policy_module(unconfined,1.0)

########################################

#

# Declarations

#

# real declaration moved to mls until

# range_transition works in loadable modules

gen_require(`

	type unconfined_t;

')

type unconfined_exec_t;

init_system_domain(unconfined_t,unconfined_exec_t)

role system_r types unconfined_t;

########################################

#

# Local policy

#

unconfined_domain_template(unconfined_t)

logging_send_syslog_msg(unconfined_t)

ifdef(`targeted_policy',`

	allow unconfined_t self:system syslog_read;

	# Define some type aliases to help with compatibility with

	# macros and domains from the "strict" policy.

	typealias unconfined_t alias { secadm_t sysadm_t };

	init_domtrans_script(unconfined_t)

	userdom_unconfined(unconfined_t)

	optional_policy(`postfix.te',`

		postfix_domtrans_map(unconfined_t)

	')

	optional_policy(`samba.te',`

		samba_domtrans_net(unconfined_t)

	')

	optional_policy(`su.te',`

		su_per_userdomain_template(sysadm,unconfined_t,system_r)

	')

	ifdef(`TODO',`

	ifdef(`use_mcs',`

	rw_dir_create_file(sysadm_su_t, home_dir_type)

	')

	') dnl end TODO

	typeattribute unconfined_t direct_run_init;

')