init
	[]

g_proc(0, 0, unconfined_t)
	[ /usr/sbin/apache2 ]
	[ /usr/sbin/nmbd ]
	[ /usr/sbin/rpc.mountd ]
	[ /usr/sbin/smbd ]
	[ /usr/sbin/vsftpd ]
	[ /sbin/rpc.statd  /bin/ping ]
	[ /sbin/rpc.statd  /bin/ping6 ]
	[ /sbin/rpc.statd  /bin/su ]
	[ /sbin/rpc.statd  /sbin/mount.nfs ]
	[ /sbin/rpc.statd  /usr/bin/arping ]
	[ /sbin/rpc.statd  /usr/bin/chfn ]
	[ /sbin/rpc.statd  /usr/bin/chsh ]
	[ /sbin/rpc.statd  /usr/bin/gpasswd ]
	[ /sbin/rpc.statd  /usr/bin/mtr ]
	[ /sbin/rpc.statd  /usr/bin/newgrp ]
	[ /sbin/rpc.statd  /usr/bin/passwd ]
	[ /sbin/rpc.statd  /usr/bin/sudo ]
	[ /sbin/rpc.statd  /usr/bin/sudoedit ]
	[ /sbin/rpc.statd  /usr/bin/traceroute6.iputils ]
	[ /sbin/rpc.statd  /usr/lib/eject/dmcrypt-get-device ]
	[ /sbin/rpc.statd  /usr/lib/openssh/ssh-keysign ]
	[ /sbin/rpc.statd  /usr/lib/pt_chown ]

proc(1, 1, unconfined_t)
	[ /sbin/portmap ]
	[ /sbin/rpc.statd  /usr/bin/at ]
	[ /usr/sbin/named  /usr/bin/at ]
	[ /usr/sbin/mysqld  /usr/bin/at ]

g_proc(0, 1, unconfined_t)
	[ /sbin/portmap  /bin/ping ]
	[ /sbin/portmap  /bin/ping6 ]
	[ /sbin/portmap  /bin/su ]
	[ /sbin/portmap  /sbin/mount.nfs ]
	[ /sbin/portmap  /usr/bin/arping ]
	[ /sbin/portmap  /usr/bin/chfn ]
	[ /sbin/portmap  /usr/bin/chsh ]
	[ /sbin/portmap  /usr/bin/gpasswd ]
	[ /sbin/portmap  /usr/bin/mtr ]
	[ /sbin/portmap  /usr/bin/newgrp ]
	[ /sbin/portmap  /usr/bin/passwd ]
	[ /sbin/portmap  /usr/bin/sudo ]
	[ /sbin/portmap  /usr/bin/sudoedit ]
	[ /sbin/portmap  /usr/bin/traceroute6.iputils ]
	[ /sbin/portmap  /usr/lib/eject/dmcrypt-get-device ]
	[ /sbin/portmap  /usr/lib/openssh/ssh-keysign ]
	[ /sbin/portmap  /usr/lib/pt_chown ]
	[ /sbin/rpc.statd  /usr/bin/at  /bin/ping ]
	[ /usr/sbin/named  /usr/bin/at  /bin/ping ]
	[ /usr/sbin/mysqld  /usr/bin/at  /bin/ping ]
	[ /sbin/rpc.statd  /usr/bin/at  /bin/ping6 ]
	[ /usr/sbin/named  /usr/bin/at  /bin/ping6 ]
	[ /usr/sbin/mysqld  /usr/bin/at  /bin/ping6 ]
	[ /sbin/rpc.statd  /usr/bin/at  /bin/su ]
	[ /usr/sbin/named  /usr/bin/at  /bin/su ]
	[ /usr/sbin/mysqld  /usr/bin/at  /bin/su ]
	[ /sbin/rpc.statd  /usr/bin/at  /sbin/mount.nfs ]
	[ /usr/sbin/named  /usr/bin/at  /sbin/mount.nfs ]
	[ /usr/sbin/mysqld  /usr/bin/at  /sbin/mount.nfs ]
	[ /sbin/rpc.statd  /usr/bin/at  /usr/bin/arping ]
	[ /usr/sbin/named  /usr/bin/at  /usr/bin/arping ]
	[ /usr/sbin/mysqld  /usr/bin/at  /usr/bin/arping ]
	[ /sbin/rpc.statd  /usr/bin/at  /usr/bin/chfn ]
	[ /usr/sbin/named  /usr/bin/at  /usr/bin/chfn ]
	[ /usr/sbin/mysqld  /usr/bin/at  /usr/bin/chfn ]
	[ /sbin/rpc.statd  /usr/bin/at  /usr/bin/chsh ]
	[ /usr/sbin/named  /usr/bin/at  /usr/bin/chsh ]
	[ /usr/sbin/mysqld  /usr/bin/at  /usr/bin/chsh ]
	[ /sbin/rpc.statd  /usr/bin/at  /usr/bin/gpasswd ]
	[ /usr/sbin/named  /usr/bin/at  /usr/bin/gpasswd ]
	[ /usr/sbin/mysqld  /usr/bin/at  /usr/bin/gpasswd ]
	[ /sbin/rpc.statd  /usr/bin/at  /usr/bin/mtr ]
	[ /usr/sbin/named  /usr/bin/at  /usr/bin/mtr ]
	[ /usr/sbin/mysqld  /usr/bin/at  /usr/bin/mtr ]
	[ /sbin/rpc.statd  /usr/bin/at  /usr/bin/newgrp ]
	[ /usr/sbin/named  /usr/bin/at  /usr/bin/newgrp ]
	[ /usr/sbin/mysqld  /usr/bin/at  /usr/bin/newgrp ]
	[ /sbin/rpc.statd  /usr/bin/at  /usr/bin/passwd ]
	[ /usr/sbin/named  /usr/bin/at  /usr/bin/passwd ]
	[ /usr/sbin/mysqld  /usr/bin/at  /usr/bin/passwd ]
	[ /sbin/rpc.statd  /usr/bin/at  /usr/bin/sudo ]
	[ /usr/sbin/named  /usr/bin/at  /usr/bin/sudo ]
	[ /usr/sbin/mysqld  /usr/bin/at  /usr/bin/sudo ]
	[ /sbin/rpc.statd  /usr/bin/at  /usr/bin/sudoedit ]
	[ /usr/sbin/named  /usr/bin/at  /usr/bin/sudoedit ]
	[ /usr/sbin/mysqld  /usr/bin/at  /usr/bin/sudoedit ]
	[ /sbin/rpc.statd  /usr/bin/at  /usr/bin/traceroute6.iputils ]
	[ /usr/sbin/named  /usr/bin/at  /usr/bin/traceroute6.iputils ]
	[ /usr/sbin/mysqld  /usr/bin/at  /usr/bin/traceroute6.iputils ]
	[ /sbin/rpc.statd  /usr/bin/at  /usr/lib/eject/dmcrypt-get-device ]
	[ /usr/sbin/named  /usr/bin/at  /usr/lib/eject/dmcrypt-get-device ]
	[ /usr/sbin/mysqld  /usr/bin/at  /usr/lib/eject/dmcrypt-get-device ]
	[ /sbin/rpc.statd  /usr/bin/at  /usr/lib/openssh/ssh-keysign ]
	[ /usr/sbin/named  /usr/bin/at  /usr/lib/openssh/ssh-keysign ]
	[ /usr/sbin/mysqld  /usr/bin/at  /usr/lib/openssh/ssh-keysign ]
	[ /sbin/rpc.statd  /usr/bin/at  /usr/lib/pt_chown ]
	[ /usr/sbin/named  /usr/bin/at  /usr/lib/pt_chown ]
	[ /usr/sbin/mysqld  /usr/bin/at  /usr/lib/pt_chown ]

g_proc(0, 1, unconfined_mount_t)
	[ /sbin/portmap  /bin/mount ]
	[ /sbin/portmap  /bin/umount ]
	[ /sbin/rpc.statd  /usr/bin/at  /bin/mount ]
	[ /usr/sbin/named  /usr/bin/at  /bin/mount ]
	[ /usr/sbin/mysqld  /usr/bin/at  /bin/mount ]
	[ /sbin/rpc.statd  /usr/bin/at  /bin/umount ]
	[ /usr/sbin/named  /usr/bin/at  /bin/umount ]
	[ /usr/sbin/mysqld  /usr/bin/at  /bin/umount ]

proc(106, 0, unconfined_t)
	[ /sbin/rpc.statd ]

g_proc(0, 0, unconfined_mount_t)
	[ /sbin/rpc.statd  /bin/mount ]
	[ /sbin/rpc.statd  /bin/umount ]

proc(108, 117, unconfined_t)
	[ /usr/sbin/named ]

g_proc(0, 117, unconfined_t)
	[ /usr/sbin/named  /bin/ping ]
	[ /usr/sbin/named  /bin/ping6 ]
	[ /usr/sbin/named  /bin/su ]
	[ /usr/sbin/named  /sbin/mount.nfs ]
	[ /usr/sbin/named  /usr/bin/arping ]
	[ /usr/sbin/named  /usr/bin/chfn ]
	[ /usr/sbin/named  /usr/bin/chsh ]
	[ /usr/sbin/named  /usr/bin/gpasswd ]
	[ /usr/sbin/named  /usr/bin/mtr ]
	[ /usr/sbin/named  /usr/bin/newgrp ]
	[ /usr/sbin/named  /usr/bin/passwd ]
	[ /usr/sbin/named  /usr/bin/sudo ]
	[ /usr/sbin/named  /usr/bin/sudoedit ]
	[ /usr/sbin/named  /usr/bin/traceroute6.iputils ]
	[ /usr/sbin/named  /usr/lib/eject/dmcrypt-get-device ]
	[ /usr/sbin/named  /usr/lib/openssh/ssh-keysign ]
	[ /usr/sbin/named  /usr/lib/pt_chown ]

g_proc(0, 117, unconfined_mount_t)
	[ /usr/sbin/named  /bin/mount ]
	[ /usr/sbin/named  /bin/umount ]

proc(0, 0, cupsd_t)
	[ /usr/sbin/cupsd ]

g_proc(0, 42, system_chkpwd_t)
	[ /usr/sbin/cupsd  /sbin/unix_chkpwd ]

g_proc(0, 0, sshd_t)
	[ /usr/sbin/sshd ]

proc(110, 119, unconfined_t)
	[ /usr/sbin/mysqld ]

g_proc(0, 119, unconfined_t)
	[ /usr/sbin/mysqld  /bin/ping ]
	[ /usr/sbin/mysqld  /bin/ping6 ]
	[ /usr/sbin/mysqld  /bin/su ]
	[ /usr/sbin/mysqld  /sbin/mount.nfs ]
	[ /usr/sbin/mysqld  /usr/bin/arping ]
	[ /usr/sbin/mysqld  /usr/bin/chfn ]
	[ /usr/sbin/mysqld  /usr/bin/chsh ]
	[ /usr/sbin/mysqld  /usr/bin/gpasswd ]
	[ /usr/sbin/mysqld  /usr/bin/mtr ]
	[ /usr/sbin/mysqld  /usr/bin/newgrp ]
	[ /usr/sbin/mysqld  /usr/bin/passwd ]
	[ /usr/sbin/mysqld  /usr/bin/sudo ]
	[ /usr/sbin/mysqld  /usr/bin/sudoedit ]
	[ /usr/sbin/mysqld  /usr/bin/traceroute6.iputils ]
	[ /usr/sbin/mysqld  /usr/lib/eject/dmcrypt-get-device ]
	[ /usr/sbin/mysqld  /usr/lib/openssh/ssh-keysign ]
	[ /usr/sbin/mysqld  /usr/lib/pt_chown ]

g_proc(0, 119, unconfined_mount_t)
	[ /usr/sbin/mysqld  /bin/mount ]
	[ /usr/sbin/mysqld  /bin/umount ]

proc(101, 102, dhcpc_t)
	[ /sbin/dhclient ]

g_proc(0, 102, dhcpc_t)
	[ /sbin/dhclient  /bin/mount ]
	[ /sbin/dhclient  /bin/ping ]
	[ /sbin/dhclient  /bin/ping6 ]
	[ /sbin/dhclient  /bin/su ]
	[ /sbin/dhclient  /bin/umount ]
	[ /sbin/dhclient  /lib/dhcp3-client/call-dhclient-script ]
	[ /sbin/dhclient  /sbin/mount.nfs ]
	[ /sbin/dhclient  /usr/bin/arping ]
	[ /sbin/dhclient  /usr/bin/chfn ]
	[ /sbin/dhclient  /usr/bin/chsh ]
	[ /sbin/dhclient  /usr/bin/gpasswd ]
	[ /sbin/dhclient  /usr/bin/mtr ]
	[ /sbin/dhclient  /usr/bin/newgrp ]
	[ /sbin/dhclient  /usr/bin/passwd ]
	[ /sbin/dhclient  /usr/bin/sudo ]
	[ /sbin/dhclient  /usr/bin/sudoedit ]
	[ /sbin/dhclient  /usr/bin/traceroute6.iputils ]
	[ /sbin/dhclient  /usr/lib/eject/dmcrypt-get-device ]
	[ /sbin/dhclient  /usr/lib/openssh/ssh-keysign ]
	[ /sbin/dhclient  /usr/lib/pt_chown ]

goal
	[ /usr/sbin/apache2 ]
	[ /usr/sbin/nmbd ]
	[ /usr/sbin/rpc.mountd ]
	[ /usr/sbin/smbd ]
	[ /usr/sbin/vsftpd ]
	[ /sbin/portmap  /bin/ping ]
	[ /sbin/portmap  /bin/ping6 ]
	[ /sbin/portmap  /bin/su ]
	[ /sbin/portmap  /sbin/mount.nfs ]
	[ /sbin/portmap  /usr/bin/arping ]
	[ /sbin/portmap  /usr/bin/chfn ]
	[ /sbin/portmap  /usr/bin/chsh ]
	[ /sbin/portmap  /usr/bin/gpasswd ]
	[ /sbin/portmap  /usr/bin/mtr ]
	[ /sbin/portmap  /usr/bin/newgrp ]
	[ /sbin/portmap  /usr/bin/passwd ]
	[ /sbin/portmap  /usr/bin/sudo ]
	[ /sbin/portmap  /usr/bin/sudoedit ]
	[ /sbin/portmap  /usr/bin/traceroute6.iputils ]
	[ /sbin/portmap  /usr/lib/eject/dmcrypt-get-device ]
	[ /sbin/portmap  /usr/lib/openssh/ssh-keysign ]
	[ /sbin/portmap  /usr/lib/pt_chown ]
	[ /sbin/portmap  /bin/mount ]
	[ /sbin/portmap  /bin/umount ]
	[ /sbin/rpc.statd  /bin/mount ]
	[ /sbin/rpc.statd  /bin/umount ]
	[ /usr/sbin/named  /bin/ping ]
	[ /usr/sbin/named  /bin/ping6 ]
	[ /usr/sbin/named  /bin/su ]
	[ /usr/sbin/named  /sbin/mount.nfs ]
	[ /usr/sbin/named  /usr/bin/arping ]
	[ /usr/sbin/named  /usr/bin/chfn ]
	[ /usr/sbin/named  /usr/bin/chsh ]
	[ /usr/sbin/named  /usr/bin/gpasswd ]
	[ /usr/sbin/named  /usr/bin/mtr ]
	[ /usr/sbin/named  /usr/bin/newgrp ]
	[ /usr/sbin/named  /usr/bin/passwd ]
	[ /usr/sbin/named  /usr/bin/sudo ]
	[ /usr/sbin/named  /usr/bin/sudoedit ]
	[ /usr/sbin/named  /usr/bin/traceroute6.iputils ]
	[ /usr/sbin/named  /usr/lib/eject/dmcrypt-get-device ]
	[ /usr/sbin/named  /usr/lib/openssh/ssh-keysign ]
	[ /usr/sbin/named  /usr/lib/pt_chown ]
	[ /usr/sbin/named  /bin/mount ]
	[ /usr/sbin/named  /bin/umount ]
	[ /usr/sbin/cupsd  /sbin/unix_chkpwd ]
	[ /usr/sbin/sshd ]
	[ /usr/sbin/mysqld  /bin/ping ]
	[ /usr/sbin/mysqld  /bin/ping6 ]
	[ /usr/sbin/mysqld  /bin/su ]
	[ /usr/sbin/mysqld  /sbin/mount.nfs ]
	[ /usr/sbin/mysqld  /usr/bin/arping ]
	[ /usr/sbin/mysqld  /usr/bin/chfn ]
	[ /usr/sbin/mysqld  /usr/bin/chsh ]
	[ /usr/sbin/mysqld  /usr/bin/gpasswd ]
	[ /usr/sbin/mysqld  /usr/bin/mtr ]
	[ /usr/sbin/mysqld  /usr/bin/newgrp ]
	[ /usr/sbin/mysqld  /usr/bin/passwd ]
	[ /usr/sbin/mysqld  /usr/bin/sudo ]
	[ /usr/sbin/mysqld  /usr/bin/sudoedit ]
	[ /usr/sbin/mysqld  /usr/bin/traceroute6.iputils ]
	[ /usr/sbin/mysqld  /usr/lib/eject/dmcrypt-get-device ]
	[ /usr/sbin/mysqld  /usr/lib/openssh/ssh-keysign ]
	[ /usr/sbin/mysqld  /usr/lib/pt_chown ]
	[ /usr/sbin/mysqld  /bin/mount ]
	[ /usr/sbin/mysqld  /bin/umount ]
	[ /sbin/dhclient  /bin/mount ]
	[ /sbin/dhclient  /bin/ping ]
	[ /sbin/dhclient  /bin/ping6 ]
	[ /sbin/dhclient  /bin/su ]
	[ /sbin/dhclient  /bin/umount ]
	[ /sbin/dhclient  /lib/dhcp3-client/call-dhclient-script ]
	[ /sbin/dhclient  /sbin/mount.nfs ]
	[ /sbin/dhclient  /usr/bin/arping ]
	[ /sbin/dhclient  /usr/bin/chfn ]
	[ /sbin/dhclient  /usr/bin/chsh ]
	[ /sbin/dhclient  /usr/bin/gpasswd ]
	[ /sbin/dhclient  /usr/bin/mtr ]
	[ /sbin/dhclient  /usr/bin/newgrp ]
	[ /sbin/dhclient  /usr/bin/passwd ]
	[ /sbin/dhclient  /usr/bin/sudo ]
	[ /sbin/dhclient  /usr/bin/sudoedit ]
	[ /sbin/dhclient  /usr/bin/traceroute6.iputils ]
	[ /sbin/dhclient  /usr/lib/eject/dmcrypt-get-device ]
	[ /sbin/dhclient  /usr/lib/openssh/ssh-keysign ]
	[ /sbin/dhclient  /usr/lib/pt_chown ]
	[ /sbin/rpc.statd  /bin/ping ]
	[ /sbin/rpc.statd  /bin/ping6 ]
	[ /sbin/rpc.statd  /bin/su ]
	[ /sbin/rpc.statd  /sbin/mount.nfs ]
	[ /sbin/rpc.statd  /usr/bin/arping ]
	[ /sbin/rpc.statd  /usr/bin/chfn ]
	[ /sbin/rpc.statd  /usr/bin/chsh ]
	[ /sbin/rpc.statd  /usr/bin/gpasswd ]
	[ /sbin/rpc.statd  /usr/bin/mtr ]
	[ /sbin/rpc.statd  /usr/bin/newgrp ]
	[ /sbin/rpc.statd  /usr/bin/passwd ]
	[ /sbin/rpc.statd  /usr/bin/sudo ]
	[ /sbin/rpc.statd  /usr/bin/sudoedit ]
	[ /sbin/rpc.statd  /usr/bin/traceroute6.iputils ]
	[ /sbin/rpc.statd  /usr/lib/eject/dmcrypt-get-device ]
	[ /sbin/rpc.statd  /usr/lib/openssh/ssh-keysign ]
	[ /sbin/rpc.statd  /usr/lib/pt_chown ]

