policy_module(guest, 1.2.1)
########################################
#
# Declarations
#
role guest_r;
userdom_restricted_user_template(guest)
kernel_read_system_state(guest_t)
########################################
#
# Local policy
#
optional_policy(`
apache_role(guest_r, guest_t)
')
gen_user(guest_u, user, guest_r, s0, s0)