module spbdoc 1.0; require { type httpd_t; type var_t; class file { read getattr open }; } #============= httpd_t ============== allow httpd_t var_t:file getattr; allow httpd_t var_t:file read; allow httpd_t var_t:file open;