(typealias syslogd_var_run_t)
(typealiasactual syslogd_var_run_t syslogd_runtime_t)
(typealias klogd_var_run_t)
(typealiasactual klogd_var_run_t klogd_runtime_t)
(typealias auditd_var_run_t)
(typealiasactual auditd_var_run_t auditd_runtime_t)
(typealias audisp_var_run_t)
(typealiasactual audisp_var_run_t audisp_runtime_t)
(typeattribute logfile)
(typeattributeset logfile (var_log_t ))
(type auditctl_t)
(roletype object_r auditctl_t)
(type auditctl_exec_t)
(roletype object_r auditctl_exec_t)
(type auditd_etc_t)
(roletype object_r auditd_etc_t)
(type auditd_log_t)
(roletype object_r auditd_log_t)
(type audit_spool_t)
(roletype object_r audit_spool_t)
(type auditd_t)
(roletype object_r auditd_t)
(type auditd_exec_t)
(roletype object_r auditd_exec_t)
(type auditd_initrc_exec_t)
(roletype object_r auditd_initrc_exec_t)
(type auditd_runtime_t)
(roletype object_r auditd_runtime_t)
(type auditd_unit_t)
(roletype object_r auditd_unit_t)
(type audisp_t)
(roletype object_r audisp_t)
(type audisp_exec_t)
(roletype object_r audisp_exec_t)
(type audisp_remote_t)
(roletype object_r audisp_remote_t)
(type audisp_remote_exec_t)
(roletype object_r audisp_remote_exec_t)
(type audisp_runtime_t)
(roletype object_r audisp_runtime_t)
(type devlog_t)
(roletype object_r devlog_t)
(type klogd_t)
(roletype object_r klogd_t)
(type klogd_exec_t)
(roletype object_r klogd_exec_t)
(type klogd_runtime_t)
(roletype object_r klogd_runtime_t)
(type klogd_tmp_t)
(roletype object_r klogd_tmp_t)
(type syslog_conf_t)
(roletype object_r syslog_conf_t)
(type syslogd_t)
(roletype object_r syslogd_t)
(type syslogd_exec_t)
(roletype object_r syslogd_exec_t)
(type syslogd_initrc_exec_t)
(roletype object_r syslogd_initrc_exec_t)
(type syslogd_runtime_t)
(roletype object_r syslogd_runtime_t)
(type syslogd_tmp_t)
(roletype object_r syslogd_tmp_t)
(type syslogd_unit_t)
(roletype object_r syslogd_unit_t)
(type syslogd_var_lib_t)
(roletype object_r syslogd_var_lib_t)
(type var_log_t)
(roletype object_r var_log_t)
(typeattribute syslogmanaged)
(boolean logging_syslog_can_network false)
(roleattributeset cil_gen_require system_r)
(roletype system_r auditctl_t)
(roletype system_r auditd_t)
(roletype system_r audisp_t)
(roletype system_r audisp_remote_t)
(roletype system_r klogd_t)
(roletype system_r syslogd_t)
(typeattributeset cil_gen_require logfile)
(typeattributeset logfile (var_log_t ))
(typeattributeset cil_gen_require initrc_t)
(typeattributeset cil_gen_require systemprocess)
(typeattributeset systemprocess (auditctl_t audisp_t ))
(typeattributeset cil_gen_require application_domain_type)
(typeattributeset application_domain_type (auditctl_t audisp_t ))
(typeattributeset cil_gen_require domain)
(typeattributeset domain (auditctl_t auditd_t audisp_t audisp_remote_t klogd_t syslogd_t ))
(typeattributeset cil_gen_require init_t)
(typeattributeset cil_gen_require security_t)
(typeattributeset cil_gen_require sysfs_t)
(typeattributeset cil_gen_require selinux_config_t)
(typeattributeset cil_gen_require application_exec_type)
(typeattributeset application_exec_type (auditctl_exec_t audisp_exec_t ))
(typeattributeset cil_gen_require exec_type)
(typeattributeset exec_type (auditctl_exec_t auditd_exec_t auditd_initrc_exec_t audisp_exec_t audisp_remote_exec_t klogd_exec_t syslogd_exec_t syslogd_initrc_exec_t ))
(typeattributeset cil_gen_require file_type)
(typeattributeset file_type (auditctl_exec_t auditd_etc_t auditd_log_t audit_spool_t auditd_exec_t auditd_initrc_exec_t auditd_runtime_t auditd_unit_t audisp_exec_t audisp_remote_exec_t audisp_runtime_t devlog_t klogd_exec_t klogd_runtime_t klogd_tmp_t syslog_conf_t syslogd_exec_t syslogd_initrc_exec_t syslogd_runtime_t syslogd_tmp_t syslogd_unit_t syslogd_var_lib_t var_log_t ))
(typeattributeset cil_gen_require non_security_file_type)
(typeattributeset non_security_file_type (auditctl_exec_t auditd_exec_t auditd_initrc_exec_t auditd_runtime_t auditd_unit_t audisp_exec_t audisp_remote_exec_t audisp_runtime_t devlog_t klogd_exec_t klogd_runtime_t klogd_tmp_t syslog_conf_t syslogd_exec_t syslogd_initrc_exec_t syslogd_runtime_t syslogd_tmp_t syslogd_unit_t syslogd_var_lib_t var_log_t ))
(typeattributeset cil_gen_require non_auth_file_type)
(typeattributeset non_auth_file_type (auditctl_exec_t auditd_etc_t auditd_log_t audit_spool_t auditd_exec_t auditd_initrc_exec_t auditd_runtime_t auditd_unit_t audisp_exec_t audisp_remote_exec_t audisp_runtime_t devlog_t klogd_exec_t klogd_runtime_t klogd_tmp_t syslog_conf_t syslogd_exec_t syslogd_initrc_exec_t syslogd_runtime_t syslogd_tmp_t syslogd_unit_t syslogd_var_lib_t var_log_t ))
(typeattributeset cil_gen_require entry_type)
(typeattributeset entry_type (auditctl_exec_t auditd_exec_t auditd_initrc_exec_t audisp_exec_t audisp_remote_exec_t klogd_exec_t syslogd_exec_t syslogd_initrc_exec_t ))
(typeattributeset cil_gen_require security_file_type)
(typeattributeset security_file_type (auditd_etc_t auditd_log_t audit_spool_t ))
(typeattributeset cil_gen_require mountpoint)
(typeattributeset mountpoint (auditd_log_t audit_spool_t var_log_t ))
(typeattributeset cil_gen_require auditd_t)
(typeattributeset cil_gen_require daemon)
(typeattributeset daemon (auditd_t klogd_t syslogd_t ))
(typeattributeset cil_gen_require init_script_file_type)
(typeattributeset init_script_file_type (auditd_initrc_exec_t syslogd_initrc_exec_t ))
(typeattributeset cil_gen_require init_run_all_scripts_domain)
(typeattributeset cil_gen_require pidfile)
(typeattributeset pidfile (auditd_runtime_t audisp_runtime_t klogd_runtime_t syslogd_runtime_t ))
(typeattributeset cil_gen_require systemdunit)
(typeattributeset systemdunit (auditd_unit_t syslogd_unit_t ))
(typeattributeset cil_gen_require audisp_t)
(typeattributeset cil_gen_require audisp_exec_t)
(typeattributeset cil_gen_require devlog_t)
(typeattributeset cil_gen_require mlstrustedobject)
(typeattributeset mlstrustedobject (devlog_t ))
(typeattributeset cil_gen_require tmpfile)
(typeattributeset tmpfile (klogd_tmp_t syslogd_tmp_t ))
(typeattributeset cil_gen_require polymember)
(typeattributeset polymember (klogd_tmp_t syslogd_tmp_t ))
(typeattributeset cil_gen_require configfile)
(typeattributeset configfile (syslog_conf_t ))
(typeattributeset cil_gen_require syslogd_t)
(typeattributeset cil_gen_require mlstrustedsocket)
(typeattributeset mlstrustedsocket (syslogd_t ))
(typeattributeset cil_gen_require syslogd_runtime_t)
(typeattributeset cil_gen_require tmp_t)
(typeattributeset cil_gen_require tmpfs_t)
(typeattributeset cil_gen_require bin_t)
(typeattributeset cil_gen_require usr_t)
(typeattributeset cil_gen_require etc_t)
(typeattributeset cil_gen_require proc_t)
(typeattributeset cil_gen_require sysctl_t)
(typeattributeset cil_gen_require sysctl_kernel_t)
(typeattributeset cil_gen_require kernel_t)
(typeattributeset cil_gen_require privfd)
(typeattributeset cil_gen_require mlsfileread)
(typeattributeset mlsfileread (auditctl_t auditd_t klogd_t ))
(typeattributeset cil_gen_require ttynode)
(typeattributeset cil_gen_require ptynode)
(typeattributeset cil_gen_require console_device_t)
(typeattributeset cil_gen_require devpts_t)
(typeattributeset cil_gen_require tty_device_t)
(typeattributeset cil_gen_require device_t)
(typeattributeset cil_gen_require init_runtime_t)
(typeattributeset cil_gen_require var_t)
(typeattributeset cil_gen_require var_run_t)
(typeattributeset cil_gen_require locale_t)
(typeattributeset cil_gen_require filesystem_type)
(typeattributeset cil_gen_require autofs_t)
(typeattributeset cil_gen_require anon_inodefs_t)
(typeattributeset cil_gen_require netlabel_peer_t)
(typeattributeset cil_gen_require netif_t)
(typeattributeset cil_gen_require node_t)
(typeattributeset cil_gen_require audit_port_t)
(typeattributeset cil_gen_require audit_server_packet_t)
(typeattributeset cil_gen_require shell_exec_t)
(typeattributeset cil_gen_require nsswitch_domain)
(typeattributeset nsswitch_domain (auditd_t syslogd_t ))
(typeattributeset cil_gen_require initctl_t)
(typeattributeset cil_gen_require init_exec_t)
(typeattributeset cil_gen_require mlsfilewrite)
(typeattributeset mlsfilewrite (auditd_t audisp_t syslogd_t ))
(typeattributeset cil_gen_require dns_port_t)
(typeattributeset cil_gen_require dns_client_packet_t)
(typeattributeset cil_gen_require net_conf_t)
(typeattributeset cil_gen_require user_devpts_t)
(typeattributeset cil_gen_require user_tty_device_t)
(typeattributeset cil_gen_require unpriv_userdomain)
(typeattributeset cil_gen_require user_home_dir_t)
(typeattributeset cil_gen_require etc_runtime_t)
(typeattributeset cil_gen_require var_lib_t)
(typeattributeset cil_gen_require var_spool_t)
(typeattributeset cil_gen_require audit_client_packet_t)
(typeattributeset cil_gen_require can_receive_kernel_messages)
(typeattributeset can_receive_kernel_messages (klogd_t syslogd_t ))
(typeattributeset cil_gen_require proc_kmsg_t)
(typeattributeset cil_gen_require boot_t)
(typeattributeset cil_gen_require system_map_t)
(typeattributeset cil_gen_require memory_device_t)
(typeattributeset cil_gen_require memory_raw_read)
(typeattributeset memory_raw_read (klogd_t ))
(typeattributeset cil_gen_require proc_net_t)
(typeattributeset cil_gen_require sysctl_vm_overcommit_t)
(typeattributeset cil_gen_require sysctl_vm_t)
(typeattributeset cil_gen_require unlabeled_t)
(typeattributeset cil_gen_require urandom_device_t)
(typeattributeset cil_gen_require kmsg_device_t)
(typeattributeset cil_gen_require initrc_runtime_t)
(typeattributeset cil_gen_require syslogd_port_t)
(typeattributeset cil_gen_require rsh_port_t)
(typeattributeset cil_gen_require postgresql_port_t)
(typeattributeset cil_gen_require mysqld_port_t)
(typeattributeset cil_gen_require syslogd_client_packet_t)
(typeattributeset cil_gen_require syslogd_server_packet_t)
(typeattributeset cil_gen_require postgresql_client_packet_t)
(typeattributeset cil_gen_require mysqld_client_packet_t)
(allow auditctl_t auditctl_exec_t (file (entrypoint)))
(allow auditctl_t auditctl_exec_t (file (ioctl read getattr lock map execute open)))
(allow initrc_t auditctl_exec_t (file (ioctl read getattr map execute open)))
(allow initrc_t auditctl_t (process (transition)))
(dontaudit initrc_t auditctl_t (process (noatsecure siginh rlimitinh)))
(typetransition initrc_t auditctl_exec_t process auditctl_t)
(allow auditctl_t initrc_t (fd (use)))
(allow auditctl_t initrc_t (fifo_file (ioctl read write getattr lock append)))
(allow auditctl_t initrc_t (process (sigchld)))
(allow auditd_t auditd_exec_t (file (entrypoint)))
(allow auditd_t auditd_exec_t (file (ioctl read getattr lock map execute open)))
(allow initrc_t auditd_exec_t (file (ioctl read getattr map execute open)))
(allow initrc_t auditd_t (process (transition)))
(dontaudit initrc_t auditd_t (process (noatsecure siginh rlimitinh)))
(typetransition initrc_t auditd_exec_t process auditd_t)
(allow auditd_t initrc_t (fd (use)))
(allow auditd_t initrc_t (fifo_file (ioctl read write getattr lock append)))
(allow auditd_t initrc_t (process (sigchld)))
(allow initrc_t auditd_initrc_exec_t (file (entrypoint)))
(allow initrc_t auditd_initrc_exec_t (file (ioctl read getattr lock map execute open)))
(allow init_run_all_scripts_domain auditd_initrc_exec_t (file (ioctl read getattr map execute open)))
(allow init_run_all_scripts_domain initrc_t (process (transition)))
(dontaudit init_run_all_scripts_domain initrc_t (process (noatsecure siginh rlimitinh)))
(typetransition init_run_all_scripts_domain auditd_initrc_exec_t process initrc_t)
(allow initrc_t init_run_all_scripts_domain (fd (use)))
(allow initrc_t init_run_all_scripts_domain (fifo_file (ioctl read write getattr lock append)))
(allow initrc_t init_run_all_scripts_domain (process (sigchld)))
(allow audisp_t audisp_exec_t (file (entrypoint)))
(allow audisp_t audisp_exec_t (file (ioctl read getattr lock map execute open)))
(allow initrc_t audisp_exec_t (file (ioctl read getattr map execute open)))
(allow initrc_t audisp_t (process (transition)))
(dontaudit initrc_t audisp_t (process (noatsecure siginh rlimitinh)))
(typetransition initrc_t audisp_exec_t process audisp_t)
(allow audisp_t initrc_t (fd (use)))
(allow audisp_t initrc_t (fifo_file (ioctl read write getattr lock append)))
(allow audisp_t initrc_t (process (sigchld)))
(allow audisp_remote_t audisp_remote_exec_t (file (entrypoint)))
(allow audisp_remote_t audisp_remote_exec_t (file (ioctl read getattr lock map execute open)))
(allow auditd_t audisp_remote_exec_t (file (getattr)))
(allow audisp_t audisp_remote_exec_t (file (ioctl read getattr map execute open)))
(allow audisp_t audisp_remote_t (process (transition)))
(dontaudit audisp_t audisp_remote_t (process (noatsecure siginh rlimitinh)))
(typetransition audisp_t audisp_remote_exec_t process audisp_remote_t)
(allow audisp_remote_t audisp_t (fd (use)))
(allow audisp_remote_t audisp_t (fifo_file (ioctl read write getattr lock append)))
(allow audisp_remote_t audisp_t (process (sigchld)))
(allow audisp_t audisp_remote_t (process (sigkill sigstop signull signal)))
(allow audisp_t audisp_remote_exec_t (file (getattr)))
(allow audisp_remote_t audisp_t (unix_stream_socket (ioctl read write getattr setattr append bind connect getopt setopt shutdown)))
(allow klogd_t klogd_exec_t (file (entrypoint)))
(allow klogd_t klogd_exec_t (file (ioctl read getattr lock map execute open)))
(allow initrc_t klogd_exec_t (file (ioctl read getattr map execute open)))
(allow initrc_t klogd_t (process (transition)))
(dontaudit initrc_t klogd_t (process (noatsecure siginh rlimitinh)))
(typetransition initrc_t klogd_exec_t process klogd_t)
(allow klogd_t initrc_t (fd (use)))
(allow klogd_t initrc_t (fifo_file (ioctl read write getattr lock append)))
(allow klogd_t initrc_t (process (sigchld)))
(allow syslogd_t syslogd_exec_t (file (entrypoint)))
(allow syslogd_t syslogd_exec_t (file (ioctl read getattr lock map execute open)))
(allow initrc_t syslogd_exec_t (file (ioctl read getattr map execute open)))
(allow initrc_t syslogd_t (process (transition)))
(dontaudit initrc_t syslogd_t (process (noatsecure siginh rlimitinh)))
(typetransition initrc_t syslogd_exec_t process syslogd_t)
(allow syslogd_t initrc_t (fd (use)))
(allow syslogd_t initrc_t (fifo_file (ioctl read write getattr lock append)))
(allow syslogd_t initrc_t (process (sigchld)))
(allow initrc_t syslogd_initrc_exec_t (file (entrypoint)))
(allow initrc_t syslogd_initrc_exec_t (file (ioctl read getattr lock map execute open)))
(allow init_run_all_scripts_domain syslogd_initrc_exec_t (file (ioctl read getattr map execute open)))
(allow init_run_all_scripts_domain initrc_t (process (transition)))
(dontaudit init_run_all_scripts_domain initrc_t (process (noatsecure siginh rlimitinh)))
(typetransition init_run_all_scripts_domain syslogd_initrc_exec_t process initrc_t)
(allow initrc_t init_run_all_scripts_domain (fd (use)))
(allow initrc_t init_run_all_scripts_domain (fifo_file (ioctl read write getattr lock append)))
(allow initrc_t init_run_all_scripts_domain (process (sigchld)))
(allow var_log_t tmp_t (filesystem (associate)))
(allow var_log_t tmpfs_t (filesystem (associate)))
(allow auditctl_t self (capability (dac_override dac_read_search fsetid)))
(allow auditctl_t self (process (getcap)))
(allow auditctl_t self (netlink_audit_socket (nlmsg_readpriv)))
(allow auditctl_t auditd_etc_t (dir (getattr open search)))
(allow auditctl_t auditd_etc_t (file (ioctl read getattr lock open)))
(allow auditctl_t auditd_etc_t (dir (ioctl read getattr lock open search)))
(dontaudit auditctl_t auditd_etc_t (file (map)))
(allow auditctl_t bin_t (dir (getattr open search)))
(allow auditctl_t bin_t (lnk_file (read getattr)))
(allow auditctl_t usr_t (dir (getattr open search)))
(allow auditctl_t file_type (dir (getattr open search)))
(allow auditctl_t file_type (dir (getattr)))
(allow auditctl_t file_type (dir (getattr open search)))
(allow auditctl_t file_type (file (getattr)))
(allow auditctl_t file_type (dir (getattr open search)))
(allow auditctl_t file_type (lnk_file (getattr)))
(allow auditctl_t etc_t (dir (ioctl read getattr lock open search)))
(allow auditctl_t etc_t (dir (getattr open search)))
(allow auditctl_t etc_t (file (ioctl read getattr lock open)))
(allow auditctl_t etc_t (dir (getattr open search)))
(allow auditctl_t etc_t (lnk_file (read getattr)))
(dontaudit auditctl_t proc_t (filesystem (getattr)))
(allow auditctl_t proc_t (dir (getattr open search)))
(allow auditctl_t sysctl_t (dir (getattr open search)))
(allow auditctl_t sysctl_kernel_t (dir (getattr open search)))
(allow auditctl_t sysctl_kernel_t (file (ioctl read getattr lock open)))
(allow auditctl_t proc_t (dir (getattr open search)))
(allow auditctl_t sysctl_t (dir (getattr open search)))
(allow auditctl_t sysctl_kernel_t (dir (ioctl read getattr lock open search)))
(allow auditctl_t proc_t (dir (getattr open search)))
(allow auditctl_t proc_t (lnk_file (read getattr)))
(allow auditctl_t proc_t (dir (getattr open search)))
(allow auditctl_t proc_t (file (ioctl read getattr lock open)))
(allow auditctl_t proc_t (dir (getattr open search)))
(allow auditctl_t proc_t (lnk_file (read getattr)))
(allow auditctl_t proc_t (dir (getattr open search)))
(allow auditctl_t proc_t (dir (ioctl read getattr lock open search)))
(allow auditctl_t kernel_t (process (setsched)))
(allow auditctl_t proc_t (dir (getattr open search)))
(allow auditctl_t proc_t (dir (getattr open search)))
(allow auditctl_t domain (dir (ioctl read getattr lock open search)))
(allow auditctl_t domain (dir (getattr open search)))
(allow auditctl_t domain (file (ioctl read getattr lock open)))
(allow auditctl_t domain (dir (getattr open search)))
(allow auditctl_t domain (lnk_file (read getattr)))
(allow auditctl_t privfd (fd (use)))
(allow auditctl_t device_t (dir (getattr open search)))
(allow auditctl_t device_t (dir (ioctl read getattr lock open search)))
(allow auditctl_t device_t (dir (getattr open search)))
(allow auditctl_t device_t (lnk_file (read getattr)))
(allow auditctl_t devpts_t (dir (ioctl read getattr lock open search)))
(allow auditctl_t ttynode (chr_file (ioctl read write getattr lock append open)))
(allow auditctl_t ptynode (chr_file (ioctl read write getattr lock append open)))
(allow auditctl_t console_device_t (chr_file (ioctl read write getattr lock append open)))
(allow auditctl_t devpts_t (chr_file (ioctl read write getattr lock append open)))
(allow auditctl_t tty_device_t (chr_file (ioctl read write getattr lock append open)))
(dontaudit auditctl_t init_t (fd (use)))
(allow auditctl_t self (capability (audit_write audit_control)))
(allow auditctl_t self (netlink_audit_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown nlmsg_read nlmsg_write nlmsg_relay)))
(allow auditctl_t devlog_t (sock_file (write getattr append open)))
(allow auditctl_t var_run_t (lnk_file (read getattr)))
(allow auditctl_t var_t (dir (getattr open search)))
(allow auditctl_t var_run_t (dir (getattr open search)))
(allow auditctl_t init_runtime_t (dir (getattr open search)))
(allow auditctl_t syslogd_runtime_t (dir (getattr open search)))
(allow auditctl_t syslogd_t (unix_dgram_socket (sendto)))
(allow auditctl_t syslogd_t (unix_stream_socket (connectto)))
(allow auditctl_t self (unix_dgram_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow auditctl_t self (unix_stream_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow auditctl_t device_t (dir (getattr open search)))
(allow auditctl_t device_t (dir (ioctl read getattr lock open search)))
(allow auditctl_t device_t (dir (getattr open search)))
(allow auditctl_t device_t (lnk_file (read getattr)))
(allow auditctl_t console_device_t (chr_file (ioctl write getattr lock append open)))
(dontaudit auditctl_t console_device_t (chr_file (ioctl read getattr lock open)))
(allow auditctl_t etc_t (dir (getattr open search)))
(allow auditctl_t etc_t (lnk_file (read getattr)))
(allow auditctl_t usr_t (dir (getattr open search)))
(allow auditctl_t locale_t (dir (ioctl read getattr lock open search)))
(allow auditctl_t locale_t (dir (getattr open search)))
(allow auditctl_t locale_t (file (ioctl read getattr lock open)))
(allow auditctl_t locale_t (dir (getattr open search)))
(allow auditctl_t locale_t (lnk_file (read getattr)))
(allow auditctl_t locale_t (file (map)))
(allow auditd_t self (capability (chown fsetid sys_nice sys_resource)))
(dontaudit auditd_t self (capability (sys_tty_config)))
(allow auditd_t self (process (sigchld sigkill sigstop signull signal setsched setpgid getcap setcap)))
(allow auditd_t self (file (ioctl read write getattr lock append open)))
(allow auditd_t self (unix_dgram_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow auditd_t self (fifo_file (ioctl read write getattr lock append open)))
(allow auditd_t self (tcp_socket (ioctl read write create getattr setattr append bind connect listen accept getopt setopt shutdown)))
(allow auditd_t auditd_etc_t (dir (ioctl read getattr lock open search)))
(allow auditd_t auditd_etc_t (file (ioctl read getattr lock open)))
(dontaudit auditd_t auditd_etc_t (file (map)))
(allow auditd_t auditd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow auditd_t auditd_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow auditd_t auditd_log_t (dir (setattr)))
(allow auditd_t auditd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow auditd_t auditd_log_t (lnk_file (ioctl read write create getattr setattr lock append unlink link rename)))
(allow auditd_t var_log_t (dir (getattr open search)))
(allow auditd_t auditd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow auditd_t auditd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow auditd_t auditd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow auditd_t auditd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow auditd_t var_t (dir (getattr open search)))
(allow auditd_t var_run_t (lnk_file (read getattr)))
(allow auditd_t var_run_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition auditd_t var_run_t sock_file auditd_runtime_t)
(typetransition auditd_t var_run_t file auditd_runtime_t)
(allow auditd_t audisp_remote_exec_t (file (getattr)))
(allow auditd_t proc_t (dir (getattr open search)))
(allow auditd_t sysctl_t (dir (getattr open search)))
(allow auditd_t sysctl_kernel_t (dir (getattr open search)))
(allow auditd_t sysctl_kernel_t (file (ioctl read getattr lock open)))
(allow auditd_t proc_t (dir (getattr open search)))
(allow auditd_t sysctl_t (dir (getattr open search)))
(allow auditd_t sysctl_kernel_t (dir (ioctl read getattr lock open search)))
(allow auditd_t proc_t (dir (getattr open search)))
(allow auditd_t proc_t (file (ioctl read getattr lock open)))
(allow auditd_t proc_t (dir (getattr open search)))
(allow auditd_t proc_t (lnk_file (read getattr)))
(allow auditd_t proc_t (dir (getattr open search)))
(allow auditd_t proc_t (dir (ioctl read getattr lock open search)))
(allow auditd_t sysfs_t (dir (getattr open search)))
(allow auditd_t sysfs_t (file (ioctl read getattr lock open)))
(allow auditd_t sysfs_t (dir (getattr open search)))
(allow auditd_t sysfs_t (lnk_file (read getattr)))
(allow auditd_t sysfs_t (dir (getattr open search)))
(allow auditd_t sysfs_t (dir (ioctl read getattr lock open search)))
(allow auditd_t filesystem_type (filesystem (getattr)))
(allow auditd_t file_type (filesystem (getattr)))
(allow auditd_t autofs_t (dir (getattr open search)))
(allow auditd_t anon_inodefs_t (dir (getattr open search)))
(allow auditd_t anon_inodefs_t (file (ioctl read write getattr lock append open)))
(allow auditctl_t sysfs_t (dir (getattr open search)))
(allow auditctl_t sysfs_t (dir (getattr open search)))
(allow auditctl_t security_t (dir (getattr open search)))
(allow auditd_t netlabel_peer_t (peer (recv)))
(allow auditd_t netlabel_peer_t (tcp_socket (recvfrom)))
(allow auditd_t netlabel_peer_t (udp_socket (recvfrom)))
(allow auditd_t netlabel_peer_t (rawip_socket (recvfrom)))
(allow auditd_t netif_t (netif (ingress egress)))
(allow auditd_t node_t (node (recvfrom sendto)))
(allow auditd_t node_t (tcp_socket (node_bind)))
(allow auditd_t audit_port_t (tcp_socket (name_bind)))
(allow auditd_t self (capability (net_bind_service)))
(allow auditd_t audit_server_packet_t (packet (send)))
(allow auditd_t audit_server_packet_t (packet (recv)))
(allow auditd_t bin_t (dir (getattr open search)))
(allow auditd_t bin_t (lnk_file (read getattr)))
(allow auditd_t usr_t (dir (getattr open search)))
(allow auditd_t bin_t (dir (getattr open search)))
(allow auditd_t bin_t (dir (ioctl read getattr lock open search)))
(allow auditd_t bin_t (file (ioctl read getattr lock map execute open execute_no_trans)))
(allow auditd_t bin_t (dir (getattr open search)))
(allow auditd_t bin_t (lnk_file (read getattr)))
(allow auditd_t usr_t (dir (getattr open search)))
(allow auditd_t bin_t (dir (getattr open search)))
(allow auditd_t bin_t (dir (ioctl read getattr lock open search)))
(allow auditd_t shell_exec_t (file (ioctl read getattr lock map execute open execute_no_trans)))
(allow auditd_t privfd (fd (use)))
(allow auditd_t etc_t (dir (ioctl read getattr lock open search)))
(allow auditd_t etc_t (dir (getattr open search)))
(allow auditd_t etc_t (file (ioctl read getattr lock open)))
(allow auditd_t etc_t (dir (getattr open search)))
(allow auditd_t etc_t (lnk_file (read getattr)))
(allow auditd_t usr_t (dir (ioctl read getattr lock open search)))
(allow auditd_t init_t (dir (ioctl read getattr lock open search)))
(allow auditd_t init_t (file (ioctl read getattr lock open)))
(allow auditd_t init_t (lnk_file (read getattr)))
(allow auditd_t init_t (process (getattr)))
(allow auditd_t init_t (process (signal)))
(allow auditd_t self (unix_dgram_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow auditd_t init_t (unix_dgram_socket (sendto)))
(allow auditd_t init_t (unix_stream_socket (connectto)))
(allow auditd_t initctl_t (fifo_file (ioctl read write getattr lock append open)))
(allow auditd_t bin_t (dir (getattr open search)))
(allow auditd_t bin_t (lnk_file (read getattr)))
(allow auditd_t usr_t (dir (getattr open search)))
(allow auditd_t bin_t (dir (getattr open search)))
(allow auditd_t bin_t (dir (ioctl read getattr lock open search)))
(allow auditd_t bin_t (file (ioctl read getattr lock map execute open execute_no_trans)))
(allow auditd_t device_t (dir (getattr open search)))
(allow auditd_t device_t (dir (ioctl read getattr lock open search)))
(allow auditd_t device_t (dir (getattr open search)))
(allow auditd_t device_t (lnk_file (read getattr)))
(allow auditd_t var_run_t (lnk_file (read getattr)))
(allow auditd_t var_t (dir (getattr open search)))
(allow auditd_t var_run_t (dir (getattr open search)))
(allow auditd_t bin_t (dir (getattr open search)))
(allow auditd_t bin_t (lnk_file (read getattr)))
(allow auditd_t usr_t (dir (getattr open search)))
(allow auditd_t init_exec_t (file (ioctl read getattr lock map execute open execute_no_trans)))
(allow auditd_t self (capability (audit_write audit_control)))
(allow auditd_t self (netlink_audit_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown nlmsg_read nlmsg_write nlmsg_relay)))
(allow auditd_t devlog_t (sock_file (write getattr append open)))
(allow auditd_t var_run_t (lnk_file (read getattr)))
(allow auditd_t var_t (dir (getattr open search)))
(allow auditd_t var_run_t (dir (getattr open search)))
(allow auditd_t init_runtime_t (dir (getattr open search)))
(allow auditd_t syslogd_runtime_t (dir (getattr open search)))
(allow auditd_t syslogd_t (unix_dgram_socket (sendto)))
(allow auditd_t syslogd_t (unix_stream_socket (connectto)))
(allow auditd_t self (unix_dgram_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow auditd_t self (unix_stream_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow auditd_t device_t (dir (getattr open search)))
(allow auditd_t device_t (dir (ioctl read getattr lock open search)))
(allow auditd_t device_t (dir (getattr open search)))
(allow auditd_t device_t (lnk_file (read getattr)))
(allow auditd_t console_device_t (chr_file (ioctl write getattr lock append open)))
(dontaudit auditd_t console_device_t (chr_file (ioctl read getattr lock open)))
(allow auditd_t audisp_exec_t (file (ioctl read getattr map execute open)))
(allow auditd_t audisp_t (process (transition)))
(dontaudit auditd_t audisp_t (process (noatsecure siginh rlimitinh)))
(typetransition auditd_t audisp_exec_t process audisp_t)
(allow audisp_t auditd_t (fd (use)))
(allow audisp_t auditd_t (fifo_file (ioctl read write getattr lock append)))
(allow audisp_t auditd_t (process (sigchld)))
(allow auditd_t audisp_t (process (signal)))
(allow auditd_t etc_t (dir (getattr open search)))
(allow auditd_t etc_t (lnk_file (read getattr)))
(allow auditd_t usr_t (dir (getattr open search)))
(allow auditd_t locale_t (dir (ioctl read getattr lock open search)))
(allow auditd_t locale_t (dir (getattr open search)))
(allow auditd_t locale_t (file (ioctl read getattr lock open)))
(allow auditd_t locale_t (dir (getattr open search)))
(allow auditd_t locale_t (lnk_file (read getattr)))
(allow auditd_t locale_t (file (map)))
(dontaudit auditd_t selinux_config_t (dir (getattr open search)))
(dontaudit auditd_t selinux_config_t (file (ioctl read getattr lock open)))
(allow auditd_t self (tcp_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow auditd_t self (udp_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow auditd_t self (netlink_route_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown nlmsg_read)))
(allow auditd_t netlabel_peer_t (peer (recv)))
(allow auditd_t netlabel_peer_t (tcp_socket (recvfrom)))
(allow auditd_t netlabel_peer_t (udp_socket (recvfrom)))
(allow auditd_t netlabel_peer_t (rawip_socket (recvfrom)))
(allow auditd_t netif_t (netif (ingress egress)))
(allow auditd_t netif_t (netif (egress)))
(allow auditd_t netif_t (netif (ingress)))
(allow auditd_t node_t (node (recvfrom sendto)))
(allow auditd_t node_t (node (sendto)))
(allow auditd_t node_t (node (recvfrom)))
(allow auditd_t dns_port_t (tcp_socket (name_connect)))
(allow auditd_t dns_client_packet_t (packet (send)))
(allow auditd_t dns_client_packet_t (packet (recv)))
(allow auditd_t etc_t (dir (getattr open search)))
(allow auditd_t var_run_t (lnk_file (read getattr)))
(allow auditd_t var_t (dir (getattr open search)))
(allow auditd_t var_run_t (dir (getattr open search)))
(allow auditd_t net_conf_t (dir (ioctl read getattr lock open search)))
(allow auditd_t net_conf_t (file (ioctl read getattr lock open)))
(allow auditd_t net_conf_t (lnk_file (read getattr)))
(allow auditd_t device_t (dir (getattr open search)))
(allow auditd_t device_t (dir (ioctl read getattr lock open search)))
(allow auditd_t device_t (dir (getattr open search)))
(allow auditd_t device_t (lnk_file (read getattr)))
(allow auditd_t devpts_t (dir (ioctl read getattr lock open search)))
(allow auditd_t user_devpts_t (chr_file (ioctl read write getattr append open)))
(allow auditd_t user_tty_device_t (chr_file (ioctl read write getattr append open)))
(dontaudit auditd_t unpriv_userdomain (fd (use)))
(dontaudit auditd_t user_home_dir_t (dir (getattr open search)))
(allow audisp_t self (capability (dac_override setpcap sys_nice)))
(allow audisp_t self (process (sigchld sigkill sigstop signull signal setsched getcap setcap)))
(allow audisp_t self (fifo_file (ioctl read write getattr lock append open)))
(allow audisp_t self (unix_stream_socket (ioctl read write create getattr setattr append bind connect listen accept getopt setopt shutdown)))
(allow audisp_t self (unix_dgram_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow audisp_t auditd_t (unix_stream_socket (ioctl read write getattr setattr append bind connect getopt setopt shutdown)))
(allow audisp_t audisp_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow audisp_t audisp_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow audisp_t var_t (dir (getattr open search)))
(allow audisp_t var_run_t (lnk_file (read getattr)))
(allow audisp_t var_run_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition audisp_t var_run_t sock_file audisp_runtime_t)
(allow audisp_t proc_t (dir (getattr open search)))
(allow audisp_t proc_t (file (ioctl read getattr lock open)))
(allow audisp_t proc_t (dir (getattr open search)))
(allow audisp_t proc_t (lnk_file (read getattr)))
(allow audisp_t proc_t (dir (getattr open search)))
(allow audisp_t proc_t (dir (ioctl read getattr lock open search)))
(allow audisp_t bin_t (dir (getattr open search)))
(allow audisp_t bin_t (lnk_file (read getattr)))
(allow audisp_t usr_t (dir (getattr open search)))
(allow audisp_t bin_t (dir (getattr open search)))
(allow audisp_t bin_t (dir (ioctl read getattr lock open search)))
(allow audisp_t bin_t (file (ioctl read getattr lock map execute open execute_no_trans)))
(allow audisp_t bin_t (dir (getattr open search)))
(allow audisp_t bin_t (lnk_file (read getattr)))
(allow audisp_t usr_t (dir (getattr open search)))
(allow audisp_t bin_t (dir (getattr open search)))
(allow audisp_t bin_t (dir (ioctl read getattr lock open search)))
(allow audisp_t shell_exec_t (file (ioctl read getattr lock map execute open execute_no_trans)))
(allow audisp_t privfd (fd (use)))
(allow audisp_t etc_t (file (map)))
(allow audisp_t etc_t (dir (ioctl read getattr lock open search)))
(allow audisp_t etc_t (dir (getattr open search)))
(allow audisp_t etc_t (file (ioctl read getattr lock open)))
(allow audisp_t etc_t (dir (getattr open search)))
(allow audisp_t etc_t (lnk_file (read getattr)))
(allow audisp_t etc_t (dir (ioctl read getattr lock open search)))
(allow audisp_t etc_t (dir (getattr open search)))
(allow audisp_t etc_runtime_t (file (ioctl read getattr lock open)))
(allow audisp_t etc_t (dir (getattr open search)))
(allow audisp_t etc_runtime_t (lnk_file (read getattr)))
(allow audisp_t devlog_t (sock_file (write getattr append open)))
(allow audisp_t var_run_t (lnk_file (read getattr)))
(allow audisp_t var_t (dir (getattr open search)))
(allow audisp_t var_run_t (dir (getattr open search)))
(allow audisp_t init_runtime_t (dir (getattr open search)))
(allow audisp_t syslogd_runtime_t (dir (getattr open search)))
(allow audisp_t syslogd_t (unix_dgram_socket (sendto)))
(allow audisp_t syslogd_t (unix_stream_socket (connectto)))
(allow audisp_t self (unix_dgram_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow audisp_t self (unix_stream_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow audisp_t device_t (dir (getattr open search)))
(allow audisp_t device_t (dir (ioctl read getattr lock open search)))
(allow audisp_t device_t (dir (getattr open search)))
(allow audisp_t device_t (lnk_file (read getattr)))
(allow audisp_t console_device_t (chr_file (ioctl write getattr lock append open)))
(dontaudit audisp_t console_device_t (chr_file (ioctl read getattr lock open)))
(allow audisp_t etc_t (dir (getattr open search)))
(allow audisp_t etc_t (lnk_file (read getattr)))
(allow audisp_t usr_t (dir (getattr open search)))
(allow audisp_t locale_t (dir (ioctl read getattr lock open search)))
(allow audisp_t locale_t (dir (getattr open search)))
(allow audisp_t locale_t (file (ioctl read getattr lock open)))
(allow audisp_t locale_t (dir (getattr open search)))
(allow audisp_t locale_t (lnk_file (read getattr)))
(allow audisp_t locale_t (file (map)))
(allow audisp_t self (tcp_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow audisp_t self (udp_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow audisp_t self (netlink_route_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown nlmsg_read)))
(allow audisp_t netlabel_peer_t (peer (recv)))
(allow audisp_t netlabel_peer_t (tcp_socket (recvfrom)))
(allow audisp_t netlabel_peer_t (udp_socket (recvfrom)))
(allow audisp_t netlabel_peer_t (rawip_socket (recvfrom)))
(allow audisp_t netif_t (netif (ingress egress)))
(allow audisp_t netif_t (netif (egress)))
(allow audisp_t netif_t (netif (ingress)))
(allow audisp_t node_t (node (recvfrom sendto)))
(allow audisp_t node_t (node (sendto)))
(allow audisp_t node_t (node (recvfrom)))
(allow audisp_t dns_port_t (tcp_socket (name_connect)))
(allow audisp_t dns_client_packet_t (packet (send)))
(allow audisp_t dns_client_packet_t (packet (recv)))
(allow audisp_t etc_t (dir (getattr open search)))
(allow audisp_t var_run_t (lnk_file (read getattr)))
(allow audisp_t var_t (dir (getattr open search)))
(allow audisp_t var_run_t (dir (getattr open search)))
(allow audisp_t net_conf_t (dir (ioctl read getattr lock open search)))
(allow audisp_t net_conf_t (file (ioctl read getattr lock open)))
(allow audisp_t net_conf_t (lnk_file (read getattr)))
(allow audisp_remote_t self (capability (setuid setpcap)))
(allow audisp_remote_t self (process (getcap setcap)))
(allow audisp_remote_t self (tcp_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow audisp_remote_t var_log_t (dir (getattr open search)))
(allow audisp_remote_t audit_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow audisp_remote_t audit_spool_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow audisp_remote_t audit_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow audisp_remote_t audit_spool_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow audisp_remote_t var_t (dir (getattr open search)))
(allow audisp_remote_t var_spool_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition audisp_remote_t var_spool_t dir audit_spool_t)
(typetransition audisp_remote_t var_spool_t file audit_spool_t)
(allow audisp_remote_t bin_t (dir (getattr open search)))
(allow audisp_remote_t bin_t (lnk_file (read getattr)))
(allow audisp_remote_t usr_t (dir (getattr open search)))
(allow audisp_remote_t bin_t (dir (getattr open search)))
(allow audisp_remote_t bin_t (dir (ioctl read getattr lock open search)))
(allow audisp_remote_t bin_t (file (ioctl read getattr lock map execute open execute_no_trans)))
(allow audisp_remote_t netlabel_peer_t (peer (recv)))
(allow audisp_remote_t netlabel_peer_t (tcp_socket (recvfrom)))
(allow audisp_remote_t netlabel_peer_t (udp_socket (recvfrom)))
(allow audisp_remote_t netlabel_peer_t (rawip_socket (recvfrom)))
(allow audisp_remote_t netif_t (netif (ingress egress)))
(allow audisp_remote_t node_t (node (recvfrom sendto)))
(allow audisp_remote_t audit_port_t (tcp_socket (name_bind)))
(allow audisp_remote_t self (capability (net_bind_service)))
(allow audisp_remote_t node_t (tcp_socket (node_bind)))
(allow audisp_remote_t audit_port_t (tcp_socket (name_connect)))
(allow audisp_remote_t audit_client_packet_t (packet (send)))
(allow audisp_remote_t audit_client_packet_t (packet (recv)))
(allow audisp_remote_t etc_t (dir (ioctl read getattr lock open search)))
(allow audisp_remote_t etc_t (dir (getattr open search)))
(allow audisp_remote_t etc_t (file (ioctl read getattr lock open)))
(allow audisp_remote_t etc_t (dir (getattr open search)))
(allow audisp_remote_t etc_t (lnk_file (read getattr)))
(allow audisp_remote_t devlog_t (sock_file (write getattr append open)))
(allow audisp_remote_t var_run_t (lnk_file (read getattr)))
(allow audisp_remote_t var_t (dir (getattr open search)))
(allow audisp_remote_t var_run_t (dir (getattr open search)))
(allow audisp_remote_t init_runtime_t (dir (getattr open search)))
(allow audisp_remote_t syslogd_runtime_t (dir (getattr open search)))
(allow audisp_remote_t syslogd_t (unix_dgram_socket (sendto)))
(allow audisp_remote_t syslogd_t (unix_stream_socket (connectto)))
(allow audisp_remote_t self (unix_dgram_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow audisp_remote_t self (unix_stream_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow audisp_remote_t device_t (dir (getattr open search)))
(allow audisp_remote_t device_t (dir (ioctl read getattr lock open search)))
(allow audisp_remote_t device_t (dir (getattr open search)))
(allow audisp_remote_t device_t (lnk_file (read getattr)))
(allow audisp_remote_t console_device_t (chr_file (ioctl write getattr lock append open)))
(dontaudit audisp_remote_t console_device_t (chr_file (ioctl read getattr lock open)))
(allow audisp_remote_t self (capability (audit_write)))
(allow audisp_remote_t self (netlink_audit_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown nlmsg_read nlmsg_relay)))
(allow audisp_remote_t etc_t (dir (getattr open search)))
(allow audisp_remote_t etc_t (lnk_file (read getattr)))
(allow audisp_remote_t usr_t (dir (getattr open search)))
(allow audisp_remote_t locale_t (dir (ioctl read getattr lock open search)))
(allow audisp_remote_t locale_t (dir (getattr open search)))
(allow audisp_remote_t locale_t (file (ioctl read getattr lock open)))
(allow audisp_remote_t locale_t (dir (getattr open search)))
(allow audisp_remote_t locale_t (lnk_file (read getattr)))
(allow audisp_remote_t locale_t (file (map)))
(allow audisp_remote_t self (tcp_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow audisp_remote_t self (udp_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow audisp_remote_t self (netlink_route_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown nlmsg_read)))
(allow audisp_remote_t netlabel_peer_t (peer (recv)))
(allow audisp_remote_t netlabel_peer_t (tcp_socket (recvfrom)))
(allow audisp_remote_t netlabel_peer_t (udp_socket (recvfrom)))
(allow audisp_remote_t netlabel_peer_t (rawip_socket (recvfrom)))
(allow audisp_remote_t netif_t (netif (ingress egress)))
(allow audisp_remote_t netif_t (netif (egress)))
(allow audisp_remote_t netif_t (netif (ingress)))
(allow audisp_remote_t node_t (node (recvfrom sendto)))
(allow audisp_remote_t node_t (node (sendto)))
(allow audisp_remote_t node_t (node (recvfrom)))
(allow audisp_remote_t dns_port_t (tcp_socket (name_connect)))
(allow audisp_remote_t dns_client_packet_t (packet (send)))
(allow audisp_remote_t dns_client_packet_t (packet (recv)))
(allow audisp_remote_t etc_t (dir (getattr open search)))
(allow audisp_remote_t var_run_t (lnk_file (read getattr)))
(allow audisp_remote_t var_t (dir (getattr open search)))
(allow audisp_remote_t var_run_t (dir (getattr open search)))
(allow audisp_remote_t net_conf_t (dir (ioctl read getattr lock open search)))
(allow audisp_remote_t net_conf_t (file (ioctl read getattr lock open)))
(allow audisp_remote_t net_conf_t (lnk_file (read getattr)))
(allow klogd_t self (capability (sys_admin)))
(dontaudit klogd_t self (capability (sys_resource sys_tty_config)))
(allow klogd_t self (process (sigchld sigkill sigstop signull signal)))
(allow klogd_t klogd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow klogd_t klogd_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow klogd_t klogd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow klogd_t klogd_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow klogd_t tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition klogd_t tmp_t dir klogd_tmp_t)
(typetransition klogd_t tmp_t file klogd_tmp_t)
(allow klogd_t klogd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow klogd_t klogd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow klogd_t var_t (dir (getattr open search)))
(allow klogd_t var_run_t (lnk_file (read getattr)))
(allow klogd_t var_run_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition klogd_t var_run_t file klogd_runtime_t)
(allow klogd_t proc_t (dir (getattr open search)))
(allow klogd_t proc_t (file (ioctl read getattr lock open)))
(allow klogd_t proc_t (dir (getattr open search)))
(allow klogd_t proc_t (lnk_file (read getattr)))
(allow klogd_t proc_t (dir (getattr open search)))
(allow klogd_t proc_t (dir (ioctl read getattr lock open search)))
(allow klogd_t proc_t (dir (getattr open search)))
(allow klogd_t proc_kmsg_t (file (ioctl read getattr lock open)))
(allow klogd_t proc_t (dir (getattr open search)))
(allow klogd_t sysctl_t (dir (getattr open search)))
(allow klogd_t sysctl_kernel_t (dir (getattr open search)))
(allow klogd_t sysctl_kernel_t (file (ioctl read getattr lock open)))
(allow klogd_t proc_t (dir (getattr open search)))
(allow klogd_t sysctl_t (dir (getattr open search)))
(allow klogd_t sysctl_kernel_t (dir (ioctl read getattr lock open search)))
(allow klogd_t self (capability2 (syslog)))
(allow klogd_t kernel_t (system (syslog_mod)))
(allow klogd_t self (capability2 (syslog)))
(allow klogd_t kernel_t (system (syslog_console)))
(allow klogd_t boot_t (dir (ioctl read getattr lock open search)))
(allow klogd_t boot_t (dir (getattr open search)))
(allow klogd_t system_map_t (file (ioctl read getattr lock open)))
(allow klogd_t sysfs_t (dir (getattr open search)))
(allow klogd_t sysfs_t (file (ioctl read getattr lock open)))
(allow klogd_t sysfs_t (dir (getattr open search)))
(allow klogd_t sysfs_t (lnk_file (read getattr)))
(allow klogd_t sysfs_t (dir (getattr open search)))
(allow klogd_t sysfs_t (dir (ioctl read getattr lock open search)))
(allow klogd_t filesystem_type (filesystem (getattr)))
(allow klogd_t file_type (filesystem (getattr)))
(allow klogd_t autofs_t (dir (getattr open search)))
(allow klogd_t privfd (fd (use)))
(allow klogd_t etc_t (dir (ioctl read getattr lock open search)))
(allow klogd_t etc_t (dir (getattr open search)))
(allow klogd_t etc_runtime_t (file (ioctl read getattr lock open)))
(allow klogd_t etc_t (dir (getattr open search)))
(allow klogd_t etc_runtime_t (lnk_file (read getattr)))
(allow klogd_t etc_t (dir (ioctl read getattr lock open search)))
(allow klogd_t etc_t (dir (getattr open search)))
(allow klogd_t etc_t (file (ioctl read getattr lock open)))
(allow klogd_t etc_t (dir (getattr open search)))
(allow klogd_t etc_t (lnk_file (read getattr)))
(allow klogd_t devlog_t (sock_file (write getattr append open)))
(allow klogd_t var_run_t (lnk_file (read getattr)))
(allow klogd_t var_t (dir (getattr open search)))
(allow klogd_t var_run_t (dir (getattr open search)))
(allow klogd_t init_runtime_t (dir (getattr open search)))
(allow klogd_t syslogd_runtime_t (dir (getattr open search)))
(allow klogd_t syslogd_t (unix_dgram_socket (sendto)))
(allow klogd_t syslogd_t (unix_stream_socket (connectto)))
(allow klogd_t self (unix_dgram_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow klogd_t self (unix_stream_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow klogd_t device_t (dir (getattr open search)))
(allow klogd_t device_t (dir (ioctl read getattr lock open search)))
(allow klogd_t device_t (dir (getattr open search)))
(allow klogd_t device_t (lnk_file (read getattr)))
(allow klogd_t console_device_t (chr_file (ioctl write getattr lock append open)))
(dontaudit klogd_t console_device_t (chr_file (ioctl read getattr lock open)))
(allow klogd_t etc_t (dir (getattr open search)))
(allow klogd_t etc_t (lnk_file (read getattr)))
(allow klogd_t usr_t (dir (getattr open search)))
(allow klogd_t locale_t (dir (ioctl read getattr lock open search)))
(allow klogd_t locale_t (dir (getattr open search)))
(allow klogd_t locale_t (file (ioctl read getattr lock open)))
(allow klogd_t locale_t (dir (getattr open search)))
(allow klogd_t locale_t (lnk_file (read getattr)))
(allow klogd_t locale_t (file (map)))
(dontaudit klogd_t user_home_dir_t (dir (getattr open search)))
(allow syslogd_t self (capability (chown dac_override fsetid setgid setuid sys_admin sys_nice sys_resource sys_tty_config)))
(dontaudit syslogd_t self (capability (sys_ptrace)))
(dontaudit syslogd_t self (cap_userns (kill sys_ptrace)))
(allow syslogd_t self (process (sigchld sigkill sigstop signull signal getsched setsched setpgid getcap setcap setrlimit)))
(allow syslogd_t self (unix_dgram_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
(allow syslogd_t self (unix_stream_socket (ioctl read write create getattr setattr append bind connect listen accept getopt setopt shutdown)))
(allow syslogd_t self (unix_dgram_socket (sendto)))
(allow syslogd_t self (fifo_file (ioctl read write getattr lock append open)))
(allow syslogd_t syslog_conf_t (file (ioctl read getattr lock open)))
(allow syslogd_t syslog_conf_t (dir (ioctl read getattr lock open search)))
(allow syslogd_t devlog_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow syslogd_t var_t (dir (getattr open search)))
(allow syslogd_t var_run_t (lnk_file (read getattr)))
(allow syslogd_t var_run_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition syslogd_t var_run_t sock_file devlog_t)
(allow syslogd_t var_run_t (lnk_file (read getattr)))
(allow syslogd_t var_t (dir (getattr open search)))
(allow syslogd_t var_run_t (dir (getattr open search)))
(allow syslogd_t init_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow syslogd_t var_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow syslogd_t var_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow syslogd_t var_log_t (file (map)))
(allow syslogd_t var_log_t (dir (getattr open search)))
(allow syslogd_t var_log_t (fifo_file (ioctl read write getattr lock append open)))
(allow syslogd_t var_t (dir (getattr open search)))
(allow syslogd_t var_spool_t (dir (getattr open search)))
(allow syslogd_t var_log_t (dir (create setattr)))
(allow syslogd_t var_t (dir (getattr open search)))
(allow syslogd_t var_run_t (lnk_file (read getattr)))
(allow syslogd_t var_run_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow syslogd_t syslogd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow syslogd_t syslogd_tmp_t (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow syslogd_t syslogd_tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow syslogd_t syslogd_tmp_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow syslogd_t syslogd_tmp_t (file (map)))
(allow syslogd_t tmp_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition syslogd_t tmp_t dir syslogd_tmp_t)
(typetransition syslogd_t tmp_t file syslogd_tmp_t)
(allow syslogd_t syslogd_var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow syslogd_t syslogd_var_lib_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow syslogd_t syslogd_var_lib_t (file (map)))
(allow syslogd_t var_t (dir (getattr open search)))
(allow syslogd_t var_lib_t (dir (getattr open search)))
(allow syslogd_t syslogd_runtime_t (dir (create getattr)))
(allow syslogd_t syslogd_runtime_t (sock_file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow syslogd_t syslogd_runtime_t (file (map)))
(allow syslogd_t syslogd_runtime_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow syslogd_t syslogd_runtime_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow syslogd_t var_t (dir (getattr open search)))
(allow syslogd_t var_run_t (lnk_file (read getattr)))
(allow syslogd_t var_run_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition syslogd_t var_run_t file syslogd_runtime_t)
(allow syslogd_t proc_t (dir (getattr open search)))
(allow syslogd_t proc_t (file (ioctl read getattr lock open)))
(allow syslogd_t proc_t (dir (getattr open search)))
(allow syslogd_t proc_t (lnk_file (read getattr)))
(allow syslogd_t proc_t (dir (getattr open search)))
(allow syslogd_t proc_t (dir (ioctl read getattr lock open search)))
(allow syslogd_t proc_t (dir (getattr open search)))
(allow syslogd_t proc_net_t (dir (getattr open search)))
(allow syslogd_t proc_net_t (file (ioctl read getattr lock open)))
(allow syslogd_t proc_t (dir (getattr open search)))
(allow syslogd_t proc_net_t (dir (getattr open search)))
(allow syslogd_t proc_net_t (lnk_file (read getattr)))
(allow syslogd_t proc_t (dir (getattr open search)))
(allow syslogd_t proc_net_t (dir (ioctl read getattr lock open search)))
(allow syslogd_t proc_t (dir (getattr open search)))
(allow syslogd_t sysctl_t (dir (getattr open search)))
(allow syslogd_t sysctl_kernel_t (dir (getattr open search)))
(allow syslogd_t sysctl_kernel_t (file (ioctl read getattr lock open)))
(allow syslogd_t proc_t (dir (getattr open search)))
(allow syslogd_t sysctl_t (dir (getattr open search)))
(allow syslogd_t sysctl_kernel_t (dir (ioctl read getattr lock open search)))
(allow syslogd_t proc_t (dir (getattr open search)))
(allow syslogd_t proc_t (lnk_file (read getattr)))
(allow syslogd_t proc_t (dir (getattr open search)))
(allow syslogd_t proc_kmsg_t (file (ioctl read getattr lock open)))
(allow syslogd_t proc_t (dir (getattr open search)))
(allow syslogd_t sysctl_t (dir (getattr open search)))
(allow syslogd_t sysctl_vm_t (dir (getattr open search)))
(allow syslogd_t sysctl_vm_overcommit_t (file (ioctl read getattr lock open)))
(allow syslogd_t self (capability2 (syslog)))
(allow syslogd_t kernel_t (system (syslog_mod)))
(allow syslogd_t self (capability2 (syslog)))
(allow syslogd_t kernel_t (system (syslog_console)))
(allow syslogd_t self (capability2 (syslog)))
(allow syslogd_t kernel_t (system (syslog_read)))
(dontaudit syslogd_t unlabeled_t (dir (getattr open search)))
(allow syslogd_t device_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition syslogd_t device_t sock_file devlog_t)
(allow devlog_t device_t (filesystem (associate)))
(allow devlog_t tmpfs_t (filesystem (associate)))
(allow devlog_t tmp_t (filesystem (associate)))
(allow syslogd_t sysfs_t (dir (getattr open search)))
(allow syslogd_t sysfs_t (file (ioctl read getattr lock open)))
(allow syslogd_t sysfs_t (dir (getattr open search)))
(allow syslogd_t sysfs_t (lnk_file (read getattr)))
(allow syslogd_t sysfs_t (dir (getattr open search)))
(allow syslogd_t sysfs_t (dir (ioctl read getattr lock open search)))
(allow syslogd_t device_t (dir (getattr open search)))
(allow syslogd_t urandom_device_t (chr_file (ioctl read getattr lock open)))
(allow syslogd_t device_t (dir (getattr open search)))
(allow syslogd_t kmsg_device_t (chr_file (ioctl read write getattr lock append open)))
(allow syslogd_t privfd (fd (use)))
(allow syslogd_t proc_t (dir (getattr open search)))
(allow syslogd_t proc_t (dir (getattr open search)))
(allow syslogd_t domain (dir (ioctl read getattr lock open search)))
(allow syslogd_t domain (dir (getattr open search)))
(allow syslogd_t domain (file (ioctl read getattr lock open)))
(allow syslogd_t domain (dir (getattr open search)))
(allow syslogd_t domain (lnk_file (read getattr)))
(allow syslogd_t etc_t (dir (ioctl read getattr lock open search)))
(allow syslogd_t etc_t (dir (getattr open search)))
(allow syslogd_t etc_t (file (ioctl read getattr lock open)))
(allow syslogd_t etc_t (dir (getattr open search)))
(allow syslogd_t etc_t (lnk_file (read getattr)))
(allow syslogd_t usr_t (dir (ioctl read getattr lock open search)))
(allow syslogd_t usr_t (dir (getattr open search)))
(allow syslogd_t usr_t (file (ioctl read getattr lock open)))
(allow syslogd_t usr_t (dir (getattr open search)))
(allow syslogd_t usr_t (lnk_file (read getattr)))
(allow syslogd_t var_t (dir (getattr open search)))
(allow syslogd_t var_t (file (ioctl read getattr lock open)))
(allow syslogd_t etc_t (dir (ioctl read getattr lock open search)))
(allow syslogd_t etc_t (dir (getattr open search)))
(allow syslogd_t etc_runtime_t (file (ioctl read getattr lock open)))
(allow syslogd_t etc_t (dir (getattr open search)))
(allow syslogd_t etc_runtime_t (lnk_file (read getattr)))
(allow syslogd_t boot_t (dir (ioctl read getattr lock open search)))
(allow syslogd_t boot_t (dir (getattr open search)))
(allow syslogd_t system_map_t (file (ioctl read getattr lock open)))
(allow syslogd_t var_t (dir (getattr open search)))
(allow syslogd_t var_lib_t (dir (ioctl read write getattr lock open add_name remove_name search)))
(typetransition syslogd_t var_lib_t dir syslogd_var_lib_t)
(typetransition syslogd_t var_lib_t file syslogd_var_lib_t)
(allow syslogd_t filesystem_type (filesystem (getattr)))
(allow syslogd_t file_type (filesystem (getattr)))
(allow syslogd_t autofs_t (dir (getattr open search)))
(allow syslogd_t device_t (dir (getattr open search)))
(allow syslogd_t device_t (dir (ioctl read getattr lock open search)))
(allow syslogd_t device_t (dir (getattr open search)))
(allow syslogd_t device_t (lnk_file (read getattr)))
(allow syslogd_t console_device_t (chr_file (ioctl write getattr lock append open)))
(allow syslogd_t device_t (dir (getattr open search)))
(allow syslogd_t device_t (dir (ioctl read getattr lock open search)))
(allow syslogd_t device_t (dir (getattr open search)))
(allow syslogd_t device_t (lnk_file (read getattr)))
(allow syslogd_t tty_device_t (chr_file (ioctl write getattr lock append open)))
(allow syslogd_t var_run_t (lnk_file (read getattr)))
(allow syslogd_t var_t (dir (getattr open search)))
(allow syslogd_t var_run_t (dir (ioctl read getattr lock open search)))
(allow syslogd_t initrc_runtime_t (file (ioctl read getattr lock open)))
(dontaudit syslogd_t initrc_runtime_t (file (write lock)))
(allow syslogd_t device_t (dir (getattr open search)))
(allow syslogd_t device_t (dir (ioctl read getattr lock open search)))
(allow syslogd_t device_t (dir (getattr open search)))
(allow syslogd_t device_t (lnk_file (read getattr)))
(allow syslogd_t ttynode (chr_file (ioctl write getattr lock append open)))
(allow syslogd_t init_t (fd (use)))
(allow syslogd_t etc_t (dir (getattr open search)))
(allow syslogd_t etc_t (lnk_file (read getattr)))
(allow syslogd_t usr_t (dir (getattr open search)))
(allow syslogd_t locale_t (dir (ioctl read getattr lock open search)))
(allow syslogd_t locale_t (dir (getattr open search)))
(allow syslogd_t locale_t (file (ioctl read getattr lock open)))
(allow syslogd_t locale_t (dir (getattr open search)))
(allow syslogd_t locale_t (lnk_file (read getattr)))
(allow syslogd_t locale_t (file (map)))
(allow syslogd_t etc_t (dir (getattr open search)))
(allow syslogd_t selinux_config_t (dir (ioctl read getattr lock open search)))
(allow syslogd_t selinux_config_t (dir (getattr open search)))
(allow syslogd_t selinux_config_t (file (ioctl read getattr lock open)))
(allow syslogd_t selinux_config_t (dir (getattr open search)))
(allow syslogd_t selinux_config_t (lnk_file (read getattr)))
(dontaudit syslogd_t unpriv_userdomain (fd (use)))
(dontaudit syslogd_t user_home_dir_t (dir (getattr open search)))
(dontaudit syslogd_t tty_device_t (chr_file (setattr)))
(allow syslogd_t self (capability2 (block_suspend)))
(allow syslogd_t syslogmanaged (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow syslogd_t syslogmanaged (dir (ioctl read write create getattr setattr lock unlink link rename open add_name remove_name reparent search rmdir)))
(allow syslogd_t syslogmanaged (dir (ioctl read write getattr lock open add_name remove_name search)))
(allow syslogd_t syslogmanaged (file (ioctl read write create getattr setattr lock append unlink link rename open)))
(allow syslogd_t var_lib_t (dir (getattr open search)))
(allow syslogd_t var_lib_t (dir (ioctl write getattr lock open add_name remove_name search)))
(typetransition syslogd_t var_run_t dir "log" syslogd_tmp_t)
(typetransition syslogd_t init_runtime_t sock_file "dev-log" devlog_t)
(booleanif (logging_syslog_can_network)
    (true
        (allow syslogd_t mysqld_client_packet_t (packet (recv)))
        (allow syslogd_t mysqld_client_packet_t (packet (send)))
        (allow syslogd_t postgresql_client_packet_t (packet (recv)))
        (allow syslogd_t postgresql_client_packet_t (packet (send)))
        (allow syslogd_t syslogd_server_packet_t (packet (recv)))
        (allow syslogd_t syslogd_server_packet_t (packet (send)))
        (allow syslogd_t syslogd_client_packet_t (packet (recv)))
        (allow syslogd_t syslogd_client_packet_t (packet (send)))
        (allow syslogd_t mysqld_port_t (tcp_socket (name_connect)))
        (allow syslogd_t postgresql_port_t (tcp_socket (name_connect)))
        (allow syslogd_t syslogd_port_t (tcp_socket (name_connect)))
        (allow syslogd_t self (capability (net_bind_service)))
        (allow syslogd_t syslogd_port_t (tcp_socket (name_bind)))
        (allow syslogd_t rsh_port_t (tcp_socket (name_connect)))
        (allow syslogd_t self (capability (net_bind_service)))
        (allow syslogd_t rsh_port_t (tcp_socket (name_bind)))
        (allow syslogd_t node_t (tcp_socket (node_bind)))
        (allow syslogd_t node_t (node (recvfrom sendto)))
        (allow syslogd_t netif_t (netif (ingress egress)))
        (allow syslogd_t self (capability (net_bind_service)))
        (allow syslogd_t syslogd_port_t (udp_socket (name_bind)))
        (allow syslogd_t node_t (udp_socket (node_bind)))
        (allow syslogd_t node_t (node (recvfrom)))
        (allow syslogd_t node_t (node (sendto)))
        (allow syslogd_t netif_t (netif (ingress)))
        (allow syslogd_t netif_t (netif (egress)))
        (allow syslogd_t netlabel_peer_t (tcp_socket (recvfrom)))
        (allow syslogd_t netlabel_peer_t (udp_socket (recvfrom)))
        (allow syslogd_t netlabel_peer_t (rawip_socket (recvfrom)))
        (allow syslogd_t netlabel_peer_t (peer (recv)))
        (allow syslogd_t self (udp_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
        (allow syslogd_t self (tcp_socket (ioctl read write create getattr setattr append bind connect listen accept getopt setopt shutdown)))
        (allow syslogd_t self (capability (net_admin)))
    )
)
(booleanif (allow_raw_memory_access)
    (true
        (allow klogd_t self (capability (sys_rawio)))
        (allow klogd_t memory_device_t (chr_file (ioctl read getattr lock open)))
        (allow klogd_t device_t (dir (getattr open search)))
    )
)
(optional logging_optional_2
    (typeattributeset cil_gen_require init_t)
    (allow auditctl_t init_t (process (sigchld)))
    (allow auditctl_t init_t (process (signull)))
    (optional logging_optional_3
        (typeattributeset cil_gen_require rpm_t)
        (allow auditctl_t rpm_t (fd (use)))
        (allow auditctl_t rpm_t (fifo_file (ioctl read getattr lock open)))
    )
    (optional logging_optional_4
        (typeattributeset cil_gen_require security_t)
        (typeattributeset cil_gen_require sysfs_t)
        (dontaudit auditctl_t security_t (filesystem (getattr)))
        (dontaudit auditctl_t sysfs_t (filesystem (getattr)))
        (dontaudit auditctl_t sysfs_t (dir (getattr open search)))
        (dontaudit auditctl_t security_t (dir (getattr open search)))
        (dontaudit auditctl_t security_t (file (ioctl read getattr lock open)))
        (optional logging_optional_5
            (typeattributeset cil_gen_require selinux_config_t)
            (dontaudit auditctl_t selinux_config_t (dir (getattr open search)))
            (dontaudit auditctl_t selinux_config_t (file (ioctl read getattr lock open)))
            (optional logging_optional_6
                (typeattributeset cil_gen_require init_t)
                (allow auditd_t init_t (process (sigchld)))
                (allow auditd_t init_t (process (signull)))
                (optional logging_optional_7
                    (typeattributeset cil_gen_require rpm_t)
                    (allow auditd_t rpm_t (fd (use)))
                    (allow auditd_t rpm_t (fifo_file (ioctl read getattr lock open)))
                )
                (optional logging_optional_8
                    (typeattributeset cil_gen_require security_t)
                    (typeattributeset cil_gen_require sysfs_t)
                    (dontaudit auditd_t security_t (filesystem (getattr)))
                    (dontaudit auditd_t sysfs_t (filesystem (getattr)))
                    (dontaudit auditd_t sysfs_t (dir (getattr open search)))
                    (dontaudit auditd_t security_t (dir (getattr open search)))
                    (dontaudit auditd_t security_t (file (ioctl read getattr lock open)))
                    (optional logging_optional_9
                        (typeattributeset cil_gen_require selinux_config_t)
                        (dontaudit auditd_t selinux_config_t (dir (getattr open search)))
                        (dontaudit auditd_t selinux_config_t (file (ioctl read getattr lock open)))
                        (optional logging_optional_10
                            (typeattributeset cil_gen_require init_t)
                            (allow audisp_t init_t (process (sigchld)))
                            (allow audisp_t init_t (process (signull)))
                            (optional logging_optional_11
                                (typeattributeset cil_gen_require rpm_t)
                                (allow audisp_t rpm_t (fd (use)))
                                (allow audisp_t rpm_t (fifo_file (ioctl read getattr lock open)))
                            )
                            (optional logging_optional_12
                                (typeattributeset cil_gen_require security_t)
                                (typeattributeset cil_gen_require sysfs_t)
                                (dontaudit audisp_t security_t (filesystem (getattr)))
                                (dontaudit audisp_t sysfs_t (filesystem (getattr)))
                                (dontaudit audisp_t sysfs_t (dir (getattr open search)))
                                (dontaudit audisp_t security_t (dir (getattr open search)))
                                (dontaudit audisp_t security_t (file (ioctl read getattr lock open)))
                                (optional logging_optional_13
                                    (typeattributeset cil_gen_require selinux_config_t)
                                    (dontaudit audisp_t selinux_config_t (dir (getattr open search)))
                                    (dontaudit audisp_t selinux_config_t (file (ioctl read getattr lock open)))
                                    (optional logging_optional_14
                                        (typeattributeset cil_gen_require init_t)
                                        (allow audisp_remote_t init_t (process (sigchld)))
                                        (allow audisp_remote_t init_t (process (signull)))
                                        (optional logging_optional_15
                                            (typeattributeset cil_gen_require rpm_t)
                                            (allow audisp_remote_t rpm_t (fd (use)))
                                            (allow audisp_remote_t rpm_t (fifo_file (ioctl read getattr lock open)))
                                        )
                                        (optional logging_optional_16
                                            (typeattributeset cil_gen_require security_t)
                                            (typeattributeset cil_gen_require sysfs_t)
                                            (dontaudit audisp_remote_t security_t (filesystem (getattr)))
                                            (dontaudit audisp_remote_t sysfs_t (filesystem (getattr)))
                                            (dontaudit audisp_remote_t sysfs_t (dir (getattr open search)))
                                            (dontaudit audisp_remote_t security_t (dir (getattr open search)))
                                            (dontaudit audisp_remote_t security_t (file (ioctl read getattr lock open)))
                                            (optional logging_optional_17
                                                (typeattributeset cil_gen_require selinux_config_t)
                                                (dontaudit audisp_remote_t selinux_config_t (dir (getattr open search)))
                                                (dontaudit audisp_remote_t selinux_config_t (file (ioctl read getattr lock open)))
                                                (optional logging_optional_18
                                                    (typeattributeset cil_gen_require init_t)
                                                    (allow klogd_t init_t (process (sigchld)))
                                                    (allow klogd_t init_t (process (signull)))
                                                    (optional logging_optional_19
                                                        (typeattributeset cil_gen_require rpm_t)
                                                        (allow klogd_t rpm_t (fd (use)))
                                                        (allow klogd_t rpm_t (fifo_file (ioctl read getattr lock open)))
                                                    )
                                                    (optional logging_optional_20
                                                        (typeattributeset cil_gen_require security_t)
                                                        (typeattributeset cil_gen_require sysfs_t)
                                                        (dontaudit klogd_t security_t (filesystem (getattr)))
                                                        (dontaudit klogd_t sysfs_t (filesystem (getattr)))
                                                        (dontaudit klogd_t sysfs_t (dir (getattr open search)))
                                                        (dontaudit klogd_t security_t (dir (getattr open search)))
                                                        (dontaudit klogd_t security_t (file (ioctl read getattr lock open)))
                                                        (optional logging_optional_21
                                                            (typeattributeset cil_gen_require selinux_config_t)
                                                            (dontaudit klogd_t selinux_config_t (dir (getattr open search)))
                                                            (dontaudit klogd_t selinux_config_t (file (ioctl read getattr lock open)))
                                                            (optional logging_optional_22
                                                                (typeattributeset cil_gen_require init_t)
                                                                (allow syslogd_t init_t (process (sigchld)))
                                                                (allow syslogd_t init_t (process (signull)))
                                                                (optional logging_optional_23
                                                                    (typeattributeset cil_gen_require rpm_t)
                                                                    (allow syslogd_t rpm_t (fd (use)))
                                                                    (allow syslogd_t rpm_t (fifo_file (ioctl read getattr lock open)))
                                                                )
                                                                (optional logging_optional_24
                                                                    (typeattributeset cil_gen_require security_t)
                                                                    (typeattributeset cil_gen_require sysfs_t)
                                                                    (dontaudit syslogd_t security_t (filesystem (getattr)))
                                                                    (dontaudit syslogd_t sysfs_t (filesystem (getattr)))
                                                                    (dontaudit syslogd_t sysfs_t (dir (getattr open search)))
                                                                    (dontaudit syslogd_t security_t (dir (getattr open search)))
                                                                    (dontaudit syslogd_t security_t (file (ioctl read getattr lock open)))
                                                                    (optional logging_optional_25
                                                                        (typeattributeset cil_gen_require selinux_config_t)
                                                                        (dontaudit syslogd_t selinux_config_t (dir (getattr open search)))
                                                                        (dontaudit syslogd_t selinux_config_t (file (ioctl read getattr lock open)))
                                                                        (optional logging_optional_26
                                                                            (typeattributeset cil_gen_require init_mountpoint_type)
                                                                            (typeattributeset cil_gen_require init_mountpoint_type)
                                                                            (typeattributeset init_mountpoint_type (var_log_t ))
                                                                        )
                                                                        (optional logging_optional_27
                                                                            (typeattributeset cil_gen_require systemd_tmpfiles_t)
                                                                            (allow systemd_tmpfiles_t var_log_t (dir (ioctl read write create getattr setattr lock relabelfrom relabelto unlink link rename open add_name remove_name reparent search rmdir)))
                                                                            (allow systemd_tmpfiles_t var_log_t (file (ioctl write create getattr setattr lock relabelfrom relabelto append unlink open)))
                                                                            (allow systemd_tmpfiles_t var_log_t (lnk_file (read create getattr setattr relabelfrom relabelto unlink)))
                                                                            (allow systemd_tmpfiles_t var_log_t (fifo_file (create getattr setattr relabelfrom relabelto unlink)))
                                                                        )
                                                                        (optional logging_optional_28
                                                                            (typeattributeset cil_gen_require local_login_t)
                                                                            (dontaudit auditctl_t local_login_t (fd (use)))
                                                                        )
                                                                        (optional logging_optional_29
                                                                            (typeattributeset cil_gen_require var_t)
                                                                            (typeattributeset cil_gen_require var_run_t)
                                                                            (typeattributeset cil_gen_require avahi_t)
                                                                            (typeattributeset cil_gen_require avahi_runtime_t)
                                                                            (allow auditd_t var_run_t (lnk_file (read getattr)))
                                                                            (allow auditd_t var_t (dir (getattr open search)))
                                                                            (allow auditd_t var_run_t (dir (getattr open search)))
                                                                            (allow auditd_t avahi_runtime_t (dir (getattr open search)))
                                                                            (allow auditd_t avahi_runtime_t (sock_file (write getattr append open)))
                                                                            (allow auditd_t avahi_t (unix_stream_socket (connectto)))
                                                                        )
                                                                        (optional logging_optional_30
                                                                            (typeattributeset cil_gen_require var_t)
                                                                            (typeattributeset cil_gen_require var_run_t)
                                                                            (typeattributeset cil_gen_require NetworkManager_runtime_t)
                                                                            (allow auditd_t var_run_t (lnk_file (read getattr)))
                                                                            (allow auditd_t var_t (dir (getattr open search)))
                                                                            (allow auditd_t var_run_t (dir (getattr open search)))
                                                                            (allow auditd_t NetworkManager_runtime_t (dir (getattr open search)))
                                                                            (allow auditd_t NetworkManager_runtime_t (file (ioctl read getattr lock open)))
                                                                        )
                                                                        (optional logging_optional_31
                                                                            (typeattributeset cil_gen_require var_t)
                                                                            (typeattributeset cil_gen_require var_run_t)
                                                                            (typeattributeset cil_gen_require nscd_t)
                                                                            (typeattributeset cil_gen_require nscd_runtime_t)
                                                                            (booleanif (nscd_use_shm)
                                                                                (true
                                                                                    (allow auditd_t nscd_runtime_t (sock_file (read getattr open)))
                                                                                    (allow auditd_t nscd_runtime_t (dir (ioctl read getattr lock open search)))
                                                                                    (dontaudit auditd_t nscd_runtime_t (file (ioctl read getattr lock open)))
                                                                                    (allow auditd_t nscd_t (unix_stream_socket (connectto)))
                                                                                    (allow auditd_t nscd_runtime_t (sock_file (write getattr append open)))
                                                                                    (allow auditd_t nscd_runtime_t (dir (getattr open search)))
                                                                                    (allow auditd_t var_run_t (dir (getattr open search)))
                                                                                    (allow auditd_t var_t (dir (getattr open search)))
                                                                                    (allow auditd_t var_run_t (lnk_file (read getattr)))
                                                                                    (allow auditd_t nscd_t (fd (use)))
                                                                                    (allow auditd_t nscd_t (nscd (getgrp gethost getpwd shmemgrp shmemhost shmempwd)))
                                                                                    (allow auditd_t self (unix_stream_socket (ioctl read write create getattr setattr append bind connect listen accept getopt setopt shutdown)))
                                                                                )
                                                                                (false
                                                                                    (allow nscd_t auditd_t (process (getattr)))
                                                                                    (allow nscd_t auditd_t (lnk_file (read getattr)))
                                                                                    (allow nscd_t auditd_t (file (ioctl read getattr lock open)))
                                                                                    (allow nscd_t auditd_t (dir (ioctl read getattr lock open search)))
                                                                                    (dontaudit auditd_t nscd_runtime_t (file (ioctl read getattr lock open)))
                                                                                    (allow auditd_t nscd_t (unix_stream_socket (connectto)))
                                                                                    (allow auditd_t nscd_runtime_t (sock_file (write getattr append open)))
                                                                                    (allow auditd_t nscd_runtime_t (dir (getattr open search)))
                                                                                    (allow auditd_t var_run_t (dir (getattr open search)))
                                                                                    (allow auditd_t var_t (dir (getattr open search)))
                                                                                    (allow auditd_t var_run_t (lnk_file (read getattr)))
                                                                                    (dontaudit auditd_t nscd_t (nscd (shmemgrp shmemhost shmempwd getserv shmemserv)))
                                                                                    (dontaudit auditd_t nscd_t (fd (use)))
                                                                                    (allow auditd_t nscd_t (nscd (getgrp gethost getpwd)))
                                                                                    (allow auditd_t self (unix_stream_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
                                                                                )
                                                                            )
                                                                        )
                                                                        (optional logging_optional_32
                                                                            (typeattributeset cil_gen_require bin_t)
                                                                            (typeattributeset cil_gen_require usr_t)
                                                                            (typeattributeset cil_gen_require system_mail_t)
                                                                            (typeattributeset cil_gen_require mta_exec_type)
                                                                            (typeattributeset cil_gen_require mta_user_agent)
                                                                            (allow auditd_t bin_t (dir (getattr open search)))
                                                                            (allow auditd_t bin_t (lnk_file (read getattr)))
                                                                            (allow auditd_t usr_t (dir (getattr open search)))
                                                                            (allow auditd_t mta_exec_type (file (ioctl read getattr map execute open)))
                                                                            (allow auditd_t system_mail_t (process (transition)))
                                                                            (dontaudit auditd_t system_mail_t (process (noatsecure siginh rlimitinh)))
                                                                            (typetransition auditd_t mta_exec_type process system_mail_t)
                                                                            (allow system_mail_t auditd_t (fd (use)))
                                                                            (allow system_mail_t auditd_t (fifo_file (ioctl read write getattr lock append)))
                                                                            (allow system_mail_t auditd_t (process (sigchld)))
                                                                            (allow auditd_t mta_exec_type (lnk_file (read getattr)))
                                                                            (dontaudit mta_user_agent auditd_t (fd (use)))
                                                                        )
                                                                        (optional logging_optional_33
                                                                            (typeattributeset cil_gen_require newrole_t)
                                                                            (allow auditd_t newrole_t (process (sigchld)))
                                                                        )
                                                                        (optional logging_optional_34
                                                                            (typeattributeset cil_gen_require tmpfs_t)
                                                                            (typeattributeset cil_gen_require usr_t)
                                                                            (typeattributeset cil_gen_require etc_t)
                                                                            (typeattributeset cil_gen_require init_runtime_t)
                                                                            (typeattributeset cil_gen_require systemd_unit_t)
                                                                            (typeattributeset cil_gen_require lib_t)
                                                                            (typeattributeset cil_gen_require power_unit_t)
                                                                            (allow auditd_t systemd_unit_t (dir (ioctl read getattr lock open search)))
                                                                            (allow auditd_t init_runtime_t (dir (getattr open search)))
                                                                            (allow auditd_t systemd_unit_t (dir (getattr open search)))
                                                                            (allow auditd_t etc_t (dir (getattr open search)))
                                                                            (allow auditd_t usr_t (dir (getattr open search)))
                                                                            (allow auditd_t lib_t (dir (getattr open search)))
                                                                            (allow auditd_t tmpfs_t (dir (getattr open search)))
                                                                            (allow auditd_t power_unit_t (service (start)))
                                                                            (allow auditd_t power_unit_t (service (status)))
                                                                        )
                                                                        (optional logging_optional_35
                                                                            (typeattributeset cil_gen_require var_t)
                                                                            (typeattributeset cil_gen_require var_run_t)
                                                                            (typeattributeset cil_gen_require avahi_t)
                                                                            (typeattributeset cil_gen_require avahi_runtime_t)
                                                                            (allow audisp_t var_run_t (lnk_file (read getattr)))
                                                                            (allow audisp_t var_t (dir (getattr open search)))
                                                                            (allow audisp_t var_run_t (dir (getattr open search)))
                                                                            (allow audisp_t avahi_runtime_t (dir (getattr open search)))
                                                                            (allow audisp_t avahi_runtime_t (sock_file (write getattr append open)))
                                                                            (allow audisp_t avahi_t (unix_stream_socket (connectto)))
                                                                        )
                                                                        (optional logging_optional_36
                                                                            (typeattributeset cil_gen_require var_t)
                                                                            (typeattributeset cil_gen_require var_run_t)
                                                                            (typeattributeset cil_gen_require NetworkManager_runtime_t)
                                                                            (allow audisp_t var_run_t (lnk_file (read getattr)))
                                                                            (allow audisp_t var_t (dir (getattr open search)))
                                                                            (allow audisp_t var_run_t (dir (getattr open search)))
                                                                            (allow audisp_t NetworkManager_runtime_t (dir (getattr open search)))
                                                                            (allow audisp_t NetworkManager_runtime_t (file (ioctl read getattr lock open)))
                                                                        )
                                                                        (optional logging_optional_37
                                                                            (typeattributeset cil_gen_require var_t)
                                                                            (typeattributeset cil_gen_require var_run_t)
                                                                            (typeattributeset cil_gen_require nscd_t)
                                                                            (typeattributeset cil_gen_require nscd_runtime_t)
                                                                            (booleanif (nscd_use_shm)
                                                                                (true
                                                                                    (allow audisp_t nscd_runtime_t (sock_file (read getattr open)))
                                                                                    (allow audisp_t nscd_runtime_t (dir (ioctl read getattr lock open search)))
                                                                                    (dontaudit audisp_t nscd_runtime_t (file (ioctl read getattr lock open)))
                                                                                    (allow audisp_t nscd_t (unix_stream_socket (connectto)))
                                                                                    (allow audisp_t nscd_runtime_t (sock_file (write getattr append open)))
                                                                                    (allow audisp_t nscd_runtime_t (dir (getattr open search)))
                                                                                    (allow audisp_t var_run_t (dir (getattr open search)))
                                                                                    (allow audisp_t var_t (dir (getattr open search)))
                                                                                    (allow audisp_t var_run_t (lnk_file (read getattr)))
                                                                                    (allow audisp_t nscd_t (fd (use)))
                                                                                    (allow audisp_t nscd_t (nscd (getgrp gethost getpwd shmemgrp shmemhost shmempwd)))
                                                                                    (allow audisp_t self (unix_stream_socket (ioctl read write create getattr setattr append bind connect listen accept getopt setopt shutdown)))
                                                                                )
                                                                                (false
                                                                                    (allow nscd_t audisp_t (process (getattr)))
                                                                                    (allow nscd_t audisp_t (lnk_file (read getattr)))
                                                                                    (allow nscd_t audisp_t (file (ioctl read getattr lock open)))
                                                                                    (allow nscd_t audisp_t (dir (ioctl read getattr lock open search)))
                                                                                    (dontaudit audisp_t nscd_runtime_t (file (ioctl read getattr lock open)))
                                                                                    (allow audisp_t nscd_t (unix_stream_socket (connectto)))
                                                                                    (allow audisp_t nscd_runtime_t (sock_file (write getattr append open)))
                                                                                    (allow audisp_t nscd_runtime_t (dir (getattr open search)))
                                                                                    (allow audisp_t var_run_t (dir (getattr open search)))
                                                                                    (allow audisp_t var_t (dir (getattr open search)))
                                                                                    (allow audisp_t var_run_t (lnk_file (read getattr)))
                                                                                    (dontaudit audisp_t nscd_t (nscd (shmemgrp shmemhost shmempwd getserv shmemserv)))
                                                                                    (dontaudit audisp_t nscd_t (fd (use)))
                                                                                    (allow audisp_t nscd_t (nscd (getgrp gethost getpwd)))
                                                                                    (allow audisp_t self (unix_stream_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
                                                                                )
                                                                            )
                                                                        )
                                                                        (optional logging_optional_38
                                                                            (typeattributeset cil_gen_require var_t)
                                                                            (typeattributeset cil_gen_require var_run_t)
                                                                            (typeattributeset cil_gen_require dbusd_system_bus_client)
                                                                            (typeattributeset cil_gen_require system_dbusd_t)
                                                                            (typeattributeset cil_gen_require system_dbusd_runtime_t)
                                                                            (typeattributeset cil_gen_require system_dbusd_var_lib_t)
                                                                            (typeattributeset cil_gen_require var_lib_t)
                                                                            (typeattributeset cil_gen_require session_dbusd_tmp_t)
                                                                            (typeattributeset cil_gen_require dbusd_etc_t)
                                                                            (typeattributeset cil_gen_require dbusd_system_bus_client)
                                                                            (typeattributeset dbusd_system_bus_client (audisp_t ))
                                                                            (allow audisp_t system_dbusd_t (dbus (send_msg)))
                                                                            (allow audisp_t self (dbus (send_msg)))
                                                                            (allow system_dbusd_t audisp_t (dbus (send_msg)))
                                                                            (allow audisp_t var_t (dir (getattr open search)))
                                                                            (allow audisp_t var_lib_t (dir (getattr open search)))
                                                                            (allow audisp_t system_dbusd_var_lib_t (dir (getattr open search)))
                                                                            (allow audisp_t system_dbusd_var_lib_t (file (ioctl read getattr lock open)))
                                                                            (allow audisp_t system_dbusd_var_lib_t (dir (getattr open search)))
                                                                            (allow audisp_t system_dbusd_var_lib_t (lnk_file (read getattr)))
                                                                            (allow audisp_t session_dbusd_tmp_t (dir (getattr open search)))
                                                                            (allow audisp_t session_dbusd_tmp_t (sock_file (read write getattr append open)))
                                                                            (allow audisp_t var_run_t (lnk_file (read getattr)))
                                                                            (allow audisp_t var_t (dir (getattr open search)))
                                                                            (allow audisp_t var_run_t (dir (getattr open search)))
                                                                            (allow audisp_t system_dbusd_runtime_t (dir (getattr open search)))
                                                                            (allow audisp_t system_dbusd_runtime_t (sock_file (write getattr append open)))
                                                                            (allow audisp_t system_dbusd_t (unix_stream_socket (connectto)))
                                                                            (allow audisp_t dbusd_etc_t (dir (ioctl read getattr lock open search)))
                                                                            (allow audisp_t dbusd_etc_t (file (ioctl read getattr lock open)))
                                                                            (allow audisp_t system_dbusd_runtime_t (dir (ioctl read getattr lock open search)))
                                                                            (allow audisp_t system_dbusd_runtime_t (sock_file (read)))
                                                                            (allow audisp_t system_dbusd_var_lib_t (dir (getattr open search)))
                                                                            (allow audisp_t system_dbusd_var_lib_t (lnk_file (read getattr)))
                                                                        )
                                                                        (optional logging_optional_39
                                                                            (typeattributeset cil_gen_require var_t)
                                                                            (typeattributeset cil_gen_require var_run_t)
                                                                            (typeattributeset cil_gen_require avahi_t)
                                                                            (typeattributeset cil_gen_require avahi_runtime_t)
                                                                            (allow audisp_remote_t var_run_t (lnk_file (read getattr)))
                                                                            (allow audisp_remote_t var_t (dir (getattr open search)))
                                                                            (allow audisp_remote_t var_run_t (dir (getattr open search)))
                                                                            (allow audisp_remote_t avahi_runtime_t (dir (getattr open search)))
                                                                            (allow audisp_remote_t avahi_runtime_t (sock_file (write getattr append open)))
                                                                            (allow audisp_remote_t avahi_t (unix_stream_socket (connectto)))
                                                                        )
                                                                        (optional logging_optional_40
                                                                            (typeattributeset cil_gen_require var_t)
                                                                            (typeattributeset cil_gen_require var_run_t)
                                                                            (typeattributeset cil_gen_require NetworkManager_runtime_t)
                                                                            (allow audisp_remote_t var_run_t (lnk_file (read getattr)))
                                                                            (allow audisp_remote_t var_t (dir (getattr open search)))
                                                                            (allow audisp_remote_t var_run_t (dir (getattr open search)))
                                                                            (allow audisp_remote_t NetworkManager_runtime_t (dir (getattr open search)))
                                                                            (allow audisp_remote_t NetworkManager_runtime_t (file (ioctl read getattr lock open)))
                                                                        )
                                                                        (optional logging_optional_41
                                                                            (typeattributeset cil_gen_require var_t)
                                                                            (typeattributeset cil_gen_require var_run_t)
                                                                            (typeattributeset cil_gen_require nscd_t)
                                                                            (typeattributeset cil_gen_require nscd_runtime_t)
                                                                            (booleanif (nscd_use_shm)
                                                                                (true
                                                                                    (allow audisp_remote_t nscd_runtime_t (sock_file (read getattr open)))
                                                                                    (allow audisp_remote_t nscd_runtime_t (dir (ioctl read getattr lock open search)))
                                                                                    (dontaudit audisp_remote_t nscd_runtime_t (file (ioctl read getattr lock open)))
                                                                                    (allow audisp_remote_t nscd_t (unix_stream_socket (connectto)))
                                                                                    (allow audisp_remote_t nscd_runtime_t (sock_file (write getattr append open)))
                                                                                    (allow audisp_remote_t nscd_runtime_t (dir (getattr open search)))
                                                                                    (allow audisp_remote_t var_run_t (dir (getattr open search)))
                                                                                    (allow audisp_remote_t var_t (dir (getattr open search)))
                                                                                    (allow audisp_remote_t var_run_t (lnk_file (read getattr)))
                                                                                    (allow audisp_remote_t nscd_t (fd (use)))
                                                                                    (allow audisp_remote_t nscd_t (nscd (getgrp gethost getpwd shmemgrp shmemhost shmempwd)))
                                                                                    (allow audisp_remote_t self (unix_stream_socket (ioctl read write create getattr setattr append bind connect listen accept getopt setopt shutdown)))
                                                                                )
                                                                                (false
                                                                                    (allow nscd_t audisp_remote_t (process (getattr)))
                                                                                    (allow nscd_t audisp_remote_t (lnk_file (read getattr)))
                                                                                    (allow nscd_t audisp_remote_t (file (ioctl read getattr lock open)))
                                                                                    (allow nscd_t audisp_remote_t (dir (ioctl read getattr lock open search)))
                                                                                    (dontaudit audisp_remote_t nscd_runtime_t (file (ioctl read getattr lock open)))
                                                                                    (allow audisp_remote_t nscd_t (unix_stream_socket (connectto)))
                                                                                    (allow audisp_remote_t nscd_runtime_t (sock_file (write getattr append open)))
                                                                                    (allow audisp_remote_t nscd_runtime_t (dir (getattr open search)))
                                                                                    (allow audisp_remote_t var_run_t (dir (getattr open search)))
                                                                                    (allow audisp_remote_t var_t (dir (getattr open search)))
                                                                                    (allow audisp_remote_t var_run_t (lnk_file (read getattr)))
                                                                                    (dontaudit audisp_remote_t nscd_t (nscd (shmemgrp shmemhost shmempwd getserv shmemserv)))
                                                                                    (dontaudit audisp_remote_t nscd_t (fd (use)))
                                                                                    (allow audisp_remote_t nscd_t (nscd (getgrp gethost getpwd)))
                                                                                    (allow audisp_remote_t self (unix_stream_socket (ioctl read write create getattr setattr append bind connect getopt setopt shutdown)))
                                                                                )
                                                                            )
                                                                        )
                                                                        (optional logging_optional_42
                                                                            (typeattributeset cil_gen_require newrole_t)
                                                                            (allow klogd_t newrole_t (process (sigchld)))
                                                                        )
                                                                        (optional logging_optional_43
                                                                            (typeattributeset cil_gen_require var_t)
                                                                            (typeattributeset cil_gen_require named_conf_t)
                                                                            (typeattributeset cil_gen_require named_cache_t)
                                                                            (typeattributeset cil_gen_require named_zone_t)
                                                                            (allow syslogd_t var_t (dir (getattr open search)))
                                                                            (allow syslogd_t named_conf_t (dir (getattr open search)))
                                                                            (allow syslogd_t named_zone_t (dir (getattr open search)))
                                                                            (allow syslogd_t named_cache_t (dir (getattr open search)))
                                                                        )
                                                                        (optional logging_optional_44
                                                                            (typeattributeset cil_gen_require var_log_t)
                                                                            (typeattributeset cil_gen_require var_t)
                                                                            (typeattributeset cil_gen_require cron_log_t)
                                                                            (allow syslogd_t cron_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                                                                            (allow syslogd_t cron_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                                                                            (allow syslogd_t var_t (dir (getattr open search)))
                                                                            (allow syslogd_t var_log_t (dir (getattr open search)))
                                                                            (allow syslogd_t var_log_t (lnk_file (read getattr)))
                                                                        )
                                                                        (optional logging_optional_45
                                                                            (typeattributeset cil_gen_require innd_log_t)
                                                                            (allow syslogd_t innd_log_t (dir (ioctl read write getattr lock open add_name remove_name search)))
                                                                            (allow syslogd_t innd_log_t (file (ioctl read write create getattr setattr lock append unlink link rename open)))
                                                                        )
                                                                        (optional logging_optional_46
                                                                            (typeattributeset cil_gen_require var_t)
                                                                            (typeattributeset cil_gen_require var_run_t)
                                                                            (typeattributeset cil_gen_require mysqld_t)
                                                                            (typeattributeset cil_gen_require mysqld_runtime_t)
                                                                            (typeattributeset cil_gen_require mysqld_db_t)
                                                                            (allow syslogd_t var_run_t (lnk_file (read getattr)))
                                                                            (allow syslogd_t var_t (dir (getattr open search)))
                                                                            (allow syslogd_t var_run_t (dir (getattr open search)))
                                                                            (allow syslogd_t mysqld_runtime_t (dir (getattr open search)))
                                                                            (allow syslogd_t mysqld_db_t (dir (getattr open search)))
                                                                            (allow syslogd_t mysqld_runtime_t (sock_file (write getattr append open)))
                                                                            (allow syslogd_t mysqld_t (unix_stream_socket (connectto)))
                                                                        )
                                                                        (optional logging_optional_47
                                                                            (typeattributeset cil_gen_require tmp_t)
                                                                            (typeattributeset cil_gen_require var_t)
                                                                            (typeattributeset cil_gen_require var_run_t)
                                                                            (typeattributeset cil_gen_require postgresql_t)
                                                                            (typeattributeset cil_gen_require postgresql_runtime_t)
                                                                            (typeattributeset cil_gen_require postgresql_tmp_t)
                                                                            (allow syslogd_t postgresql_runtime_t (dir (getattr open search)))
                                                                            (allow syslogd_t postgresql_tmp_t (dir (getattr open search)))
                                                                            (allow syslogd_t postgresql_runtime_t (sock_file (write getattr append open)))
                                                                            (allow syslogd_t postgresql_tmp_t (sock_file (write getattr append open)))
                                                                            (allow syslogd_t postgresql_t (unix_stream_socket (connectto)))
                                                                            (allow syslogd_t var_run_t (lnk_file (read getattr)))
                                                                            (allow syslogd_t var_t (dir (getattr open search)))
                                                                            (allow syslogd_t var_run_t (dir (getattr open search)))
                                                                            (allow syslogd_t tmp_t (dir (getattr open search)))
                                                                        )
                                                                        (optional logging_optional_48
                                                                            (typeattributeset cil_gen_require newrole_t)
                                                                            (allow syslogd_t newrole_t (process (sigchld)))
                                                                        )
                                                                        (optional logging_optional_49
                                                                            (typeattributeset cil_gen_require xconsole_device_t)
                                                                            (allow syslogd_t xconsole_device_t (fifo_file (ioctl read write getattr lock append open)))
                                                                        )
                                                                    )
                                                                )
                                                            )
                                                        )
                                                    )
                                                )
                                            )
                                        )
                                    )
                                )
                            )
                        )
                    )
                )
            )
        )
    )
)
(filecon "/dev/log" socket (system_u object_r devlog_t ((s0) (s0))))
(filecon "/etc/rsyslog\.conf" file (system_u object_r syslog_conf_t ((s0) (s0))))
(filecon "/etc/syslog\.conf" file (system_u object_r syslog_conf_t ((s0) (s0))))
(filecon "/etc/rsyslog\.d(/.*)?" any (system_u object_r syslog_conf_t ((s0) (s0))))
(filecon "/etc/audit(/.*)?" any (system_u object_r auditd_etc_t ((s0) (s0))))
(filecon "/etc/systemd/journal.*\.conf" file (system_u object_r syslog_conf_t ((s0) (s0))))
(filecon "/etc/systemd/journald\.conf\.d(/.*)?" any (system_u object_r syslog_conf_t ((s0) (s0))))
(filecon "/etc/rc\.d/init\.d/auditd" file (system_u object_r auditd_initrc_exec_t ((s0) (s0))))
(filecon "/etc/rc\.d/init\.d/rsyslog" file (system_u object_r syslogd_initrc_exec_t ((s0) (s0))))
(filecon "/usr/bin/audispd" file (system_u object_r audisp_exec_t ((s0) (s0))))
(filecon "/usr/bin/audisp-remote" file (system_u object_r audisp_remote_exec_t ((s0) (s0))))
(filecon "/usr/bin/auditctl" file (system_u object_r auditctl_exec_t ((s0) (s0))))
(filecon "/usr/bin/auditd" file (system_u object_r auditd_exec_t ((s0) (s0))))
(filecon "/usr/bin/klogd" file (system_u object_r klogd_exec_t ((s0) (s0))))
(filecon "/usr/bin/metalog" file (system_u object_r syslogd_exec_t ((s0) (s0))))
(filecon "/usr/bin/minilogd" file (system_u object_r syslogd_exec_t ((s0) (s0))))
(filecon "/usr/bin/rklogd" file (system_u object_r klogd_exec_t ((s0) (s0))))
(filecon "/usr/bin/rsyslogd" file (system_u object_r syslogd_exec_t ((s0) (s0))))
(filecon "/usr/bin/syslog-ng" file (system_u object_r syslogd_exec_t ((s0) (s0))))
(filecon "/usr/bin/syslogd" file (system_u object_r syslogd_exec_t ((s0) (s0))))
(filecon "/usr/lib/systemd/system/auditd.*" file (system_u object_r auditd_unit_t ((s0) (s0))))
(filecon "/usr/lib/systemd/system/[^/]*systemd-journal.*" file (system_u object_r syslogd_unit_t ((s0) (s0))))
(filecon "/usr/lib/systemd/system/rsyslog.*\.service" file (system_u object_r syslogd_unit_t ((s0) (s0))))
(filecon "/usr/lib/systemd/systemd-journald" file (system_u object_r syslogd_exec_t ((s0) (s0))))
(filecon "/usr/lib/systemd/systemd-kmsg-syslogd" file (system_u object_r syslogd_exec_t ((s0) (s0))))
(filecon "/usr/sbin/audispd" file (system_u object_r audisp_exec_t ((s0) (s0))))
(filecon "/usr/sbin/audisp-remote" file (system_u object_r audisp_remote_exec_t ((s0) (s0))))
(filecon "/usr/sbin/auditctl" file (system_u object_r auditctl_exec_t ((s0) (s0))))
(filecon "/usr/sbin/auditd" file (system_u object_r auditd_exec_t ((s0) (s0))))
(filecon "/usr/sbin/klogd" file (system_u object_r klogd_exec_t ((s0) (s0))))
(filecon "/usr/sbin/metalog" file (system_u object_r syslogd_exec_t ((s0) (s0))))
(filecon "/usr/sbin/minilogd" file (system_u object_r syslogd_exec_t ((s0) (s0))))
(filecon "/usr/sbin/rklogd" file (system_u object_r klogd_exec_t ((s0) (s0))))
(filecon "/usr/sbin/rsyslogd" file (system_u object_r syslogd_exec_t ((s0) (s0))))
(filecon "/usr/sbin/syslog-ng" file (system_u object_r syslogd_exec_t ((s0) (s0))))
(filecon "/usr/sbin/syslogd" file (system_u object_r syslogd_exec_t ((s0) (s0))))
(filecon "/var/lib/misc/syslog-ng\.persist-?" file (system_u object_r syslogd_var_lib_t ((s0) (s0))))
(filecon "/var/lib/syslog-ng(/.*)?" any (system_u object_r syslogd_var_lib_t ((s0) (s0))))
(filecon "/var/lib/r?syslog(/.*)?" any (system_u object_r syslogd_var_lib_t ((s0) (s0))))
(filecon "/var/lib/syslog-ng\.persist" file (system_u object_r syslogd_var_lib_t ((s0) (s0))))
(filecon "/var/axfrdns/log/main(/.*)?" any (system_u object_r var_log_t ((s0) (s0))))
(filecon "/var/dnscache/log/main(/.*)?" any (system_u object_r var_log_t ((s0) (s0))))
(filecon "/var/log" dir (system_u object_r var_log_t ((s0) (s0))))
(filecon "/var/log/.*" any (system_u object_r var_log_t ((s0) (s0))))
(filecon "/var/log/dmesg" file (system_u object_r var_log_t ((s0) (s0))))
(filecon "/var/log/syslog" file (system_u object_r var_log_t ((s0) (s0))))
(filecon "/var/log/boot\.log" file (system_u object_r var_log_t ((s0) (s0))))
(filecon "/var/log/messages[^/]*" any (system_u object_r var_log_t ((s0) (s0))))
(filecon "/var/log/secure[^/]*" any (system_u object_r var_log_t ((s0) (s0))))
(filecon "/var/log/maillog[^/]*" any (system_u object_r var_log_t ((s0) (s0))))
(filecon "/var/log/spooler[^/]*" any (system_u object_r var_log_t ((s0) (s0))))
(filecon "/var/log/audit(/.*)?" any (system_u object_r auditd_log_t ((s0) (s0))))
(filecon "/var/log/syslog-ng(/.*)?" any (system_u object_r syslogd_runtime_t ((s0) (s0))))
(filecon "/var/empty/dev/log" socket (system_u object_r devlog_t ((s0) (s0))))
(filecon "/run/audit_events" socket (system_u object_r auditd_runtime_t ((s0) (s0))))
(filecon "/run/audispd_events" socket (system_u object_r audisp_runtime_t ((s0) (s0))))
(filecon "/run/auditd\.pid" file (system_u object_r auditd_runtime_t ((s0) (s0))))
(filecon "/run/auditd_sock" socket (system_u object_r auditd_runtime_t ((s0) (s0))))
(filecon "/run/klogd\.pid" file (system_u object_r klogd_runtime_t ((s0) (s0))))
(filecon "/run/log" socket (system_u object_r devlog_t ((s0) (s0))))
(filecon "/run/log" dir (system_u object_r var_log_t ((s0) (s0))))
(filecon "/run/metalog\.pid" file (system_u object_r syslogd_runtime_t ((s0) (s0))))
(filecon "/run/rsyslogd\.pid" file (system_u object_r syslogd_runtime_t ((s0) (s0))))
(filecon "/run/syslogd\.pid" file (system_u object_r syslogd_runtime_t ((s0) (s0))))
(filecon "/run/syslog-ng\.ctl" file (system_u object_r syslogd_runtime_t ((s0) (s0))))
(filecon "/run/syslog-ng\.pid" file (system_u object_r syslogd_runtime_t ((s0) (s0))))
(filecon "/run/syslog-ng(/.*)?" any (system_u object_r syslogd_runtime_t ((s0) (s0))))
(filecon "/run/systemd/journal(/.*)?" any (system_u object_r syslogd_runtime_t ((s0) (s0))))
(filecon "/run/systemd/journal/socket" socket (system_u object_r devlog_t ((s0) (s0))))
(filecon "/run/systemd/journal/stdout" socket (system_u object_r devlog_t ((s0) (s0))))
(filecon "/run/systemd/journal/syslog" socket (system_u object_r devlog_t ((s0) (s0))))
(filecon "/run/systemd/journal/dev-log" socket (system_u object_r devlog_t ((s0) (s0))))
(filecon "/var/spool/audit(/.*)?" any (system_u object_r audit_spool_t ((s0) (s0))))
(filecon "/var/spool/bacula/log(/.*)?" any (system_u object_r var_log_t ((s0) (s0))))
(filecon "/var/spool/plymouth/boot\.log" any (system_u object_r var_log_t ((s0) (s0))))
(filecon "/var/spool/rsyslog(/.*)?" any (system_u object_r var_log_t ((s0) (s0))))
(filecon "/var/tinydns/log/main(/.*)?" any (system_u object_r var_log_t ((s0) (s0))))
