnk_file read;,
services,mailman,mailman_manage_log,allow $1 mailman_log_t:dir { read getattr lock search ioctl add_name remove_name write };,
services,mailman,mailman_manage_log,allow $1 mailman_log_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
services,mailman,mailman_manage_log,allow $1 mailman_log_t:lnk_file { create read getattr setattr link unlink rename };,
services,mailman,mailman_read_archive,allow $1 mailman_archive_t:dir { getattr search read lock ioctl };,
services,mailman,mailman_read_archive,allow $1 mailman_archive_t:file { read getattr lock ioctl };,
services,mailman,mailman_read_archive,allow $1 mailman_archive_t:lnk_file { getattr read };,
services,mta,mta_stub,allow $1_mail_t self:capability { setuid setgid chown };,
services,mta,mta_stub,allow $1_mail_t self:process { { sigchld sigkill sigstop signull signal } setrlimit };,
services,mta,mta_stub,allow $1_mail_t self:tcp_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown };,
services,mta,mta_stub,allow $1_mail_t sendmail_exec_t:lnk_file { read getattr lock ioctl };,
services,mta,mta_stub,allow $2 sendmail_exec_t:lnk_file { getattr read };,
services,mta,mta_stub,allow $2 $1_mail_t:fd use;,
services,mta,mta_stub,allow $1_mail_t $2:fd use;,
services,mta,mta_stub,allow $1_mail_t $2:fifo_file { getattr read write append ioctl lock };,
services,mta,mta_stub,allow $1_mail_t $2:process sigchld;,
services,mta,mta_stub,allow $2 mailserver_domain:tcp_socket { connectto recvfrom };,
services,mta,mta_stub,allow mailserver_domain $2:tcp_socket { acceptfrom recvfrom };,
services,mta,mta_mailserver_delivery,allow $1 mail_spool_t:dir { read getattr lock search ioctl add_name write };,
services,mta,mta_mailserver_delivery,allow $1 mail_spool_t:file { create ioctl read getattr lock append };,
services,mta,mta_mailserver_delivery,allow $1 mail_spool_t:lnk_file { create read getattr };,
services,mta,mta_send_mail,allow $1 sendmail_exec_t:lnk_file { read getattr lock ioctl };,
services,mta,mta_send_mail,allow $1 system_mail_t:fd use;,
services,mta,mta_send_mail,allow system_mail_t $1:fd use;,
services,mta,mta_send_mail,allow system_mail_t $1:fifo_file { getattr read write append ioctl lock };,
services,mta,mta_send_mail,allow system_mail_t $1:process sigchld;,
services,mta,mta_send_mail,allow mta_user_agent $1:fd use;,
services,mta,mta_send_mail,allow mta_user_agent $1:process sigchld;,
services,mta,mta_send_mail,allow mta_user_agent $1:fifo_file { read write };,
services,mta,mta_read_config,allow $1 etc_mail_t:dir { getattr search read lock ioctl };,
services,mta,mta_read_config,allow $1 etc_mail_t:file { read getattr lock ioctl };,
services,mta,mta_read_config,allow $1 etc_mail_t:lnk_file { getattr read };,
services,mta,mta_read_aliases,allow $1 etc_aliases_t:file { read getattr lock ioctl };,
services,mta,mta_rw_aliases,allow $1 etc_aliases_t:file { { getattr read write append ioctl lock } setattr };,
services,mta,mta_tcp_connect_all_mailservers,allow $1 mailserver_domain:tcp_socket { connectto recvfrom };,
services,mta,mta_tcp_connect_all_mailservers,allow mailserver_domain $1:tcp_socket { acceptfrom recvfrom };,
services,mta,mta_getattr_spool,allow $1 mail_spool_t:dir { read getattr lock search ioctl };,
services,mta,mta_getattr_spool,allow $1 mail_spool_t:lnk_file read;,
services,mta,mta_getattr_spool,allow $1 mail_spool_t:file getattr;,
services,mta,mta_spool_filetrans,allow $1 mail_spool_t:dir { read getattr lock search ioctl add_name remove_name write };,
services,mta,mta_rw_spool,allow $1 mail_spool_t:dir { read getattr lock search ioctl };,
services,mta,mta_rw_spool,allow $1 mail_spool_t:lnk_file { getattr read };,
services,mta,mta_rw_spool,allow $1 mail_spool_t:file { { getattr read write append ioctl lock } setattr };,
services,mta,mta_append_spool,allow $1 mail_spool_t:dir { read getattr lock search ioctl add_name write };,
services,mta,mta_append_spool,allow $1 mail_spool_t:lnk_file { getattr read };,
services,mta,mta_append_spool,allow $1 mail_spool_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
services,mta,mta_delete_spool,allow $1 mail_spool_t:dir { { getattr search read lock ioctl } write remove_name };,
services,mta,mta_delete_spool,allow $1 mail_spool_t:file unlink;,
services,mta,mta_manage_spool,allow $1 mail_spool_t:dir { create getattr setattr read write link unlink rename search add_name remove_name reparent rmdir lock ioctl };,
services,mta,mta_manage_spool,allow $1 mail_spool_t:lnk_file { create read getattr setattr link unlink rename };,
services,mta,mta_manage_spool,allow $1 mail_spool_t:file { create getattr setattr read write append rename link unlink ioctl lock };,
services,mta,mta_manage_queue,allow $1 mqueue_spool_t:dir { read getattr lock search ioctl add_name remove_name write };,
services,mta,mta_manage_queue,allow $1 mqueue_spool_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
services,mta,mta_read_sendmail_bin,allow $1 sendmail_exec_t:file { read getattr lock ioctl };,
services,mta,mta_rw_user_mail_stream_sockets,allow $1 user_mail_domain:unix_stream_socket { ioctl read getattr write setattr append bind connect getopt setopt shutdown };,
services,mysql,mysql_signal,allow $1 mysqld_t:process signal;,
services,mysql,mysql_stream_connect,allow $1 mysqld_var_run_t:dir search;,
services,mysql,mysql_stream_connect,allow $1 mysqld_var_run_t:sock_file write;,
services,mysql,mysql_stream_connect,allow $1 mysqld_t:unix_stream_socket connectto;,
services,mysql,mysql_read_config,allow $1 mysqld_etc_t:dir { getattr read search };,
services,mysql,mysql_read_config,allow $1 mysqld_etc_t:file { read getattr };,
services,mysql,mysql_read_config,allow $1 mysqld_etc_t:lnk_file { getattr read };,
services,mysql,mysql_search_db,allow $1 mysqld_db_t:dir search;,
services,mysql,mysql_rw_db_dirs,allow $1 mysqld_db_t:dir { read getattr lock search ioctl add_name remove_name write };,
services,mysql,mysql_manage_db_dirs,allow $1 mysqld_db_t:dir { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir };,
services,mysql,mysql_rw_db_sockets,allow $1 mysqld_db_t:dir search;,
services,mysql,mysql_rw_db_sockets,allow $1 mysqld_db_t:sock_file { getattr read write append ioctl lock };,
services,mysql,mysql_write_log,allow $1 mysqld_log_t:file { write append setattr ioctl };,
services,networkmanager,networkmanager_rw_udp_sockets,allow $1 NetworkManager_t:udp_socket { read write };,
services,networkmanager,networkmanager_rw_packet_sockets,allow $1 NetworkManager_t:packet_socket { read write };,
services,networkmanager,networkmanager_rw_routing_sockets,allow $1 NetworkManager_t:netlink_route_socket { read write };,
services,networkmanager,networkmanager_dbus_chat,allow $1 NetworkManager_t:dbus send_msg;,
services,networkmanager,networkmanager_dbus_chat,allow NetworkManager_t $1:dbus send_msg;,
services,nis,nis_use_ypbind_uncond,allow $1 self:tcp_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown listen accept };,
services,nis,nis_use_ypbind_uncond,allow $1 self:udp_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown };,
services,nis,nis_use_ypbind_uncond,allow $1 var_yp_t:dir { read getattr lock search ioctl };,
services,nis,nis_use_ypbind_uncond,allow $1 var_yp_t:lnk_file { getattr read };,
services,nis,nis_use_ypbind_uncond,allow $1 var_yp_t:file { read getattr lock ioctl };,
services,nis,nis_domtrans_ypbind,allow $1 ypbind_t:fd use;,
services,nis,nis_domtrans_ypbind,allow ypbind_t $1:fd use;,
services,nis,nis_domtrans_ypbind,allow ypbind_t $1:fifo_file { getattr read write append ioctl lock };,
services,nis,nis_domtrans_ypbind,allow ypbind_t $1:process sigchld;,
services,nis,nis_signal_ypbind,allow $1 ypbind_t:process signal;,
services,nis,nis_list_var_yp,allow $1 var_yp_t:dir { read getattr lock search ioctl };,
services,nis,nis_udp_send_ypbind,allow $1 ypbind_t:udp_socket sendto;,
services,nis,nis_udp_send_ypbind,allow ypbind_t $1:udp_socket recvfrom;,
services,nis,nis_tcp_connect_ypbind,allow $1 ypbind_t:tcp_socket { connectto recvfrom };,
services,nis,nis_tcp_connect_ypbind,allow ypbind_t $1:tcp_socket { acceptfrom recvfrom };,
services,nis,nis_read_ypbind_pid,allow $1 ypbind_var_run_t:file { read getattr lock ioctl };,
services,nis,nis_delete_ypbind_pid,allow $1 ypbind_t:file unlink;,
services,nis,nis_read_ypserv_config,allow $1 ypserv_conf_t:file { getattr read };,
services,nscd,nscd_domtrans,allow $1 nscd_t:fd use;,
services,nscd,nscd_domtrans,allow nscd_t $1:fd use;,
services,nscd,nscd_domtrans,allow nscd_t $1:fifo_file { getattr read write append ioctl lock };,
services,nscd,nscd_domtrans,allow nscd_t $1:process sigchld;,
services,nscd,nscd_socket_use,allow $1 self:unix_stream_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown };,
services,nscd,nscd_socket_use,allow $1 nscd_t:unix_stream_socket connectto;,
services,nscd,nscd_socket_use,allow $1 nscd_t:nscd { getpwd getgrp gethost };,
services,nscd,nscd_socket_use,allow $1 nscd_var_run_t:sock_file { getattr read write append ioctl lock };,
services,nscd,nscd_shm_use,allow $1 nscd_var_run_t:dir { read getattr lock search ioctl };,
services,nscd,nscd_shm_use,allow $1 nscd_t:nscd { shmempwd shmemgrp shmemhost };,
services,nscd,nscd_shm_use,allow $1 nscd_t:fd use;,
services,nscd,nscd_shm_use,allow $1 self:unix_stream_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown listen accept };,
services,nscd,nscd_shm_use,allow $1 nscd_t:unix_stream_socket connectto;,
services,nscd,nscd_shm_use,allow $1 nscd_var_run_t:sock_file { getattr read write append ioctl lock };,
services,nscd,nscd_shm_use,allow $1 nscd_t:nscd { getpwd getgrp gethost };,
services,nscd,nscd_read_pid,allow $1 nscd_var_run_t:dir search;,
services,nscd,nscd_read_pid,allow $1 nscd_var_run_t:file { getattr read };,
services,nscd,nscd_unconfined,allow $1 nscd_t:nscd *;,
services,ntp,ntp_domtrans,allow $1 ntpd_t:fd use;,
services,ntp,ntp_domtrans,allow ntpd_t $1:fd use;,
services,ntp,ntp_domtrans,allow ntpd_t $1:fifo_file { getattr read write append ioctl lock };,
services,ntp,ntp_domtrans,allow ntpd_t $1:process sigchld;,
services,ntp,ntp_domtrans_ntpdate,allow $1 ntpd_t:fd use;,
services,ntp,ntp_domtrans_ntpdate,allow ntpd_t $1:fd use;,
services,ntp,ntp_domtrans_ntpdate,allow ntpd_t $1:fifo_file { getattr read write append ioctl lock };,
services,ntp,ntp_domtrans_ntpdate,allow ntpd_t $1:process sigchld;,
services,portmap,portmap_domtrans_helper,allow $1 portmap_helper_t:fd use;,
services,portmap,portmap_domtrans_helper,allow portmap_helper_t $1:fd use;,
services,portmap,portmap_domtrans_helper,allow portmap_helper_t $1:fifo_file { getattr read write append ioctl lock };,
services,portmap,portmap_domtrans_helper,allow portmap_helper_t $1:process sigchld;,
services,portmap,portmap_run_helper,allow portmap_helper_t $3:chr_file { getattr read write ioctl };,
services,portmap,portmap_run_helper,allow $1 portmap_t:udp_socket sendto;,
services,portmap,portmap_run_helper,allow portmap_t $1:udp_socket recvfrom;,
services,portmap,portmap_run_helper,allow portmap_t $1:udp_socket sendto;,
services,portmap,portmap_run_helper,allow $1 portmap_t:udp_socket recvfrom;,
services,portmap,portmap_udp_send,allow $1 portmap_t:udp_socket sendto;,
services,portmap,portmap_udp_send,allow portmap_t $1:udp_socket recvfrom;,
services,portmap,portmap_udp_chat,allow $1 portmap_t:udp_socket sendto;,
services,portmap,portmap_udp_chat,allow portmap_t $1:udp_socket recvfrom;,
services,portmap,portmap_udp_chat,allow portmap_t $1:udp_socket sendto;,
services,portmap,portmap_udp_chat,allow $1 portmap_t:udp_socket recvfrom;,
services,portmap,portmap_tcp_connect,allow $1 portmap_t:tcp_socket { connectto recvfrom };,
services,portmap,portmap_tcp_connect,allow portmap_t $1:tcp_socket { acceptfrom recvfrom };,
services,postfix,postfix_stub,allow postfix_$1_t self:process { { sigchld sigkill sigstop signull signal } setpgid };,
services,postfix,postfix_stub,allow postfix_$1_t self:unix_dgram_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown };,
services,postfix,postfix_stub,allow postfix_$1_t self:unix_stream_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown listen accept };,
services,postfix,postfix_stub,allow postfix_$1_t self:unix_stream_socket connectto;,
services,postfix,postfix_stub,allow postfix_master_t postfix_$1_t:process signal;,
services,postfix,postfix_stub,allow postfix_$1_t postfix_etc_t:dir { read getattr lock search ioctl };,
services,postfix,postfix_stub,allow postfix_$1_t postfix_etc_t:file { read getattr lock ioctl };,
services,postfix,postfix_stub,allow postfix_$1_t postfix_exec_t:file r{ getattr execute };,
services,postfix,postfix_stub,allow postfix_$1_t postfix_exec_t:dir { read getattr lock search ioctl };,
services,postfix,postfix_stub,allow postfix_$1_t postfix_master_t:process sigchld;,
services,postfix,postfix_stub,allow postfix_$1_t postfix_spool_t:dir { read getattr lock search ioctl };,
services,postfix,postfix_stub,allow postfix_$1_t postfix_var_run_t:file { create getattr setattr read write append rename link unlink ioctl lock };,
services,postfix,postfix_stub,allow postfix_$1_t self:capability { setuid setgid dac_override };,
services,postfix,postfix_stub,allow postfix_$1_t postfix_master_t:unix_stream_socket { connectto { ioctl read getattr write setattr append bind connect getopt setopt shutdown listen accept } };,
services,postfix,postfix_stub,allow postfix_$1_t self:tcp_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown };,
services,postfix,postfix_stub,allow postfix_$1_t self:udp_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown };,
services,postfix,postfix_stub,allow postfix_master_t postfix_$1_t:fd use;,
services,postfix,postfix_stub,allow postfix_$1_t postfix_master_t:fd use;,
services,postfix,postfix_stub,allow postfix_$1_t postfix_master_t:fifo_file { getattr read write append ioctl lock };,
services,postfix,postfix_stub,allow postfix_$1_t postfix_master_t:process sigchld;,
services,postfix,postfix_stub,allow postfix_$1_t self:capability dac_override;,
services,postfix,postfix_stub,allow postfix_user_domtrans postfix_$1_t:fd use;,
services,postfix,postfix_stub,allow postfix_$1_t postfix_user_domtrans:fd use;,
services,postfix,postfix_stub,allow postfix_$1_t postfix_user_domtrans:fifo_file { getattr read write append ioctl lock };,
services,postfix,postfix_stub,allow postfix_$1_t postfix_user_domtrans:process sigchld;,
services,postfix,postfix_stub,allow postfix_user_domains $2:process sigchld;,
services,postfix,postfix_stub,allow postfix_user_domains $2:fifo_file { write getattr };,
services,postfix,postfix_stub,allow postfix_user_domains $2:fd use;,
services,postfix,postfix_stub,allow postfix_$1_t postfix_public_t:dir search;,
services,postfix,postfix_read_config,allow $1 postfix_etc_t:dir { getattr read search };,
services,postfix,postfix_read_config,allow $1 postfix_etc_t:file { read getattr };,
services,postfix,postfix_read_config,allow $1 postfix_etc_t:lnk_file { getattr read };,
services,postfix,postfix_config_filetrans,allow $1 postfix_etc_t:dir { read getattr lock search ioctl add_name remove_name write };,
services,postfix,postfix_domtrans_map,allow $1 postfix_map_t:fd use;,
services,postfix,postfix_domtrans_map,allow postfix_map_t $1:fd use;,
services,postfix,postfix_domtrans_map,allow postfix_map_t $1:fifo_file { getattr read write append ioctl lock };,
services,postfix,postfix_domtrans_map,allow postfix_map_t $1:process sigchld;,
services,postfix,postfix_run_map,allow postfix_map_t $3:chr_file { getattr read write ioctl };,
services,postfix,postfix_domtrans_master,allow $1 postfix_master_t:fd use;,
services,postfix,postfix_domtrans_master,allow postfix_master_t $1:fd use;,
services,postfix,postfix_domtrans_master,allow postfix_master_t $1:fifo_file { getattr read write append ioctl lock };,
services,postfix,postfix_domtrans_master,allow postfix_master_t $1:process sigchld;,
services,postfix,postfix_search_spool,allow $1 postfix_spool_t:dir { getattr search };,
services,postfix,postfix_list_spool,allow $1 postfix_spool_t:dir { getattr search read lock ioctl };,
services,postgresql,postgresql_search_db,allow $1 postgresql_db_t:dir search;,
services,postgresql,postgresql_manage_db,allow $1 postgresql_db_t:dir { read getattr lock search ioctl add_name remove_name write };,
services,postgresql,postgresql_manage_db,allow $1 postgresql_db_t:file { getattr read write append ioctl lock };,
services,postgresql,postgresql_manage_db,allow $1 postgresql_db_t:lnk_file { getattr read };,
services,postgresql,postgresql_domtrans,allow $1 postgresql_t:fd use;,
services,postgresql,postgresql_domtrans,allow postgresql_t $1:fd use;,
services,postgresql,postgresql_domtrans,allow postgresql_t $1:fifo_file { getattr read write append ioctl lock };,
services,postgresql,postgresql_domtrans,allow postgresql_t $1:process sigchld;,
services,postgresql,postgresql_read_config,allow $1 postgresql_etc_t:dir { getattr read search };,
services,postgresql,postgresql_read_config,allow $1 postgresql_etc_t:file { read getattr };,
services,postgresql,postgresql_read_config,allow $1 postgresql_etc_t:lnk_file { getattr read };,
services,postgresql,postgresql_tcp_connect,allow $1 postgresql_t:tcp_socket { connectto recvfrom };,
services,postgresql,postgresql_tcp_connect,allow postgresql_t $1:tcp_socket { acceptfrom recvfrom };,
services,postgresql,postgresql_stream_connect,allow $1 postgresql_t:unix_stream_socket connectto;,
services,postgresql,postgresql_stream_connect,allow $1 postgresql_var_run_t:sock_file write;,
services,ppp,ppp_use_fds,allow $1 pppd_t:fd use;,
services,ppp,ppp_sigchld,allow $1 pppd_t:process sigchld;,
services,ppp,ppp_signal,allow $1 pppd_t:process signal;,
services,ppp,ppp_domtrans,allow $1 pppd_t:fd use;,
services,ppp,ppp_domtrans,allow pppd_t $1:fd use;,
services,ppp,ppp_domtrans,allow pppd_t $1:fifo_file { getattr read write append ioctl lock };,
services,ppp,ppp_domtrans,allow pppd_t $1:process sigchld;,
services,ppp,ppp_run,allow pppd_t $3:chr_file { getattr read write ioctl };,
services,procmail,procmail_domtrans,allow $1 procmail_t:fd use;,
services,procmail,procmail_domtrans,allow procmail_t $1:fd use;,
services,procmail,procmail_domtrans,allow procmail_t $1:fifo_file { getattr read write append ioctl lock };,
services,procmail,procmail_domtrans,allow procmail_t $1:process sigchld;,
services,radius,radius_use,allow $1 radiusd_t:udp_socket sendto;,
services,radius,radius_use,allow radiusd_t $1:udp_socket recvfrom;,
services,radius,radius_use,allow radiusd_t $1:udp_socket sendto;,
services,radius,radius_use,allow $1 radiusd_t:udp_socket recvfrom;,
services,rlogin,rlogin_domtrans,allow $1 rlogind_t:fd use;,
services,rlogin,rlogin_domtrans,allow rlogind_t $1:fd use;,
services,rlogin,rlogin_domtrans,allow rlogind_t $1:fifo_file { getattr read write append ioctl lock };,
services,rlogin,rlogin_domtrans,allow rlogind_t $1:process sigchld;,
services,rpc,allow $1_t self:capability net_bind_service;,
services,rpc,allow $1_t self:process { sigchld sigkill sigstop signull signal };,
services,rpc,allow $1_t self:unix_dgram_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown };,
services,rpc,allow $1_t self:unix_stream_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown listen accept };,
services,rpc,allow $1_t self:netlink_route_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown nlmsg_read };,
services,rpc,allow $1_t self:tcp_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown listen accept };,
services,rpc,allow $1_t self:udp_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown };,
services,rpc,allow $1_t var_lib_nfs_t:dir { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir };,
services,rpc,allow $1_t var_lib_nfs_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
services,rpc,rpc_udp_send,allow $1 rpc_t:udp_socket sendto;,
services,rpc,rpc_udp_send,allow rpc_t $1:udp_socket recvfrom;,
services,rpc,rpc_read_exports,allow $1 exports_t:file { read getattr lock ioctl };,
services,rpc,rpc_write_exports,allow $1 exports_t:file write;,
services,rpc,rpc_domtrans_nfsd,allow $1 nfsd_t:fd use;,
services,rpc,rpc_domtrans_nfsd,allow nfsd_t $1:fd use;,
services,rpc,rpc_domtrans_nfsd,allow nfsd_t $1:fifo_file { getattr read write append ioctl lock };,
services,rpc,rpc_domtrans_nfsd,allow nfsd_t $1:process sigchld;,
services,rpc,rpc_manage_nfs_rw_content,allow $1 nfsd_rw_t:dir { create getattr setattr read write link unlink rename search add_name remove_name reparent rmdir lock ioctl };,
services,rpc,rpc_manage_nfs_rw_content,allow $1 nfsd_rw_t:file { create getattr setattr read write append rename link unlink ioctl lock };,
services,rpc,rpc_manage_nfs_rw_content,allow $1 nfsd_rw_t:lnk_file { create read getattr setattr link unlink rename };,
services,rpc,rpc_manage_nfs_ro_content,allow $1 nfsd_ro_t:dir { create getattr setattr read write link unlink rename search add_name remove_name reparent rmdir lock ioctl };,
services,rpc,rpc_manage_nfs_ro_content,allow $1 nfsd_ro_t:file { create getattr setattr read write append rename link unlink ioctl lock };,
services,rpc,rpc_manage_nfs_ro_content,allow $1 nfsd_ro_t:lnk_file { create read getattr setattr link unlink rename };,
services,rpc,rpc_udp_rw_nfs_sockets,allow $1 nfsd_t:udp_socket { ioctl read getattr write setattr append bind connect getopt setopt shutdown };,
services,rpc,rpc_udp_send_nfs,allow $1 nfsd_t:udp_socket sendto;,
services,rpc,rpc_udp_send_nfs,allow nfsd_t $1:udp_socket recvfrom;,
services,rpc,rpc_search_nfs_state_data,allow $1 var_lib_nfs_t:dir search;,
services,rshd,rshd_domtrans,allow $1 rshd_t:fd use;,
services,rshd,rshd_domtrans,allow rshd_t $1:fd use;,
services,rshd,rshd_domtrans,allow rshd_t $1:fifo_file { getattr read write append ioctl lock };,
services,rshd,rshd_domtrans,allow rshd_t $1:process sigchld;,
services,samba,samba_domtrans_net,allow $1 samba_net_t:fd use;,
services,samba,samba_domtrans_net,allow samba_net_t $1:fd use;,
services,samba,samba_domtrans_net,allow samba_net_t $1:fifo_file { getattr read write append ioctl lock };,
services,samba,samba_domtrans_net,allow samba_net_t $1:process sigchld;,
services,samba,samba_run_net,allow samba_net_t $3:chr_file { getattr read write ioctl };,
services,samba,samba_domtrans_smbmount,allow $1 smbmount_t:fd use;,
services,samba,samba_domtrans_smbmount,allow smbmount_t $1:fd use;,
services,samba,samba_domtrans_smbmount,allow smbmount_t $1:fifo_file { getattr read write append ioctl lock };,
services,samba,samba_domtrans_smbmount,allow smbmount_t $1:process sigchld;,
services,samba,samba_read_config,allow $1 samba_etc_t:file { read getattr lock };,
services,samba,samba_rw_config,allow $1 samba_etc_t:file { getattr read write append ioctl lock };,
services,samba,samba_read_log,allow $1 samba_log_t:dir { read getattr lock search ioctl };,
services,samba,samba_read_log,allow $1 samba_log_t:file { read getattr lock };,
services,samba,samba_read_secrets,allow $1 samba_secrets_t:file { read getattr lock };,
services,samba,samba_search_var,allow $1 samba_var_t:dir { getattr search };,
services,samba,samba_rw_var_files,allow $1 samba_var_t:dir { getattr search };,
services,samba,samba_rw_var_files,allow $1 samba_var_t:file { getattr read write append ioctl lock };,
services,samba,samba_write_smbmount_tcp_sockets,allow $1 smbmount_t:tcp_socket write;,
services,samba,samba_rw_smbmount_tcp_sockets,allow $1 smbmount_t:tcp_socket { read write };,
services,samba,samba_domtrans_winbind_helper,allow $1 winbind_helper_t:fd use;,
services,samba,samba_domtrans_winbind_helper,allow winbind_helper_t $1:fd use;,
services,samba,samba_domtrans_winbind_helper,allow winbind_helper_t $1:fifo_file { getattr read write append ioctl lock };,
services,samba,samba_domtrans_winbind_helper,allow winbind_helper_t $1:process sigchld;,
services,samba,samba_run_winbind_helper,allow winbind_helper_t $3:chr_file { getattr read write ioctl };,
services,samba,samba_read_winbind_pid,allow $1 winbind_var_run_t:file { read getattr lock ioctl };,
services,samba,samba_stream_connect_winbind,allow $1 samba_var_t:dir { getattr search };,
services,samba,samba_stream_connect_winbind,allow $1 winbind_var_run_t:dir { getattr search };,
services,samba,samba_stream_connect_winbind,allow $1 winbind_var_run_t:sock_file { getattr read write };,
services,samba,samba_stream_connect_winbind,allow $1 winbind_t:unix_stream_socket connectto;,
services,sasl,sasl_connect,allow $1 saslauthd_var_run_t:dir search;,
services,sasl,sasl_connect,allow $1 saslauthd_var_run_t:sock_file { read write };,
services,sasl,sasl_connect,allow $1 saslauthd_t:unix_stream_socket connectto;,
services,sendmail,sendmail_domtrans,allow $1 sendmail_t:fd use;,
services,sendmail,sendmail_domtrans,allow sendmail_t $1:fd use;,
services,sendmail,sendmail_domtrans,allow sendmail_t $1:fifo_file { getattr read write append ioctl lock };,
services,sendmail,sendmail_domtrans,allow sendmail_t $1:process sigchld;,
services,sendmail,sendmail_rw_tcp_sockets,allow $1 sendmail_t:tcp_socket { read write };,
services,sendmail,sendmail_rw_unix_stream_sockets,allow $1 sendmail_t:unix_stream_socket { read write };,
services,sendmail,sendmail_manage_log,allow $1 sendmail_log_t:file { create getattr setattr read write append rename link unlink ioctl lock };,
services,slrnpull,slrnpull_search_spool,allow $1 slrnpull_spool_t:dir { getattr search };,
services,slrnpull,slrnpull_manage_spool,allow $1 slrnpull_spool_t:dir { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir };,
services,slrnpull,slrnpull_manage_spool,allow $1 slrnpull_spool_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
services,slrnpull,slrnpull_manage_spool,allow $1 slrnpull_spool_t:lnk_file { create read getattr setattr link unlink rename };,
services,smartmon,smartmon_read_tmp_files,allow $1 fsdaemon_tmp_t:file { getattr ioctl read };,
services,snmp,snmp_tcp_connect,allow $1 snmpd_t:tcp_socket { connectto recvfrom };,
services,snmp,snmp_tcp_connect,allow snmpd_t $1:tcp_socket { acceptfrom recvfrom };,
services,snmp,snmp_udp_chat,allow $1 snmpd_t:udp_socket { sendto recvfrom };,
services,snmp,snmp_udp_chat,allow snmpd_t $1:udp_socket { sendto recvfrom };,
services,snmp,snmp_read_snmp_var_lib_files,allow $1 snmpd_var_lib_t:dir { read getattr lock search ioctl };,
services,snmp,snmp_read_snmp_var_lib_files,allow $1 snmpd_var_lib_t:file { read getattr lock ioctl };,
services,snmp,snmp_read_snmp_var_lib_files,allow $1 snmpd_var_lib_t:lnk_file { getattr read };,
services,spamassassin,allow $1_spamc_t self:process ~{ ptrace setcurrent setexec setfscreate setrlimit execmem execstack execheap };,
services,spamassassin,allow $1_spamc_t self:fd use;,
services,spamassassin,allow $1_spamc_t self:fifo_file { getattr read write append ioctl lock };,
services,spamassassin,allow $1_spamc_t self:sock_file { read getattr lock ioctl };,
services,spamassassin,allow $1_spamc_t self:shm { associate getattr setattr create destroy read write lock unix_read unix_write };,
services,spamassassin,allow $1_spamc_t self:sem { associate getattr setattr create destroy read write unix_read unix_write };,
services,spamassassin,allow $1_spamc_t self:msgq { associate getattr setattr create destroy read write enqueue unix_read unix_write };,
services,spamassassin,allow $1_spamc_t self:msg { send receive };,
services,spamassassin,allow $1_spamc_t self:unix_dgram_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown };,
services,spamassassin,allow $1_spamc_t self:unix_stream_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown listen accept };,
services,spamassassin,allow $1_spamc_t self:unix_dgram_socket sendto;,
services,spamassassin,allow $1_spamc_t self:unix_stream_socket connectto;,
services,spamassassin,allow $1_spamc_t self:tcp_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown listen accept };,
services,spamassassin,allow $1_spamc_t self:udp_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown };,
services,spamassassin,allow $1_spamc_t $1_spamc_tmp_t:dir { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir };,
services,spamassassin,allow $1_spamc_t $1_spamc_tmp_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
services,spamassassin,allow $1_spamc_t spamd_t:tcp_socket { connectto recvfrom };,
services,spamassassin,allow spamd_t $1_spamc_t:tcp_socket { acceptfrom recvfrom };,
services,spamassassin,allow $1_spamc_t spamd_t:unix_stream_socket connectto;,
services,spamassassin,allow $1_spamc_t spamd_tmp_t:sock_file { getattr read write append ioctl lock };,
services,spamassassin,allow $2 $1_spamc_t:fd use;,
services,spamassassin,allow $1_spamc_t $2:fd use;,
services,spamassassin,allow $1_spamc_t $2:fifo_file { getattr read write append ioctl lock };,
services,spamassassin,allow $1_spamc_t $2:process sigchld;,
services,spamassassin,allow $1_spamassassin_t self:process ~{ ptrace setcurrent setexec setfscreate setrlimit execmem execstack execheap };,
services,spamassassin,allow $1_spamassassin_t self:fd use;,
services,spamassassin,allow $1_spamassassin_t self:fifo_file { getattr read write append ioctl lock };,
services,spamassassin,allow $1_spamassassin_t self:sock_file { read getattr lock ioctl };,
services,spamassassin,allow $1_spamassassin_t self:unix_dgram_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown };,
services,spamassassin,allow $1_spamassassin_t self:unix_stream_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown listen accept };,
services,spamassassin,allow $1_spamassassin_t self:unix_dgram_socket sendto;,
services,spamassassin,allow $1_spamassassin_t self:unix_stream_socket connectto;,
services,spamassassin,allow $1_spamassassin_t self:shm { associate getattr setattr create destroy read write lock unix_read unix_write };,
services,spamassassin,allow $1_spamassassin_t self:sem { associate getattr setattr create destroy read write unix_read unix_write };,
services,spamassassin,allow $1_spamassassin_t self:msgq { associate getattr setattr create destroy read write enqueue unix_read unix_write };,
services,spamassassin,allow $1_spamassassin_t self:msg { send receive };,
services,spamassassin,allow $1_spamassassin_t $1_spamassassin_home_t:dir { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir };,
services,spamassassin,allow $1_spamassassin_t $1_spamassassin_home_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
services,spamassassin,allow $1_spamassassin_t $1_spamassassin_home_t:lnk_file { create read getattr setattr link unlink rename };,
services,spamassassin,allow $1_spamassassin_t $1_spamassassin_home_t:sock_file { create ioctl read getattr lock write setattr append link unlink rename };,
services,spamassassin,allow $1_spamassassin_t $1_spamassassin_home_t:fifo_file { create ioctl read getattr lock write setattr append link unlink rename };,
services,spamassassin,allow $1_spamassassin_t $1_spamassassin_tmp_t:dir { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir };,
services,spamassassin,allow $1_spamassassin_t $1_spamassassin_tmp_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
services,spamassassin,allow $2 $1_spamassassin_home_t:dir { { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir } relabelfrom relabelto };,
services,spamassassin,allow $2 $1_spamassassin_home_t:file { { create ioctl read getattr lock write setattr append link unlink rename } relabelfrom relabelto };,
services,spamassassin,allow $2 $1_spamassassin_home_t:lnk_file { { create read getattr setattr link unlink rename } relabelfrom relabelto };,
services,spamassassin,allow $2 $1_spamassassin_t:fd use;,
services,spamassassin,allow $1_spamassassin_t $2:fd use;,
services,spamassassin,allow $1_spamassassin_t $2:fifo_file { getattr read write append ioctl lock };,
services,spamassassin,allow $1_spamassassin_t $2:process sigchld;,
services,spamassassin,allow spamd_t $1_spamassassin_home_t:dir { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir };,
services,spamassassin,allow spamd_t $1_spamassassin_home_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
services,spamassassin,allow spamd_t $1_spamassassin_home_t:lnk_file { create read getattr setattr link unlink rename };,
services,spamassassin,allow spamd_t $1_spamassassin_home_t:sock_file { create ioctl read getattr lock write setattr append link unlink rename };,
services,spamassassin,allow spamd_t $1_spamassassin_home_t:fifo_file { create ioctl read getattr lock write setattr append link unlink rename };,
services,spamassassin,allow $1_spamassassin_t lib_t:file r{ getattr execute };,
services,squid,squid_domtrans,allow $1 squid_t:fd use;,
services,squid,squid_domtrans,allow squid_t $1:fd use;,
services,squid,squid_domtrans,allow squid_t $1:fifo_file { getattr read write append ioctl lock };,
services,squid,squid_domtrans,allow squid_t $1:process sigchld;,
services,squid,squid_read_config,allow $1 squid_conf_t:file { read getattr lock ioctl };,
services,squid,squid_read_log,allow $1 squid_log_t:dir { getattr search };,
services,squid,squid_read_log,allow $1 squid_log_t:file { read getattr lock ioctl };,
services,squid,squid_append_log,allow $1 squid_log_t:dir { getattr search };,
services,squid,squid_append_log,allow $1 squid_log_t:file { getattr append };,
services,squid,squid_manage_logs,allow $1 squid_log_t:dir { read getattr lock search ioctl add_name remove_name write };,
services,squid,squid_manage_logs,allow $1 squid_log_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
services,squid,squid_use,allow $1 squid_t:tcp_socket { connectto recvfrom };,
services,squid,squid_use,allow squid_t $1:tcp_socket { acceptfrom recvfrom };,
services,ssh,allow $1_ssh_t self:capability { setuid setgid dac_override dac_read_search };,
services,ssh,allow $1_ssh_t self:process ~{ ptrace setcurrent setexec setfscreate setrlimit execmem execstack execheap };,
services,ssh,allow $1_ssh_t self:fd use;,
services,ssh,allow $1_ssh_t self:fifo_file { read getattr lock ioctl write append };,
services,ssh,allow $1_ssh_t self:unix_dgram_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown };,
services,ssh,allow $1_ssh_t self:unix_stream_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown listen accept };,
services,ssh,allow $1_ssh_t self:unix_dgram_socket sendto;,
services,ssh,allow $1_ssh_t self:unix_stream_socket connectto;,
services,ssh,allow $1_ssh_t self:shm { associate getattr setattr create destroy read write lock unix_read unix_write };,
services,ssh,allow $1_ssh_t self:sem { associate getattr setattr create destroy read write unix_read unix_write };,
services,ssh,allow $1_ssh_t self:msgq { associate getattr setattr create destroy read write enqueue unix_read unix_write };,
services,ssh,allow $1_ssh_t self:msg { send receive };,
services,ssh,allow $1_ssh_t self:tcp_socket { create connect ioctl read getattr write setattr append bind getopt setopt shutdown };,
services,ssh,allow $1_ssh_t $1_ssh_tmpfs_t:dir { read getattr lock search ioctl add_name remove_name write };,
services,ssh,allow $1_ssh_t $1_ssh_tmpfs_t:file { create getattr setattr read write append rename link unlink ioctl lock };,
services,ssh,allow $1_ssh_t $1_ssh_tmpfs_t:lnk_file { create read getattr setattr link unlink rename };,
services,ssh,allow $1_ssh_t $1_ssh_tmpfs_t:sock_file { create getattr setattr read write append rename link unlink ioctl lock };,
services,ssh,allow $1_ssh_t $1_ssh_tmpfs_t:fifo_file { create getattr setattr read write append rename link unlink ioctl lock };,
services,ssh,allow $2 $1_ssh_t:fd use;,
services,ssh,allow $1_ssh_t $2:fd use;,
services,ssh,allow $1_ssh_t $2:fifo_file { getattr read write append ioctl lock };,
services,ssh,allow $1_ssh_t $2:process sigchld;,
services,ssh,allow $1_ssh_t sshd_key_t:file { read getattr lock ioctl };,
services,ssh,allow $1_ssh_t sshd_tmp_t:dir { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir };,
services,ssh,allow $1_ssh_t sshd_tmp_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
services,ssh,allow $1_ssh_t $2:unix_stream_socket { ioctl read getattr write setattr append bind connect getopt setopt shutdown };,
services,ssh,allow $1_ssh_t $2:unix_stream_socket connectto;,
services,ssh,allow $2 $1_home_ssh_t:dir { read getattr lock search ioctl add_name remove_name write };,
services,ssh,allow $2 $1_home_ssh_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
services,ssh,allow $2 $1_home_ssh_t:lnk_file { create read getattr setattr link unlink rename };,
services,ssh,allow $2 $1_home_ssh_t:sock_file { create ioctl read getattr lock write setattr append link unlink rename };,
services,ssh,allow $2 sshd_t:unix_stream_socket { ioctl read getattr write setattr append bind connect getopt setopt shutdown listen accept };,
services,ssh,allow $1_ssh_t $1_home_ssh_t:dir { read getattr lock search ioctl };,
services,ssh,allow $1_ssh_t $1_home_ssh_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
services,ssh,allow $1_ssh_t $1_home_ssh_t:lnk_file { getattr read };,
services,ssh,allow ssh_server $1_home_ssh_t:dir { read getattr lock search ioctl };,
services,ssh,allow ssh_server $1_home_ssh_t:lnk_file { read getattr lock ioctl };,
services,ssh,allow ssh_server $1_home_ssh_t:file { read getattr lock ioctl };,
services,ssh,allow $1_ssh_t var_run_t:dir { read getattr lock search ioctl };,
services,ssh,allow $1_ssh_t var_run_t:{ file lnk_file } { read getattr lock ioctl };,
services,ssh,allow $1_ssh_t $1_tmp_t:dir { read getattr lock search ioctl };,
services,ssh,allow sysadm_ssh_t $1_home_ssh_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
services,ssh,allow sysadm_ssh_t $1_home_ssh_t:lnk_file { getattr read };,
services,ssh,allow $1_ssh_keysign_t sshd_key_t:file { getattr read };,
services,ssh,allow $1_ssh_keysign_t self:capability { setgid setuid };,
services,ssh,allow $1_ssh_keysign_t urandom_device_t:chr_file { read getattr lock ioctl };,
services,ssh,allow $1_ssh_keysign_t usr_t:dir search;,
services,ssh,allow $1_ssh_keysign_t etc_t:file { getattr read };,
services,ssh,allow $1_ssh_keysign_t self:dir search;,
services,ssh,allow $1_ssh_keysign_t self:file { getattr read };,
services,ssh,allow $1_ssh_keysign_t self:unix_stream_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown };,
services,ssh,allow $1_ssh_agent_t self:process setrlimit;,
services,ssh,allow $1_ssh_agent_t self:capability setgid;,
services,ssh,allow $1_ssh_agent_t { $1_ssh_agent_t $2 }:process signull;,
services,ssh,allow $1_ssh_agent_t self:unix_stream_socket { connectto { ioctl read getattr write setattr append bind connect getopt setopt shutdown } };,
services,ssh,allow $1_ssh_t $1_ssh_agent_t:unix_stream_socket connectto;,
services,ssh,allow $2 $1_ssh_agent_t:unix_stream_socket connectto;,
services,ssh,allow $2 $1_ssh_agent_t:process signal;,
services,ssh,allow $1_ssh_agent_t $2:fd use;,
services,ssh,allow $2 $1_ssh_agent_t:fd use;,
services,ssh,allow $2 $1_ssh_agent_t:fifo_file { getattr read write append ioctl lock };,
services,ssh,allow $2 $1_ssh_agent_t:process sigchld;,
services,ssh,allow $1_ssh_t sshd_t:unix_stream_socket connectto;,
services,ssh,allow $2 $1_ssh_agent_t:fd use;,
services,ssh,allow $1_ssh_agent_t $2:fd use;,
services,ssh,allow $1_ssh_agent_t $2:fifo_file { getattr read write append ioctl lock };,
services,ssh,allow $1_ssh_agent_t $2:process sigchld;,
services,ssh,allow $1_ssh_agent_t $1_tmp_t:dir { read getattr lock search ioctl };,
services,ssh,allow $1_ssh_agent_t $1_home_dir_t:dir search;,
services,ssh,allow $1_ssh_t $1_tmp_t:sock_file write;,
services,ssh,allow $1_ssh_agent_t $1_home_t:file { getattr read write append ioctl lock };,
services,ssh,allow $1_ssh_agent_t $1_tmp_t:file { getattr read write append ioctl lock };,
services,ssh,allow $1_ssh_t $1_tmp_t:sock_file write;,
services,ssh,allow $1_ssh_t $2:unix_stream_socket connectto;,
services,ssh,allow $1_t self:capability { kill sys_chroot sys_resource chown dac_override fowner fsetid setgid setuid sys_tty_config };,
services,ssh,allow $1_t self:fifo_file { getattr read write append ioctl lock };,
services,ssh,allow $1_t self:process { signal setsched setrlimit setexec };,
services,ssh,allow $1_t self:tcp_socket { listen accept create connect ioctl read getattr write setattr append bind getopt setopt shutdown };,
services,ssh,allow $1_t self:udp_socket { connect create ioctl read getattr write setattr append bind getopt setopt shutdown };,
services,ssh,allow $1_t $1_devpts_t:chr_file { { getattr read write append ioctl lock } setattr getattr relabelfrom };,
services,ssh,allow $1_t $1_var_run_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
services,ssh,allow $1_t sshd_key_t:file { getattr read };,
services,ssh,ssh_sigchld,allow $1 sshd_t:process sigchld;,
services,ssh,ssh_read_pipes,allow $1 sshd_t:fifo_file { getattr read };,
services,ssh,ssh_tcp_connect,allow $1 sshd_t:tcp_socket { connectto recvfrom };,
services,ssh,ssh_tcp_connect,allow sshd_t $1:tcp_socket { acceptfrom recvfrom };,
services,sysstat,sysstat_manage_log,allow $1 sysstat_log_t:dir { read getattr lock search ioctl add_name remove_name write };,
services,sysstat,sysstat_manage_log,allow $1 sysstat_log_t:file { create getattr setattr read write append rename link unlink ioctl lock };,
services,tcpd,tcpd_domtrans,allow $1 tcpd_t:fd use;,
services,tcpd,tcpd_domtrans,allow tcpd_t $1:fd use;,
services,tcpd,tcpd_domtrans,allow tcpd_t $1:fifo_file { getattr read write append ioctl lock };,
services,tcpd,tcpd_domtrans,allow tcpd_t $1:process sigchld;,
services,ucspitcp,ucspitcp_service_domain',allow $1 ucspitcp_t:fd use;,
services,ucspitcp,ucspitcp_service_domain',allow $1 ucspitcp_t:process sigchld;,
services,ucspitcp,ucspitcp_service_domain',allow $1 ucspitcp_t:tcp_socket { ioctl read getattr write setattr append bind connect getopt setopt shutdown listen accept };,
services,xfs,xfs_read_sockets,allow $1 xfs_tmp_t:dir search;,
services,xfs,xfs_read_sockets,allow $1 xfs_tmp_t:sock_file { getattr read };,
services,xfs,xfs_stream_connect,allow $1 xfs_tmp_t:dir search;,
services,xfs,xfs_stream_connect,allow $1 xfs_tmp_t:sock_file write;,
services,xfs,xfs_stream_connect,allow $1 xfs_t:unix_stream_socket connectto;,
services,xserver,allow $1_xserver_t self:capability { dac_override fsetid setgid setuid ipc_owner sys_rawio sys_admin sys_nice sys_tty_config mknod net_bind_service };,
services,xserver,allow $1_xserver_t self:process ~{ ptrace setcurrent setexec setfscreate setrlimit execmem execstack execheap };,
services,xserver,allow $1_xserver_t self:process { execmem execheap execstack setsched };,
services,xserver,allow $1_xserver_t self:fd use;,
services,xserver,allow $1_xserver_t self:fifo_file { getattr read write append ioctl lock };,
services,xserver,allow $1_xserver_t self:sock_file { read getattr lock ioctl };,
services,xserver,allow $1_xserver_t self:shm { associate getattr setattr create destroy read write lock unix_read unix_write };,
services,xserver,allow $1_xserver_t self:sem { associate getattr setattr create destroy read write unix_read unix_write };,
services,xserver,allow $1_xserver_t self:msgq { associate getattr setattr create destroy read write enqueue unix_read unix_write };,
services,xserver,allow $1_xserver_t self:msg { send receive };,
services,xserver,allow $1_xserver_t self:unix_dgram_socket { { create ioctl read getattr write setattr append bind connect getopt setopt shutdown } sendto };,
services,xserver,allow $1_xserver_t self:unix_stream_socket { { create ioctl read getattr write setattr append bind connect getopt setopt shutdown listen accept } connectto };,
services,xserver,allow $1_xserver_t self:netlink_route_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown nlmsg_read };,
services,xserver,allow $1_xserver_t self:tcp_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown listen accept };,
services,xserver,allow $1_xserver_t self:udp_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown };,
services,xserver,allow $1_xserver_t $1_xserver_tmp_t:dir { create getattr setattr read write link unlink rename search add_name remove_name reparent rmdir lock ioctl };,
services,xserver,allow $1_xserver_t $1_xserver_tmp_t:file { create getattr setattr read write append rename link unlink ioctl lock };,
services,xserver,allow $1_xserver_t $1_xserver_tmp_t:sock_file { create getattr setattr read write append rename link unlink ioctl lock };,
services,xserver,allow $1_xserver_t xdm_xserver_tmp_t:dir { read getattr lock search ioctl add_name remove_name write };,
services,xserver,allow $1_xserver_t $1_xserver_tmpfs_t:dir { create getattr setattr read write link unlink rename search add_name remove_name reparent rmdir lock ioctl };,
services,xserver,allow $1_xserver_t $1_xserver_tmpfs_t:file { create getattr setattr read write append rename link unlink ioctl lock };,
services,xserver,allow $1_xserver_t $1_xserver_tmpfs_t:lnk_file { create read getattr setattr link unlink rename };,
services,xserver,allow $1_xserver_t $1_xserver_tmpfs_t:sock_file { create getattr setattr read write append rename link unlink ioctl lock };,
services,xserver,allow $1_xserver_t $1_xserver_tmpfs_t:fifo_file { create getattr setattr read write append rename link unlink ioctl lock };,
services,xserver,allow $1_xserver_t xkb_var_lib_t:dir { read getattr lock search ioctl add_name remove_name write };,
services,xserver,allow $1_xserver_t xkb_var_lib_t:file { create getattr setattr read write append rename link unlink ioctl lock };,
services,xserver,allow $1_xserver_t xkb_var_lib_t:lnk_file { create read getattr setattr link unlink rename };,
services,xserver,allow $1_xserver_t xserver_log_t:file { create getattr setattr read write append rename link unlink ioctl lock };,
services,xserver,allow $1_xserver_t xserver_log_t:dir { read getattr lock search ioctl };,
services,xserver,allow $1_xserver_t $1_xauth_t:fd use;,
services,xserver,allow $1_xauth_t $1_xserver_t:fd use;,
services,xserver,allow $1_xauth_t $1_xserver_t:fifo_file { getattr read write append ioctl lock };,
services,xserver,allow $1_xauth_t $1_xserver_t:process sigchld;,
services,xserver,allow $1_xserver_t $1_xauth_home_t:file { getattr read };,
services,xserver,allow $2 $1_xserver_t:fd use;,
services,xserver,allow $1_xserver_t $2:fd use;,
services,xserver,allow $1_xserver_t $2:fifo_file { getattr read write append ioctl lock };,
services,xserver,allow $1_xserver_t $2:process { signal sigchld };,
services,xserver,allow $1_xserver_t $2:shm { associate getattr read write lock unix_read unix_write };,
services,xserver,allow $2 $1_xserver_tmp_t:dir { read getattr lock search ioctl };,
services,xserver,allow $2 $1_xserver_tmp_t:sock_file { getattr read write append ioctl lock };,
services,xserver,allow $2 $1_xserver_t:unix_stream_socket connectto;,
services,xserver,allow $2 $1_xserver_tmpfs_t:file { getattr read write append ioctl lock };,
services,xserver,allow $1_xserver_t $2:shm { associate getattr read write lock unix_read unix_write };,
services,xserver,allow $2 $1_xserver_t:shm { associate getattr read write lock unix_read unix_write };,
services,xserver,allow $1_t xdm_xserver_tmp_t:dir { read getattr lock search ioctl };,
services,xserver,allow $1_t xdm_xserver_t:unix_stream_socket connectto;,
services,xserver,allow $1_xauth_t self:process signal;,
services,xserver,allow $1_xauth_t self:unix_stream_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown listen accept };,
services,xserver,allow $1_xauth_t $1_xauth_home_t:file { create getattr setattr read write append rename link unlink ioctl lock };,
services,xserver,allow $1_xauth_t $1_xauth_tmp_t:dir { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir };,
services,xserver,allow $1_xauth_t $1_xauth_tmp_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
services,xserver,allow $2 $1_xauth_t:fd use;,
services,xserver,allow $1_xauth_t $2:fd use;,
services,xserver,allow $1_xauth_t $2:fifo_file { getattr read write append ioctl lock };,
services,xserver,allow $1_xauth_t $2:process sigchld;,
services,xserver,allow $2 $1_xauth_t:process signal;,
services,xserver,allow $2 $1_xauth_t:dir { search getattr read };,
services,xserver,allow $2 $1_xauth_t:{ file lnk_file } { read getattr };,
services,xserver,allow $2 $1_xauth_t:process getattr;,
services,xserver,allow $2 $1_xauth_home_t:file { create getattr setattr read write append rename link unlink ioctl lock };,
services,xserver,allow $2 $1_xauth_home_t:file { relabelfrom relabelto };,
services,xserver,allow xdm_t $1_xauth_home_t:file { create getattr setattr read write append rename link unlink ioctl lock };,
services,xserver,allow $2 $1_iceauth_t:fd use;,
services,xserver,allow $1_iceauth_t $2:fd use;,
services,xserver,allow $1_iceauth_t $2:fifo_file { getattr read write append ioctl lock };,
services,xserver,allow $1_iceauth_t $2:process sigchld;,
services,xserver,allow $1_iceauth_t $1_iceauth_home_t:file { create getattr setattr read write append rename link unlink ioctl lock };,
services,xserver,allow $2 $1_iceauth_t:dir { search getattr read };,
services,xserver,allow $2 $1_iceauth_t:{ file lnk_file } { read getattr };,
services,xserver,allow $2 $1_iceauth_t:process getattr;,
services,xserver,allow $2 $1_iceauth_home_t:file { create getattr setattr read write append rename link unlink ioctl lock };,
services,xserver,allow $2 $1_iceauth_home_t:file { relabelfrom relabelto };,
services,xserver,allow $1_xserver_t $2:fd use;,
services,xserver,allow $1_xserver_t $2:shm { associate getattr read write lock unix_read unix_write };,
services,xserver,allow $1_xserver_t $3:file { getattr read write append ioctl lock };,
services,xserver,allow $2 $1_xserver_t:unix_stream_socket connectto;,
services,xserver,allow $2 $1_xserver_t:process signal;,
services,xserver,allow $2 $1_xserver_tmp_t:file { getattr read };,
services,xserver,allow $2 $1_xserver_t:fd use;,
services,xserver,allow $2 $1_xserver_t:shm { associate getattr read unix_read };,
services,xserver,allow $2 $1_xserver_tmpfs_t:file { read getattr lock ioctl };,
services,xserver,allow $2 $1_xserver_t:shm { associate getattr read write lock unix_read unix_write };,
services,xserver,allow $2 $1_xserver_tmpfs_t:file { getattr read write append ioctl lock };,
services,xserver,allow $2 self:shm { associate getattr setattr create destroy read write lock unix_read unix_write };,
services,xserver,allow $2 self:unix_dgram_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown };,
services,xserver,allow $2 self:unix_stream_socket { connectto { create ioctl read getattr write setattr append bind connect getopt setopt shutdown listen accept } };,
services,xserver,allow $2 $1_xauth_home_t:file { getattr read };,
services,xserver,allow $2 xdm_t:fd use;,
services,xserver,allow $2 xdm_t:fifo_file { getattr read write ioctl };,
services,xserver,allow $2 xdm_tmp_t:dir search;,
services,xserver,allow $2 xdm_tmp_t:sock_file { read write };,
services,xserver,allow $2 $1_xauth_t:fd use;,
services,xserver,allow $1_xauth_t $2:fd use;,
services,xserver,allow $1_xauth_t $2:fifo_file { getattr read write append ioctl lock };,
services,xserver,allow $1_xauth_t $2:process sigchld;,
services,xserver,xserver_stream_connect_xdm,allow $1 xdm_t:unix_stream_socket connectto;,
services,xserver,xserver_read_xdm_rw_config,allow $1 xdm_rw_etc_t:dir { getattr read };,
services,xserver,xserver_setattr_xdm_tmp_dirs,allow $1 xdm_tmp_t:dir setattr;,
services,xserver,xserver_create_xdm_tmp_sockets,allow $1 xdm_tmp_t:dir { read getattr lock search ioctl add_name write };,
services,xserver,xserver_create_xdm_tmp_sockets,allow $1 xdm_tmp_t:sock_file create;,
services,xserver,xserver_read_xdm_pid,allow $1 xdm_var_run_t:file { read getattr lock ioctl };,
services,xserver,xserver_domtrans_xdm_xserver,allow $1 xdm_xserver_t:fd use;,
services,xserver,xserver_domtrans_xdm_xserver,allow xdm_xserver_t $1:fd use;,
services,xserver,xserver_domtrans_xdm_xserver,allow xdm_xserver_t $1:fifo_file { getattr read write append ioctl lock };,
services,xserver,xserver_domtrans_xdm_xserver,allow xdm_xserver_t $1:process sigchld;,
services,xserver,xserver_delete_log,allow $1 xserver_log_t:dir { read getattr lock search ioctl add_name remove_name write };,
services,xserver,xserver_delete_log,allow $1 xserver_log_t:file unlink;,
services,zebra,zebra_read_config,allow $1 zebra_conf_t:file { read getattr lock ioctl };,
services,zebra,zebra_read_config,allow $1 zebra_conf_t:dir { read getattr lock search ioctl };,
services,zebra,zebra_read_config,allow $1 zebra_conf_t:lnk_file { read getattr lock ioctl };,
system,authlogin,allow $1_chkpwd_t self:capability { audit_write audit_control setuid };,
system,authlogin,allow $1_chkpwd_t self:process getattr;,
system,authlogin,allow $1_chkpwd_t shadow_t:file { getattr read };,
system,authlogin,allow $2 self:netlink_audit_socket { { create ioctl read getattr write setattr append bind connect getopt setopt shutdown nlmsg_read nlmsg_write } nlmsg_relay };,
system,authlogin,allow $1_chkpwd_t $2:fd use;,
system,authlogin,allow $2 $1_chkpwd_t:fd use;,
system,authlogin,allow $1_chkpwd_t $2:fifo_file { getattr read write append ioctl lock };,
system,authlogin,allow $1_chkpwd_t $2:process sigchld;,
system,authlogin,auth_domtrans_login_program,allow $1 $2:fd use;,
system,authlogin,auth_domtrans_login_program,allow $2 $1:fd use;,
system,authlogin,auth_domtrans_login_program,allow $2 $1:fifo_file { getattr read write append ioctl lock };,
system,authlogin,auth_domtrans_login_program,allow $2 $1:process sigchld;,
system,authlogin,auth_domtrans_chk_passwd,allow $1 self:capability { audit_write audit_control };,
system,authlogin,auth_domtrans_chk_passwd,allow $1 self:netlink_audit_socket { { create ioctl read getattr write setattr append bind connect getopt setopt shutdown nlmsg_read nlmsg_write } nlmsg_relay };,
system,authlogin,auth_domtrans_chk_passwd,allow $1 system_chkpwd_t:fd use;,
system,authlogin,auth_domtrans_chk_passwd,allow system_chkpwd_t $1:fd use;,
system,authlogin,auth_domtrans_chk_passwd,allow system_chkpwd_t $1:fifo_file { getattr read write append ioctl lock };,
system,authlogin,auth_domtrans_chk_passwd,allow system_chkpwd_t $1:process sigchld;,
system,authlogin,auth_getattr_shadow,allow $1 shadow_t:file getattr;,
system,authlogin,auth_tunable_read_shadow,allow $1 shadow_t:file { read getattr lock ioctl };,
system,authlogin,auth_rw_shadow,allow $1 shadow_t:file { getattr read write append ioctl lock };,
system,authlogin,auth_manage_shadow,allow $1 shadow_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
system,authlogin,auth_relabelto_shadow,allow $1 shadow_t:file relabelto;,
system,authlogin,auth_relabel_shadow,allow $1 shadow_t:file { relabelfrom relabelto };,
system,authlogin,auth_append_faillog,allow $1 faillog_t:file { getattr append };,
system,authlogin,auth_rw_faillog,allow $1 faillog_t:file { getattr read write append ioctl lock };,
system,authlogin,auth_read_lastlog,allow $1 lastlog_t:file { getattr read };,
system,authlogin,auth_append_lastlog,allow $1 lastlog_t:file { getattr lock append };,
system,authlogin,auth_rw_lastlog,allow $1 lastlog_t:file { getattr read write setattr };,
system,authlogin,auth_domtrans_pam,allow $1 pam_t:fd use;,
system,authlogin,auth_domtrans_pam,allow pam_t $1:fd use;,
system,authlogin,auth_domtrans_pam,allow pam_t $1:fifo_file { getattr read write append ioctl lock };,
system,authlogin,auth_domtrans_pam,allow pam_t $1:process sigchld;,
system,authlogin,auth_run_pam,allow pam_t $3:chr_file { getattr read write append ioctl lock };,
system,authlogin,auth_manage_var_auth,allow $1 var_auth_t:dir { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir };,
system,authlogin,auth_manage_var_auth,allow $1 var_auth_t:file { getattr read write append ioctl lock };,
system,authlogin,auth_manage_var_auth,allow $1 var_auth_t:lnk_file { getattr read write append ioctl lock };,
system,authlogin,auth_read_pam_pid,allow $1 pam_var_run_t:dir { read getattr lock search ioctl };,
system,authlogin,auth_read_pam_pid,allow $1 pam_var_run_t:file { read getattr lock ioctl };,
system,authlogin,auth_delete_pam_pid,allow $1 pam_var_run_t:dir { getattr search read write remove_name };,
system,authlogin,auth_delete_pam_pid,allow $1 pam_var_run_t:file { getattr unlink };,
system,authlogin,auth_manage_pam_pid,allow $1 pam_var_run_t:dir { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir };,
system,authlogin,auth_manage_pam_pid,allow $1 pam_var_run_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
system,authlogin,auth_domtrans_pam_console,allow $1 pam_console_t:fd use;,
system,authlogin,auth_domtrans_pam_console,allow pam_console_t $1:fd use;,
system,authlogin,auth_domtrans_pam_console,allow pam_console_t $1:fifo_file { getattr read write append ioctl lock };,
system,authlogin,auth_domtrans_pam_console,allow pam_console_t $1:process sigchld;,
system,authlogin,auth_search_pam_console_data,allow $1 pam_var_console_t:dir { getattr search };,
system,authlogin,auth_list_pam_console_data,allow $1 pam_var_console_t:dir { read getattr lock search ioctl };,
system,authlogin,auth_read_pam_console_data,allow $1 pam_var_console_t:dir { read getattr lock search ioctl };,
system,authlogin,auth_read_pam_console_data,allow $1 pam_var_console_t:file { read getattr lock ioctl };,
system,authlogin,auth_manage_pam_console_data,allow $1 pam_var_console_t:dir { read getattr lock search ioctl add_name remove_name write };,
system,authlogin,auth_manage_pam_console_data,allow $1 pam_var_console_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
system,authlogin,auth_manage_pam_console_data,allow $1 pam_var_console_t:lnk_file { create read getattr setattr link unlink rename };,
system,authlogin,auth_delete_pam_console_data,allow $1 pam_var_console_t:dir { read getattr lock search ioctl add_name remove_name write };,
system,authlogin,auth_delete_pam_console_data,allow $1 pam_var_console_t:file unlink;,
system,authlogin,auth_domtrans_utempter,allow $1 utempter_t:fd use;,
system,authlogin,auth_domtrans_utempter,allow utempter_t $1:fd use;,
system,authlogin,auth_domtrans_utempter,allow utempter_t $1:fifo_file { getattr read write append ioctl lock };,
system,authlogin,auth_domtrans_utempter,allow utempter_t $1:process sigchld;,
system,authlogin,auth_run_utempter,allow utempter_t $3:chr_file { getattr read write append ioctl lock };,
system,authlogin,auth_setattr_login_records,allow $1 wtmp_t:file setattr;,
system,authlogin,auth_read_login_records,allow $1 wtmp_t:file { read getattr lock ioctl };,
system,authlogin,auth_append_login_records,allow $1 wtmp_t:file { getattr append };,
system,authlogin,auth_write_login_records,allow $1 wtmp_t:file { write lock };,
system,authlogin,auth_rw_login_records,allow $1 wtmp_t:file { getattr read write append ioctl lock };,
system,authlogin,auth_manage_login_records,allow $1 wtmp_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
system,authlogin,auth_use_nsswitch,allow $1 var_auth_t:dir { read getattr lock search ioctl };,
system,authlogin,auth_use_nsswitch,allow $1 var_auth_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
system,clock,clock_domtrans,allow $1 hwclock_t:fd use;,
system,clock,clock_domtrans,allow hwclock_t $1:fd use;,
system,clock,clock_domtrans,allow hwclock_t $1:fifo_file { getattr read write append ioctl lock };,
system,clock,clock_domtrans,allow hwclock_t $1:process sigchld;,
system,clock,clock_run,allow hwclock_t $3:chr_file { getattr read write ioctl };,
system,clock,clock_rw_adjtime,allow $1 adjtime_t:file { getattr read write append ioctl lock };,
system,daemontools,daemontools_ipc_domain,allow $1 svc_start_t:process sigchld;,
system,daemontools,daemontools_ipc_domain,allow $1 svc_start_t:fd use;,
system,daemontools,daemontools_ipc_domain,allow $1 svc_start_t:fifo_file { read write getattr };,
system,daemontools,daemontools_ipc_domain,allow svc_start_t $1:process signal;,
system,daemontools,daemontools_service_domain,allow svc_run_t $1:process signal;,
system,daemontools,daemontools_service_domain,allow $1 svc_run_t:fd use;,
system,daemontools,daemontools_domtrans_start,allow $1 svc_start_t:fd use;,
system,daemontools,daemontools_domtrans_start,allow svc_start_t $1:fd use;,
system,daemontools,daemontools_domtrans_start,allow svc_start_t $1:fifo_file { getattr read write append ioctl lock };,
system,daemontools,daemontools_domtrans_start,allow svc_start_t $1:process sigchld;,
system,daemontools,daemontools_domtrans_run,allow $1 svc_run_t:fd use;,
system,daemontools,daemontools_domtrans_run,allow svc_run_t $1:fd use;,
system,daemontools,daemontools_domtrans_run,allow svc_run_t $1:fifo_file { getattr read write append ioctl lock };,
system,daemontools,daemontools_domtrans_run,allow svc_run_t $1:process sigchld;,
system,daemontools,daemontools_domtrans_multilog,allow $1 svc_multilog_t:fd use;,
system,daemontools,daemontools_domtrans_multilog,allow svc_multilog_t $1:fd use;,
system,daemontools,daemontools_domtrans_multilog,allow svc_multilog_t $1:fifo_file { getattr read write append ioctl lock };,
system,daemontools,daemontools_domtrans_multilog,allow svc_multilog_t $1:process sigchld;,
system,daemontools,daemontools_read_svc,allow $1 svc_svc_t:dir { read getattr lock search ioctl };,
system,daemontools,daemontools_read_svc,allow $1 svc_svc_t:file { read getattr lock ioctl };,
system,daemontools,daemontools_manage_svc,allow $1 svc_svc_t:dir { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir };,
system,daemontools,daemontools_manage_svc,allow $1 svc_svc_t:fifo_file { create ioctl read getattr lock write setattr append link unlink rename };,
system,daemontools,daemontools_manage_svc,allow $1 svc_svc_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
system,daemontools,daemontools_manage_svc,allow $1 svc_svc_t:lnk_file { read create };,
system,fstools,fstools_domtrans,allow $1 fsadm_t:fd use;,
system,fstools,fstools_domtrans,allow fsadm_t $1:fd use;,
system,fstools,fstools_domtrans,allow fsadm_t $1:fifo_file { getattr read write append ioctl lock };,
system,fstools,fstools_domtrans,allow fsadm_t $1:process sigchld;,
system,fstools,fstools_run,allow fsadm_t $3:chr_file { getattr read write ioctl };,
system,fstools,fstools_relabelto_entry_files,allow $1 fsadm_exec_t:file relabelto;,
system,fstools,fstools_manage_entry_files,allow $1 fsadm_exec_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
system,getty,getty_domtrans,allow $1 getty_t:fd use;,
system,getty,getty_domtrans,allow getty_t $1:fd use;,
system,getty,getty_domtrans,allow getty_t $1:fifo_file { getattr read write append ioctl lock };,
system,getty,getty_domtrans,allow getty_t $1:process sigchld;,
system,getty,getty_use_fds,allow $1 getty_t:fd use;,
system,getty,getty_read_log,allow $1 getty_log_t:file { getattr read };,
system,getty,getty_read_config,allow $1 getty_etc_t:file { getattr read };,
system,getty,getty_rw_config,allow $1 getty_etc_t:file { getattr read write append ioctl lock };,
system,hostname,hostname_domtrans,allow $1 hostname_t:fd use;,
system,hostname,hostname_domtrans,allow hostname_t $1:fd use;,
system,hostname,hostname_domtrans,allow hostname_t $1:fifo_file { getattr read write append ioctl lock };,
system,hostname,hostname_domtrans,allow hostname_t $1:process sigchld;,
system,hostname,hostname_run,allow hostname_t $3:chr_file { getattr read write ioctl };,
system,hotplug,hotplug_domtrans,allow $1 hotplug_t:fd use;,
system,hotplug,hotplug_domtrans,allow hotplug_t $1:fd use;,
system,hotplug,hotplug_domtrans,allow hotplug_t $1:fifo_file { getattr read write append ioctl lock };,
system,hotplug,hotplug_domtrans,allow hotplug_t $1:process sigchld;,
system,hotplug,hotplug_use_fds,allow $1 hotplug_t:fd use;,
system,hotplug,hotplug_getattr_config_dirs,allow $1 hotplug_etc_t:dir getattr;,
system,hotplug,hotplug_search_config,allow $1 hotplug_etc_t:dir { getattr search };,
system,hotplug,hotplug_read_config,allow $1 hotplug_etc_t:file { read getattr lock ioctl };,
system,hotplug,hotplug_read_config,allow $1 hotplug_etc_t:dir { read getattr lock search ioctl };,
system,hotplug,hotplug_read_config,allow $1 hotplug_etc_t:lnk_file { read getattr lock ioctl };,
system,init,init_domain,allow $1 init_t:fd use;,
system,init,init_domain,allow init_t $1:fd use;,
system,init,init_domain,allow $1 init_t:fifo_file { getattr read write append ioctl lock };,
system,init,init_domain,allow $1 init_t:process sigchld;,
system,init,init_system_domain,allow initrc_t $1:fd use;,
system,init,init_system_domain,allow $1 initrc_t:fd use;,
system,init,init_system_domain,allow $1 initrc_t:fifo_file { getattr read write append ioctl lock };,
system,init,init_system_domain,allow $1 initrc_t:process sigchld;,
system,init,init_domtrans,allow $1 init_t:fd use;,
system,init,init_domtrans,allow init_t $1:fd use;,
system,init,init_domtrans,allow init_t $1:fifo_file { getattr read write append ioctl lock };,
system,init,init_domtrans,allow init_t $1:process sigchld;,
system,init,init_getpgid,allow $1 init_t:process getpgid;,
system,init,init_getattr_initctl,allow $1 initctl_t:fifo_file getattr;,
system,init,init_write_initctl,allow $1 initctl_t:fifo_file write;,
system,init,init_rw_initctl,allow $1 initctl_t:fifo_file { getattr read write append ioctl lock };,
system,init,init_signull,allow $1 init_t:process signull;,
system,init,init_sigchld,allow $1 init_t:process sigchld;,
system,init,init_use_fds,allow $1 init_t:fd use;,
system,init,init_udp_send,allow $1 init_t:udp_socket sendto;,
system,init,init_udp_send,allow init_t $1:udp_socket recvfrom;,
system,init,init_domtrans_script,allow $1 initrc_t:fd use;,
system,init,init_domtrans_script,allow initrc_t $1:fd use;,
system,init,init_domtrans_script,allow initrc_t $1:fifo_file { getattr read write append ioctl lock };,
system,init,init_domtrans_script,allow initrc_t $1:process sigchld;,
system,init,init_write_script_pipes,allow $1 initrc_t:fifo_file write;,
system,init,init_getattr_script_files,allow $1 initrc_exec_t:file getattr;,
system,init,init_read_script_state,allow $1 initrc_t:dir { read getattr lock search ioctl };,
system,init,init_read_script_state,allow $1 initrc_t:{ file lnk_file } { read getattr lock ioctl };,
system,init,init_read_script_state,allow $1 initrc_t:process getattr;,
system,init,init_use_script_fds,allow $1 initrc_t:fd use;,
system,init,init_getpgid_script,allow $1 initrc_t:process getpgid;,
system,init,init_sigchld_script,allow $1 initrc_t:process sigchld;,
system,init,init_signal_script,allow $1 initrc_t:process signal;,
system,init,init_signull_script,allow $1 initrc_t:process signull;,
system,init,init_rw_script_pipes,allow $1 initrc_t:fifo_file { read write };,
system,init,init_udp_send_script,allow $1 initrc_t:udp_socket sendto;,
system,init,init_udp_send_script,allow initrc_t $1:udp_socket recvfrom;,
system,init,init_stream_connect_script,allow $1 initrc_t:unix_stream_socket connectto;,
system,init,init_dbus_chat_script,allow $1 initrc_t:dbus send_msg;,
system,init,init_dbus_chat_script,allow initrc_t $1:dbus send_msg;,
system,init,init_use_script_ptys,allow $1 initrc_devpts_t:chr_file { { getattr read write ioctl } lock append };,
system,init,init_read_script_files,allow $1 initrc_exec_t:file { read getattr lock ioctl };,
system,init,init_rw_script_tmp_files,allow $1 initrc_tmp_t:file { getattr read write append ioctl lock };,
system,init,init_script_tmp_filetrans,allow $1 initrc_tmp_t:dir { read getattr lock search ioctl add_name remove_name write };,
system,init,init_getattr_utmp,allow $1 initrc_var_run_t:file getattr;,
system,init,init_read_utmp,allow $1 initrc_var_run_t:file { read getattr lock ioctl };,
system,init,init_rw_utmp,allow $1 initrc_var_run_t:file { getattr read write append ioctl lock };,
system,init,init_manage_utmp,allow $1 initrc_var_run_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
system,ipsec,ipsec_domtrans,allow $1 ipsec_t:fd use;,
system,ipsec,ipsec_domtrans,allow ipsec_t $1:fd use;,
system,ipsec,ipsec_domtrans,allow ipsec_t $1:fifo_file { getattr read write append ioctl lock };,
system,ipsec,ipsec_domtrans,allow ipsec_t $1:process sigchld;,
system,ipsec,ipsec_stream_connect,allow $1 ipsec_var_run_t:dir search;,
system,ipsec,ipsec_stream_connect,allow $1 ipsec_var_run_t:sock_file write;,
system,ipsec,ipsec_stream_connect,allow $1 ipsec_t:unix_stream_socket connectto;,
system,ipsec,ipsec_getattr_key_sockets,allow $1 ipsec_t:key_socket getattr;,
system,ipsec,ipsec_read_config,allow $1 ipsec_conf_file_t:file { read getattr lock ioctl };,
system,ipsec,ipsec_manage_pid,allow $1 ipsec_var_run_t:dir { read getattr lock search ioctl add_name remove_name write };,
system,ipsec,ipsec_manage_pid,allow $1 ipsec_var_run_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
system,iptables,iptables_domtrans,allow $1 iptables_t:fd use;,
system,iptables,iptables_domtrans,allow iptables_t $1:fd use;,
system,iptables,iptables_domtrans,allow iptables_t $1:fifo_file { getattr read write append ioctl lock };,
system,iptables,iptables_domtrans,allow iptables_t $1:process sigchld;,
system,iptables,iptables_run,allow iptables_t $3:chr_file { getattr read write ioctl };,
system,libraries,libs_domtrans_ldconfig,allow $1 ldconfig_t:fd use;,
system,libraries,libs_domtrans_ldconfig,allow ldconfig_t $1:fd use;,
system,libraries,libs_domtrans_ldconfig,allow ldconfig_t $1:fifo_file { getattr read write append ioctl lock };,
system,libraries,libs_domtrans_ldconfig,allow ldconfig_t $1:process sigchld;,
system,libraries,libs_run_ldconfig,allow ldconfig_t $3:chr_file { getattr read write ioctl };,
system,libraries,libs_use_ld_so,allow $1 lib_t:dir { read getattr lock search ioctl };,
system,libraries,libs_use_ld_so,allow $1 lib_t:lnk_file { read getattr lock ioctl };,
system,libraries,libs_use_ld_so,allow $1 ld_so_t:lnk_file { read getattr lock ioctl };,
system,libraries,libs_use_ld_so,allow $1 ld_so_t:file r{ getattr execute };,
system,libraries,libs_use_ld_so,allow $1 ld_so_cache_t:file { read getattr lock ioctl };,
system,libraries,libs_legacy_use_ld_so,allow $1 ld_so_t:file execmod;,
system,libraries,libs_legacy_use_ld_so,allow $1 ld_so_cache_t:file execute;,
system,libraries,libs_exec_ld_so,allow $1 lib_t:dir { read getattr lock search ioctl };,
system,libraries,libs_exec_ld_so,allow $1 lib_t:lnk_file { read getattr lock ioctl };,
system,libraries,libs_exec_ld_so,allow $1 ld_so_t:lnk_file { read getattr lock ioctl };,
system,libraries,libs_manage_ld_so,allow $1 lib_t:dir { read getattr lock search ioctl add_name remove_name write };,
system,libraries,libs_manage_ld_so,allow $1 ld_so_t:file { create getattr setattr read write append rename link unlink ioctl lock };,
system,libraries,libs_relabel_ld_so,allow $1 lib_t:dir { getattr search };,
system,libraries,libs_relabel_ld_so,allow $1 ld_so_t:file { relabelfrom relabelto };,
system,libraries,libs_rw_ld_so_cache,allow $1 ld_so_cache_t:file { getattr read write append ioctl lock };,
system,libraries,libs_search_lib,allow $1 lib_t:dir search;,
system,libraries,libs_read_lib_files,allow $1 lib_t:dir { read getattr lock search ioctl };,
system,libraries,libs_read_lib_files,allow $1 lib_t:{ file lnk_file } { read getattr lock ioctl };,
system,libraries,libs_exec_lib_files,allow $1 lib_t:dir { read getattr lock search ioctl };,
system,libraries,libs_exec_lib_files,allow $1 lib_t:lnk_file { read getattr lock ioctl };,
system,libraries,libs_use_lib_files,allow $1 lib_t:dir { read getattr lock search ioctl };,
system,libraries,libs_use_lib_files,allow $1 lib_t:lnk_file { read getattr lock ioctl };,
system,libraries,libs_use_lib_files,allow $1 lib_t:file r{ getattr execute };,
system,libraries,libs_manage_lib_files,allow $1 lib_t:dir { read getattr lock search ioctl add_name remove_name write };,
system,libraries,libs_manage_lib_files,allow $1 lib_t:file { create getattr setattr read write append rename link unlink ioctl lock };,
system,libraries,libs_relabelto_lib_files,allow $1 lib_t:dir { getattr search };,
system,libraries,libs_relabelto_lib_files,allow $1 lib_t:file relabelto;,
system,libraries,libs_relabel_lib_files,allow $1 lib_t:dir { getattr search };,
system,libraries,libs_relabel_lib_files,allow $1 lib_t:file { relabelfrom relabelto };,
system,libraries,libs_delete_lib_symlinks,allow $1 lib_t:dir { getattr search read write remove_name };,
system,libraries,libs_delete_lib_symlinks,allow $1 lib_t:lnk_file unlink;,
system,libraries,libs_manage_shared_libs,allow $1 lib_t:dir { read getattr lock search ioctl add_name remove_name write };,
system,libraries,libs_manage_shared_libs,allow $1 { shlib_t textrel_shlib_t }:file { create getattr setattr read write append rename link unlink ioctl lock };,
system,libraries,libs_use_shared_libs,allow $1 lib_t:dir { read getattr lock search ioctl };,
system,libraries,libs_use_shared_libs,allow $1 lib_t:lnk_file { read getattr lock ioctl };,
system,libraries,libs_use_shared_libs,allow $1 { shlib_t textrel_shlib_t }:lnk_file { read getattr lock ioctl };,
system,libraries,libs_use_shared_libs,allow $1 { shlib_t textrel_shlib_t }:file r{ getattr execute };,
system,libraries,libs_use_shared_libs,allow $1 textrel_shlib_t:file execmod;,
system,libraries,libs_legacy_use_shared_libs,allow $1 { shlib_t textrel_shlib_t }:file execmod;,
system,libraries,libs_relabel_shared_libs,allow $1 lib_t:dir { getattr search };,
system,libraries,libs_relabel_shared_libs,allow $1 { shlib_t textrel_shlib_t }:file { relabelfrom relabelto };,
system,locallogin,locallogin_use_fds,allow $1 local_login_t:fd use;,
system,locallogin,locallogin_signull,allow $1 local_login_t:process signull;,
system,logging,logging_read_audit_log,allow $1 auditd_log_t:dir { read getattr lock search ioctl };,
system,logging,logging_read_audit_log,allow $1 auditd_log_t:file { read getattr lock ioctl };,
system,logging,logging_domtrans_auditctl,allow $1 auditctl_t:fd use;,
system,logging,logging_domtrans_auditctl,allow auditctl_t $1:fd use;,
system,logging,logging_domtrans_auditctl,allow auditctl_t $1:fifo_file { getattr read write append ioctl lock };,
system,logging,logging_domtrans_auditctl,allow auditctl_t $1:process sigchld;,
system,logging,logging_domtrans_syslog,allow $1 syslogd_t:fd use;,
system,logging,logging_domtrans_syslog,allow syslogd_t $1:fd use;,
system,logging,logging_domtrans_syslog,allow syslogd_t $1:fifo_file { getattr read write append ioctl lock };,
system,logging,logging_domtrans_syslog,allow syslogd_t $1:process sigchld;,
system,logging,logging_log_filetrans,allow $1 var_log_t:dir { read getattr lock search ioctl add_name remove_name write };,
system,logging,logging_send_syslog_msg,allow $1 devlog_t:lnk_file read;,
system,logging,logging_send_syslog_msg,allow $1 devlog_t:sock_file { getattr read write append ioctl lock };,
system,logging,logging_send_syslog_msg,allow $1 syslogd_t:unix_dgram_socket sendto;,
system,logging,logging_send_syslog_msg,allow $1 syslogd_t:unix_stream_socket connectto;,
system,logging,logging_send_syslog_msg,allow $1 self:unix_dgram_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown };,
system,logging,logging_send_syslog_msg,allow $1 self:unix_stream_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown };,
system,logging,logging_read_audit_config,allow $1 auditd_etc_t:file { read getattr lock ioctl };,
system,logging,logging_search_logs,allow $1 var_log_t:dir search;,
system,logging,logging_list_logs,allow $1 var_log_t:dir { read getattr lock search ioctl };,
system,logging,logging_rw_generic_log_dirs,allow $1 var_log_t:dir { read getattr lock search ioctl add_name remove_name write };,
system,logging,logging_append_all_logs,allow $1 var_log_t:dir { read getattr lock search ioctl };,
system,logging,logging_append_all_logs,allow $1 logfile:file { getattr append };,
system,logging,logging_read_all_logs,allow $1 var_log_t:dir { read getattr lock search ioctl };,
system,logging,logging_read_all_logs,allow $1 logfile:file { read getattr lock ioctl };,
system,logging,logging_exec_all_logs,allow $1 logfile:dir { read getattr lock search ioctl };,
system,logging,logging_manage_all_logs,allow $1 logfile:dir { read getattr lock search ioctl add_name remove_name write };,
system,logging,logging_manage_all_logs,allow $1 logfile:lnk_file read;,
system,logging,logging_manage_all_logs,allow $1 logfile:file { create ioctl read getattr lock write setattr append link unlink rename };,
system,logging,logging_read_generic_logs,allow $1 var_log_t:dir { read getattr lock search ioctl };,
system,logging,logging_read_generic_logs,allow $1 var_log_t:file { read getattr lock ioctl };,
system,logging,logging_write_generic_logs,allow $1 var_log_t:dir { read getattr lock search ioctl };,
system,logging,logging_write_generic_logs,allow $1 var_log_t:file { getattr write };,
system,logging,logging_rw_generic_logs,allow $1 var_log_t:dir { read getattr lock search ioctl };,
system,logging,logging_rw_generic_logs,allow $1 var_log_t:file { getattr read write append ioctl lock };,
system,logging,logging_manage_generic_logs,allow $1 var_log_t:dir { read getattr lock search ioctl add_name remove_name write };,
system,logging,logging_manage_generic_logs,allow $1 var_log_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
system,lvm,lvm_domtrans,allow $1 lvm_t:fd use;,
system,lvm,lvm_domtrans,allow lvm_t $1:fd use;,
system,lvm,lvm_domtrans,allow lvm_t $1:fifo_file { getattr read write append ioctl lock };,
system,lvm,lvm_domtrans,allow lvm_t $1:process sigchld;,
system,lvm,lvm_run,allow lvm_t $3:chr_file { getattr read write ioctl };,
system,lvm,lvm_read_config,allow $1 lvm_etc_t:dir { read getattr lock search ioctl };,
system,lvm,lvm_read_config,allow $1 lvm_etc_t:file { read getattr lock ioctl };,
system,miscfiles,miscfiles_read_certs,allow $1 cert_t:dir { read getattr lock search ioctl };,
system,miscfiles,miscfiles_read_certs,allow $1 cert_t:file { read getattr lock ioctl };,
system,miscfiles,miscfiles_read_certs,allow $1 cert_t:lnk_file { getattr read };,
system,miscfiles,miscfiles_read_fonts,allow $1 fonts_t:dir { read getattr lock search ioctl };,
system,miscfiles,miscfiles_read_fonts,allow $1 fonts_t:file { read getattr lock ioctl };,
system,miscfiles,miscfiles_read_fonts,allow $1 fonts_t:lnk_file { getattr read };,
system,miscfiles,miscfiles_manage_fonts,allow $1 fonts_t:dir { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir };,
system,miscfiles,miscfiles_manage_fonts,allow $1 fonts_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
system,miscfiles,miscfiles_manage_fonts,allow $1 fonts_t:lnk_file { create read getattr setattr link unlink rename };,
system,miscfiles,miscfiles_read_hwdata,allow $1 hwdata_t:dir { read getattr lock search ioctl };,
system,miscfiles,miscfiles_read_hwdata,allow $1 hwdata_t:file { read getattr lock ioctl };,
system,miscfiles,miscfiles_read_hwdata,allow $1 hwdata_t:lnk_file { getattr read };,
system,miscfiles,miscfiles_read_localization,allow $1 locale_t:dir { read getattr lock search ioctl };,
system,miscfiles,miscfiles_read_localization,allow $1 locale_t:lnk_file { read getattr lock ioctl };,
system,miscfiles,miscfiles_read_localization,allow $1 locale_t:file { read getattr lock ioctl };,
system,miscfiles,miscfiles_legacy_read_localization,allow $1 locale_t:file execute;,
system,miscfiles,miscfiles_read_man_pages,allow $1 man_t:dir { read getattr lock search ioctl };,
system,miscfiles,miscfiles_read_man_pages,allow $1 man_t:file { read getattr lock ioctl };,
system,miscfiles,miscfiles_read_man_pages,allow $1 man_t:lnk_file { read getattr lock ioctl };,
system,miscfiles,miscfiles_delete_man_pages,allow $1 man_t:dir { setattr { read getattr lock search ioctl add_name remove_name write } rmdir };,
system,miscfiles,miscfiles_delete_man_pages,allow $1 man_t:file { getattr unlink };,
system,miscfiles,miscfiles_delete_man_pages,allow $1 man_t:lnk_file { getattr unlink };,
system,miscfiles,miscfiles_manage_man_pages,allow $1 man_t:dir { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir };,
system,miscfiles,miscfiles_manage_man_pages,allow $1 man_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
system,miscfiles,miscfiles_manage_man_pages,allow $1 man_t:lnk_file { read getattr lock ioctl };,
system,miscfiles,miscfiles_read_public_files,allow $1 { public_content_t public_content_rw_t }:dir { read getattr lock search ioctl };,
system,miscfiles,miscfiles_read_public_files,allow $1 { public_content_t public_content_rw_t }:file { read getattr lock ioctl };,
system,miscfiles,miscfiles_read_public_files,allow $1 { public_content_t public_content_rw_t }:lnk_file { getattr read };,
system,miscfiles,miscfiles_manage_public_files,allow $1 public_content_rw_t:dir { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir };,
system,miscfiles,miscfiles_manage_public_files,allow $1 public_content_rw_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
system,miscfiles,miscfiles_manage_public_files,allow $1 public_content_rw_t:lnk_file { create read getattr setattr link unlink rename };,
system,miscfiles,miscfiles_read_tetex_data,allow $1 tetex_data_t:dir { read getattr lock search ioctl };,
system,miscfiles,miscfiles_read_tetex_data,allow $1 tetex_data_t:file { read getattr lock ioctl };,
system,miscfiles,miscfiles_read_tetex_data,allow $1 tetex_data_t:lnk_file { read getattr lock ioctl };,
system,miscfiles,miscfiles_exec_tetex_data,allow $1 tetex_data_t:dir { read getattr lock search ioctl };,
system,modutils,modutils_read_module_deps,allow $1 modules_dep_t:file { read getattr lock ioctl };,
system,modutils,modutils_read_module_config,allow $1 modules_conf_t:{ file lnk_file } { read getattr lock ioctl };,
system,modutils,modutils_rename_module_config,allow $1 modules_conf_t:file rename;,
system,modutils,modutils_domtrans_insmod_uncond,allow $1 insmod_t:fd use;,
system,modutils,modutils_domtrans_insmod_uncond,allow insmod_t $1:fd use;,
system,modutils,modutils_domtrans_insmod_uncond,allow insmod_t $1:fifo_file { getattr read write append ioctl lock };,
system,modutils,modutils_domtrans_insmod_uncond,allow insmod_t $1:process sigchld;,
system,modutils,modutils_run_insmod,allow insmod_t $3:chr_file { getattr read write ioctl };,
system,modutils,modutils_domtrans_depmod,allow $1 depmod_t:fd use;,
system,modutils,modutils_domtrans_depmod,allow depmod_t $1:fd use;,
system,modutils,modutils_domtrans_depmod,allow depmod_t $1:fifo_file { getattr read write append ioctl lock };,
system,modutils,modutils_domtrans_depmod,allow depmod_t $1:process sigchld;,
system,modutils,modutils_run_depmod,allow insmod_t $3:chr_file { getattr read write ioctl };,
system,modutils,modutils_domtrans_update_mods,allow $1 update_modules_t:fd use;,
system,modutils,modutils_domtrans_update_mods,allow update_modules_t $1:fd use;,
system,modutils,modutils_domtrans_update_mods,allow update_modules_t $1:fifo_file { getattr read write append ioctl lock };,
system,modutils,modutils_domtrans_update_mods,allow update_modules_t $1:process sigchld;,
system,modutils,modutils_run_update_mods,allow update_modules_t $3:chr_file { getattr read write ioctl };,
system,mount,mount_domtrans,allow $1 mount_t:fd use;,
system,mount,mount_domtrans,allow mount_t $1:fd use;,
system,mount,mount_domtrans,allow mount_t $1:fifo_file { getattr read write append ioctl lock };,
system,mount,mount_domtrans,allow mount_t $1:process sigchld;,
system,mount,mount_run,allow mount_t $3:chr_file { getattr read write append ioctl lock };,
system,mount,mount_exec,allow $1 mount_exec_t:dir { read getattr lock search ioctl };,
system,mount,mount_exec,allow $1 mount_exec_t:lnk_file { read getattr lock ioctl };,
system,mount,mount_use_fds,allow $1 mount_t:fd use; ,
system,mount,mount_send_nfs_client_request,allow $1 mount_t:udp_socket { ioctl read getattr write setattr append bind connect getopt setopt shutdown };,
system,pcmcia,pcmcia_domtrans_cardmgr,allow $1 cardmgr_t:fd use;,
system,pcmcia,pcmcia_domtrans_cardmgr,allow cardmgr_t $1:fd use;,
system,pcmcia,pcmcia_domtrans_cardmgr,allow cardmgr_t $1:fifo_file { getattr read write append ioctl lock };,
system,pcmcia,pcmcia_domtrans_cardmgr,allow cardmgr_t $1:process sigchld;,
system,pcmcia,pcmcia_use_cardmgr_fds,allow $1 cardmgr_t:fd use;,
system,pcmcia,pcmcia_domtrans_cardctl,allow $1 cardmgr_t:fd use;,
system,pcmcia,pcmcia_domtrans_cardctl,allow cardmgr_t $1:fd use;,
system,pcmcia,pcmcia_domtrans_cardctl,allow cardmgr_t $1:fifo_file { getattr read write append ioctl lock };,
system,pcmcia,pcmcia_domtrans_cardctl,allow cardmgr_t $1:process sigchld;,
system,pcmcia,pcmcia_run_cardctl,allow cardmgr_t $3:chr_file { getattr read write ioctl };,
system,pcmcia,pcmcia_read_pid,allow $1 cardmgr_var_run_t:dir { read getattr lock search ioctl };,
system,pcmcia,pcmcia_read_pid,allow $1 cardmgr_var_run_t:file { read getattr lock ioctl };,
system,pcmcia,pcmcia_read_pid,allow $1 cardmgr_var_run_t:lnk_file { getattr read };,
system,pcmcia,pcmcia_manage_pid,allow $1 cardmgr_var_run_t:dir { read getattr lock search ioctl add_name remove_name write };,
system,pcmcia,pcmcia_manage_pid,allow $1 cardmgr_var_run_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
system,pcmcia,pcmcia_manage_pid_chr_files,allow $1 cardmgr_var_run_t:dir { read getattr lock search ioctl add_name remove_name write };,
system,pcmcia,pcmcia_manage_pid_chr_files,allow $1 cardmgr_var_run_t:chr_file { create ioctl read getattr lock write setattr append link unlink rename };,
system,raid,raid_domtrans_mdadm,allow $1 mdadm_t:fd use;,
system,raid,raid_domtrans_mdadm,allow mdadm_t $1:fd use;,
system,raid,raid_domtrans_mdadm,allow mdadm_t $1:fifo_file { getattr read write append ioctl lock };,
system,raid,raid_domtrans_mdadm,allow mdadm_t $1:process sigchld;,
system,raid,raid_manage_mdadm_pid,allow $1 mdadm_var_run_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
system,selinuxutil,seutil_domtrans_checkpolicy,allow $1 checkpolicy_t:fd use;,
system,selinuxutil,seutil_domtrans_checkpolicy,allow checkpolicy_t $1:fd use;,
system,selinuxutil,seutil_domtrans_checkpolicy,allow checkpolicy_t $1:fifo_file { getattr read write append ioctl lock };,
system,selinuxutil,seutil_domtrans_checkpolicy,allow checkpolicy_t $1:process sigchld;,
system,selinuxutil,seutil_run_checkpolicy,allow checkpolicy_t $3:chr_file { getattr read write ioctl };,
system,selinuxutil,seutil_domtrans_loadpolicy,allow $1 load_policy_t:fd use;,
system,selinuxutil,seutil_domtrans_loadpolicy,allow load_policy_t $1:fd use;,
system,selinuxutil,seutil_domtrans_loadpolicy,allow load_policy_t $1:fifo_file { getattr read write append ioctl lock };,
system,selinuxutil,seutil_domtrans_loadpolicy,allow load_policy_t $1:process sigchld;,
system,selinuxutil,seutil_run_loadpolicy,allow load_policy_t $3:chr_file { getattr read write ioctl };,
system,selinuxutil,seutil_read_loadpolicy,allow $1 load_policy_exec_t:file { read getattr lock ioctl };,
system,selinuxutil,seutil_domtrans_newrole,allow $1 newrole_t:fd use;,
system,selinuxutil,seutil_domtrans_newrole,allow newrole_t $1:fd use;,
system,selinuxutil,seutil_domtrans_newrole,allow newrole_t $1:fifo_file { getattr read write append ioctl lock };,
system,selinuxutil,seutil_domtrans_newrole,allow newrole_t $1:process sigchld;,
system,selinuxutil,seutil_run_newrole,allow newrole_t $3:chr_file { getattr read write ioctl };,
system,selinuxutil,seutil_sigchld_newrole,allow $1 newrole_t:process sigchld;,
system,selinuxutil,seutil_use_newrole_fds,allow $1 newrole_t:fd use;,
system,selinuxutil,seutil_domtrans_restorecon,allow $1 restorecon_t:fd use;,
system,selinuxutil,seutil_domtrans_restorecon,allow restorecon_t $1:fd use;,
system,selinuxutil,seutil_domtrans_restorecon,allow restorecon_t $1:fifo_file { getattr read write append ioctl lock };,
system,selinuxutil,seutil_domtrans_restorecon,allow restorecon_t $1:process sigchld;,
system,selinuxutil,seutil_run_restorecon,allow restorecon_t $3:chr_file { getattr read write ioctl };,
system,selinuxutil,seutil_domtrans_runinit,allow $1 run_init_t:fd use;,
system,selinuxutil,seutil_domtrans_runinit,allow run_init_t $1:fd use;,
system,selinuxutil,seutil_domtrans_runinit,allow run_init_t $1:fifo_file { getattr read write append ioctl lock };,
system,selinuxutil,seutil_domtrans_runinit,allow run_init_t $1:process sigchld;,
system,selinuxutil,seutil_init_script_domtrans_runinit,allow $1 run_init_t:fd use;,
system,selinuxutil,seutil_init_script_domtrans_runinit,allow run_init_t $1:fd use;,
system,selinuxutil,seutil_init_script_domtrans_runinit,allow run_init_t $1:fifo_file { getattr read write append ioctl lock };,
system,selinuxutil,seutil_init_script_domtrans_runinit,allow run_init_t $1:process sigchld;,
system,selinuxutil,seutil_run_runinit,allow run_init_t $3:chr_file { getattr read write ioctl };,
system,selinuxutil,seutil_run_runinit,allow $2 system_r;,
system,selinuxutil,seutil_init_script_run_runinit,allow run_init_t $3:chr_file { getattr read write ioctl };,
system,selinuxutil,seutil_init_script_run_runinit,allow $2 system_r;,
system,selinuxutil,seutil_use_runinit_fds,allow $1 run_init_t:fd use;,
system,selinuxutil,seutil_domtrans_setfiles,allow $1 setfiles_t:fd use;,
system,selinuxutil,seutil_domtrans_setfiles,allow setfiles_t $1:fd use;,
system,selinuxutil,seutil_domtrans_setfiles,allow setfiles_t $1:fifo_file { getattr read write append ioctl lock };,
system,selinuxutil,seutil_domtrans_setfiles,allow setfiles_t $1:process sigchld;,
system,selinuxutil,seutil_run_setfiles,allow setfiles_t $3:chr_file { getattr read write ioctl };,
system,selinuxutil,seutil_read_config,allow $1 selinux_config_t:dir { read getattr lock search ioctl };,
system,selinuxutil,seutil_read_config,allow $1 selinux_config_t:file { read getattr lock ioctl };,
system,selinuxutil,seutil_read_config,allow $1 selinux_config_t:lnk_file { getattr read };,
system,selinuxutil,seutil_search_default_contexts,allow $1 { selinux_config_t default_context_t }:dir search;,
system,selinuxutil,seutil_read_default_contexts,allow $1 selinux_config_t:dir search;,
system,selinuxutil,seutil_read_default_contexts,allow $1 default_context_t:dir { read getattr lock search ioctl };,
system,selinuxutil,seutil_read_default_contexts,allow $1 default_context_t:file { read getattr lock ioctl };,
system,selinuxutil,seutil_read_default_contexts,allow $1 default_context_t:lnk_file { getattr read };,
system,selinuxutil,seutil_read_file_contexts,allow $1 selinux_config_t:dir search;,
system,selinuxutil,seutil_read_file_contexts,allow $1 file_context_t:dir { read getattr lock search ioctl };,
system,selinuxutil,seutil_read_file_contexts,allow $1 file_context_t:file { read getattr lock ioctl };,
system,selinuxutil,seutil_read_file_contexts,allow $1 file_context_t:lnk_file { getattr read };,
system,selinuxutil,seutil_rw_file_contexts,allow $1 selinux_config_t:dir search;,
system,selinuxutil,seutil_rw_file_contexts,allow $1 file_context_t:dir { read getattr lock search ioctl };,
system,selinuxutil,seutil_rw_file_contexts,allow $1 file_context_t:file { getattr read write append ioctl lock };,
system,selinuxutil,seutil_rw_file_contexts,allow $1 file_context_t:lnk_file { getattr read };,
system,selinuxutil,seutil_read_bin_policy,allow $1 selinux_config_t:dir search;,
system,selinuxutil,seutil_read_bin_policy,allow $1 policy_config_t:dir { read getattr lock search ioctl };,
system,selinuxutil,seutil_read_bin_policy,allow $1 policy_config_t:file { read getattr lock ioctl };,
system,selinuxutil,seutil_create_bin_policy,allow $1 selinux_config_t:dir search;,
system,selinuxutil,seutil_create_bin_policy,allow $1 policy_config_t:dir { read getattr lock search ioctl add_name write };,
system,selinuxutil,seutil_create_bin_policy,allow $1 policy_config_t:file { getattr create write };,
system,selinuxutil,seutil_relabelto_bin_policy,allow $1 policy_config_t:file relabelto;,
system,selinuxutil,seutil_manage_bin_policy,allow $1 selinux_config_t:dir search;,
system,selinuxutil,seutil_manage_bin_policy,allow $1 policy_config_t:dir { read getattr lock search ioctl add_name remove_name write };,
system,selinuxutil,seutil_manage_bin_policy,allow $1 policy_config_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
system,selinuxutil,seutil_read_src_policy,allow $1 selinux_config_t:dir search;,
system,selinuxutil,seutil_read_src_policy,allow $1 policy_src_t:dir { read getattr lock search ioctl };,
system,selinuxutil,seutil_read_src_policy,allow $1 policy_src_t:file { read getattr lock ioctl };,
system,selinuxutil,seutil_manage_src_policy,allow $1 selinux_config_t:dir search;,
system,selinuxutil,seutil_manage_src_policy,allow $1 policy_src_t:dir { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir };,
system,selinuxutil,seutil_manage_src_policy,allow $1 policy_src_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
system,selinuxutil,seutil_domtrans_semanage,allow $1 semanage_t:fd use;,
system,selinuxutil,seutil_domtrans_semanage,allow semanage_t $1:fd use;,
system,selinuxutil,seutil_domtrans_semanage,allow semanage_t $1:fifo_file { getattr read write append ioctl lock };,
system,selinuxutil,seutil_domtrans_semanage,allow semanage_t $1:process sigchld;,
system,selinuxutil,seutil_run_semanage,allow semanage_t $3:chr_file { getattr read write ioctl };,
system,selinuxutil,seutil_manage_module_store,allow $1 selinux_config_t:dir { read getattr lock search ioctl add_name remove_name write };,
system,selinuxutil,seutil_manage_module_store,allow $1 semanage_store_t:dir { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir };,
system,selinuxutil,seutil_manage_module_store,allow $1 semanage_store_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
system,selinuxutil,seutil_get_semanage_read_lock,allow $1 selinux_config_t:dir { getattr search };,
system,selinuxutil,seutil_get_semanage_read_lock,allow $1 semanage_read_lock_t:file { getattr read write append ioctl lock };,
system,selinuxutil,seutil_get_semanage_trans_lock,allow $1 selinux_config_t:dir { getattr search };,
system,selinuxutil,seutil_get_semanage_trans_lock,allow $1 semanage_trans_lock_t:file { getattr read write append ioctl lock };,
system,sysnetwork,sysnet_domtrans_dhcpc,allow $1 dhcpc_t:fd use;,
system,sysnetwork,sysnet_domtrans_dhcpc,allow dhcpc_t $1:fd use;,
system,sysnetwork,sysnet_domtrans_dhcpc,allow dhcpc_t $1:fifo_file { getattr read write append ioctl lock };,
system,sysnetwork,sysnet_domtrans_dhcpc,allow dhcpc_t $1:process sigchld;,
system,sysnetwork,sysnet_run_dhcpc,allow dhcpc_t $3:chr_file { getattr read write ioctl };,
system,sysnetwork,sysnet_sigchld_dhcpc,allow $1 dhcpc_t:process sigchld;,
system,sysnetwork,sysnet_kill_dhcpc,allow $1 dhcpc_t:process sigkill;,
system,sysnetwork,sysnet_sigstop_dhcpc,allow $1 dhcpc_t:process sigstop;,
system,sysnetwork,sysnet_signull_dhcpc,allow $1 dhcpc_t:process signull;,
system,sysnetwork,sysnet_signal_dhcpc,allow $1 dhcpc_t:process signal;,
system,sysnetwork,sysnet_dbus_chat_dhcpc,allow $1 dhcpc_t:dbus send_msg;,
system,sysnetwork,sysnet_dbus_chat_dhcpc,allow dhcpc_t $1:dbus send_msg;,
system,sysnetwork,sysnet_rw_dhcp_config,allow $1 dhcp_etc_t:file { getattr read write append ioctl lock };,
system,sysnetwork,sysnet_read_dhcpc_state,allow $1 dhcpc_state_t:file { getattr read };,
system,sysnetwork,sysnet_read_config,allow $1 net_conf_t:file { read getattr lock ioctl };,
system,sysnetwork,sysnet_manage_config,allow $1 net_conf_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
system,sysnetwork,sysnet_read_dhcpc_pid,allow $1 dhcpc_var_run_t:file { getattr read };,
system,sysnetwork,sysnet_delete_dhcpc_pid,allow $1 dhcpc_var_run_t:file unlink;,
system,sysnetwork,sysnet_domtrans_ifconfig,allow $1 ifconfig_t:fd use;,
system,sysnetwork,sysnet_domtrans_ifconfig,allow ifconfig_t $1:fd use;,
system,sysnetwork,sysnet_domtrans_ifconfig,allow ifconfig_t $1:fifo_file { getattr read write append ioctl lock };,
system,sysnetwork,sysnet_domtrans_ifconfig,allow ifconfig_t $1:process sigchld;,
system,sysnetwork,sysnet_run_ifconfig,allow ifconfig_t $3:chr_file { getattr read write ioctl };,
system,sysnetwork,sysnet_read_dhcp_config,allow $1 dhcp_etc_t:dir search;,
system,sysnetwork,sysnet_read_dhcp_config,allow $1 dhcp_etc_t:file { getattr read };,
system,sysnetwork,sysnet_search_dhcp_state,allow $1 dhcp_state_t:dir search;,
system,sysnetwork,sysnet_dhcp_state_filetrans,allow $1 dhcp_state_t:dir { read getattr lock search ioctl add_name remove_name write };,
system,sysnetwork,sysnet_dns_name_resolve,allow $1 self:tcp_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown };,
system,sysnetwork,sysnet_dns_name_resolve,allow $1 self:udp_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown };,
system,sysnetwork,sysnet_dns_name_resolve,allow $1 net_conf_t:file { read getattr lock ioctl };,
system,sysnetwork,sysnet_use_ldap,allow $1 self:tcp_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown };,
system,sysnetwork,sysnet_use_ldap,allow $1 net_conf_t:file { read getattr lock ioctl };,
system,sysnetwork,sysnet_use_portmap,allow $1 self:tcp_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown };,
system,sysnetwork,sysnet_use_portmap,allow $1 self:udp_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown };,
system,sysnetwork,sysnet_use_portmap,allow $1 net_conf_t:file { read getattr lock ioctl };,
system,udev,udev_domtrans,allow $1 udev_t:fd use;,
system,udev,udev_domtrans,allow udev_t $1:fd use;,
system,udev,udev_domtrans,allow udev_t $1:fifo_file { getattr read write append ioctl lock };,
system,udev,udev_domtrans,allow udev_t $1:process sigchld;,
system,udev,udev_helper_domtrans,allow $1 udev_t:fd use;,
system,udev,udev_helper_domtrans,allow udev_t $1:fd use;,
system,udev,udev_helper_domtrans,allow udev_t $1:fifo_file { getattr read write append ioctl lock };,
system,udev,udev_helper_domtrans,allow udev_t $1:process sigchld;,
system,udev,udev_read_state,allow $1 udev_t:file { read getattr lock ioctl };,
system,udev,udev_read_state,allow $1 udev_t:lnk_file { read getattr lock ioctl };,
system,udev,udev_read_db,allow $1 udev_tdb_t:file { read getattr lock ioctl };,
system,udev,udev_rw_db,allow $1 udev_tdb_t:file { getattr read write append ioctl lock };,
system,unconfined,unconfined_domain_noaudit,allow $1 self:capability *;,
system,unconfined,unconfined_domain_noaudit,allow $1 self:fifo_file { create ioctl read getattr lock write setattr append link unlink rename };,
system,unconfined,unconfined_domain_noaudit,allow $1 self:process transition;,
system,unconfined,unconfined_domain_noaudit,allow $1 self:file { getattr read write append ioctl lock };,
system,unconfined,unconfined_domain_noaudit,allow $1 self:nscd *;,
system,unconfined,unconfined_domain_noaudit,allow $1 self:dbus *;,
system,unconfined,unconfined_domain_noaudit,allow $1 self:passwd *;,
system,unconfined,unconfined_domtrans,allow $1 unconfined_t:fd use;,
system,unconfined,unconfined_domtrans,allow unconfined_t $1:fd use;,
system,unconfined,unconfined_domtrans,allow unconfined_t $1:fifo_file { getattr read write append ioctl lock };,
system,unconfined,unconfined_domtrans,allow unconfined_t $1:process sigchld;,
system,unconfined,unconfined_run,allow unconfined_t $3:chr_file { getattr read write ioctl };,
system,unconfined,unconfined_use_fds,allow $1 unconfined_t:fd use;,
system,unconfined,unconfined_sigchld,allow $1 unconfined_t:process sigchld;,
system,unconfined,unconfined_signal,allow $1 unconfined_t:process signal;,
system,unconfined,unconfined_read_pipes,allow $1 unconfined_t:fifo_file { read getattr lock ioctl };,
system,unconfined,unconfined_rw_pipes,allow $1 unconfined_t:fifo_file { getattr read write append ioctl lock };,
system,unconfined,unconfined_dbus_send,allow $1 unconfined_t:dbus send_msg;,
system,userdomain,allow system_r $1_r;,
system,userdomain,allow $1_file_type $1_home_t:filesystem associate;,
system,userdomain,allow $1_t self:capability { setgid chown fowner };,
system,userdomain,allow $1_t self:process ~{ ptrace setcurrent setexec setfscreate setrlimit execmem execstack execheap };,
system,userdomain,allow $1_t self:process { ptrace setfscreate };,
system,userdomain,allow $1_t self:fd use;,
system,userdomain,allow $1_t self:fifo_file { getattr read write append ioctl lock };,
system,userdomain,allow $1_t self:unix_dgram_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown };,
system,userdomain,allow $1_t self:unix_stream_socket { create ioctl read getattr write setattr append bind connect getopt setopt shutdown listen accept };,
system,userdomain,allow $1_t self:unix_dgram_socket sendto;,
system,userdomain,allow $1_t self:unix_stream_socket connectto;,
system,userdomain,allow $1_t self:shm { associate getattr setattr create destroy read write lock unix_read unix_write };,
system,userdomain,allow $1_t self:sem { associate getattr setattr create destroy read write unix_read unix_write };,
system,userdomain,allow $1_t self:msgq { associate getattr setattr create destroy read write enqueue unix_read unix_write };,
system,userdomain,allow $1_t self:msg { send receive };,
system,userdomain,allow $1_t self:udp_socket { sendto recvfrom };,
system,userdomain,allow $1_t $1_home_t:file { { create ioctl read getattr lock write setattr append link unlink rename } relabelfrom relabelto };,
system,userdomain,allow $1_t $1_home_t:lnk_file { { create read getattr setattr link unlink rename } relabelfrom relabelto };,
system,userdomain,allow $1_t $1_home_t:dir { { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir } relabelfrom relabelto };,
system,userdomain,allow $1_t $1_home_t:sock_file { { create ioctl read getattr lock write setattr append link unlink rename } relabelfrom relabelto };,
system,userdomain,allow $1_t $1_home_t:fifo_file { { create ioctl read getattr lock write setattr append link unlink rename } relabelfrom relabelto };,
system,userdomain,allow $1_t $1_home_dir_t:dir { { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir } relabelfrom relabelto };,
system,userdomain,allow $1_t $1_tmp_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
system,userdomain,allow $1_t $1_tmp_t:lnk_file { create read getattr setattr link unlink rename };,
system,userdomain,allow $1_t $1_tmp_t:dir { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir };,
system,userdomain,allow $1_t $1_tmp_t:sock_file { create ioctl read getattr lock write setattr append link unlink rename };,
system,userdomain,allow $1_t $1_tmp_t:fifo_file { create ioctl read getattr lock write setattr append link unlink rename };,
system,userdomain,allow $1_t $1_tmp_t:unix_stream_socket name_bind;,
system,userdomain,allow $1_t $1_tmpfs_t:dir { read getattr lock search ioctl add_name remove_name write };,
system,userdomain,allow $1_t $1_tmpfs_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
system,userdomain,allow $1_t $1_tmpfs_t:lnk_file { create read getattr setattr link unlink rename };,
system,userdomain,allow $1_t $1_tmpfs_t:sock_file { create ioctl read getattr lock write setattr append link unlink rename };,
system,userdomain,allow $1_t $1_tmpfs_t:fifo_file { create ioctl read getattr lock write setattr append link unlink rename };,
system,userdomain,allow $1_t $1_tty_device_t:chr_file { setattr { getattr read write append ioctl lock } };,
system,userdomain,allow $1_t { $1_untrusted_content_t $1_untrusted_content_tmp_t }:dir { { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir } relabelto relabelfrom };,
system,userdomain,allow $1_t { $1_untrusted_content_t $1_untrusted_content_tmp_t }:file { getattr unlink relabelto relabelfrom rename };,
system,userdomain,allow $1_t unpriv_userdomain:fd use;,
system,userdomain,allow $1_t usbtty_device_t:chr_file read;,
system,userdomain,allow $1_t $1_devpts_t:chr_file { setattr ioctl read getattr lock write append };,
system,userdomain,allow $1_home_t self:filesystem associate;,
system,userdomain,allow $1_file_type $1_home_t:filesystem associate;,
system,userdomain,allow privhome $1_home_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
system,userdomain,allow privhome $1_home_t:lnk_file { create read getattr setattr link unlink rename };,
system,userdomain,allow privhome $1_home_t:dir { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir };,
system,userdomain,allow privhome $1_home_t:sock_file { create ioctl read getattr lock write setattr append link unlink rename };,
system,userdomain,allow privhome $1_home_t:fifo_file { create ioctl read getattr lock write setattr append link unlink rename };,
system,userdomain,allow useradd_t $1_file_type:dir { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir };,
system,userdomain,allow useradd_t $1_file_type:notdevfile_class_set { create ioctl read getattr lock write setattr append link unlink rename };,
system,userdomain,allow $1_t lost_found_t:dir getattr;,
system,userdomain,allow $1_t var_lib_t:dir { read getattr lock search ioctl };,
system,userdomain,allow $1_t var_lib_t:file { getattr read };,
system,userdomain,allow $1_t initrc_t:fifo_file write;,
system,userdomain,allow $1_t self:capability ~sys_module;,
system,userdomain,allow $1_t self:process { setexec setfscreate };,
system,userdomain,allow $1_t self:passwd { passwd chfn chsh };,
system,userdomain,allow $1_t self:passwd rootok;,
system,userdomain,allow $1_t self:passwd crontab;,
system,userdomain,allow $1_t self:tcp_socket { acceptfrom connectto recvfrom };,
system,userdomain,allow $1_t self:netlink_audit_socket nlmsg_readpriv;,
system,userdomain,allow $1_t $1_devpts_t:chr_file { setattr ioctl read getattr lock write append };,
system,userdomain,allow $1_t mtrr_device_t:file getattr;,
system,userdomain,allow $1_t eventpollfs_t:file getattr;,
system,userdomain,allow $1_t serial_device:chr_file setattr;,
system,userdomain,allow $1_t ptyfile:chr_file getattr;,
system,userdomain,allow $1_t device_t:dir { read getattr lock search ioctl add_name remove_name write };,
system,userdomain,allow $1_t device_type:{ blk_file chr_file } { create unlink rename };,
system,userdomain,allow $1_t device_t:lnk_file { create read };,
system,userdomain,allow $1 removable_t:filesystem getattr;,
system,userdomain,allow $2 $1_home_dir_t:dir { getattr search };,
system,userdomain,allow $2 $1_home_dir_t:dir { read getattr lock search ioctl };,
system,userdomain,allow $2 $1_home_dir_t:dir { getattr search };,
system,userdomain,allow $2 $1_home_dir_t:dir { read getattr lock search ioctl add_name remove_name write };,
system,userdomain,allow $2 $1_home_t:dir { create getattr setattr read write link unlink rename search add_name remove_name reparent rmdir lock ioctl };,
system,userdomain,allow $2 $1_home_dir_t:dir search;,
system,userdomain,allow $2 $1_home_t:dir { getattr search };,
system,userdomain,allow $2 $1_home_t:file { read getattr lock ioctl };,
system,userdomain,allow $2 $1_home_dir_t:dir search;,
system,userdomain,allow $2 $1_home_t:dir search;,
system,userdomain,allow $2 $1_home_t:lnk_file { read getattr lock ioctl };,
system,userdomain,allow $2 $1_home_dir_t:dir search;,
system,userdomain,allow $2 $1_home_t:dir search;,
system,userdomain,allow $2 $1_home_dir_t:dir search;,
system,userdomain,allow $2 $1_home_t:dir { read getattr lock search ioctl add_name remove_name write };,
system,userdomain,allow $2 $1_home_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
system,userdomain,allow $2 $1_home_dir_t:dir search;,
system,userdomain,allow $2 $1_home_t:dir { read getattr lock search ioctl add_name remove_name write };,
system,userdomain,allow $2 $1_home_t:lnk_file { create read getattr setattr link unlink rename };,
system,userdomain,allow $2 $1_home_dir_t:dir search;,
system,userdomain,allow $2 $1_home_t:dir { read getattr lock search ioctl add_name remove_name write };,
system,userdomain,allow $2 $1_home_t:fifo_file { create ioctl read getattr lock write setattr append link unlink rename };,
system,userdomain,allow $2 $1_home_dir_t:dir search;,
system,userdomain,allow $2 $1_home_t:dir { read getattr lock search ioctl add_name remove_name write };,
system,userdomain,allow $2 $1_home_t:sock_file { create ioctl read getattr lock write setattr append link unlink rename };,
system,userdomain,allow $2 $1_home_dir_t:dir { read getattr lock search ioctl add_name remove_name write };,
system,userdomain,allow $2 $1_home_dir_t:dir { read getattr lock search ioctl add_name remove_name write };,
system,userdomain,allow $2 $1_tmp_t:sock_file write;,
system,userdomain,allow $2 $1_tmp_t:dir { read getattr lock search ioctl };,
system,userdomain,allow $2 $1_tmp_t:dir { read getattr lock search ioctl };,
system,userdomain,allow $2 $1_tmp_t:file { read getattr lock ioctl };,
system,userdomain,allow $2 $1_tmp_t:dir { read getattr lock search ioctl };,
system,userdomain,allow $2 $1_tmp_t:file { getattr read write append ioctl lock };,
system,userdomain,allow $2 $1_tmp_t:dir { read getattr lock search ioctl };,
system,userdomain,allow $2 $1_tmp_t:lnk_file { read getattr lock ioctl };,
system,userdomain,allow $2 $1_tmp_t:dir { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir };,
system,userdomain,allow $2 $1_tmp_t:dir { read getattr lock search ioctl add_name remove_name write };,
system,userdomain,allow $2 $1_tmp_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
system,userdomain,allow $2 $1_tmp_t:dir { read getattr lock search ioctl add_name remove_name write };,
system,userdomain,allow $2 $1_tmp_t:lnk_file { create read getattr setattr link unlink rename };,
system,userdomain,allow $2 $1_tmp_t:dir { read getattr lock search ioctl add_name remove_name write };,
system,userdomain,allow $2 $1_tmp_t:fifo_file { create ioctl read getattr lock write setattr append link unlink rename };,
system,userdomain,allow $2 $1_tmp_t:dir { read getattr lock search ioctl add_name remove_name write };,
system,userdomain,allow $2 $1_tmp_t:sock_file { create ioctl read getattr lock write setattr append link unlink rename };,
system,userdomain,allow $2 $1_tmpfs_t:dir { getattr search read lock ioctl };,
system,userdomain,allow $2 $1_tmpfs_t:file { getattr read write append ioctl lock };,
system,userdomain,allow $2 $1_tmpfs_t:lnk_file { getattr read };,
system,userdomain,allow $2 $1_untrusted_content_t:dir { read getattr lock search ioctl };,
system,userdomain,allow $2 $1_untrusted_content_t:dir { read getattr lock search ioctl add_name remove_name write };,
system,userdomain,allow $2 $1_untrusted_content_t:file { read getattr lock ioctl };,
system,userdomain,allow $2 $1_untrusted_content_t:dir { read getattr lock search ioctl add_name remove_name write };,
system,userdomain,allow $2 $1_untrusted_content_t:lnk_file { read getattr lock ioctl };,
system,userdomain,allow $2 $1_untrusted_content_tmp_t:dir { read getattr lock search ioctl };,
system,userdomain,allow $2 $1_untrusted_content_tmp_t:dir { read getattr lock search ioctl add_name remove_name write };,
system,userdomain,allow $2 $1_untrusted_content_tmp_t:file { read getattr lock ioctl };,
system,userdomain,allow $2 $1_untrusted_content_tmp_t:dir { read getattr lock search ioctl add_name remove_name write };,
system,userdomain,allow $2 $1_untrusted_content_tmp_t:lnk_file { read getattr lock ioctl };,
system,userdomain,userdom_read_all_untrusted_content,allow $1 untrusted_content_type:dir { read getattr lock search ioctl };,
system,userdomain,userdom_read_all_untrusted_content,allow $1 untrusted_content_type:{ file lnk_file } { read getattr lock ioctl };,
system,userdomain,userdom_read_all_tmp_untrusted_content,allow $1 untrusted_content_tmp_type:dir { read getattr lock search ioctl };,
system,userdomain,userdom_read_all_tmp_untrusted_content,allow $1 untrusted_content_tmp_type:{ file lnk_file } { read getattr lock ioctl };,
system,userdomain,userdom_spec_domtrans_all_users,allow $1 userdomain:fd use;,
system,userdomain,userdom_spec_domtrans_all_users,allow userdomain $1:fd use;,
system,userdomain,userdom_spec_domtrans_all_users,allow userdomain $1:fifo_file { getattr read write append ioctl lock };,
system,userdomain,userdom_spec_domtrans_all_users,allow userdomain $1:process sigchld;,
system,userdomain,userdom_xsession_spec_domtrans_all_users,allow $1 userdomain:fd use;,
system,userdomain,userdom_xsession_spec_domtrans_all_users,allow userdomain $1:fd use;,
system,userdomain,userdom_xsession_spec_domtrans_all_users,allow userdomain $1:fifo_file { getattr read write append ioctl lock };,
system,userdomain,userdom_xsession_spec_domtrans_all_users,allow userdomain $1:process sigchld;,
system,userdomain,userdom_spec_domtrans_unpriv_users,allow $1 unpriv_userdomain:fd use;,
system,userdomain,userdom_spec_domtrans_unpriv_users,allow unpriv_userdomain $1:fd use;,
system,userdomain,userdom_spec_domtrans_unpriv_users,allow unpriv_userdomain $1:fifo_file { getattr read write append ioctl lock };,
system,userdomain,userdom_spec_domtrans_unpriv_users,allow unpriv_userdomain $1:process sigchld;,
system,userdomain,userdom_xsession_spec_domtrans_unpriv_users,allow $1 unpriv_userdomain:fd use;,
system,userdomain,userdom_xsession_spec_domtrans_unpriv_users,allow unpriv_userdomain $1:fd use;,
system,userdomain,userdom_xsession_spec_domtrans_unpriv_users,allow unpriv_userdomain $1:fifo_file { getattr read write append ioctl lock };,
system,userdomain,userdom_xsession_spec_domtrans_unpriv_users,allow unpriv_userdomain $1:process sigchld;,
system,userdomain,userdom_manage_unpriv_user_semaphores,allow $1 unpriv_userdomain:sem { associate getattr setattr create destroy read write unix_read unix_write };,
system,userdomain,userdom_manage_unpriv_user_shared_mem,allow $1 unpriv_userdomain:shm { associate getattr setattr create destroy read write lock unix_read unix_write };,
system,userdomain,userdom_bin_spec_domtrans_unpriv_users,allow $1 unpriv_userdomain:fd use;,
system,userdomain,userdom_bin_spec_domtrans_unpriv_users,allow unpriv_userdomain $1:fd use;,
system,userdomain,userdom_bin_spec_domtrans_unpriv_users,allow unpriv_userdomain $1:fifo_file { getattr read write append ioctl lock };,
system,userdomain,userdom_bin_spec_domtrans_unpriv_users,allow unpriv_userdomain $1:process sigchld;,
system,userdomain,userdom_sbin_spec_domtrans_unpriv_users,allow $1 unpriv_userdomain:fd use;,
system,userdomain,userdom_sbin_spec_domtrans_unpriv_users,allow unpriv_userdomain $1:fd use;,
system,userdomain,userdom_sbin_spec_domtrans_unpriv_users,allow unpriv_userdomain $1:fifo_file { getattr read write append ioctl lock };,
system,userdomain,userdom_sbin_spec_domtrans_unpriv_users,allow unpriv_userdomain $1:process sigchld;,
system,userdomain,userdom_entry_spec_domtrans_unpriv_users,allow $1 unpriv_userdomain:fd use;,
system,userdomain,userdom_entry_spec_domtrans_unpriv_users,allow unpriv_userdomain $1:fd use;,
system,userdomain,userdom_entry_spec_domtrans_unpriv_users,allow unpriv_userdomain $1:fifo_file { getattr read write append ioctl lock };,
system,userdomain,userdom_entry_spec_domtrans_unpriv_users,allow unpriv_userdomain $1:process sigchld;,
system,userdomain,userdom_bin_spec_domtrans_sysadm,allow $1 sysadm_t:fd use;,
system,userdomain,userdom_bin_spec_domtrans_sysadm,allow sysadm_t $1:fd use;,
system,userdomain,userdom_bin_spec_domtrans_sysadm,allow sysadm_t $1:fifo_file { getattr read write append ioctl lock };,
system,userdomain,userdom_bin_spec_domtrans_sysadm,allow sysadm_t $1:process sigchld;,
system,userdomain,userdom_sbin_spec_domtrans_sysadm,allow $1 sysadm_t:fd use;,
system,userdomain,userdom_sbin_spec_domtrans_sysadm,allow sysadm_t $1:fd use;,
system,userdomain,userdom_sbin_spec_domtrans_sysadm,allow sysadm_t $1:fifo_file { getattr read write append ioctl lock };,
system,userdomain,userdom_sbin_spec_domtrans_sysadm,allow sysadm_t $1:process sigchld;,
system,userdomain,userdom_entry_spec_domtrans_sysadm,allow $1 sysadm_t:fd use;,
system,userdomain,userdom_entry_spec_domtrans_sysadm,allow sysadm_t $1:fd use;,
system,userdomain,userdom_entry_spec_domtrans_sysadm,allow sysadm_t $1:fifo_file { getattr read write append ioctl lock };,
system,userdomain,userdom_entry_spec_domtrans_sysadm,allow sysadm_t $1:process sigchld;,
system,userdomain,userdom_search_staff_home_dirs,allow $1 staff_home_dir_t:dir search;,
system,userdomain,userdom_read_staff_home_content_files,allow $1 { staff_home_dir_t staff_home_t }:dir { read getattr lock search ioctl };,
system,userdomain,userdom_read_staff_home_content_files,allow $1 staff_home_t:{ file lnk_file } { read getattr lock ioctl };,
system,userdomain,userdom_getattr_sysadm_home_dirs,allow $1 sysadm_home_dir_t:dir getattr;,
system,userdomain,userdom_search_sysadm_home_dirs,allow $1 sysadm_home_dir_t:dir search;,
system,userdomain,userdom_list_sysadm_home_dirs,allow $1 sysadm_home_dir_t:dir { getattr search read lock ioctl };,
system,userdomain,userdom_sysadm_home_dir_filetrans,allow $1 sysadm_home_dir_t:dir { read getattr lock search ioctl add_name remove_name write };,
system,userdomain,userdom_search_sysadm_home_content_dirs,allow $1 { sysadm_home_dir_t sysadm_home_t }:dir { getattr search };,
system,userdomain,userdom_read_sysadm_home_content_files,allow $1 { sysadm_home_dir_t sysadm_home_t }:dir { read getattr lock search ioctl };,
system,userdomain,userdom_read_sysadm_home_content_files,allow $1 sysadm_home_t:{ file lnk_file } { read getattr lock ioctl };,
system,userdomain,userdom_list_all_users_home_dirs,allow $1 home_dir_type:dir { getattr search read lock ioctl };,
system,userdomain,userdom_search_all_users_home_content,allow $1 { home_dir_type home_type }:dir search;,
system,userdomain,userdom_read_all_users_home_content_files,allow $1 home_type:dir { read getattr lock search ioctl };,
system,userdomain,userdom_read_all_users_home_content_files,allow $1 home_type:file { read getattr lock ioctl };,
system,userdomain,userdom_manage_all_users_home_content_dirs,allow $1 home_type:dir { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir };,
system,userdomain,userdom_manage_all_users_home_content_files,allow $1 home_type:dir { read getattr lock search ioctl add_name remove_name write };,
system,userdomain,userdom_manage_all_users_home_content_files,allow $1 home_type:file { create ioctl read getattr lock write setattr append link unlink rename };,
system,userdomain,userdom_manage_all_users_home_content_symlinks,allow $1 home_type:dir { read getattr lock search ioctl add_name remove_name write };,
system,userdomain,userdom_manage_all_users_home_content_symlinks,allow $1 home_type:lnk_file { create read getattr setattr link unlink rename };,
system,userdomain,userdom_signal_unpriv_users,allow $1 unpriv_userdomain:process signal;,
system,userdomain,userdom_use_unpriv_users_fds,allow $1 unpriv_userdomain:fd use;,
system,userdomain,userdom_search_generic_user_home_dirs,allow $1 user_home_dir_t:dir { getattr search };,
system,userdomain,userdom_generic_user_home_dir_filetrans_generic_user_home_content,allow $1 user_home_dir_t:dir { read getattr lock search ioctl add_name remove_name write };,
system,userdomain,userdom_manage_generic_user_home_content_dirs,allow $1 user_home_dir_t:dir { getattr search };,
system,userdomain,userdom_manage_generic_user_home_content_dirs,allow $1 user_home_t:dir { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir };,
system,userdomain,userdom_manage_generic_user_home_content_files,allow $1 user_home_dir_t:dir { getattr search };,
system,userdomain,userdom_manage_generic_user_home_content_files,allow $1 user_home_t:dir { read getattr lock search ioctl add_name remove_name write };,
system,userdomain,userdom_manage_generic_user_home_content_files,allow $1 user_home_t:file { create ioctl read getattr lock write setattr append link unlink rename };,
system,userdomain,userdom_manage_generic_user_home_content_symlinks,allow $1 user_home_dir_t:dir { getattr search };,
system,userdomain,userdom_manage_generic_user_home_content_symlinks,allow $1 user_home_t:dir { read getattr lock search ioctl add_name remove_name write };,
system,userdomain,userdom_manage_generic_user_home_content_symlinks,allow $1 user_home_t:lnk_file { create read getattr setattr link unlink rename };,
system,userdomain,userdom_manage_generic_user_home_content_pipes,allow $1 user_home_dir_t:dir { getattr search };,
system,userdomain,userdom_manage_generic_user_home_content_pipes,allow $1 user_home_t:dir { read getattr lock search ioctl add_name remove_name write };,
system,userdomain,userdom_manage_generic_user_home_content_pipes,allow $1 user_home_t:fifo_file { create ioctl read getattr lock write setattr append link unlink rename };,
system,userdomain,userdom_manage_generic_user_home_content_sockets,allow $1 user_home_dir_t:dir { getattr search };,
system,userdomain,userdom_manage_generic_user_home_content_sockets,allow $1 user_home_t:dir { read getattr lock search ioctl add_name remove_name write };,
system,userdomain,userdom_manage_generic_user_home_content_sockets,allow $1 user_home_t:sock_file { create ioctl read getattr lock write setattr append link unlink rename };,
system,userdomain,userdom_search_unpriv_users_home_dirs,allow $1 user_home_dir_type:dir { getattr search };,
system,userdomain,userdom_read_unpriv_users_home_content_files,allow $1 user_home_dir_type:dir { getattr search };,
system,userdomain,userdom_read_unpriv_users_home_content_files,allow $1 user_home_type:dir { read getattr lock search ioctl };,
system,userdomain,userdom_read_unpriv_users_home_content_files,allow $1 user_home_type:lnk_file { getattr read };,
system,userdomain,userdom_read_unpriv_users_home_content_files,allow $1 user_home_type:file { read getattr lock ioctl };,
system,userdomain,userdom_setattr_unpriv_users_ptys,allow $1 user_ptynode:chr_file setattr;,
system,userdomain,userdom_relabelto_unpriv_users_ptys,allow $1 user_ptynode:chr_file relabelto;,
system,userdomain,userdom_write_unpriv_users_tmp_files,allow $1 user_tmpfile:file { getattr write append };,
system,userdomain,userdom_read_all_users_state,allow $1 userdomain:dir { getattr search };,
system,userdomain,userdom_read_all_users_state,allow $1 userdomain:file { read getattr lock ioctl };,
system,userdomain,userdom_getattr_all_users,allow $1 userdomain:process getattr;,
system,userdomain,userdom_use_all_users_fds,allow $1 userdomain:fd use;,
system,userdomain,userdom_signal_all_users,allow $1 userdomain:process signal;,
system,userdomain,userdom_sigchld_all_users,allow $1 userdomain:process sigchld;,
system,userdomain,userdom_dbus_send_all_users,allow $1 userdomain:dbus send_msg;,
system,userdomain,userdom_unconfined,allow $1 user_home_dir_t:dir { create read getattr lock setattr ioctl link unlink rename search add_name remove_name reparent write rmdir };,
