module xrdp 1.0.0;

require {
        type unconfined_service_t;
        type unconfined_t;
        type xserver_exec_t;
        class process transition;
        class file entrypoint;
}

#============= unconfined_service_t ==============

allow unconfined_service_t unconfined_t:process transition;

#============= unconfined_t ==============

allow unconfined_t xserver_exec_t:file entrypoint;