type dbus_daemon_socket, file_type;
type dbus_daemon, domain;
type dbus_daemon_exec, exec_type, file_type;

init_daemon_domain(dbus_daemon)

# Allow crash_reporter access to core dump files.
allow_crash_reporter(dbus_daemon)

allow_call_webservd(dbus_daemon)

# dbus-daemon optimistically tries to read debug information from /proc when it
# sees a connection. Suppress the denials when this happens.
dontaudit dbus_daemon domain:file r_file_perms;
dontaudit dbus_daemon domain:dir search;