policy_module(swtpmcuse, 1.0.0)

########################################
#
# Declarations
#

attribute_role swtpmcuse_roles;
roleattribute system_r swtpmcuse_roles;

type swtpmcuse_t;
type swtpmcuse_exec_t;
application_domain(swtpmcuse_t, swtpmcuse_exec_t)
role swtpmcuse_roles types swtpmcuse_t;

########################################
#
# swtpmcuse local policy
#
allow swtpmcuse_t self:capability { setgid setuid dac_override dac_read_search };

allow swtpmcuse_t self:fifo_file manage_fifo_file_perms;
allow swtpmcuse_t self:unix_stream_socket create_stream_socket_perms;

domain_use_interactive_fds(swtpmcuse_t)

files_read_etc_files(swtpmcuse_t)

auth_use_nsswitch(swtpmcuse_t)

miscfiles_read_localization(swtpmcuse_t)