type dbus_daemon_socket, file_type;
type dbus_daemon, domain;
type dbus_daemon_exec, exec_type, file_type;

init_daemon_domain(dbus_daemon)

# Allow crash_reporter access to core dump files.
allow_crash_reporter(dbus_daemon)

# This seems to prevent linker warnings like:
# linker  : readlink('/proc/self/fd/X') failed: Permission denied [fd=X]
allow dbus_daemon proc:dir search;

# dbus-daemon optimistically tries to read debug information from /proc when it
# sees a connection. Suppress the denials when this happens.
dontaudit dbus_daemon domain:file r_file_perms;
dontaudit dbus_daemon domain:dir search;