## <summary>Puppet client daemon</summary>

## <desc>

##	

##	Puppet is a configuration management system written in Ruby.

##	The client daemon is responsible for periodically requesting the

##	desired system state from the server and ensuring the state of

##	the client system matches.

##	

## </desc>

################################################

## <summary>

##	Read Puppet lib files.

## </summary>

## <param name="domain">

##	<summary>

##	Domain allowed access.

##	</summary>

## </param>

#

interface(`puppet_read_lib_files',`

	gen_require(`

		type puppet_var_lib_t;

	')

	read_files_pattern($1, puppet_var_lib_t, puppet_var_lib_t)

	files_search_var_lib($1)

')

################################################

## <summary>

##	Read / Write to Puppet temp files.  Puppet uses

##	some system binaries (groupadd, etc) that run in

##	a non-puppet domain and redirects output into temp

##	files.

## </summary>

## <param name="domain">

##	<summary>

##	Domain allowed access.

##	</summary>

## </param>

#

interface(`puppet_rw_tmp', `

	gen_require(`

		type puppet_tmp_t;

	')

	allow $1 puppet_tmp_t:file rw_file_perms;

	files_search_tmp($1)

')