module rsynclocal 1.0;

require {
        class netlink_route_socket { create bind getattr write nlmsg_read read };
        class file { create ra_file_perms };
        class filesystem { associate };
        class dir all_dir_perms;
        type rsync_t;
        role system_r;
};

type rsync_log_t;
logging_log_file(rsync_log_t)

allow rsync_t rsync_log_t:file { create ra_file_perms };
logging_log_filetrans(rsync_t,rsync_log_t,file)

allow rsync_t self:netlink_route_socket { create bind getattr write nlmsg_read read };