module xrdp 1.0.1; require { type unconfined_service_t; type unconfined_t; type xserver_exec_t; type xserver_t; type oddjob_t; type oddjob_mkhomedir_exec_t; class process transition; class file entrypoint; class process2 nnp_transition; } #============= unconfined_service_t ============== allow unconfined_service_t unconfined_t:process transition; allow unconfined_service_t oddjob_mkhomedir_exec_t:file entrypoint; #============= unconfined_t ============== allow unconfined_t xserver_exec_t:file entrypoint; allow unconfined_t xserver_t:process2 nnp_transition; #============= oddjob_t ============== allow oddjob_t unconfined_service_t:process transition;