module imunify360 1.0; require { type var_run_t; type var_t; type sshd_t; type usr_t; type lib_t; type httpd_t; type httpd_sys_script_t; type initrc_t; class sock_file write; class unix_stream_socket connectto; class unix_dgram_socket sendto; } #============= httpd_sys_script_t ============== allow httpd_sys_script_t lib_t:sock_file write; allow httpd_sys_script_t var_run_t:sock_file write; allow httpd_sys_script_t initrc_t:unix_stream_socket connectto; #============= httpd_t ============== allow httpd_t var_run_t:sock_file write; allow httpd_t initrc_t:unix_dgram_socket sendto; #============= sshd_t ============== allow sshd_t usr_t:sock_file write; allow sshd_t initrc_t:unix_stream_socket connectto;