policy_module(carbon,1.1.5)

require {
type initrc_t;
type node_t;
type unreserved_port_t;
}

#============= initrc_t ==============
allow initrc_t node_t:tcp_socket node_bind;
allow initrc_t unreserved_port_t:tcp_socket name_bind;