allow initrc_t autofs_t:dir { add_name create getattr ioctl read remove_name rmdir search write };
allow initrc_t home_root_t:dir rmdir;
allow initrc_t self:tcp_socket { bind connect create read setopt shutdown write };
allow initrc_t ldap_port_t:tcp_socket { recv_msg send_msg };
allow initrc_t netif_eth0_t:netif { tcp_recv tcp_send udp_recv udp_send };
allow initrc_t netif_lo_t:netif { tcp_recv tcp_send udp_recv udp_send };
allow initrc_t nfs_t:dir getattr;
allow initrc_t node_inaddr_any_t:tcp_socket node_bind;
allow initrc_t node_inaddr_any_t:udp_socket node_bind;
allow initrc_t node_lo_t:node { udp_recv udp_send };
allow initrc_t node_t:node { tcp_recv tcp_send udp_recv udp_send };
allow initrc_t policy_src_t:dir read;
allow initrc_t port_t:udp_socket { recv_msg send_msg };
allow initrc_t portmap_port_t:tcp_socket { recv_msg send_msg };
allow initrc_t portmap_port_t:udp_socket { recv_msg send_msg };
allow initrc_t reserved_port_t:tcp_socket name_bind;
allow initrc_t reserved_port_t:udp_socket { recv_msg name_bind send_msg };
allow initrc_t root_t:dir { add_name create remove_name rmdir write };
allow kernel_t netif_eth0_t:netif { udp_recv udp_send };
allow kernel_t netif_lo_t:netif { udp_recv udp_send };
allow kernel_t node_lo_t:node { udp_recv udp_send };
allow kernel_t node_t:node { udp_recv udp_send };
allow kernel_t port_t:udp_socket { recv_msg send_msg };
allow kernel_t portmap_port_t:udp_socket { recv_msg send_msg };
allow mount_t autofs_t:dir { mounton search };
allow mount_t initrc_tmp_t:dir mounton;
allow portmap_t self:unix_stream_socket { connect create };
allow portmap_t reserved_port_t:tcp_socket name_bind;
allow portmap_t reserved_port_t:udp_socket name_bind;
allow sshd_t autofs_t:dir search;
allow sshd_t nfs_t:lnk_file read;
allow sshd_t portage_tmp_t:dir search;
allow staff_t portage_tmp_t:dir search;
allow system_chkpwd_t portage_tmp_t:dir search;
allow system_chkpwd_t tmp_t:dir search;

allow newrole_t autofs_t:dir search;
allow newrole_t nfs_t:dir search;
allow newrole_t nfs_t:lnk_file read;
allow system_chkpwd_t nfs_t:dir search;

allow sysadm_su_t ldap_port_t:tcp_socket { recv_msg send_msg };
allow sysadm_su_t net_conf_t:file { getattr read };
allow sysadm_su_t netif_eth0_t:netif { tcp_recv tcp_send udp_recv udp_send };
allow sysadm_su_t node_t:node { tcp_recv tcp_send udp_recv udp_send };
allow sysadm_su_t reserved_port_t:udp_socket { recv_msg send_msg };
allow sysadm_su_t self:tcp_socket { connect create getattr read setopt write };
allow sysadm_su_t self:udp_socket { connect create getattr read write };