policy_module(tzdata,1.0.0)

########################################

#

# Declarations

#

type tzdata_t;

type tzdata_exec_t;

init_daemon_domain(tzdata_t, tzdata_exec_t)

########################################

#

# tzdata local policy

#

files_read_etc_files(tzdata_t)

files_search_spool(tzdata_t)

term_dontaudit_list_ptys(tzdata_t)

libs_use_ld_so(tzdata_t)

libs_use_shared_libs(tzdata_t)

locallogin_dontaudit_use_fds(tzdata_t)

miscfiles_read_localization(tzdata_t)

miscfiles_manage_localization(tzdata_t)

miscfiles_etc_filetrans_localization(tzdata_t)

ifdef(`targeted_policy',`

	term_dontaudit_use_unallocated_ttys(tzdata_t)

	term_dontaudit_use_generic_ptys(tzdata_t)

')

# tzdata looks for /var/spool/postfix/etc/localtime.

optional_policy(`

	postfix_search_spool(tzdata_t)

')