## <summary>thin policy</summary>

#######################################

## <summary>

##  Creates types and rules for a basic

##  thin daemon domain.

## </summary>

## <param name="prefix">

##  <summary>

##  Prefix for the domain.

##  </summary>

## </param>

#

template(`thin_domain_template',`

    gen_require(`

        attribute thin_domain;

    ')

    type $1_t, thin_domain;

    type $1_exec_t;

    init_daemon_domain($1_t, $1_exec_t)

	can_exec($1_t, $1_exec_t)

	kernel_read_system_state($1_t)

')

######################################

## <summary>

##	Execute mongod in the caller domain.

## </summary>

## <param name="domain">

##	<summary>

##	Domain allowed access.

##	</summary>

## </param>

#

interface(`thin_exec',`

    gen_require(`

	type thin_exec_t;

    ')

    can_exec($1, thin_exec_t)

')