module portage_can_verify_gpg 1.0;

require {
	type urandom_device_t;
	type portage_fetch_t;
	class chr_file { read open };
}

#============= portage_fetch_t ==============

allow portage_fetch_t urandom_device_t:chr_file { read open };