policy_module(guest, 1.2.1)

########################################
#
# Declarations
#

role guest_r;

userdom_restricted_user_template(guest)

kernel_read_system_state(guest_t)

########################################
#
# Local policy
#

optional_policy(`
	apache_role(guest_r, guest_t)
')

gen_user(guest_u, user, guest_r, s0, s0)