module my-phpfpm 1.0;

require {
	type http_port_t;
	type smtp_port_t;
	type user_home_t;
	type httpd_t;
	class file { create lock map open read rename setattr unlink write };
	class dir { add_name create read remove_name rename reparent rmdir setattr };
	class tcp_socket name_connect;
}

#============= httpd_t ==============

#!!!! This avc is allowed in the current policy
allow httpd_t http_port_t:tcp_socket name_connect;

#!!!! This avc is allowed in the current policy
allow httpd_t smtp_port_t:tcp_socket name_connect;

#!!!! This avc is allowed in the current policy
allow httpd_t user_home_t:dir { add_name create read remove_name rename reparent rmdir setattr };

#!!!! This avc is allowed in the current policy
allow httpd_t user_home_t:file { create lock map open read rename setattr unlink write };