module pubcookie 0.0.9;

require {
        class dir search;
        class file { getattr read };
        class sock_file write;
        class unix_dgram_socket { connect create sendto write };
	type cert_t; 
        type devlog_t;
	type httpd_sys_script_t; 
        type var_lib_t;
        type syslogd_t;
	role system_r; 
};

allow httpd_sys_script_t cert_t:dir search;
allow httpd_sys_script_t cert_t:file { getattr read };
allow httpd_sys_script_t self:unix_dgram_socket { connect create write };
allow httpd_sys_script_t syslogd_t:unix_dgram_socket sendto;
allow httpd_sys_script_t devlog_t:sock_file write;
allow httpd_sys_script_t var_lib_t:file { getattr read };