module fi-collectd-fcomm 1.0; require { type bin_t; type collectd_t; type ldconfig_exec_t; type shell_exec_t; class file { read getattr open ioctl execute execute_no_trans }; class lnk_file { read }; } allow collectd_t bin_t:file ioctl; allow collectd_t bin_t:lnk_file read; allow collectd_t ldconfig_exec_t:file { read execute open execute_no_trans }; allow collectd_t shell_exec_t:file { getattr execute_no_trans };