policy_module(mymunin,1.0.9)

require{
        type munin_t;
        type munin_exec_t;
        type saslauthd_t;
        type port_t;
        type inaddr_any_node_t;
        type shell_exec_t;
        class capability dac_override;
        class tcp_socket { name_bind node_bind };
        class file execute_no_trans;
        class fifo_file { read write ioctl };
}


allow munin_t self:capability dac_override;
allow munin_t port_t:tcp_socket name_bind;
allow munin_t inaddr_any_node_t:tcp_socket node_bind;
allow munin_t munin_exec_t:file execute_no_trans;
allow munin_t self:fifo_file { read write ioctl };
allow munin_t shell_exec_t:file { execute read };