module rsynclocal 1.0; require { class netlink_route_socket { create bind getattr write nlmsg_read read }; type rsync_t; role system_r; }; allow rsync_t self:netlink_route_socket { create bind getattr write nlmsg_read read }; type rsync_log_t; logging_log_file(rsync_log_t) allow rsync_t rsync_log_t:file { create ra_file_perms }; logging_log_filetrans(rsync_t,rsync_log_t,file)