policy_module(tzdata, 1.3.0)

########################################

#

# Declarations

#

type tzdata_t;

type tzdata_exec_t;

init_daemon_domain(tzdata_t, tzdata_exec_t)

application_domain(tzdata_t, tzdata_exec_t)

########################################

#

# tzdata local policy

#

files_read_etc_files(tzdata_t)

files_search_spool(tzdata_t)

fs_getattr_xattr_fs(tzdata_t)

term_dontaudit_list_ptys(tzdata_t)

locallogin_dontaudit_use_fds(tzdata_t)

miscfiles_read_localization(tzdata_t)

miscfiles_manage_localization(tzdata_t)

miscfiles_etc_filetrans_localization(tzdata_t)

userdom_use_user_terminals(tzdata_t)

# tzdata looks for /var/spool/postfix/etc/localtime.

optional_policy(`

	postfix_search_spool(tzdata_t)

')