module turboprint 1.0;

require {
	type var_log_t;
	type ld_so_t;
	type var_t;
	type tmpfs_t;
	type initrc_t;
	type initrc_state_t;
	type rpm_script_t;
	type rpm_script_tmpfs_t;
	type cupsd_t;
	type lpd_var_run_t;
	type var_spool_t;
	type unconfined_t;
	type initrc_t;
        type unconfined_service_t;
        type init_t;
        type su_exec_t;
	type xdm_t;
	type xdm_var_lib_t;
	class sem { unix_read read write unix_write associate };
	class fifo_file { open read write };
	class file { create open write ioctl execute_no_trans read getattr setattr append unlink execute };
	class shm { unix_read read write unix_write associate };
	class dir { open add_name remove_name search read write };
}

#============= cupsd_t ==============
allow cupsd_t initrc_t:sem { unix_read unix_write associate };
allow cupsd_t initrc_t:shm { unix_read read write unix_write associate };
allow cupsd_t rpm_script_t:shm { unix_read read write unix_write associate };
allow cupsd_t rpm_script_t:shm { unix_read read write unix_write associate };
allow cupsd_t rpm_script_t:sem { unix_read read write unix_write associate };
allow cupsd_t rpm_script_tmpfs_t:file { read write };
allow cupsd_t initrc_state_t:file { read write };
allow cupsd_t ld_so_t:file execute_no_trans;
allow cupsd_t tmpfs_t:file { read write };
allow cupsd_t var_log_t:file { read ioctl getattr append };
allow cupsd_t var_t:fifo_file { read write };
allow cupsd_t initrc_t:sem { read write };
allow cupsd_t lpd_var_run_t:dir { remove_name read write open add_name search };
allow cupsd_t lpd_var_run_t:fifo_file { read write open };
allow cupsd_t lpd_var_run_t:file { read write getattr setattr create open unlink };
allow cupsd_t var_spool_t:dir { add_name remove_name write };
allow cupsd_t var_spool_t:fifo_file { open read write };
allow cupsd_t var_spool_t:file { create open read write setattr unlink };
allow cupsd_t unconfined_t:sem { associate read write unix_read unix_write };
allow cupsd_t unconfined_service_t:shm { associate read write unix_read unix_write };
allow cupsd_t unconfined_service_t:sem { associate read write unix_read unix_write };
allow init_t lpd_var_run_t:file { create write };
allow init_t su_exec_t:file { getattr execute execute_no_trans read open };
allow xdm_t xdm_var_lib_t:file execute;