policy_module(lircd, 2)

gen_require(`
  type lircd_t;
  type passwd_file_t;
')


#============= lircd_t ==============
allow lircd_t passwd_file_t:file { read getattr open };
allow lircd_t self:capability { setuid setgid dac_override };