
module flask_policy 1.0;

require {
	type init_t;
	type mysqld_port_t;
	type user_home_t;
	class file { execute execute_no_trans ioctl map open read };
	class lnk_file read;
	class tcp_socket name_connect;
}

#============= init_t ==============
allow init_t mysqld_port_t:tcp_socket name_connect;

#!!!! This avc can be allowed using the boolean 'domain_can_mmap_files'
allow init_t user_home_t:file map;
allow init_t user_home_t:file { execute execute_no_trans ioctl open read };
allow init_t user_home_t:lnk_file read;
