policy_module(dch-samba, 0.0.1)

########################################
#
# Declarations
#

type samba_t;
type samba_exec_t;
init_daemon_domain(samba_t, samba_exec_t);

unconfined_domain_noaudit(samba_t);

gen_require(`
	type winbind_t, winbind_exec_t;
')

# Allow winbindd to transition winbind_t when launched by samba
domtrans_pattern(samba_t, winbind_exec_t,  winbind_t);

# Allow winbind to connect to the samr socket
allow winbind_t samba_t:unix_stream_socket connectto;