module xrdp 1.0.3;
 
require {
        type unconfined_service_t;
        type unconfined_t;
        type unlabeled_t;
        type xserver_exec_t;
        type oddjob_t;
        type oddjob_mkhomedir_exec_t;
        class process transition;
        class process2 nnp_transition;
        class file entrypoint;
        class process2 nnp_transition;
        class vsock_socket { getattr read write };
}
 
#============= unconfined_service_t ==============
allow unconfined_service_t unconfined_t:process transition;
allow unconfined_service_t unconfined_t:process2 nnp_transition;
allow unconfined_service_t oddjob_mkhomedir_exec_t:file entrypoint;
allow unconfined_service_t unlabeled_t:vsock_socket { getattr read write };
 
#============= unconfined_t ==============
allow unconfined_t xserver_exec_t:file entrypoint;
 
#============= oddjob_t ==============
allow oddjob_t unconfined_service_t:process transition;