module tmux-staff 1.3; require { type staff_screen_t; type screen_tmp_t; type user_home_dir_t; class sock_file write; class sock_file create; class sock_file getattr; class sock_file unlink; class file create; } #============= staff_screen_t ============== allow staff_screen_t user_home_dir_t:file create; allow staff_screen_t screen_tmp_t:sock_file create; allow staff_screen_t screen_tmp_t:sock_file getattr; allow staff_screen_t screen_tmp_t:sock_file write; allow staff_screen_t screen_tmp_t:sock_file unlink;