## amsn client
########################################
##
## Role access for amsn
##
##
##
## Role allowed access
##
##
##
##
## User domain for the role
##
##
#
interface(`amsn_role',`
gen_require(`
type amsn_t, amsn_exec_t;
')
role $1 types amsn_t;
domain_auto_trans($2, amsn_exec_t, amsn_t)
allow amsn_t $2:fd use;
# Allow the user domain to signal/ps.
ps_process_pattern($2, amsn_t)
allow $2 amsn_t:process signal_perms;
manage_files_pattern($2, amsn_userdata_t , amsn_userdata_t)
')