[gentoo-commits] proj/hardened-refpolicy:master commit in: policy/, policy/modules/kernel/, doc/

[Jason Zaman]

commit:     b293bd6062b6007870720a7a8ed255cf2f667280
Author:     Jason Zaman <perfinion <AT> gentoo <DOT> org>
AuthorDate: Mon Jan 31 19:27:56 2022 +0000
Commit:     Jason Zaman <perfinion <AT> gentoo <DOT> org>
CommitDate: Mon Jan 31 19:27:56 2022 +0000
URL:        https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=b293bd60

Update generated policy and doc files

Signed-off-by: Jason Zaman <perfinion <AT> gentoo.org>

 doc/policy.xml                       | 11907 ++++++++++++++++++++-------------
 policy/booleans.conf                 |    64 +-
 policy/modules.conf                  |    35 +
 policy/modules/kernel/corenetwork.if |   421 ++
 policy/modules/kernel/corenetwork.te |    15 +-
 5 files changed, 7744 insertions(+), 4698 deletions(-)

diff --git a/doc/policy.xml b/doc/policy.xml
index 12758be9..35687d71 100644
--- a/doc/policy.xml
+++ b/doc/policy.xml
@@ -3472,22 +3472,33 @@ Role allowed access.
 </module>
 <module name="shutdown" filename="policy/modules/admin/shutdown.if">
 <summary>System shutdown command.</summary>
-<interface name="shutdown_role" lineno="18">
+<template name="shutdown_role" lineno="29">
 <summary>
 Role access for shutdown.
 </summary>
-<param name="role">
+<param name="role_prefix">
 <summary>
-Role allowed access.
+The prefix of the user role (e.g., user
+is the prefix for user_r).
 </summary>
 </param>
-<param name="domain">
+<param name="user_domain">
 <summary>
 User domain for the role.
 </summary>
 </param>
-</interface>
-<interface name="shutdown_domtrans" lineno="39">
+<param name="user_exec_domain">
+<summary>
+User exec domain for execute and transition access.
+</summary>
+</param>
+<param name="role">
+<summary>
+Role allowed access
+</summary>
+</param>
+</template>
+<interface name="shutdown_domtrans" lineno="64">
 <summary>
 Execute a domain transition to run shutdown.
 </summary>
@@ -3497,7 +3508,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="shutdown_run" lineno="65">
+<interface name="shutdown_run" lineno="90">
 <summary>
 Execute shutdown in the shutdown
 domain, and allow the specified role
@@ -3514,7 +3525,7 @@ Role allowed access.
 </summary>
 </param>
 </interface>
-<interface name="shutdown_signal" lineno="84">
+<interface name="shutdown_signal" lineno="109">
 <summary>
 Send generic signals to shutdown.
 </summary>
@@ -3524,7 +3535,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="shutdown_sigchld" lineno="102">
+<interface name="shutdown_sigchld" lineno="127">
 <summary>
 Send SIGCHLD signals to shutdown.
 </summary>
@@ -3534,7 +3545,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="shutdown_getattr_exec_files" lineno="120">
+<interface name="shutdown_getattr_exec_files" lineno="145">
 <summary>
 Get attributes of shutdown executable files.
 </summary>
@@ -3544,6 +3555,16 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
+<tunable name="shutdown_allow_user_exec_domains" dftval="false">
+<desc>
+<p>
+Determine whether the user application exec
+domain attribute should be respected for
+shutdown access. If not enabled, only user
+domains themselves may use shutdown.
+</p>
+</desc>
+</tunable>
 </module>
 <module name="sosreport" filename="policy/modules/admin/sosreport.if">
 <summary>Generate debugging information for system.</summary>
@@ -3650,7 +3671,7 @@ The role associated with the user domain.
 </summary>
 </param>
 </template>
-<template name="su_role_template" lineno="144">
+<template name="su_role_template" lineno="149">
 <summary>
 The role template for the su module.
 </summary>
@@ -3660,18 +3681,23 @@ The prefix of the user role (e.g., user
 is the prefix for user_r).
 </summary>
 </param>
-<param name="user_role">
+<param name="user_domain">
 <summary>
-The role associated with the user domain.
+User domain for the role.
 </summary>
 </param>
-<param name="user_domain">
+<param name="user_exec_domain">
 <summary>
-The type of the user domain.
+User exec domain for execute and transition access.
+</summary>
+</param>
+<param name="role">
+<summary>
+Role allowed access
 </summary>
 </param>
 </template>
-<interface name="su_exec" lineno="280">
+<interface name="su_exec" lineno="303">
 <summary>
 Execute su in the caller domain.
 </summary>
@@ -3681,10 +3707,20 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
+<tunable name="su_allow_user_exec_domains" dftval="false">
+<desc>
+<p>
+Determine whether the user application
+exec domain attribute should be respected
+for su access. If not enabled, only user
+domains themselves may use su.
+</p>
+</desc>
+</tunable>
 </module>
 <module name="sudo" filename="policy/modules/admin/sudo.if">
 <summary>Execute a command with a substitute user</summary>
-<template name="sudo_role_template" lineno="31">
+<template name="sudo_role_template" lineno="36">
 <summary>
 The role template for the sudo module.
 </summary>
@@ -3701,18 +3737,23 @@ The prefix of the user role (e.g., user
 is the prefix for user_r).
 </summary>
 </param>
-<param name="user_role">
+<param name="user_domain">
 <summary>
-The user role.
+User domain for the role.
 </summary>
 </param>
-<param name="user_domain">
+<param name="user_exec_domain">
 <summary>
-The user domain associated with the role.
+User exec domain for execute and transition access.
+</summary>
+</param>
+<param name="role">
+<summary>
+Role allowed access
 </summary>
 </param>
 </template>
-<interface name="sudo_sigchld" lineno="195">
+<interface name="sudo_sigchld" lineno="215">
 <summary>
 Send a SIGCHLD signal to the sudo domain.
 </summary>
@@ -3733,6 +3774,16 @@ required for users to use sudo.
 </p>
 </desc>
 </tunable>
+<tunable name="sudo_allow_user_exec_domains" dftval="false">
+<desc>
+<p>
+Determine whether the user application exec
+domain attribute should be respected for sudo
+access. If not enabled, only user domains
+themselves may use sudo.
+</p>
+</desc>
+</tunable>
 </module>
 <module name="sxid" filename="policy/modules/admin/sxid.if">
 <summary>SUID/SGID program monitoring.</summary>
@@ -4409,22 +4460,33 @@ Role allowed access.
 </module>
 <module name="cdrecord" filename="policy/modules/apps/cdrecord.if">
 <summary>Record audio or data Compact Discs from a master.</summary>
-<interface name="cdrecord_role" lineno="18">
+<template name="cdrecord_role" lineno="29">
 <summary>
 Role access for cdrecord.
 </summary>
-<param name="role">
+<param name="role_prefix">
 <summary>
-Role allowed access.
+The prefix of the user role (e.g., user
+is the prefix for user_r).
 </summary>
 </param>
-<param name="domain">
+<param name="user_domain">
 <summary>
 User domain for the role.
 </summary>
 </param>
-</interface>
-<interface name="cdrecord_exec" lineno="44">
+<param name="user_exec_domain">
+<summary>
+User exec domain for execute and transition access.
+</summary>
+</param>
+<param name="role">
+<summary>
+Role allowed access
+</summary>
+</param>
+</template>
+<interface name="cdrecord_exec" lineno="59">
 <summary>
 Execute cdrecord in the caller domain.
 </summary>
@@ -4447,22 +4509,33 @@ content files
 </module>
 <module name="chromium" filename="policy/modules/apps/chromium.if">
 <summary>Chromium browser</summary>
-<interface name="chromium_role" lineno="18">
+<template name="chromium_role" lineno="29">
 <summary>
 Role access for chromium
 </summary>
-<param name="role">
+<param name="role_prefix">
 <summary>
-Role allowed access
+The prefix of the user role (e.g., user
+is the prefix for user_r).
 </summary>
 </param>
-<param name="domain">
+<param name="user_domain">
 <summary>
-User domain for the role
+User domain for the role.
 </summary>
 </param>
-</interface>
-<interface name="chromium_rw_tmp_pipes" lineno="67">
+<param name="user_exec_domain">
+<summary>
+User exec domain for execute and transition access.
+</summary>
+</param>
+<param name="role">
+<summary>
+Role allowed access
+</summary>
+</param>
+</template>
+<interface name="chromium_rw_tmp_pipes" lineno="82">
 <summary>
 Read-write access to Chromiums' temporary fifo files
 </summary>
@@ -4472,7 +4545,7 @@ Domain allowed access
 </summary>
 </param>
 </interface>
-<interface name="chromium_tmp_filetrans" lineno="101">
+<interface name="chromium_tmp_filetrans" lineno="116">
 <summary>
 Automatically use the specified type for resources created in chromium's
 temporary locations
@@ -4498,7 +4571,7 @@ The name of the resource being created
 </summary>
 </param>
 </interface>
-<interface name="chromium_domtrans" lineno="120">
+<interface name="chromium_domtrans" lineno="135">
 <summary>
 Execute a domain transition to the chromium domain (chromium_t)
 </summary>
@@ -4508,7 +4581,7 @@ Domain allowed access
 </summary>
 </param>
 </interface>
-<interface name="chromium_run" lineno="146">
+<interface name="chromium_run" lineno="161">
 <summary>
 Execute chromium in the chromium domain and allow the specified role to access the chromium domain
 </summary>
@@ -4612,21 +4685,32 @@ Domain allowed access.
 </module>
 <module name="cryfs" filename="policy/modules/apps/cryfs.if">
 <summary>CryFS and similar other tools which mount encrypted directories using FUSE.</summary>
-<interface name="cryfs_role" lineno="18">
+<template name="cryfs_role" lineno="29">
 <summary>
 Role access for CryFS.
 </summary>
-<param name="role">
+<param name="role_prefix">
 <summary>
-Role allowed access.
+The prefix of the user role (e.g., user
+is the prefix for user_r).
 </summary>
 </param>
-<param name="domain">
+<param name="user_domain">
 <summary>
 User domain for the role.
 </summary>
 </param>
-</interface>
+<param name="user_exec_domain">
+<summary>
+User exec domain for execute and transition access.
+</summary>
+</param>
+<param name="role">
+<summary>
+Role allowed access
+</summary>
+</param>
+</template>
 <tunable name="cryfs_read_generic_user_content" dftval="true">
 <desc>
 <p>
@@ -4658,22 +4742,33 @@ Grant the cryfs domains manage rights on all user content
 </module>
 <module name="evolution" filename="policy/modules/apps/evolution.if">
 <summary>Evolution email client.</summary>
-<interface name="evolution_role" lineno="18">
+<template name="evolution_role" lineno="29">
 <summary>
 Role access for evolution.
 </summary>
-<param name="role">
+<param name="role_prefix">
 <summary>
-Role allowed access.
+The prefix of the user role (e.g., user
+is the prefix for user_r).
 </summary>
 </param>
-<param name="domain">
+<param name="user_domain">
 <summary>
 User domain for the role.
 </summary>
 </param>
-</interface>
-<interface name="evolution_home_filetrans" lineno="99">
+<param name="user_exec_domain">
+<summary>
+User exec domain for execute and transition access.
+</summary>
+</param>
+<param name="role">
+<summary>
+Role allowed access
+</summary>
+</param>
+</template>
+<interface name="evolution_home_filetrans" lineno="118">
 <summary>
 Create objects in the evolution home
 directories with a private type.
@@ -4699,7 +4794,7 @@ The name of the object being created.
 </summary>
 </param>
 </interface>
-<interface name="evolution_read_home_files" lineno="118">
+<interface name="evolution_read_home_files" lineno="137">
 <summary>
 Read evolution home files.
 </summary>
@@ -4709,7 +4804,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="evolution_stream_connect" lineno="137">
+<interface name="evolution_stream_connect" lineno="156">
 <summary>
 Connect to evolution using a unix
 domain stream socket.
@@ -4720,7 +4815,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="evolution_read_orbit_tmp_files" lineno="158">
+<interface name="evolution_read_orbit_tmp_files" lineno="177">
 <summary>
 Read evolution orbit temporary
 files.
@@ -4731,7 +4826,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="evolution_dbus_chat" lineno="179">
+<interface name="evolution_dbus_chat" lineno="198">
 <summary>
 Send and receive messages from
 evolution over dbus.
@@ -4742,7 +4837,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="evolution_alarm_dbus_chat" lineno="200">
+<interface name="evolution_alarm_dbus_chat" lineno="219">
 <summary>
 Send and receive messages from
 evolution_alarm over dbus.
@@ -4753,7 +4848,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="evolution_domtrans" lineno="221">
+<interface name="evolution_domtrans" lineno="240">
 <summary>
 Make a domain transition to the
 evolution target domain.
@@ -4804,22 +4899,33 @@ Grant the evolution domains manage rights on all user content
 </module>
 <module name="games" filename="policy/modules/apps/games.if">
 <summary>Various games.</summary>
-<interface name="games_role" lineno="18">
+<template name="games_role" lineno="29">
 <summary>
 Role access for games.
 </summary>
-<param name="role">
+<param name="role_prefix">
 <summary>
-Role allowed access.
+The prefix of the user role (e.g., user
+is the prefix for user_r).
 </summary>
 </param>
-<param name="domain">
+<param name="user_domain">
 <summary>
 User domain for the role.
 </summary>
 </param>
-</interface>
-<interface name="games_rw_data" lineno="52">
+<param name="user_exec_domain">
+<summary>
+User exec domain for execute and transition access.
+</summary>
+</param>
+<param name="role">
+<summary>
+Role allowed access
+</summary>
+</param>
+</template>
+<interface name="games_rw_data" lineno="67">
 <summary>
 Read and write games data files.
 </summary>
@@ -4829,7 +4935,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="games_domtrans" lineno="71">
+<interface name="games_domtrans" lineno="86">
 <summary>
 Run a game in the game domain.
 </summary>
@@ -4839,7 +4945,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="games_dbus_chat" lineno="91">
+<interface name="games_dbus_chat" lineno="106">
 <summary>
 Send and receive messages from
 games over dbus.
@@ -4911,28 +5017,33 @@ Determine whether Gitosis can send mail.
 </module>
 <module name="gnome" filename="policy/modules/apps/gnome.if">
 <summary>GNU network object model environment.</summary>
-<template name="gnome_role_template" lineno="24">
+<template name="gnome_role_template" lineno="29">
 <summary>
 The role template for gnome.
 </summary>
 <param name="role_prefix">
 <summary>
-The prefix of the user domain (e.g., user
-is the prefix for user_t).
+The prefix of the user role (e.g., user
+is the prefix for user_r).
 </summary>
 </param>
-<param name="user_role">
+<param name="user_domain">
 <summary>
-The role associated with the user domain.
+User domain for the role.
 </summary>
 </param>
-<param name="user_domain">
+<param name="user_exec_domain">
 <summary>
-The type of the user domain.
+User exec domain for execute and transition access.
+</summary>
+</param>
+<param name="role">
+<summary>
+Role allowed access
 </summary>
 </param>
 </template>
-<interface name="gnome_exec_gconf" lineno="121">
+<interface name="gnome_exec_gconf" lineno="134">
 <summary>
 Execute gconf in the caller domain.
 </summary>
@@ -4942,7 +5053,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="gnome_read_gconf_config" lineno="140">
+<interface name="gnome_read_gconf_config" lineno="153">
 <summary>
 Read gconf configuration content.
 </summary>
@@ -4952,7 +5063,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="gnome_dontaudit_read_inherited_gconf_config_files" lineno="162">
+<interface name="gnome_dontaudit_read_inherited_gconf_config_files" lineno="175">
 <summary>
 Do not audit attempts to read
 inherited gconf configuration files.
@@ -4963,7 +5074,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="gnome_manage_gconf_config" lineno="181">
+<interface name="gnome_manage_gconf_config" lineno="194">
 <summary>
 Create, read, write, and delete
 gconf configuration content.
@@ -4974,7 +5085,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="gnome_stream_connect_gconf" lineno="203">
+<interface name="gnome_stream_connect_gconf" lineno="216">
 <summary>
 Connect to gconf using a unix
 domain stream socket.
@@ -4985,7 +5096,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="gnome_domtrans_gconfd" lineno="222">
+<interface name="gnome_domtrans_gconfd" lineno="235">
 <summary>
 Run gconfd in gconfd domain.
 </summary>
@@ -4995,7 +5106,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="gnome_create_generic_home_dirs" lineno="241">
+<interface name="gnome_create_generic_home_dirs" lineno="254">
 <summary>
 Create generic gnome home directories.
 </summary>
@@ -5005,7 +5116,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="gnome_setattr_generic_home_dirs" lineno="260">
+<interface name="gnome_setattr_generic_home_dirs" lineno="273">
 <summary>
 Set attributes of generic gnome
 user home directories.
@@ -5016,7 +5127,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="gnome_read_generic_home_content" lineno="279">
+<interface name="gnome_read_generic_home_content" lineno="292">
 <summary>
 Read generic gnome home content.
 </summary>
@@ -5026,7 +5137,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="gnome_manage_generic_home_content" lineno="303">
+<interface name="gnome_manage_generic_home_content" lineno="316">
 <summary>
 Create, read, write, and delete
 generic gnome home content.
@@ -5037,7 +5148,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="gnome_search_generic_home" lineno="326">
+<interface name="gnome_search_generic_home" lineno="339">
 <summary>
 Search generic gnome home directories.
 </summary>
@@ -5047,7 +5158,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="gnome_home_filetrans" lineno="361">
+<interface name="gnome_home_filetrans" lineno="374">
 <summary>
 Create objects in gnome user home
 directories with a private type.
@@ -5073,7 +5184,7 @@ The name of the object being created.
 </summary>
 </param>
 </interface>
-<interface name="gnome_create_generic_gconf_home_dirs" lineno="380">
+<interface name="gnome_create_generic_gconf_home_dirs" lineno="393">
 <summary>
 Create generic gconf home directories.
 </summary>
@@ -5083,7 +5194,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="gnome_read_generic_gconf_home_content" lineno="398">
+<interface name="gnome_read_generic_gconf_home_content" lineno="411">
 <summary>
 Read generic gconf home content.
 </summary>
@@ -5093,7 +5204,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="gnome_manage_generic_gconf_home_content" lineno="422">
+<interface name="gnome_manage_generic_gconf_home_content" lineno="435">
 <summary>
 Create, read, write, and delete
 generic gconf home content.
@@ -5104,7 +5215,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="gnome_search_generic_gconf_home" lineno="445">
+<interface name="gnome_search_generic_gconf_home" lineno="458">
 <summary>
 Search generic gconf home directories.
 </summary>
@@ -5114,7 +5225,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="gnome_home_filetrans_gconf_home" lineno="476">
+<interface name="gnome_home_filetrans_gconf_home" lineno="489">
 <summary>
 Create objects in user home
 directories with the generic gconf
@@ -5136,7 +5247,7 @@ The name of the object being created.
 </summary>
 </param>
 </interface>
-<interface name="gnome_home_filetrans_gnome_home" lineno="506">
+<interface name="gnome_home_filetrans_gnome_home" lineno="519">
 <summary>
 Create objects in user home
 directories with the generic gnome
@@ -5158,7 +5269,7 @@ The name of the object being created.
 </summary>
 </param>
 </interface>
-<interface name="gnome_gconf_home_filetrans" lineno="540">
+<interface name="gnome_gconf_home_filetrans" lineno="553">
 <summary>
 Create objects in gnome gconf home
 directories with a private type.
@@ -5184,7 +5295,7 @@ The name of the object being created.
 </summary>
 </param>
 </interface>
-<interface name="gnome_user_home_dir_filetrans_gstreamer_orcexec" lineno="571">
+<interface name="gnome_user_home_dir_filetrans_gstreamer_orcexec" lineno="584">
 <summary>
 Create objects in user home
 directories with the gstreamer
@@ -5206,7 +5317,7 @@ The name of the object being created.
 </summary>
 </param>
 </interface>
-<interface name="gnome_user_runtime_filetrans_gstreamer_orcexec" lineno="601">
+<interface name="gnome_user_runtime_filetrans_gstreamer_orcexec" lineno="614">
 <summary>
 Create objects in the user
 runtime directories with the
@@ -5228,7 +5339,7 @@ The name of the object being created.
 </summary>
 </param>
 </interface>
-<interface name="gnome_read_keyring_home_files" lineno="619">
+<interface name="gnome_read_keyring_home_files" lineno="632">
 <summary>
 Read generic gnome keyring home files.
 </summary>
@@ -5238,7 +5349,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="gnome_dbus_chat_gconfd" lineno="640">
+<interface name="gnome_dbus_chat_gconfd" lineno="653">
 <summary>
 Send and receive messages from
 gnome configuration daemon over
@@ -5250,7 +5361,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<template name="gnome_dbus_chat_gkeyringd" lineno="667">
+<template name="gnome_dbus_chat_gkeyringd" lineno="680">
 <summary>
 Send and receive messages from
 gnome keyring daemon over dbus.
@@ -5267,7 +5378,7 @@ Domain allowed access.
 </summary>
 </param>
 </template>
-<interface name="gnome_dbus_chat_all_gkeyringd" lineno="688">
+<interface name="gnome_dbus_chat_all_gkeyringd" lineno="701">
 <summary>
 Send and receive messages from all
 gnome keyring daemon over dbus.
@@ -5278,7 +5389,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="gnome_spec_domtrans_all_gkeyringd" lineno="708">
+<interface name="gnome_spec_domtrans_all_gkeyringd" lineno="721">
 <summary>
 Run all gkeyringd in gkeyringd domain.
 </summary>
@@ -5288,7 +5399,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<template name="gnome_stream_connect_gkeyringd" lineno="735">
+<template name="gnome_stream_connect_gkeyringd" lineno="748">
 <summary>
 Connect to gnome keyring daemon
 with a unix stream socket.
@@ -5305,7 +5416,7 @@ Domain allowed access.
 </summary>
 </param>
 </template>
-<interface name="gnome_stream_connect_all_gkeyringd" lineno="756">
+<interface name="gnome_stream_connect_all_gkeyringd" lineno="769">
 <summary>
 Connect to all gnome keyring daemon
 with a unix stream socket.
@@ -5316,7 +5427,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="gnome_manage_gstreamer_orcexec" lineno="778">
+<interface name="gnome_manage_gstreamer_orcexec" lineno="791">
 <summary>
 Manage gstreamer ORC optimized
 code.
@@ -5327,7 +5438,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="gnome_mmap_gstreamer_orcexec" lineno="797">
+<interface name="gnome_mmap_gstreamer_orcexec" lineno="810">
 <summary>
 Mmap gstreamer ORC optimized
 code.
@@ -5341,22 +5452,33 @@ Domain allowed access.
 </module>
 <module name="gpg" filename="policy/modules/apps/gpg.if">
 <summary>Policy for GNU Privacy Guard and related programs.</summary>
-<interface name="gpg_role" lineno="18">
+<template name="gpg_role" lineno="29">
 <summary>
 Role access for gpg.
 </summary>
-<param name="role">
+<param name="role_prefix">
 <summary>
-Role allowed access.
+The prefix of the user role (e.g., user
+is the prefix for user_r).
 </summary>
 </param>
-<param name="domain">
+<param name="user_domain">
 <summary>
 User domain for the role.
 </summary>
 </param>
-</interface>
-<interface name="gpg_domtrans" lineno="64">
+<param name="user_exec_domain">
+<summary>
+User exec domain for execute and transition access.
+</summary>
+</param>
+<param name="role">
+<summary>
+Role allowed access
+</summary>
+</param>
+</template>
+<interface name="gpg_domtrans" lineno="80">
 <summary>
 Execute the gpg in the gpg domain.
 </summary>
@@ -5366,7 +5488,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="gpg_exec" lineno="83">
+<interface name="gpg_exec" lineno="99">
 <summary>
 Execute the gpg in the caller domain.
 </summary>
@@ -5376,7 +5498,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="gpg_spec_domtrans" lineno="117">
+<interface name="gpg_spec_domtrans" lineno="133">
 <summary>
 Execute gpg in a specified domain.
 </summary>
@@ -5401,7 +5523,7 @@ Domain to transition to.
 </summary>
 </param>
 </interface>
-<interface name="gpg_exec_agent" lineno="136">
+<interface name="gpg_exec_agent" lineno="152">
 <summary>
 Execute the gpg-agent in the caller domain.
 </summary>
@@ -5411,7 +5533,17 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="gpg_entry_type" lineno="156">
+<interface name="gpg_dontaudit_exec_agent" lineno="171">
+<summary>
+Do not audit attempts to execute the gpg-agent.
+</summary>
+<param name="domain">
+<summary>
+Domain to not audit.
+</summary>
+</param>
+</interface>
+<interface name="gpg_entry_type" lineno="190">
 <summary>
 Make gpg executable files an
 entrypoint for the specified domain.
@@ -5422,7 +5554,7 @@ The domain for which gpg_exec_t is an entrypoint.
 </summary>
 </param>
 </interface>
-<interface name="gpg_signal" lineno="174">
+<interface name="gpg_signal" lineno="208">
 <summary>
 Send generic signals to gpg.
 </summary>
@@ -5432,7 +5564,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="gpg_rw_agent_pipes" lineno="192">
+<interface name="gpg_rw_agent_pipes" lineno="226">
 <summary>
 Read and write gpg agent pipes.
 </summary>
@@ -5442,7 +5574,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="gpg_stream_connect_agent" lineno="210">
+<interface name="gpg_stream_connect_agent" lineno="244">
 <summary>
 Connect to gpg agent socket
 </summary>
@@ -5452,7 +5584,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="gpg_search_agent_tmp_dirs" lineno="232">
+<interface name="gpg_search_agent_tmp_dirs" lineno="266">
 <summary>
 Search gpg agent dirs.
 </summary>
@@ -5462,7 +5594,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="gpg_agent_tmp_filetrans" lineno="266">
+<interface name="gpg_agent_tmp_filetrans" lineno="300">
 <summary>
 filetrans in gpg_agent_tmp_t dirs
 </summary>
@@ -5488,7 +5620,7 @@ The name of the object being created.
 </summary>
 </param>
 </interface>
-<interface name="gpg_runtime_filetrans" lineno="301">
+<interface name="gpg_runtime_filetrans" lineno="335">
 <summary>
 filetrans in gpg_runtime_t dirs
 </summary>
@@ -5514,7 +5646,7 @@ The name of the object being created.
 </summary>
 </param>
 </interface>
-<interface name="gpg_secret_filetrans" lineno="336">
+<interface name="gpg_secret_filetrans" lineno="370">
 <summary>
 filetrans in gpg_secret_t dirs
 </summary>
@@ -5540,7 +5672,7 @@ The name of the object being created.
 </summary>
 </param>
 </interface>
-<interface name="gpg_pinentry_dbus_chat" lineno="357">
+<interface name="gpg_pinentry_dbus_chat" lineno="391">
 <summary>
 Send messages to and from gpg
 pinentry over DBUS.
@@ -5551,7 +5683,18 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="gpg_list_user_secrets" lineno="377">
+<interface name="gpg_dontaudit_search_user_secrets" lineno="412">
+<summary>
+Do not audit attempts to search gpg
+user secrets.
+</summary>
+<param name="domain">
+<summary>
+Domain to not audit.
+</summary>
+</param>
+</interface>
+<interface name="gpg_list_user_secrets" lineno="430">
 <summary>
 List gpg user secrets.
 </summary>
@@ -5609,21 +5752,32 @@ Grant the gpg domains manage rights on all user content
 </module>
 <module name="irc" filename="policy/modules/apps/irc.if">
 <summary>IRC client policy.</summary>
-<interface name="irc_role" lineno="18">
+<template name="irc_role" lineno="29">
 <summary>
 Role access for IRC.
 </summary>
-<param name="role">
+<param name="role_prefix">
 <summary>
-Role allowed access.
+The prefix of the user role (e.g., user
+is the prefix for user_r).
 </summary>
 </param>
-<param name="domain">
+<param name="user_domain">
 <summary>
 User domain for the role.
 </summary>
 </param>
-</interface>
+<param name="user_exec_domain">
+<summary>
+User exec domain for execute and transition access.
+</summary>
+</param>
+<param name="role">
+<summary>
+Role allowed access
+</summary>
+</param>
+</template>
 <tunable name="irc_use_any_tcp_ports" dftval="false">
 <desc>
 <p>
@@ -5664,22 +5818,33 @@ Grant the irc domains manage rights on all user content
 </module>
 <module name="java" filename="policy/modules/apps/java.if">
 <summary>Java virtual machine</summary>
-<interface name="java_role" lineno="18">
+<template name="java_role" lineno="29">
 <summary>
 Role access for java.
 </summary>
-<param name="role">
+<param name="role_prefix">
 <summary>
-Role allowed access.
+The prefix of the user role (e.g., user
+is the prefix for user_r).
 </summary>
 </param>
-<param name="domain">
+<param name="user_domain">
 <summary>
 User domain for the role.
 </summary>
 </param>
-</interface>
-<template name="java_role_template" lineno="90">
+<param name="user_exec_domain">
+<summary>
+User exec domain for execute and transition access.
+</summary>
+</param>
+<param name="role">
+<summary>
+Role allowed access
+</summary>
+</param>
+</template>
+<template name="java_role_template" lineno="110">
 <summary>
 The role template for the java module.
 </summary>
@@ -5691,22 +5856,27 @@ for java applications.
 </desc>
 <param name="role_prefix">
 <summary>
-The prefix of the user domain (e.g., user
-is the prefix for user_t).
+The prefix of the user role (e.g., user
+is the prefix for user_r).
 </summary>
 </param>
-<param name="user_role">
+<param name="user_domain">
 <summary>
-The role associated with the user domain.
+User domain for the role.
 </summary>
 </param>
-<param name="user_domain">
+<param name="user_exec_domain">
 <summary>
-The type of the user domain.
+User exec domain for execute and transition access.
+</summary>
+</param>
+<param name="role">
+<summary>
+Role allowed access
 </summary>
 </param>
 </template>
-<interface name="java_domtrans" lineno="148">
+<interface name="java_domtrans" lineno="168">
 <summary>
 Execute the java program in the java domain.
 </summary>
@@ -5716,7 +5886,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="java_run" lineno="178">
+<interface name="java_run" lineno="198">
 <summary>
 Execute java in the java domain, and
 allow the specified role the java domain.
@@ -5732,7 +5902,7 @@ Role allowed access.
 </summary>
 </param>
 </interface>
-<interface name="java_domtrans_unconfined" lineno="198">
+<interface name="java_domtrans_unconfined" lineno="218">
 <summary>
 Execute the java program in the
 unconfined java domain.
@@ -5743,7 +5913,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="java_run_unconfined" lineno="224">
+<interface name="java_run_unconfined" lineno="244">
 <summary>
 Execute the java program in the
 unconfined java domain and allow the
@@ -5760,7 +5930,7 @@ Role allowed access.
 </summary>
 </param>
 </interface>
-<interface name="java_exec" lineno="244">
+<interface name="java_exec" lineno="264">
 <summary>
 Execute the java program in
 the callers domain.
@@ -5771,7 +5941,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="java_manage_generic_home_content" lineno="264">
+<interface name="java_manage_generic_home_content" lineno="284">
 <summary>
 Create, read, write, and delete
 generic java home content.
@@ -5782,7 +5952,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="java_manage_java_tmp" lineno="285">
+<interface name="java_manage_java_tmp" lineno="305">
 <summary>
 Create, read, write, and delete
 temporary java content.
@@ -5793,7 +5963,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="java_home_filetrans_java_home" lineno="316">
+<interface name="java_home_filetrans_java_home" lineno="336">
 <summary>
 Create specified objects in user home
 directories with the generic java
@@ -5815,7 +5985,7 @@ The name of the object being created.
 </summary>
 </param>
 </interface>
-<template name="java_noatsecure_domtrans" lineno="341">
+<template name="java_noatsecure_domtrans" lineno="361">
 <summary>
 Run java in javaplugin domain and
 do not clean the environment (atsecure)
@@ -5832,7 +6002,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </template>
-<template name="java_domain_type" lineno="369">
+<template name="java_domain_type" lineno="389">
 <summary>
 The template for using java in a domain.
 </summary>
@@ -5887,21 +6057,32 @@ Grant the java domains manage rights on all user content
 </module>
 <module name="libmtp" filename="policy/modules/apps/libmtp.if">
 <summary>libmtp: An Initiatior implementation of the Media Transfer Protocol (MTP).</summary>
-<interface name="libmtp_role" lineno="18">
+<template name="libmtp_role" lineno="29">
 <summary>
 Role access for libmtp.
 </summary>
-<param name="role">
+<param name="role_prefix">
 <summary>
-Role allowed access.
+The prefix of the user role (e.g., user
+is the prefix for user_r).
 </summary>
 </param>
-<param name="domain">
+<param name="user_domain">
 <summary>
 User domain for the role.
 </summary>
 </param>
-</interface>
+<param name="user_exec_domain">
+<summary>
+User exec domain for execute and transition access.
+</summary>
+</param>
+<param name="role">
+<summary>
+Role allowed access
+</summary>
+</param>
+</template>
 <tunable name="libmtp_enable_home_dirs" dftval="false">
 <desc>
 <p>
@@ -6135,7 +6316,7 @@ Role allowed access.
 </module>
 <module name="mono" filename="policy/modules/apps/mono.if">
 <summary>Run .NET server and client applications on Linux.</summary>
-<template name="mono_role_template" lineno="30">
+<template name="mono_role_template" lineno="35">
 <summary>
 The role template for the mono module.
 </summary>
@@ -6147,22 +6328,27 @@ for mono applications.
 </desc>
 <param name="role_prefix">
 <summary>
-The prefix of the user domain (e.g., user
-is the prefix for user_t).
+The prefix of the user role (e.g., user
+is the prefix for user_r).
 </summary>
 </param>
-<param name="user_role">
+<param name="user_domain">
 <summary>
-The role associated with the user domain.
+User domain for the role.
 </summary>
 </param>
-<param name="user_domain">
+<param name="user_exec_domain">
 <summary>
-The type of the user domain.
+User exec domain for execute and transition access.
+</summary>
+</param>
+<param name="role">
+<summary>
+Role allowed access
 </summary>
 </param>
 </template>
-<interface name="mono_domtrans" lineno="80">
+<interface name="mono_domtrans" lineno="85">
 <summary>
 Execute mono in the mono domain.
 </summary>
@@ -6172,7 +6358,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="mono_run" lineno="105">
+<interface name="mono_run" lineno="110">
 <summary>
 Execute mono in the mono domain, and
 allow the specified role the mono domain.
@@ -6188,7 +6374,7 @@ Role allowed access.
 </summary>
 </param>
 </interface>
-<interface name="mono_exec" lineno="124">
+<interface name="mono_exec" lineno="129">
 <summary>
 Execute mono in the caller domain.
 </summary>
@@ -6198,7 +6384,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="mono_rw_shm" lineno="143">
+<interface name="mono_rw_shm" lineno="148">
 <summary>
 Read and write mono shared memory.
 </summary>
@@ -6211,22 +6397,33 @@ Domain allowed access.
 </module>
 <module name="mozilla" filename="policy/modules/apps/mozilla.if">
 <summary>Policy for Mozilla and related web browsers.</summary>
-<interface name="mozilla_role" lineno="18">
+<template name="mozilla_role" lineno="29">
 <summary>
 Role access for mozilla.
 </summary>
-<param name="role">
+<param name="role_prefix">
 <summary>
-Role allowed access.
+The prefix of the user role (e.g., user
+is the prefix for user_r).
 </summary>
 </param>
-<param name="domain">
+<param name="user_domain">
 <summary>
 User domain for the role.
 </summary>
 </param>
-</interface>
-<interface name="mozilla_role_plugin" lineno="90">
+<param name="user_exec_domain">
+<summary>
+User exec domain for execute and transition access.
+</summary>
+</param>
+<param name="role">
+<summary>
+Role allowed access
+</summary>
+</param>
+</template>
+<interface name="mozilla_role_plugin" lineno="105">
 <summary>
 Role access for mozilla plugin.
 </summary>
@@ -6241,7 +6438,7 @@ User domain for the role.
 </summary>
 </param>
 </interface>
-<interface name="mozilla_read_user_home" lineno="151">
+<interface name="mozilla_read_user_home" lineno="166">
 <summary>
 Read mozilla home directory content.
 </summary>
@@ -6251,7 +6448,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="mozilla_read_user_home_files" lineno="172">
+<interface name="mozilla_read_user_home_files" lineno="187">
 <summary>
 Read mozilla home directory files
 </summary>
@@ -6261,7 +6458,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="mozilla_write_user_home_files" lineno="193">
+<interface name="mozilla_write_user_home_files" lineno="208">
 <summary>
 Write mozilla home directory files.
 </summary>
@@ -6271,7 +6468,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="mozilla_dontaudit_rw_user_home_files" lineno="213">
+<interface name="mozilla_dontaudit_rw_user_home_files" lineno="228">
 <summary>
 Do not audit attempts to read and
 write mozilla home directory files.
@@ -6282,7 +6479,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="mozilla_dontaudit_manage_user_home_files" lineno="233">
+<interface name="mozilla_dontaudit_manage_user_home_files" lineno="248">
 <summary>
 Do not audit attempt to Create,
 read, write, and delete mozilla
@@ -6294,7 +6491,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="mozilla_exec_user_plugin_home_files" lineno="253">
+<interface name="mozilla_exec_user_plugin_home_files" lineno="268">
 <summary>
 Execute mozilla plugin home directory files.
 </summary>
@@ -6304,7 +6501,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="mozilla_execmod_user_plugin_home_files" lineno="273">
+<interface name="mozilla_execmod_user_plugin_home_files" lineno="288">
 <summary>
 Mozilla plugin home directory file
 text relocation.
@@ -6315,7 +6512,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="mozilla_read_tmp_files" lineno="291">
+<interface name="mozilla_read_tmp_files" lineno="306">
 <summary>
 Read temporary mozilla files.
 </summary>
@@ -6325,7 +6522,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="mozilla_domtrans" lineno="309">
+<interface name="mozilla_domtrans" lineno="324">
 <summary>
 Run mozilla in the mozilla domain.
 </summary>
@@ -6335,7 +6532,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="mozilla_domtrans_plugin" lineno="329">
+<interface name="mozilla_domtrans_plugin" lineno="344">
 <summary>
 Execute a domain transition to
 run mozilla plugin.
@@ -6346,7 +6543,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="mozilla_run_plugin" lineno="356">
+<interface name="mozilla_run_plugin" lineno="371">
 <summary>
 Execute mozilla plugin in the
 mozilla plugin domain, and allow
@@ -6364,7 +6561,7 @@ Role allowed access.
 </summary>
 </param>
 </interface>
-<interface name="mozilla_domtrans_plugin_config" lineno="376">
+<interface name="mozilla_domtrans_plugin_config" lineno="391">
 <summary>
 Execute a domain transition to
 run mozilla plugin config.
@@ -6375,7 +6572,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="mozilla_run_plugin_config" lineno="403">
+<interface name="mozilla_run_plugin_config" lineno="418">
 <summary>
 Execute mozilla plugin config in
 the mozilla plugin config domain,
@@ -6393,7 +6590,7 @@ Role allowed access.
 </summary>
 </param>
 </interface>
-<interface name="mozilla_dbus_chat" lineno="423">
+<interface name="mozilla_dbus_chat" lineno="438">
 <summary>
 Send and receive messages from
 mozilla over dbus.
@@ -6404,7 +6601,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="mozilla_dbus_chat_plugin" lineno="444">
+<interface name="mozilla_dbus_chat_plugin" lineno="459">
 <summary>
 Send and receive messages from
 mozilla plugin over dbus.
@@ -6415,7 +6612,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="mozilla_rw_tcp_sockets" lineno="464">
+<interface name="mozilla_rw_tcp_sockets" lineno="479">
 <summary>
 Read and write mozilla TCP sockets.
 </summary>
@@ -6425,7 +6622,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="mozilla_manage_plugin_rw_files" lineno="483">
+<interface name="mozilla_manage_plugin_rw_files" lineno="498">
 <summary>
 Create, read, write, and delete
 mozilla plugin rw files.
@@ -6436,7 +6633,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="mozilla_plugin_read_tmpfs_files" lineno="502">
+<interface name="mozilla_plugin_read_tmpfs_files" lineno="517">
 <summary>
 Read mozilla_plugin tmpfs files.
 </summary>
@@ -6446,7 +6643,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="mozilla_plugin_delete_tmpfs_files" lineno="521">
+<interface name="mozilla_plugin_delete_tmpfs_files" lineno="536">
 <summary>
 Delete mozilla_plugin tmpfs files.
 </summary>
@@ -6456,7 +6653,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="mozilla_rw_tmp_pipes" lineno="540">
+<interface name="mozilla_rw_tmp_pipes" lineno="555">
 <summary>
 Read/write to mozilla's tmp fifo files
 </summary>
@@ -6466,7 +6663,7 @@ Domain allowed access
 </summary>
 </param>
 </interface>
-<interface name="mozilla_manage_generic_plugin_home_content" lineno="559">
+<interface name="mozilla_manage_generic_plugin_home_content" lineno="574">
 <summary>
 Create, read, write, and delete
 generic mozilla plugin home content.
@@ -6477,7 +6674,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="mozilla_home_filetrans_plugin_home" lineno="594">
+<interface name="mozilla_home_filetrans_plugin_home" lineno="609">
 <summary>
 Create objects in user home
 directories with the generic mozilla
@@ -6499,7 +6696,7 @@ The name of the object being created.
 </summary>
 </param>
 </interface>
-<interface name="mozilla_dontaudit_use_fds" lineno="614">
+<interface name="mozilla_dontaudit_use_fds" lineno="629">
 <summary>
 Do not audit use of mozilla file descriptors
 </summary>
@@ -6509,7 +6706,7 @@ Domain to dont audit access from
 </summary>
 </param>
 </interface>
-<interface name="mozilla_send_dgram_plugin" lineno="632">
+<interface name="mozilla_send_dgram_plugin" lineno="647">
 <summary>
 Send messages to mozilla plugin unix datagram sockets
 </summary>
@@ -6575,22 +6772,33 @@ unreserved ports (for instance when dealing with Google Talk)
 </module>
 <module name="mplayer" filename="policy/modules/apps/mplayer.if">
 <summary>Mplayer media player and encoder.</summary>
-<interface name="mplayer_role" lineno="18">
+<template name="mplayer_role" lineno="29">
 <summary>
 Role access for mplayer
 </summary>
-<param name="role">
+<param name="role_prefix">
 <summary>
-Role allowed access
+The prefix of the user role (e.g., user
+is the prefix for user_r).
 </summary>
 </param>
-<param name="domain">
+<param name="user_domain">
 <summary>
-User domain for the role
+User domain for the role.
 </summary>
 </param>
-</interface>
-<interface name="mplayer_domtrans" lineno="65">
+<param name="user_exec_domain">
+<summary>
+User exec domain for execute and transition access.
+</summary>
+</param>
+<param name="role">
+<summary>
+Role allowed access
+</summary>
+</param>
+</template>
+<interface name="mplayer_domtrans" lineno="81">
 <summary>
 Run mplayer in mplayer domain.
 </summary>
@@ -6600,7 +6808,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="mplayer_exec" lineno="85">
+<interface name="mplayer_exec" lineno="101">
 <summary>
 Execute mplayer in the caller domain.
 </summary>
@@ -6610,7 +6818,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="mplayer_read_user_home_files" lineno="104">
+<interface name="mplayer_read_user_home_files" lineno="120">
 <summary>
 Read mplayer user home content files.
 </summary>
@@ -6620,7 +6828,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="mplayer_manage_generic_home_content" lineno="124">
+<interface name="mplayer_manage_generic_home_content" lineno="140">
 <summary>
 Create, read, write, and delete
 generic mplayer home content.
@@ -6631,7 +6839,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="mplayer_home_filetrans_mplayer_home" lineno="157">
+<interface name="mplayer_home_filetrans_mplayer_home" lineno="173">
 <summary>
 Create specified objects in user home
 directories with the generic mplayer
@@ -6720,22 +6928,33 @@ Grant the mplayer domains manage rights on all user content
 </module>
 <module name="openoffice" filename="policy/modules/apps/openoffice.if">
 <summary>Openoffice suite.</summary>
-<interface name="ooffice_role" lineno="18">
+<template name="ooffice_role" lineno="29">
 <summary>
 Role access for openoffice.
 </summary>
-<param name="role">
+<param name="role_prefix">
 <summary>
-Role allowed access.
+The prefix of the user role (e.g., user
+is the prefix for user_r).
 </summary>
 </param>
-<param name="domain">
+<param name="user_domain">
 <summary>
 User domain for the role.
 </summary>
 </param>
-</interface>
-<interface name="ooffice_domtrans" lineno="48">
+<param name="user_exec_domain">
+<summary>
+User exec domain for execute and transition access.
+</summary>
+</param>
+<param name="role">
+<summary>
+Role allowed access
+</summary>
+</param>
+</template>
+<interface name="ooffice_domtrans" lineno="63">
 <summary>
 Run openoffice in its own domain.
 </summary>
@@ -6745,7 +6964,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="ooffice_dontaudit_exec_tmp_files" lineno="67">
+<interface name="ooffice_dontaudit_exec_tmp_files" lineno="82">
 <summary>
 Do not audit attempts to execute
 files in temporary directories.
@@ -6756,7 +6975,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="ooffice_rw_tmp_files" lineno="86">
+<interface name="ooffice_rw_tmp_files" lineno="101">
 <summary>
 Read and write temporary
 openoffice files.
@@ -6767,7 +6986,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="ooffice_dbus_chat" lineno="106">
+<interface name="ooffice_dbus_chat" lineno="121">
 <summary>
 Send and receive dbus messages
 from and to the openoffice
@@ -6779,7 +6998,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="ooffice_stream_connect" lineno="127">
+<interface name="ooffice_stream_connect" lineno="142">
 <summary>
 Connect to openoffice using a
 unix domain stream socket.
@@ -6843,22 +7062,44 @@ Grant the openoffice domains manage rights on all user content
 </module>
 <module name="pulseaudio" filename="policy/modules/apps/pulseaudio.if">
 <summary>Pulseaudio network sound server.</summary>
-<interface name="pulseaudio_role" lineno="18">
+<template name="pulseaudio_role" lineno="29">
 <summary>
 Role access for pulseaudio.
 </summary>
+<param name="role_prefix">
+<summary>
+The prefix of the user role (e.g., user
+is the prefix for user_r).
+</summary>
+</param>
+<param name="user_domain">
+<summary>
+User domain for the role.
+</summary>
+</param>
+<param name="user_exec_domain">
+<summary>
+User exec domain for execute and transition access.
+</summary>
+</param>
 <param name="role">
 <summary>
-Role allowed access.
+Role allowed access
 </summary>
 </param>
+</template>
+<interface name="pulseaudio_client_domain" lineno="73">
+<summary>
+Connect to pulseaudio and manage
+pulseaudio config data.
+</summary>
 <param name="domain">
 <summary>
-User domain for the role.
+Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="pulseaudio_domtrans" lineno="56">
+<interface name="pulseaudio_domtrans" lineno="91">
 <summary>
 Execute a domain transition to run pulseaudio.
 </summary>
@@ -6868,7 +7109,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="pulseaudio_run" lineno="85">
+<interface name="pulseaudio_run" lineno="117">
 <summary>
 Execute pulseaudio in the pulseaudio
 domain, and allow the specified role
@@ -6885,7 +7126,7 @@ Role allowed access.
 </summary>
 </param>
 </interface>
-<interface name="pulseaudio_exec" lineno="104">
+<interface name="pulseaudio_exec" lineno="137">
 <summary>
 Execute pulseaudio in the caller domain.
 </summary>
@@ -6895,7 +7136,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="pulseaudio_dontaudit_exec" lineno="123">
+<interface name="pulseaudio_dontaudit_exec" lineno="156">
 <summary>
 Do not audit attempts to execute pulseaudio.
 </summary>
@@ -6905,7 +7146,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="pulseaudio_signull" lineno="142">
+<interface name="pulseaudio_signull" lineno="175">
 <summary>
 Send null signals to pulseaudio.
 processes.
@@ -6916,7 +7157,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="pulseaudio_use_fds" lineno="161">
+<interface name="pulseaudio_use_fds" lineno="194">
 <summary>
 Use file descriptors for
 pulseaudio.
@@ -6927,7 +7168,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="pulseaudio_dontaudit_use_fds" lineno="180">
+<interface name="pulseaudio_dontaudit_use_fds" lineno="213">
 <summary>
 Do not audit attempts to use the
 file descriptors for pulseaudio.
@@ -6938,7 +7179,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="pulseaudio_stream_connect" lineno="199">
+<interface name="pulseaudio_stream_connect" lineno="232">
 <summary>
 Connect to pulseaudio with a unix
 domain stream socket.
@@ -6949,7 +7190,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="pulseaudio_dbus_chat" lineno="219">
+<interface name="pulseaudio_dbus_chat" lineno="252">
 <summary>
 Send and receive messages from
 pulseaudio over dbus.
@@ -6960,7 +7201,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="pulseaudio_setattr_home_dir" lineno="239">
+<interface name="pulseaudio_setattr_home_dir" lineno="272">
 <summary>
 Set attributes of pulseaudio home directories.
 </summary>
@@ -6970,7 +7211,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="pulseaudio_read_home" lineno="257">
+<interface name="pulseaudio_read_home" lineno="290">
 <summary>
 Read pulseaudio home content.
 </summary>
@@ -6980,7 +7221,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="pulseaudio_rw_home_files" lineno="278">
+<interface name="pulseaudio_rw_home_files" lineno="311">
 <summary>
 Read and write Pulse Audio files.
 </summary>
@@ -6990,7 +7231,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="pulseaudio_manage_home" lineno="299">
+<interface name="pulseaudio_manage_home" lineno="332">
 <summary>
 Create, read, write, and delete
 pulseaudio home content.
@@ -7001,7 +7242,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="pulseaudio_home_filetrans_pulseaudio_home" lineno="332">
+<interface name="pulseaudio_home_filetrans_pulseaudio_home" lineno="365">
 <summary>
 Create objects in user home
 directories with the pulseaudio
@@ -7023,7 +7264,7 @@ The name of the object being created.
 </summary>
 </param>
 </interface>
-<interface name="pulseaudio_tmpfs_content" lineno="351">
+<interface name="pulseaudio_tmpfs_content" lineno="384">
 <summary>
 Make the specified tmpfs file type
 pulseaudio tmpfs content.
@@ -7034,7 +7275,7 @@ File type to make pulseaudio tmpfs content.
 </summary>
 </param>
 </interface>
-<interface name="pulseaudio_read_tmpfs_files" lineno="369">
+<interface name="pulseaudio_read_tmpfs_files" lineno="402">
 <summary>
 Read pulseaudio tmpfs files.
 </summary>
@@ -7044,7 +7285,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="pulseaudio_rw_tmpfs_files" lineno="389">
+<interface name="pulseaudio_rw_tmpfs_files" lineno="422">
 <summary>
 Read and write pulseaudio tmpfs
 files.
@@ -7055,23 +7296,6 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="pulseaudio_client_domain" lineno="417">
-<summary>
-Mark the specified domain as a PulseAudio client domain
-and the related tmpfs file type as a (shared) PulseAudio tmpfs
-file type used for the shared memory access
-</summary>
-<param name="domain">
-<summary>
-Domain to become a PulseAudio client domain
-</summary>
-</param>
-<param name="tmpfstype">
-<summary>
-Tmpfs type used for shared memory of the given domain
-</summary>
-</param>
-</interface>
 <tunable name="pulseaudio_execmem" dftval="false">
 <desc>
 <p>
@@ -7307,22 +7531,33 @@ access to the network.
 </module>
 <module name="rssh" filename="policy/modules/apps/rssh.if">
 <summary>Restricted (scp/sftp) only shell.</summary>
-<interface name="rssh_role" lineno="18">
+<template name="rssh_role" lineno="29">
 <summary>
 Role access for rssh.
 </summary>
-<param name="role">
+<param name="role_prefix">
 <summary>
-Role allowed access.
+The prefix of the user role (e.g., user
+is the prefix for user_r).
 </summary>
 </param>
-<param name="domain">
+<param name="user_domain">
 <summary>
 User domain for the role.
 </summary>
 </param>
-</interface>
-<interface name="rssh_spec_domtrans" lineno="46">
+<param name="user_exec_domain">
+<summary>
+User exec domain for execute and transition access.
+</summary>
+</param>
+<param name="role">
+<summary>
+Role allowed access
+</summary>
+</param>
+</template>
+<interface name="rssh_spec_domtrans" lineno="57">
 <summary>
 Execute rssh in the rssh domain.
 </summary>
@@ -7332,7 +7567,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="rssh_exec" lineno="66">
+<interface name="rssh_exec" lineno="77">
 <summary>
 Execute the rssh program
 in the caller domain.
@@ -7343,7 +7578,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="rssh_domtrans_chroot_helper" lineno="86">
+<interface name="rssh_domtrans_chroot_helper" lineno="97">
 <summary>
 Execute a domain transition to
 run rssh chroot helper.
@@ -7354,7 +7589,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="rssh_read_ro_content" lineno="105">
+<interface name="rssh_read_ro_content" lineno="116">
 <summary>
 Read users rssh read-only content.
 </summary>
@@ -7367,7 +7602,7 @@ Domain allowed access.
 </module>
 <module name="screen" filename="policy/modules/apps/screen.if">
 <summary>GNU terminal multiplexer.</summary>
-<template name="screen_role_template" lineno="24">
+<template name="screen_role_template" lineno="29">
 <summary>
 The role template for the screen module.
 </summary>
@@ -7377,18 +7612,23 @@ The prefix of the user role (e.g., user
 is the prefix for user_r).
 </summary>
 </param>
-<param name="user_role">
+<param name="user_domain">
 <summary>
-The role associated with the user domain.
+The type of the user domain.
 </summary>
 </param>
-<param name="user_domain">
+<param name="user_exec_domain">
 <summary>
-The type of the user domain.
+User exec domain for execute and transition access.
+</summary>
+</param>
+<param name="user_role">
+<summary>
+The role associated with the user domain.
 </summary>
 </param>
 </template>
-<interface name="screen_execute_sock_file" lineno="103">
+<interface name="screen_execute_sock_file" lineno="114">
 <summary>
 Execute the screen runtime sock file.
 </summary>
@@ -7476,21 +7716,32 @@ Domain allowed access.
 </module>
 <module name="syncthing" filename="policy/modules/apps/syncthing.if">
 <summary>Application that lets you synchronize your files across multiple devices.</summary>
-<interface name="syncthing_role" lineno="18">
+<template name="syncthing_role" lineno="29">
 <summary>
 Role access for Syncthing
 </summary>
-<param name="role">
+<param name="role_prefix">
 <summary>
-Role allowed access
+The prefix of the user role (e.g., user
+is the prefix for user_r).
 </summary>
 </param>
-<param name="domain">
+<param name="user_domain">
 <summary>
-User domain for the role
+User domain for the role.
 </summary>
 </param>
-</interface>
+<param name="user_exec_domain">
+<summary>
+User exec domain for execute and transition access.
+</summary>
+</param>
+<param name="role">
+<summary>
+Role allowed access
+</summary>
+</param>
+</template>
 <tunable name="syncthing_read_generic_user_content" dftval="true">
 <desc>
 <p>
@@ -7532,7 +7783,7 @@ Domain prefix to be used.
 </summary>
 </param>
 </template>
-<template name="telepathy_role_template" lineno="59">
+<template name="telepathy_role_template" lineno="64">
 <summary>
 The role template for the telepathy module.
 </summary>
@@ -7544,22 +7795,27 @@ for window manager applications.
 </desc>
 <param name="role_prefix">
 <summary>
-The prefix of the user domain (e.g., user
-is the prefix for user_t).
+The prefix of the user role (e.g., user
+is the prefix for user_r).
 </summary>
 </param>
-<param name="user_role">
+<param name="user_domain">
 <summary>
-The role associated with the user domain.
+User domain for the role.
 </summary>
 </param>
-<param name="user_domain">
+<param name="user_exec_domain">
 <summary>
-The type of the user domain.
+User exec domain for execute and transition access.
+</summary>
+</param>
+<param name="role">
+<summary>
+Role allowed access
 </summary>
 </param>
 </template>
-<interface name="telepathy_gabble_stream_connect" lineno="137">
+<interface name="telepathy_gabble_stream_connect" lineno="146">
 <summary>
 Connect to gabble with a unix
 domain stream socket.
@@ -7570,7 +7826,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="telepathy_gabble_dbus_chat" lineno="157">
+<interface name="telepathy_gabble_dbus_chat" lineno="166">
 <summary>
 Send dbus messages to and from
 gabble.
@@ -7581,7 +7837,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="telepathy_mission_control_dbus_chat" lineno="178">
+<interface name="telepathy_mission_control_dbus_chat" lineno="187">
 <summary>
 Send dbus messages to and from
 mission control.
@@ -7592,7 +7848,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="telepathy_mission_control_read_state" lineno="198">
+<interface name="telepathy_mission_control_read_state" lineno="207">
 <summary>
 Read mission control process state files.
 </summary>
@@ -7602,7 +7858,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="telepathy_msn_stream_connect" lineno="220">
+<interface name="telepathy_msn_stream_connect" lineno="229">
 <summary>
 Connect to msn with a unix
 domain stream socket.
@@ -7613,7 +7869,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="telepathy_salut_stream_connect" lineno="240">
+<interface name="telepathy_salut_stream_connect" lineno="249">
 <summary>
 Connect to salut with a unix
 domain stream socket.
@@ -7643,22 +7899,33 @@ managers can connect to any port.
 </module>
 <module name="thunderbird" filename="policy/modules/apps/thunderbird.if">
 <summary>Thunderbird email client.</summary>
-<interface name="thunderbird_role" lineno="18">
+<template name="thunderbird_role" lineno="29">
 <summary>
 Role access for thunderbird.
 </summary>
-<param name="role">
+<param name="role_prefix">
 <summary>
-Role allowed access.
+The prefix of the user role (e.g., user
+is the prefix for user_r).
 </summary>
 </param>
-<param name="domain">
+<param name="user_domain">
 <summary>
 User domain for the role.
 </summary>
 </param>
-</interface>
-<interface name="thunderbird_domtrans" lineno="52">
+<param name="user_exec_domain">
+<summary>
+User exec domain for execute and transition access.
+</summary>
+</param>
+<param name="role">
+<summary>
+Role allowed access
+</summary>
+</param>
+</template>
+<interface name="thunderbird_domtrans" lineno="67">
 <summary>
 Execute thunderbird in the thunderbird domain.
 </summary>
@@ -7699,40 +7966,62 @@ Grant the thunderbird domains manage rights on all user content
 </module>
 <module name="tvtime" filename="policy/modules/apps/tvtime.if">
 <summary>High quality television application.</summary>
-<interface name="tvtime_role" lineno="18">
+<template name="tvtime_role" lineno="29">
 <summary>
 Role access for tvtime
 </summary>
-<param name="role">
+<param name="role_prefix">
 <summary>
-Role allowed access
+The prefix of the user role (e.g., user
+is the prefix for user_r).
 </summary>
 </param>
-<param name="domain">
+<param name="user_domain">
 <summary>
-User domain for the role
+User domain for the role.
 </summary>
 </param>
-</interface>
+<param name="user_exec_domain">
+<summary>
+User exec domain for execute and transition access.
+</summary>
+</param>
+<param name="role">
+<summary>
+Role allowed access
+</summary>
+</param>
+</template>
 </module>
 <module name="uml" filename="policy/modules/apps/uml.if">
 <summary>User mode linux tools and services.</summary>
-<interface name="uml_role" lineno="18">
+<template name="uml_role" lineno="29">
 <summary>
 Role access for uml.
 </summary>
-<param name="role">
+<param name="role_prefix">
 <summary>
-Role allowed access.
+The prefix of the user role (e.g., user
+is the prefix for user_r).
 </summary>
 </param>
-<param name="domain">
+<param name="user_domain">
 <summary>
 User domain for the role.
 </summary>
 </param>
-</interface>
-<interface name="uml_setattr_util_sockets" lineno="55">
+<param name="user_exec_domain">
+<summary>
+User exec domain for execute and transition access.
+</summary>
+</param>
+<param name="role">
+<summary>
+Role allowed access
+</summary>
+</param>
+</template>
+<interface name="uml_setattr_util_sockets" lineno="70">
 <summary>
 Set attributes of uml pid sock files.
 </summary>
@@ -7742,7 +8031,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="uml_manage_util_files" lineno="74">
+<interface name="uml_manage_util_files" lineno="89">
 <summary>
 Create, read, write, and delete
 uml pid files.
@@ -7756,28 +8045,33 @@ Domain allowed access.
 </module>
 <module name="userhelper" filename="policy/modules/apps/userhelper.if">
 <summary>A wrapper that helps users run system programs.</summary>
-<template name="userhelper_role_template" lineno="24">
+<template name="userhelper_role_template" lineno="29">
 <summary>
 The role template for the userhelper module.
 </summary>
-<param name="userrole_prefix">
+<param name="role_prefix">
 <summary>
 The prefix of the user role (e.g., user
 is the prefix for user_r).
 </summary>
 </param>
-<param name="user_role">
+<param name="user_domain">
 <summary>
-The user role.
+User domain for the role.
 </summary>
 </param>
-<param name="user_domain">
+<param name="user_exec_domain">
+<summary>
+User exec domain for execute and transition access.
+</summary>
+</param>
+<param name="role">
 <summary>
-The user domain associated with the role.
+Role allowed access
 </summary>
 </param>
 </template>
-<interface name="userhelper_search_config" lineno="110">
+<interface name="userhelper_search_config" lineno="123">
 <summary>
 Search userhelper configuration directories.
 </summary>
@@ -7787,7 +8081,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userhelper_dontaudit_search_config" lineno="129">
+<interface name="userhelper_dontaudit_search_config" lineno="142">
 <summary>
 Do not audit attempts to search
 userhelper configuration directories.
@@ -7798,7 +8092,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="userhelper_dbus_chat_all_consolehelper" lineno="148">
+<interface name="userhelper_dbus_chat_all_consolehelper" lineno="161">
 <summary>
 Send and receive messages from
 consolehelper over dbus.
@@ -7809,7 +8103,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userhelper_use_fd" lineno="168">
+<interface name="userhelper_use_fd" lineno="181">
 <summary>
 Use userhelper all userhelper file descriptors.
 </summary>
@@ -7819,7 +8113,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userhelper_sigchld" lineno="186">
+<interface name="userhelper_sigchld" lineno="199">
 <summary>
 Send child terminated signals to all userhelper.
 </summary>
@@ -7829,7 +8123,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userhelper_exec" lineno="204">
+<interface name="userhelper_exec" lineno="217">
 <summary>
 Execute the userhelper program in the caller domain.
 </summary>
@@ -7839,7 +8133,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userhelper_exec_consolehelper" lineno="224">
+<interface name="userhelper_exec_consolehelper" lineno="237">
 <summary>
 Execute the consolehelper program
 in the caller domain.
@@ -7915,22 +8209,33 @@ Role allowed to access.
 </module>
 <module name="vmware" filename="policy/modules/apps/vmware.if">
 <summary>VMWare Workstation virtual machines.</summary>
-<interface name="vmware_role" lineno="18">
+<template name="vmware_role" lineno="29">
 <summary>
 Role access for vmware.
 </summary>
-<param name="role">
+<param name="role_prefix">
 <summary>
-Role allowed access.
+The prefix of the user role (e.g., user
+is the prefix for user_r).
 </summary>
 </param>
-<param name="domain">
+<param name="user_domain">
 <summary>
 User domain for the role.
 </summary>
 </param>
-</interface>
-<interface name="vmware_exec_host" lineno="50">
+<param name="user_exec_domain">
+<summary>
+User exec domain for execute and transition access.
+</summary>
+</param>
+<param name="role">
+<summary>
+Role allowed access
+</summary>
+</param>
+</template>
+<interface name="vmware_exec_host" lineno="65">
 <summary>
 Execute vmware host executables
 </summary>
@@ -7940,7 +8245,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="vmware_read_system_config" lineno="69">
+<interface name="vmware_read_system_config" lineno="84">
 <summary>
 Read vmware system configuration files.
 </summary>
@@ -7950,7 +8255,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="vmware_append_system_config" lineno="88">
+<interface name="vmware_append_system_config" lineno="103">
 <summary>
 Append vmware system configuration files.
 </summary>
@@ -7960,7 +8265,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="vmware_append_log" lineno="107">
+<interface name="vmware_append_log" lineno="122">
 <summary>
 Append vmware log files.
 </summary>
@@ -8025,22 +8330,33 @@ be labeled public_content_rw_t.
 </module>
 <module name="wine" filename="policy/modules/apps/wine.if">
 <summary>Run Windows programs in Linux.</summary>
-<interface name="wine_role" lineno="18">
+<template name="wine_role" lineno="29">
 <summary>
 Role access for wine.
 </summary>
-<param name="role">
+<param name="role_prefix">
 <summary>
-Role allowed access.
+The prefix of the user role (e.g., user
+is the prefix for user_r).
 </summary>
 </param>
-<param name="domain">
+<param name="user_domain">
 <summary>
 User domain for the role.
 </summary>
 </param>
-</interface>
-<template name="wine_role_template" lineno="73">
+<param name="user_exec_domain">
+<summary>
+User exec domain for execute and transition access.
+</summary>
+</param>
+<param name="role">
+<summary>
+Role allowed access
+</summary>
+</param>
+</template>
+<template name="wine_role_template" lineno="89">
 <summary>
 The role template for the wine module.
 </summary>
@@ -8052,22 +8368,27 @@ for wine applications.
 </desc>
 <param name="role_prefix">
 <summary>
-The prefix of the user domain (e.g., user
-is the prefix for user_t).
+The prefix of the user role (e.g., user
+is the prefix for user_r).
 </summary>
 </param>
-<param name="user_role">
+<param name="user_domain">
 <summary>
-The role associated with the user domain.
+User domain for the role.
 </summary>
 </param>
-<param name="user_domain">
+<param name="user_exec_domain">
 <summary>
-The type of the user domain.
+User exec domain for execute and transition access.
+</summary>
+</param>
+<param name="role">
+<summary>
+Role allowed access
 </summary>
 </param>
 </template>
-<interface name="wine_domtrans" lineno="114">
+<interface name="wine_domtrans" lineno="130">
 <summary>
 Execute the wine program in the wine domain.
 </summary>
@@ -8077,7 +8398,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="wine_run" lineno="140">
+<interface name="wine_run" lineno="156">
 <summary>
 Execute wine in the wine domain,
 and allow the specified role
@@ -8094,7 +8415,7 @@ Role allowed access.
 </summary>
 </param>
 </interface>
-<interface name="wine_rw_shm" lineno="160">
+<interface name="wine_rw_shm" lineno="176">
 <summary>
 Read and write wine Shared
 memory segments.
@@ -8117,22 +8438,33 @@ be silently blocked.
 </module>
 <module name="wireshark" filename="policy/modules/apps/wireshark.if">
 <summary>Wireshark packet capture tool.</summary>
-<interface name="wireshark_role" lineno="18">
+<template name="wireshark_role" lineno="29">
 <summary>
 Role access for wireshark.
 </summary>
-<param name="role">
+<param name="role_prefix">
 <summary>
-Role allowed access.
+The prefix of the user role (e.g., user
+is the prefix for user_r).
 </summary>
 </param>
-<param name="domain">
+<param name="user_domain">
 <summary>
 User domain for the role.
 </summary>
 </param>
-</interface>
-<interface name="wireshark_domtrans" lineno="50">
+<param name="user_exec_domain">
+<summary>
+User exec domain for execute and transition access.
+</summary>
+</param>
+<param name="role">
+<summary>
+Role allowed access
+</summary>
+</param>
+</template>
+<interface name="wireshark_domtrans" lineno="65">
 <summary>
 Execute wireshark in wireshark domain.
 </summary>
@@ -8173,7 +8505,7 @@ Grant the wireshark domains manage rights on all user content
 </module>
 <module name="wm" filename="policy/modules/apps/wm.if">
 <summary>X Window Managers.</summary>
-<template name="wm_role_template" lineno="30">
+<template name="wm_role_template" lineno="35">
 <summary>
 The role template for the wm module.
 </summary>
@@ -8185,22 +8517,27 @@ for window manager applications.
 </desc>
 <param name="role_prefix">
 <summary>
-The prefix of the user domain (e.g., user
-is the prefix for user_t).
+The prefix of the user role (e.g., user
+is the prefix for user_r).
 </summary>
 </param>
-<param name="user_role">
+<param name="user_domain">
 <summary>
-The role associated with the user domain.
+User domain for the role.
 </summary>
 </param>
-<param name="user_domain">
+<param name="user_exec_domain">
 <summary>
-The type of the user domain.
+User exec domain for execute and transition access.
+</summary>
+</param>
+<param name="role">
+<summary>
+Role allowed access
 </summary>
 </param>
 </template>
-<interface name="wm_exec" lineno="117">
+<interface name="wm_exec" lineno="126">
 <summary>
 Execute wm in the caller domain.
 </summary>
@@ -8210,7 +8547,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<template name="wm_dbus_chat" lineno="143">
+<template name="wm_dbus_chat" lineno="152">
 <summary>
 Send and receive messages from
 specified wm over dbus.
@@ -8227,7 +8564,7 @@ Domain allowed access.
 </summary>
 </param>
 </template>
-<interface name="wm_dontaudit_exec_tmp_files" lineno="164">
+<interface name="wm_dontaudit_exec_tmp_files" lineno="173">
 <summary>
 Do not audit attempts to execute
 files in temporary directories.
@@ -8238,7 +8575,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="wm_dontaudit_exec_tmpfs_files" lineno="183">
+<interface name="wm_dontaudit_exec_tmpfs_files" lineno="192">
 <summary>
 Do not audit attempts to execute
 files in temporary filesystems.
@@ -8249,7 +8586,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="wm_application_domain" lineno="226">
+<interface name="wm_application_domain" lineno="235">
 <summary>
 Create a domain for applications
 that are launched by the window
@@ -8284,7 +8621,7 @@ Type to be used as the source window manager domain.
 </param>
 <infoflow type="none"/>
 </interface>
-<template name="wm_write_pipes" lineno="251">
+<template name="wm_write_pipes" lineno="260">
 <summary>
 Write wm unnamed pipes.
 </summary>
@@ -8303,21 +8640,32 @@ Domain allowed access.
 </module>
 <module name="xscreensaver" filename="policy/modules/apps/xscreensaver.if">
 <summary>Modular screen saver and locker for X11.</summary>
-<interface name="xscreensaver_role" lineno="18">
+<template name="xscreensaver_role" lineno="29">
 <summary>
 Role access for xscreensaver.
 </summary>
-<param name="role">
+<param name="role_prefix">
 <summary>
-Role allowed access.
+The prefix of the user role (e.g., user
+is the prefix for user_r).
 </summary>
 </param>
-<param name="domain">
+<param name="user_domain">
 <summary>
 User domain for the role.
 </summary>
 </param>
-</interface>
+<param name="user_exec_domain">
+<summary>
+User exec domain for execute and transition access.
+</summary>
+</param>
+<param name="role">
+<summary>
+Role allowed access
+</summary>
+</param>
+</template>
 <tunable name="xscreensaver_read_generic_user_content" dftval="true">
 <desc>
 <p>
@@ -9631,7 +9979,17 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corecmd_relabel_bin_files" lineno="346">
+<interface name="corecmd_manage_bin_symlinks" lineno="346">
+<summary>
+Manage symlinks for bin files.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="corecmd_relabel_bin_files" lineno="365">
 <summary>
 Relabel to and from the bin type.
 </summary>
@@ -9641,7 +9999,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corecmd_mmap_bin_files" lineno="365">
+<interface name="corecmd_mmap_bin_files" lineno="384">
 <summary>
 Mmap a bin file as executable.
 </summary>
@@ -9651,7 +10009,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corecmd_bin_spec_domtrans" lineno="410">
+<interface name="corecmd_bin_spec_domtrans" lineno="429">
 <summary>
 Execute a file in a bin directory
 in the specified domain but do not
@@ -9687,7 +10045,7 @@ The type of the new process.
 </summary>
 </param>
 </interface>
-<interface name="corecmd_bin_domtrans" lineno="453">
+<interface name="corecmd_bin_domtrans" lineno="472">
 <summary>
 Execute a file in a bin directory
 in the specified domain.
@@ -9721,7 +10079,7 @@ The type of the new process.
 </summary>
 </param>
 </interface>
-<interface name="corecmd_check_exec_shell" lineno="472">
+<interface name="corecmd_check_exec_shell" lineno="491">
 <summary>
 Check if a shell is executable (DAC-wise).
 </summary>
@@ -9731,7 +10089,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corecmd_exec_shell" lineno="509">
+<interface name="corecmd_exec_shell" lineno="528">
 <summary>
 Execute shells in the caller domain.
 </summary>
@@ -9759,7 +10117,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corecmd_shell_spec_domtrans" lineno="547">
+<interface name="corecmd_shell_spec_domtrans" lineno="566">
 <summary>
 Execute a shell in the target domain.  This
 is an explicit transition, requiring the
@@ -9788,7 +10146,7 @@ The type of the shell process.
 </summary>
 </param>
 </interface>
-<interface name="corecmd_shell_domtrans" lineno="581">
+<interface name="corecmd_shell_domtrans" lineno="600">
 <summary>
 Execute a shell in the specified domain.
 </summary>
@@ -9813,7 +10171,7 @@ The type of the shell process.
 </summary>
 </param>
 </interface>
-<interface name="corecmd_exec_chroot" lineno="600">
+<interface name="corecmd_exec_chroot" lineno="619">
 <summary>
 Execute chroot in the caller domain.
 </summary>
@@ -9823,7 +10181,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corecmd_getattr_all_executables" lineno="621">
+<interface name="corecmd_getattr_all_executables" lineno="640">
 <summary>
 Get the attributes of all executable files.
 </summary>
@@ -9834,7 +10192,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="corecmd_read_all_executables" lineno="642">
+<interface name="corecmd_read_all_executables" lineno="661">
 <summary>
 Read all executable files.
 </summary>
@@ -9845,7 +10203,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="corecmd_exec_all_executables" lineno="662">
+<interface name="corecmd_exec_all_executables" lineno="681">
 <summary>
 Execute all executable files.
 </summary>
@@ -9856,7 +10214,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="corecmd_dontaudit_exec_all_executables" lineno="683">
+<interface name="corecmd_dontaudit_exec_all_executables" lineno="702">
 <summary>
 Do not audit attempts to execute all executables.
 </summary>
@@ -9866,7 +10224,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="corecmd_manage_all_executables" lineno="702">
+<interface name="corecmd_manage_all_executables" lineno="721">
 <summary>
 Create, read, write, and all executable files.
 </summary>
@@ -9877,7 +10235,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="corecmd_relabel_all_executables" lineno="724">
+<interface name="corecmd_relabel_all_executables" lineno="743">
 <summary>
 Relabel to and from the bin type.
 </summary>
@@ -9888,7 +10246,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="corecmd_mmap_all_executables" lineno="744">
+<interface name="corecmd_mmap_all_executables" lineno="763">
 <summary>
 Mmap all executables as executable.
 </summary>
@@ -9898,7 +10256,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corecmd_relabel_bin_dirs" lineno="766">
+<interface name="corecmd_relabel_bin_dirs" lineno="785">
 <summary>
 Relabel to and from the bin type.
 </summary>
@@ -9908,7 +10266,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corecmd_relabel_bin_lnk_files" lineno="784">
+<interface name="corecmd_relabel_bin_lnk_files" lineno="803">
 <summary>
 Relabel to and from the bin type.
 </summary>
@@ -45704,7 +46062,269 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_oa_system_port" lineno="57554">
+<interface name="corenet_tcp_sendrecv_ntske_port" lineno="57554">
+<summary>
+Send and receive TCP traffic on the ntske port.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+<infoflow type="both" weight="10"/>
+</interface>
+<interface name="corenet_udp_send_ntske_port" lineno="57569">
+<summary>
+Send UDP traffic on the ntske port.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+<infoflow type="write" weight="10"/>
+</interface>
+<interface name="corenet_dontaudit_udp_send_ntske_port" lineno="57584">
+<summary>
+Do not audit attempts to send UDP traffic on the ntske port.
+</summary>
+<param name="domain">
+<summary>
+Domain to not audit.
+</summary>
+</param>
+<infoflow type="none"/>
+</interface>
+<interface name="corenet_udp_receive_ntske_port" lineno="57599">
+<summary>
+Receive UDP traffic on the ntske port.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+<infoflow type="read" weight="10"/>
+</interface>
+<interface name="corenet_dontaudit_udp_receive_ntske_port" lineno="57614">
+<summary>
+Do not audit attempts to receive UDP traffic on the ntske port.
+</summary>
+<param name="domain">
+<summary>
+Domain to not audit.
+</summary>
+</param>
+<infoflow type="none"/>
+</interface>
+<interface name="corenet_udp_sendrecv_ntske_port" lineno="57629">
+<summary>
+Send and receive UDP traffic on the ntske port.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+<infoflow type="both" weight="10"/>
+</interface>
+<interface name="corenet_dontaudit_udp_sendrecv_ntske_port" lineno="57645">
+<summary>
+Do not audit attempts to send and receive
+UDP traffic on the ntske port.
+</summary>
+<param name="domain">
+<summary>
+Domain to not audit.
+</summary>
+</param>
+<infoflow type="none"/>
+</interface>
+<interface name="corenet_tcp_bind_ntske_port" lineno="57660">
+<summary>
+Bind TCP sockets to the ntske port.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+<infoflow type="none"/>
+</interface>
+<interface name="corenet_udp_bind_ntske_port" lineno="57680">
+<summary>
+Bind UDP sockets to the ntske port.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+<infoflow type="none"/>
+</interface>
+<interface name="corenet_tcp_connect_ntske_port" lineno="57699">
+<summary>
+Make a TCP connection to the ntske port.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="corenet_send_ntske_client_packets" lineno="57719">
+<summary>
+Send ntske_client packets.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+<infoflow type="write" weight="10"/>
+</interface>
+<interface name="corenet_dontaudit_send_ntske_client_packets" lineno="57738">
+<summary>
+Do not audit attempts to send ntske_client packets.
+</summary>
+<param name="domain">
+<summary>
+Domain to not audit.
+</summary>
+</param>
+<infoflow type="none"/>
+</interface>
+<interface name="corenet_receive_ntske_client_packets" lineno="57757">
+<summary>
+Receive ntske_client packets.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+<infoflow type="read" weight="10"/>
+</interface>
+<interface name="corenet_dontaudit_receive_ntske_client_packets" lineno="57776">
+<summary>
+Do not audit attempts to receive ntske_client packets.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+<infoflow type="none"/>
+</interface>
+<interface name="corenet_sendrecv_ntske_client_packets" lineno="57795">
+<summary>
+Send and receive ntske_client packets.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+<infoflow type="both" weight="10"/>
+</interface>
+<interface name="corenet_dontaudit_sendrecv_ntske_client_packets" lineno="57811">
+<summary>
+Do not audit attempts to send and receive ntske_client packets.
+</summary>
+<param name="domain">
+<summary>
+Domain to not audit.
+</summary>
+</param>
+<infoflow type="none"/>
+</interface>
+<interface name="corenet_relabelto_ntske_client_packets" lineno="57826">
+<summary>
+Relabel packets to ntske_client the packet type.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="corenet_send_ntske_server_packets" lineno="57846">
+<summary>
+Send ntske_server packets.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+<infoflow type="write" weight="10"/>
+</interface>
+<interface name="corenet_dontaudit_send_ntske_server_packets" lineno="57865">
+<summary>
+Do not audit attempts to send ntske_server packets.
+</summary>
+<param name="domain">
+<summary>
+Domain to not audit.
+</summary>
+</param>
+<infoflow type="none"/>
+</interface>
+<interface name="corenet_receive_ntske_server_packets" lineno="57884">
+<summary>
+Receive ntske_server packets.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+<infoflow type="read" weight="10"/>
+</interface>
+<interface name="corenet_dontaudit_receive_ntske_server_packets" lineno="57903">
+<summary>
+Do not audit attempts to receive ntske_server packets.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+<infoflow type="none"/>
+</interface>
+<interface name="corenet_sendrecv_ntske_server_packets" lineno="57922">
+<summary>
+Send and receive ntske_server packets.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+<infoflow type="both" weight="10"/>
+</interface>
+<interface name="corenet_dontaudit_sendrecv_ntske_server_packets" lineno="57938">
+<summary>
+Do not audit attempts to send and receive ntske_server packets.
+</summary>
+<param name="domain">
+<summary>
+Domain to not audit.
+</summary>
+</param>
+<infoflow type="none"/>
+</interface>
+<interface name="corenet_relabelto_ntske_server_packets" lineno="57953">
+<summary>
+Relabel packets to ntske_server the packet type.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="corenet_tcp_sendrecv_oa_system_port" lineno="57975">
 <summary>
 Send and receive TCP traffic on the oa_system port.
 </summary>
@@ -45715,7 +46335,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_oa_system_port" lineno="57569">
+<interface name="corenet_udp_send_oa_system_port" lineno="57990">
 <summary>
 Send UDP traffic on the oa_system port.
 </summary>
@@ -45726,7 +46346,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_oa_system_port" lineno="57584">
+<interface name="corenet_dontaudit_udp_send_oa_system_port" lineno="58005">
 <summary>
 Do not audit attempts to send UDP traffic on the oa_system port.
 </summary>
@@ -45737,7 +46357,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_oa_system_port" lineno="57599">
+<interface name="corenet_udp_receive_oa_system_port" lineno="58020">
 <summary>
 Receive UDP traffic on the oa_system port.
 </summary>
@@ -45748,7 +46368,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_oa_system_port" lineno="57614">
+<interface name="corenet_dontaudit_udp_receive_oa_system_port" lineno="58035">
 <summary>
 Do not audit attempts to receive UDP traffic on the oa_system port.
 </summary>
@@ -45759,7 +46379,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_oa_system_port" lineno="57629">
+<interface name="corenet_udp_sendrecv_oa_system_port" lineno="58050">
 <summary>
 Send and receive UDP traffic on the oa_system port.
 </summary>
@@ -45770,7 +46390,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_oa_system_port" lineno="57645">
+<interface name="corenet_dontaudit_udp_sendrecv_oa_system_port" lineno="58066">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the oa_system port.
@@ -45782,7 +46402,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_oa_system_port" lineno="57660">
+<interface name="corenet_tcp_bind_oa_system_port" lineno="58081">
 <summary>
 Bind TCP sockets to the oa_system port.
 </summary>
@@ -45793,7 +46413,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_oa_system_port" lineno="57680">
+<interface name="corenet_udp_bind_oa_system_port" lineno="58101">
 <summary>
 Bind UDP sockets to the oa_system port.
 </summary>
@@ -45804,7 +46424,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_oa_system_port" lineno="57699">
+<interface name="corenet_tcp_connect_oa_system_port" lineno="58120">
 <summary>
 Make a TCP connection to the oa_system port.
 </summary>
@@ -45814,7 +46434,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_oa_system_client_packets" lineno="57719">
+<interface name="corenet_send_oa_system_client_packets" lineno="58140">
 <summary>
 Send oa_system_client packets.
 </summary>
@@ -45825,7 +46445,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_oa_system_client_packets" lineno="57738">
+<interface name="corenet_dontaudit_send_oa_system_client_packets" lineno="58159">
 <summary>
 Do not audit attempts to send oa_system_client packets.
 </summary>
@@ -45836,7 +46456,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_oa_system_client_packets" lineno="57757">
+<interface name="corenet_receive_oa_system_client_packets" lineno="58178">
 <summary>
 Receive oa_system_client packets.
 </summary>
@@ -45847,7 +46467,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_oa_system_client_packets" lineno="57776">
+<interface name="corenet_dontaudit_receive_oa_system_client_packets" lineno="58197">
 <summary>
 Do not audit attempts to receive oa_system_client packets.
 </summary>
@@ -45858,7 +46478,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_oa_system_client_packets" lineno="57795">
+<interface name="corenet_sendrecv_oa_system_client_packets" lineno="58216">
 <summary>
 Send and receive oa_system_client packets.
 </summary>
@@ -45869,7 +46489,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_oa_system_client_packets" lineno="57811">
+<interface name="corenet_dontaudit_sendrecv_oa_system_client_packets" lineno="58232">
 <summary>
 Do not audit attempts to send and receive oa_system_client packets.
 </summary>
@@ -45880,7 +46500,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_oa_system_client_packets" lineno="57826">
+<interface name="corenet_relabelto_oa_system_client_packets" lineno="58247">
 <summary>
 Relabel packets to oa_system_client the packet type.
 </summary>
@@ -45890,7 +46510,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_oa_system_server_packets" lineno="57846">
+<interface name="corenet_send_oa_system_server_packets" lineno="58267">
 <summary>
 Send oa_system_server packets.
 </summary>
@@ -45901,7 +46521,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_oa_system_server_packets" lineno="57865">
+<interface name="corenet_dontaudit_send_oa_system_server_packets" lineno="58286">
 <summary>
 Do not audit attempts to send oa_system_server packets.
 </summary>
@@ -45912,7 +46532,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_oa_system_server_packets" lineno="57884">
+<interface name="corenet_receive_oa_system_server_packets" lineno="58305">
 <summary>
 Receive oa_system_server packets.
 </summary>
@@ -45923,7 +46543,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_oa_system_server_packets" lineno="57903">
+<interface name="corenet_dontaudit_receive_oa_system_server_packets" lineno="58324">
 <summary>
 Do not audit attempts to receive oa_system_server packets.
 </summary>
@@ -45934,7 +46554,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_oa_system_server_packets" lineno="57922">
+<interface name="corenet_sendrecv_oa_system_server_packets" lineno="58343">
 <summary>
 Send and receive oa_system_server packets.
 </summary>
@@ -45945,7 +46565,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_oa_system_server_packets" lineno="57938">
+<interface name="corenet_dontaudit_sendrecv_oa_system_server_packets" lineno="58359">
 <summary>
 Do not audit attempts to send and receive oa_system_server packets.
 </summary>
@@ -45956,7 +46576,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_oa_system_server_packets" lineno="57953">
+<interface name="corenet_relabelto_oa_system_server_packets" lineno="58374">
 <summary>
 Relabel packets to oa_system_server the packet type.
 </summary>
@@ -45966,7 +46586,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_oracledb_port" lineno="57975">
+<interface name="corenet_tcp_sendrecv_oracledb_port" lineno="58396">
 <summary>
 Send and receive TCP traffic on the oracledb port.
 </summary>
@@ -45977,7 +46597,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_oracledb_port" lineno="57990">
+<interface name="corenet_udp_send_oracledb_port" lineno="58411">
 <summary>
 Send UDP traffic on the oracledb port.
 </summary>
@@ -45988,7 +46608,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_oracledb_port" lineno="58005">
+<interface name="corenet_dontaudit_udp_send_oracledb_port" lineno="58426">
 <summary>
 Do not audit attempts to send UDP traffic on the oracledb port.
 </summary>
@@ -45999,7 +46619,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_oracledb_port" lineno="58020">
+<interface name="corenet_udp_receive_oracledb_port" lineno="58441">
 <summary>
 Receive UDP traffic on the oracledb port.
 </summary>
@@ -46010,7 +46630,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_oracledb_port" lineno="58035">
+<interface name="corenet_dontaudit_udp_receive_oracledb_port" lineno="58456">
 <summary>
 Do not audit attempts to receive UDP traffic on the oracledb port.
 </summary>
@@ -46021,7 +46641,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_oracledb_port" lineno="58050">
+<interface name="corenet_udp_sendrecv_oracledb_port" lineno="58471">
 <summary>
 Send and receive UDP traffic on the oracledb port.
 </summary>
@@ -46032,7 +46652,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_oracledb_port" lineno="58066">
+<interface name="corenet_dontaudit_udp_sendrecv_oracledb_port" lineno="58487">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the oracledb port.
@@ -46044,7 +46664,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_oracledb_port" lineno="58081">
+<interface name="corenet_tcp_bind_oracledb_port" lineno="58502">
 <summary>
 Bind TCP sockets to the oracledb port.
 </summary>
@@ -46055,7 +46675,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_oracledb_port" lineno="58101">
+<interface name="corenet_udp_bind_oracledb_port" lineno="58522">
 <summary>
 Bind UDP sockets to the oracledb port.
 </summary>
@@ -46066,7 +46686,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_oracledb_port" lineno="58120">
+<interface name="corenet_tcp_connect_oracledb_port" lineno="58541">
 <summary>
 Make a TCP connection to the oracledb port.
 </summary>
@@ -46076,7 +46696,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_oracledb_client_packets" lineno="58140">
+<interface name="corenet_send_oracledb_client_packets" lineno="58561">
 <summary>
 Send oracledb_client packets.
 </summary>
@@ -46087,7 +46707,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_oracledb_client_packets" lineno="58159">
+<interface name="corenet_dontaudit_send_oracledb_client_packets" lineno="58580">
 <summary>
 Do not audit attempts to send oracledb_client packets.
 </summary>
@@ -46098,7 +46718,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_oracledb_client_packets" lineno="58178">
+<interface name="corenet_receive_oracledb_client_packets" lineno="58599">
 <summary>
 Receive oracledb_client packets.
 </summary>
@@ -46109,7 +46729,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_oracledb_client_packets" lineno="58197">
+<interface name="corenet_dontaudit_receive_oracledb_client_packets" lineno="58618">
 <summary>
 Do not audit attempts to receive oracledb_client packets.
 </summary>
@@ -46120,7 +46740,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_oracledb_client_packets" lineno="58216">
+<interface name="corenet_sendrecv_oracledb_client_packets" lineno="58637">
 <summary>
 Send and receive oracledb_client packets.
 </summary>
@@ -46131,7 +46751,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_oracledb_client_packets" lineno="58232">
+<interface name="corenet_dontaudit_sendrecv_oracledb_client_packets" lineno="58653">
 <summary>
 Do not audit attempts to send and receive oracledb_client packets.
 </summary>
@@ -46142,7 +46762,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_oracledb_client_packets" lineno="58247">
+<interface name="corenet_relabelto_oracledb_client_packets" lineno="58668">
 <summary>
 Relabel packets to oracledb_client the packet type.
 </summary>
@@ -46152,7 +46772,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_oracledb_server_packets" lineno="58267">
+<interface name="corenet_send_oracledb_server_packets" lineno="58688">
 <summary>
 Send oracledb_server packets.
 </summary>
@@ -46163,7 +46783,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_oracledb_server_packets" lineno="58286">
+<interface name="corenet_dontaudit_send_oracledb_server_packets" lineno="58707">
 <summary>
 Do not audit attempts to send oracledb_server packets.
 </summary>
@@ -46174,7 +46794,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_oracledb_server_packets" lineno="58305">
+<interface name="corenet_receive_oracledb_server_packets" lineno="58726">
 <summary>
 Receive oracledb_server packets.
 </summary>
@@ -46185,7 +46805,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_oracledb_server_packets" lineno="58324">
+<interface name="corenet_dontaudit_receive_oracledb_server_packets" lineno="58745">
 <summary>
 Do not audit attempts to receive oracledb_server packets.
 </summary>
@@ -46196,7 +46816,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_oracledb_server_packets" lineno="58343">
+<interface name="corenet_sendrecv_oracledb_server_packets" lineno="58764">
 <summary>
 Send and receive oracledb_server packets.
 </summary>
@@ -46207,7 +46827,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_oracledb_server_packets" lineno="58359">
+<interface name="corenet_dontaudit_sendrecv_oracledb_server_packets" lineno="58780">
 <summary>
 Do not audit attempts to send and receive oracledb_server packets.
 </summary>
@@ -46218,7 +46838,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_oracledb_server_packets" lineno="58374">
+<interface name="corenet_relabelto_oracledb_server_packets" lineno="58795">
 <summary>
 Relabel packets to oracledb_server the packet type.
 </summary>
@@ -46228,7 +46848,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_ocsp_port" lineno="58396">
+<interface name="corenet_tcp_sendrecv_ocsp_port" lineno="58817">
 <summary>
 Send and receive TCP traffic on the ocsp port.
 </summary>
@@ -46239,7 +46859,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_ocsp_port" lineno="58411">
+<interface name="corenet_udp_send_ocsp_port" lineno="58832">
 <summary>
 Send UDP traffic on the ocsp port.
 </summary>
@@ -46250,7 +46870,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_ocsp_port" lineno="58426">
+<interface name="corenet_dontaudit_udp_send_ocsp_port" lineno="58847">
 <summary>
 Do not audit attempts to send UDP traffic on the ocsp port.
 </summary>
@@ -46261,7 +46881,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_ocsp_port" lineno="58441">
+<interface name="corenet_udp_receive_ocsp_port" lineno="58862">
 <summary>
 Receive UDP traffic on the ocsp port.
 </summary>
@@ -46272,7 +46892,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_ocsp_port" lineno="58456">
+<interface name="corenet_dontaudit_udp_receive_ocsp_port" lineno="58877">
 <summary>
 Do not audit attempts to receive UDP traffic on the ocsp port.
 </summary>
@@ -46283,7 +46903,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_ocsp_port" lineno="58471">
+<interface name="corenet_udp_sendrecv_ocsp_port" lineno="58892">
 <summary>
 Send and receive UDP traffic on the ocsp port.
 </summary>
@@ -46294,7 +46914,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_ocsp_port" lineno="58487">
+<interface name="corenet_dontaudit_udp_sendrecv_ocsp_port" lineno="58908">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the ocsp port.
@@ -46306,7 +46926,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_ocsp_port" lineno="58502">
+<interface name="corenet_tcp_bind_ocsp_port" lineno="58923">
 <summary>
 Bind TCP sockets to the ocsp port.
 </summary>
@@ -46317,7 +46937,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_ocsp_port" lineno="58522">
+<interface name="corenet_udp_bind_ocsp_port" lineno="58943">
 <summary>
 Bind UDP sockets to the ocsp port.
 </summary>
@@ -46328,7 +46948,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_ocsp_port" lineno="58541">
+<interface name="corenet_tcp_connect_ocsp_port" lineno="58962">
 <summary>
 Make a TCP connection to the ocsp port.
 </summary>
@@ -46338,7 +46958,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_ocsp_client_packets" lineno="58561">
+<interface name="corenet_send_ocsp_client_packets" lineno="58982">
 <summary>
 Send ocsp_client packets.
 </summary>
@@ -46349,7 +46969,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_ocsp_client_packets" lineno="58580">
+<interface name="corenet_dontaudit_send_ocsp_client_packets" lineno="59001">
 <summary>
 Do not audit attempts to send ocsp_client packets.
 </summary>
@@ -46360,7 +46980,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_ocsp_client_packets" lineno="58599">
+<interface name="corenet_receive_ocsp_client_packets" lineno="59020">
 <summary>
 Receive ocsp_client packets.
 </summary>
@@ -46371,7 +46991,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_ocsp_client_packets" lineno="58618">
+<interface name="corenet_dontaudit_receive_ocsp_client_packets" lineno="59039">
 <summary>
 Do not audit attempts to receive ocsp_client packets.
 </summary>
@@ -46382,7 +47002,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_ocsp_client_packets" lineno="58637">
+<interface name="corenet_sendrecv_ocsp_client_packets" lineno="59058">
 <summary>
 Send and receive ocsp_client packets.
 </summary>
@@ -46393,7 +47013,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_ocsp_client_packets" lineno="58653">
+<interface name="corenet_dontaudit_sendrecv_ocsp_client_packets" lineno="59074">
 <summary>
 Do not audit attempts to send and receive ocsp_client packets.
 </summary>
@@ -46404,7 +47024,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_ocsp_client_packets" lineno="58668">
+<interface name="corenet_relabelto_ocsp_client_packets" lineno="59089">
 <summary>
 Relabel packets to ocsp_client the packet type.
 </summary>
@@ -46414,7 +47034,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_ocsp_server_packets" lineno="58688">
+<interface name="corenet_send_ocsp_server_packets" lineno="59109">
 <summary>
 Send ocsp_server packets.
 </summary>
@@ -46425,7 +47045,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_ocsp_server_packets" lineno="58707">
+<interface name="corenet_dontaudit_send_ocsp_server_packets" lineno="59128">
 <summary>
 Do not audit attempts to send ocsp_server packets.
 </summary>
@@ -46436,7 +47056,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_ocsp_server_packets" lineno="58726">
+<interface name="corenet_receive_ocsp_server_packets" lineno="59147">
 <summary>
 Receive ocsp_server packets.
 </summary>
@@ -46447,7 +47067,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_ocsp_server_packets" lineno="58745">
+<interface name="corenet_dontaudit_receive_ocsp_server_packets" lineno="59166">
 <summary>
 Do not audit attempts to receive ocsp_server packets.
 </summary>
@@ -46458,7 +47078,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_ocsp_server_packets" lineno="58764">
+<interface name="corenet_sendrecv_ocsp_server_packets" lineno="59185">
 <summary>
 Send and receive ocsp_server packets.
 </summary>
@@ -46469,7 +47089,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_ocsp_server_packets" lineno="58780">
+<interface name="corenet_dontaudit_sendrecv_ocsp_server_packets" lineno="59201">
 <summary>
 Do not audit attempts to send and receive ocsp_server packets.
 </summary>
@@ -46480,7 +47100,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_ocsp_server_packets" lineno="58795">
+<interface name="corenet_relabelto_ocsp_server_packets" lineno="59216">
 <summary>
 Relabel packets to ocsp_server the packet type.
 </summary>
@@ -46490,7 +47110,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_openhpid_port" lineno="58817">
+<interface name="corenet_tcp_sendrecv_openhpid_port" lineno="59238">
 <summary>
 Send and receive TCP traffic on the openhpid port.
 </summary>
@@ -46501,7 +47121,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_openhpid_port" lineno="58832">
+<interface name="corenet_udp_send_openhpid_port" lineno="59253">
 <summary>
 Send UDP traffic on the openhpid port.
 </summary>
@@ -46512,7 +47132,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_openhpid_port" lineno="58847">
+<interface name="corenet_dontaudit_udp_send_openhpid_port" lineno="59268">
 <summary>
 Do not audit attempts to send UDP traffic on the openhpid port.
 </summary>
@@ -46523,7 +47143,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_openhpid_port" lineno="58862">
+<interface name="corenet_udp_receive_openhpid_port" lineno="59283">
 <summary>
 Receive UDP traffic on the openhpid port.
 </summary>
@@ -46534,7 +47154,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_openhpid_port" lineno="58877">
+<interface name="corenet_dontaudit_udp_receive_openhpid_port" lineno="59298">
 <summary>
 Do not audit attempts to receive UDP traffic on the openhpid port.
 </summary>
@@ -46545,7 +47165,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_openhpid_port" lineno="58892">
+<interface name="corenet_udp_sendrecv_openhpid_port" lineno="59313">
 <summary>
 Send and receive UDP traffic on the openhpid port.
 </summary>
@@ -46556,7 +47176,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_openhpid_port" lineno="58908">
+<interface name="corenet_dontaudit_udp_sendrecv_openhpid_port" lineno="59329">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the openhpid port.
@@ -46568,7 +47188,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_openhpid_port" lineno="58923">
+<interface name="corenet_tcp_bind_openhpid_port" lineno="59344">
 <summary>
 Bind TCP sockets to the openhpid port.
 </summary>
@@ -46579,7 +47199,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_openhpid_port" lineno="58943">
+<interface name="corenet_udp_bind_openhpid_port" lineno="59364">
 <summary>
 Bind UDP sockets to the openhpid port.
 </summary>
@@ -46590,7 +47210,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_openhpid_port" lineno="58962">
+<interface name="corenet_tcp_connect_openhpid_port" lineno="59383">
 <summary>
 Make a TCP connection to the openhpid port.
 </summary>
@@ -46600,7 +47220,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_openhpid_client_packets" lineno="58982">
+<interface name="corenet_send_openhpid_client_packets" lineno="59403">
 <summary>
 Send openhpid_client packets.
 </summary>
@@ -46611,7 +47231,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_openhpid_client_packets" lineno="59001">
+<interface name="corenet_dontaudit_send_openhpid_client_packets" lineno="59422">
 <summary>
 Do not audit attempts to send openhpid_client packets.
 </summary>
@@ -46622,7 +47242,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_openhpid_client_packets" lineno="59020">
+<interface name="corenet_receive_openhpid_client_packets" lineno="59441">
 <summary>
 Receive openhpid_client packets.
 </summary>
@@ -46633,7 +47253,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_openhpid_client_packets" lineno="59039">
+<interface name="corenet_dontaudit_receive_openhpid_client_packets" lineno="59460">
 <summary>
 Do not audit attempts to receive openhpid_client packets.
 </summary>
@@ -46644,7 +47264,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_openhpid_client_packets" lineno="59058">
+<interface name="corenet_sendrecv_openhpid_client_packets" lineno="59479">
 <summary>
 Send and receive openhpid_client packets.
 </summary>
@@ -46655,7 +47275,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_openhpid_client_packets" lineno="59074">
+<interface name="corenet_dontaudit_sendrecv_openhpid_client_packets" lineno="59495">
 <summary>
 Do not audit attempts to send and receive openhpid_client packets.
 </summary>
@@ -46666,7 +47286,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_openhpid_client_packets" lineno="59089">
+<interface name="corenet_relabelto_openhpid_client_packets" lineno="59510">
 <summary>
 Relabel packets to openhpid_client the packet type.
 </summary>
@@ -46676,7 +47296,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_openhpid_server_packets" lineno="59109">
+<interface name="corenet_send_openhpid_server_packets" lineno="59530">
 <summary>
 Send openhpid_server packets.
 </summary>
@@ -46687,7 +47307,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_openhpid_server_packets" lineno="59128">
+<interface name="corenet_dontaudit_send_openhpid_server_packets" lineno="59549">
 <summary>
 Do not audit attempts to send openhpid_server packets.
 </summary>
@@ -46698,7 +47318,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_openhpid_server_packets" lineno="59147">
+<interface name="corenet_receive_openhpid_server_packets" lineno="59568">
 <summary>
 Receive openhpid_server packets.
 </summary>
@@ -46709,7 +47329,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_openhpid_server_packets" lineno="59166">
+<interface name="corenet_dontaudit_receive_openhpid_server_packets" lineno="59587">
 <summary>
 Do not audit attempts to receive openhpid_server packets.
 </summary>
@@ -46720,7 +47340,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_openhpid_server_packets" lineno="59185">
+<interface name="corenet_sendrecv_openhpid_server_packets" lineno="59606">
 <summary>
 Send and receive openhpid_server packets.
 </summary>
@@ -46731,7 +47351,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_openhpid_server_packets" lineno="59201">
+<interface name="corenet_dontaudit_sendrecv_openhpid_server_packets" lineno="59622">
 <summary>
 Do not audit attempts to send and receive openhpid_server packets.
 </summary>
@@ -46742,7 +47362,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_openhpid_server_packets" lineno="59216">
+<interface name="corenet_relabelto_openhpid_server_packets" lineno="59637">
 <summary>
 Relabel packets to openhpid_server the packet type.
 </summary>
@@ -46752,7 +47372,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_openvpn_port" lineno="59238">
+<interface name="corenet_tcp_sendrecv_openvpn_port" lineno="59659">
 <summary>
 Send and receive TCP traffic on the openvpn port.
 </summary>
@@ -46763,7 +47383,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_openvpn_port" lineno="59253">
+<interface name="corenet_udp_send_openvpn_port" lineno="59674">
 <summary>
 Send UDP traffic on the openvpn port.
 </summary>
@@ -46774,7 +47394,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_openvpn_port" lineno="59268">
+<interface name="corenet_dontaudit_udp_send_openvpn_port" lineno="59689">
 <summary>
 Do not audit attempts to send UDP traffic on the openvpn port.
 </summary>
@@ -46785,7 +47405,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_openvpn_port" lineno="59283">
+<interface name="corenet_udp_receive_openvpn_port" lineno="59704">
 <summary>
 Receive UDP traffic on the openvpn port.
 </summary>
@@ -46796,7 +47416,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_openvpn_port" lineno="59298">
+<interface name="corenet_dontaudit_udp_receive_openvpn_port" lineno="59719">
 <summary>
 Do not audit attempts to receive UDP traffic on the openvpn port.
 </summary>
@@ -46807,7 +47427,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_openvpn_port" lineno="59313">
+<interface name="corenet_udp_sendrecv_openvpn_port" lineno="59734">
 <summary>
 Send and receive UDP traffic on the openvpn port.
 </summary>
@@ -46818,7 +47438,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_openvpn_port" lineno="59329">
+<interface name="corenet_dontaudit_udp_sendrecv_openvpn_port" lineno="59750">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the openvpn port.
@@ -46830,7 +47450,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_openvpn_port" lineno="59344">
+<interface name="corenet_tcp_bind_openvpn_port" lineno="59765">
 <summary>
 Bind TCP sockets to the openvpn port.
 </summary>
@@ -46841,7 +47461,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_openvpn_port" lineno="59364">
+<interface name="corenet_udp_bind_openvpn_port" lineno="59785">
 <summary>
 Bind UDP sockets to the openvpn port.
 </summary>
@@ -46852,7 +47472,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_openvpn_port" lineno="59383">
+<interface name="corenet_tcp_connect_openvpn_port" lineno="59804">
 <summary>
 Make a TCP connection to the openvpn port.
 </summary>
@@ -46862,7 +47482,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_openvpn_client_packets" lineno="59403">
+<interface name="corenet_send_openvpn_client_packets" lineno="59824">
 <summary>
 Send openvpn_client packets.
 </summary>
@@ -46873,7 +47493,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_openvpn_client_packets" lineno="59422">
+<interface name="corenet_dontaudit_send_openvpn_client_packets" lineno="59843">
 <summary>
 Do not audit attempts to send openvpn_client packets.
 </summary>
@@ -46884,7 +47504,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_openvpn_client_packets" lineno="59441">
+<interface name="corenet_receive_openvpn_client_packets" lineno="59862">
 <summary>
 Receive openvpn_client packets.
 </summary>
@@ -46895,7 +47515,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_openvpn_client_packets" lineno="59460">
+<interface name="corenet_dontaudit_receive_openvpn_client_packets" lineno="59881">
 <summary>
 Do not audit attempts to receive openvpn_client packets.
 </summary>
@@ -46906,7 +47526,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_openvpn_client_packets" lineno="59479">
+<interface name="corenet_sendrecv_openvpn_client_packets" lineno="59900">
 <summary>
 Send and receive openvpn_client packets.
 </summary>
@@ -46917,7 +47537,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_openvpn_client_packets" lineno="59495">
+<interface name="corenet_dontaudit_sendrecv_openvpn_client_packets" lineno="59916">
 <summary>
 Do not audit attempts to send and receive openvpn_client packets.
 </summary>
@@ -46928,7 +47548,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_openvpn_client_packets" lineno="59510">
+<interface name="corenet_relabelto_openvpn_client_packets" lineno="59931">
 <summary>
 Relabel packets to openvpn_client the packet type.
 </summary>
@@ -46938,7 +47558,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_openvpn_server_packets" lineno="59530">
+<interface name="corenet_send_openvpn_server_packets" lineno="59951">
 <summary>
 Send openvpn_server packets.
 </summary>
@@ -46949,7 +47569,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_openvpn_server_packets" lineno="59549">
+<interface name="corenet_dontaudit_send_openvpn_server_packets" lineno="59970">
 <summary>
 Do not audit attempts to send openvpn_server packets.
 </summary>
@@ -46960,7 +47580,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_openvpn_server_packets" lineno="59568">
+<interface name="corenet_receive_openvpn_server_packets" lineno="59989">
 <summary>
 Receive openvpn_server packets.
 </summary>
@@ -46971,7 +47591,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_openvpn_server_packets" lineno="59587">
+<interface name="corenet_dontaudit_receive_openvpn_server_packets" lineno="60008">
 <summary>
 Do not audit attempts to receive openvpn_server packets.
 </summary>
@@ -46982,7 +47602,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_openvpn_server_packets" lineno="59606">
+<interface name="corenet_sendrecv_openvpn_server_packets" lineno="60027">
 <summary>
 Send and receive openvpn_server packets.
 </summary>
@@ -46993,7 +47613,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_openvpn_server_packets" lineno="59622">
+<interface name="corenet_dontaudit_sendrecv_openvpn_server_packets" lineno="60043">
 <summary>
 Do not audit attempts to send and receive openvpn_server packets.
 </summary>
@@ -47004,7 +47624,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_openvpn_server_packets" lineno="59637">
+<interface name="corenet_relabelto_openvpn_server_packets" lineno="60058">
 <summary>
 Relabel packets to openvpn_server the packet type.
 </summary>
@@ -47014,7 +47634,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_pdps_port" lineno="59659">
+<interface name="corenet_tcp_sendrecv_pdps_port" lineno="60080">
 <summary>
 Send and receive TCP traffic on the pdps port.
 </summary>
@@ -47025,7 +47645,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_pdps_port" lineno="59674">
+<interface name="corenet_udp_send_pdps_port" lineno="60095">
 <summary>
 Send UDP traffic on the pdps port.
 </summary>
@@ -47036,7 +47656,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_pdps_port" lineno="59689">
+<interface name="corenet_dontaudit_udp_send_pdps_port" lineno="60110">
 <summary>
 Do not audit attempts to send UDP traffic on the pdps port.
 </summary>
@@ -47047,7 +47667,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_pdps_port" lineno="59704">
+<interface name="corenet_udp_receive_pdps_port" lineno="60125">
 <summary>
 Receive UDP traffic on the pdps port.
 </summary>
@@ -47058,7 +47678,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_pdps_port" lineno="59719">
+<interface name="corenet_dontaudit_udp_receive_pdps_port" lineno="60140">
 <summary>
 Do not audit attempts to receive UDP traffic on the pdps port.
 </summary>
@@ -47069,7 +47689,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_pdps_port" lineno="59734">
+<interface name="corenet_udp_sendrecv_pdps_port" lineno="60155">
 <summary>
 Send and receive UDP traffic on the pdps port.
 </summary>
@@ -47080,7 +47700,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_pdps_port" lineno="59750">
+<interface name="corenet_dontaudit_udp_sendrecv_pdps_port" lineno="60171">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the pdps port.
@@ -47092,7 +47712,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_pdps_port" lineno="59765">
+<interface name="corenet_tcp_bind_pdps_port" lineno="60186">
 <summary>
 Bind TCP sockets to the pdps port.
 </summary>
@@ -47103,7 +47723,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_pdps_port" lineno="59785">
+<interface name="corenet_udp_bind_pdps_port" lineno="60206">
 <summary>
 Bind UDP sockets to the pdps port.
 </summary>
@@ -47114,7 +47734,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_pdps_port" lineno="59804">
+<interface name="corenet_tcp_connect_pdps_port" lineno="60225">
 <summary>
 Make a TCP connection to the pdps port.
 </summary>
@@ -47124,7 +47744,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_pdps_client_packets" lineno="59824">
+<interface name="corenet_send_pdps_client_packets" lineno="60245">
 <summary>
 Send pdps_client packets.
 </summary>
@@ -47135,7 +47755,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_pdps_client_packets" lineno="59843">
+<interface name="corenet_dontaudit_send_pdps_client_packets" lineno="60264">
 <summary>
 Do not audit attempts to send pdps_client packets.
 </summary>
@@ -47146,7 +47766,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_pdps_client_packets" lineno="59862">
+<interface name="corenet_receive_pdps_client_packets" lineno="60283">
 <summary>
 Receive pdps_client packets.
 </summary>
@@ -47157,7 +47777,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_pdps_client_packets" lineno="59881">
+<interface name="corenet_dontaudit_receive_pdps_client_packets" lineno="60302">
 <summary>
 Do not audit attempts to receive pdps_client packets.
 </summary>
@@ -47168,7 +47788,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_pdps_client_packets" lineno="59900">
+<interface name="corenet_sendrecv_pdps_client_packets" lineno="60321">
 <summary>
 Send and receive pdps_client packets.
 </summary>
@@ -47179,7 +47799,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_pdps_client_packets" lineno="59916">
+<interface name="corenet_dontaudit_sendrecv_pdps_client_packets" lineno="60337">
 <summary>
 Do not audit attempts to send and receive pdps_client packets.
 </summary>
@@ -47190,7 +47810,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_pdps_client_packets" lineno="59931">
+<interface name="corenet_relabelto_pdps_client_packets" lineno="60352">
 <summary>
 Relabel packets to pdps_client the packet type.
 </summary>
@@ -47200,7 +47820,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_pdps_server_packets" lineno="59951">
+<interface name="corenet_send_pdps_server_packets" lineno="60372">
 <summary>
 Send pdps_server packets.
 </summary>
@@ -47211,7 +47831,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_pdps_server_packets" lineno="59970">
+<interface name="corenet_dontaudit_send_pdps_server_packets" lineno="60391">
 <summary>
 Do not audit attempts to send pdps_server packets.
 </summary>
@@ -47222,7 +47842,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_pdps_server_packets" lineno="59989">
+<interface name="corenet_receive_pdps_server_packets" lineno="60410">
 <summary>
 Receive pdps_server packets.
 </summary>
@@ -47233,7 +47853,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_pdps_server_packets" lineno="60008">
+<interface name="corenet_dontaudit_receive_pdps_server_packets" lineno="60429">
 <summary>
 Do not audit attempts to receive pdps_server packets.
 </summary>
@@ -47244,7 +47864,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_pdps_server_packets" lineno="60027">
+<interface name="corenet_sendrecv_pdps_server_packets" lineno="60448">
 <summary>
 Send and receive pdps_server packets.
 </summary>
@@ -47255,7 +47875,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_pdps_server_packets" lineno="60043">
+<interface name="corenet_dontaudit_sendrecv_pdps_server_packets" lineno="60464">
 <summary>
 Do not audit attempts to send and receive pdps_server packets.
 </summary>
@@ -47266,7 +47886,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_pdps_server_packets" lineno="60058">
+<interface name="corenet_relabelto_pdps_server_packets" lineno="60479">
 <summary>
 Relabel packets to pdps_server the packet type.
 </summary>
@@ -47276,7 +47896,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_pegasus_http_port" lineno="60080">
+<interface name="corenet_tcp_sendrecv_pegasus_http_port" lineno="60501">
 <summary>
 Send and receive TCP traffic on the pegasus_http port.
 </summary>
@@ -47287,7 +47907,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_pegasus_http_port" lineno="60095">
+<interface name="corenet_udp_send_pegasus_http_port" lineno="60516">
 <summary>
 Send UDP traffic on the pegasus_http port.
 </summary>
@@ -47298,7 +47918,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_pegasus_http_port" lineno="60110">
+<interface name="corenet_dontaudit_udp_send_pegasus_http_port" lineno="60531">
 <summary>
 Do not audit attempts to send UDP traffic on the pegasus_http port.
 </summary>
@@ -47309,7 +47929,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_pegasus_http_port" lineno="60125">
+<interface name="corenet_udp_receive_pegasus_http_port" lineno="60546">
 <summary>
 Receive UDP traffic on the pegasus_http port.
 </summary>
@@ -47320,7 +47940,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_pegasus_http_port" lineno="60140">
+<interface name="corenet_dontaudit_udp_receive_pegasus_http_port" lineno="60561">
 <summary>
 Do not audit attempts to receive UDP traffic on the pegasus_http port.
 </summary>
@@ -47331,7 +47951,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_pegasus_http_port" lineno="60155">
+<interface name="corenet_udp_sendrecv_pegasus_http_port" lineno="60576">
 <summary>
 Send and receive UDP traffic on the pegasus_http port.
 </summary>
@@ -47342,7 +47962,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_pegasus_http_port" lineno="60171">
+<interface name="corenet_dontaudit_udp_sendrecv_pegasus_http_port" lineno="60592">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the pegasus_http port.
@@ -47354,7 +47974,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_pegasus_http_port" lineno="60186">
+<interface name="corenet_tcp_bind_pegasus_http_port" lineno="60607">
 <summary>
 Bind TCP sockets to the pegasus_http port.
 </summary>
@@ -47365,7 +47985,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_pegasus_http_port" lineno="60206">
+<interface name="corenet_udp_bind_pegasus_http_port" lineno="60627">
 <summary>
 Bind UDP sockets to the pegasus_http port.
 </summary>
@@ -47376,7 +47996,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_pegasus_http_port" lineno="60225">
+<interface name="corenet_tcp_connect_pegasus_http_port" lineno="60646">
 <summary>
 Make a TCP connection to the pegasus_http port.
 </summary>
@@ -47386,7 +48006,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_pegasus_http_client_packets" lineno="60245">
+<interface name="corenet_send_pegasus_http_client_packets" lineno="60666">
 <summary>
 Send pegasus_http_client packets.
 </summary>
@@ -47397,7 +48017,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_pegasus_http_client_packets" lineno="60264">
+<interface name="corenet_dontaudit_send_pegasus_http_client_packets" lineno="60685">
 <summary>
 Do not audit attempts to send pegasus_http_client packets.
 </summary>
@@ -47408,7 +48028,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_pegasus_http_client_packets" lineno="60283">
+<interface name="corenet_receive_pegasus_http_client_packets" lineno="60704">
 <summary>
 Receive pegasus_http_client packets.
 </summary>
@@ -47419,7 +48039,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_pegasus_http_client_packets" lineno="60302">
+<interface name="corenet_dontaudit_receive_pegasus_http_client_packets" lineno="60723">
 <summary>
 Do not audit attempts to receive pegasus_http_client packets.
 </summary>
@@ -47430,7 +48050,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_pegasus_http_client_packets" lineno="60321">
+<interface name="corenet_sendrecv_pegasus_http_client_packets" lineno="60742">
 <summary>
 Send and receive pegasus_http_client packets.
 </summary>
@@ -47441,7 +48061,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_pegasus_http_client_packets" lineno="60337">
+<interface name="corenet_dontaudit_sendrecv_pegasus_http_client_packets" lineno="60758">
 <summary>
 Do not audit attempts to send and receive pegasus_http_client packets.
 </summary>
@@ -47452,7 +48072,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_pegasus_http_client_packets" lineno="60352">
+<interface name="corenet_relabelto_pegasus_http_client_packets" lineno="60773">
 <summary>
 Relabel packets to pegasus_http_client the packet type.
 </summary>
@@ -47462,7 +48082,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_pegasus_http_server_packets" lineno="60372">
+<interface name="corenet_send_pegasus_http_server_packets" lineno="60793">
 <summary>
 Send pegasus_http_server packets.
 </summary>
@@ -47473,7 +48093,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_pegasus_http_server_packets" lineno="60391">
+<interface name="corenet_dontaudit_send_pegasus_http_server_packets" lineno="60812">
 <summary>
 Do not audit attempts to send pegasus_http_server packets.
 </summary>
@@ -47484,7 +48104,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_pegasus_http_server_packets" lineno="60410">
+<interface name="corenet_receive_pegasus_http_server_packets" lineno="60831">
 <summary>
 Receive pegasus_http_server packets.
 </summary>
@@ -47495,7 +48115,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_pegasus_http_server_packets" lineno="60429">
+<interface name="corenet_dontaudit_receive_pegasus_http_server_packets" lineno="60850">
 <summary>
 Do not audit attempts to receive pegasus_http_server packets.
 </summary>
@@ -47506,7 +48126,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_pegasus_http_server_packets" lineno="60448">
+<interface name="corenet_sendrecv_pegasus_http_server_packets" lineno="60869">
 <summary>
 Send and receive pegasus_http_server packets.
 </summary>
@@ -47517,7 +48137,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_pegasus_http_server_packets" lineno="60464">
+<interface name="corenet_dontaudit_sendrecv_pegasus_http_server_packets" lineno="60885">
 <summary>
 Do not audit attempts to send and receive pegasus_http_server packets.
 </summary>
@@ -47528,7 +48148,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_pegasus_http_server_packets" lineno="60479">
+<interface name="corenet_relabelto_pegasus_http_server_packets" lineno="60900">
 <summary>
 Relabel packets to pegasus_http_server the packet type.
 </summary>
@@ -47538,7 +48158,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_pegasus_https_port" lineno="60501">
+<interface name="corenet_tcp_sendrecv_pegasus_https_port" lineno="60922">
 <summary>
 Send and receive TCP traffic on the pegasus_https port.
 </summary>
@@ -47549,7 +48169,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_pegasus_https_port" lineno="60516">
+<interface name="corenet_udp_send_pegasus_https_port" lineno="60937">
 <summary>
 Send UDP traffic on the pegasus_https port.
 </summary>
@@ -47560,7 +48180,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_pegasus_https_port" lineno="60531">
+<interface name="corenet_dontaudit_udp_send_pegasus_https_port" lineno="60952">
 <summary>
 Do not audit attempts to send UDP traffic on the pegasus_https port.
 </summary>
@@ -47571,7 +48191,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_pegasus_https_port" lineno="60546">
+<interface name="corenet_udp_receive_pegasus_https_port" lineno="60967">
 <summary>
 Receive UDP traffic on the pegasus_https port.
 </summary>
@@ -47582,7 +48202,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_pegasus_https_port" lineno="60561">
+<interface name="corenet_dontaudit_udp_receive_pegasus_https_port" lineno="60982">
 <summary>
 Do not audit attempts to receive UDP traffic on the pegasus_https port.
 </summary>
@@ -47593,7 +48213,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_pegasus_https_port" lineno="60576">
+<interface name="corenet_udp_sendrecv_pegasus_https_port" lineno="60997">
 <summary>
 Send and receive UDP traffic on the pegasus_https port.
 </summary>
@@ -47604,7 +48224,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_pegasus_https_port" lineno="60592">
+<interface name="corenet_dontaudit_udp_sendrecv_pegasus_https_port" lineno="61013">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the pegasus_https port.
@@ -47616,7 +48236,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_pegasus_https_port" lineno="60607">
+<interface name="corenet_tcp_bind_pegasus_https_port" lineno="61028">
 <summary>
 Bind TCP sockets to the pegasus_https port.
 </summary>
@@ -47627,7 +48247,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_pegasus_https_port" lineno="60627">
+<interface name="corenet_udp_bind_pegasus_https_port" lineno="61048">
 <summary>
 Bind UDP sockets to the pegasus_https port.
 </summary>
@@ -47638,7 +48258,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_pegasus_https_port" lineno="60646">
+<interface name="corenet_tcp_connect_pegasus_https_port" lineno="61067">
 <summary>
 Make a TCP connection to the pegasus_https port.
 </summary>
@@ -47648,7 +48268,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_pegasus_https_client_packets" lineno="60666">
+<interface name="corenet_send_pegasus_https_client_packets" lineno="61087">
 <summary>
 Send pegasus_https_client packets.
 </summary>
@@ -47659,7 +48279,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_pegasus_https_client_packets" lineno="60685">
+<interface name="corenet_dontaudit_send_pegasus_https_client_packets" lineno="61106">
 <summary>
 Do not audit attempts to send pegasus_https_client packets.
 </summary>
@@ -47670,7 +48290,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_pegasus_https_client_packets" lineno="60704">
+<interface name="corenet_receive_pegasus_https_client_packets" lineno="61125">
 <summary>
 Receive pegasus_https_client packets.
 </summary>
@@ -47681,7 +48301,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_pegasus_https_client_packets" lineno="60723">
+<interface name="corenet_dontaudit_receive_pegasus_https_client_packets" lineno="61144">
 <summary>
 Do not audit attempts to receive pegasus_https_client packets.
 </summary>
@@ -47692,7 +48312,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_pegasus_https_client_packets" lineno="60742">
+<interface name="corenet_sendrecv_pegasus_https_client_packets" lineno="61163">
 <summary>
 Send and receive pegasus_https_client packets.
 </summary>
@@ -47703,7 +48323,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_pegasus_https_client_packets" lineno="60758">
+<interface name="corenet_dontaudit_sendrecv_pegasus_https_client_packets" lineno="61179">
 <summary>
 Do not audit attempts to send and receive pegasus_https_client packets.
 </summary>
@@ -47714,7 +48334,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_pegasus_https_client_packets" lineno="60773">
+<interface name="corenet_relabelto_pegasus_https_client_packets" lineno="61194">
 <summary>
 Relabel packets to pegasus_https_client the packet type.
 </summary>
@@ -47724,7 +48344,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_pegasus_https_server_packets" lineno="60793">
+<interface name="corenet_send_pegasus_https_server_packets" lineno="61214">
 <summary>
 Send pegasus_https_server packets.
 </summary>
@@ -47735,7 +48355,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_pegasus_https_server_packets" lineno="60812">
+<interface name="corenet_dontaudit_send_pegasus_https_server_packets" lineno="61233">
 <summary>
 Do not audit attempts to send pegasus_https_server packets.
 </summary>
@@ -47746,7 +48366,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_pegasus_https_server_packets" lineno="60831">
+<interface name="corenet_receive_pegasus_https_server_packets" lineno="61252">
 <summary>
 Receive pegasus_https_server packets.
 </summary>
@@ -47757,7 +48377,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_pegasus_https_server_packets" lineno="60850">
+<interface name="corenet_dontaudit_receive_pegasus_https_server_packets" lineno="61271">
 <summary>
 Do not audit attempts to receive pegasus_https_server packets.
 </summary>
@@ -47768,7 +48388,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_pegasus_https_server_packets" lineno="60869">
+<interface name="corenet_sendrecv_pegasus_https_server_packets" lineno="61290">
 <summary>
 Send and receive pegasus_https_server packets.
 </summary>
@@ -47779,7 +48399,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_pegasus_https_server_packets" lineno="60885">
+<interface name="corenet_dontaudit_sendrecv_pegasus_https_server_packets" lineno="61306">
 <summary>
 Do not audit attempts to send and receive pegasus_https_server packets.
 </summary>
@@ -47790,7 +48410,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_pegasus_https_server_packets" lineno="60900">
+<interface name="corenet_relabelto_pegasus_https_server_packets" lineno="61321">
 <summary>
 Relabel packets to pegasus_https_server the packet type.
 </summary>
@@ -47800,7 +48420,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_pgpkeyserver_port" lineno="60922">
+<interface name="corenet_tcp_sendrecv_pgpkeyserver_port" lineno="61343">
 <summary>
 Send and receive TCP traffic on the pgpkeyserver port.
 </summary>
@@ -47811,7 +48431,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_pgpkeyserver_port" lineno="60937">
+<interface name="corenet_udp_send_pgpkeyserver_port" lineno="61358">
 <summary>
 Send UDP traffic on the pgpkeyserver port.
 </summary>
@@ -47822,7 +48442,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_pgpkeyserver_port" lineno="60952">
+<interface name="corenet_dontaudit_udp_send_pgpkeyserver_port" lineno="61373">
 <summary>
 Do not audit attempts to send UDP traffic on the pgpkeyserver port.
 </summary>
@@ -47833,7 +48453,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_pgpkeyserver_port" lineno="60967">
+<interface name="corenet_udp_receive_pgpkeyserver_port" lineno="61388">
 <summary>
 Receive UDP traffic on the pgpkeyserver port.
 </summary>
@@ -47844,7 +48464,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_pgpkeyserver_port" lineno="60982">
+<interface name="corenet_dontaudit_udp_receive_pgpkeyserver_port" lineno="61403">
 <summary>
 Do not audit attempts to receive UDP traffic on the pgpkeyserver port.
 </summary>
@@ -47855,7 +48475,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_pgpkeyserver_port" lineno="60997">
+<interface name="corenet_udp_sendrecv_pgpkeyserver_port" lineno="61418">
 <summary>
 Send and receive UDP traffic on the pgpkeyserver port.
 </summary>
@@ -47866,7 +48486,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_pgpkeyserver_port" lineno="61013">
+<interface name="corenet_dontaudit_udp_sendrecv_pgpkeyserver_port" lineno="61434">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the pgpkeyserver port.
@@ -47878,7 +48498,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_pgpkeyserver_port" lineno="61028">
+<interface name="corenet_tcp_bind_pgpkeyserver_port" lineno="61449">
 <summary>
 Bind TCP sockets to the pgpkeyserver port.
 </summary>
@@ -47889,7 +48509,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_pgpkeyserver_port" lineno="61048">
+<interface name="corenet_udp_bind_pgpkeyserver_port" lineno="61469">
 <summary>
 Bind UDP sockets to the pgpkeyserver port.
 </summary>
@@ -47900,7 +48520,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_pgpkeyserver_port" lineno="61067">
+<interface name="corenet_tcp_connect_pgpkeyserver_port" lineno="61488">
 <summary>
 Make a TCP connection to the pgpkeyserver port.
 </summary>
@@ -47910,7 +48530,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_pgpkeyserver_client_packets" lineno="61087">
+<interface name="corenet_send_pgpkeyserver_client_packets" lineno="61508">
 <summary>
 Send pgpkeyserver_client packets.
 </summary>
@@ -47921,7 +48541,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_pgpkeyserver_client_packets" lineno="61106">
+<interface name="corenet_dontaudit_send_pgpkeyserver_client_packets" lineno="61527">
 <summary>
 Do not audit attempts to send pgpkeyserver_client packets.
 </summary>
@@ -47932,7 +48552,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_pgpkeyserver_client_packets" lineno="61125">
+<interface name="corenet_receive_pgpkeyserver_client_packets" lineno="61546">
 <summary>
 Receive pgpkeyserver_client packets.
 </summary>
@@ -47943,7 +48563,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_pgpkeyserver_client_packets" lineno="61144">
+<interface name="corenet_dontaudit_receive_pgpkeyserver_client_packets" lineno="61565">
 <summary>
 Do not audit attempts to receive pgpkeyserver_client packets.
 </summary>
@@ -47954,7 +48574,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_pgpkeyserver_client_packets" lineno="61163">
+<interface name="corenet_sendrecv_pgpkeyserver_client_packets" lineno="61584">
 <summary>
 Send and receive pgpkeyserver_client packets.
 </summary>
@@ -47965,7 +48585,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_pgpkeyserver_client_packets" lineno="61179">
+<interface name="corenet_dontaudit_sendrecv_pgpkeyserver_client_packets" lineno="61600">
 <summary>
 Do not audit attempts to send and receive pgpkeyserver_client packets.
 </summary>
@@ -47976,7 +48596,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_pgpkeyserver_client_packets" lineno="61194">
+<interface name="corenet_relabelto_pgpkeyserver_client_packets" lineno="61615">
 <summary>
 Relabel packets to pgpkeyserver_client the packet type.
 </summary>
@@ -47986,7 +48606,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_pgpkeyserver_server_packets" lineno="61214">
+<interface name="corenet_send_pgpkeyserver_server_packets" lineno="61635">
 <summary>
 Send pgpkeyserver_server packets.
 </summary>
@@ -47997,7 +48617,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_pgpkeyserver_server_packets" lineno="61233">
+<interface name="corenet_dontaudit_send_pgpkeyserver_server_packets" lineno="61654">
 <summary>
 Do not audit attempts to send pgpkeyserver_server packets.
 </summary>
@@ -48008,7 +48628,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_pgpkeyserver_server_packets" lineno="61252">
+<interface name="corenet_receive_pgpkeyserver_server_packets" lineno="61673">
 <summary>
 Receive pgpkeyserver_server packets.
 </summary>
@@ -48019,7 +48639,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_pgpkeyserver_server_packets" lineno="61271">
+<interface name="corenet_dontaudit_receive_pgpkeyserver_server_packets" lineno="61692">
 <summary>
 Do not audit attempts to receive pgpkeyserver_server packets.
 </summary>
@@ -48030,7 +48650,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_pgpkeyserver_server_packets" lineno="61290">
+<interface name="corenet_sendrecv_pgpkeyserver_server_packets" lineno="61711">
 <summary>
 Send and receive pgpkeyserver_server packets.
 </summary>
@@ -48041,7 +48661,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_pgpkeyserver_server_packets" lineno="61306">
+<interface name="corenet_dontaudit_sendrecv_pgpkeyserver_server_packets" lineno="61727">
 <summary>
 Do not audit attempts to send and receive pgpkeyserver_server packets.
 </summary>
@@ -48052,7 +48672,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_pgpkeyserver_server_packets" lineno="61321">
+<interface name="corenet_relabelto_pgpkeyserver_server_packets" lineno="61742">
 <summary>
 Relabel packets to pgpkeyserver_server the packet type.
 </summary>
@@ -48062,7 +48682,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_pingd_port" lineno="61343">
+<interface name="corenet_tcp_sendrecv_pingd_port" lineno="61764">
 <summary>
 Send and receive TCP traffic on the pingd port.
 </summary>
@@ -48073,7 +48693,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_pingd_port" lineno="61358">
+<interface name="corenet_udp_send_pingd_port" lineno="61779">
 <summary>
 Send UDP traffic on the pingd port.
 </summary>
@@ -48084,7 +48704,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_pingd_port" lineno="61373">
+<interface name="corenet_dontaudit_udp_send_pingd_port" lineno="61794">
 <summary>
 Do not audit attempts to send UDP traffic on the pingd port.
 </summary>
@@ -48095,7 +48715,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_pingd_port" lineno="61388">
+<interface name="corenet_udp_receive_pingd_port" lineno="61809">
 <summary>
 Receive UDP traffic on the pingd port.
 </summary>
@@ -48106,7 +48726,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_pingd_port" lineno="61403">
+<interface name="corenet_dontaudit_udp_receive_pingd_port" lineno="61824">
 <summary>
 Do not audit attempts to receive UDP traffic on the pingd port.
 </summary>
@@ -48117,7 +48737,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_pingd_port" lineno="61418">
+<interface name="corenet_udp_sendrecv_pingd_port" lineno="61839">
 <summary>
 Send and receive UDP traffic on the pingd port.
 </summary>
@@ -48128,7 +48748,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_pingd_port" lineno="61434">
+<interface name="corenet_dontaudit_udp_sendrecv_pingd_port" lineno="61855">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the pingd port.
@@ -48140,7 +48760,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_pingd_port" lineno="61449">
+<interface name="corenet_tcp_bind_pingd_port" lineno="61870">
 <summary>
 Bind TCP sockets to the pingd port.
 </summary>
@@ -48151,7 +48771,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_pingd_port" lineno="61469">
+<interface name="corenet_udp_bind_pingd_port" lineno="61890">
 <summary>
 Bind UDP sockets to the pingd port.
 </summary>
@@ -48162,7 +48782,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_pingd_port" lineno="61488">
+<interface name="corenet_tcp_connect_pingd_port" lineno="61909">
 <summary>
 Make a TCP connection to the pingd port.
 </summary>
@@ -48172,7 +48792,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_pingd_client_packets" lineno="61508">
+<interface name="corenet_send_pingd_client_packets" lineno="61929">
 <summary>
 Send pingd_client packets.
 </summary>
@@ -48183,7 +48803,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_pingd_client_packets" lineno="61527">
+<interface name="corenet_dontaudit_send_pingd_client_packets" lineno="61948">
 <summary>
 Do not audit attempts to send pingd_client packets.
 </summary>
@@ -48194,7 +48814,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_pingd_client_packets" lineno="61546">
+<interface name="corenet_receive_pingd_client_packets" lineno="61967">
 <summary>
 Receive pingd_client packets.
 </summary>
@@ -48205,7 +48825,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_pingd_client_packets" lineno="61565">
+<interface name="corenet_dontaudit_receive_pingd_client_packets" lineno="61986">
 <summary>
 Do not audit attempts to receive pingd_client packets.
 </summary>
@@ -48216,7 +48836,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_pingd_client_packets" lineno="61584">
+<interface name="corenet_sendrecv_pingd_client_packets" lineno="62005">
 <summary>
 Send and receive pingd_client packets.
 </summary>
@@ -48227,7 +48847,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_pingd_client_packets" lineno="61600">
+<interface name="corenet_dontaudit_sendrecv_pingd_client_packets" lineno="62021">
 <summary>
 Do not audit attempts to send and receive pingd_client packets.
 </summary>
@@ -48238,7 +48858,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_pingd_client_packets" lineno="61615">
+<interface name="corenet_relabelto_pingd_client_packets" lineno="62036">
 <summary>
 Relabel packets to pingd_client the packet type.
 </summary>
@@ -48248,7 +48868,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_pingd_server_packets" lineno="61635">
+<interface name="corenet_send_pingd_server_packets" lineno="62056">
 <summary>
 Send pingd_server packets.
 </summary>
@@ -48259,7 +48879,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_pingd_server_packets" lineno="61654">
+<interface name="corenet_dontaudit_send_pingd_server_packets" lineno="62075">
 <summary>
 Do not audit attempts to send pingd_server packets.
 </summary>
@@ -48270,7 +48890,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_pingd_server_packets" lineno="61673">
+<interface name="corenet_receive_pingd_server_packets" lineno="62094">
 <summary>
 Receive pingd_server packets.
 </summary>
@@ -48281,7 +48901,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_pingd_server_packets" lineno="61692">
+<interface name="corenet_dontaudit_receive_pingd_server_packets" lineno="62113">
 <summary>
 Do not audit attempts to receive pingd_server packets.
 </summary>
@@ -48292,7 +48912,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_pingd_server_packets" lineno="61711">
+<interface name="corenet_sendrecv_pingd_server_packets" lineno="62132">
 <summary>
 Send and receive pingd_server packets.
 </summary>
@@ -48303,7 +48923,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_pingd_server_packets" lineno="61727">
+<interface name="corenet_dontaudit_sendrecv_pingd_server_packets" lineno="62148">
 <summary>
 Do not audit attempts to send and receive pingd_server packets.
 </summary>
@@ -48314,7 +48934,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_pingd_server_packets" lineno="61742">
+<interface name="corenet_relabelto_pingd_server_packets" lineno="62163">
 <summary>
 Relabel packets to pingd_server the packet type.
 </summary>
@@ -48324,7 +48944,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_pktcable_cops_port" lineno="61764">
+<interface name="corenet_tcp_sendrecv_pktcable_cops_port" lineno="62185">
 <summary>
 Send and receive TCP traffic on the pktcable_cops port.
 </summary>
@@ -48335,7 +48955,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_pktcable_cops_port" lineno="61779">
+<interface name="corenet_udp_send_pktcable_cops_port" lineno="62200">
 <summary>
 Send UDP traffic on the pktcable_cops port.
 </summary>
@@ -48346,7 +48966,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_pktcable_cops_port" lineno="61794">
+<interface name="corenet_dontaudit_udp_send_pktcable_cops_port" lineno="62215">
 <summary>
 Do not audit attempts to send UDP traffic on the pktcable_cops port.
 </summary>
@@ -48357,7 +48977,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_pktcable_cops_port" lineno="61809">
+<interface name="corenet_udp_receive_pktcable_cops_port" lineno="62230">
 <summary>
 Receive UDP traffic on the pktcable_cops port.
 </summary>
@@ -48368,7 +48988,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_pktcable_cops_port" lineno="61824">
+<interface name="corenet_dontaudit_udp_receive_pktcable_cops_port" lineno="62245">
 <summary>
 Do not audit attempts to receive UDP traffic on the pktcable_cops port.
 </summary>
@@ -48379,7 +48999,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_pktcable_cops_port" lineno="61839">
+<interface name="corenet_udp_sendrecv_pktcable_cops_port" lineno="62260">
 <summary>
 Send and receive UDP traffic on the pktcable_cops port.
 </summary>
@@ -48390,7 +49010,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_pktcable_cops_port" lineno="61855">
+<interface name="corenet_dontaudit_udp_sendrecv_pktcable_cops_port" lineno="62276">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the pktcable_cops port.
@@ -48402,7 +49022,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_pktcable_cops_port" lineno="61870">
+<interface name="corenet_tcp_bind_pktcable_cops_port" lineno="62291">
 <summary>
 Bind TCP sockets to the pktcable_cops port.
 </summary>
@@ -48413,7 +49033,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_pktcable_cops_port" lineno="61890">
+<interface name="corenet_udp_bind_pktcable_cops_port" lineno="62311">
 <summary>
 Bind UDP sockets to the pktcable_cops port.
 </summary>
@@ -48424,7 +49044,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_pktcable_cops_port" lineno="61909">
+<interface name="corenet_tcp_connect_pktcable_cops_port" lineno="62330">
 <summary>
 Make a TCP connection to the pktcable_cops port.
 </summary>
@@ -48434,7 +49054,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_pktcable_cops_client_packets" lineno="61929">
+<interface name="corenet_send_pktcable_cops_client_packets" lineno="62350">
 <summary>
 Send pktcable_cops_client packets.
 </summary>
@@ -48445,7 +49065,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_pktcable_cops_client_packets" lineno="61948">
+<interface name="corenet_dontaudit_send_pktcable_cops_client_packets" lineno="62369">
 <summary>
 Do not audit attempts to send pktcable_cops_client packets.
 </summary>
@@ -48456,7 +49076,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_pktcable_cops_client_packets" lineno="61967">
+<interface name="corenet_receive_pktcable_cops_client_packets" lineno="62388">
 <summary>
 Receive pktcable_cops_client packets.
 </summary>
@@ -48467,7 +49087,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_pktcable_cops_client_packets" lineno="61986">
+<interface name="corenet_dontaudit_receive_pktcable_cops_client_packets" lineno="62407">
 <summary>
 Do not audit attempts to receive pktcable_cops_client packets.
 </summary>
@@ -48478,7 +49098,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_pktcable_cops_client_packets" lineno="62005">
+<interface name="corenet_sendrecv_pktcable_cops_client_packets" lineno="62426">
 <summary>
 Send and receive pktcable_cops_client packets.
 </summary>
@@ -48489,7 +49109,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_pktcable_cops_client_packets" lineno="62021">
+<interface name="corenet_dontaudit_sendrecv_pktcable_cops_client_packets" lineno="62442">
 <summary>
 Do not audit attempts to send and receive pktcable_cops_client packets.
 </summary>
@@ -48500,7 +49120,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_pktcable_cops_client_packets" lineno="62036">
+<interface name="corenet_relabelto_pktcable_cops_client_packets" lineno="62457">
 <summary>
 Relabel packets to pktcable_cops_client the packet type.
 </summary>
@@ -48510,7 +49130,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_pktcable_cops_server_packets" lineno="62056">
+<interface name="corenet_send_pktcable_cops_server_packets" lineno="62477">
 <summary>
 Send pktcable_cops_server packets.
 </summary>
@@ -48521,7 +49141,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_pktcable_cops_server_packets" lineno="62075">
+<interface name="corenet_dontaudit_send_pktcable_cops_server_packets" lineno="62496">
 <summary>
 Do not audit attempts to send pktcable_cops_server packets.
 </summary>
@@ -48532,7 +49152,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_pktcable_cops_server_packets" lineno="62094">
+<interface name="corenet_receive_pktcable_cops_server_packets" lineno="62515">
 <summary>
 Receive pktcable_cops_server packets.
 </summary>
@@ -48543,7 +49163,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_pktcable_cops_server_packets" lineno="62113">
+<interface name="corenet_dontaudit_receive_pktcable_cops_server_packets" lineno="62534">
 <summary>
 Do not audit attempts to receive pktcable_cops_server packets.
 </summary>
@@ -48554,7 +49174,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_pktcable_cops_server_packets" lineno="62132">
+<interface name="corenet_sendrecv_pktcable_cops_server_packets" lineno="62553">
 <summary>
 Send and receive pktcable_cops_server packets.
 </summary>
@@ -48565,7 +49185,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_pktcable_cops_server_packets" lineno="62148">
+<interface name="corenet_dontaudit_sendrecv_pktcable_cops_server_packets" lineno="62569">
 <summary>
 Do not audit attempts to send and receive pktcable_cops_server packets.
 </summary>
@@ -48576,7 +49196,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_pktcable_cops_server_packets" lineno="62163">
+<interface name="corenet_relabelto_pktcable_cops_server_packets" lineno="62584">
 <summary>
 Relabel packets to pktcable_cops_server the packet type.
 </summary>
@@ -48586,7 +49206,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_pop_port" lineno="62185">
+<interface name="corenet_tcp_sendrecv_pop_port" lineno="62606">
 <summary>
 Send and receive TCP traffic on the pop port.
 </summary>
@@ -48597,7 +49217,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_pop_port" lineno="62200">
+<interface name="corenet_udp_send_pop_port" lineno="62621">
 <summary>
 Send UDP traffic on the pop port.
 </summary>
@@ -48608,7 +49228,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_pop_port" lineno="62215">
+<interface name="corenet_dontaudit_udp_send_pop_port" lineno="62636">
 <summary>
 Do not audit attempts to send UDP traffic on the pop port.
 </summary>
@@ -48619,7 +49239,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_pop_port" lineno="62230">
+<interface name="corenet_udp_receive_pop_port" lineno="62651">
 <summary>
 Receive UDP traffic on the pop port.
 </summary>
@@ -48630,7 +49250,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_pop_port" lineno="62245">
+<interface name="corenet_dontaudit_udp_receive_pop_port" lineno="62666">
 <summary>
 Do not audit attempts to receive UDP traffic on the pop port.
 </summary>
@@ -48641,7 +49261,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_pop_port" lineno="62260">
+<interface name="corenet_udp_sendrecv_pop_port" lineno="62681">
 <summary>
 Send and receive UDP traffic on the pop port.
 </summary>
@@ -48652,7 +49272,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_pop_port" lineno="62276">
+<interface name="corenet_dontaudit_udp_sendrecv_pop_port" lineno="62697">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the pop port.
@@ -48664,7 +49284,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_pop_port" lineno="62291">
+<interface name="corenet_tcp_bind_pop_port" lineno="62712">
 <summary>
 Bind TCP sockets to the pop port.
 </summary>
@@ -48675,7 +49295,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_pop_port" lineno="62311">
+<interface name="corenet_udp_bind_pop_port" lineno="62732">
 <summary>
 Bind UDP sockets to the pop port.
 </summary>
@@ -48686,7 +49306,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_pop_port" lineno="62330">
+<interface name="corenet_tcp_connect_pop_port" lineno="62751">
 <summary>
 Make a TCP connection to the pop port.
 </summary>
@@ -48696,7 +49316,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_pop_client_packets" lineno="62350">
+<interface name="corenet_send_pop_client_packets" lineno="62771">
 <summary>
 Send pop_client packets.
 </summary>
@@ -48707,7 +49327,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_pop_client_packets" lineno="62369">
+<interface name="corenet_dontaudit_send_pop_client_packets" lineno="62790">
 <summary>
 Do not audit attempts to send pop_client packets.
 </summary>
@@ -48718,7 +49338,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_pop_client_packets" lineno="62388">
+<interface name="corenet_receive_pop_client_packets" lineno="62809">
 <summary>
 Receive pop_client packets.
 </summary>
@@ -48729,7 +49349,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_pop_client_packets" lineno="62407">
+<interface name="corenet_dontaudit_receive_pop_client_packets" lineno="62828">
 <summary>
 Do not audit attempts to receive pop_client packets.
 </summary>
@@ -48740,7 +49360,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_pop_client_packets" lineno="62426">
+<interface name="corenet_sendrecv_pop_client_packets" lineno="62847">
 <summary>
 Send and receive pop_client packets.
 </summary>
@@ -48751,7 +49371,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_pop_client_packets" lineno="62442">
+<interface name="corenet_dontaudit_sendrecv_pop_client_packets" lineno="62863">
 <summary>
 Do not audit attempts to send and receive pop_client packets.
 </summary>
@@ -48762,7 +49382,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_pop_client_packets" lineno="62457">
+<interface name="corenet_relabelto_pop_client_packets" lineno="62878">
 <summary>
 Relabel packets to pop_client the packet type.
 </summary>
@@ -48772,7 +49392,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_pop_server_packets" lineno="62477">
+<interface name="corenet_send_pop_server_packets" lineno="62898">
 <summary>
 Send pop_server packets.
 </summary>
@@ -48783,7 +49403,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_pop_server_packets" lineno="62496">
+<interface name="corenet_dontaudit_send_pop_server_packets" lineno="62917">
 <summary>
 Do not audit attempts to send pop_server packets.
 </summary>
@@ -48794,7 +49414,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_pop_server_packets" lineno="62515">
+<interface name="corenet_receive_pop_server_packets" lineno="62936">
 <summary>
 Receive pop_server packets.
 </summary>
@@ -48805,7 +49425,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_pop_server_packets" lineno="62534">
+<interface name="corenet_dontaudit_receive_pop_server_packets" lineno="62955">
 <summary>
 Do not audit attempts to receive pop_server packets.
 </summary>
@@ -48816,7 +49436,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_pop_server_packets" lineno="62553">
+<interface name="corenet_sendrecv_pop_server_packets" lineno="62974">
 <summary>
 Send and receive pop_server packets.
 </summary>
@@ -48827,7 +49447,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_pop_server_packets" lineno="62569">
+<interface name="corenet_dontaudit_sendrecv_pop_server_packets" lineno="62990">
 <summary>
 Do not audit attempts to send and receive pop_server packets.
 </summary>
@@ -48838,7 +49458,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_pop_server_packets" lineno="62584">
+<interface name="corenet_relabelto_pop_server_packets" lineno="63005">
 <summary>
 Relabel packets to pop_server the packet type.
 </summary>
@@ -48848,7 +49468,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_portmap_port" lineno="62606">
+<interface name="corenet_tcp_sendrecv_portmap_port" lineno="63027">
 <summary>
 Send and receive TCP traffic on the portmap port.
 </summary>
@@ -48859,7 +49479,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_portmap_port" lineno="62621">
+<interface name="corenet_udp_send_portmap_port" lineno="63042">
 <summary>
 Send UDP traffic on the portmap port.
 </summary>
@@ -48870,7 +49490,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_portmap_port" lineno="62636">
+<interface name="corenet_dontaudit_udp_send_portmap_port" lineno="63057">
 <summary>
 Do not audit attempts to send UDP traffic on the portmap port.
 </summary>
@@ -48881,7 +49501,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_portmap_port" lineno="62651">
+<interface name="corenet_udp_receive_portmap_port" lineno="63072">
 <summary>
 Receive UDP traffic on the portmap port.
 </summary>
@@ -48892,7 +49512,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_portmap_port" lineno="62666">
+<interface name="corenet_dontaudit_udp_receive_portmap_port" lineno="63087">
 <summary>
 Do not audit attempts to receive UDP traffic on the portmap port.
 </summary>
@@ -48903,7 +49523,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_portmap_port" lineno="62681">
+<interface name="corenet_udp_sendrecv_portmap_port" lineno="63102">
 <summary>
 Send and receive UDP traffic on the portmap port.
 </summary>
@@ -48914,7 +49534,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_portmap_port" lineno="62697">
+<interface name="corenet_dontaudit_udp_sendrecv_portmap_port" lineno="63118">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the portmap port.
@@ -48926,7 +49546,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_portmap_port" lineno="62712">
+<interface name="corenet_tcp_bind_portmap_port" lineno="63133">
 <summary>
 Bind TCP sockets to the portmap port.
 </summary>
@@ -48937,7 +49557,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_portmap_port" lineno="62732">
+<interface name="corenet_udp_bind_portmap_port" lineno="63153">
 <summary>
 Bind UDP sockets to the portmap port.
 </summary>
@@ -48948,7 +49568,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_portmap_port" lineno="62751">
+<interface name="corenet_tcp_connect_portmap_port" lineno="63172">
 <summary>
 Make a TCP connection to the portmap port.
 </summary>
@@ -48958,7 +49578,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_portmap_client_packets" lineno="62771">
+<interface name="corenet_send_portmap_client_packets" lineno="63192">
 <summary>
 Send portmap_client packets.
 </summary>
@@ -48969,7 +49589,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_portmap_client_packets" lineno="62790">
+<interface name="corenet_dontaudit_send_portmap_client_packets" lineno="63211">
 <summary>
 Do not audit attempts to send portmap_client packets.
 </summary>
@@ -48980,7 +49600,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_portmap_client_packets" lineno="62809">
+<interface name="corenet_receive_portmap_client_packets" lineno="63230">
 <summary>
 Receive portmap_client packets.
 </summary>
@@ -48991,7 +49611,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_portmap_client_packets" lineno="62828">
+<interface name="corenet_dontaudit_receive_portmap_client_packets" lineno="63249">
 <summary>
 Do not audit attempts to receive portmap_client packets.
 </summary>
@@ -49002,7 +49622,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_portmap_client_packets" lineno="62847">
+<interface name="corenet_sendrecv_portmap_client_packets" lineno="63268">
 <summary>
 Send and receive portmap_client packets.
 </summary>
@@ -49013,7 +49633,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_portmap_client_packets" lineno="62863">
+<interface name="corenet_dontaudit_sendrecv_portmap_client_packets" lineno="63284">
 <summary>
 Do not audit attempts to send and receive portmap_client packets.
 </summary>
@@ -49024,7 +49644,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_portmap_client_packets" lineno="62878">
+<interface name="corenet_relabelto_portmap_client_packets" lineno="63299">
 <summary>
 Relabel packets to portmap_client the packet type.
 </summary>
@@ -49034,7 +49654,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_portmap_server_packets" lineno="62898">
+<interface name="corenet_send_portmap_server_packets" lineno="63319">
 <summary>
 Send portmap_server packets.
 </summary>
@@ -49045,7 +49665,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_portmap_server_packets" lineno="62917">
+<interface name="corenet_dontaudit_send_portmap_server_packets" lineno="63338">
 <summary>
 Do not audit attempts to send portmap_server packets.
 </summary>
@@ -49056,7 +49676,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_portmap_server_packets" lineno="62936">
+<interface name="corenet_receive_portmap_server_packets" lineno="63357">
 <summary>
 Receive portmap_server packets.
 </summary>
@@ -49067,7 +49687,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_portmap_server_packets" lineno="62955">
+<interface name="corenet_dontaudit_receive_portmap_server_packets" lineno="63376">
 <summary>
 Do not audit attempts to receive portmap_server packets.
 </summary>
@@ -49078,7 +49698,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_portmap_server_packets" lineno="62974">
+<interface name="corenet_sendrecv_portmap_server_packets" lineno="63395">
 <summary>
 Send and receive portmap_server packets.
 </summary>
@@ -49089,7 +49709,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_portmap_server_packets" lineno="62990">
+<interface name="corenet_dontaudit_sendrecv_portmap_server_packets" lineno="63411">
 <summary>
 Do not audit attempts to send and receive portmap_server packets.
 </summary>
@@ -49100,7 +49720,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_portmap_server_packets" lineno="63005">
+<interface name="corenet_relabelto_portmap_server_packets" lineno="63426">
 <summary>
 Relabel packets to portmap_server the packet type.
 </summary>
@@ -49110,7 +49730,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_postfix_policyd_port" lineno="63027">
+<interface name="corenet_tcp_sendrecv_postfix_policyd_port" lineno="63448">
 <summary>
 Send and receive TCP traffic on the postfix_policyd port.
 </summary>
@@ -49121,7 +49741,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_postfix_policyd_port" lineno="63042">
+<interface name="corenet_udp_send_postfix_policyd_port" lineno="63463">
 <summary>
 Send UDP traffic on the postfix_policyd port.
 </summary>
@@ -49132,7 +49752,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_postfix_policyd_port" lineno="63057">
+<interface name="corenet_dontaudit_udp_send_postfix_policyd_port" lineno="63478">
 <summary>
 Do not audit attempts to send UDP traffic on the postfix_policyd port.
 </summary>
@@ -49143,7 +49763,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_postfix_policyd_port" lineno="63072">
+<interface name="corenet_udp_receive_postfix_policyd_port" lineno="63493">
 <summary>
 Receive UDP traffic on the postfix_policyd port.
 </summary>
@@ -49154,7 +49774,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_postfix_policyd_port" lineno="63087">
+<interface name="corenet_dontaudit_udp_receive_postfix_policyd_port" lineno="63508">
 <summary>
 Do not audit attempts to receive UDP traffic on the postfix_policyd port.
 </summary>
@@ -49165,7 +49785,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_postfix_policyd_port" lineno="63102">
+<interface name="corenet_udp_sendrecv_postfix_policyd_port" lineno="63523">
 <summary>
 Send and receive UDP traffic on the postfix_policyd port.
 </summary>
@@ -49176,7 +49796,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_postfix_policyd_port" lineno="63118">
+<interface name="corenet_dontaudit_udp_sendrecv_postfix_policyd_port" lineno="63539">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the postfix_policyd port.
@@ -49188,7 +49808,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_postfix_policyd_port" lineno="63133">
+<interface name="corenet_tcp_bind_postfix_policyd_port" lineno="63554">
 <summary>
 Bind TCP sockets to the postfix_policyd port.
 </summary>
@@ -49199,7 +49819,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_postfix_policyd_port" lineno="63153">
+<interface name="corenet_udp_bind_postfix_policyd_port" lineno="63574">
 <summary>
 Bind UDP sockets to the postfix_policyd port.
 </summary>
@@ -49210,7 +49830,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_postfix_policyd_port" lineno="63172">
+<interface name="corenet_tcp_connect_postfix_policyd_port" lineno="63593">
 <summary>
 Make a TCP connection to the postfix_policyd port.
 </summary>
@@ -49220,7 +49840,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_postfix_policyd_client_packets" lineno="63192">
+<interface name="corenet_send_postfix_policyd_client_packets" lineno="63613">
 <summary>
 Send postfix_policyd_client packets.
 </summary>
@@ -49231,7 +49851,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_postfix_policyd_client_packets" lineno="63211">
+<interface name="corenet_dontaudit_send_postfix_policyd_client_packets" lineno="63632">
 <summary>
 Do not audit attempts to send postfix_policyd_client packets.
 </summary>
@@ -49242,7 +49862,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_postfix_policyd_client_packets" lineno="63230">
+<interface name="corenet_receive_postfix_policyd_client_packets" lineno="63651">
 <summary>
 Receive postfix_policyd_client packets.
 </summary>
@@ -49253,7 +49873,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_postfix_policyd_client_packets" lineno="63249">
+<interface name="corenet_dontaudit_receive_postfix_policyd_client_packets" lineno="63670">
 <summary>
 Do not audit attempts to receive postfix_policyd_client packets.
 </summary>
@@ -49264,7 +49884,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_postfix_policyd_client_packets" lineno="63268">
+<interface name="corenet_sendrecv_postfix_policyd_client_packets" lineno="63689">
 <summary>
 Send and receive postfix_policyd_client packets.
 </summary>
@@ -49275,7 +49895,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_postfix_policyd_client_packets" lineno="63284">
+<interface name="corenet_dontaudit_sendrecv_postfix_policyd_client_packets" lineno="63705">
 <summary>
 Do not audit attempts to send and receive postfix_policyd_client packets.
 </summary>
@@ -49286,7 +49906,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_postfix_policyd_client_packets" lineno="63299">
+<interface name="corenet_relabelto_postfix_policyd_client_packets" lineno="63720">
 <summary>
 Relabel packets to postfix_policyd_client the packet type.
 </summary>
@@ -49296,7 +49916,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_postfix_policyd_server_packets" lineno="63319">
+<interface name="corenet_send_postfix_policyd_server_packets" lineno="63740">
 <summary>
 Send postfix_policyd_server packets.
 </summary>
@@ -49307,7 +49927,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_postfix_policyd_server_packets" lineno="63338">
+<interface name="corenet_dontaudit_send_postfix_policyd_server_packets" lineno="63759">
 <summary>
 Do not audit attempts to send postfix_policyd_server packets.
 </summary>
@@ -49318,7 +49938,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_postfix_policyd_server_packets" lineno="63357">
+<interface name="corenet_receive_postfix_policyd_server_packets" lineno="63778">
 <summary>
 Receive postfix_policyd_server packets.
 </summary>
@@ -49329,7 +49949,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_postfix_policyd_server_packets" lineno="63376">
+<interface name="corenet_dontaudit_receive_postfix_policyd_server_packets" lineno="63797">
 <summary>
 Do not audit attempts to receive postfix_policyd_server packets.
 </summary>
@@ -49340,7 +49960,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_postfix_policyd_server_packets" lineno="63395">
+<interface name="corenet_sendrecv_postfix_policyd_server_packets" lineno="63816">
 <summary>
 Send and receive postfix_policyd_server packets.
 </summary>
@@ -49351,7 +49971,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_postfix_policyd_server_packets" lineno="63411">
+<interface name="corenet_dontaudit_sendrecv_postfix_policyd_server_packets" lineno="63832">
 <summary>
 Do not audit attempts to send and receive postfix_policyd_server packets.
 </summary>
@@ -49362,7 +49982,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_postfix_policyd_server_packets" lineno="63426">
+<interface name="corenet_relabelto_postfix_policyd_server_packets" lineno="63847">
 <summary>
 Relabel packets to postfix_policyd_server the packet type.
 </summary>
@@ -49372,7 +49992,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_postgresql_port" lineno="63448">
+<interface name="corenet_tcp_sendrecv_postgresql_port" lineno="63869">
 <summary>
 Send and receive TCP traffic on the postgresql port.
 </summary>
@@ -49383,7 +50003,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_postgresql_port" lineno="63463">
+<interface name="corenet_udp_send_postgresql_port" lineno="63884">
 <summary>
 Send UDP traffic on the postgresql port.
 </summary>
@@ -49394,7 +50014,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_postgresql_port" lineno="63478">
+<interface name="corenet_dontaudit_udp_send_postgresql_port" lineno="63899">
 <summary>
 Do not audit attempts to send UDP traffic on the postgresql port.
 </summary>
@@ -49405,7 +50025,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_postgresql_port" lineno="63493">
+<interface name="corenet_udp_receive_postgresql_port" lineno="63914">
 <summary>
 Receive UDP traffic on the postgresql port.
 </summary>
@@ -49416,7 +50036,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_postgresql_port" lineno="63508">
+<interface name="corenet_dontaudit_udp_receive_postgresql_port" lineno="63929">
 <summary>
 Do not audit attempts to receive UDP traffic on the postgresql port.
 </summary>
@@ -49427,7 +50047,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_postgresql_port" lineno="63523">
+<interface name="corenet_udp_sendrecv_postgresql_port" lineno="63944">
 <summary>
 Send and receive UDP traffic on the postgresql port.
 </summary>
@@ -49438,7 +50058,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_postgresql_port" lineno="63539">
+<interface name="corenet_dontaudit_udp_sendrecv_postgresql_port" lineno="63960">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the postgresql port.
@@ -49450,7 +50070,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_postgresql_port" lineno="63554">
+<interface name="corenet_tcp_bind_postgresql_port" lineno="63975">
 <summary>
 Bind TCP sockets to the postgresql port.
 </summary>
@@ -49461,7 +50081,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_postgresql_port" lineno="63574">
+<interface name="corenet_udp_bind_postgresql_port" lineno="63995">
 <summary>
 Bind UDP sockets to the postgresql port.
 </summary>
@@ -49472,7 +50092,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_postgresql_port" lineno="63593">
+<interface name="corenet_tcp_connect_postgresql_port" lineno="64014">
 <summary>
 Make a TCP connection to the postgresql port.
 </summary>
@@ -49482,7 +50102,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_postgresql_client_packets" lineno="63613">
+<interface name="corenet_send_postgresql_client_packets" lineno="64034">
 <summary>
 Send postgresql_client packets.
 </summary>
@@ -49493,7 +50113,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_postgresql_client_packets" lineno="63632">
+<interface name="corenet_dontaudit_send_postgresql_client_packets" lineno="64053">
 <summary>
 Do not audit attempts to send postgresql_client packets.
 </summary>
@@ -49504,7 +50124,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_postgresql_client_packets" lineno="63651">
+<interface name="corenet_receive_postgresql_client_packets" lineno="64072">
 <summary>
 Receive postgresql_client packets.
 </summary>
@@ -49515,7 +50135,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_postgresql_client_packets" lineno="63670">
+<interface name="corenet_dontaudit_receive_postgresql_client_packets" lineno="64091">
 <summary>
 Do not audit attempts to receive postgresql_client packets.
 </summary>
@@ -49526,7 +50146,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_postgresql_client_packets" lineno="63689">
+<interface name="corenet_sendrecv_postgresql_client_packets" lineno="64110">
 <summary>
 Send and receive postgresql_client packets.
 </summary>
@@ -49537,7 +50157,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_postgresql_client_packets" lineno="63705">
+<interface name="corenet_dontaudit_sendrecv_postgresql_client_packets" lineno="64126">
 <summary>
 Do not audit attempts to send and receive postgresql_client packets.
 </summary>
@@ -49548,7 +50168,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_postgresql_client_packets" lineno="63720">
+<interface name="corenet_relabelto_postgresql_client_packets" lineno="64141">
 <summary>
 Relabel packets to postgresql_client the packet type.
 </summary>
@@ -49558,7 +50178,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_postgresql_server_packets" lineno="63740">
+<interface name="corenet_send_postgresql_server_packets" lineno="64161">
 <summary>
 Send postgresql_server packets.
 </summary>
@@ -49569,7 +50189,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_postgresql_server_packets" lineno="63759">
+<interface name="corenet_dontaudit_send_postgresql_server_packets" lineno="64180">
 <summary>
 Do not audit attempts to send postgresql_server packets.
 </summary>
@@ -49580,7 +50200,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_postgresql_server_packets" lineno="63778">
+<interface name="corenet_receive_postgresql_server_packets" lineno="64199">
 <summary>
 Receive postgresql_server packets.
 </summary>
@@ -49591,7 +50211,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_postgresql_server_packets" lineno="63797">
+<interface name="corenet_dontaudit_receive_postgresql_server_packets" lineno="64218">
 <summary>
 Do not audit attempts to receive postgresql_server packets.
 </summary>
@@ -49602,7 +50222,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_postgresql_server_packets" lineno="63816">
+<interface name="corenet_sendrecv_postgresql_server_packets" lineno="64237">
 <summary>
 Send and receive postgresql_server packets.
 </summary>
@@ -49613,7 +50233,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_postgresql_server_packets" lineno="63832">
+<interface name="corenet_dontaudit_sendrecv_postgresql_server_packets" lineno="64253">
 <summary>
 Do not audit attempts to send and receive postgresql_server packets.
 </summary>
@@ -49624,7 +50244,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_postgresql_server_packets" lineno="63847">
+<interface name="corenet_relabelto_postgresql_server_packets" lineno="64268">
 <summary>
 Relabel packets to postgresql_server the packet type.
 </summary>
@@ -49634,7 +50254,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_postgrey_port" lineno="63869">
+<interface name="corenet_tcp_sendrecv_postgrey_port" lineno="64290">
 <summary>
 Send and receive TCP traffic on the postgrey port.
 </summary>
@@ -49645,7 +50265,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_postgrey_port" lineno="63884">
+<interface name="corenet_udp_send_postgrey_port" lineno="64305">
 <summary>
 Send UDP traffic on the postgrey port.
 </summary>
@@ -49656,7 +50276,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_postgrey_port" lineno="63899">
+<interface name="corenet_dontaudit_udp_send_postgrey_port" lineno="64320">
 <summary>
 Do not audit attempts to send UDP traffic on the postgrey port.
 </summary>
@@ -49667,7 +50287,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_postgrey_port" lineno="63914">
+<interface name="corenet_udp_receive_postgrey_port" lineno="64335">
 <summary>
 Receive UDP traffic on the postgrey port.
 </summary>
@@ -49678,7 +50298,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_postgrey_port" lineno="63929">
+<interface name="corenet_dontaudit_udp_receive_postgrey_port" lineno="64350">
 <summary>
 Do not audit attempts to receive UDP traffic on the postgrey port.
 </summary>
@@ -49689,7 +50309,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_postgrey_port" lineno="63944">
+<interface name="corenet_udp_sendrecv_postgrey_port" lineno="64365">
 <summary>
 Send and receive UDP traffic on the postgrey port.
 </summary>
@@ -49700,7 +50320,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_postgrey_port" lineno="63960">
+<interface name="corenet_dontaudit_udp_sendrecv_postgrey_port" lineno="64381">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the postgrey port.
@@ -49712,7 +50332,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_postgrey_port" lineno="63975">
+<interface name="corenet_tcp_bind_postgrey_port" lineno="64396">
 <summary>
 Bind TCP sockets to the postgrey port.
 </summary>
@@ -49723,7 +50343,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_postgrey_port" lineno="63995">
+<interface name="corenet_udp_bind_postgrey_port" lineno="64416">
 <summary>
 Bind UDP sockets to the postgrey port.
 </summary>
@@ -49734,7 +50354,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_postgrey_port" lineno="64014">
+<interface name="corenet_tcp_connect_postgrey_port" lineno="64435">
 <summary>
 Make a TCP connection to the postgrey port.
 </summary>
@@ -49744,7 +50364,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_postgrey_client_packets" lineno="64034">
+<interface name="corenet_send_postgrey_client_packets" lineno="64455">
 <summary>
 Send postgrey_client packets.
 </summary>
@@ -49755,7 +50375,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_postgrey_client_packets" lineno="64053">
+<interface name="corenet_dontaudit_send_postgrey_client_packets" lineno="64474">
 <summary>
 Do not audit attempts to send postgrey_client packets.
 </summary>
@@ -49766,7 +50386,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_postgrey_client_packets" lineno="64072">
+<interface name="corenet_receive_postgrey_client_packets" lineno="64493">
 <summary>
 Receive postgrey_client packets.
 </summary>
@@ -49777,7 +50397,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_postgrey_client_packets" lineno="64091">
+<interface name="corenet_dontaudit_receive_postgrey_client_packets" lineno="64512">
 <summary>
 Do not audit attempts to receive postgrey_client packets.
 </summary>
@@ -49788,7 +50408,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_postgrey_client_packets" lineno="64110">
+<interface name="corenet_sendrecv_postgrey_client_packets" lineno="64531">
 <summary>
 Send and receive postgrey_client packets.
 </summary>
@@ -49799,7 +50419,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_postgrey_client_packets" lineno="64126">
+<interface name="corenet_dontaudit_sendrecv_postgrey_client_packets" lineno="64547">
 <summary>
 Do not audit attempts to send and receive postgrey_client packets.
 </summary>
@@ -49810,7 +50430,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_postgrey_client_packets" lineno="64141">
+<interface name="corenet_relabelto_postgrey_client_packets" lineno="64562">
 <summary>
 Relabel packets to postgrey_client the packet type.
 </summary>
@@ -49820,7 +50440,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_postgrey_server_packets" lineno="64161">
+<interface name="corenet_send_postgrey_server_packets" lineno="64582">
 <summary>
 Send postgrey_server packets.
 </summary>
@@ -49831,7 +50451,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_postgrey_server_packets" lineno="64180">
+<interface name="corenet_dontaudit_send_postgrey_server_packets" lineno="64601">
 <summary>
 Do not audit attempts to send postgrey_server packets.
 </summary>
@@ -49842,7 +50462,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_postgrey_server_packets" lineno="64199">
+<interface name="corenet_receive_postgrey_server_packets" lineno="64620">
 <summary>
 Receive postgrey_server packets.
 </summary>
@@ -49853,7 +50473,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_postgrey_server_packets" lineno="64218">
+<interface name="corenet_dontaudit_receive_postgrey_server_packets" lineno="64639">
 <summary>
 Do not audit attempts to receive postgrey_server packets.
 </summary>
@@ -49864,7 +50484,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_postgrey_server_packets" lineno="64237">
+<interface name="corenet_sendrecv_postgrey_server_packets" lineno="64658">
 <summary>
 Send and receive postgrey_server packets.
 </summary>
@@ -49875,7 +50495,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_postgrey_server_packets" lineno="64253">
+<interface name="corenet_dontaudit_sendrecv_postgrey_server_packets" lineno="64674">
 <summary>
 Do not audit attempts to send and receive postgrey_server packets.
 </summary>
@@ -49886,7 +50506,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_postgrey_server_packets" lineno="64268">
+<interface name="corenet_relabelto_postgrey_server_packets" lineno="64689">
 <summary>
 Relabel packets to postgrey_server the packet type.
 </summary>
@@ -49896,7 +50516,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_pptp_port" lineno="64290">
+<interface name="corenet_tcp_sendrecv_pptp_port" lineno="64711">
 <summary>
 Send and receive TCP traffic on the pptp port.
 </summary>
@@ -49907,7 +50527,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_pptp_port" lineno="64305">
+<interface name="corenet_udp_send_pptp_port" lineno="64726">
 <summary>
 Send UDP traffic on the pptp port.
 </summary>
@@ -49918,7 +50538,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_pptp_port" lineno="64320">
+<interface name="corenet_dontaudit_udp_send_pptp_port" lineno="64741">
 <summary>
 Do not audit attempts to send UDP traffic on the pptp port.
 </summary>
@@ -49929,7 +50549,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_pptp_port" lineno="64335">
+<interface name="corenet_udp_receive_pptp_port" lineno="64756">
 <summary>
 Receive UDP traffic on the pptp port.
 </summary>
@@ -49940,7 +50560,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_pptp_port" lineno="64350">
+<interface name="corenet_dontaudit_udp_receive_pptp_port" lineno="64771">
 <summary>
 Do not audit attempts to receive UDP traffic on the pptp port.
 </summary>
@@ -49951,7 +50571,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_pptp_port" lineno="64365">
+<interface name="corenet_udp_sendrecv_pptp_port" lineno="64786">
 <summary>
 Send and receive UDP traffic on the pptp port.
 </summary>
@@ -49962,7 +50582,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_pptp_port" lineno="64381">
+<interface name="corenet_dontaudit_udp_sendrecv_pptp_port" lineno="64802">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the pptp port.
@@ -49974,7 +50594,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_pptp_port" lineno="64396">
+<interface name="corenet_tcp_bind_pptp_port" lineno="64817">
 <summary>
 Bind TCP sockets to the pptp port.
 </summary>
@@ -49985,7 +50605,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_pptp_port" lineno="64416">
+<interface name="corenet_udp_bind_pptp_port" lineno="64837">
 <summary>
 Bind UDP sockets to the pptp port.
 </summary>
@@ -49996,7 +50616,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_pptp_port" lineno="64435">
+<interface name="corenet_tcp_connect_pptp_port" lineno="64856">
 <summary>
 Make a TCP connection to the pptp port.
 </summary>
@@ -50006,7 +50626,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_pptp_client_packets" lineno="64455">
+<interface name="corenet_send_pptp_client_packets" lineno="64876">
 <summary>
 Send pptp_client packets.
 </summary>
@@ -50017,7 +50637,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_pptp_client_packets" lineno="64474">
+<interface name="corenet_dontaudit_send_pptp_client_packets" lineno="64895">
 <summary>
 Do not audit attempts to send pptp_client packets.
 </summary>
@@ -50028,7 +50648,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_pptp_client_packets" lineno="64493">
+<interface name="corenet_receive_pptp_client_packets" lineno="64914">
 <summary>
 Receive pptp_client packets.
 </summary>
@@ -50039,7 +50659,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_pptp_client_packets" lineno="64512">
+<interface name="corenet_dontaudit_receive_pptp_client_packets" lineno="64933">
 <summary>
 Do not audit attempts to receive pptp_client packets.
 </summary>
@@ -50050,7 +50670,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_pptp_client_packets" lineno="64531">
+<interface name="corenet_sendrecv_pptp_client_packets" lineno="64952">
 <summary>
 Send and receive pptp_client packets.
 </summary>
@@ -50061,7 +50681,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_pptp_client_packets" lineno="64547">
+<interface name="corenet_dontaudit_sendrecv_pptp_client_packets" lineno="64968">
 <summary>
 Do not audit attempts to send and receive pptp_client packets.
 </summary>
@@ -50072,7 +50692,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_pptp_client_packets" lineno="64562">
+<interface name="corenet_relabelto_pptp_client_packets" lineno="64983">
 <summary>
 Relabel packets to pptp_client the packet type.
 </summary>
@@ -50082,7 +50702,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_pptp_server_packets" lineno="64582">
+<interface name="corenet_send_pptp_server_packets" lineno="65003">
 <summary>
 Send pptp_server packets.
 </summary>
@@ -50093,7 +50713,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_pptp_server_packets" lineno="64601">
+<interface name="corenet_dontaudit_send_pptp_server_packets" lineno="65022">
 <summary>
 Do not audit attempts to send pptp_server packets.
 </summary>
@@ -50104,7 +50724,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_pptp_server_packets" lineno="64620">
+<interface name="corenet_receive_pptp_server_packets" lineno="65041">
 <summary>
 Receive pptp_server packets.
 </summary>
@@ -50115,7 +50735,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_pptp_server_packets" lineno="64639">
+<interface name="corenet_dontaudit_receive_pptp_server_packets" lineno="65060">
 <summary>
 Do not audit attempts to receive pptp_server packets.
 </summary>
@@ -50126,7 +50746,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_pptp_server_packets" lineno="64658">
+<interface name="corenet_sendrecv_pptp_server_packets" lineno="65079">
 <summary>
 Send and receive pptp_server packets.
 </summary>
@@ -50137,7 +50757,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_pptp_server_packets" lineno="64674">
+<interface name="corenet_dontaudit_sendrecv_pptp_server_packets" lineno="65095">
 <summary>
 Do not audit attempts to send and receive pptp_server packets.
 </summary>
@@ -50148,7 +50768,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_pptp_server_packets" lineno="64689">
+<interface name="corenet_relabelto_pptp_server_packets" lineno="65110">
 <summary>
 Relabel packets to pptp_server the packet type.
 </summary>
@@ -50158,7 +50778,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_prelude_port" lineno="64711">
+<interface name="corenet_tcp_sendrecv_prelude_port" lineno="65132">
 <summary>
 Send and receive TCP traffic on the prelude port.
 </summary>
@@ -50169,7 +50789,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_prelude_port" lineno="64726">
+<interface name="corenet_udp_send_prelude_port" lineno="65147">
 <summary>
 Send UDP traffic on the prelude port.
 </summary>
@@ -50180,7 +50800,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_prelude_port" lineno="64741">
+<interface name="corenet_dontaudit_udp_send_prelude_port" lineno="65162">
 <summary>
 Do not audit attempts to send UDP traffic on the prelude port.
 </summary>
@@ -50191,7 +50811,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_prelude_port" lineno="64756">
+<interface name="corenet_udp_receive_prelude_port" lineno="65177">
 <summary>
 Receive UDP traffic on the prelude port.
 </summary>
@@ -50202,7 +50822,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_prelude_port" lineno="64771">
+<interface name="corenet_dontaudit_udp_receive_prelude_port" lineno="65192">
 <summary>
 Do not audit attempts to receive UDP traffic on the prelude port.
 </summary>
@@ -50213,7 +50833,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_prelude_port" lineno="64786">
+<interface name="corenet_udp_sendrecv_prelude_port" lineno="65207">
 <summary>
 Send and receive UDP traffic on the prelude port.
 </summary>
@@ -50224,7 +50844,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_prelude_port" lineno="64802">
+<interface name="corenet_dontaudit_udp_sendrecv_prelude_port" lineno="65223">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the prelude port.
@@ -50236,7 +50856,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_prelude_port" lineno="64817">
+<interface name="corenet_tcp_bind_prelude_port" lineno="65238">
 <summary>
 Bind TCP sockets to the prelude port.
 </summary>
@@ -50247,7 +50867,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_prelude_port" lineno="64837">
+<interface name="corenet_udp_bind_prelude_port" lineno="65258">
 <summary>
 Bind UDP sockets to the prelude port.
 </summary>
@@ -50258,7 +50878,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_prelude_port" lineno="64856">
+<interface name="corenet_tcp_connect_prelude_port" lineno="65277">
 <summary>
 Make a TCP connection to the prelude port.
 </summary>
@@ -50268,7 +50888,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_prelude_client_packets" lineno="64876">
+<interface name="corenet_send_prelude_client_packets" lineno="65297">
 <summary>
 Send prelude_client packets.
 </summary>
@@ -50279,7 +50899,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_prelude_client_packets" lineno="64895">
+<interface name="corenet_dontaudit_send_prelude_client_packets" lineno="65316">
 <summary>
 Do not audit attempts to send prelude_client packets.
 </summary>
@@ -50290,7 +50910,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_prelude_client_packets" lineno="64914">
+<interface name="corenet_receive_prelude_client_packets" lineno="65335">
 <summary>
 Receive prelude_client packets.
 </summary>
@@ -50301,7 +50921,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_prelude_client_packets" lineno="64933">
+<interface name="corenet_dontaudit_receive_prelude_client_packets" lineno="65354">
 <summary>
 Do not audit attempts to receive prelude_client packets.
 </summary>
@@ -50312,7 +50932,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_prelude_client_packets" lineno="64952">
+<interface name="corenet_sendrecv_prelude_client_packets" lineno="65373">
 <summary>
 Send and receive prelude_client packets.
 </summary>
@@ -50323,7 +50943,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_prelude_client_packets" lineno="64968">
+<interface name="corenet_dontaudit_sendrecv_prelude_client_packets" lineno="65389">
 <summary>
 Do not audit attempts to send and receive prelude_client packets.
 </summary>
@@ -50334,7 +50954,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_prelude_client_packets" lineno="64983">
+<interface name="corenet_relabelto_prelude_client_packets" lineno="65404">
 <summary>
 Relabel packets to prelude_client the packet type.
 </summary>
@@ -50344,7 +50964,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_prelude_server_packets" lineno="65003">
+<interface name="corenet_send_prelude_server_packets" lineno="65424">
 <summary>
 Send prelude_server packets.
 </summary>
@@ -50355,7 +50975,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_prelude_server_packets" lineno="65022">
+<interface name="corenet_dontaudit_send_prelude_server_packets" lineno="65443">
 <summary>
 Do not audit attempts to send prelude_server packets.
 </summary>
@@ -50366,7 +50986,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_prelude_server_packets" lineno="65041">
+<interface name="corenet_receive_prelude_server_packets" lineno="65462">
 <summary>
 Receive prelude_server packets.
 </summary>
@@ -50377,7 +50997,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_prelude_server_packets" lineno="65060">
+<interface name="corenet_dontaudit_receive_prelude_server_packets" lineno="65481">
 <summary>
 Do not audit attempts to receive prelude_server packets.
 </summary>
@@ -50388,7 +51008,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_prelude_server_packets" lineno="65079">
+<interface name="corenet_sendrecv_prelude_server_packets" lineno="65500">
 <summary>
 Send and receive prelude_server packets.
 </summary>
@@ -50399,7 +51019,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_prelude_server_packets" lineno="65095">
+<interface name="corenet_dontaudit_sendrecv_prelude_server_packets" lineno="65516">
 <summary>
 Do not audit attempts to send and receive prelude_server packets.
 </summary>
@@ -50410,7 +51030,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_prelude_server_packets" lineno="65110">
+<interface name="corenet_relabelto_prelude_server_packets" lineno="65531">
 <summary>
 Relabel packets to prelude_server the packet type.
 </summary>
@@ -50420,7 +51040,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_presence_port" lineno="65132">
+<interface name="corenet_tcp_sendrecv_presence_port" lineno="65553">
 <summary>
 Send and receive TCP traffic on the presence port.
 </summary>
@@ -50431,7 +51051,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_presence_port" lineno="65147">
+<interface name="corenet_udp_send_presence_port" lineno="65568">
 <summary>
 Send UDP traffic on the presence port.
 </summary>
@@ -50442,7 +51062,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_presence_port" lineno="65162">
+<interface name="corenet_dontaudit_udp_send_presence_port" lineno="65583">
 <summary>
 Do not audit attempts to send UDP traffic on the presence port.
 </summary>
@@ -50453,7 +51073,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_presence_port" lineno="65177">
+<interface name="corenet_udp_receive_presence_port" lineno="65598">
 <summary>
 Receive UDP traffic on the presence port.
 </summary>
@@ -50464,7 +51084,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_presence_port" lineno="65192">
+<interface name="corenet_dontaudit_udp_receive_presence_port" lineno="65613">
 <summary>
 Do not audit attempts to receive UDP traffic on the presence port.
 </summary>
@@ -50475,7 +51095,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_presence_port" lineno="65207">
+<interface name="corenet_udp_sendrecv_presence_port" lineno="65628">
 <summary>
 Send and receive UDP traffic on the presence port.
 </summary>
@@ -50486,7 +51106,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_presence_port" lineno="65223">
+<interface name="corenet_dontaudit_udp_sendrecv_presence_port" lineno="65644">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the presence port.
@@ -50498,7 +51118,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_presence_port" lineno="65238">
+<interface name="corenet_tcp_bind_presence_port" lineno="65659">
 <summary>
 Bind TCP sockets to the presence port.
 </summary>
@@ -50509,7 +51129,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_presence_port" lineno="65258">
+<interface name="corenet_udp_bind_presence_port" lineno="65679">
 <summary>
 Bind UDP sockets to the presence port.
 </summary>
@@ -50520,7 +51140,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_presence_port" lineno="65277">
+<interface name="corenet_tcp_connect_presence_port" lineno="65698">
 <summary>
 Make a TCP connection to the presence port.
 </summary>
@@ -50530,7 +51150,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_presence_client_packets" lineno="65297">
+<interface name="corenet_send_presence_client_packets" lineno="65718">
 <summary>
 Send presence_client packets.
 </summary>
@@ -50541,7 +51161,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_presence_client_packets" lineno="65316">
+<interface name="corenet_dontaudit_send_presence_client_packets" lineno="65737">
 <summary>
 Do not audit attempts to send presence_client packets.
 </summary>
@@ -50552,7 +51172,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_presence_client_packets" lineno="65335">
+<interface name="corenet_receive_presence_client_packets" lineno="65756">
 <summary>
 Receive presence_client packets.
 </summary>
@@ -50563,7 +51183,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_presence_client_packets" lineno="65354">
+<interface name="corenet_dontaudit_receive_presence_client_packets" lineno="65775">
 <summary>
 Do not audit attempts to receive presence_client packets.
 </summary>
@@ -50574,7 +51194,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_presence_client_packets" lineno="65373">
+<interface name="corenet_sendrecv_presence_client_packets" lineno="65794">
 <summary>
 Send and receive presence_client packets.
 </summary>
@@ -50585,7 +51205,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_presence_client_packets" lineno="65389">
+<interface name="corenet_dontaudit_sendrecv_presence_client_packets" lineno="65810">
 <summary>
 Do not audit attempts to send and receive presence_client packets.
 </summary>
@@ -50596,7 +51216,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_presence_client_packets" lineno="65404">
+<interface name="corenet_relabelto_presence_client_packets" lineno="65825">
 <summary>
 Relabel packets to presence_client the packet type.
 </summary>
@@ -50606,7 +51226,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_presence_server_packets" lineno="65424">
+<interface name="corenet_send_presence_server_packets" lineno="65845">
 <summary>
 Send presence_server packets.
 </summary>
@@ -50617,7 +51237,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_presence_server_packets" lineno="65443">
+<interface name="corenet_dontaudit_send_presence_server_packets" lineno="65864">
 <summary>
 Do not audit attempts to send presence_server packets.
 </summary>
@@ -50628,7 +51248,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_presence_server_packets" lineno="65462">
+<interface name="corenet_receive_presence_server_packets" lineno="65883">
 <summary>
 Receive presence_server packets.
 </summary>
@@ -50639,7 +51259,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_presence_server_packets" lineno="65481">
+<interface name="corenet_dontaudit_receive_presence_server_packets" lineno="65902">
 <summary>
 Do not audit attempts to receive presence_server packets.
 </summary>
@@ -50650,7 +51270,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_presence_server_packets" lineno="65500">
+<interface name="corenet_sendrecv_presence_server_packets" lineno="65921">
 <summary>
 Send and receive presence_server packets.
 </summary>
@@ -50661,7 +51281,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_presence_server_packets" lineno="65516">
+<interface name="corenet_dontaudit_sendrecv_presence_server_packets" lineno="65937">
 <summary>
 Do not audit attempts to send and receive presence_server packets.
 </summary>
@@ -50672,7 +51292,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_presence_server_packets" lineno="65531">
+<interface name="corenet_relabelto_presence_server_packets" lineno="65952">
 <summary>
 Relabel packets to presence_server the packet type.
 </summary>
@@ -50682,7 +51302,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_printer_port" lineno="65553">
+<interface name="corenet_tcp_sendrecv_printer_port" lineno="65974">
 <summary>
 Send and receive TCP traffic on the printer port.
 </summary>
@@ -50693,7 +51313,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_printer_port" lineno="65568">
+<interface name="corenet_udp_send_printer_port" lineno="65989">
 <summary>
 Send UDP traffic on the printer port.
 </summary>
@@ -50704,7 +51324,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_printer_port" lineno="65583">
+<interface name="corenet_dontaudit_udp_send_printer_port" lineno="66004">
 <summary>
 Do not audit attempts to send UDP traffic on the printer port.
 </summary>
@@ -50715,7 +51335,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_printer_port" lineno="65598">
+<interface name="corenet_udp_receive_printer_port" lineno="66019">
 <summary>
 Receive UDP traffic on the printer port.
 </summary>
@@ -50726,7 +51346,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_printer_port" lineno="65613">
+<interface name="corenet_dontaudit_udp_receive_printer_port" lineno="66034">
 <summary>
 Do not audit attempts to receive UDP traffic on the printer port.
 </summary>
@@ -50737,7 +51357,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_printer_port" lineno="65628">
+<interface name="corenet_udp_sendrecv_printer_port" lineno="66049">
 <summary>
 Send and receive UDP traffic on the printer port.
 </summary>
@@ -50748,7 +51368,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_printer_port" lineno="65644">
+<interface name="corenet_dontaudit_udp_sendrecv_printer_port" lineno="66065">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the printer port.
@@ -50760,7 +51380,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_printer_port" lineno="65659">
+<interface name="corenet_tcp_bind_printer_port" lineno="66080">
 <summary>
 Bind TCP sockets to the printer port.
 </summary>
@@ -50771,7 +51391,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_printer_port" lineno="65679">
+<interface name="corenet_udp_bind_printer_port" lineno="66100">
 <summary>
 Bind UDP sockets to the printer port.
 </summary>
@@ -50782,7 +51402,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_printer_port" lineno="65698">
+<interface name="corenet_tcp_connect_printer_port" lineno="66119">
 <summary>
 Make a TCP connection to the printer port.
 </summary>
@@ -50792,7 +51412,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_printer_client_packets" lineno="65718">
+<interface name="corenet_send_printer_client_packets" lineno="66139">
 <summary>
 Send printer_client packets.
 </summary>
@@ -50803,7 +51423,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_printer_client_packets" lineno="65737">
+<interface name="corenet_dontaudit_send_printer_client_packets" lineno="66158">
 <summary>
 Do not audit attempts to send printer_client packets.
 </summary>
@@ -50814,7 +51434,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_printer_client_packets" lineno="65756">
+<interface name="corenet_receive_printer_client_packets" lineno="66177">
 <summary>
 Receive printer_client packets.
 </summary>
@@ -50825,7 +51445,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_printer_client_packets" lineno="65775">
+<interface name="corenet_dontaudit_receive_printer_client_packets" lineno="66196">
 <summary>
 Do not audit attempts to receive printer_client packets.
 </summary>
@@ -50836,7 +51456,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_printer_client_packets" lineno="65794">
+<interface name="corenet_sendrecv_printer_client_packets" lineno="66215">
 <summary>
 Send and receive printer_client packets.
 </summary>
@@ -50847,7 +51467,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_printer_client_packets" lineno="65810">
+<interface name="corenet_dontaudit_sendrecv_printer_client_packets" lineno="66231">
 <summary>
 Do not audit attempts to send and receive printer_client packets.
 </summary>
@@ -50858,7 +51478,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_printer_client_packets" lineno="65825">
+<interface name="corenet_relabelto_printer_client_packets" lineno="66246">
 <summary>
 Relabel packets to printer_client the packet type.
 </summary>
@@ -50868,7 +51488,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_printer_server_packets" lineno="65845">
+<interface name="corenet_send_printer_server_packets" lineno="66266">
 <summary>
 Send printer_server packets.
 </summary>
@@ -50879,7 +51499,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_printer_server_packets" lineno="65864">
+<interface name="corenet_dontaudit_send_printer_server_packets" lineno="66285">
 <summary>
 Do not audit attempts to send printer_server packets.
 </summary>
@@ -50890,7 +51510,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_printer_server_packets" lineno="65883">
+<interface name="corenet_receive_printer_server_packets" lineno="66304">
 <summary>
 Receive printer_server packets.
 </summary>
@@ -50901,7 +51521,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_printer_server_packets" lineno="65902">
+<interface name="corenet_dontaudit_receive_printer_server_packets" lineno="66323">
 <summary>
 Do not audit attempts to receive printer_server packets.
 </summary>
@@ -50912,7 +51532,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_printer_server_packets" lineno="65921">
+<interface name="corenet_sendrecv_printer_server_packets" lineno="66342">
 <summary>
 Send and receive printer_server packets.
 </summary>
@@ -50923,7 +51543,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_printer_server_packets" lineno="65937">
+<interface name="corenet_dontaudit_sendrecv_printer_server_packets" lineno="66358">
 <summary>
 Do not audit attempts to send and receive printer_server packets.
 </summary>
@@ -50934,7 +51554,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_printer_server_packets" lineno="65952">
+<interface name="corenet_relabelto_printer_server_packets" lineno="66373">
 <summary>
 Relabel packets to printer_server the packet type.
 </summary>
@@ -50944,7 +51564,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_ptal_port" lineno="65974">
+<interface name="corenet_tcp_sendrecv_ptal_port" lineno="66395">
 <summary>
 Send and receive TCP traffic on the ptal port.
 </summary>
@@ -50955,7 +51575,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_ptal_port" lineno="65989">
+<interface name="corenet_udp_send_ptal_port" lineno="66410">
 <summary>
 Send UDP traffic on the ptal port.
 </summary>
@@ -50966,7 +51586,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_ptal_port" lineno="66004">
+<interface name="corenet_dontaudit_udp_send_ptal_port" lineno="66425">
 <summary>
 Do not audit attempts to send UDP traffic on the ptal port.
 </summary>
@@ -50977,7 +51597,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_ptal_port" lineno="66019">
+<interface name="corenet_udp_receive_ptal_port" lineno="66440">
 <summary>
 Receive UDP traffic on the ptal port.
 </summary>
@@ -50988,7 +51608,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_ptal_port" lineno="66034">
+<interface name="corenet_dontaudit_udp_receive_ptal_port" lineno="66455">
 <summary>
 Do not audit attempts to receive UDP traffic on the ptal port.
 </summary>
@@ -50999,7 +51619,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_ptal_port" lineno="66049">
+<interface name="corenet_udp_sendrecv_ptal_port" lineno="66470">
 <summary>
 Send and receive UDP traffic on the ptal port.
 </summary>
@@ -51010,7 +51630,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_ptal_port" lineno="66065">
+<interface name="corenet_dontaudit_udp_sendrecv_ptal_port" lineno="66486">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the ptal port.
@@ -51022,7 +51642,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_ptal_port" lineno="66080">
+<interface name="corenet_tcp_bind_ptal_port" lineno="66501">
 <summary>
 Bind TCP sockets to the ptal port.
 </summary>
@@ -51033,7 +51653,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_ptal_port" lineno="66100">
+<interface name="corenet_udp_bind_ptal_port" lineno="66521">
 <summary>
 Bind UDP sockets to the ptal port.
 </summary>
@@ -51044,7 +51664,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_ptal_port" lineno="66119">
+<interface name="corenet_tcp_connect_ptal_port" lineno="66540">
 <summary>
 Make a TCP connection to the ptal port.
 </summary>
@@ -51054,7 +51674,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_ptal_client_packets" lineno="66139">
+<interface name="corenet_send_ptal_client_packets" lineno="66560">
 <summary>
 Send ptal_client packets.
 </summary>
@@ -51065,7 +51685,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_ptal_client_packets" lineno="66158">
+<interface name="corenet_dontaudit_send_ptal_client_packets" lineno="66579">
 <summary>
 Do not audit attempts to send ptal_client packets.
 </summary>
@@ -51076,7 +51696,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_ptal_client_packets" lineno="66177">
+<interface name="corenet_receive_ptal_client_packets" lineno="66598">
 <summary>
 Receive ptal_client packets.
 </summary>
@@ -51087,7 +51707,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_ptal_client_packets" lineno="66196">
+<interface name="corenet_dontaudit_receive_ptal_client_packets" lineno="66617">
 <summary>
 Do not audit attempts to receive ptal_client packets.
 </summary>
@@ -51098,7 +51718,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_ptal_client_packets" lineno="66215">
+<interface name="corenet_sendrecv_ptal_client_packets" lineno="66636">
 <summary>
 Send and receive ptal_client packets.
 </summary>
@@ -51109,7 +51729,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_ptal_client_packets" lineno="66231">
+<interface name="corenet_dontaudit_sendrecv_ptal_client_packets" lineno="66652">
 <summary>
 Do not audit attempts to send and receive ptal_client packets.
 </summary>
@@ -51120,7 +51740,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_ptal_client_packets" lineno="66246">
+<interface name="corenet_relabelto_ptal_client_packets" lineno="66667">
 <summary>
 Relabel packets to ptal_client the packet type.
 </summary>
@@ -51130,7 +51750,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_ptal_server_packets" lineno="66266">
+<interface name="corenet_send_ptal_server_packets" lineno="66687">
 <summary>
 Send ptal_server packets.
 </summary>
@@ -51141,7 +51761,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_ptal_server_packets" lineno="66285">
+<interface name="corenet_dontaudit_send_ptal_server_packets" lineno="66706">
 <summary>
 Do not audit attempts to send ptal_server packets.
 </summary>
@@ -51152,7 +51772,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_ptal_server_packets" lineno="66304">
+<interface name="corenet_receive_ptal_server_packets" lineno="66725">
 <summary>
 Receive ptal_server packets.
 </summary>
@@ -51163,7 +51783,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_ptal_server_packets" lineno="66323">
+<interface name="corenet_dontaudit_receive_ptal_server_packets" lineno="66744">
 <summary>
 Do not audit attempts to receive ptal_server packets.
 </summary>
@@ -51174,7 +51794,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_ptal_server_packets" lineno="66342">
+<interface name="corenet_sendrecv_ptal_server_packets" lineno="66763">
 <summary>
 Send and receive ptal_server packets.
 </summary>
@@ -51185,7 +51805,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_ptal_server_packets" lineno="66358">
+<interface name="corenet_dontaudit_sendrecv_ptal_server_packets" lineno="66779">
 <summary>
 Do not audit attempts to send and receive ptal_server packets.
 </summary>
@@ -51196,7 +51816,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_ptal_server_packets" lineno="66373">
+<interface name="corenet_relabelto_ptal_server_packets" lineno="66794">
 <summary>
 Relabel packets to ptal_server the packet type.
 </summary>
@@ -51206,7 +51826,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_pulseaudio_port" lineno="66395">
+<interface name="corenet_tcp_sendrecv_pulseaudio_port" lineno="66816">
 <summary>
 Send and receive TCP traffic on the pulseaudio port.
 </summary>
@@ -51217,7 +51837,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_pulseaudio_port" lineno="66410">
+<interface name="corenet_udp_send_pulseaudio_port" lineno="66831">
 <summary>
 Send UDP traffic on the pulseaudio port.
 </summary>
@@ -51228,7 +51848,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_pulseaudio_port" lineno="66425">
+<interface name="corenet_dontaudit_udp_send_pulseaudio_port" lineno="66846">
 <summary>
 Do not audit attempts to send UDP traffic on the pulseaudio port.
 </summary>
@@ -51239,7 +51859,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_pulseaudio_port" lineno="66440">
+<interface name="corenet_udp_receive_pulseaudio_port" lineno="66861">
 <summary>
 Receive UDP traffic on the pulseaudio port.
 </summary>
@@ -51250,7 +51870,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_pulseaudio_port" lineno="66455">
+<interface name="corenet_dontaudit_udp_receive_pulseaudio_port" lineno="66876">
 <summary>
 Do not audit attempts to receive UDP traffic on the pulseaudio port.
 </summary>
@@ -51261,7 +51881,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_pulseaudio_port" lineno="66470">
+<interface name="corenet_udp_sendrecv_pulseaudio_port" lineno="66891">
 <summary>
 Send and receive UDP traffic on the pulseaudio port.
 </summary>
@@ -51272,7 +51892,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_pulseaudio_port" lineno="66486">
+<interface name="corenet_dontaudit_udp_sendrecv_pulseaudio_port" lineno="66907">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the pulseaudio port.
@@ -51284,7 +51904,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_pulseaudio_port" lineno="66501">
+<interface name="corenet_tcp_bind_pulseaudio_port" lineno="66922">
 <summary>
 Bind TCP sockets to the pulseaudio port.
 </summary>
@@ -51295,7 +51915,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_pulseaudio_port" lineno="66521">
+<interface name="corenet_udp_bind_pulseaudio_port" lineno="66942">
 <summary>
 Bind UDP sockets to the pulseaudio port.
 </summary>
@@ -51306,7 +51926,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_pulseaudio_port" lineno="66540">
+<interface name="corenet_tcp_connect_pulseaudio_port" lineno="66961">
 <summary>
 Make a TCP connection to the pulseaudio port.
 </summary>
@@ -51316,7 +51936,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_pulseaudio_client_packets" lineno="66560">
+<interface name="corenet_send_pulseaudio_client_packets" lineno="66981">
 <summary>
 Send pulseaudio_client packets.
 </summary>
@@ -51327,7 +51947,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_pulseaudio_client_packets" lineno="66579">
+<interface name="corenet_dontaudit_send_pulseaudio_client_packets" lineno="67000">
 <summary>
 Do not audit attempts to send pulseaudio_client packets.
 </summary>
@@ -51338,7 +51958,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_pulseaudio_client_packets" lineno="66598">
+<interface name="corenet_receive_pulseaudio_client_packets" lineno="67019">
 <summary>
 Receive pulseaudio_client packets.
 </summary>
@@ -51349,7 +51969,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_pulseaudio_client_packets" lineno="66617">
+<interface name="corenet_dontaudit_receive_pulseaudio_client_packets" lineno="67038">
 <summary>
 Do not audit attempts to receive pulseaudio_client packets.
 </summary>
@@ -51360,7 +51980,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_pulseaudio_client_packets" lineno="66636">
+<interface name="corenet_sendrecv_pulseaudio_client_packets" lineno="67057">
 <summary>
 Send and receive pulseaudio_client packets.
 </summary>
@@ -51371,7 +51991,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_pulseaudio_client_packets" lineno="66652">
+<interface name="corenet_dontaudit_sendrecv_pulseaudio_client_packets" lineno="67073">
 <summary>
 Do not audit attempts to send and receive pulseaudio_client packets.
 </summary>
@@ -51382,7 +52002,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_pulseaudio_client_packets" lineno="66667">
+<interface name="corenet_relabelto_pulseaudio_client_packets" lineno="67088">
 <summary>
 Relabel packets to pulseaudio_client the packet type.
 </summary>
@@ -51392,7 +52012,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_pulseaudio_server_packets" lineno="66687">
+<interface name="corenet_send_pulseaudio_server_packets" lineno="67108">
 <summary>
 Send pulseaudio_server packets.
 </summary>
@@ -51403,7 +52023,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_pulseaudio_server_packets" lineno="66706">
+<interface name="corenet_dontaudit_send_pulseaudio_server_packets" lineno="67127">
 <summary>
 Do not audit attempts to send pulseaudio_server packets.
 </summary>
@@ -51414,7 +52034,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_pulseaudio_server_packets" lineno="66725">
+<interface name="corenet_receive_pulseaudio_server_packets" lineno="67146">
 <summary>
 Receive pulseaudio_server packets.
 </summary>
@@ -51425,7 +52045,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_pulseaudio_server_packets" lineno="66744">
+<interface name="corenet_dontaudit_receive_pulseaudio_server_packets" lineno="67165">
 <summary>
 Do not audit attempts to receive pulseaudio_server packets.
 </summary>
@@ -51436,7 +52056,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_pulseaudio_server_packets" lineno="66763">
+<interface name="corenet_sendrecv_pulseaudio_server_packets" lineno="67184">
 <summary>
 Send and receive pulseaudio_server packets.
 </summary>
@@ -51447,7 +52067,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_pulseaudio_server_packets" lineno="66779">
+<interface name="corenet_dontaudit_sendrecv_pulseaudio_server_packets" lineno="67200">
 <summary>
 Do not audit attempts to send and receive pulseaudio_server packets.
 </summary>
@@ -51458,7 +52078,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_pulseaudio_server_packets" lineno="66794">
+<interface name="corenet_relabelto_pulseaudio_server_packets" lineno="67215">
 <summary>
 Relabel packets to pulseaudio_server the packet type.
 </summary>
@@ -51468,7 +52088,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_puppet_port" lineno="66816">
+<interface name="corenet_tcp_sendrecv_puppet_port" lineno="67237">
 <summary>
 Send and receive TCP traffic on the puppet port.
 </summary>
@@ -51479,7 +52099,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_puppet_port" lineno="66831">
+<interface name="corenet_udp_send_puppet_port" lineno="67252">
 <summary>
 Send UDP traffic on the puppet port.
 </summary>
@@ -51490,7 +52110,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_puppet_port" lineno="66846">
+<interface name="corenet_dontaudit_udp_send_puppet_port" lineno="67267">
 <summary>
 Do not audit attempts to send UDP traffic on the puppet port.
 </summary>
@@ -51501,7 +52121,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_puppet_port" lineno="66861">
+<interface name="corenet_udp_receive_puppet_port" lineno="67282">
 <summary>
 Receive UDP traffic on the puppet port.
 </summary>
@@ -51512,7 +52132,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_puppet_port" lineno="66876">
+<interface name="corenet_dontaudit_udp_receive_puppet_port" lineno="67297">
 <summary>
 Do not audit attempts to receive UDP traffic on the puppet port.
 </summary>
@@ -51523,7 +52143,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_puppet_port" lineno="66891">
+<interface name="corenet_udp_sendrecv_puppet_port" lineno="67312">
 <summary>
 Send and receive UDP traffic on the puppet port.
 </summary>
@@ -51534,7 +52154,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_puppet_port" lineno="66907">
+<interface name="corenet_dontaudit_udp_sendrecv_puppet_port" lineno="67328">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the puppet port.
@@ -51546,7 +52166,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_puppet_port" lineno="66922">
+<interface name="corenet_tcp_bind_puppet_port" lineno="67343">
 <summary>
 Bind TCP sockets to the puppet port.
 </summary>
@@ -51557,7 +52177,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_puppet_port" lineno="66942">
+<interface name="corenet_udp_bind_puppet_port" lineno="67363">
 <summary>
 Bind UDP sockets to the puppet port.
 </summary>
@@ -51568,7 +52188,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_puppet_port" lineno="66961">
+<interface name="corenet_tcp_connect_puppet_port" lineno="67382">
 <summary>
 Make a TCP connection to the puppet port.
 </summary>
@@ -51578,7 +52198,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_puppet_client_packets" lineno="66981">
+<interface name="corenet_send_puppet_client_packets" lineno="67402">
 <summary>
 Send puppet_client packets.
 </summary>
@@ -51589,7 +52209,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_puppet_client_packets" lineno="67000">
+<interface name="corenet_dontaudit_send_puppet_client_packets" lineno="67421">
 <summary>
 Do not audit attempts to send puppet_client packets.
 </summary>
@@ -51600,7 +52220,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_puppet_client_packets" lineno="67019">
+<interface name="corenet_receive_puppet_client_packets" lineno="67440">
 <summary>
 Receive puppet_client packets.
 </summary>
@@ -51611,7 +52231,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_puppet_client_packets" lineno="67038">
+<interface name="corenet_dontaudit_receive_puppet_client_packets" lineno="67459">
 <summary>
 Do not audit attempts to receive puppet_client packets.
 </summary>
@@ -51622,7 +52242,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_puppet_client_packets" lineno="67057">
+<interface name="corenet_sendrecv_puppet_client_packets" lineno="67478">
 <summary>
 Send and receive puppet_client packets.
 </summary>
@@ -51633,7 +52253,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_puppet_client_packets" lineno="67073">
+<interface name="corenet_dontaudit_sendrecv_puppet_client_packets" lineno="67494">
 <summary>
 Do not audit attempts to send and receive puppet_client packets.
 </summary>
@@ -51644,7 +52264,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_puppet_client_packets" lineno="67088">
+<interface name="corenet_relabelto_puppet_client_packets" lineno="67509">
 <summary>
 Relabel packets to puppet_client the packet type.
 </summary>
@@ -51654,7 +52274,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_puppet_server_packets" lineno="67108">
+<interface name="corenet_send_puppet_server_packets" lineno="67529">
 <summary>
 Send puppet_server packets.
 </summary>
@@ -51665,7 +52285,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_puppet_server_packets" lineno="67127">
+<interface name="corenet_dontaudit_send_puppet_server_packets" lineno="67548">
 <summary>
 Do not audit attempts to send puppet_server packets.
 </summary>
@@ -51676,7 +52296,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_puppet_server_packets" lineno="67146">
+<interface name="corenet_receive_puppet_server_packets" lineno="67567">
 <summary>
 Receive puppet_server packets.
 </summary>
@@ -51687,7 +52307,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_puppet_server_packets" lineno="67165">
+<interface name="corenet_dontaudit_receive_puppet_server_packets" lineno="67586">
 <summary>
 Do not audit attempts to receive puppet_server packets.
 </summary>
@@ -51698,7 +52318,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_puppet_server_packets" lineno="67184">
+<interface name="corenet_sendrecv_puppet_server_packets" lineno="67605">
 <summary>
 Send and receive puppet_server packets.
 </summary>
@@ -51709,7 +52329,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_puppet_server_packets" lineno="67200">
+<interface name="corenet_dontaudit_sendrecv_puppet_server_packets" lineno="67621">
 <summary>
 Do not audit attempts to send and receive puppet_server packets.
 </summary>
@@ -51720,7 +52340,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_puppet_server_packets" lineno="67215">
+<interface name="corenet_relabelto_puppet_server_packets" lineno="67636">
 <summary>
 Relabel packets to puppet_server the packet type.
 </summary>
@@ -51730,7 +52350,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_puppetclient_port" lineno="67237">
+<interface name="corenet_tcp_sendrecv_puppetclient_port" lineno="67658">
 <summary>
 Send and receive TCP traffic on the puppetclient port.
 </summary>
@@ -51741,7 +52361,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_puppetclient_port" lineno="67252">
+<interface name="corenet_udp_send_puppetclient_port" lineno="67673">
 <summary>
 Send UDP traffic on the puppetclient port.
 </summary>
@@ -51752,7 +52372,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_puppetclient_port" lineno="67267">
+<interface name="corenet_dontaudit_udp_send_puppetclient_port" lineno="67688">
 <summary>
 Do not audit attempts to send UDP traffic on the puppetclient port.
 </summary>
@@ -51763,7 +52383,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_puppetclient_port" lineno="67282">
+<interface name="corenet_udp_receive_puppetclient_port" lineno="67703">
 <summary>
 Receive UDP traffic on the puppetclient port.
 </summary>
@@ -51774,7 +52394,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_puppetclient_port" lineno="67297">
+<interface name="corenet_dontaudit_udp_receive_puppetclient_port" lineno="67718">
 <summary>
 Do not audit attempts to receive UDP traffic on the puppetclient port.
 </summary>
@@ -51785,7 +52405,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_puppetclient_port" lineno="67312">
+<interface name="corenet_udp_sendrecv_puppetclient_port" lineno="67733">
 <summary>
 Send and receive UDP traffic on the puppetclient port.
 </summary>
@@ -51796,7 +52416,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_puppetclient_port" lineno="67328">
+<interface name="corenet_dontaudit_udp_sendrecv_puppetclient_port" lineno="67749">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the puppetclient port.
@@ -51808,7 +52428,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_puppetclient_port" lineno="67343">
+<interface name="corenet_tcp_bind_puppetclient_port" lineno="67764">
 <summary>
 Bind TCP sockets to the puppetclient port.
 </summary>
@@ -51819,7 +52439,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_puppetclient_port" lineno="67363">
+<interface name="corenet_udp_bind_puppetclient_port" lineno="67784">
 <summary>
 Bind UDP sockets to the puppetclient port.
 </summary>
@@ -51830,7 +52450,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_puppetclient_port" lineno="67382">
+<interface name="corenet_tcp_connect_puppetclient_port" lineno="67803">
 <summary>
 Make a TCP connection to the puppetclient port.
 </summary>
@@ -51840,7 +52460,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_puppetclient_client_packets" lineno="67402">
+<interface name="corenet_send_puppetclient_client_packets" lineno="67823">
 <summary>
 Send puppetclient_client packets.
 </summary>
@@ -51851,7 +52471,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_puppetclient_client_packets" lineno="67421">
+<interface name="corenet_dontaudit_send_puppetclient_client_packets" lineno="67842">
 <summary>
 Do not audit attempts to send puppetclient_client packets.
 </summary>
@@ -51862,7 +52482,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_puppetclient_client_packets" lineno="67440">
+<interface name="corenet_receive_puppetclient_client_packets" lineno="67861">
 <summary>
 Receive puppetclient_client packets.
 </summary>
@@ -51873,7 +52493,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_puppetclient_client_packets" lineno="67459">
+<interface name="corenet_dontaudit_receive_puppetclient_client_packets" lineno="67880">
 <summary>
 Do not audit attempts to receive puppetclient_client packets.
 </summary>
@@ -51884,7 +52504,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_puppetclient_client_packets" lineno="67478">
+<interface name="corenet_sendrecv_puppetclient_client_packets" lineno="67899">
 <summary>
 Send and receive puppetclient_client packets.
 </summary>
@@ -51895,7 +52515,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_puppetclient_client_packets" lineno="67494">
+<interface name="corenet_dontaudit_sendrecv_puppetclient_client_packets" lineno="67915">
 <summary>
 Do not audit attempts to send and receive puppetclient_client packets.
 </summary>
@@ -51906,7 +52526,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_puppetclient_client_packets" lineno="67509">
+<interface name="corenet_relabelto_puppetclient_client_packets" lineno="67930">
 <summary>
 Relabel packets to puppetclient_client the packet type.
 </summary>
@@ -51916,7 +52536,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_puppetclient_server_packets" lineno="67529">
+<interface name="corenet_send_puppetclient_server_packets" lineno="67950">
 <summary>
 Send puppetclient_server packets.
 </summary>
@@ -51927,7 +52547,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_puppetclient_server_packets" lineno="67548">
+<interface name="corenet_dontaudit_send_puppetclient_server_packets" lineno="67969">
 <summary>
 Do not audit attempts to send puppetclient_server packets.
 </summary>
@@ -51938,7 +52558,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_puppetclient_server_packets" lineno="67567">
+<interface name="corenet_receive_puppetclient_server_packets" lineno="67988">
 <summary>
 Receive puppetclient_server packets.
 </summary>
@@ -51949,7 +52569,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_puppetclient_server_packets" lineno="67586">
+<interface name="corenet_dontaudit_receive_puppetclient_server_packets" lineno="68007">
 <summary>
 Do not audit attempts to receive puppetclient_server packets.
 </summary>
@@ -51960,7 +52580,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_puppetclient_server_packets" lineno="67605">
+<interface name="corenet_sendrecv_puppetclient_server_packets" lineno="68026">
 <summary>
 Send and receive puppetclient_server packets.
 </summary>
@@ -51971,7 +52591,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_puppetclient_server_packets" lineno="67621">
+<interface name="corenet_dontaudit_sendrecv_puppetclient_server_packets" lineno="68042">
 <summary>
 Do not audit attempts to send and receive puppetclient_server packets.
 </summary>
@@ -51982,7 +52602,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_puppetclient_server_packets" lineno="67636">
+<interface name="corenet_relabelto_puppetclient_server_packets" lineno="68057">
 <summary>
 Relabel packets to puppetclient_server the packet type.
 </summary>
@@ -51992,7 +52612,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_pxe_port" lineno="67658">
+<interface name="corenet_tcp_sendrecv_pxe_port" lineno="68079">
 <summary>
 Send and receive TCP traffic on the pxe port.
 </summary>
@@ -52003,7 +52623,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_pxe_port" lineno="67673">
+<interface name="corenet_udp_send_pxe_port" lineno="68094">
 <summary>
 Send UDP traffic on the pxe port.
 </summary>
@@ -52014,7 +52634,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_pxe_port" lineno="67688">
+<interface name="corenet_dontaudit_udp_send_pxe_port" lineno="68109">
 <summary>
 Do not audit attempts to send UDP traffic on the pxe port.
 </summary>
@@ -52025,7 +52645,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_pxe_port" lineno="67703">
+<interface name="corenet_udp_receive_pxe_port" lineno="68124">
 <summary>
 Receive UDP traffic on the pxe port.
 </summary>
@@ -52036,7 +52656,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_pxe_port" lineno="67718">
+<interface name="corenet_dontaudit_udp_receive_pxe_port" lineno="68139">
 <summary>
 Do not audit attempts to receive UDP traffic on the pxe port.
 </summary>
@@ -52047,7 +52667,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_pxe_port" lineno="67733">
+<interface name="corenet_udp_sendrecv_pxe_port" lineno="68154">
 <summary>
 Send and receive UDP traffic on the pxe port.
 </summary>
@@ -52058,7 +52678,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_pxe_port" lineno="67749">
+<interface name="corenet_dontaudit_udp_sendrecv_pxe_port" lineno="68170">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the pxe port.
@@ -52070,7 +52690,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_pxe_port" lineno="67764">
+<interface name="corenet_tcp_bind_pxe_port" lineno="68185">
 <summary>
 Bind TCP sockets to the pxe port.
 </summary>
@@ -52081,7 +52701,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_pxe_port" lineno="67784">
+<interface name="corenet_udp_bind_pxe_port" lineno="68205">
 <summary>
 Bind UDP sockets to the pxe port.
 </summary>
@@ -52092,7 +52712,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_pxe_port" lineno="67803">
+<interface name="corenet_tcp_connect_pxe_port" lineno="68224">
 <summary>
 Make a TCP connection to the pxe port.
 </summary>
@@ -52102,7 +52722,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_pxe_client_packets" lineno="67823">
+<interface name="corenet_send_pxe_client_packets" lineno="68244">
 <summary>
 Send pxe_client packets.
 </summary>
@@ -52113,7 +52733,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_pxe_client_packets" lineno="67842">
+<interface name="corenet_dontaudit_send_pxe_client_packets" lineno="68263">
 <summary>
 Do not audit attempts to send pxe_client packets.
 </summary>
@@ -52124,7 +52744,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_pxe_client_packets" lineno="67861">
+<interface name="corenet_receive_pxe_client_packets" lineno="68282">
 <summary>
 Receive pxe_client packets.
 </summary>
@@ -52135,7 +52755,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_pxe_client_packets" lineno="67880">
+<interface name="corenet_dontaudit_receive_pxe_client_packets" lineno="68301">
 <summary>
 Do not audit attempts to receive pxe_client packets.
 </summary>
@@ -52146,7 +52766,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_pxe_client_packets" lineno="67899">
+<interface name="corenet_sendrecv_pxe_client_packets" lineno="68320">
 <summary>
 Send and receive pxe_client packets.
 </summary>
@@ -52157,7 +52777,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_pxe_client_packets" lineno="67915">
+<interface name="corenet_dontaudit_sendrecv_pxe_client_packets" lineno="68336">
 <summary>
 Do not audit attempts to send and receive pxe_client packets.
 </summary>
@@ -52168,7 +52788,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_pxe_client_packets" lineno="67930">
+<interface name="corenet_relabelto_pxe_client_packets" lineno="68351">
 <summary>
 Relabel packets to pxe_client the packet type.
 </summary>
@@ -52178,7 +52798,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_pxe_server_packets" lineno="67950">
+<interface name="corenet_send_pxe_server_packets" lineno="68371">
 <summary>
 Send pxe_server packets.
 </summary>
@@ -52189,7 +52809,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_pxe_server_packets" lineno="67969">
+<interface name="corenet_dontaudit_send_pxe_server_packets" lineno="68390">
 <summary>
 Do not audit attempts to send pxe_server packets.
 </summary>
@@ -52200,7 +52820,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_pxe_server_packets" lineno="67988">
+<interface name="corenet_receive_pxe_server_packets" lineno="68409">
 <summary>
 Receive pxe_server packets.
 </summary>
@@ -52211,7 +52831,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_pxe_server_packets" lineno="68007">
+<interface name="corenet_dontaudit_receive_pxe_server_packets" lineno="68428">
 <summary>
 Do not audit attempts to receive pxe_server packets.
 </summary>
@@ -52222,7 +52842,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_pxe_server_packets" lineno="68026">
+<interface name="corenet_sendrecv_pxe_server_packets" lineno="68447">
 <summary>
 Send and receive pxe_server packets.
 </summary>
@@ -52233,7 +52853,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_pxe_server_packets" lineno="68042">
+<interface name="corenet_dontaudit_sendrecv_pxe_server_packets" lineno="68463">
 <summary>
 Do not audit attempts to send and receive pxe_server packets.
 </summary>
@@ -52244,7 +52864,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_pxe_server_packets" lineno="68057">
+<interface name="corenet_relabelto_pxe_server_packets" lineno="68478">
 <summary>
 Relabel packets to pxe_server the packet type.
 </summary>
@@ -52254,7 +52874,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_pyzor_port" lineno="68079">
+<interface name="corenet_tcp_sendrecv_pyzor_port" lineno="68500">
 <summary>
 Send and receive TCP traffic on the pyzor port.
 </summary>
@@ -52265,7 +52885,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_pyzor_port" lineno="68094">
+<interface name="corenet_udp_send_pyzor_port" lineno="68515">
 <summary>
 Send UDP traffic on the pyzor port.
 </summary>
@@ -52276,7 +52896,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_pyzor_port" lineno="68109">
+<interface name="corenet_dontaudit_udp_send_pyzor_port" lineno="68530">
 <summary>
 Do not audit attempts to send UDP traffic on the pyzor port.
 </summary>
@@ -52287,7 +52907,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_pyzor_port" lineno="68124">
+<interface name="corenet_udp_receive_pyzor_port" lineno="68545">
 <summary>
 Receive UDP traffic on the pyzor port.
 </summary>
@@ -52298,7 +52918,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_pyzor_port" lineno="68139">
+<interface name="corenet_dontaudit_udp_receive_pyzor_port" lineno="68560">
 <summary>
 Do not audit attempts to receive UDP traffic on the pyzor port.
 </summary>
@@ -52309,7 +52929,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_pyzor_port" lineno="68154">
+<interface name="corenet_udp_sendrecv_pyzor_port" lineno="68575">
 <summary>
 Send and receive UDP traffic on the pyzor port.
 </summary>
@@ -52320,7 +52940,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_pyzor_port" lineno="68170">
+<interface name="corenet_dontaudit_udp_sendrecv_pyzor_port" lineno="68591">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the pyzor port.
@@ -52332,7 +52952,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_pyzor_port" lineno="68185">
+<interface name="corenet_tcp_bind_pyzor_port" lineno="68606">
 <summary>
 Bind TCP sockets to the pyzor port.
 </summary>
@@ -52343,7 +52963,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_pyzor_port" lineno="68205">
+<interface name="corenet_udp_bind_pyzor_port" lineno="68626">
 <summary>
 Bind UDP sockets to the pyzor port.
 </summary>
@@ -52354,7 +52974,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_pyzor_port" lineno="68224">
+<interface name="corenet_tcp_connect_pyzor_port" lineno="68645">
 <summary>
 Make a TCP connection to the pyzor port.
 </summary>
@@ -52364,7 +52984,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_pyzor_client_packets" lineno="68244">
+<interface name="corenet_send_pyzor_client_packets" lineno="68665">
 <summary>
 Send pyzor_client packets.
 </summary>
@@ -52375,7 +52995,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_pyzor_client_packets" lineno="68263">
+<interface name="corenet_dontaudit_send_pyzor_client_packets" lineno="68684">
 <summary>
 Do not audit attempts to send pyzor_client packets.
 </summary>
@@ -52386,7 +53006,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_pyzor_client_packets" lineno="68282">
+<interface name="corenet_receive_pyzor_client_packets" lineno="68703">
 <summary>
 Receive pyzor_client packets.
 </summary>
@@ -52397,7 +53017,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_pyzor_client_packets" lineno="68301">
+<interface name="corenet_dontaudit_receive_pyzor_client_packets" lineno="68722">
 <summary>
 Do not audit attempts to receive pyzor_client packets.
 </summary>
@@ -52408,7 +53028,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_pyzor_client_packets" lineno="68320">
+<interface name="corenet_sendrecv_pyzor_client_packets" lineno="68741">
 <summary>
 Send and receive pyzor_client packets.
 </summary>
@@ -52419,7 +53039,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_pyzor_client_packets" lineno="68336">
+<interface name="corenet_dontaudit_sendrecv_pyzor_client_packets" lineno="68757">
 <summary>
 Do not audit attempts to send and receive pyzor_client packets.
 </summary>
@@ -52430,7 +53050,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_pyzor_client_packets" lineno="68351">
+<interface name="corenet_relabelto_pyzor_client_packets" lineno="68772">
 <summary>
 Relabel packets to pyzor_client the packet type.
 </summary>
@@ -52440,7 +53060,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_pyzor_server_packets" lineno="68371">
+<interface name="corenet_send_pyzor_server_packets" lineno="68792">
 <summary>
 Send pyzor_server packets.
 </summary>
@@ -52451,7 +53071,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_pyzor_server_packets" lineno="68390">
+<interface name="corenet_dontaudit_send_pyzor_server_packets" lineno="68811">
 <summary>
 Do not audit attempts to send pyzor_server packets.
 </summary>
@@ -52462,7 +53082,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_pyzor_server_packets" lineno="68409">
+<interface name="corenet_receive_pyzor_server_packets" lineno="68830">
 <summary>
 Receive pyzor_server packets.
 </summary>
@@ -52473,7 +53093,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_pyzor_server_packets" lineno="68428">
+<interface name="corenet_dontaudit_receive_pyzor_server_packets" lineno="68849">
 <summary>
 Do not audit attempts to receive pyzor_server packets.
 </summary>
@@ -52484,7 +53104,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_pyzor_server_packets" lineno="68447">
+<interface name="corenet_sendrecv_pyzor_server_packets" lineno="68868">
 <summary>
 Send and receive pyzor_server packets.
 </summary>
@@ -52495,7 +53115,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_pyzor_server_packets" lineno="68463">
+<interface name="corenet_dontaudit_sendrecv_pyzor_server_packets" lineno="68884">
 <summary>
 Do not audit attempts to send and receive pyzor_server packets.
 </summary>
@@ -52506,7 +53126,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_pyzor_server_packets" lineno="68478">
+<interface name="corenet_relabelto_pyzor_server_packets" lineno="68899">
 <summary>
 Relabel packets to pyzor_server the packet type.
 </summary>
@@ -52516,7 +53136,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_radacct_port" lineno="68500">
+<interface name="corenet_tcp_sendrecv_radacct_port" lineno="68921">
 <summary>
 Send and receive TCP traffic on the radacct port.
 </summary>
@@ -52527,7 +53147,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_radacct_port" lineno="68515">
+<interface name="corenet_udp_send_radacct_port" lineno="68936">
 <summary>
 Send UDP traffic on the radacct port.
 </summary>
@@ -52538,7 +53158,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_radacct_port" lineno="68530">
+<interface name="corenet_dontaudit_udp_send_radacct_port" lineno="68951">
 <summary>
 Do not audit attempts to send UDP traffic on the radacct port.
 </summary>
@@ -52549,7 +53169,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_radacct_port" lineno="68545">
+<interface name="corenet_udp_receive_radacct_port" lineno="68966">
 <summary>
 Receive UDP traffic on the radacct port.
 </summary>
@@ -52560,7 +53180,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_radacct_port" lineno="68560">
+<interface name="corenet_dontaudit_udp_receive_radacct_port" lineno="68981">
 <summary>
 Do not audit attempts to receive UDP traffic on the radacct port.
 </summary>
@@ -52571,7 +53191,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_radacct_port" lineno="68575">
+<interface name="corenet_udp_sendrecv_radacct_port" lineno="68996">
 <summary>
 Send and receive UDP traffic on the radacct port.
 </summary>
@@ -52582,7 +53202,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_radacct_port" lineno="68591">
+<interface name="corenet_dontaudit_udp_sendrecv_radacct_port" lineno="69012">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the radacct port.
@@ -52594,7 +53214,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_radacct_port" lineno="68606">
+<interface name="corenet_tcp_bind_radacct_port" lineno="69027">
 <summary>
 Bind TCP sockets to the radacct port.
 </summary>
@@ -52605,7 +53225,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_radacct_port" lineno="68626">
+<interface name="corenet_udp_bind_radacct_port" lineno="69047">
 <summary>
 Bind UDP sockets to the radacct port.
 </summary>
@@ -52616,7 +53236,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_radacct_port" lineno="68645">
+<interface name="corenet_tcp_connect_radacct_port" lineno="69066">
 <summary>
 Make a TCP connection to the radacct port.
 </summary>
@@ -52626,7 +53246,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_radacct_client_packets" lineno="68665">
+<interface name="corenet_send_radacct_client_packets" lineno="69086">
 <summary>
 Send radacct_client packets.
 </summary>
@@ -52637,7 +53257,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_radacct_client_packets" lineno="68684">
+<interface name="corenet_dontaudit_send_radacct_client_packets" lineno="69105">
 <summary>
 Do not audit attempts to send radacct_client packets.
 </summary>
@@ -52648,7 +53268,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_radacct_client_packets" lineno="68703">
+<interface name="corenet_receive_radacct_client_packets" lineno="69124">
 <summary>
 Receive radacct_client packets.
 </summary>
@@ -52659,7 +53279,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_radacct_client_packets" lineno="68722">
+<interface name="corenet_dontaudit_receive_radacct_client_packets" lineno="69143">
 <summary>
 Do not audit attempts to receive radacct_client packets.
 </summary>
@@ -52670,7 +53290,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_radacct_client_packets" lineno="68741">
+<interface name="corenet_sendrecv_radacct_client_packets" lineno="69162">
 <summary>
 Send and receive radacct_client packets.
 </summary>
@@ -52681,7 +53301,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_radacct_client_packets" lineno="68757">
+<interface name="corenet_dontaudit_sendrecv_radacct_client_packets" lineno="69178">
 <summary>
 Do not audit attempts to send and receive radacct_client packets.
 </summary>
@@ -52692,7 +53312,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_radacct_client_packets" lineno="68772">
+<interface name="corenet_relabelto_radacct_client_packets" lineno="69193">
 <summary>
 Relabel packets to radacct_client the packet type.
 </summary>
@@ -52702,7 +53322,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_radacct_server_packets" lineno="68792">
+<interface name="corenet_send_radacct_server_packets" lineno="69213">
 <summary>
 Send radacct_server packets.
 </summary>
@@ -52713,7 +53333,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_radacct_server_packets" lineno="68811">
+<interface name="corenet_dontaudit_send_radacct_server_packets" lineno="69232">
 <summary>
 Do not audit attempts to send radacct_server packets.
 </summary>
@@ -52724,7 +53344,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_radacct_server_packets" lineno="68830">
+<interface name="corenet_receive_radacct_server_packets" lineno="69251">
 <summary>
 Receive radacct_server packets.
 </summary>
@@ -52735,7 +53355,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_radacct_server_packets" lineno="68849">
+<interface name="corenet_dontaudit_receive_radacct_server_packets" lineno="69270">
 <summary>
 Do not audit attempts to receive radacct_server packets.
 </summary>
@@ -52746,7 +53366,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_radacct_server_packets" lineno="68868">
+<interface name="corenet_sendrecv_radacct_server_packets" lineno="69289">
 <summary>
 Send and receive radacct_server packets.
 </summary>
@@ -52757,7 +53377,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_radacct_server_packets" lineno="68884">
+<interface name="corenet_dontaudit_sendrecv_radacct_server_packets" lineno="69305">
 <summary>
 Do not audit attempts to send and receive radacct_server packets.
 </summary>
@@ -52768,7 +53388,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_radacct_server_packets" lineno="68899">
+<interface name="corenet_relabelto_radacct_server_packets" lineno="69320">
 <summary>
 Relabel packets to radacct_server the packet type.
 </summary>
@@ -52778,7 +53398,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_radius_port" lineno="68921">
+<interface name="corenet_tcp_sendrecv_radius_port" lineno="69342">
 <summary>
 Send and receive TCP traffic on the radius port.
 </summary>
@@ -52789,7 +53409,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_radius_port" lineno="68936">
+<interface name="corenet_udp_send_radius_port" lineno="69357">
 <summary>
 Send UDP traffic on the radius port.
 </summary>
@@ -52800,7 +53420,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_radius_port" lineno="68951">
+<interface name="corenet_dontaudit_udp_send_radius_port" lineno="69372">
 <summary>
 Do not audit attempts to send UDP traffic on the radius port.
 </summary>
@@ -52811,7 +53431,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_radius_port" lineno="68966">
+<interface name="corenet_udp_receive_radius_port" lineno="69387">
 <summary>
 Receive UDP traffic on the radius port.
 </summary>
@@ -52822,7 +53442,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_radius_port" lineno="68981">
+<interface name="corenet_dontaudit_udp_receive_radius_port" lineno="69402">
 <summary>
 Do not audit attempts to receive UDP traffic on the radius port.
 </summary>
@@ -52833,7 +53453,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_radius_port" lineno="68996">
+<interface name="corenet_udp_sendrecv_radius_port" lineno="69417">
 <summary>
 Send and receive UDP traffic on the radius port.
 </summary>
@@ -52844,7 +53464,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_radius_port" lineno="69012">
+<interface name="corenet_dontaudit_udp_sendrecv_radius_port" lineno="69433">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the radius port.
@@ -52856,7 +53476,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_radius_port" lineno="69027">
+<interface name="corenet_tcp_bind_radius_port" lineno="69448">
 <summary>
 Bind TCP sockets to the radius port.
 </summary>
@@ -52867,7 +53487,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_radius_port" lineno="69047">
+<interface name="corenet_udp_bind_radius_port" lineno="69468">
 <summary>
 Bind UDP sockets to the radius port.
 </summary>
@@ -52878,7 +53498,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_radius_port" lineno="69066">
+<interface name="corenet_tcp_connect_radius_port" lineno="69487">
 <summary>
 Make a TCP connection to the radius port.
 </summary>
@@ -52888,7 +53508,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_radius_client_packets" lineno="69086">
+<interface name="corenet_send_radius_client_packets" lineno="69507">
 <summary>
 Send radius_client packets.
 </summary>
@@ -52899,7 +53519,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_radius_client_packets" lineno="69105">
+<interface name="corenet_dontaudit_send_radius_client_packets" lineno="69526">
 <summary>
 Do not audit attempts to send radius_client packets.
 </summary>
@@ -52910,7 +53530,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_radius_client_packets" lineno="69124">
+<interface name="corenet_receive_radius_client_packets" lineno="69545">
 <summary>
 Receive radius_client packets.
 </summary>
@@ -52921,7 +53541,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_radius_client_packets" lineno="69143">
+<interface name="corenet_dontaudit_receive_radius_client_packets" lineno="69564">
 <summary>
 Do not audit attempts to receive radius_client packets.
 </summary>
@@ -52932,7 +53552,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_radius_client_packets" lineno="69162">
+<interface name="corenet_sendrecv_radius_client_packets" lineno="69583">
 <summary>
 Send and receive radius_client packets.
 </summary>
@@ -52943,7 +53563,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_radius_client_packets" lineno="69178">
+<interface name="corenet_dontaudit_sendrecv_radius_client_packets" lineno="69599">
 <summary>
 Do not audit attempts to send and receive radius_client packets.
 </summary>
@@ -52954,7 +53574,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_radius_client_packets" lineno="69193">
+<interface name="corenet_relabelto_radius_client_packets" lineno="69614">
 <summary>
 Relabel packets to radius_client the packet type.
 </summary>
@@ -52964,7 +53584,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_radius_server_packets" lineno="69213">
+<interface name="corenet_send_radius_server_packets" lineno="69634">
 <summary>
 Send radius_server packets.
 </summary>
@@ -52975,7 +53595,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_radius_server_packets" lineno="69232">
+<interface name="corenet_dontaudit_send_radius_server_packets" lineno="69653">
 <summary>
 Do not audit attempts to send radius_server packets.
 </summary>
@@ -52986,7 +53606,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_radius_server_packets" lineno="69251">
+<interface name="corenet_receive_radius_server_packets" lineno="69672">
 <summary>
 Receive radius_server packets.
 </summary>
@@ -52997,7 +53617,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_radius_server_packets" lineno="69270">
+<interface name="corenet_dontaudit_receive_radius_server_packets" lineno="69691">
 <summary>
 Do not audit attempts to receive radius_server packets.
 </summary>
@@ -53008,7 +53628,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_radius_server_packets" lineno="69289">
+<interface name="corenet_sendrecv_radius_server_packets" lineno="69710">
 <summary>
 Send and receive radius_server packets.
 </summary>
@@ -53019,7 +53639,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_radius_server_packets" lineno="69305">
+<interface name="corenet_dontaudit_sendrecv_radius_server_packets" lineno="69726">
 <summary>
 Do not audit attempts to send and receive radius_server packets.
 </summary>
@@ -53030,7 +53650,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_radius_server_packets" lineno="69320">
+<interface name="corenet_relabelto_radius_server_packets" lineno="69741">
 <summary>
 Relabel packets to radius_server the packet type.
 </summary>
@@ -53040,7 +53660,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_radsec_port" lineno="69342">
+<interface name="corenet_tcp_sendrecv_radsec_port" lineno="69763">
 <summary>
 Send and receive TCP traffic on the radsec port.
 </summary>
@@ -53051,7 +53671,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_radsec_port" lineno="69357">
+<interface name="corenet_udp_send_radsec_port" lineno="69778">
 <summary>
 Send UDP traffic on the radsec port.
 </summary>
@@ -53062,7 +53682,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_radsec_port" lineno="69372">
+<interface name="corenet_dontaudit_udp_send_radsec_port" lineno="69793">
 <summary>
 Do not audit attempts to send UDP traffic on the radsec port.
 </summary>
@@ -53073,7 +53693,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_radsec_port" lineno="69387">
+<interface name="corenet_udp_receive_radsec_port" lineno="69808">
 <summary>
 Receive UDP traffic on the radsec port.
 </summary>
@@ -53084,7 +53704,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_radsec_port" lineno="69402">
+<interface name="corenet_dontaudit_udp_receive_radsec_port" lineno="69823">
 <summary>
 Do not audit attempts to receive UDP traffic on the radsec port.
 </summary>
@@ -53095,7 +53715,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_radsec_port" lineno="69417">
+<interface name="corenet_udp_sendrecv_radsec_port" lineno="69838">
 <summary>
 Send and receive UDP traffic on the radsec port.
 </summary>
@@ -53106,7 +53726,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_radsec_port" lineno="69433">
+<interface name="corenet_dontaudit_udp_sendrecv_radsec_port" lineno="69854">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the radsec port.
@@ -53118,7 +53738,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_radsec_port" lineno="69448">
+<interface name="corenet_tcp_bind_radsec_port" lineno="69869">
 <summary>
 Bind TCP sockets to the radsec port.
 </summary>
@@ -53129,7 +53749,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_radsec_port" lineno="69468">
+<interface name="corenet_udp_bind_radsec_port" lineno="69889">
 <summary>
 Bind UDP sockets to the radsec port.
 </summary>
@@ -53140,7 +53760,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_radsec_port" lineno="69487">
+<interface name="corenet_tcp_connect_radsec_port" lineno="69908">
 <summary>
 Make a TCP connection to the radsec port.
 </summary>
@@ -53150,7 +53770,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_radsec_client_packets" lineno="69507">
+<interface name="corenet_send_radsec_client_packets" lineno="69928">
 <summary>
 Send radsec_client packets.
 </summary>
@@ -53161,7 +53781,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_radsec_client_packets" lineno="69526">
+<interface name="corenet_dontaudit_send_radsec_client_packets" lineno="69947">
 <summary>
 Do not audit attempts to send radsec_client packets.
 </summary>
@@ -53172,7 +53792,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_radsec_client_packets" lineno="69545">
+<interface name="corenet_receive_radsec_client_packets" lineno="69966">
 <summary>
 Receive radsec_client packets.
 </summary>
@@ -53183,7 +53803,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_radsec_client_packets" lineno="69564">
+<interface name="corenet_dontaudit_receive_radsec_client_packets" lineno="69985">
 <summary>
 Do not audit attempts to receive radsec_client packets.
 </summary>
@@ -53194,7 +53814,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_radsec_client_packets" lineno="69583">
+<interface name="corenet_sendrecv_radsec_client_packets" lineno="70004">
 <summary>
 Send and receive radsec_client packets.
 </summary>
@@ -53205,7 +53825,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_radsec_client_packets" lineno="69599">
+<interface name="corenet_dontaudit_sendrecv_radsec_client_packets" lineno="70020">
 <summary>
 Do not audit attempts to send and receive radsec_client packets.
 </summary>
@@ -53216,7 +53836,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_radsec_client_packets" lineno="69614">
+<interface name="corenet_relabelto_radsec_client_packets" lineno="70035">
 <summary>
 Relabel packets to radsec_client the packet type.
 </summary>
@@ -53226,7 +53846,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_radsec_server_packets" lineno="69634">
+<interface name="corenet_send_radsec_server_packets" lineno="70055">
 <summary>
 Send radsec_server packets.
 </summary>
@@ -53237,7 +53857,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_radsec_server_packets" lineno="69653">
+<interface name="corenet_dontaudit_send_radsec_server_packets" lineno="70074">
 <summary>
 Do not audit attempts to send radsec_server packets.
 </summary>
@@ -53248,7 +53868,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_radsec_server_packets" lineno="69672">
+<interface name="corenet_receive_radsec_server_packets" lineno="70093">
 <summary>
 Receive radsec_server packets.
 </summary>
@@ -53259,7 +53879,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_radsec_server_packets" lineno="69691">
+<interface name="corenet_dontaudit_receive_radsec_server_packets" lineno="70112">
 <summary>
 Do not audit attempts to receive radsec_server packets.
 </summary>
@@ -53270,7 +53890,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_radsec_server_packets" lineno="69710">
+<interface name="corenet_sendrecv_radsec_server_packets" lineno="70131">
 <summary>
 Send and receive radsec_server packets.
 </summary>
@@ -53281,7 +53901,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_radsec_server_packets" lineno="69726">
+<interface name="corenet_dontaudit_sendrecv_radsec_server_packets" lineno="70147">
 <summary>
 Do not audit attempts to send and receive radsec_server packets.
 </summary>
@@ -53292,7 +53912,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_radsec_server_packets" lineno="69741">
+<interface name="corenet_relabelto_radsec_server_packets" lineno="70162">
 <summary>
 Relabel packets to radsec_server the packet type.
 </summary>
@@ -53302,7 +53922,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_razor_port" lineno="69763">
+<interface name="corenet_tcp_sendrecv_razor_port" lineno="70184">
 <summary>
 Send and receive TCP traffic on the razor port.
 </summary>
@@ -53313,7 +53933,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_razor_port" lineno="69778">
+<interface name="corenet_udp_send_razor_port" lineno="70199">
 <summary>
 Send UDP traffic on the razor port.
 </summary>
@@ -53324,7 +53944,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_razor_port" lineno="69793">
+<interface name="corenet_dontaudit_udp_send_razor_port" lineno="70214">
 <summary>
 Do not audit attempts to send UDP traffic on the razor port.
 </summary>
@@ -53335,7 +53955,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_razor_port" lineno="69808">
+<interface name="corenet_udp_receive_razor_port" lineno="70229">
 <summary>
 Receive UDP traffic on the razor port.
 </summary>
@@ -53346,7 +53966,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_razor_port" lineno="69823">
+<interface name="corenet_dontaudit_udp_receive_razor_port" lineno="70244">
 <summary>
 Do not audit attempts to receive UDP traffic on the razor port.
 </summary>
@@ -53357,7 +53977,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_razor_port" lineno="69838">
+<interface name="corenet_udp_sendrecv_razor_port" lineno="70259">
 <summary>
 Send and receive UDP traffic on the razor port.
 </summary>
@@ -53368,7 +53988,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_razor_port" lineno="69854">
+<interface name="corenet_dontaudit_udp_sendrecv_razor_port" lineno="70275">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the razor port.
@@ -53380,7 +54000,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_razor_port" lineno="69869">
+<interface name="corenet_tcp_bind_razor_port" lineno="70290">
 <summary>
 Bind TCP sockets to the razor port.
 </summary>
@@ -53391,7 +54011,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_razor_port" lineno="69889">
+<interface name="corenet_udp_bind_razor_port" lineno="70310">
 <summary>
 Bind UDP sockets to the razor port.
 </summary>
@@ -53402,7 +54022,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_razor_port" lineno="69908">
+<interface name="corenet_tcp_connect_razor_port" lineno="70329">
 <summary>
 Make a TCP connection to the razor port.
 </summary>
@@ -53412,7 +54032,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_razor_client_packets" lineno="69928">
+<interface name="corenet_send_razor_client_packets" lineno="70349">
 <summary>
 Send razor_client packets.
 </summary>
@@ -53423,7 +54043,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_razor_client_packets" lineno="69947">
+<interface name="corenet_dontaudit_send_razor_client_packets" lineno="70368">
 <summary>
 Do not audit attempts to send razor_client packets.
 </summary>
@@ -53434,7 +54054,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_razor_client_packets" lineno="69966">
+<interface name="corenet_receive_razor_client_packets" lineno="70387">
 <summary>
 Receive razor_client packets.
 </summary>
@@ -53445,7 +54065,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_razor_client_packets" lineno="69985">
+<interface name="corenet_dontaudit_receive_razor_client_packets" lineno="70406">
 <summary>
 Do not audit attempts to receive razor_client packets.
 </summary>
@@ -53456,7 +54076,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_razor_client_packets" lineno="70004">
+<interface name="corenet_sendrecv_razor_client_packets" lineno="70425">
 <summary>
 Send and receive razor_client packets.
 </summary>
@@ -53467,7 +54087,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_razor_client_packets" lineno="70020">
+<interface name="corenet_dontaudit_sendrecv_razor_client_packets" lineno="70441">
 <summary>
 Do not audit attempts to send and receive razor_client packets.
 </summary>
@@ -53478,7 +54098,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_razor_client_packets" lineno="70035">
+<interface name="corenet_relabelto_razor_client_packets" lineno="70456">
 <summary>
 Relabel packets to razor_client the packet type.
 </summary>
@@ -53488,7 +54108,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_razor_server_packets" lineno="70055">
+<interface name="corenet_send_razor_server_packets" lineno="70476">
 <summary>
 Send razor_server packets.
 </summary>
@@ -53499,7 +54119,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_razor_server_packets" lineno="70074">
+<interface name="corenet_dontaudit_send_razor_server_packets" lineno="70495">
 <summary>
 Do not audit attempts to send razor_server packets.
 </summary>
@@ -53510,7 +54130,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_razor_server_packets" lineno="70093">
+<interface name="corenet_receive_razor_server_packets" lineno="70514">
 <summary>
 Receive razor_server packets.
 </summary>
@@ -53521,7 +54141,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_razor_server_packets" lineno="70112">
+<interface name="corenet_dontaudit_receive_razor_server_packets" lineno="70533">
 <summary>
 Do not audit attempts to receive razor_server packets.
 </summary>
@@ -53532,7 +54152,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_razor_server_packets" lineno="70131">
+<interface name="corenet_sendrecv_razor_server_packets" lineno="70552">
 <summary>
 Send and receive razor_server packets.
 </summary>
@@ -53543,7 +54163,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_razor_server_packets" lineno="70147">
+<interface name="corenet_dontaudit_sendrecv_razor_server_packets" lineno="70568">
 <summary>
 Do not audit attempts to send and receive razor_server packets.
 </summary>
@@ -53554,7 +54174,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_razor_server_packets" lineno="70162">
+<interface name="corenet_relabelto_razor_server_packets" lineno="70583">
 <summary>
 Relabel packets to razor_server the packet type.
 </summary>
@@ -53564,7 +54184,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_redis_port" lineno="70184">
+<interface name="corenet_tcp_sendrecv_redis_port" lineno="70605">
 <summary>
 Send and receive TCP traffic on the redis port.
 </summary>
@@ -53575,7 +54195,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_redis_port" lineno="70199">
+<interface name="corenet_udp_send_redis_port" lineno="70620">
 <summary>
 Send UDP traffic on the redis port.
 </summary>
@@ -53586,7 +54206,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_redis_port" lineno="70214">
+<interface name="corenet_dontaudit_udp_send_redis_port" lineno="70635">
 <summary>
 Do not audit attempts to send UDP traffic on the redis port.
 </summary>
@@ -53597,7 +54217,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_redis_port" lineno="70229">
+<interface name="corenet_udp_receive_redis_port" lineno="70650">
 <summary>
 Receive UDP traffic on the redis port.
 </summary>
@@ -53608,7 +54228,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_redis_port" lineno="70244">
+<interface name="corenet_dontaudit_udp_receive_redis_port" lineno="70665">
 <summary>
 Do not audit attempts to receive UDP traffic on the redis port.
 </summary>
@@ -53619,7 +54239,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_redis_port" lineno="70259">
+<interface name="corenet_udp_sendrecv_redis_port" lineno="70680">
 <summary>
 Send and receive UDP traffic on the redis port.
 </summary>
@@ -53630,7 +54250,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_redis_port" lineno="70275">
+<interface name="corenet_dontaudit_udp_sendrecv_redis_port" lineno="70696">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the redis port.
@@ -53642,7 +54262,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_redis_port" lineno="70290">
+<interface name="corenet_tcp_bind_redis_port" lineno="70711">
 <summary>
 Bind TCP sockets to the redis port.
 </summary>
@@ -53653,7 +54273,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_redis_port" lineno="70310">
+<interface name="corenet_udp_bind_redis_port" lineno="70731">
 <summary>
 Bind UDP sockets to the redis port.
 </summary>
@@ -53664,7 +54284,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_redis_port" lineno="70329">
+<interface name="corenet_tcp_connect_redis_port" lineno="70750">
 <summary>
 Make a TCP connection to the redis port.
 </summary>
@@ -53674,7 +54294,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_redis_client_packets" lineno="70349">
+<interface name="corenet_send_redis_client_packets" lineno="70770">
 <summary>
 Send redis_client packets.
 </summary>
@@ -53685,7 +54305,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_redis_client_packets" lineno="70368">
+<interface name="corenet_dontaudit_send_redis_client_packets" lineno="70789">
 <summary>
 Do not audit attempts to send redis_client packets.
 </summary>
@@ -53696,7 +54316,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_redis_client_packets" lineno="70387">
+<interface name="corenet_receive_redis_client_packets" lineno="70808">
 <summary>
 Receive redis_client packets.
 </summary>
@@ -53707,7 +54327,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_redis_client_packets" lineno="70406">
+<interface name="corenet_dontaudit_receive_redis_client_packets" lineno="70827">
 <summary>
 Do not audit attempts to receive redis_client packets.
 </summary>
@@ -53718,7 +54338,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_redis_client_packets" lineno="70425">
+<interface name="corenet_sendrecv_redis_client_packets" lineno="70846">
 <summary>
 Send and receive redis_client packets.
 </summary>
@@ -53729,7 +54349,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_redis_client_packets" lineno="70441">
+<interface name="corenet_dontaudit_sendrecv_redis_client_packets" lineno="70862">
 <summary>
 Do not audit attempts to send and receive redis_client packets.
 </summary>
@@ -53740,7 +54360,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_redis_client_packets" lineno="70456">
+<interface name="corenet_relabelto_redis_client_packets" lineno="70877">
 <summary>
 Relabel packets to redis_client the packet type.
 </summary>
@@ -53750,7 +54370,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_redis_server_packets" lineno="70476">
+<interface name="corenet_send_redis_server_packets" lineno="70897">
 <summary>
 Send redis_server packets.
 </summary>
@@ -53761,7 +54381,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_redis_server_packets" lineno="70495">
+<interface name="corenet_dontaudit_send_redis_server_packets" lineno="70916">
 <summary>
 Do not audit attempts to send redis_server packets.
 </summary>
@@ -53772,7 +54392,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_redis_server_packets" lineno="70514">
+<interface name="corenet_receive_redis_server_packets" lineno="70935">
 <summary>
 Receive redis_server packets.
 </summary>
@@ -53783,7 +54403,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_redis_server_packets" lineno="70533">
+<interface name="corenet_dontaudit_receive_redis_server_packets" lineno="70954">
 <summary>
 Do not audit attempts to receive redis_server packets.
 </summary>
@@ -53794,7 +54414,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_redis_server_packets" lineno="70552">
+<interface name="corenet_sendrecv_redis_server_packets" lineno="70973">
 <summary>
 Send and receive redis_server packets.
 </summary>
@@ -53805,7 +54425,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_redis_server_packets" lineno="70568">
+<interface name="corenet_dontaudit_sendrecv_redis_server_packets" lineno="70989">
 <summary>
 Do not audit attempts to send and receive redis_server packets.
 </summary>
@@ -53816,7 +54436,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_redis_server_packets" lineno="70583">
+<interface name="corenet_relabelto_redis_server_packets" lineno="71004">
 <summary>
 Relabel packets to redis_server the packet type.
 </summary>
@@ -53826,7 +54446,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_repository_port" lineno="70605">
+<interface name="corenet_tcp_sendrecv_repository_port" lineno="71026">
 <summary>
 Send and receive TCP traffic on the repository port.
 </summary>
@@ -53837,7 +54457,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_repository_port" lineno="70620">
+<interface name="corenet_udp_send_repository_port" lineno="71041">
 <summary>
 Send UDP traffic on the repository port.
 </summary>
@@ -53848,7 +54468,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_repository_port" lineno="70635">
+<interface name="corenet_dontaudit_udp_send_repository_port" lineno="71056">
 <summary>
 Do not audit attempts to send UDP traffic on the repository port.
 </summary>
@@ -53859,7 +54479,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_repository_port" lineno="70650">
+<interface name="corenet_udp_receive_repository_port" lineno="71071">
 <summary>
 Receive UDP traffic on the repository port.
 </summary>
@@ -53870,7 +54490,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_repository_port" lineno="70665">
+<interface name="corenet_dontaudit_udp_receive_repository_port" lineno="71086">
 <summary>
 Do not audit attempts to receive UDP traffic on the repository port.
 </summary>
@@ -53881,7 +54501,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_repository_port" lineno="70680">
+<interface name="corenet_udp_sendrecv_repository_port" lineno="71101">
 <summary>
 Send and receive UDP traffic on the repository port.
 </summary>
@@ -53892,7 +54512,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_repository_port" lineno="70696">
+<interface name="corenet_dontaudit_udp_sendrecv_repository_port" lineno="71117">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the repository port.
@@ -53904,7 +54524,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_repository_port" lineno="70711">
+<interface name="corenet_tcp_bind_repository_port" lineno="71132">
 <summary>
 Bind TCP sockets to the repository port.
 </summary>
@@ -53915,7 +54535,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_repository_port" lineno="70731">
+<interface name="corenet_udp_bind_repository_port" lineno="71152">
 <summary>
 Bind UDP sockets to the repository port.
 </summary>
@@ -53926,7 +54546,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_repository_port" lineno="70750">
+<interface name="corenet_tcp_connect_repository_port" lineno="71171">
 <summary>
 Make a TCP connection to the repository port.
 </summary>
@@ -53936,7 +54556,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_repository_client_packets" lineno="70770">
+<interface name="corenet_send_repository_client_packets" lineno="71191">
 <summary>
 Send repository_client packets.
 </summary>
@@ -53947,7 +54567,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_repository_client_packets" lineno="70789">
+<interface name="corenet_dontaudit_send_repository_client_packets" lineno="71210">
 <summary>
 Do not audit attempts to send repository_client packets.
 </summary>
@@ -53958,7 +54578,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_repository_client_packets" lineno="70808">
+<interface name="corenet_receive_repository_client_packets" lineno="71229">
 <summary>
 Receive repository_client packets.
 </summary>
@@ -53969,7 +54589,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_repository_client_packets" lineno="70827">
+<interface name="corenet_dontaudit_receive_repository_client_packets" lineno="71248">
 <summary>
 Do not audit attempts to receive repository_client packets.
 </summary>
@@ -53980,7 +54600,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_repository_client_packets" lineno="70846">
+<interface name="corenet_sendrecv_repository_client_packets" lineno="71267">
 <summary>
 Send and receive repository_client packets.
 </summary>
@@ -53991,7 +54611,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_repository_client_packets" lineno="70862">
+<interface name="corenet_dontaudit_sendrecv_repository_client_packets" lineno="71283">
 <summary>
 Do not audit attempts to send and receive repository_client packets.
 </summary>
@@ -54002,7 +54622,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_repository_client_packets" lineno="70877">
+<interface name="corenet_relabelto_repository_client_packets" lineno="71298">
 <summary>
 Relabel packets to repository_client the packet type.
 </summary>
@@ -54012,7 +54632,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_repository_server_packets" lineno="70897">
+<interface name="corenet_send_repository_server_packets" lineno="71318">
 <summary>
 Send repository_server packets.
 </summary>
@@ -54023,7 +54643,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_repository_server_packets" lineno="70916">
+<interface name="corenet_dontaudit_send_repository_server_packets" lineno="71337">
 <summary>
 Do not audit attempts to send repository_server packets.
 </summary>
@@ -54034,7 +54654,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_repository_server_packets" lineno="70935">
+<interface name="corenet_receive_repository_server_packets" lineno="71356">
 <summary>
 Receive repository_server packets.
 </summary>
@@ -54045,7 +54665,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_repository_server_packets" lineno="70954">
+<interface name="corenet_dontaudit_receive_repository_server_packets" lineno="71375">
 <summary>
 Do not audit attempts to receive repository_server packets.
 </summary>
@@ -54056,7 +54676,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_repository_server_packets" lineno="70973">
+<interface name="corenet_sendrecv_repository_server_packets" lineno="71394">
 <summary>
 Send and receive repository_server packets.
 </summary>
@@ -54067,7 +54687,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_repository_server_packets" lineno="70989">
+<interface name="corenet_dontaudit_sendrecv_repository_server_packets" lineno="71410">
 <summary>
 Do not audit attempts to send and receive repository_server packets.
 </summary>
@@ -54078,7 +54698,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_repository_server_packets" lineno="71004">
+<interface name="corenet_relabelto_repository_server_packets" lineno="71425">
 <summary>
 Relabel packets to repository_server the packet type.
 </summary>
@@ -54088,7 +54708,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_ricci_port" lineno="71026">
+<interface name="corenet_tcp_sendrecv_ricci_port" lineno="71447">
 <summary>
 Send and receive TCP traffic on the ricci port.
 </summary>
@@ -54099,7 +54719,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_ricci_port" lineno="71041">
+<interface name="corenet_udp_send_ricci_port" lineno="71462">
 <summary>
 Send UDP traffic on the ricci port.
 </summary>
@@ -54110,7 +54730,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_ricci_port" lineno="71056">
+<interface name="corenet_dontaudit_udp_send_ricci_port" lineno="71477">
 <summary>
 Do not audit attempts to send UDP traffic on the ricci port.
 </summary>
@@ -54121,7 +54741,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_ricci_port" lineno="71071">
+<interface name="corenet_udp_receive_ricci_port" lineno="71492">
 <summary>
 Receive UDP traffic on the ricci port.
 </summary>
@@ -54132,7 +54752,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_ricci_port" lineno="71086">
+<interface name="corenet_dontaudit_udp_receive_ricci_port" lineno="71507">
 <summary>
 Do not audit attempts to receive UDP traffic on the ricci port.
 </summary>
@@ -54143,7 +54763,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_ricci_port" lineno="71101">
+<interface name="corenet_udp_sendrecv_ricci_port" lineno="71522">
 <summary>
 Send and receive UDP traffic on the ricci port.
 </summary>
@@ -54154,7 +54774,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_ricci_port" lineno="71117">
+<interface name="corenet_dontaudit_udp_sendrecv_ricci_port" lineno="71538">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the ricci port.
@@ -54166,7 +54786,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_ricci_port" lineno="71132">
+<interface name="corenet_tcp_bind_ricci_port" lineno="71553">
 <summary>
 Bind TCP sockets to the ricci port.
 </summary>
@@ -54177,7 +54797,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_ricci_port" lineno="71152">
+<interface name="corenet_udp_bind_ricci_port" lineno="71573">
 <summary>
 Bind UDP sockets to the ricci port.
 </summary>
@@ -54188,7 +54808,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_ricci_port" lineno="71171">
+<interface name="corenet_tcp_connect_ricci_port" lineno="71592">
 <summary>
 Make a TCP connection to the ricci port.
 </summary>
@@ -54198,7 +54818,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_ricci_client_packets" lineno="71191">
+<interface name="corenet_send_ricci_client_packets" lineno="71612">
 <summary>
 Send ricci_client packets.
 </summary>
@@ -54209,7 +54829,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_ricci_client_packets" lineno="71210">
+<interface name="corenet_dontaudit_send_ricci_client_packets" lineno="71631">
 <summary>
 Do not audit attempts to send ricci_client packets.
 </summary>
@@ -54220,7 +54840,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_ricci_client_packets" lineno="71229">
+<interface name="corenet_receive_ricci_client_packets" lineno="71650">
 <summary>
 Receive ricci_client packets.
 </summary>
@@ -54231,7 +54851,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_ricci_client_packets" lineno="71248">
+<interface name="corenet_dontaudit_receive_ricci_client_packets" lineno="71669">
 <summary>
 Do not audit attempts to receive ricci_client packets.
 </summary>
@@ -54242,7 +54862,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_ricci_client_packets" lineno="71267">
+<interface name="corenet_sendrecv_ricci_client_packets" lineno="71688">
 <summary>
 Send and receive ricci_client packets.
 </summary>
@@ -54253,7 +54873,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_ricci_client_packets" lineno="71283">
+<interface name="corenet_dontaudit_sendrecv_ricci_client_packets" lineno="71704">
 <summary>
 Do not audit attempts to send and receive ricci_client packets.
 </summary>
@@ -54264,7 +54884,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_ricci_client_packets" lineno="71298">
+<interface name="corenet_relabelto_ricci_client_packets" lineno="71719">
 <summary>
 Relabel packets to ricci_client the packet type.
 </summary>
@@ -54274,7 +54894,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_ricci_server_packets" lineno="71318">
+<interface name="corenet_send_ricci_server_packets" lineno="71739">
 <summary>
 Send ricci_server packets.
 </summary>
@@ -54285,7 +54905,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_ricci_server_packets" lineno="71337">
+<interface name="corenet_dontaudit_send_ricci_server_packets" lineno="71758">
 <summary>
 Do not audit attempts to send ricci_server packets.
 </summary>
@@ -54296,7 +54916,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_ricci_server_packets" lineno="71356">
+<interface name="corenet_receive_ricci_server_packets" lineno="71777">
 <summary>
 Receive ricci_server packets.
 </summary>
@@ -54307,7 +54927,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_ricci_server_packets" lineno="71375">
+<interface name="corenet_dontaudit_receive_ricci_server_packets" lineno="71796">
 <summary>
 Do not audit attempts to receive ricci_server packets.
 </summary>
@@ -54318,7 +54938,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_ricci_server_packets" lineno="71394">
+<interface name="corenet_sendrecv_ricci_server_packets" lineno="71815">
 <summary>
 Send and receive ricci_server packets.
 </summary>
@@ -54329,7 +54949,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_ricci_server_packets" lineno="71410">
+<interface name="corenet_dontaudit_sendrecv_ricci_server_packets" lineno="71831">
 <summary>
 Do not audit attempts to send and receive ricci_server packets.
 </summary>
@@ -54340,7 +54960,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_ricci_server_packets" lineno="71425">
+<interface name="corenet_relabelto_ricci_server_packets" lineno="71846">
 <summary>
 Relabel packets to ricci_server the packet type.
 </summary>
@@ -54350,7 +54970,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_ricci_modcluster_port" lineno="71447">
+<interface name="corenet_tcp_sendrecv_ricci_modcluster_port" lineno="71868">
 <summary>
 Send and receive TCP traffic on the ricci_modcluster port.
 </summary>
@@ -54361,7 +54981,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_ricci_modcluster_port" lineno="71462">
+<interface name="corenet_udp_send_ricci_modcluster_port" lineno="71883">
 <summary>
 Send UDP traffic on the ricci_modcluster port.
 </summary>
@@ -54372,7 +54992,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_ricci_modcluster_port" lineno="71477">
+<interface name="corenet_dontaudit_udp_send_ricci_modcluster_port" lineno="71898">
 <summary>
 Do not audit attempts to send UDP traffic on the ricci_modcluster port.
 </summary>
@@ -54383,7 +55003,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_ricci_modcluster_port" lineno="71492">
+<interface name="corenet_udp_receive_ricci_modcluster_port" lineno="71913">
 <summary>
 Receive UDP traffic on the ricci_modcluster port.
 </summary>
@@ -54394,7 +55014,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_ricci_modcluster_port" lineno="71507">
+<interface name="corenet_dontaudit_udp_receive_ricci_modcluster_port" lineno="71928">
 <summary>
 Do not audit attempts to receive UDP traffic on the ricci_modcluster port.
 </summary>
@@ -54405,7 +55025,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_ricci_modcluster_port" lineno="71522">
+<interface name="corenet_udp_sendrecv_ricci_modcluster_port" lineno="71943">
 <summary>
 Send and receive UDP traffic on the ricci_modcluster port.
 </summary>
@@ -54416,7 +55036,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_ricci_modcluster_port" lineno="71538">
+<interface name="corenet_dontaudit_udp_sendrecv_ricci_modcluster_port" lineno="71959">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the ricci_modcluster port.
@@ -54428,7 +55048,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_ricci_modcluster_port" lineno="71553">
+<interface name="corenet_tcp_bind_ricci_modcluster_port" lineno="71974">
 <summary>
 Bind TCP sockets to the ricci_modcluster port.
 </summary>
@@ -54439,7 +55059,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_ricci_modcluster_port" lineno="71573">
+<interface name="corenet_udp_bind_ricci_modcluster_port" lineno="71994">
 <summary>
 Bind UDP sockets to the ricci_modcluster port.
 </summary>
@@ -54450,7 +55070,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_ricci_modcluster_port" lineno="71592">
+<interface name="corenet_tcp_connect_ricci_modcluster_port" lineno="72013">
 <summary>
 Make a TCP connection to the ricci_modcluster port.
 </summary>
@@ -54460,7 +55080,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_ricci_modcluster_client_packets" lineno="71612">
+<interface name="corenet_send_ricci_modcluster_client_packets" lineno="72033">
 <summary>
 Send ricci_modcluster_client packets.
 </summary>
@@ -54471,7 +55091,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_ricci_modcluster_client_packets" lineno="71631">
+<interface name="corenet_dontaudit_send_ricci_modcluster_client_packets" lineno="72052">
 <summary>
 Do not audit attempts to send ricci_modcluster_client packets.
 </summary>
@@ -54482,7 +55102,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_ricci_modcluster_client_packets" lineno="71650">
+<interface name="corenet_receive_ricci_modcluster_client_packets" lineno="72071">
 <summary>
 Receive ricci_modcluster_client packets.
 </summary>
@@ -54493,7 +55113,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_ricci_modcluster_client_packets" lineno="71669">
+<interface name="corenet_dontaudit_receive_ricci_modcluster_client_packets" lineno="72090">
 <summary>
 Do not audit attempts to receive ricci_modcluster_client packets.
 </summary>
@@ -54504,7 +55124,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_ricci_modcluster_client_packets" lineno="71688">
+<interface name="corenet_sendrecv_ricci_modcluster_client_packets" lineno="72109">
 <summary>
 Send and receive ricci_modcluster_client packets.
 </summary>
@@ -54515,7 +55135,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_ricci_modcluster_client_packets" lineno="71704">
+<interface name="corenet_dontaudit_sendrecv_ricci_modcluster_client_packets" lineno="72125">
 <summary>
 Do not audit attempts to send and receive ricci_modcluster_client packets.
 </summary>
@@ -54526,7 +55146,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_ricci_modcluster_client_packets" lineno="71719">
+<interface name="corenet_relabelto_ricci_modcluster_client_packets" lineno="72140">
 <summary>
 Relabel packets to ricci_modcluster_client the packet type.
 </summary>
@@ -54536,7 +55156,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_ricci_modcluster_server_packets" lineno="71739">
+<interface name="corenet_send_ricci_modcluster_server_packets" lineno="72160">
 <summary>
 Send ricci_modcluster_server packets.
 </summary>
@@ -54547,7 +55167,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_ricci_modcluster_server_packets" lineno="71758">
+<interface name="corenet_dontaudit_send_ricci_modcluster_server_packets" lineno="72179">
 <summary>
 Do not audit attempts to send ricci_modcluster_server packets.
 </summary>
@@ -54558,7 +55178,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_ricci_modcluster_server_packets" lineno="71777">
+<interface name="corenet_receive_ricci_modcluster_server_packets" lineno="72198">
 <summary>
 Receive ricci_modcluster_server packets.
 </summary>
@@ -54569,7 +55189,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_ricci_modcluster_server_packets" lineno="71796">
+<interface name="corenet_dontaudit_receive_ricci_modcluster_server_packets" lineno="72217">
 <summary>
 Do not audit attempts to receive ricci_modcluster_server packets.
 </summary>
@@ -54580,7 +55200,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_ricci_modcluster_server_packets" lineno="71815">
+<interface name="corenet_sendrecv_ricci_modcluster_server_packets" lineno="72236">
 <summary>
 Send and receive ricci_modcluster_server packets.
 </summary>
@@ -54591,7 +55211,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_ricci_modcluster_server_packets" lineno="71831">
+<interface name="corenet_dontaudit_sendrecv_ricci_modcluster_server_packets" lineno="72252">
 <summary>
 Do not audit attempts to send and receive ricci_modcluster_server packets.
 </summary>
@@ -54602,7 +55222,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_ricci_modcluster_server_packets" lineno="71846">
+<interface name="corenet_relabelto_ricci_modcluster_server_packets" lineno="72267">
 <summary>
 Relabel packets to ricci_modcluster_server the packet type.
 </summary>
@@ -54612,7 +55232,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_rlogind_port" lineno="71868">
+<interface name="corenet_tcp_sendrecv_rlogind_port" lineno="72289">
 <summary>
 Send and receive TCP traffic on the rlogind port.
 </summary>
@@ -54623,7 +55243,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_rlogind_port" lineno="71883">
+<interface name="corenet_udp_send_rlogind_port" lineno="72304">
 <summary>
 Send UDP traffic on the rlogind port.
 </summary>
@@ -54634,7 +55254,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_rlogind_port" lineno="71898">
+<interface name="corenet_dontaudit_udp_send_rlogind_port" lineno="72319">
 <summary>
 Do not audit attempts to send UDP traffic on the rlogind port.
 </summary>
@@ -54645,7 +55265,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_rlogind_port" lineno="71913">
+<interface name="corenet_udp_receive_rlogind_port" lineno="72334">
 <summary>
 Receive UDP traffic on the rlogind port.
 </summary>
@@ -54656,7 +55276,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_rlogind_port" lineno="71928">
+<interface name="corenet_dontaudit_udp_receive_rlogind_port" lineno="72349">
 <summary>
 Do not audit attempts to receive UDP traffic on the rlogind port.
 </summary>
@@ -54667,7 +55287,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_rlogind_port" lineno="71943">
+<interface name="corenet_udp_sendrecv_rlogind_port" lineno="72364">
 <summary>
 Send and receive UDP traffic on the rlogind port.
 </summary>
@@ -54678,7 +55298,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_rlogind_port" lineno="71959">
+<interface name="corenet_dontaudit_udp_sendrecv_rlogind_port" lineno="72380">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the rlogind port.
@@ -54690,7 +55310,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_rlogind_port" lineno="71974">
+<interface name="corenet_tcp_bind_rlogind_port" lineno="72395">
 <summary>
 Bind TCP sockets to the rlogind port.
 </summary>
@@ -54701,7 +55321,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_rlogind_port" lineno="71994">
+<interface name="corenet_udp_bind_rlogind_port" lineno="72415">
 <summary>
 Bind UDP sockets to the rlogind port.
 </summary>
@@ -54712,7 +55332,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_rlogind_port" lineno="72013">
+<interface name="corenet_tcp_connect_rlogind_port" lineno="72434">
 <summary>
 Make a TCP connection to the rlogind port.
 </summary>
@@ -54722,7 +55342,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_rlogind_client_packets" lineno="72033">
+<interface name="corenet_send_rlogind_client_packets" lineno="72454">
 <summary>
 Send rlogind_client packets.
 </summary>
@@ -54733,7 +55353,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_rlogind_client_packets" lineno="72052">
+<interface name="corenet_dontaudit_send_rlogind_client_packets" lineno="72473">
 <summary>
 Do not audit attempts to send rlogind_client packets.
 </summary>
@@ -54744,7 +55364,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_rlogind_client_packets" lineno="72071">
+<interface name="corenet_receive_rlogind_client_packets" lineno="72492">
 <summary>
 Receive rlogind_client packets.
 </summary>
@@ -54755,7 +55375,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_rlogind_client_packets" lineno="72090">
+<interface name="corenet_dontaudit_receive_rlogind_client_packets" lineno="72511">
 <summary>
 Do not audit attempts to receive rlogind_client packets.
 </summary>
@@ -54766,7 +55386,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_rlogind_client_packets" lineno="72109">
+<interface name="corenet_sendrecv_rlogind_client_packets" lineno="72530">
 <summary>
 Send and receive rlogind_client packets.
 </summary>
@@ -54777,7 +55397,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_rlogind_client_packets" lineno="72125">
+<interface name="corenet_dontaudit_sendrecv_rlogind_client_packets" lineno="72546">
 <summary>
 Do not audit attempts to send and receive rlogind_client packets.
 </summary>
@@ -54788,7 +55408,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_rlogind_client_packets" lineno="72140">
+<interface name="corenet_relabelto_rlogind_client_packets" lineno="72561">
 <summary>
 Relabel packets to rlogind_client the packet type.
 </summary>
@@ -54798,7 +55418,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_rlogind_server_packets" lineno="72160">
+<interface name="corenet_send_rlogind_server_packets" lineno="72581">
 <summary>
 Send rlogind_server packets.
 </summary>
@@ -54809,7 +55429,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_rlogind_server_packets" lineno="72179">
+<interface name="corenet_dontaudit_send_rlogind_server_packets" lineno="72600">
 <summary>
 Do not audit attempts to send rlogind_server packets.
 </summary>
@@ -54820,7 +55440,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_rlogind_server_packets" lineno="72198">
+<interface name="corenet_receive_rlogind_server_packets" lineno="72619">
 <summary>
 Receive rlogind_server packets.
 </summary>
@@ -54831,7 +55451,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_rlogind_server_packets" lineno="72217">
+<interface name="corenet_dontaudit_receive_rlogind_server_packets" lineno="72638">
 <summary>
 Do not audit attempts to receive rlogind_server packets.
 </summary>
@@ -54842,7 +55462,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_rlogind_server_packets" lineno="72236">
+<interface name="corenet_sendrecv_rlogind_server_packets" lineno="72657">
 <summary>
 Send and receive rlogind_server packets.
 </summary>
@@ -54853,7 +55473,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_rlogind_server_packets" lineno="72252">
+<interface name="corenet_dontaudit_sendrecv_rlogind_server_packets" lineno="72673">
 <summary>
 Do not audit attempts to send and receive rlogind_server packets.
 </summary>
@@ -54864,7 +55484,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_rlogind_server_packets" lineno="72267">
+<interface name="corenet_relabelto_rlogind_server_packets" lineno="72688">
 <summary>
 Relabel packets to rlogind_server the packet type.
 </summary>
@@ -54874,7 +55494,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_rndc_port" lineno="72289">
+<interface name="corenet_tcp_sendrecv_rndc_port" lineno="72710">
 <summary>
 Send and receive TCP traffic on the rndc port.
 </summary>
@@ -54885,7 +55505,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_rndc_port" lineno="72304">
+<interface name="corenet_udp_send_rndc_port" lineno="72725">
 <summary>
 Send UDP traffic on the rndc port.
 </summary>
@@ -54896,7 +55516,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_rndc_port" lineno="72319">
+<interface name="corenet_dontaudit_udp_send_rndc_port" lineno="72740">
 <summary>
 Do not audit attempts to send UDP traffic on the rndc port.
 </summary>
@@ -54907,7 +55527,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_rndc_port" lineno="72334">
+<interface name="corenet_udp_receive_rndc_port" lineno="72755">
 <summary>
 Receive UDP traffic on the rndc port.
 </summary>
@@ -54918,7 +55538,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_rndc_port" lineno="72349">
+<interface name="corenet_dontaudit_udp_receive_rndc_port" lineno="72770">
 <summary>
 Do not audit attempts to receive UDP traffic on the rndc port.
 </summary>
@@ -54929,7 +55549,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_rndc_port" lineno="72364">
+<interface name="corenet_udp_sendrecv_rndc_port" lineno="72785">
 <summary>
 Send and receive UDP traffic on the rndc port.
 </summary>
@@ -54940,7 +55560,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_rndc_port" lineno="72380">
+<interface name="corenet_dontaudit_udp_sendrecv_rndc_port" lineno="72801">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the rndc port.
@@ -54952,7 +55572,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_rndc_port" lineno="72395">
+<interface name="corenet_tcp_bind_rndc_port" lineno="72816">
 <summary>
 Bind TCP sockets to the rndc port.
 </summary>
@@ -54963,7 +55583,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_rndc_port" lineno="72415">
+<interface name="corenet_udp_bind_rndc_port" lineno="72836">
 <summary>
 Bind UDP sockets to the rndc port.
 </summary>
@@ -54974,7 +55594,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_rndc_port" lineno="72434">
+<interface name="corenet_tcp_connect_rndc_port" lineno="72855">
 <summary>
 Make a TCP connection to the rndc port.
 </summary>
@@ -54984,7 +55604,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_rndc_client_packets" lineno="72454">
+<interface name="corenet_send_rndc_client_packets" lineno="72875">
 <summary>
 Send rndc_client packets.
 </summary>
@@ -54995,7 +55615,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_rndc_client_packets" lineno="72473">
+<interface name="corenet_dontaudit_send_rndc_client_packets" lineno="72894">
 <summary>
 Do not audit attempts to send rndc_client packets.
 </summary>
@@ -55006,7 +55626,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_rndc_client_packets" lineno="72492">
+<interface name="corenet_receive_rndc_client_packets" lineno="72913">
 <summary>
 Receive rndc_client packets.
 </summary>
@@ -55017,7 +55637,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_rndc_client_packets" lineno="72511">
+<interface name="corenet_dontaudit_receive_rndc_client_packets" lineno="72932">
 <summary>
 Do not audit attempts to receive rndc_client packets.
 </summary>
@@ -55028,7 +55648,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_rndc_client_packets" lineno="72530">
+<interface name="corenet_sendrecv_rndc_client_packets" lineno="72951">
 <summary>
 Send and receive rndc_client packets.
 </summary>
@@ -55039,7 +55659,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_rndc_client_packets" lineno="72546">
+<interface name="corenet_dontaudit_sendrecv_rndc_client_packets" lineno="72967">
 <summary>
 Do not audit attempts to send and receive rndc_client packets.
 </summary>
@@ -55050,7 +55670,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_rndc_client_packets" lineno="72561">
+<interface name="corenet_relabelto_rndc_client_packets" lineno="72982">
 <summary>
 Relabel packets to rndc_client the packet type.
 </summary>
@@ -55060,7 +55680,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_rndc_server_packets" lineno="72581">
+<interface name="corenet_send_rndc_server_packets" lineno="73002">
 <summary>
 Send rndc_server packets.
 </summary>
@@ -55071,7 +55691,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_rndc_server_packets" lineno="72600">
+<interface name="corenet_dontaudit_send_rndc_server_packets" lineno="73021">
 <summary>
 Do not audit attempts to send rndc_server packets.
 </summary>
@@ -55082,7 +55702,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_rndc_server_packets" lineno="72619">
+<interface name="corenet_receive_rndc_server_packets" lineno="73040">
 <summary>
 Receive rndc_server packets.
 </summary>
@@ -55093,7 +55713,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_rndc_server_packets" lineno="72638">
+<interface name="corenet_dontaudit_receive_rndc_server_packets" lineno="73059">
 <summary>
 Do not audit attempts to receive rndc_server packets.
 </summary>
@@ -55104,7 +55724,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_rndc_server_packets" lineno="72657">
+<interface name="corenet_sendrecv_rndc_server_packets" lineno="73078">
 <summary>
 Send and receive rndc_server packets.
 </summary>
@@ -55115,7 +55735,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_rndc_server_packets" lineno="72673">
+<interface name="corenet_dontaudit_sendrecv_rndc_server_packets" lineno="73094">
 <summary>
 Do not audit attempts to send and receive rndc_server packets.
 </summary>
@@ -55126,7 +55746,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_rndc_server_packets" lineno="72688">
+<interface name="corenet_relabelto_rndc_server_packets" lineno="73109">
 <summary>
 Relabel packets to rndc_server the packet type.
 </summary>
@@ -55136,7 +55756,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_router_port" lineno="72710">
+<interface name="corenet_tcp_sendrecv_router_port" lineno="73131">
 <summary>
 Send and receive TCP traffic on the router port.
 </summary>
@@ -55147,7 +55767,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_router_port" lineno="72725">
+<interface name="corenet_udp_send_router_port" lineno="73146">
 <summary>
 Send UDP traffic on the router port.
 </summary>
@@ -55158,7 +55778,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_router_port" lineno="72740">
+<interface name="corenet_dontaudit_udp_send_router_port" lineno="73161">
 <summary>
 Do not audit attempts to send UDP traffic on the router port.
 </summary>
@@ -55169,7 +55789,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_router_port" lineno="72755">
+<interface name="corenet_udp_receive_router_port" lineno="73176">
 <summary>
 Receive UDP traffic on the router port.
 </summary>
@@ -55180,7 +55800,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_router_port" lineno="72770">
+<interface name="corenet_dontaudit_udp_receive_router_port" lineno="73191">
 <summary>
 Do not audit attempts to receive UDP traffic on the router port.
 </summary>
@@ -55191,7 +55811,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_router_port" lineno="72785">
+<interface name="corenet_udp_sendrecv_router_port" lineno="73206">
 <summary>
 Send and receive UDP traffic on the router port.
 </summary>
@@ -55202,7 +55822,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_router_port" lineno="72801">
+<interface name="corenet_dontaudit_udp_sendrecv_router_port" lineno="73222">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the router port.
@@ -55214,7 +55834,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_router_port" lineno="72816">
+<interface name="corenet_tcp_bind_router_port" lineno="73237">
 <summary>
 Bind TCP sockets to the router port.
 </summary>
@@ -55225,7 +55845,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_router_port" lineno="72836">
+<interface name="corenet_udp_bind_router_port" lineno="73257">
 <summary>
 Bind UDP sockets to the router port.
 </summary>
@@ -55236,7 +55856,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_router_port" lineno="72855">
+<interface name="corenet_tcp_connect_router_port" lineno="73276">
 <summary>
 Make a TCP connection to the router port.
 </summary>
@@ -55246,7 +55866,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_router_client_packets" lineno="72875">
+<interface name="corenet_send_router_client_packets" lineno="73296">
 <summary>
 Send router_client packets.
 </summary>
@@ -55257,7 +55877,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_router_client_packets" lineno="72894">
+<interface name="corenet_dontaudit_send_router_client_packets" lineno="73315">
 <summary>
 Do not audit attempts to send router_client packets.
 </summary>
@@ -55268,7 +55888,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_router_client_packets" lineno="72913">
+<interface name="corenet_receive_router_client_packets" lineno="73334">
 <summary>
 Receive router_client packets.
 </summary>
@@ -55279,7 +55899,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_router_client_packets" lineno="72932">
+<interface name="corenet_dontaudit_receive_router_client_packets" lineno="73353">
 <summary>
 Do not audit attempts to receive router_client packets.
 </summary>
@@ -55290,7 +55910,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_router_client_packets" lineno="72951">
+<interface name="corenet_sendrecv_router_client_packets" lineno="73372">
 <summary>
 Send and receive router_client packets.
 </summary>
@@ -55301,7 +55921,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_router_client_packets" lineno="72967">
+<interface name="corenet_dontaudit_sendrecv_router_client_packets" lineno="73388">
 <summary>
 Do not audit attempts to send and receive router_client packets.
 </summary>
@@ -55312,7 +55932,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_router_client_packets" lineno="72982">
+<interface name="corenet_relabelto_router_client_packets" lineno="73403">
 <summary>
 Relabel packets to router_client the packet type.
 </summary>
@@ -55322,7 +55942,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_router_server_packets" lineno="73002">
+<interface name="corenet_send_router_server_packets" lineno="73423">
 <summary>
 Send router_server packets.
 </summary>
@@ -55333,7 +55953,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_router_server_packets" lineno="73021">
+<interface name="corenet_dontaudit_send_router_server_packets" lineno="73442">
 <summary>
 Do not audit attempts to send router_server packets.
 </summary>
@@ -55344,7 +55964,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_router_server_packets" lineno="73040">
+<interface name="corenet_receive_router_server_packets" lineno="73461">
 <summary>
 Receive router_server packets.
 </summary>
@@ -55355,7 +55975,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_router_server_packets" lineno="73059">
+<interface name="corenet_dontaudit_receive_router_server_packets" lineno="73480">
 <summary>
 Do not audit attempts to receive router_server packets.
 </summary>
@@ -55366,7 +55986,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_router_server_packets" lineno="73078">
+<interface name="corenet_sendrecv_router_server_packets" lineno="73499">
 <summary>
 Send and receive router_server packets.
 </summary>
@@ -55377,7 +55997,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_router_server_packets" lineno="73094">
+<interface name="corenet_dontaudit_sendrecv_router_server_packets" lineno="73515">
 <summary>
 Do not audit attempts to send and receive router_server packets.
 </summary>
@@ -55388,7 +56008,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_router_server_packets" lineno="73109">
+<interface name="corenet_relabelto_router_server_packets" lineno="73530">
 <summary>
 Relabel packets to router_server the packet type.
 </summary>
@@ -55398,7 +56018,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_rsh_port" lineno="73131">
+<interface name="corenet_tcp_sendrecv_rsh_port" lineno="73552">
 <summary>
 Send and receive TCP traffic on the rsh port.
 </summary>
@@ -55409,7 +56029,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_rsh_port" lineno="73146">
+<interface name="corenet_udp_send_rsh_port" lineno="73567">
 <summary>
 Send UDP traffic on the rsh port.
 </summary>
@@ -55420,7 +56040,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_rsh_port" lineno="73161">
+<interface name="corenet_dontaudit_udp_send_rsh_port" lineno="73582">
 <summary>
 Do not audit attempts to send UDP traffic on the rsh port.
 </summary>
@@ -55431,7 +56051,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_rsh_port" lineno="73176">
+<interface name="corenet_udp_receive_rsh_port" lineno="73597">
 <summary>
 Receive UDP traffic on the rsh port.
 </summary>
@@ -55442,7 +56062,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_rsh_port" lineno="73191">
+<interface name="corenet_dontaudit_udp_receive_rsh_port" lineno="73612">
 <summary>
 Do not audit attempts to receive UDP traffic on the rsh port.
 </summary>
@@ -55453,7 +56073,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_rsh_port" lineno="73206">
+<interface name="corenet_udp_sendrecv_rsh_port" lineno="73627">
 <summary>
 Send and receive UDP traffic on the rsh port.
 </summary>
@@ -55464,7 +56084,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_rsh_port" lineno="73222">
+<interface name="corenet_dontaudit_udp_sendrecv_rsh_port" lineno="73643">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the rsh port.
@@ -55476,7 +56096,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_rsh_port" lineno="73237">
+<interface name="corenet_tcp_bind_rsh_port" lineno="73658">
 <summary>
 Bind TCP sockets to the rsh port.
 </summary>
@@ -55487,7 +56107,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_rsh_port" lineno="73257">
+<interface name="corenet_udp_bind_rsh_port" lineno="73678">
 <summary>
 Bind UDP sockets to the rsh port.
 </summary>
@@ -55498,7 +56118,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_rsh_port" lineno="73276">
+<interface name="corenet_tcp_connect_rsh_port" lineno="73697">
 <summary>
 Make a TCP connection to the rsh port.
 </summary>
@@ -55508,7 +56128,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_rsh_client_packets" lineno="73296">
+<interface name="corenet_send_rsh_client_packets" lineno="73717">
 <summary>
 Send rsh_client packets.
 </summary>
@@ -55519,7 +56139,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_rsh_client_packets" lineno="73315">
+<interface name="corenet_dontaudit_send_rsh_client_packets" lineno="73736">
 <summary>
 Do not audit attempts to send rsh_client packets.
 </summary>
@@ -55530,7 +56150,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_rsh_client_packets" lineno="73334">
+<interface name="corenet_receive_rsh_client_packets" lineno="73755">
 <summary>
 Receive rsh_client packets.
 </summary>
@@ -55541,7 +56161,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_rsh_client_packets" lineno="73353">
+<interface name="corenet_dontaudit_receive_rsh_client_packets" lineno="73774">
 <summary>
 Do not audit attempts to receive rsh_client packets.
 </summary>
@@ -55552,7 +56172,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_rsh_client_packets" lineno="73372">
+<interface name="corenet_sendrecv_rsh_client_packets" lineno="73793">
 <summary>
 Send and receive rsh_client packets.
 </summary>
@@ -55563,7 +56183,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_rsh_client_packets" lineno="73388">
+<interface name="corenet_dontaudit_sendrecv_rsh_client_packets" lineno="73809">
 <summary>
 Do not audit attempts to send and receive rsh_client packets.
 </summary>
@@ -55574,7 +56194,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_rsh_client_packets" lineno="73403">
+<interface name="corenet_relabelto_rsh_client_packets" lineno="73824">
 <summary>
 Relabel packets to rsh_client the packet type.
 </summary>
@@ -55584,7 +56204,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_rsh_server_packets" lineno="73423">
+<interface name="corenet_send_rsh_server_packets" lineno="73844">
 <summary>
 Send rsh_server packets.
 </summary>
@@ -55595,7 +56215,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_rsh_server_packets" lineno="73442">
+<interface name="corenet_dontaudit_send_rsh_server_packets" lineno="73863">
 <summary>
 Do not audit attempts to send rsh_server packets.
 </summary>
@@ -55606,7 +56226,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_rsh_server_packets" lineno="73461">
+<interface name="corenet_receive_rsh_server_packets" lineno="73882">
 <summary>
 Receive rsh_server packets.
 </summary>
@@ -55617,7 +56237,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_rsh_server_packets" lineno="73480">
+<interface name="corenet_dontaudit_receive_rsh_server_packets" lineno="73901">
 <summary>
 Do not audit attempts to receive rsh_server packets.
 </summary>
@@ -55628,7 +56248,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_rsh_server_packets" lineno="73499">
+<interface name="corenet_sendrecv_rsh_server_packets" lineno="73920">
 <summary>
 Send and receive rsh_server packets.
 </summary>
@@ -55639,7 +56259,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_rsh_server_packets" lineno="73515">
+<interface name="corenet_dontaudit_sendrecv_rsh_server_packets" lineno="73936">
 <summary>
 Do not audit attempts to send and receive rsh_server packets.
 </summary>
@@ -55650,7 +56270,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_rsh_server_packets" lineno="73530">
+<interface name="corenet_relabelto_rsh_server_packets" lineno="73951">
 <summary>
 Relabel packets to rsh_server the packet type.
 </summary>
@@ -55660,7 +56280,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_rsync_port" lineno="73552">
+<interface name="corenet_tcp_sendrecv_rsync_port" lineno="73973">
 <summary>
 Send and receive TCP traffic on the rsync port.
 </summary>
@@ -55671,7 +56291,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_rsync_port" lineno="73567">
+<interface name="corenet_udp_send_rsync_port" lineno="73988">
 <summary>
 Send UDP traffic on the rsync port.
 </summary>
@@ -55682,7 +56302,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_rsync_port" lineno="73582">
+<interface name="corenet_dontaudit_udp_send_rsync_port" lineno="74003">
 <summary>
 Do not audit attempts to send UDP traffic on the rsync port.
 </summary>
@@ -55693,7 +56313,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_rsync_port" lineno="73597">
+<interface name="corenet_udp_receive_rsync_port" lineno="74018">
 <summary>
 Receive UDP traffic on the rsync port.
 </summary>
@@ -55704,7 +56324,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_rsync_port" lineno="73612">
+<interface name="corenet_dontaudit_udp_receive_rsync_port" lineno="74033">
 <summary>
 Do not audit attempts to receive UDP traffic on the rsync port.
 </summary>
@@ -55715,7 +56335,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_rsync_port" lineno="73627">
+<interface name="corenet_udp_sendrecv_rsync_port" lineno="74048">
 <summary>
 Send and receive UDP traffic on the rsync port.
 </summary>
@@ -55726,7 +56346,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_rsync_port" lineno="73643">
+<interface name="corenet_dontaudit_udp_sendrecv_rsync_port" lineno="74064">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the rsync port.
@@ -55738,7 +56358,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_rsync_port" lineno="73658">
+<interface name="corenet_tcp_bind_rsync_port" lineno="74079">
 <summary>
 Bind TCP sockets to the rsync port.
 </summary>
@@ -55749,7 +56369,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_rsync_port" lineno="73678">
+<interface name="corenet_udp_bind_rsync_port" lineno="74099">
 <summary>
 Bind UDP sockets to the rsync port.
 </summary>
@@ -55760,7 +56380,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_rsync_port" lineno="73697">
+<interface name="corenet_tcp_connect_rsync_port" lineno="74118">
 <summary>
 Make a TCP connection to the rsync port.
 </summary>
@@ -55770,7 +56390,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_rsync_client_packets" lineno="73717">
+<interface name="corenet_send_rsync_client_packets" lineno="74138">
 <summary>
 Send rsync_client packets.
 </summary>
@@ -55781,7 +56401,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_rsync_client_packets" lineno="73736">
+<interface name="corenet_dontaudit_send_rsync_client_packets" lineno="74157">
 <summary>
 Do not audit attempts to send rsync_client packets.
 </summary>
@@ -55792,7 +56412,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_rsync_client_packets" lineno="73755">
+<interface name="corenet_receive_rsync_client_packets" lineno="74176">
 <summary>
 Receive rsync_client packets.
 </summary>
@@ -55803,7 +56423,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_rsync_client_packets" lineno="73774">
+<interface name="corenet_dontaudit_receive_rsync_client_packets" lineno="74195">
 <summary>
 Do not audit attempts to receive rsync_client packets.
 </summary>
@@ -55814,7 +56434,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_rsync_client_packets" lineno="73793">
+<interface name="corenet_sendrecv_rsync_client_packets" lineno="74214">
 <summary>
 Send and receive rsync_client packets.
 </summary>
@@ -55825,7 +56445,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_rsync_client_packets" lineno="73809">
+<interface name="corenet_dontaudit_sendrecv_rsync_client_packets" lineno="74230">
 <summary>
 Do not audit attempts to send and receive rsync_client packets.
 </summary>
@@ -55836,7 +56456,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_rsync_client_packets" lineno="73824">
+<interface name="corenet_relabelto_rsync_client_packets" lineno="74245">
 <summary>
 Relabel packets to rsync_client the packet type.
 </summary>
@@ -55846,7 +56466,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_rsync_server_packets" lineno="73844">
+<interface name="corenet_send_rsync_server_packets" lineno="74265">
 <summary>
 Send rsync_server packets.
 </summary>
@@ -55857,7 +56477,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_rsync_server_packets" lineno="73863">
+<interface name="corenet_dontaudit_send_rsync_server_packets" lineno="74284">
 <summary>
 Do not audit attempts to send rsync_server packets.
 </summary>
@@ -55868,7 +56488,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_rsync_server_packets" lineno="73882">
+<interface name="corenet_receive_rsync_server_packets" lineno="74303">
 <summary>
 Receive rsync_server packets.
 </summary>
@@ -55879,7 +56499,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_rsync_server_packets" lineno="73901">
+<interface name="corenet_dontaudit_receive_rsync_server_packets" lineno="74322">
 <summary>
 Do not audit attempts to receive rsync_server packets.
 </summary>
@@ -55890,7 +56510,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_rsync_server_packets" lineno="73920">
+<interface name="corenet_sendrecv_rsync_server_packets" lineno="74341">
 <summary>
 Send and receive rsync_server packets.
 </summary>
@@ -55901,7 +56521,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_rsync_server_packets" lineno="73936">
+<interface name="corenet_dontaudit_sendrecv_rsync_server_packets" lineno="74357">
 <summary>
 Do not audit attempts to send and receive rsync_server packets.
 </summary>
@@ -55912,7 +56532,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_rsync_server_packets" lineno="73951">
+<interface name="corenet_relabelto_rsync_server_packets" lineno="74372">
 <summary>
 Relabel packets to rsync_server the packet type.
 </summary>
@@ -55922,7 +56542,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_rtorrent_port" lineno="73973">
+<interface name="corenet_tcp_sendrecv_rtorrent_port" lineno="74394">
 <summary>
 Send and receive TCP traffic on the rtorrent port.
 </summary>
@@ -55933,7 +56553,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_rtorrent_port" lineno="73988">
+<interface name="corenet_udp_send_rtorrent_port" lineno="74409">
 <summary>
 Send UDP traffic on the rtorrent port.
 </summary>
@@ -55944,7 +56564,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_rtorrent_port" lineno="74003">
+<interface name="corenet_dontaudit_udp_send_rtorrent_port" lineno="74424">
 <summary>
 Do not audit attempts to send UDP traffic on the rtorrent port.
 </summary>
@@ -55955,7 +56575,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_rtorrent_port" lineno="74018">
+<interface name="corenet_udp_receive_rtorrent_port" lineno="74439">
 <summary>
 Receive UDP traffic on the rtorrent port.
 </summary>
@@ -55966,7 +56586,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_rtorrent_port" lineno="74033">
+<interface name="corenet_dontaudit_udp_receive_rtorrent_port" lineno="74454">
 <summary>
 Do not audit attempts to receive UDP traffic on the rtorrent port.
 </summary>
@@ -55977,7 +56597,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_rtorrent_port" lineno="74048">
+<interface name="corenet_udp_sendrecv_rtorrent_port" lineno="74469">
 <summary>
 Send and receive UDP traffic on the rtorrent port.
 </summary>
@@ -55988,7 +56608,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_rtorrent_port" lineno="74064">
+<interface name="corenet_dontaudit_udp_sendrecv_rtorrent_port" lineno="74485">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the rtorrent port.
@@ -56000,7 +56620,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_rtorrent_port" lineno="74079">
+<interface name="corenet_tcp_bind_rtorrent_port" lineno="74500">
 <summary>
 Bind TCP sockets to the rtorrent port.
 </summary>
@@ -56011,7 +56631,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_rtorrent_port" lineno="74099">
+<interface name="corenet_udp_bind_rtorrent_port" lineno="74520">
 <summary>
 Bind UDP sockets to the rtorrent port.
 </summary>
@@ -56022,7 +56642,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_rtorrent_port" lineno="74118">
+<interface name="corenet_tcp_connect_rtorrent_port" lineno="74539">
 <summary>
 Make a TCP connection to the rtorrent port.
 </summary>
@@ -56032,7 +56652,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_rtorrent_client_packets" lineno="74138">
+<interface name="corenet_send_rtorrent_client_packets" lineno="74559">
 <summary>
 Send rtorrent_client packets.
 </summary>
@@ -56043,7 +56663,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_rtorrent_client_packets" lineno="74157">
+<interface name="corenet_dontaudit_send_rtorrent_client_packets" lineno="74578">
 <summary>
 Do not audit attempts to send rtorrent_client packets.
 </summary>
@@ -56054,7 +56674,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_rtorrent_client_packets" lineno="74176">
+<interface name="corenet_receive_rtorrent_client_packets" lineno="74597">
 <summary>
 Receive rtorrent_client packets.
 </summary>
@@ -56065,7 +56685,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_rtorrent_client_packets" lineno="74195">
+<interface name="corenet_dontaudit_receive_rtorrent_client_packets" lineno="74616">
 <summary>
 Do not audit attempts to receive rtorrent_client packets.
 </summary>
@@ -56076,7 +56696,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_rtorrent_client_packets" lineno="74214">
+<interface name="corenet_sendrecv_rtorrent_client_packets" lineno="74635">
 <summary>
 Send and receive rtorrent_client packets.
 </summary>
@@ -56087,7 +56707,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_rtorrent_client_packets" lineno="74230">
+<interface name="corenet_dontaudit_sendrecv_rtorrent_client_packets" lineno="74651">
 <summary>
 Do not audit attempts to send and receive rtorrent_client packets.
 </summary>
@@ -56098,7 +56718,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_rtorrent_client_packets" lineno="74245">
+<interface name="corenet_relabelto_rtorrent_client_packets" lineno="74666">
 <summary>
 Relabel packets to rtorrent_client the packet type.
 </summary>
@@ -56108,7 +56728,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_rtorrent_server_packets" lineno="74265">
+<interface name="corenet_send_rtorrent_server_packets" lineno="74686">
 <summary>
 Send rtorrent_server packets.
 </summary>
@@ -56119,7 +56739,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_rtorrent_server_packets" lineno="74284">
+<interface name="corenet_dontaudit_send_rtorrent_server_packets" lineno="74705">
 <summary>
 Do not audit attempts to send rtorrent_server packets.
 </summary>
@@ -56130,7 +56750,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_rtorrent_server_packets" lineno="74303">
+<interface name="corenet_receive_rtorrent_server_packets" lineno="74724">
 <summary>
 Receive rtorrent_server packets.
 </summary>
@@ -56141,7 +56761,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_rtorrent_server_packets" lineno="74322">
+<interface name="corenet_dontaudit_receive_rtorrent_server_packets" lineno="74743">
 <summary>
 Do not audit attempts to receive rtorrent_server packets.
 </summary>
@@ -56152,7 +56772,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_rtorrent_server_packets" lineno="74341">
+<interface name="corenet_sendrecv_rtorrent_server_packets" lineno="74762">
 <summary>
 Send and receive rtorrent_server packets.
 </summary>
@@ -56163,7 +56783,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_rtorrent_server_packets" lineno="74357">
+<interface name="corenet_dontaudit_sendrecv_rtorrent_server_packets" lineno="74778">
 <summary>
 Do not audit attempts to send and receive rtorrent_server packets.
 </summary>
@@ -56174,7 +56794,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_rtorrent_server_packets" lineno="74372">
+<interface name="corenet_relabelto_rtorrent_server_packets" lineno="74793">
 <summary>
 Relabel packets to rtorrent_server the packet type.
 </summary>
@@ -56184,7 +56804,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_rtsp_port" lineno="74394">
+<interface name="corenet_tcp_sendrecv_rtsp_port" lineno="74815">
 <summary>
 Send and receive TCP traffic on the rtsp port.
 </summary>
@@ -56195,7 +56815,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_rtsp_port" lineno="74409">
+<interface name="corenet_udp_send_rtsp_port" lineno="74830">
 <summary>
 Send UDP traffic on the rtsp port.
 </summary>
@@ -56206,7 +56826,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_rtsp_port" lineno="74424">
+<interface name="corenet_dontaudit_udp_send_rtsp_port" lineno="74845">
 <summary>
 Do not audit attempts to send UDP traffic on the rtsp port.
 </summary>
@@ -56217,7 +56837,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_rtsp_port" lineno="74439">
+<interface name="corenet_udp_receive_rtsp_port" lineno="74860">
 <summary>
 Receive UDP traffic on the rtsp port.
 </summary>
@@ -56228,7 +56848,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_rtsp_port" lineno="74454">
+<interface name="corenet_dontaudit_udp_receive_rtsp_port" lineno="74875">
 <summary>
 Do not audit attempts to receive UDP traffic on the rtsp port.
 </summary>
@@ -56239,7 +56859,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_rtsp_port" lineno="74469">
+<interface name="corenet_udp_sendrecv_rtsp_port" lineno="74890">
 <summary>
 Send and receive UDP traffic on the rtsp port.
 </summary>
@@ -56250,7 +56870,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_rtsp_port" lineno="74485">
+<interface name="corenet_dontaudit_udp_sendrecv_rtsp_port" lineno="74906">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the rtsp port.
@@ -56262,7 +56882,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_rtsp_port" lineno="74500">
+<interface name="corenet_tcp_bind_rtsp_port" lineno="74921">
 <summary>
 Bind TCP sockets to the rtsp port.
 </summary>
@@ -56273,7 +56893,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_rtsp_port" lineno="74520">
+<interface name="corenet_udp_bind_rtsp_port" lineno="74941">
 <summary>
 Bind UDP sockets to the rtsp port.
 </summary>
@@ -56284,7 +56904,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_rtsp_port" lineno="74539">
+<interface name="corenet_tcp_connect_rtsp_port" lineno="74960">
 <summary>
 Make a TCP connection to the rtsp port.
 </summary>
@@ -56294,7 +56914,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_rtsp_client_packets" lineno="74559">
+<interface name="corenet_send_rtsp_client_packets" lineno="74980">
 <summary>
 Send rtsp_client packets.
 </summary>
@@ -56305,7 +56925,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_rtsp_client_packets" lineno="74578">
+<interface name="corenet_dontaudit_send_rtsp_client_packets" lineno="74999">
 <summary>
 Do not audit attempts to send rtsp_client packets.
 </summary>
@@ -56316,7 +56936,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_rtsp_client_packets" lineno="74597">
+<interface name="corenet_receive_rtsp_client_packets" lineno="75018">
 <summary>
 Receive rtsp_client packets.
 </summary>
@@ -56327,7 +56947,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_rtsp_client_packets" lineno="74616">
+<interface name="corenet_dontaudit_receive_rtsp_client_packets" lineno="75037">
 <summary>
 Do not audit attempts to receive rtsp_client packets.
 </summary>
@@ -56338,7 +56958,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_rtsp_client_packets" lineno="74635">
+<interface name="corenet_sendrecv_rtsp_client_packets" lineno="75056">
 <summary>
 Send and receive rtsp_client packets.
 </summary>
@@ -56349,7 +56969,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_rtsp_client_packets" lineno="74651">
+<interface name="corenet_dontaudit_sendrecv_rtsp_client_packets" lineno="75072">
 <summary>
 Do not audit attempts to send and receive rtsp_client packets.
 </summary>
@@ -56360,7 +56980,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_rtsp_client_packets" lineno="74666">
+<interface name="corenet_relabelto_rtsp_client_packets" lineno="75087">
 <summary>
 Relabel packets to rtsp_client the packet type.
 </summary>
@@ -56370,7 +56990,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_rtsp_server_packets" lineno="74686">
+<interface name="corenet_send_rtsp_server_packets" lineno="75107">
 <summary>
 Send rtsp_server packets.
 </summary>
@@ -56381,7 +57001,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_rtsp_server_packets" lineno="74705">
+<interface name="corenet_dontaudit_send_rtsp_server_packets" lineno="75126">
 <summary>
 Do not audit attempts to send rtsp_server packets.
 </summary>
@@ -56392,7 +57012,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_rtsp_server_packets" lineno="74724">
+<interface name="corenet_receive_rtsp_server_packets" lineno="75145">
 <summary>
 Receive rtsp_server packets.
 </summary>
@@ -56403,7 +57023,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_rtsp_server_packets" lineno="74743">
+<interface name="corenet_dontaudit_receive_rtsp_server_packets" lineno="75164">
 <summary>
 Do not audit attempts to receive rtsp_server packets.
 </summary>
@@ -56414,7 +57034,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_rtsp_server_packets" lineno="74762">
+<interface name="corenet_sendrecv_rtsp_server_packets" lineno="75183">
 <summary>
 Send and receive rtsp_server packets.
 </summary>
@@ -56425,7 +57045,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_rtsp_server_packets" lineno="74778">
+<interface name="corenet_dontaudit_sendrecv_rtsp_server_packets" lineno="75199">
 <summary>
 Do not audit attempts to send and receive rtsp_server packets.
 </summary>
@@ -56436,7 +57056,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_rtsp_server_packets" lineno="74793">
+<interface name="corenet_relabelto_rtsp_server_packets" lineno="75214">
 <summary>
 Relabel packets to rtsp_server the packet type.
 </summary>
@@ -56446,7 +57066,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_rwho_port" lineno="74815">
+<interface name="corenet_tcp_sendrecv_rwho_port" lineno="75236">
 <summary>
 Send and receive TCP traffic on the rwho port.
 </summary>
@@ -56457,7 +57077,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_rwho_port" lineno="74830">
+<interface name="corenet_udp_send_rwho_port" lineno="75251">
 <summary>
 Send UDP traffic on the rwho port.
 </summary>
@@ -56468,7 +57088,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_rwho_port" lineno="74845">
+<interface name="corenet_dontaudit_udp_send_rwho_port" lineno="75266">
 <summary>
 Do not audit attempts to send UDP traffic on the rwho port.
 </summary>
@@ -56479,7 +57099,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_rwho_port" lineno="74860">
+<interface name="corenet_udp_receive_rwho_port" lineno="75281">
 <summary>
 Receive UDP traffic on the rwho port.
 </summary>
@@ -56490,7 +57110,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_rwho_port" lineno="74875">
+<interface name="corenet_dontaudit_udp_receive_rwho_port" lineno="75296">
 <summary>
 Do not audit attempts to receive UDP traffic on the rwho port.
 </summary>
@@ -56501,7 +57121,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_rwho_port" lineno="74890">
+<interface name="corenet_udp_sendrecv_rwho_port" lineno="75311">
 <summary>
 Send and receive UDP traffic on the rwho port.
 </summary>
@@ -56512,7 +57132,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_rwho_port" lineno="74906">
+<interface name="corenet_dontaudit_udp_sendrecv_rwho_port" lineno="75327">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the rwho port.
@@ -56524,7 +57144,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_rwho_port" lineno="74921">
+<interface name="corenet_tcp_bind_rwho_port" lineno="75342">
 <summary>
 Bind TCP sockets to the rwho port.
 </summary>
@@ -56535,7 +57155,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_rwho_port" lineno="74941">
+<interface name="corenet_udp_bind_rwho_port" lineno="75362">
 <summary>
 Bind UDP sockets to the rwho port.
 </summary>
@@ -56546,7 +57166,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_rwho_port" lineno="74960">
+<interface name="corenet_tcp_connect_rwho_port" lineno="75381">
 <summary>
 Make a TCP connection to the rwho port.
 </summary>
@@ -56556,7 +57176,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_rwho_client_packets" lineno="74980">
+<interface name="corenet_send_rwho_client_packets" lineno="75401">
 <summary>
 Send rwho_client packets.
 </summary>
@@ -56567,7 +57187,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_rwho_client_packets" lineno="74999">
+<interface name="corenet_dontaudit_send_rwho_client_packets" lineno="75420">
 <summary>
 Do not audit attempts to send rwho_client packets.
 </summary>
@@ -56578,7 +57198,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_rwho_client_packets" lineno="75018">
+<interface name="corenet_receive_rwho_client_packets" lineno="75439">
 <summary>
 Receive rwho_client packets.
 </summary>
@@ -56589,7 +57209,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_rwho_client_packets" lineno="75037">
+<interface name="corenet_dontaudit_receive_rwho_client_packets" lineno="75458">
 <summary>
 Do not audit attempts to receive rwho_client packets.
 </summary>
@@ -56600,7 +57220,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_rwho_client_packets" lineno="75056">
+<interface name="corenet_sendrecv_rwho_client_packets" lineno="75477">
 <summary>
 Send and receive rwho_client packets.
 </summary>
@@ -56611,7 +57231,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_rwho_client_packets" lineno="75072">
+<interface name="corenet_dontaudit_sendrecv_rwho_client_packets" lineno="75493">
 <summary>
 Do not audit attempts to send and receive rwho_client packets.
 </summary>
@@ -56622,7 +57242,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_rwho_client_packets" lineno="75087">
+<interface name="corenet_relabelto_rwho_client_packets" lineno="75508">
 <summary>
 Relabel packets to rwho_client the packet type.
 </summary>
@@ -56632,7 +57252,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_rwho_server_packets" lineno="75107">
+<interface name="corenet_send_rwho_server_packets" lineno="75528">
 <summary>
 Send rwho_server packets.
 </summary>
@@ -56643,7 +57263,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_rwho_server_packets" lineno="75126">
+<interface name="corenet_dontaudit_send_rwho_server_packets" lineno="75547">
 <summary>
 Do not audit attempts to send rwho_server packets.
 </summary>
@@ -56654,7 +57274,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_rwho_server_packets" lineno="75145">
+<interface name="corenet_receive_rwho_server_packets" lineno="75566">
 <summary>
 Receive rwho_server packets.
 </summary>
@@ -56665,7 +57285,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_rwho_server_packets" lineno="75164">
+<interface name="corenet_dontaudit_receive_rwho_server_packets" lineno="75585">
 <summary>
 Do not audit attempts to receive rwho_server packets.
 </summary>
@@ -56676,7 +57296,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_rwho_server_packets" lineno="75183">
+<interface name="corenet_sendrecv_rwho_server_packets" lineno="75604">
 <summary>
 Send and receive rwho_server packets.
 </summary>
@@ -56687,7 +57307,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_rwho_server_packets" lineno="75199">
+<interface name="corenet_dontaudit_sendrecv_rwho_server_packets" lineno="75620">
 <summary>
 Do not audit attempts to send and receive rwho_server packets.
 </summary>
@@ -56698,7 +57318,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_rwho_server_packets" lineno="75214">
+<interface name="corenet_relabelto_rwho_server_packets" lineno="75635">
 <summary>
 Relabel packets to rwho_server the packet type.
 </summary>
@@ -56708,7 +57328,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_salt_port" lineno="75236">
+<interface name="corenet_tcp_sendrecv_salt_port" lineno="75657">
 <summary>
 Send and receive TCP traffic on the salt port.
 </summary>
@@ -56719,7 +57339,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_salt_port" lineno="75251">
+<interface name="corenet_udp_send_salt_port" lineno="75672">
 <summary>
 Send UDP traffic on the salt port.
 </summary>
@@ -56730,7 +57350,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_salt_port" lineno="75266">
+<interface name="corenet_dontaudit_udp_send_salt_port" lineno="75687">
 <summary>
 Do not audit attempts to send UDP traffic on the salt port.
 </summary>
@@ -56741,7 +57361,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_salt_port" lineno="75281">
+<interface name="corenet_udp_receive_salt_port" lineno="75702">
 <summary>
 Receive UDP traffic on the salt port.
 </summary>
@@ -56752,7 +57372,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_salt_port" lineno="75296">
+<interface name="corenet_dontaudit_udp_receive_salt_port" lineno="75717">
 <summary>
 Do not audit attempts to receive UDP traffic on the salt port.
 </summary>
@@ -56763,7 +57383,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_salt_port" lineno="75311">
+<interface name="corenet_udp_sendrecv_salt_port" lineno="75732">
 <summary>
 Send and receive UDP traffic on the salt port.
 </summary>
@@ -56774,7 +57394,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_salt_port" lineno="75327">
+<interface name="corenet_dontaudit_udp_sendrecv_salt_port" lineno="75748">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the salt port.
@@ -56786,7 +57406,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_salt_port" lineno="75342">
+<interface name="corenet_tcp_bind_salt_port" lineno="75763">
 <summary>
 Bind TCP sockets to the salt port.
 </summary>
@@ -56797,7 +57417,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_salt_port" lineno="75362">
+<interface name="corenet_udp_bind_salt_port" lineno="75783">
 <summary>
 Bind UDP sockets to the salt port.
 </summary>
@@ -56808,7 +57428,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_salt_port" lineno="75381">
+<interface name="corenet_tcp_connect_salt_port" lineno="75802">
 <summary>
 Make a TCP connection to the salt port.
 </summary>
@@ -56818,7 +57438,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_salt_client_packets" lineno="75401">
+<interface name="corenet_send_salt_client_packets" lineno="75822">
 <summary>
 Send salt_client packets.
 </summary>
@@ -56829,7 +57449,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_salt_client_packets" lineno="75420">
+<interface name="corenet_dontaudit_send_salt_client_packets" lineno="75841">
 <summary>
 Do not audit attempts to send salt_client packets.
 </summary>
@@ -56840,7 +57460,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_salt_client_packets" lineno="75439">
+<interface name="corenet_receive_salt_client_packets" lineno="75860">
 <summary>
 Receive salt_client packets.
 </summary>
@@ -56851,7 +57471,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_salt_client_packets" lineno="75458">
+<interface name="corenet_dontaudit_receive_salt_client_packets" lineno="75879">
 <summary>
 Do not audit attempts to receive salt_client packets.
 </summary>
@@ -56862,7 +57482,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_salt_client_packets" lineno="75477">
+<interface name="corenet_sendrecv_salt_client_packets" lineno="75898">
 <summary>
 Send and receive salt_client packets.
 </summary>
@@ -56873,7 +57493,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_salt_client_packets" lineno="75493">
+<interface name="corenet_dontaudit_sendrecv_salt_client_packets" lineno="75914">
 <summary>
 Do not audit attempts to send and receive salt_client packets.
 </summary>
@@ -56884,7 +57504,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_salt_client_packets" lineno="75508">
+<interface name="corenet_relabelto_salt_client_packets" lineno="75929">
 <summary>
 Relabel packets to salt_client the packet type.
 </summary>
@@ -56894,7 +57514,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_salt_server_packets" lineno="75528">
+<interface name="corenet_send_salt_server_packets" lineno="75949">
 <summary>
 Send salt_server packets.
 </summary>
@@ -56905,7 +57525,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_salt_server_packets" lineno="75547">
+<interface name="corenet_dontaudit_send_salt_server_packets" lineno="75968">
 <summary>
 Do not audit attempts to send salt_server packets.
 </summary>
@@ -56916,7 +57536,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_salt_server_packets" lineno="75566">
+<interface name="corenet_receive_salt_server_packets" lineno="75987">
 <summary>
 Receive salt_server packets.
 </summary>
@@ -56927,7 +57547,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_salt_server_packets" lineno="75585">
+<interface name="corenet_dontaudit_receive_salt_server_packets" lineno="76006">
 <summary>
 Do not audit attempts to receive salt_server packets.
 </summary>
@@ -56938,7 +57558,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_salt_server_packets" lineno="75604">
+<interface name="corenet_sendrecv_salt_server_packets" lineno="76025">
 <summary>
 Send and receive salt_server packets.
 </summary>
@@ -56949,7 +57569,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_salt_server_packets" lineno="75620">
+<interface name="corenet_dontaudit_sendrecv_salt_server_packets" lineno="76041">
 <summary>
 Do not audit attempts to send and receive salt_server packets.
 </summary>
@@ -56960,7 +57580,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_salt_server_packets" lineno="75635">
+<interface name="corenet_relabelto_salt_server_packets" lineno="76056">
 <summary>
 Relabel packets to salt_server the packet type.
 </summary>
@@ -56970,7 +57590,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_sap_port" lineno="75657">
+<interface name="corenet_tcp_sendrecv_sap_port" lineno="76078">
 <summary>
 Send and receive TCP traffic on the sap port.
 </summary>
@@ -56981,7 +57601,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_sap_port" lineno="75672">
+<interface name="corenet_udp_send_sap_port" lineno="76093">
 <summary>
 Send UDP traffic on the sap port.
 </summary>
@@ -56992,7 +57612,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_sap_port" lineno="75687">
+<interface name="corenet_dontaudit_udp_send_sap_port" lineno="76108">
 <summary>
 Do not audit attempts to send UDP traffic on the sap port.
 </summary>
@@ -57003,7 +57623,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_sap_port" lineno="75702">
+<interface name="corenet_udp_receive_sap_port" lineno="76123">
 <summary>
 Receive UDP traffic on the sap port.
 </summary>
@@ -57014,7 +57634,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_sap_port" lineno="75717">
+<interface name="corenet_dontaudit_udp_receive_sap_port" lineno="76138">
 <summary>
 Do not audit attempts to receive UDP traffic on the sap port.
 </summary>
@@ -57025,7 +57645,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_sap_port" lineno="75732">
+<interface name="corenet_udp_sendrecv_sap_port" lineno="76153">
 <summary>
 Send and receive UDP traffic on the sap port.
 </summary>
@@ -57036,7 +57656,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_sap_port" lineno="75748">
+<interface name="corenet_dontaudit_udp_sendrecv_sap_port" lineno="76169">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the sap port.
@@ -57048,7 +57668,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_sap_port" lineno="75763">
+<interface name="corenet_tcp_bind_sap_port" lineno="76184">
 <summary>
 Bind TCP sockets to the sap port.
 </summary>
@@ -57059,7 +57679,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_sap_port" lineno="75783">
+<interface name="corenet_udp_bind_sap_port" lineno="76204">
 <summary>
 Bind UDP sockets to the sap port.
 </summary>
@@ -57070,7 +57690,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_sap_port" lineno="75802">
+<interface name="corenet_tcp_connect_sap_port" lineno="76223">
 <summary>
 Make a TCP connection to the sap port.
 </summary>
@@ -57080,7 +57700,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_sap_client_packets" lineno="75822">
+<interface name="corenet_send_sap_client_packets" lineno="76243">
 <summary>
 Send sap_client packets.
 </summary>
@@ -57091,7 +57711,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_sap_client_packets" lineno="75841">
+<interface name="corenet_dontaudit_send_sap_client_packets" lineno="76262">
 <summary>
 Do not audit attempts to send sap_client packets.
 </summary>
@@ -57102,7 +57722,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_sap_client_packets" lineno="75860">
+<interface name="corenet_receive_sap_client_packets" lineno="76281">
 <summary>
 Receive sap_client packets.
 </summary>
@@ -57113,7 +57733,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_sap_client_packets" lineno="75879">
+<interface name="corenet_dontaudit_receive_sap_client_packets" lineno="76300">
 <summary>
 Do not audit attempts to receive sap_client packets.
 </summary>
@@ -57124,7 +57744,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_sap_client_packets" lineno="75898">
+<interface name="corenet_sendrecv_sap_client_packets" lineno="76319">
 <summary>
 Send and receive sap_client packets.
 </summary>
@@ -57135,7 +57755,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_sap_client_packets" lineno="75914">
+<interface name="corenet_dontaudit_sendrecv_sap_client_packets" lineno="76335">
 <summary>
 Do not audit attempts to send and receive sap_client packets.
 </summary>
@@ -57146,7 +57766,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_sap_client_packets" lineno="75929">
+<interface name="corenet_relabelto_sap_client_packets" lineno="76350">
 <summary>
 Relabel packets to sap_client the packet type.
 </summary>
@@ -57156,7 +57776,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_sap_server_packets" lineno="75949">
+<interface name="corenet_send_sap_server_packets" lineno="76370">
 <summary>
 Send sap_server packets.
 </summary>
@@ -57167,7 +57787,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_sap_server_packets" lineno="75968">
+<interface name="corenet_dontaudit_send_sap_server_packets" lineno="76389">
 <summary>
 Do not audit attempts to send sap_server packets.
 </summary>
@@ -57178,7 +57798,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_sap_server_packets" lineno="75987">
+<interface name="corenet_receive_sap_server_packets" lineno="76408">
 <summary>
 Receive sap_server packets.
 </summary>
@@ -57189,7 +57809,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_sap_server_packets" lineno="76006">
+<interface name="corenet_dontaudit_receive_sap_server_packets" lineno="76427">
 <summary>
 Do not audit attempts to receive sap_server packets.
 </summary>
@@ -57200,7 +57820,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_sap_server_packets" lineno="76025">
+<interface name="corenet_sendrecv_sap_server_packets" lineno="76446">
 <summary>
 Send and receive sap_server packets.
 </summary>
@@ -57211,7 +57831,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_sap_server_packets" lineno="76041">
+<interface name="corenet_dontaudit_sendrecv_sap_server_packets" lineno="76462">
 <summary>
 Do not audit attempts to send and receive sap_server packets.
 </summary>
@@ -57222,7 +57842,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_sap_server_packets" lineno="76056">
+<interface name="corenet_relabelto_sap_server_packets" lineno="76477">
 <summary>
 Relabel packets to sap_server the packet type.
 </summary>
@@ -57232,7 +57852,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_servistaitsm_port" lineno="76078">
+<interface name="corenet_tcp_sendrecv_servistaitsm_port" lineno="76499">
 <summary>
 Send and receive TCP traffic on the servistaitsm port.
 </summary>
@@ -57243,7 +57863,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_servistaitsm_port" lineno="76093">
+<interface name="corenet_udp_send_servistaitsm_port" lineno="76514">
 <summary>
 Send UDP traffic on the servistaitsm port.
 </summary>
@@ -57254,7 +57874,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_servistaitsm_port" lineno="76108">
+<interface name="corenet_dontaudit_udp_send_servistaitsm_port" lineno="76529">
 <summary>
 Do not audit attempts to send UDP traffic on the servistaitsm port.
 </summary>
@@ -57265,7 +57885,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_servistaitsm_port" lineno="76123">
+<interface name="corenet_udp_receive_servistaitsm_port" lineno="76544">
 <summary>
 Receive UDP traffic on the servistaitsm port.
 </summary>
@@ -57276,7 +57896,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_servistaitsm_port" lineno="76138">
+<interface name="corenet_dontaudit_udp_receive_servistaitsm_port" lineno="76559">
 <summary>
 Do not audit attempts to receive UDP traffic on the servistaitsm port.
 </summary>
@@ -57287,7 +57907,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_servistaitsm_port" lineno="76153">
+<interface name="corenet_udp_sendrecv_servistaitsm_port" lineno="76574">
 <summary>
 Send and receive UDP traffic on the servistaitsm port.
 </summary>
@@ -57298,7 +57918,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_servistaitsm_port" lineno="76169">
+<interface name="corenet_dontaudit_udp_sendrecv_servistaitsm_port" lineno="76590">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the servistaitsm port.
@@ -57310,7 +57930,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_servistaitsm_port" lineno="76184">
+<interface name="corenet_tcp_bind_servistaitsm_port" lineno="76605">
 <summary>
 Bind TCP sockets to the servistaitsm port.
 </summary>
@@ -57321,7 +57941,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_servistaitsm_port" lineno="76204">
+<interface name="corenet_udp_bind_servistaitsm_port" lineno="76625">
 <summary>
 Bind UDP sockets to the servistaitsm port.
 </summary>
@@ -57332,7 +57952,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_servistaitsm_port" lineno="76223">
+<interface name="corenet_tcp_connect_servistaitsm_port" lineno="76644">
 <summary>
 Make a TCP connection to the servistaitsm port.
 </summary>
@@ -57342,7 +57962,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_servistaitsm_client_packets" lineno="76243">
+<interface name="corenet_send_servistaitsm_client_packets" lineno="76664">
 <summary>
 Send servistaitsm_client packets.
 </summary>
@@ -57353,7 +57973,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_servistaitsm_client_packets" lineno="76262">
+<interface name="corenet_dontaudit_send_servistaitsm_client_packets" lineno="76683">
 <summary>
 Do not audit attempts to send servistaitsm_client packets.
 </summary>
@@ -57364,7 +57984,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_servistaitsm_client_packets" lineno="76281">
+<interface name="corenet_receive_servistaitsm_client_packets" lineno="76702">
 <summary>
 Receive servistaitsm_client packets.
 </summary>
@@ -57375,7 +57995,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_servistaitsm_client_packets" lineno="76300">
+<interface name="corenet_dontaudit_receive_servistaitsm_client_packets" lineno="76721">
 <summary>
 Do not audit attempts to receive servistaitsm_client packets.
 </summary>
@@ -57386,7 +58006,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_servistaitsm_client_packets" lineno="76319">
+<interface name="corenet_sendrecv_servistaitsm_client_packets" lineno="76740">
 <summary>
 Send and receive servistaitsm_client packets.
 </summary>
@@ -57397,7 +58017,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_servistaitsm_client_packets" lineno="76335">
+<interface name="corenet_dontaudit_sendrecv_servistaitsm_client_packets" lineno="76756">
 <summary>
 Do not audit attempts to send and receive servistaitsm_client packets.
 </summary>
@@ -57408,7 +58028,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_servistaitsm_client_packets" lineno="76350">
+<interface name="corenet_relabelto_servistaitsm_client_packets" lineno="76771">
 <summary>
 Relabel packets to servistaitsm_client the packet type.
 </summary>
@@ -57418,7 +58038,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_servistaitsm_server_packets" lineno="76370">
+<interface name="corenet_send_servistaitsm_server_packets" lineno="76791">
 <summary>
 Send servistaitsm_server packets.
 </summary>
@@ -57429,7 +58049,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_servistaitsm_server_packets" lineno="76389">
+<interface name="corenet_dontaudit_send_servistaitsm_server_packets" lineno="76810">
 <summary>
 Do not audit attempts to send servistaitsm_server packets.
 </summary>
@@ -57440,7 +58060,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_servistaitsm_server_packets" lineno="76408">
+<interface name="corenet_receive_servistaitsm_server_packets" lineno="76829">
 <summary>
 Receive servistaitsm_server packets.
 </summary>
@@ -57451,7 +58071,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_servistaitsm_server_packets" lineno="76427">
+<interface name="corenet_dontaudit_receive_servistaitsm_server_packets" lineno="76848">
 <summary>
 Do not audit attempts to receive servistaitsm_server packets.
 </summary>
@@ -57462,7 +58082,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_servistaitsm_server_packets" lineno="76446">
+<interface name="corenet_sendrecv_servistaitsm_server_packets" lineno="76867">
 <summary>
 Send and receive servistaitsm_server packets.
 </summary>
@@ -57473,7 +58093,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_servistaitsm_server_packets" lineno="76462">
+<interface name="corenet_dontaudit_sendrecv_servistaitsm_server_packets" lineno="76883">
 <summary>
 Do not audit attempts to send and receive servistaitsm_server packets.
 </summary>
@@ -57484,7 +58104,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_servistaitsm_server_packets" lineno="76477">
+<interface name="corenet_relabelto_servistaitsm_server_packets" lineno="76898">
 <summary>
 Relabel packets to servistaitsm_server the packet type.
 </summary>
@@ -57494,7 +58114,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_sieve_port" lineno="76499">
+<interface name="corenet_tcp_sendrecv_sieve_port" lineno="76920">
 <summary>
 Send and receive TCP traffic on the sieve port.
 </summary>
@@ -57505,7 +58125,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_sieve_port" lineno="76514">
+<interface name="corenet_udp_send_sieve_port" lineno="76935">
 <summary>
 Send UDP traffic on the sieve port.
 </summary>
@@ -57516,7 +58136,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_sieve_port" lineno="76529">
+<interface name="corenet_dontaudit_udp_send_sieve_port" lineno="76950">
 <summary>
 Do not audit attempts to send UDP traffic on the sieve port.
 </summary>
@@ -57527,7 +58147,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_sieve_port" lineno="76544">
+<interface name="corenet_udp_receive_sieve_port" lineno="76965">
 <summary>
 Receive UDP traffic on the sieve port.
 </summary>
@@ -57538,7 +58158,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_sieve_port" lineno="76559">
+<interface name="corenet_dontaudit_udp_receive_sieve_port" lineno="76980">
 <summary>
 Do not audit attempts to receive UDP traffic on the sieve port.
 </summary>
@@ -57549,7 +58169,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_sieve_port" lineno="76574">
+<interface name="corenet_udp_sendrecv_sieve_port" lineno="76995">
 <summary>
 Send and receive UDP traffic on the sieve port.
 </summary>
@@ -57560,7 +58180,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_sieve_port" lineno="76590">
+<interface name="corenet_dontaudit_udp_sendrecv_sieve_port" lineno="77011">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the sieve port.
@@ -57572,7 +58192,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_sieve_port" lineno="76605">
+<interface name="corenet_tcp_bind_sieve_port" lineno="77026">
 <summary>
 Bind TCP sockets to the sieve port.
 </summary>
@@ -57583,7 +58203,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_sieve_port" lineno="76625">
+<interface name="corenet_udp_bind_sieve_port" lineno="77046">
 <summary>
 Bind UDP sockets to the sieve port.
 </summary>
@@ -57594,7 +58214,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_sieve_port" lineno="76644">
+<interface name="corenet_tcp_connect_sieve_port" lineno="77065">
 <summary>
 Make a TCP connection to the sieve port.
 </summary>
@@ -57604,7 +58224,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_sieve_client_packets" lineno="76664">
+<interface name="corenet_send_sieve_client_packets" lineno="77085">
 <summary>
 Send sieve_client packets.
 </summary>
@@ -57615,7 +58235,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_sieve_client_packets" lineno="76683">
+<interface name="corenet_dontaudit_send_sieve_client_packets" lineno="77104">
 <summary>
 Do not audit attempts to send sieve_client packets.
 </summary>
@@ -57626,7 +58246,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_sieve_client_packets" lineno="76702">
+<interface name="corenet_receive_sieve_client_packets" lineno="77123">
 <summary>
 Receive sieve_client packets.
 </summary>
@@ -57637,7 +58257,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_sieve_client_packets" lineno="76721">
+<interface name="corenet_dontaudit_receive_sieve_client_packets" lineno="77142">
 <summary>
 Do not audit attempts to receive sieve_client packets.
 </summary>
@@ -57648,7 +58268,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_sieve_client_packets" lineno="76740">
+<interface name="corenet_sendrecv_sieve_client_packets" lineno="77161">
 <summary>
 Send and receive sieve_client packets.
 </summary>
@@ -57659,7 +58279,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_sieve_client_packets" lineno="76756">
+<interface name="corenet_dontaudit_sendrecv_sieve_client_packets" lineno="77177">
 <summary>
 Do not audit attempts to send and receive sieve_client packets.
 </summary>
@@ -57670,7 +58290,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_sieve_client_packets" lineno="76771">
+<interface name="corenet_relabelto_sieve_client_packets" lineno="77192">
 <summary>
 Relabel packets to sieve_client the packet type.
 </summary>
@@ -57680,7 +58300,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_sieve_server_packets" lineno="76791">
+<interface name="corenet_send_sieve_server_packets" lineno="77212">
 <summary>
 Send sieve_server packets.
 </summary>
@@ -57691,7 +58311,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_sieve_server_packets" lineno="76810">
+<interface name="corenet_dontaudit_send_sieve_server_packets" lineno="77231">
 <summary>
 Do not audit attempts to send sieve_server packets.
 </summary>
@@ -57702,7 +58322,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_sieve_server_packets" lineno="76829">
+<interface name="corenet_receive_sieve_server_packets" lineno="77250">
 <summary>
 Receive sieve_server packets.
 </summary>
@@ -57713,7 +58333,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_sieve_server_packets" lineno="76848">
+<interface name="corenet_dontaudit_receive_sieve_server_packets" lineno="77269">
 <summary>
 Do not audit attempts to receive sieve_server packets.
 </summary>
@@ -57724,7 +58344,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_sieve_server_packets" lineno="76867">
+<interface name="corenet_sendrecv_sieve_server_packets" lineno="77288">
 <summary>
 Send and receive sieve_server packets.
 </summary>
@@ -57735,7 +58355,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_sieve_server_packets" lineno="76883">
+<interface name="corenet_dontaudit_sendrecv_sieve_server_packets" lineno="77304">
 <summary>
 Do not audit attempts to send and receive sieve_server packets.
 </summary>
@@ -57746,7 +58366,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_sieve_server_packets" lineno="76898">
+<interface name="corenet_relabelto_sieve_server_packets" lineno="77319">
 <summary>
 Relabel packets to sieve_server the packet type.
 </summary>
@@ -57756,7 +58376,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_sip_port" lineno="76920">
+<interface name="corenet_tcp_sendrecv_sip_port" lineno="77341">
 <summary>
 Send and receive TCP traffic on the sip port.
 </summary>
@@ -57767,7 +58387,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_sip_port" lineno="76935">
+<interface name="corenet_udp_send_sip_port" lineno="77356">
 <summary>
 Send UDP traffic on the sip port.
 </summary>
@@ -57778,7 +58398,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_sip_port" lineno="76950">
+<interface name="corenet_dontaudit_udp_send_sip_port" lineno="77371">
 <summary>
 Do not audit attempts to send UDP traffic on the sip port.
 </summary>
@@ -57789,7 +58409,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_sip_port" lineno="76965">
+<interface name="corenet_udp_receive_sip_port" lineno="77386">
 <summary>
 Receive UDP traffic on the sip port.
 </summary>
@@ -57800,7 +58420,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_sip_port" lineno="76980">
+<interface name="corenet_dontaudit_udp_receive_sip_port" lineno="77401">
 <summary>
 Do not audit attempts to receive UDP traffic on the sip port.
 </summary>
@@ -57811,7 +58431,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_sip_port" lineno="76995">
+<interface name="corenet_udp_sendrecv_sip_port" lineno="77416">
 <summary>
 Send and receive UDP traffic on the sip port.
 </summary>
@@ -57822,7 +58442,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_sip_port" lineno="77011">
+<interface name="corenet_dontaudit_udp_sendrecv_sip_port" lineno="77432">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the sip port.
@@ -57834,7 +58454,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_sip_port" lineno="77026">
+<interface name="corenet_tcp_bind_sip_port" lineno="77447">
 <summary>
 Bind TCP sockets to the sip port.
 </summary>
@@ -57845,7 +58465,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_sip_port" lineno="77046">
+<interface name="corenet_udp_bind_sip_port" lineno="77467">
 <summary>
 Bind UDP sockets to the sip port.
 </summary>
@@ -57856,7 +58476,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_sip_port" lineno="77065">
+<interface name="corenet_tcp_connect_sip_port" lineno="77486">
 <summary>
 Make a TCP connection to the sip port.
 </summary>
@@ -57866,7 +58486,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_sip_client_packets" lineno="77085">
+<interface name="corenet_send_sip_client_packets" lineno="77506">
 <summary>
 Send sip_client packets.
 </summary>
@@ -57877,7 +58497,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_sip_client_packets" lineno="77104">
+<interface name="corenet_dontaudit_send_sip_client_packets" lineno="77525">
 <summary>
 Do not audit attempts to send sip_client packets.
 </summary>
@@ -57888,7 +58508,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_sip_client_packets" lineno="77123">
+<interface name="corenet_receive_sip_client_packets" lineno="77544">
 <summary>
 Receive sip_client packets.
 </summary>
@@ -57899,7 +58519,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_sip_client_packets" lineno="77142">
+<interface name="corenet_dontaudit_receive_sip_client_packets" lineno="77563">
 <summary>
 Do not audit attempts to receive sip_client packets.
 </summary>
@@ -57910,7 +58530,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_sip_client_packets" lineno="77161">
+<interface name="corenet_sendrecv_sip_client_packets" lineno="77582">
 <summary>
 Send and receive sip_client packets.
 </summary>
@@ -57921,7 +58541,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_sip_client_packets" lineno="77177">
+<interface name="corenet_dontaudit_sendrecv_sip_client_packets" lineno="77598">
 <summary>
 Do not audit attempts to send and receive sip_client packets.
 </summary>
@@ -57932,7 +58552,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_sip_client_packets" lineno="77192">
+<interface name="corenet_relabelto_sip_client_packets" lineno="77613">
 <summary>
 Relabel packets to sip_client the packet type.
 </summary>
@@ -57942,7 +58562,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_sip_server_packets" lineno="77212">
+<interface name="corenet_send_sip_server_packets" lineno="77633">
 <summary>
 Send sip_server packets.
 </summary>
@@ -57953,7 +58573,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_sip_server_packets" lineno="77231">
+<interface name="corenet_dontaudit_send_sip_server_packets" lineno="77652">
 <summary>
 Do not audit attempts to send sip_server packets.
 </summary>
@@ -57964,7 +58584,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_sip_server_packets" lineno="77250">
+<interface name="corenet_receive_sip_server_packets" lineno="77671">
 <summary>
 Receive sip_server packets.
 </summary>
@@ -57975,7 +58595,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_sip_server_packets" lineno="77269">
+<interface name="corenet_dontaudit_receive_sip_server_packets" lineno="77690">
 <summary>
 Do not audit attempts to receive sip_server packets.
 </summary>
@@ -57986,7 +58606,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_sip_server_packets" lineno="77288">
+<interface name="corenet_sendrecv_sip_server_packets" lineno="77709">
 <summary>
 Send and receive sip_server packets.
 </summary>
@@ -57997,7 +58617,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_sip_server_packets" lineno="77304">
+<interface name="corenet_dontaudit_sendrecv_sip_server_packets" lineno="77725">
 <summary>
 Do not audit attempts to send and receive sip_server packets.
 </summary>
@@ -58008,7 +58628,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_sip_server_packets" lineno="77319">
+<interface name="corenet_relabelto_sip_server_packets" lineno="77740">
 <summary>
 Relabel packets to sip_server the packet type.
 </summary>
@@ -58018,7 +58638,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_sixxsconfig_port" lineno="77341">
+<interface name="corenet_tcp_sendrecv_sixxsconfig_port" lineno="77762">
 <summary>
 Send and receive TCP traffic on the sixxsconfig port.
 </summary>
@@ -58029,7 +58649,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_sixxsconfig_port" lineno="77356">
+<interface name="corenet_udp_send_sixxsconfig_port" lineno="77777">
 <summary>
 Send UDP traffic on the sixxsconfig port.
 </summary>
@@ -58040,7 +58660,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_sixxsconfig_port" lineno="77371">
+<interface name="corenet_dontaudit_udp_send_sixxsconfig_port" lineno="77792">
 <summary>
 Do not audit attempts to send UDP traffic on the sixxsconfig port.
 </summary>
@@ -58051,7 +58671,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_sixxsconfig_port" lineno="77386">
+<interface name="corenet_udp_receive_sixxsconfig_port" lineno="77807">
 <summary>
 Receive UDP traffic on the sixxsconfig port.
 </summary>
@@ -58062,7 +58682,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_sixxsconfig_port" lineno="77401">
+<interface name="corenet_dontaudit_udp_receive_sixxsconfig_port" lineno="77822">
 <summary>
 Do not audit attempts to receive UDP traffic on the sixxsconfig port.
 </summary>
@@ -58073,7 +58693,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_sixxsconfig_port" lineno="77416">
+<interface name="corenet_udp_sendrecv_sixxsconfig_port" lineno="77837">
 <summary>
 Send and receive UDP traffic on the sixxsconfig port.
 </summary>
@@ -58084,7 +58704,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_sixxsconfig_port" lineno="77432">
+<interface name="corenet_dontaudit_udp_sendrecv_sixxsconfig_port" lineno="77853">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the sixxsconfig port.
@@ -58096,7 +58716,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_sixxsconfig_port" lineno="77447">
+<interface name="corenet_tcp_bind_sixxsconfig_port" lineno="77868">
 <summary>
 Bind TCP sockets to the sixxsconfig port.
 </summary>
@@ -58107,7 +58727,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_sixxsconfig_port" lineno="77467">
+<interface name="corenet_udp_bind_sixxsconfig_port" lineno="77888">
 <summary>
 Bind UDP sockets to the sixxsconfig port.
 </summary>
@@ -58118,7 +58738,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_sixxsconfig_port" lineno="77486">
+<interface name="corenet_tcp_connect_sixxsconfig_port" lineno="77907">
 <summary>
 Make a TCP connection to the sixxsconfig port.
 </summary>
@@ -58128,7 +58748,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_sixxsconfig_client_packets" lineno="77506">
+<interface name="corenet_send_sixxsconfig_client_packets" lineno="77927">
 <summary>
 Send sixxsconfig_client packets.
 </summary>
@@ -58139,7 +58759,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_sixxsconfig_client_packets" lineno="77525">
+<interface name="corenet_dontaudit_send_sixxsconfig_client_packets" lineno="77946">
 <summary>
 Do not audit attempts to send sixxsconfig_client packets.
 </summary>
@@ -58150,7 +58770,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_sixxsconfig_client_packets" lineno="77544">
+<interface name="corenet_receive_sixxsconfig_client_packets" lineno="77965">
 <summary>
 Receive sixxsconfig_client packets.
 </summary>
@@ -58161,7 +58781,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_sixxsconfig_client_packets" lineno="77563">
+<interface name="corenet_dontaudit_receive_sixxsconfig_client_packets" lineno="77984">
 <summary>
 Do not audit attempts to receive sixxsconfig_client packets.
 </summary>
@@ -58172,7 +58792,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_sixxsconfig_client_packets" lineno="77582">
+<interface name="corenet_sendrecv_sixxsconfig_client_packets" lineno="78003">
 <summary>
 Send and receive sixxsconfig_client packets.
 </summary>
@@ -58183,7 +58803,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_sixxsconfig_client_packets" lineno="77598">
+<interface name="corenet_dontaudit_sendrecv_sixxsconfig_client_packets" lineno="78019">
 <summary>
 Do not audit attempts to send and receive sixxsconfig_client packets.
 </summary>
@@ -58194,7 +58814,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_sixxsconfig_client_packets" lineno="77613">
+<interface name="corenet_relabelto_sixxsconfig_client_packets" lineno="78034">
 <summary>
 Relabel packets to sixxsconfig_client the packet type.
 </summary>
@@ -58204,7 +58824,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_sixxsconfig_server_packets" lineno="77633">
+<interface name="corenet_send_sixxsconfig_server_packets" lineno="78054">
 <summary>
 Send sixxsconfig_server packets.
 </summary>
@@ -58215,7 +58835,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_sixxsconfig_server_packets" lineno="77652">
+<interface name="corenet_dontaudit_send_sixxsconfig_server_packets" lineno="78073">
 <summary>
 Do not audit attempts to send sixxsconfig_server packets.
 </summary>
@@ -58226,7 +58846,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_sixxsconfig_server_packets" lineno="77671">
+<interface name="corenet_receive_sixxsconfig_server_packets" lineno="78092">
 <summary>
 Receive sixxsconfig_server packets.
 </summary>
@@ -58237,7 +58857,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_sixxsconfig_server_packets" lineno="77690">
+<interface name="corenet_dontaudit_receive_sixxsconfig_server_packets" lineno="78111">
 <summary>
 Do not audit attempts to receive sixxsconfig_server packets.
 </summary>
@@ -58248,7 +58868,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_sixxsconfig_server_packets" lineno="77709">
+<interface name="corenet_sendrecv_sixxsconfig_server_packets" lineno="78130">
 <summary>
 Send and receive sixxsconfig_server packets.
 </summary>
@@ -58259,7 +58879,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_sixxsconfig_server_packets" lineno="77725">
+<interface name="corenet_dontaudit_sendrecv_sixxsconfig_server_packets" lineno="78146">
 <summary>
 Do not audit attempts to send and receive sixxsconfig_server packets.
 </summary>
@@ -58270,7 +58890,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_sixxsconfig_server_packets" lineno="77740">
+<interface name="corenet_relabelto_sixxsconfig_server_packets" lineno="78161">
 <summary>
 Relabel packets to sixxsconfig_server the packet type.
 </summary>
@@ -58280,7 +58900,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_smbd_port" lineno="77762">
+<interface name="corenet_tcp_sendrecv_smbd_port" lineno="78183">
 <summary>
 Send and receive TCP traffic on the smbd port.
 </summary>
@@ -58291,7 +58911,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_smbd_port" lineno="77777">
+<interface name="corenet_udp_send_smbd_port" lineno="78198">
 <summary>
 Send UDP traffic on the smbd port.
 </summary>
@@ -58302,7 +58922,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_smbd_port" lineno="77792">
+<interface name="corenet_dontaudit_udp_send_smbd_port" lineno="78213">
 <summary>
 Do not audit attempts to send UDP traffic on the smbd port.
 </summary>
@@ -58313,7 +58933,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_smbd_port" lineno="77807">
+<interface name="corenet_udp_receive_smbd_port" lineno="78228">
 <summary>
 Receive UDP traffic on the smbd port.
 </summary>
@@ -58324,7 +58944,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_smbd_port" lineno="77822">
+<interface name="corenet_dontaudit_udp_receive_smbd_port" lineno="78243">
 <summary>
 Do not audit attempts to receive UDP traffic on the smbd port.
 </summary>
@@ -58335,7 +58955,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_smbd_port" lineno="77837">
+<interface name="corenet_udp_sendrecv_smbd_port" lineno="78258">
 <summary>
 Send and receive UDP traffic on the smbd port.
 </summary>
@@ -58346,7 +58966,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_smbd_port" lineno="77853">
+<interface name="corenet_dontaudit_udp_sendrecv_smbd_port" lineno="78274">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the smbd port.
@@ -58358,7 +58978,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_smbd_port" lineno="77868">
+<interface name="corenet_tcp_bind_smbd_port" lineno="78289">
 <summary>
 Bind TCP sockets to the smbd port.
 </summary>
@@ -58369,7 +58989,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_smbd_port" lineno="77888">
+<interface name="corenet_udp_bind_smbd_port" lineno="78309">
 <summary>
 Bind UDP sockets to the smbd port.
 </summary>
@@ -58380,7 +59000,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_smbd_port" lineno="77907">
+<interface name="corenet_tcp_connect_smbd_port" lineno="78328">
 <summary>
 Make a TCP connection to the smbd port.
 </summary>
@@ -58390,7 +59010,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_smbd_client_packets" lineno="77927">
+<interface name="corenet_send_smbd_client_packets" lineno="78348">
 <summary>
 Send smbd_client packets.
 </summary>
@@ -58401,7 +59021,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_smbd_client_packets" lineno="77946">
+<interface name="corenet_dontaudit_send_smbd_client_packets" lineno="78367">
 <summary>
 Do not audit attempts to send smbd_client packets.
 </summary>
@@ -58412,7 +59032,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_smbd_client_packets" lineno="77965">
+<interface name="corenet_receive_smbd_client_packets" lineno="78386">
 <summary>
 Receive smbd_client packets.
 </summary>
@@ -58423,7 +59043,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_smbd_client_packets" lineno="77984">
+<interface name="corenet_dontaudit_receive_smbd_client_packets" lineno="78405">
 <summary>
 Do not audit attempts to receive smbd_client packets.
 </summary>
@@ -58434,7 +59054,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_smbd_client_packets" lineno="78003">
+<interface name="corenet_sendrecv_smbd_client_packets" lineno="78424">
 <summary>
 Send and receive smbd_client packets.
 </summary>
@@ -58445,7 +59065,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_smbd_client_packets" lineno="78019">
+<interface name="corenet_dontaudit_sendrecv_smbd_client_packets" lineno="78440">
 <summary>
 Do not audit attempts to send and receive smbd_client packets.
 </summary>
@@ -58456,7 +59076,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_smbd_client_packets" lineno="78034">
+<interface name="corenet_relabelto_smbd_client_packets" lineno="78455">
 <summary>
 Relabel packets to smbd_client the packet type.
 </summary>
@@ -58466,7 +59086,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_smbd_server_packets" lineno="78054">
+<interface name="corenet_send_smbd_server_packets" lineno="78475">
 <summary>
 Send smbd_server packets.
 </summary>
@@ -58477,7 +59097,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_smbd_server_packets" lineno="78073">
+<interface name="corenet_dontaudit_send_smbd_server_packets" lineno="78494">
 <summary>
 Do not audit attempts to send smbd_server packets.
 </summary>
@@ -58488,7 +59108,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_smbd_server_packets" lineno="78092">
+<interface name="corenet_receive_smbd_server_packets" lineno="78513">
 <summary>
 Receive smbd_server packets.
 </summary>
@@ -58499,7 +59119,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_smbd_server_packets" lineno="78111">
+<interface name="corenet_dontaudit_receive_smbd_server_packets" lineno="78532">
 <summary>
 Do not audit attempts to receive smbd_server packets.
 </summary>
@@ -58510,7 +59130,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_smbd_server_packets" lineno="78130">
+<interface name="corenet_sendrecv_smbd_server_packets" lineno="78551">
 <summary>
 Send and receive smbd_server packets.
 </summary>
@@ -58521,7 +59141,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_smbd_server_packets" lineno="78146">
+<interface name="corenet_dontaudit_sendrecv_smbd_server_packets" lineno="78567">
 <summary>
 Do not audit attempts to send and receive smbd_server packets.
 </summary>
@@ -58532,7 +59152,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_smbd_server_packets" lineno="78161">
+<interface name="corenet_relabelto_smbd_server_packets" lineno="78582">
 <summary>
 Relabel packets to smbd_server the packet type.
 </summary>
@@ -58542,7 +59162,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_smtp_port" lineno="78183">
+<interface name="corenet_tcp_sendrecv_smtp_port" lineno="78604">
 <summary>
 Send and receive TCP traffic on the smtp port.
 </summary>
@@ -58553,7 +59173,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_smtp_port" lineno="78198">
+<interface name="corenet_udp_send_smtp_port" lineno="78619">
 <summary>
 Send UDP traffic on the smtp port.
 </summary>
@@ -58564,7 +59184,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_smtp_port" lineno="78213">
+<interface name="corenet_dontaudit_udp_send_smtp_port" lineno="78634">
 <summary>
 Do not audit attempts to send UDP traffic on the smtp port.
 </summary>
@@ -58575,7 +59195,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_smtp_port" lineno="78228">
+<interface name="corenet_udp_receive_smtp_port" lineno="78649">
 <summary>
 Receive UDP traffic on the smtp port.
 </summary>
@@ -58586,7 +59206,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_smtp_port" lineno="78243">
+<interface name="corenet_dontaudit_udp_receive_smtp_port" lineno="78664">
 <summary>
 Do not audit attempts to receive UDP traffic on the smtp port.
 </summary>
@@ -58597,7 +59217,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_smtp_port" lineno="78258">
+<interface name="corenet_udp_sendrecv_smtp_port" lineno="78679">
 <summary>
 Send and receive UDP traffic on the smtp port.
 </summary>
@@ -58608,7 +59228,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_smtp_port" lineno="78274">
+<interface name="corenet_dontaudit_udp_sendrecv_smtp_port" lineno="78695">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the smtp port.
@@ -58620,7 +59240,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_smtp_port" lineno="78289">
+<interface name="corenet_tcp_bind_smtp_port" lineno="78710">
 <summary>
 Bind TCP sockets to the smtp port.
 </summary>
@@ -58631,7 +59251,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_smtp_port" lineno="78309">
+<interface name="corenet_udp_bind_smtp_port" lineno="78730">
 <summary>
 Bind UDP sockets to the smtp port.
 </summary>
@@ -58642,7 +59262,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_smtp_port" lineno="78328">
+<interface name="corenet_tcp_connect_smtp_port" lineno="78749">
 <summary>
 Make a TCP connection to the smtp port.
 </summary>
@@ -58652,7 +59272,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_smtp_client_packets" lineno="78348">
+<interface name="corenet_send_smtp_client_packets" lineno="78769">
 <summary>
 Send smtp_client packets.
 </summary>
@@ -58663,7 +59283,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_smtp_client_packets" lineno="78367">
+<interface name="corenet_dontaudit_send_smtp_client_packets" lineno="78788">
 <summary>
 Do not audit attempts to send smtp_client packets.
 </summary>
@@ -58674,7 +59294,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_smtp_client_packets" lineno="78386">
+<interface name="corenet_receive_smtp_client_packets" lineno="78807">
 <summary>
 Receive smtp_client packets.
 </summary>
@@ -58685,7 +59305,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_smtp_client_packets" lineno="78405">
+<interface name="corenet_dontaudit_receive_smtp_client_packets" lineno="78826">
 <summary>
 Do not audit attempts to receive smtp_client packets.
 </summary>
@@ -58696,7 +59316,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_smtp_client_packets" lineno="78424">
+<interface name="corenet_sendrecv_smtp_client_packets" lineno="78845">
 <summary>
 Send and receive smtp_client packets.
 </summary>
@@ -58707,7 +59327,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_smtp_client_packets" lineno="78440">
+<interface name="corenet_dontaudit_sendrecv_smtp_client_packets" lineno="78861">
 <summary>
 Do not audit attempts to send and receive smtp_client packets.
 </summary>
@@ -58718,7 +59338,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_smtp_client_packets" lineno="78455">
+<interface name="corenet_relabelto_smtp_client_packets" lineno="78876">
 <summary>
 Relabel packets to smtp_client the packet type.
 </summary>
@@ -58728,7 +59348,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_smtp_server_packets" lineno="78475">
+<interface name="corenet_send_smtp_server_packets" lineno="78896">
 <summary>
 Send smtp_server packets.
 </summary>
@@ -58739,7 +59359,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_smtp_server_packets" lineno="78494">
+<interface name="corenet_dontaudit_send_smtp_server_packets" lineno="78915">
 <summary>
 Do not audit attempts to send smtp_server packets.
 </summary>
@@ -58750,7 +59370,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_smtp_server_packets" lineno="78513">
+<interface name="corenet_receive_smtp_server_packets" lineno="78934">
 <summary>
 Receive smtp_server packets.
 </summary>
@@ -58761,7 +59381,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_smtp_server_packets" lineno="78532">
+<interface name="corenet_dontaudit_receive_smtp_server_packets" lineno="78953">
 <summary>
 Do not audit attempts to receive smtp_server packets.
 </summary>
@@ -58772,7 +59392,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_smtp_server_packets" lineno="78551">
+<interface name="corenet_sendrecv_smtp_server_packets" lineno="78972">
 <summary>
 Send and receive smtp_server packets.
 </summary>
@@ -58783,7 +59403,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_smtp_server_packets" lineno="78567">
+<interface name="corenet_dontaudit_sendrecv_smtp_server_packets" lineno="78988">
 <summary>
 Do not audit attempts to send and receive smtp_server packets.
 </summary>
@@ -58794,7 +59414,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_smtp_server_packets" lineno="78582">
+<interface name="corenet_relabelto_smtp_server_packets" lineno="79003">
 <summary>
 Relabel packets to smtp_server the packet type.
 </summary>
@@ -58804,7 +59424,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_snmp_port" lineno="78604">
+<interface name="corenet_tcp_sendrecv_snmp_port" lineno="79025">
 <summary>
 Send and receive TCP traffic on the snmp port.
 </summary>
@@ -58815,7 +59435,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_snmp_port" lineno="78619">
+<interface name="corenet_udp_send_snmp_port" lineno="79040">
 <summary>
 Send UDP traffic on the snmp port.
 </summary>
@@ -58826,7 +59446,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_snmp_port" lineno="78634">
+<interface name="corenet_dontaudit_udp_send_snmp_port" lineno="79055">
 <summary>
 Do not audit attempts to send UDP traffic on the snmp port.
 </summary>
@@ -58837,7 +59457,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_snmp_port" lineno="78649">
+<interface name="corenet_udp_receive_snmp_port" lineno="79070">
 <summary>
 Receive UDP traffic on the snmp port.
 </summary>
@@ -58848,7 +59468,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_snmp_port" lineno="78664">
+<interface name="corenet_dontaudit_udp_receive_snmp_port" lineno="79085">
 <summary>
 Do not audit attempts to receive UDP traffic on the snmp port.
 </summary>
@@ -58859,7 +59479,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_snmp_port" lineno="78679">
+<interface name="corenet_udp_sendrecv_snmp_port" lineno="79100">
 <summary>
 Send and receive UDP traffic on the snmp port.
 </summary>
@@ -58870,7 +59490,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_snmp_port" lineno="78695">
+<interface name="corenet_dontaudit_udp_sendrecv_snmp_port" lineno="79116">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the snmp port.
@@ -58882,7 +59502,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_snmp_port" lineno="78710">
+<interface name="corenet_tcp_bind_snmp_port" lineno="79131">
 <summary>
 Bind TCP sockets to the snmp port.
 </summary>
@@ -58893,7 +59513,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_snmp_port" lineno="78730">
+<interface name="corenet_udp_bind_snmp_port" lineno="79151">
 <summary>
 Bind UDP sockets to the snmp port.
 </summary>
@@ -58904,7 +59524,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_snmp_port" lineno="78749">
+<interface name="corenet_tcp_connect_snmp_port" lineno="79170">
 <summary>
 Make a TCP connection to the snmp port.
 </summary>
@@ -58914,7 +59534,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_snmp_client_packets" lineno="78769">
+<interface name="corenet_send_snmp_client_packets" lineno="79190">
 <summary>
 Send snmp_client packets.
 </summary>
@@ -58925,7 +59545,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_snmp_client_packets" lineno="78788">
+<interface name="corenet_dontaudit_send_snmp_client_packets" lineno="79209">
 <summary>
 Do not audit attempts to send snmp_client packets.
 </summary>
@@ -58936,7 +59556,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_snmp_client_packets" lineno="78807">
+<interface name="corenet_receive_snmp_client_packets" lineno="79228">
 <summary>
 Receive snmp_client packets.
 </summary>
@@ -58947,7 +59567,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_snmp_client_packets" lineno="78826">
+<interface name="corenet_dontaudit_receive_snmp_client_packets" lineno="79247">
 <summary>
 Do not audit attempts to receive snmp_client packets.
 </summary>
@@ -58958,7 +59578,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_snmp_client_packets" lineno="78845">
+<interface name="corenet_sendrecv_snmp_client_packets" lineno="79266">
 <summary>
 Send and receive snmp_client packets.
 </summary>
@@ -58969,7 +59589,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_snmp_client_packets" lineno="78861">
+<interface name="corenet_dontaudit_sendrecv_snmp_client_packets" lineno="79282">
 <summary>
 Do not audit attempts to send and receive snmp_client packets.
 </summary>
@@ -58980,7 +59600,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_snmp_client_packets" lineno="78876">
+<interface name="corenet_relabelto_snmp_client_packets" lineno="79297">
 <summary>
 Relabel packets to snmp_client the packet type.
 </summary>
@@ -58990,7 +59610,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_snmp_server_packets" lineno="78896">
+<interface name="corenet_send_snmp_server_packets" lineno="79317">
 <summary>
 Send snmp_server packets.
 </summary>
@@ -59001,7 +59621,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_snmp_server_packets" lineno="78915">
+<interface name="corenet_dontaudit_send_snmp_server_packets" lineno="79336">
 <summary>
 Do not audit attempts to send snmp_server packets.
 </summary>
@@ -59012,7 +59632,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_snmp_server_packets" lineno="78934">
+<interface name="corenet_receive_snmp_server_packets" lineno="79355">
 <summary>
 Receive snmp_server packets.
 </summary>
@@ -59023,7 +59643,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_snmp_server_packets" lineno="78953">
+<interface name="corenet_dontaudit_receive_snmp_server_packets" lineno="79374">
 <summary>
 Do not audit attempts to receive snmp_server packets.
 </summary>
@@ -59034,7 +59654,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_snmp_server_packets" lineno="78972">
+<interface name="corenet_sendrecv_snmp_server_packets" lineno="79393">
 <summary>
 Send and receive snmp_server packets.
 </summary>
@@ -59045,7 +59665,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_snmp_server_packets" lineno="78988">
+<interface name="corenet_dontaudit_sendrecv_snmp_server_packets" lineno="79409">
 <summary>
 Do not audit attempts to send and receive snmp_server packets.
 </summary>
@@ -59056,7 +59676,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_snmp_server_packets" lineno="79003">
+<interface name="corenet_relabelto_snmp_server_packets" lineno="79424">
 <summary>
 Relabel packets to snmp_server the packet type.
 </summary>
@@ -59066,7 +59686,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_socks_port" lineno="79025">
+<interface name="corenet_tcp_sendrecv_socks_port" lineno="79446">
 <summary>
 Send and receive TCP traffic on the socks port.
 </summary>
@@ -59077,7 +59697,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_socks_port" lineno="79040">
+<interface name="corenet_udp_send_socks_port" lineno="79461">
 <summary>
 Send UDP traffic on the socks port.
 </summary>
@@ -59088,7 +59708,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_socks_port" lineno="79055">
+<interface name="corenet_dontaudit_udp_send_socks_port" lineno="79476">
 <summary>
 Do not audit attempts to send UDP traffic on the socks port.
 </summary>
@@ -59099,7 +59719,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_socks_port" lineno="79070">
+<interface name="corenet_udp_receive_socks_port" lineno="79491">
 <summary>
 Receive UDP traffic on the socks port.
 </summary>
@@ -59110,7 +59730,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_socks_port" lineno="79085">
+<interface name="corenet_dontaudit_udp_receive_socks_port" lineno="79506">
 <summary>
 Do not audit attempts to receive UDP traffic on the socks port.
 </summary>
@@ -59121,7 +59741,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_socks_port" lineno="79100">
+<interface name="corenet_udp_sendrecv_socks_port" lineno="79521">
 <summary>
 Send and receive UDP traffic on the socks port.
 </summary>
@@ -59132,7 +59752,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_socks_port" lineno="79116">
+<interface name="corenet_dontaudit_udp_sendrecv_socks_port" lineno="79537">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the socks port.
@@ -59144,7 +59764,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_socks_port" lineno="79131">
+<interface name="corenet_tcp_bind_socks_port" lineno="79552">
 <summary>
 Bind TCP sockets to the socks port.
 </summary>
@@ -59155,7 +59775,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_socks_port" lineno="79151">
+<interface name="corenet_udp_bind_socks_port" lineno="79572">
 <summary>
 Bind UDP sockets to the socks port.
 </summary>
@@ -59166,7 +59786,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_socks_port" lineno="79170">
+<interface name="corenet_tcp_connect_socks_port" lineno="79591">
 <summary>
 Make a TCP connection to the socks port.
 </summary>
@@ -59176,7 +59796,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_socks_client_packets" lineno="79190">
+<interface name="corenet_send_socks_client_packets" lineno="79611">
 <summary>
 Send socks_client packets.
 </summary>
@@ -59187,7 +59807,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_socks_client_packets" lineno="79209">
+<interface name="corenet_dontaudit_send_socks_client_packets" lineno="79630">
 <summary>
 Do not audit attempts to send socks_client packets.
 </summary>
@@ -59198,7 +59818,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_socks_client_packets" lineno="79228">
+<interface name="corenet_receive_socks_client_packets" lineno="79649">
 <summary>
 Receive socks_client packets.
 </summary>
@@ -59209,7 +59829,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_socks_client_packets" lineno="79247">
+<interface name="corenet_dontaudit_receive_socks_client_packets" lineno="79668">
 <summary>
 Do not audit attempts to receive socks_client packets.
 </summary>
@@ -59220,7 +59840,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_socks_client_packets" lineno="79266">
+<interface name="corenet_sendrecv_socks_client_packets" lineno="79687">
 <summary>
 Send and receive socks_client packets.
 </summary>
@@ -59231,7 +59851,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_socks_client_packets" lineno="79282">
+<interface name="corenet_dontaudit_sendrecv_socks_client_packets" lineno="79703">
 <summary>
 Do not audit attempts to send and receive socks_client packets.
 </summary>
@@ -59242,7 +59862,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_socks_client_packets" lineno="79297">
+<interface name="corenet_relabelto_socks_client_packets" lineno="79718">
 <summary>
 Relabel packets to socks_client the packet type.
 </summary>
@@ -59252,7 +59872,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_socks_server_packets" lineno="79317">
+<interface name="corenet_send_socks_server_packets" lineno="79738">
 <summary>
 Send socks_server packets.
 </summary>
@@ -59263,7 +59883,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_socks_server_packets" lineno="79336">
+<interface name="corenet_dontaudit_send_socks_server_packets" lineno="79757">
 <summary>
 Do not audit attempts to send socks_server packets.
 </summary>
@@ -59274,7 +59894,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_socks_server_packets" lineno="79355">
+<interface name="corenet_receive_socks_server_packets" lineno="79776">
 <summary>
 Receive socks_server packets.
 </summary>
@@ -59285,7 +59905,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_socks_server_packets" lineno="79374">
+<interface name="corenet_dontaudit_receive_socks_server_packets" lineno="79795">
 <summary>
 Do not audit attempts to receive socks_server packets.
 </summary>
@@ -59296,7 +59916,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_socks_server_packets" lineno="79393">
+<interface name="corenet_sendrecv_socks_server_packets" lineno="79814">
 <summary>
 Send and receive socks_server packets.
 </summary>
@@ -59307,7 +59927,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_socks_server_packets" lineno="79409">
+<interface name="corenet_dontaudit_sendrecv_socks_server_packets" lineno="79830">
 <summary>
 Do not audit attempts to send and receive socks_server packets.
 </summary>
@@ -59318,7 +59938,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_socks_server_packets" lineno="79424">
+<interface name="corenet_relabelto_socks_server_packets" lineno="79845">
 <summary>
 Relabel packets to socks_server the packet type.
 </summary>
@@ -59328,7 +59948,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_soundd_port" lineno="79446">
+<interface name="corenet_tcp_sendrecv_soundd_port" lineno="79867">
 <summary>
 Send and receive TCP traffic on the soundd port.
 </summary>
@@ -59339,7 +59959,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_soundd_port" lineno="79461">
+<interface name="corenet_udp_send_soundd_port" lineno="79882">
 <summary>
 Send UDP traffic on the soundd port.
 </summary>
@@ -59350,7 +59970,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_soundd_port" lineno="79476">
+<interface name="corenet_dontaudit_udp_send_soundd_port" lineno="79897">
 <summary>
 Do not audit attempts to send UDP traffic on the soundd port.
 </summary>
@@ -59361,7 +59981,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_soundd_port" lineno="79491">
+<interface name="corenet_udp_receive_soundd_port" lineno="79912">
 <summary>
 Receive UDP traffic on the soundd port.
 </summary>
@@ -59372,7 +59992,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_soundd_port" lineno="79506">
+<interface name="corenet_dontaudit_udp_receive_soundd_port" lineno="79927">
 <summary>
 Do not audit attempts to receive UDP traffic on the soundd port.
 </summary>
@@ -59383,7 +60003,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_soundd_port" lineno="79521">
+<interface name="corenet_udp_sendrecv_soundd_port" lineno="79942">
 <summary>
 Send and receive UDP traffic on the soundd port.
 </summary>
@@ -59394,7 +60014,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_soundd_port" lineno="79537">
+<interface name="corenet_dontaudit_udp_sendrecv_soundd_port" lineno="79958">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the soundd port.
@@ -59406,7 +60026,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_soundd_port" lineno="79552">
+<interface name="corenet_tcp_bind_soundd_port" lineno="79973">
 <summary>
 Bind TCP sockets to the soundd port.
 </summary>
@@ -59417,7 +60037,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_soundd_port" lineno="79572">
+<interface name="corenet_udp_bind_soundd_port" lineno="79993">
 <summary>
 Bind UDP sockets to the soundd port.
 </summary>
@@ -59428,7 +60048,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_soundd_port" lineno="79591">
+<interface name="corenet_tcp_connect_soundd_port" lineno="80012">
 <summary>
 Make a TCP connection to the soundd port.
 </summary>
@@ -59438,7 +60058,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_soundd_client_packets" lineno="79611">
+<interface name="corenet_send_soundd_client_packets" lineno="80032">
 <summary>
 Send soundd_client packets.
 </summary>
@@ -59449,7 +60069,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_soundd_client_packets" lineno="79630">
+<interface name="corenet_dontaudit_send_soundd_client_packets" lineno="80051">
 <summary>
 Do not audit attempts to send soundd_client packets.
 </summary>
@@ -59460,7 +60080,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_soundd_client_packets" lineno="79649">
+<interface name="corenet_receive_soundd_client_packets" lineno="80070">
 <summary>
 Receive soundd_client packets.
 </summary>
@@ -59471,7 +60091,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_soundd_client_packets" lineno="79668">
+<interface name="corenet_dontaudit_receive_soundd_client_packets" lineno="80089">
 <summary>
 Do not audit attempts to receive soundd_client packets.
 </summary>
@@ -59482,7 +60102,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_soundd_client_packets" lineno="79687">
+<interface name="corenet_sendrecv_soundd_client_packets" lineno="80108">
 <summary>
 Send and receive soundd_client packets.
 </summary>
@@ -59493,7 +60113,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_soundd_client_packets" lineno="79703">
+<interface name="corenet_dontaudit_sendrecv_soundd_client_packets" lineno="80124">
 <summary>
 Do not audit attempts to send and receive soundd_client packets.
 </summary>
@@ -59504,7 +60124,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_soundd_client_packets" lineno="79718">
+<interface name="corenet_relabelto_soundd_client_packets" lineno="80139">
 <summary>
 Relabel packets to soundd_client the packet type.
 </summary>
@@ -59514,7 +60134,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_soundd_server_packets" lineno="79738">
+<interface name="corenet_send_soundd_server_packets" lineno="80159">
 <summary>
 Send soundd_server packets.
 </summary>
@@ -59525,7 +60145,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_soundd_server_packets" lineno="79757">
+<interface name="corenet_dontaudit_send_soundd_server_packets" lineno="80178">
 <summary>
 Do not audit attempts to send soundd_server packets.
 </summary>
@@ -59536,7 +60156,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_soundd_server_packets" lineno="79776">
+<interface name="corenet_receive_soundd_server_packets" lineno="80197">
 <summary>
 Receive soundd_server packets.
 </summary>
@@ -59547,7 +60167,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_soundd_server_packets" lineno="79795">
+<interface name="corenet_dontaudit_receive_soundd_server_packets" lineno="80216">
 <summary>
 Do not audit attempts to receive soundd_server packets.
 </summary>
@@ -59558,7 +60178,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_soundd_server_packets" lineno="79814">
+<interface name="corenet_sendrecv_soundd_server_packets" lineno="80235">
 <summary>
 Send and receive soundd_server packets.
 </summary>
@@ -59569,7 +60189,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_soundd_server_packets" lineno="79830">
+<interface name="corenet_dontaudit_sendrecv_soundd_server_packets" lineno="80251">
 <summary>
 Do not audit attempts to send and receive soundd_server packets.
 </summary>
@@ -59580,7 +60200,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_soundd_server_packets" lineno="79845">
+<interface name="corenet_relabelto_soundd_server_packets" lineno="80266">
 <summary>
 Relabel packets to soundd_server the packet type.
 </summary>
@@ -59590,7 +60210,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_spamd_port" lineno="79867">
+<interface name="corenet_tcp_sendrecv_spamd_port" lineno="80288">
 <summary>
 Send and receive TCP traffic on the spamd port.
 </summary>
@@ -59601,7 +60221,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_spamd_port" lineno="79882">
+<interface name="corenet_udp_send_spamd_port" lineno="80303">
 <summary>
 Send UDP traffic on the spamd port.
 </summary>
@@ -59612,7 +60232,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_spamd_port" lineno="79897">
+<interface name="corenet_dontaudit_udp_send_spamd_port" lineno="80318">
 <summary>
 Do not audit attempts to send UDP traffic on the spamd port.
 </summary>
@@ -59623,7 +60243,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_spamd_port" lineno="79912">
+<interface name="corenet_udp_receive_spamd_port" lineno="80333">
 <summary>
 Receive UDP traffic on the spamd port.
 </summary>
@@ -59634,7 +60254,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_spamd_port" lineno="79927">
+<interface name="corenet_dontaudit_udp_receive_spamd_port" lineno="80348">
 <summary>
 Do not audit attempts to receive UDP traffic on the spamd port.
 </summary>
@@ -59645,7 +60265,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_spamd_port" lineno="79942">
+<interface name="corenet_udp_sendrecv_spamd_port" lineno="80363">
 <summary>
 Send and receive UDP traffic on the spamd port.
 </summary>
@@ -59656,7 +60276,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_spamd_port" lineno="79958">
+<interface name="corenet_dontaudit_udp_sendrecv_spamd_port" lineno="80379">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the spamd port.
@@ -59668,7 +60288,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_spamd_port" lineno="79973">
+<interface name="corenet_tcp_bind_spamd_port" lineno="80394">
 <summary>
 Bind TCP sockets to the spamd port.
 </summary>
@@ -59679,7 +60299,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_spamd_port" lineno="79993">
+<interface name="corenet_udp_bind_spamd_port" lineno="80414">
 <summary>
 Bind UDP sockets to the spamd port.
 </summary>
@@ -59690,7 +60310,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_spamd_port" lineno="80012">
+<interface name="corenet_tcp_connect_spamd_port" lineno="80433">
 <summary>
 Make a TCP connection to the spamd port.
 </summary>
@@ -59700,7 +60320,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_spamd_client_packets" lineno="80032">
+<interface name="corenet_send_spamd_client_packets" lineno="80453">
 <summary>
 Send spamd_client packets.
 </summary>
@@ -59711,7 +60331,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_spamd_client_packets" lineno="80051">
+<interface name="corenet_dontaudit_send_spamd_client_packets" lineno="80472">
 <summary>
 Do not audit attempts to send spamd_client packets.
 </summary>
@@ -59722,7 +60342,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_spamd_client_packets" lineno="80070">
+<interface name="corenet_receive_spamd_client_packets" lineno="80491">
 <summary>
 Receive spamd_client packets.
 </summary>
@@ -59733,7 +60353,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_spamd_client_packets" lineno="80089">
+<interface name="corenet_dontaudit_receive_spamd_client_packets" lineno="80510">
 <summary>
 Do not audit attempts to receive spamd_client packets.
 </summary>
@@ -59744,7 +60364,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_spamd_client_packets" lineno="80108">
+<interface name="corenet_sendrecv_spamd_client_packets" lineno="80529">
 <summary>
 Send and receive spamd_client packets.
 </summary>
@@ -59755,7 +60375,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_spamd_client_packets" lineno="80124">
+<interface name="corenet_dontaudit_sendrecv_spamd_client_packets" lineno="80545">
 <summary>
 Do not audit attempts to send and receive spamd_client packets.
 </summary>
@@ -59766,7 +60386,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_spamd_client_packets" lineno="80139">
+<interface name="corenet_relabelto_spamd_client_packets" lineno="80560">
 <summary>
 Relabel packets to spamd_client the packet type.
 </summary>
@@ -59776,7 +60396,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_spamd_server_packets" lineno="80159">
+<interface name="corenet_send_spamd_server_packets" lineno="80580">
 <summary>
 Send spamd_server packets.
 </summary>
@@ -59787,7 +60407,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_spamd_server_packets" lineno="80178">
+<interface name="corenet_dontaudit_send_spamd_server_packets" lineno="80599">
 <summary>
 Do not audit attempts to send spamd_server packets.
 </summary>
@@ -59798,7 +60418,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_spamd_server_packets" lineno="80197">
+<interface name="corenet_receive_spamd_server_packets" lineno="80618">
 <summary>
 Receive spamd_server packets.
 </summary>
@@ -59809,7 +60429,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_spamd_server_packets" lineno="80216">
+<interface name="corenet_dontaudit_receive_spamd_server_packets" lineno="80637">
 <summary>
 Do not audit attempts to receive spamd_server packets.
 </summary>
@@ -59820,7 +60440,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_spamd_server_packets" lineno="80235">
+<interface name="corenet_sendrecv_spamd_server_packets" lineno="80656">
 <summary>
 Send and receive spamd_server packets.
 </summary>
@@ -59831,7 +60451,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_spamd_server_packets" lineno="80251">
+<interface name="corenet_dontaudit_sendrecv_spamd_server_packets" lineno="80672">
 <summary>
 Do not audit attempts to send and receive spamd_server packets.
 </summary>
@@ -59842,7 +60462,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_spamd_server_packets" lineno="80266">
+<interface name="corenet_relabelto_spamd_server_packets" lineno="80687">
 <summary>
 Relabel packets to spamd_server the packet type.
 </summary>
@@ -59852,7 +60472,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_speech_port" lineno="80288">
+<interface name="corenet_tcp_sendrecv_speech_port" lineno="80709">
 <summary>
 Send and receive TCP traffic on the speech port.
 </summary>
@@ -59863,7 +60483,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_speech_port" lineno="80303">
+<interface name="corenet_udp_send_speech_port" lineno="80724">
 <summary>
 Send UDP traffic on the speech port.
 </summary>
@@ -59874,7 +60494,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_speech_port" lineno="80318">
+<interface name="corenet_dontaudit_udp_send_speech_port" lineno="80739">
 <summary>
 Do not audit attempts to send UDP traffic on the speech port.
 </summary>
@@ -59885,7 +60505,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_speech_port" lineno="80333">
+<interface name="corenet_udp_receive_speech_port" lineno="80754">
 <summary>
 Receive UDP traffic on the speech port.
 </summary>
@@ -59896,7 +60516,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_speech_port" lineno="80348">
+<interface name="corenet_dontaudit_udp_receive_speech_port" lineno="80769">
 <summary>
 Do not audit attempts to receive UDP traffic on the speech port.
 </summary>
@@ -59907,7 +60527,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_speech_port" lineno="80363">
+<interface name="corenet_udp_sendrecv_speech_port" lineno="80784">
 <summary>
 Send and receive UDP traffic on the speech port.
 </summary>
@@ -59918,7 +60538,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_speech_port" lineno="80379">
+<interface name="corenet_dontaudit_udp_sendrecv_speech_port" lineno="80800">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the speech port.
@@ -59930,7 +60550,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_speech_port" lineno="80394">
+<interface name="corenet_tcp_bind_speech_port" lineno="80815">
 <summary>
 Bind TCP sockets to the speech port.
 </summary>
@@ -59941,7 +60561,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_speech_port" lineno="80414">
+<interface name="corenet_udp_bind_speech_port" lineno="80835">
 <summary>
 Bind UDP sockets to the speech port.
 </summary>
@@ -59952,7 +60572,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_speech_port" lineno="80433">
+<interface name="corenet_tcp_connect_speech_port" lineno="80854">
 <summary>
 Make a TCP connection to the speech port.
 </summary>
@@ -59962,7 +60582,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_speech_client_packets" lineno="80453">
+<interface name="corenet_send_speech_client_packets" lineno="80874">
 <summary>
 Send speech_client packets.
 </summary>
@@ -59973,7 +60593,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_speech_client_packets" lineno="80472">
+<interface name="corenet_dontaudit_send_speech_client_packets" lineno="80893">
 <summary>
 Do not audit attempts to send speech_client packets.
 </summary>
@@ -59984,7 +60604,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_speech_client_packets" lineno="80491">
+<interface name="corenet_receive_speech_client_packets" lineno="80912">
 <summary>
 Receive speech_client packets.
 </summary>
@@ -59995,7 +60615,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_speech_client_packets" lineno="80510">
+<interface name="corenet_dontaudit_receive_speech_client_packets" lineno="80931">
 <summary>
 Do not audit attempts to receive speech_client packets.
 </summary>
@@ -60006,7 +60626,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_speech_client_packets" lineno="80529">
+<interface name="corenet_sendrecv_speech_client_packets" lineno="80950">
 <summary>
 Send and receive speech_client packets.
 </summary>
@@ -60017,7 +60637,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_speech_client_packets" lineno="80545">
+<interface name="corenet_dontaudit_sendrecv_speech_client_packets" lineno="80966">
 <summary>
 Do not audit attempts to send and receive speech_client packets.
 </summary>
@@ -60028,7 +60648,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_speech_client_packets" lineno="80560">
+<interface name="corenet_relabelto_speech_client_packets" lineno="80981">
 <summary>
 Relabel packets to speech_client the packet type.
 </summary>
@@ -60038,7 +60658,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_speech_server_packets" lineno="80580">
+<interface name="corenet_send_speech_server_packets" lineno="81001">
 <summary>
 Send speech_server packets.
 </summary>
@@ -60049,7 +60669,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_speech_server_packets" lineno="80599">
+<interface name="corenet_dontaudit_send_speech_server_packets" lineno="81020">
 <summary>
 Do not audit attempts to send speech_server packets.
 </summary>
@@ -60060,7 +60680,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_speech_server_packets" lineno="80618">
+<interface name="corenet_receive_speech_server_packets" lineno="81039">
 <summary>
 Receive speech_server packets.
 </summary>
@@ -60071,7 +60691,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_speech_server_packets" lineno="80637">
+<interface name="corenet_dontaudit_receive_speech_server_packets" lineno="81058">
 <summary>
 Do not audit attempts to receive speech_server packets.
 </summary>
@@ -60082,7 +60702,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_speech_server_packets" lineno="80656">
+<interface name="corenet_sendrecv_speech_server_packets" lineno="81077">
 <summary>
 Send and receive speech_server packets.
 </summary>
@@ -60093,7 +60713,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_speech_server_packets" lineno="80672">
+<interface name="corenet_dontaudit_sendrecv_speech_server_packets" lineno="81093">
 <summary>
 Do not audit attempts to send and receive speech_server packets.
 </summary>
@@ -60104,7 +60724,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_speech_server_packets" lineno="80687">
+<interface name="corenet_relabelto_speech_server_packets" lineno="81108">
 <summary>
 Relabel packets to speech_server the packet type.
 </summary>
@@ -60114,7 +60734,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_squid_port" lineno="80709">
+<interface name="corenet_tcp_sendrecv_squid_port" lineno="81130">
 <summary>
 Send and receive TCP traffic on the squid port.
 </summary>
@@ -60125,7 +60745,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_squid_port" lineno="80724">
+<interface name="corenet_udp_send_squid_port" lineno="81145">
 <summary>
 Send UDP traffic on the squid port.
 </summary>
@@ -60136,7 +60756,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_squid_port" lineno="80739">
+<interface name="corenet_dontaudit_udp_send_squid_port" lineno="81160">
 <summary>
 Do not audit attempts to send UDP traffic on the squid port.
 </summary>
@@ -60147,7 +60767,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_squid_port" lineno="80754">
+<interface name="corenet_udp_receive_squid_port" lineno="81175">
 <summary>
 Receive UDP traffic on the squid port.
 </summary>
@@ -60158,7 +60778,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_squid_port" lineno="80769">
+<interface name="corenet_dontaudit_udp_receive_squid_port" lineno="81190">
 <summary>
 Do not audit attempts to receive UDP traffic on the squid port.
 </summary>
@@ -60169,7 +60789,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_squid_port" lineno="80784">
+<interface name="corenet_udp_sendrecv_squid_port" lineno="81205">
 <summary>
 Send and receive UDP traffic on the squid port.
 </summary>
@@ -60180,7 +60800,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_squid_port" lineno="80800">
+<interface name="corenet_dontaudit_udp_sendrecv_squid_port" lineno="81221">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the squid port.
@@ -60192,7 +60812,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_squid_port" lineno="80815">
+<interface name="corenet_tcp_bind_squid_port" lineno="81236">
 <summary>
 Bind TCP sockets to the squid port.
 </summary>
@@ -60203,7 +60823,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_squid_port" lineno="80835">
+<interface name="corenet_udp_bind_squid_port" lineno="81256">
 <summary>
 Bind UDP sockets to the squid port.
 </summary>
@@ -60214,7 +60834,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_squid_port" lineno="80854">
+<interface name="corenet_tcp_connect_squid_port" lineno="81275">
 <summary>
 Make a TCP connection to the squid port.
 </summary>
@@ -60224,7 +60844,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_squid_client_packets" lineno="80874">
+<interface name="corenet_send_squid_client_packets" lineno="81295">
 <summary>
 Send squid_client packets.
 </summary>
@@ -60235,7 +60855,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_squid_client_packets" lineno="80893">
+<interface name="corenet_dontaudit_send_squid_client_packets" lineno="81314">
 <summary>
 Do not audit attempts to send squid_client packets.
 </summary>
@@ -60246,7 +60866,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_squid_client_packets" lineno="80912">
+<interface name="corenet_receive_squid_client_packets" lineno="81333">
 <summary>
 Receive squid_client packets.
 </summary>
@@ -60257,7 +60877,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_squid_client_packets" lineno="80931">
+<interface name="corenet_dontaudit_receive_squid_client_packets" lineno="81352">
 <summary>
 Do not audit attempts to receive squid_client packets.
 </summary>
@@ -60268,7 +60888,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_squid_client_packets" lineno="80950">
+<interface name="corenet_sendrecv_squid_client_packets" lineno="81371">
 <summary>
 Send and receive squid_client packets.
 </summary>
@@ -60279,7 +60899,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_squid_client_packets" lineno="80966">
+<interface name="corenet_dontaudit_sendrecv_squid_client_packets" lineno="81387">
 <summary>
 Do not audit attempts to send and receive squid_client packets.
 </summary>
@@ -60290,7 +60910,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_squid_client_packets" lineno="80981">
+<interface name="corenet_relabelto_squid_client_packets" lineno="81402">
 <summary>
 Relabel packets to squid_client the packet type.
 </summary>
@@ -60300,7 +60920,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_squid_server_packets" lineno="81001">
+<interface name="corenet_send_squid_server_packets" lineno="81422">
 <summary>
 Send squid_server packets.
 </summary>
@@ -60311,7 +60931,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_squid_server_packets" lineno="81020">
+<interface name="corenet_dontaudit_send_squid_server_packets" lineno="81441">
 <summary>
 Do not audit attempts to send squid_server packets.
 </summary>
@@ -60322,7 +60942,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_squid_server_packets" lineno="81039">
+<interface name="corenet_receive_squid_server_packets" lineno="81460">
 <summary>
 Receive squid_server packets.
 </summary>
@@ -60333,7 +60953,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_squid_server_packets" lineno="81058">
+<interface name="corenet_dontaudit_receive_squid_server_packets" lineno="81479">
 <summary>
 Do not audit attempts to receive squid_server packets.
 </summary>
@@ -60344,7 +60964,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_squid_server_packets" lineno="81077">
+<interface name="corenet_sendrecv_squid_server_packets" lineno="81498">
 <summary>
 Send and receive squid_server packets.
 </summary>
@@ -60355,7 +60975,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_squid_server_packets" lineno="81093">
+<interface name="corenet_dontaudit_sendrecv_squid_server_packets" lineno="81514">
 <summary>
 Do not audit attempts to send and receive squid_server packets.
 </summary>
@@ -60366,7 +60986,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_squid_server_packets" lineno="81108">
+<interface name="corenet_relabelto_squid_server_packets" lineno="81529">
 <summary>
 Relabel packets to squid_server the packet type.
 </summary>
@@ -60376,7 +60996,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_ssdp_port" lineno="81130">
+<interface name="corenet_tcp_sendrecv_ssdp_port" lineno="81551">
 <summary>
 Send and receive TCP traffic on the ssdp port.
 </summary>
@@ -60387,7 +61007,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_ssdp_port" lineno="81145">
+<interface name="corenet_udp_send_ssdp_port" lineno="81566">
 <summary>
 Send UDP traffic on the ssdp port.
 </summary>
@@ -60398,7 +61018,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_ssdp_port" lineno="81160">
+<interface name="corenet_dontaudit_udp_send_ssdp_port" lineno="81581">
 <summary>
 Do not audit attempts to send UDP traffic on the ssdp port.
 </summary>
@@ -60409,7 +61029,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_ssdp_port" lineno="81175">
+<interface name="corenet_udp_receive_ssdp_port" lineno="81596">
 <summary>
 Receive UDP traffic on the ssdp port.
 </summary>
@@ -60420,7 +61040,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_ssdp_port" lineno="81190">
+<interface name="corenet_dontaudit_udp_receive_ssdp_port" lineno="81611">
 <summary>
 Do not audit attempts to receive UDP traffic on the ssdp port.
 </summary>
@@ -60431,7 +61051,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_ssdp_port" lineno="81205">
+<interface name="corenet_udp_sendrecv_ssdp_port" lineno="81626">
 <summary>
 Send and receive UDP traffic on the ssdp port.
 </summary>
@@ -60442,7 +61062,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_ssdp_port" lineno="81221">
+<interface name="corenet_dontaudit_udp_sendrecv_ssdp_port" lineno="81642">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the ssdp port.
@@ -60454,7 +61074,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_ssdp_port" lineno="81236">
+<interface name="corenet_tcp_bind_ssdp_port" lineno="81657">
 <summary>
 Bind TCP sockets to the ssdp port.
 </summary>
@@ -60465,7 +61085,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_ssdp_port" lineno="81256">
+<interface name="corenet_udp_bind_ssdp_port" lineno="81677">
 <summary>
 Bind UDP sockets to the ssdp port.
 </summary>
@@ -60476,7 +61096,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_ssdp_port" lineno="81275">
+<interface name="corenet_tcp_connect_ssdp_port" lineno="81696">
 <summary>
 Make a TCP connection to the ssdp port.
 </summary>
@@ -60486,7 +61106,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_ssdp_client_packets" lineno="81295">
+<interface name="corenet_send_ssdp_client_packets" lineno="81716">
 <summary>
 Send ssdp_client packets.
 </summary>
@@ -60497,7 +61117,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_ssdp_client_packets" lineno="81314">
+<interface name="corenet_dontaudit_send_ssdp_client_packets" lineno="81735">
 <summary>
 Do not audit attempts to send ssdp_client packets.
 </summary>
@@ -60508,7 +61128,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_ssdp_client_packets" lineno="81333">
+<interface name="corenet_receive_ssdp_client_packets" lineno="81754">
 <summary>
 Receive ssdp_client packets.
 </summary>
@@ -60519,7 +61139,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_ssdp_client_packets" lineno="81352">
+<interface name="corenet_dontaudit_receive_ssdp_client_packets" lineno="81773">
 <summary>
 Do not audit attempts to receive ssdp_client packets.
 </summary>
@@ -60530,7 +61150,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_ssdp_client_packets" lineno="81371">
+<interface name="corenet_sendrecv_ssdp_client_packets" lineno="81792">
 <summary>
 Send and receive ssdp_client packets.
 </summary>
@@ -60541,7 +61161,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_ssdp_client_packets" lineno="81387">
+<interface name="corenet_dontaudit_sendrecv_ssdp_client_packets" lineno="81808">
 <summary>
 Do not audit attempts to send and receive ssdp_client packets.
 </summary>
@@ -60552,7 +61172,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_ssdp_client_packets" lineno="81402">
+<interface name="corenet_relabelto_ssdp_client_packets" lineno="81823">
 <summary>
 Relabel packets to ssdp_client the packet type.
 </summary>
@@ -60562,7 +61182,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_ssdp_server_packets" lineno="81422">
+<interface name="corenet_send_ssdp_server_packets" lineno="81843">
 <summary>
 Send ssdp_server packets.
 </summary>
@@ -60573,7 +61193,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_ssdp_server_packets" lineno="81441">
+<interface name="corenet_dontaudit_send_ssdp_server_packets" lineno="81862">
 <summary>
 Do not audit attempts to send ssdp_server packets.
 </summary>
@@ -60584,7 +61204,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_ssdp_server_packets" lineno="81460">
+<interface name="corenet_receive_ssdp_server_packets" lineno="81881">
 <summary>
 Receive ssdp_server packets.
 </summary>
@@ -60595,7 +61215,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_ssdp_server_packets" lineno="81479">
+<interface name="corenet_dontaudit_receive_ssdp_server_packets" lineno="81900">
 <summary>
 Do not audit attempts to receive ssdp_server packets.
 </summary>
@@ -60606,7 +61226,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_ssdp_server_packets" lineno="81498">
+<interface name="corenet_sendrecv_ssdp_server_packets" lineno="81919">
 <summary>
 Send and receive ssdp_server packets.
 </summary>
@@ -60617,7 +61237,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_ssdp_server_packets" lineno="81514">
+<interface name="corenet_dontaudit_sendrecv_ssdp_server_packets" lineno="81935">
 <summary>
 Do not audit attempts to send and receive ssdp_server packets.
 </summary>
@@ -60628,7 +61248,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_ssdp_server_packets" lineno="81529">
+<interface name="corenet_relabelto_ssdp_server_packets" lineno="81950">
 <summary>
 Relabel packets to ssdp_server the packet type.
 </summary>
@@ -60638,7 +61258,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_ssh_port" lineno="81551">
+<interface name="corenet_tcp_sendrecv_ssh_port" lineno="81972">
 <summary>
 Send and receive TCP traffic on the ssh port.
 </summary>
@@ -60649,7 +61269,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_ssh_port" lineno="81566">
+<interface name="corenet_udp_send_ssh_port" lineno="81987">
 <summary>
 Send UDP traffic on the ssh port.
 </summary>
@@ -60660,7 +61280,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_ssh_port" lineno="81581">
+<interface name="corenet_dontaudit_udp_send_ssh_port" lineno="82002">
 <summary>
 Do not audit attempts to send UDP traffic on the ssh port.
 </summary>
@@ -60671,7 +61291,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_ssh_port" lineno="81596">
+<interface name="corenet_udp_receive_ssh_port" lineno="82017">
 <summary>
 Receive UDP traffic on the ssh port.
 </summary>
@@ -60682,7 +61302,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_ssh_port" lineno="81611">
+<interface name="corenet_dontaudit_udp_receive_ssh_port" lineno="82032">
 <summary>
 Do not audit attempts to receive UDP traffic on the ssh port.
 </summary>
@@ -60693,7 +61313,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_ssh_port" lineno="81626">
+<interface name="corenet_udp_sendrecv_ssh_port" lineno="82047">
 <summary>
 Send and receive UDP traffic on the ssh port.
 </summary>
@@ -60704,7 +61324,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_ssh_port" lineno="81642">
+<interface name="corenet_dontaudit_udp_sendrecv_ssh_port" lineno="82063">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the ssh port.
@@ -60716,7 +61336,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_ssh_port" lineno="81657">
+<interface name="corenet_tcp_bind_ssh_port" lineno="82078">
 <summary>
 Bind TCP sockets to the ssh port.
 </summary>
@@ -60727,7 +61347,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_ssh_port" lineno="81677">
+<interface name="corenet_udp_bind_ssh_port" lineno="82098">
 <summary>
 Bind UDP sockets to the ssh port.
 </summary>
@@ -60738,7 +61358,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_ssh_port" lineno="81696">
+<interface name="corenet_tcp_connect_ssh_port" lineno="82117">
 <summary>
 Make a TCP connection to the ssh port.
 </summary>
@@ -60748,7 +61368,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_ssh_client_packets" lineno="81716">
+<interface name="corenet_send_ssh_client_packets" lineno="82137">
 <summary>
 Send ssh_client packets.
 </summary>
@@ -60759,7 +61379,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_ssh_client_packets" lineno="81735">
+<interface name="corenet_dontaudit_send_ssh_client_packets" lineno="82156">
 <summary>
 Do not audit attempts to send ssh_client packets.
 </summary>
@@ -60770,7 +61390,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_ssh_client_packets" lineno="81754">
+<interface name="corenet_receive_ssh_client_packets" lineno="82175">
 <summary>
 Receive ssh_client packets.
 </summary>
@@ -60781,7 +61401,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_ssh_client_packets" lineno="81773">
+<interface name="corenet_dontaudit_receive_ssh_client_packets" lineno="82194">
 <summary>
 Do not audit attempts to receive ssh_client packets.
 </summary>
@@ -60792,7 +61412,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_ssh_client_packets" lineno="81792">
+<interface name="corenet_sendrecv_ssh_client_packets" lineno="82213">
 <summary>
 Send and receive ssh_client packets.
 </summary>
@@ -60803,7 +61423,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_ssh_client_packets" lineno="81808">
+<interface name="corenet_dontaudit_sendrecv_ssh_client_packets" lineno="82229">
 <summary>
 Do not audit attempts to send and receive ssh_client packets.
 </summary>
@@ -60814,7 +61434,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_ssh_client_packets" lineno="81823">
+<interface name="corenet_relabelto_ssh_client_packets" lineno="82244">
 <summary>
 Relabel packets to ssh_client the packet type.
 </summary>
@@ -60824,7 +61444,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_ssh_server_packets" lineno="81843">
+<interface name="corenet_send_ssh_server_packets" lineno="82264">
 <summary>
 Send ssh_server packets.
 </summary>
@@ -60835,7 +61455,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_ssh_server_packets" lineno="81862">
+<interface name="corenet_dontaudit_send_ssh_server_packets" lineno="82283">
 <summary>
 Do not audit attempts to send ssh_server packets.
 </summary>
@@ -60846,7 +61466,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_ssh_server_packets" lineno="81881">
+<interface name="corenet_receive_ssh_server_packets" lineno="82302">
 <summary>
 Receive ssh_server packets.
 </summary>
@@ -60857,7 +61477,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_ssh_server_packets" lineno="81900">
+<interface name="corenet_dontaudit_receive_ssh_server_packets" lineno="82321">
 <summary>
 Do not audit attempts to receive ssh_server packets.
 </summary>
@@ -60868,7 +61488,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_ssh_server_packets" lineno="81919">
+<interface name="corenet_sendrecv_ssh_server_packets" lineno="82340">
 <summary>
 Send and receive ssh_server packets.
 </summary>
@@ -60879,7 +61499,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_ssh_server_packets" lineno="81935">
+<interface name="corenet_dontaudit_sendrecv_ssh_server_packets" lineno="82356">
 <summary>
 Do not audit attempts to send and receive ssh_server packets.
 </summary>
@@ -60890,7 +61510,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_ssh_server_packets" lineno="81950">
+<interface name="corenet_relabelto_ssh_server_packets" lineno="82371">
 <summary>
 Relabel packets to ssh_server the packet type.
 </summary>
@@ -60900,7 +61520,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_stunnel_port" lineno="81972">
+<interface name="corenet_tcp_sendrecv_stunnel_port" lineno="82393">
 <summary>
 Send and receive TCP traffic on the stunnel port.
 </summary>
@@ -60911,7 +61531,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_stunnel_port" lineno="81987">
+<interface name="corenet_udp_send_stunnel_port" lineno="82408">
 <summary>
 Send UDP traffic on the stunnel port.
 </summary>
@@ -60922,7 +61542,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_stunnel_port" lineno="82002">
+<interface name="corenet_dontaudit_udp_send_stunnel_port" lineno="82423">
 <summary>
 Do not audit attempts to send UDP traffic on the stunnel port.
 </summary>
@@ -60933,7 +61553,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_stunnel_port" lineno="82017">
+<interface name="corenet_udp_receive_stunnel_port" lineno="82438">
 <summary>
 Receive UDP traffic on the stunnel port.
 </summary>
@@ -60944,7 +61564,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_stunnel_port" lineno="82032">
+<interface name="corenet_dontaudit_udp_receive_stunnel_port" lineno="82453">
 <summary>
 Do not audit attempts to receive UDP traffic on the stunnel port.
 </summary>
@@ -60955,7 +61575,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_stunnel_port" lineno="82047">
+<interface name="corenet_udp_sendrecv_stunnel_port" lineno="82468">
 <summary>
 Send and receive UDP traffic on the stunnel port.
 </summary>
@@ -60966,7 +61586,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_stunnel_port" lineno="82063">
+<interface name="corenet_dontaudit_udp_sendrecv_stunnel_port" lineno="82484">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the stunnel port.
@@ -60978,7 +61598,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_stunnel_port" lineno="82078">
+<interface name="corenet_tcp_bind_stunnel_port" lineno="82499">
 <summary>
 Bind TCP sockets to the stunnel port.
 </summary>
@@ -60989,7 +61609,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_stunnel_port" lineno="82098">
+<interface name="corenet_udp_bind_stunnel_port" lineno="82519">
 <summary>
 Bind UDP sockets to the stunnel port.
 </summary>
@@ -61000,7 +61620,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_stunnel_port" lineno="82117">
+<interface name="corenet_tcp_connect_stunnel_port" lineno="82538">
 <summary>
 Make a TCP connection to the stunnel port.
 </summary>
@@ -61010,7 +61630,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_stunnel_client_packets" lineno="82137">
+<interface name="corenet_send_stunnel_client_packets" lineno="82558">
 <summary>
 Send stunnel_client packets.
 </summary>
@@ -61021,7 +61641,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_stunnel_client_packets" lineno="82156">
+<interface name="corenet_dontaudit_send_stunnel_client_packets" lineno="82577">
 <summary>
 Do not audit attempts to send stunnel_client packets.
 </summary>
@@ -61032,7 +61652,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_stunnel_client_packets" lineno="82175">
+<interface name="corenet_receive_stunnel_client_packets" lineno="82596">
 <summary>
 Receive stunnel_client packets.
 </summary>
@@ -61043,7 +61663,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_stunnel_client_packets" lineno="82194">
+<interface name="corenet_dontaudit_receive_stunnel_client_packets" lineno="82615">
 <summary>
 Do not audit attempts to receive stunnel_client packets.
 </summary>
@@ -61054,7 +61674,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_stunnel_client_packets" lineno="82213">
+<interface name="corenet_sendrecv_stunnel_client_packets" lineno="82634">
 <summary>
 Send and receive stunnel_client packets.
 </summary>
@@ -61065,7 +61685,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_stunnel_client_packets" lineno="82229">
+<interface name="corenet_dontaudit_sendrecv_stunnel_client_packets" lineno="82650">
 <summary>
 Do not audit attempts to send and receive stunnel_client packets.
 </summary>
@@ -61076,7 +61696,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_stunnel_client_packets" lineno="82244">
+<interface name="corenet_relabelto_stunnel_client_packets" lineno="82665">
 <summary>
 Relabel packets to stunnel_client the packet type.
 </summary>
@@ -61086,7 +61706,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_stunnel_server_packets" lineno="82264">
+<interface name="corenet_send_stunnel_server_packets" lineno="82685">
 <summary>
 Send stunnel_server packets.
 </summary>
@@ -61097,7 +61717,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_stunnel_server_packets" lineno="82283">
+<interface name="corenet_dontaudit_send_stunnel_server_packets" lineno="82704">
 <summary>
 Do not audit attempts to send stunnel_server packets.
 </summary>
@@ -61108,7 +61728,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_stunnel_server_packets" lineno="82302">
+<interface name="corenet_receive_stunnel_server_packets" lineno="82723">
 <summary>
 Receive stunnel_server packets.
 </summary>
@@ -61119,7 +61739,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_stunnel_server_packets" lineno="82321">
+<interface name="corenet_dontaudit_receive_stunnel_server_packets" lineno="82742">
 <summary>
 Do not audit attempts to receive stunnel_server packets.
 </summary>
@@ -61130,7 +61750,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_stunnel_server_packets" lineno="82340">
+<interface name="corenet_sendrecv_stunnel_server_packets" lineno="82761">
 <summary>
 Send and receive stunnel_server packets.
 </summary>
@@ -61141,7 +61761,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_stunnel_server_packets" lineno="82356">
+<interface name="corenet_dontaudit_sendrecv_stunnel_server_packets" lineno="82777">
 <summary>
 Do not audit attempts to send and receive stunnel_server packets.
 </summary>
@@ -61152,7 +61772,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_stunnel_server_packets" lineno="82371">
+<interface name="corenet_relabelto_stunnel_server_packets" lineno="82792">
 <summary>
 Relabel packets to stunnel_server the packet type.
 </summary>
@@ -61162,7 +61782,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_svn_port" lineno="82393">
+<interface name="corenet_tcp_sendrecv_svn_port" lineno="82814">
 <summary>
 Send and receive TCP traffic on the svn port.
 </summary>
@@ -61173,7 +61793,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_svn_port" lineno="82408">
+<interface name="corenet_udp_send_svn_port" lineno="82829">
 <summary>
 Send UDP traffic on the svn port.
 </summary>
@@ -61184,7 +61804,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_svn_port" lineno="82423">
+<interface name="corenet_dontaudit_udp_send_svn_port" lineno="82844">
 <summary>
 Do not audit attempts to send UDP traffic on the svn port.
 </summary>
@@ -61195,7 +61815,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_svn_port" lineno="82438">
+<interface name="corenet_udp_receive_svn_port" lineno="82859">
 <summary>
 Receive UDP traffic on the svn port.
 </summary>
@@ -61206,7 +61826,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_svn_port" lineno="82453">
+<interface name="corenet_dontaudit_udp_receive_svn_port" lineno="82874">
 <summary>
 Do not audit attempts to receive UDP traffic on the svn port.
 </summary>
@@ -61217,7 +61837,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_svn_port" lineno="82468">
+<interface name="corenet_udp_sendrecv_svn_port" lineno="82889">
 <summary>
 Send and receive UDP traffic on the svn port.
 </summary>
@@ -61228,7 +61848,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_svn_port" lineno="82484">
+<interface name="corenet_dontaudit_udp_sendrecv_svn_port" lineno="82905">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the svn port.
@@ -61240,7 +61860,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_svn_port" lineno="82499">
+<interface name="corenet_tcp_bind_svn_port" lineno="82920">
 <summary>
 Bind TCP sockets to the svn port.
 </summary>
@@ -61251,7 +61871,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_svn_port" lineno="82519">
+<interface name="corenet_udp_bind_svn_port" lineno="82940">
 <summary>
 Bind UDP sockets to the svn port.
 </summary>
@@ -61262,7 +61882,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_svn_port" lineno="82538">
+<interface name="corenet_tcp_connect_svn_port" lineno="82959">
 <summary>
 Make a TCP connection to the svn port.
 </summary>
@@ -61272,7 +61892,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_svn_client_packets" lineno="82558">
+<interface name="corenet_send_svn_client_packets" lineno="82979">
 <summary>
 Send svn_client packets.
 </summary>
@@ -61283,7 +61903,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_svn_client_packets" lineno="82577">
+<interface name="corenet_dontaudit_send_svn_client_packets" lineno="82998">
 <summary>
 Do not audit attempts to send svn_client packets.
 </summary>
@@ -61294,7 +61914,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_svn_client_packets" lineno="82596">
+<interface name="corenet_receive_svn_client_packets" lineno="83017">
 <summary>
 Receive svn_client packets.
 </summary>
@@ -61305,7 +61925,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_svn_client_packets" lineno="82615">
+<interface name="corenet_dontaudit_receive_svn_client_packets" lineno="83036">
 <summary>
 Do not audit attempts to receive svn_client packets.
 </summary>
@@ -61316,7 +61936,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_svn_client_packets" lineno="82634">
+<interface name="corenet_sendrecv_svn_client_packets" lineno="83055">
 <summary>
 Send and receive svn_client packets.
 </summary>
@@ -61327,7 +61947,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_svn_client_packets" lineno="82650">
+<interface name="corenet_dontaudit_sendrecv_svn_client_packets" lineno="83071">
 <summary>
 Do not audit attempts to send and receive svn_client packets.
 </summary>
@@ -61338,7 +61958,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_svn_client_packets" lineno="82665">
+<interface name="corenet_relabelto_svn_client_packets" lineno="83086">
 <summary>
 Relabel packets to svn_client the packet type.
 </summary>
@@ -61348,7 +61968,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_svn_server_packets" lineno="82685">
+<interface name="corenet_send_svn_server_packets" lineno="83106">
 <summary>
 Send svn_server packets.
 </summary>
@@ -61359,7 +61979,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_svn_server_packets" lineno="82704">
+<interface name="corenet_dontaudit_send_svn_server_packets" lineno="83125">
 <summary>
 Do not audit attempts to send svn_server packets.
 </summary>
@@ -61370,7 +61990,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_svn_server_packets" lineno="82723">
+<interface name="corenet_receive_svn_server_packets" lineno="83144">
 <summary>
 Receive svn_server packets.
 </summary>
@@ -61381,7 +62001,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_svn_server_packets" lineno="82742">
+<interface name="corenet_dontaudit_receive_svn_server_packets" lineno="83163">
 <summary>
 Do not audit attempts to receive svn_server packets.
 </summary>
@@ -61392,7 +62012,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_svn_server_packets" lineno="82761">
+<interface name="corenet_sendrecv_svn_server_packets" lineno="83182">
 <summary>
 Send and receive svn_server packets.
 </summary>
@@ -61403,7 +62023,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_svn_server_packets" lineno="82777">
+<interface name="corenet_dontaudit_sendrecv_svn_server_packets" lineno="83198">
 <summary>
 Do not audit attempts to send and receive svn_server packets.
 </summary>
@@ -61414,7 +62034,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_svn_server_packets" lineno="82792">
+<interface name="corenet_relabelto_svn_server_packets" lineno="83213">
 <summary>
 Relabel packets to svn_server the packet type.
 </summary>
@@ -61424,7 +62044,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_svrloc_port" lineno="82814">
+<interface name="corenet_tcp_sendrecv_svrloc_port" lineno="83235">
 <summary>
 Send and receive TCP traffic on the svrloc port.
 </summary>
@@ -61435,7 +62055,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_svrloc_port" lineno="82829">
+<interface name="corenet_udp_send_svrloc_port" lineno="83250">
 <summary>
 Send UDP traffic on the svrloc port.
 </summary>
@@ -61446,7 +62066,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_svrloc_port" lineno="82844">
+<interface name="corenet_dontaudit_udp_send_svrloc_port" lineno="83265">
 <summary>
 Do not audit attempts to send UDP traffic on the svrloc port.
 </summary>
@@ -61457,7 +62077,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_svrloc_port" lineno="82859">
+<interface name="corenet_udp_receive_svrloc_port" lineno="83280">
 <summary>
 Receive UDP traffic on the svrloc port.
 </summary>
@@ -61468,7 +62088,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_svrloc_port" lineno="82874">
+<interface name="corenet_dontaudit_udp_receive_svrloc_port" lineno="83295">
 <summary>
 Do not audit attempts to receive UDP traffic on the svrloc port.
 </summary>
@@ -61479,7 +62099,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_svrloc_port" lineno="82889">
+<interface name="corenet_udp_sendrecv_svrloc_port" lineno="83310">
 <summary>
 Send and receive UDP traffic on the svrloc port.
 </summary>
@@ -61490,7 +62110,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_svrloc_port" lineno="82905">
+<interface name="corenet_dontaudit_udp_sendrecv_svrloc_port" lineno="83326">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the svrloc port.
@@ -61502,7 +62122,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_svrloc_port" lineno="82920">
+<interface name="corenet_tcp_bind_svrloc_port" lineno="83341">
 <summary>
 Bind TCP sockets to the svrloc port.
 </summary>
@@ -61513,7 +62133,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_svrloc_port" lineno="82940">
+<interface name="corenet_udp_bind_svrloc_port" lineno="83361">
 <summary>
 Bind UDP sockets to the svrloc port.
 </summary>
@@ -61524,7 +62144,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_svrloc_port" lineno="82959">
+<interface name="corenet_tcp_connect_svrloc_port" lineno="83380">
 <summary>
 Make a TCP connection to the svrloc port.
 </summary>
@@ -61534,7 +62154,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_svrloc_client_packets" lineno="82979">
+<interface name="corenet_send_svrloc_client_packets" lineno="83400">
 <summary>
 Send svrloc_client packets.
 </summary>
@@ -61545,7 +62165,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_svrloc_client_packets" lineno="82998">
+<interface name="corenet_dontaudit_send_svrloc_client_packets" lineno="83419">
 <summary>
 Do not audit attempts to send svrloc_client packets.
 </summary>
@@ -61556,7 +62176,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_svrloc_client_packets" lineno="83017">
+<interface name="corenet_receive_svrloc_client_packets" lineno="83438">
 <summary>
 Receive svrloc_client packets.
 </summary>
@@ -61567,7 +62187,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_svrloc_client_packets" lineno="83036">
+<interface name="corenet_dontaudit_receive_svrloc_client_packets" lineno="83457">
 <summary>
 Do not audit attempts to receive svrloc_client packets.
 </summary>
@@ -61578,7 +62198,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_svrloc_client_packets" lineno="83055">
+<interface name="corenet_sendrecv_svrloc_client_packets" lineno="83476">
 <summary>
 Send and receive svrloc_client packets.
 </summary>
@@ -61589,7 +62209,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_svrloc_client_packets" lineno="83071">
+<interface name="corenet_dontaudit_sendrecv_svrloc_client_packets" lineno="83492">
 <summary>
 Do not audit attempts to send and receive svrloc_client packets.
 </summary>
@@ -61600,7 +62220,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_svrloc_client_packets" lineno="83086">
+<interface name="corenet_relabelto_svrloc_client_packets" lineno="83507">
 <summary>
 Relabel packets to svrloc_client the packet type.
 </summary>
@@ -61610,7 +62230,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_svrloc_server_packets" lineno="83106">
+<interface name="corenet_send_svrloc_server_packets" lineno="83527">
 <summary>
 Send svrloc_server packets.
 </summary>
@@ -61621,7 +62241,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_svrloc_server_packets" lineno="83125">
+<interface name="corenet_dontaudit_send_svrloc_server_packets" lineno="83546">
 <summary>
 Do not audit attempts to send svrloc_server packets.
 </summary>
@@ -61632,7 +62252,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_svrloc_server_packets" lineno="83144">
+<interface name="corenet_receive_svrloc_server_packets" lineno="83565">
 <summary>
 Receive svrloc_server packets.
 </summary>
@@ -61643,7 +62263,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_svrloc_server_packets" lineno="83163">
+<interface name="corenet_dontaudit_receive_svrloc_server_packets" lineno="83584">
 <summary>
 Do not audit attempts to receive svrloc_server packets.
 </summary>
@@ -61654,7 +62274,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_svrloc_server_packets" lineno="83182">
+<interface name="corenet_sendrecv_svrloc_server_packets" lineno="83603">
 <summary>
 Send and receive svrloc_server packets.
 </summary>
@@ -61665,7 +62285,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_svrloc_server_packets" lineno="83198">
+<interface name="corenet_dontaudit_sendrecv_svrloc_server_packets" lineno="83619">
 <summary>
 Do not audit attempts to send and receive svrloc_server packets.
 </summary>
@@ -61676,7 +62296,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_svrloc_server_packets" lineno="83213">
+<interface name="corenet_relabelto_svrloc_server_packets" lineno="83634">
 <summary>
 Relabel packets to svrloc_server the packet type.
 </summary>
@@ -61686,7 +62306,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_swat_port" lineno="83235">
+<interface name="corenet_tcp_sendrecv_swat_port" lineno="83656">
 <summary>
 Send and receive TCP traffic on the swat port.
 </summary>
@@ -61697,7 +62317,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_swat_port" lineno="83250">
+<interface name="corenet_udp_send_swat_port" lineno="83671">
 <summary>
 Send UDP traffic on the swat port.
 </summary>
@@ -61708,7 +62328,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_swat_port" lineno="83265">
+<interface name="corenet_dontaudit_udp_send_swat_port" lineno="83686">
 <summary>
 Do not audit attempts to send UDP traffic on the swat port.
 </summary>
@@ -61719,7 +62339,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_swat_port" lineno="83280">
+<interface name="corenet_udp_receive_swat_port" lineno="83701">
 <summary>
 Receive UDP traffic on the swat port.
 </summary>
@@ -61730,7 +62350,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_swat_port" lineno="83295">
+<interface name="corenet_dontaudit_udp_receive_swat_port" lineno="83716">
 <summary>
 Do not audit attempts to receive UDP traffic on the swat port.
 </summary>
@@ -61741,7 +62361,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_swat_port" lineno="83310">
+<interface name="corenet_udp_sendrecv_swat_port" lineno="83731">
 <summary>
 Send and receive UDP traffic on the swat port.
 </summary>
@@ -61752,7 +62372,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_swat_port" lineno="83326">
+<interface name="corenet_dontaudit_udp_sendrecv_swat_port" lineno="83747">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the swat port.
@@ -61764,7 +62384,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_swat_port" lineno="83341">
+<interface name="corenet_tcp_bind_swat_port" lineno="83762">
 <summary>
 Bind TCP sockets to the swat port.
 </summary>
@@ -61775,7 +62395,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_swat_port" lineno="83361">
+<interface name="corenet_udp_bind_swat_port" lineno="83782">
 <summary>
 Bind UDP sockets to the swat port.
 </summary>
@@ -61786,7 +62406,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_swat_port" lineno="83380">
+<interface name="corenet_tcp_connect_swat_port" lineno="83801">
 <summary>
 Make a TCP connection to the swat port.
 </summary>
@@ -61796,7 +62416,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_swat_client_packets" lineno="83400">
+<interface name="corenet_send_swat_client_packets" lineno="83821">
 <summary>
 Send swat_client packets.
 </summary>
@@ -61807,7 +62427,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_swat_client_packets" lineno="83419">
+<interface name="corenet_dontaudit_send_swat_client_packets" lineno="83840">
 <summary>
 Do not audit attempts to send swat_client packets.
 </summary>
@@ -61818,7 +62438,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_swat_client_packets" lineno="83438">
+<interface name="corenet_receive_swat_client_packets" lineno="83859">
 <summary>
 Receive swat_client packets.
 </summary>
@@ -61829,7 +62449,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_swat_client_packets" lineno="83457">
+<interface name="corenet_dontaudit_receive_swat_client_packets" lineno="83878">
 <summary>
 Do not audit attempts to receive swat_client packets.
 </summary>
@@ -61840,7 +62460,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_swat_client_packets" lineno="83476">
+<interface name="corenet_sendrecv_swat_client_packets" lineno="83897">
 <summary>
 Send and receive swat_client packets.
 </summary>
@@ -61851,7 +62471,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_swat_client_packets" lineno="83492">
+<interface name="corenet_dontaudit_sendrecv_swat_client_packets" lineno="83913">
 <summary>
 Do not audit attempts to send and receive swat_client packets.
 </summary>
@@ -61862,7 +62482,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_swat_client_packets" lineno="83507">
+<interface name="corenet_relabelto_swat_client_packets" lineno="83928">
 <summary>
 Relabel packets to swat_client the packet type.
 </summary>
@@ -61872,7 +62492,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_swat_server_packets" lineno="83527">
+<interface name="corenet_send_swat_server_packets" lineno="83948">
 <summary>
 Send swat_server packets.
 </summary>
@@ -61883,7 +62503,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_swat_server_packets" lineno="83546">
+<interface name="corenet_dontaudit_send_swat_server_packets" lineno="83967">
 <summary>
 Do not audit attempts to send swat_server packets.
 </summary>
@@ -61894,7 +62514,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_swat_server_packets" lineno="83565">
+<interface name="corenet_receive_swat_server_packets" lineno="83986">
 <summary>
 Receive swat_server packets.
 </summary>
@@ -61905,7 +62525,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_swat_server_packets" lineno="83584">
+<interface name="corenet_dontaudit_receive_swat_server_packets" lineno="84005">
 <summary>
 Do not audit attempts to receive swat_server packets.
 </summary>
@@ -61916,7 +62536,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_swat_server_packets" lineno="83603">
+<interface name="corenet_sendrecv_swat_server_packets" lineno="84024">
 <summary>
 Send and receive swat_server packets.
 </summary>
@@ -61927,7 +62547,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_swat_server_packets" lineno="83619">
+<interface name="corenet_dontaudit_sendrecv_swat_server_packets" lineno="84040">
 <summary>
 Do not audit attempts to send and receive swat_server packets.
 </summary>
@@ -61938,7 +62558,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_swat_server_packets" lineno="83634">
+<interface name="corenet_relabelto_swat_server_packets" lineno="84055">
 <summary>
 Relabel packets to swat_server the packet type.
 </summary>
@@ -61948,7 +62568,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_syncthing_port" lineno="83656">
+<interface name="corenet_tcp_sendrecv_syncthing_port" lineno="84077">
 <summary>
 Send and receive TCP traffic on the syncthing port.
 </summary>
@@ -61959,7 +62579,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_syncthing_port" lineno="83671">
+<interface name="corenet_udp_send_syncthing_port" lineno="84092">
 <summary>
 Send UDP traffic on the syncthing port.
 </summary>
@@ -61970,7 +62590,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_syncthing_port" lineno="83686">
+<interface name="corenet_dontaudit_udp_send_syncthing_port" lineno="84107">
 <summary>
 Do not audit attempts to send UDP traffic on the syncthing port.
 </summary>
@@ -61981,7 +62601,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_syncthing_port" lineno="83701">
+<interface name="corenet_udp_receive_syncthing_port" lineno="84122">
 <summary>
 Receive UDP traffic on the syncthing port.
 </summary>
@@ -61992,7 +62612,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_syncthing_port" lineno="83716">
+<interface name="corenet_dontaudit_udp_receive_syncthing_port" lineno="84137">
 <summary>
 Do not audit attempts to receive UDP traffic on the syncthing port.
 </summary>
@@ -62003,7 +62623,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_syncthing_port" lineno="83731">
+<interface name="corenet_udp_sendrecv_syncthing_port" lineno="84152">
 <summary>
 Send and receive UDP traffic on the syncthing port.
 </summary>
@@ -62014,7 +62634,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_syncthing_port" lineno="83747">
+<interface name="corenet_dontaudit_udp_sendrecv_syncthing_port" lineno="84168">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the syncthing port.
@@ -62026,7 +62646,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_syncthing_port" lineno="83762">
+<interface name="corenet_tcp_bind_syncthing_port" lineno="84183">
 <summary>
 Bind TCP sockets to the syncthing port.
 </summary>
@@ -62037,7 +62657,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_syncthing_port" lineno="83782">
+<interface name="corenet_udp_bind_syncthing_port" lineno="84203">
 <summary>
 Bind UDP sockets to the syncthing port.
 </summary>
@@ -62048,7 +62668,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_syncthing_port" lineno="83801">
+<interface name="corenet_tcp_connect_syncthing_port" lineno="84222">
 <summary>
 Make a TCP connection to the syncthing port.
 </summary>
@@ -62058,7 +62678,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_syncthing_client_packets" lineno="83821">
+<interface name="corenet_send_syncthing_client_packets" lineno="84242">
 <summary>
 Send syncthing_client packets.
 </summary>
@@ -62069,7 +62689,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_syncthing_client_packets" lineno="83840">
+<interface name="corenet_dontaudit_send_syncthing_client_packets" lineno="84261">
 <summary>
 Do not audit attempts to send syncthing_client packets.
 </summary>
@@ -62080,7 +62700,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_syncthing_client_packets" lineno="83859">
+<interface name="corenet_receive_syncthing_client_packets" lineno="84280">
 <summary>
 Receive syncthing_client packets.
 </summary>
@@ -62091,7 +62711,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_syncthing_client_packets" lineno="83878">
+<interface name="corenet_dontaudit_receive_syncthing_client_packets" lineno="84299">
 <summary>
 Do not audit attempts to receive syncthing_client packets.
 </summary>
@@ -62102,7 +62722,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_syncthing_client_packets" lineno="83897">
+<interface name="corenet_sendrecv_syncthing_client_packets" lineno="84318">
 <summary>
 Send and receive syncthing_client packets.
 </summary>
@@ -62113,7 +62733,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_syncthing_client_packets" lineno="83913">
+<interface name="corenet_dontaudit_sendrecv_syncthing_client_packets" lineno="84334">
 <summary>
 Do not audit attempts to send and receive syncthing_client packets.
 </summary>
@@ -62124,7 +62744,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_syncthing_client_packets" lineno="83928">
+<interface name="corenet_relabelto_syncthing_client_packets" lineno="84349">
 <summary>
 Relabel packets to syncthing_client the packet type.
 </summary>
@@ -62134,7 +62754,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_syncthing_server_packets" lineno="83948">
+<interface name="corenet_send_syncthing_server_packets" lineno="84369">
 <summary>
 Send syncthing_server packets.
 </summary>
@@ -62145,7 +62765,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_syncthing_server_packets" lineno="83967">
+<interface name="corenet_dontaudit_send_syncthing_server_packets" lineno="84388">
 <summary>
 Do not audit attempts to send syncthing_server packets.
 </summary>
@@ -62156,7 +62776,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_syncthing_server_packets" lineno="83986">
+<interface name="corenet_receive_syncthing_server_packets" lineno="84407">
 <summary>
 Receive syncthing_server packets.
 </summary>
@@ -62167,7 +62787,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_syncthing_server_packets" lineno="84005">
+<interface name="corenet_dontaudit_receive_syncthing_server_packets" lineno="84426">
 <summary>
 Do not audit attempts to receive syncthing_server packets.
 </summary>
@@ -62178,7 +62798,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_syncthing_server_packets" lineno="84024">
+<interface name="corenet_sendrecv_syncthing_server_packets" lineno="84445">
 <summary>
 Send and receive syncthing_server packets.
 </summary>
@@ -62189,7 +62809,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_syncthing_server_packets" lineno="84040">
+<interface name="corenet_dontaudit_sendrecv_syncthing_server_packets" lineno="84461">
 <summary>
 Do not audit attempts to send and receive syncthing_server packets.
 </summary>
@@ -62200,7 +62820,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_syncthing_server_packets" lineno="84055">
+<interface name="corenet_relabelto_syncthing_server_packets" lineno="84476">
 <summary>
 Relabel packets to syncthing_server the packet type.
 </summary>
@@ -62210,7 +62830,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_syncthing_admin_port" lineno="84077">
+<interface name="corenet_tcp_sendrecv_syncthing_admin_port" lineno="84498">
 <summary>
 Send and receive TCP traffic on the syncthing_admin port.
 </summary>
@@ -62221,7 +62841,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_syncthing_admin_port" lineno="84092">
+<interface name="corenet_udp_send_syncthing_admin_port" lineno="84513">
 <summary>
 Send UDP traffic on the syncthing_admin port.
 </summary>
@@ -62232,7 +62852,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_syncthing_admin_port" lineno="84107">
+<interface name="corenet_dontaudit_udp_send_syncthing_admin_port" lineno="84528">
 <summary>
 Do not audit attempts to send UDP traffic on the syncthing_admin port.
 </summary>
@@ -62243,7 +62863,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_syncthing_admin_port" lineno="84122">
+<interface name="corenet_udp_receive_syncthing_admin_port" lineno="84543">
 <summary>
 Receive UDP traffic on the syncthing_admin port.
 </summary>
@@ -62254,7 +62874,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_syncthing_admin_port" lineno="84137">
+<interface name="corenet_dontaudit_udp_receive_syncthing_admin_port" lineno="84558">
 <summary>
 Do not audit attempts to receive UDP traffic on the syncthing_admin port.
 </summary>
@@ -62265,7 +62885,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_syncthing_admin_port" lineno="84152">
+<interface name="corenet_udp_sendrecv_syncthing_admin_port" lineno="84573">
 <summary>
 Send and receive UDP traffic on the syncthing_admin port.
 </summary>
@@ -62276,7 +62896,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_syncthing_admin_port" lineno="84168">
+<interface name="corenet_dontaudit_udp_sendrecv_syncthing_admin_port" lineno="84589">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the syncthing_admin port.
@@ -62288,7 +62908,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_syncthing_admin_port" lineno="84183">
+<interface name="corenet_tcp_bind_syncthing_admin_port" lineno="84604">
 <summary>
 Bind TCP sockets to the syncthing_admin port.
 </summary>
@@ -62299,7 +62919,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_syncthing_admin_port" lineno="84203">
+<interface name="corenet_udp_bind_syncthing_admin_port" lineno="84624">
 <summary>
 Bind UDP sockets to the syncthing_admin port.
 </summary>
@@ -62310,7 +62930,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_syncthing_admin_port" lineno="84222">
+<interface name="corenet_tcp_connect_syncthing_admin_port" lineno="84643">
 <summary>
 Make a TCP connection to the syncthing_admin port.
 </summary>
@@ -62320,7 +62940,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_syncthing_admin_client_packets" lineno="84242">
+<interface name="corenet_send_syncthing_admin_client_packets" lineno="84663">
 <summary>
 Send syncthing_admin_client packets.
 </summary>
@@ -62331,7 +62951,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_syncthing_admin_client_packets" lineno="84261">
+<interface name="corenet_dontaudit_send_syncthing_admin_client_packets" lineno="84682">
 <summary>
 Do not audit attempts to send syncthing_admin_client packets.
 </summary>
@@ -62342,7 +62962,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_syncthing_admin_client_packets" lineno="84280">
+<interface name="corenet_receive_syncthing_admin_client_packets" lineno="84701">
 <summary>
 Receive syncthing_admin_client packets.
 </summary>
@@ -62353,7 +62973,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_syncthing_admin_client_packets" lineno="84299">
+<interface name="corenet_dontaudit_receive_syncthing_admin_client_packets" lineno="84720">
 <summary>
 Do not audit attempts to receive syncthing_admin_client packets.
 </summary>
@@ -62364,7 +62984,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_syncthing_admin_client_packets" lineno="84318">
+<interface name="corenet_sendrecv_syncthing_admin_client_packets" lineno="84739">
 <summary>
 Send and receive syncthing_admin_client packets.
 </summary>
@@ -62375,7 +62995,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_syncthing_admin_client_packets" lineno="84334">
+<interface name="corenet_dontaudit_sendrecv_syncthing_admin_client_packets" lineno="84755">
 <summary>
 Do not audit attempts to send and receive syncthing_admin_client packets.
 </summary>
@@ -62386,7 +63006,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_syncthing_admin_client_packets" lineno="84349">
+<interface name="corenet_relabelto_syncthing_admin_client_packets" lineno="84770">
 <summary>
 Relabel packets to syncthing_admin_client the packet type.
 </summary>
@@ -62396,7 +63016,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_syncthing_admin_server_packets" lineno="84369">
+<interface name="corenet_send_syncthing_admin_server_packets" lineno="84790">
 <summary>
 Send syncthing_admin_server packets.
 </summary>
@@ -62407,7 +63027,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_syncthing_admin_server_packets" lineno="84388">
+<interface name="corenet_dontaudit_send_syncthing_admin_server_packets" lineno="84809">
 <summary>
 Do not audit attempts to send syncthing_admin_server packets.
 </summary>
@@ -62418,7 +63038,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_syncthing_admin_server_packets" lineno="84407">
+<interface name="corenet_receive_syncthing_admin_server_packets" lineno="84828">
 <summary>
 Receive syncthing_admin_server packets.
 </summary>
@@ -62429,7 +63049,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_syncthing_admin_server_packets" lineno="84426">
+<interface name="corenet_dontaudit_receive_syncthing_admin_server_packets" lineno="84847">
 <summary>
 Do not audit attempts to receive syncthing_admin_server packets.
 </summary>
@@ -62440,7 +63060,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_syncthing_admin_server_packets" lineno="84445">
+<interface name="corenet_sendrecv_syncthing_admin_server_packets" lineno="84866">
 <summary>
 Send and receive syncthing_admin_server packets.
 </summary>
@@ -62451,7 +63071,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_syncthing_admin_server_packets" lineno="84461">
+<interface name="corenet_dontaudit_sendrecv_syncthing_admin_server_packets" lineno="84882">
 <summary>
 Do not audit attempts to send and receive syncthing_admin_server packets.
 </summary>
@@ -62462,7 +63082,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_syncthing_admin_server_packets" lineno="84476">
+<interface name="corenet_relabelto_syncthing_admin_server_packets" lineno="84897">
 <summary>
 Relabel packets to syncthing_admin_server the packet type.
 </summary>
@@ -62472,7 +63092,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_syncthing_discovery_port" lineno="84498">
+<interface name="corenet_tcp_sendrecv_syncthing_discovery_port" lineno="84919">
 <summary>
 Send and receive TCP traffic on the syncthing_discovery port.
 </summary>
@@ -62483,7 +63103,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_syncthing_discovery_port" lineno="84513">
+<interface name="corenet_udp_send_syncthing_discovery_port" lineno="84934">
 <summary>
 Send UDP traffic on the syncthing_discovery port.
 </summary>
@@ -62494,7 +63114,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_syncthing_discovery_port" lineno="84528">
+<interface name="corenet_dontaudit_udp_send_syncthing_discovery_port" lineno="84949">
 <summary>
 Do not audit attempts to send UDP traffic on the syncthing_discovery port.
 </summary>
@@ -62505,7 +63125,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_syncthing_discovery_port" lineno="84543">
+<interface name="corenet_udp_receive_syncthing_discovery_port" lineno="84964">
 <summary>
 Receive UDP traffic on the syncthing_discovery port.
 </summary>
@@ -62516,7 +63136,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_syncthing_discovery_port" lineno="84558">
+<interface name="corenet_dontaudit_udp_receive_syncthing_discovery_port" lineno="84979">
 <summary>
 Do not audit attempts to receive UDP traffic on the syncthing_discovery port.
 </summary>
@@ -62527,7 +63147,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_syncthing_discovery_port" lineno="84573">
+<interface name="corenet_udp_sendrecv_syncthing_discovery_port" lineno="84994">
 <summary>
 Send and receive UDP traffic on the syncthing_discovery port.
 </summary>
@@ -62538,7 +63158,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_syncthing_discovery_port" lineno="84589">
+<interface name="corenet_dontaudit_udp_sendrecv_syncthing_discovery_port" lineno="85010">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the syncthing_discovery port.
@@ -62550,7 +63170,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_syncthing_discovery_port" lineno="84604">
+<interface name="corenet_tcp_bind_syncthing_discovery_port" lineno="85025">
 <summary>
 Bind TCP sockets to the syncthing_discovery port.
 </summary>
@@ -62561,7 +63181,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_syncthing_discovery_port" lineno="84624">
+<interface name="corenet_udp_bind_syncthing_discovery_port" lineno="85045">
 <summary>
 Bind UDP sockets to the syncthing_discovery port.
 </summary>
@@ -62572,7 +63192,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_syncthing_discovery_port" lineno="84643">
+<interface name="corenet_tcp_connect_syncthing_discovery_port" lineno="85064">
 <summary>
 Make a TCP connection to the syncthing_discovery port.
 </summary>
@@ -62582,7 +63202,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_syncthing_discovery_client_packets" lineno="84663">
+<interface name="corenet_send_syncthing_discovery_client_packets" lineno="85084">
 <summary>
 Send syncthing_discovery_client packets.
 </summary>
@@ -62593,7 +63213,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_syncthing_discovery_client_packets" lineno="84682">
+<interface name="corenet_dontaudit_send_syncthing_discovery_client_packets" lineno="85103">
 <summary>
 Do not audit attempts to send syncthing_discovery_client packets.
 </summary>
@@ -62604,7 +63224,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_syncthing_discovery_client_packets" lineno="84701">
+<interface name="corenet_receive_syncthing_discovery_client_packets" lineno="85122">
 <summary>
 Receive syncthing_discovery_client packets.
 </summary>
@@ -62615,7 +63235,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_syncthing_discovery_client_packets" lineno="84720">
+<interface name="corenet_dontaudit_receive_syncthing_discovery_client_packets" lineno="85141">
 <summary>
 Do not audit attempts to receive syncthing_discovery_client packets.
 </summary>
@@ -62626,7 +63246,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_syncthing_discovery_client_packets" lineno="84739">
+<interface name="corenet_sendrecv_syncthing_discovery_client_packets" lineno="85160">
 <summary>
 Send and receive syncthing_discovery_client packets.
 </summary>
@@ -62637,7 +63257,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_syncthing_discovery_client_packets" lineno="84755">
+<interface name="corenet_dontaudit_sendrecv_syncthing_discovery_client_packets" lineno="85176">
 <summary>
 Do not audit attempts to send and receive syncthing_discovery_client packets.
 </summary>
@@ -62648,7 +63268,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_syncthing_discovery_client_packets" lineno="84770">
+<interface name="corenet_relabelto_syncthing_discovery_client_packets" lineno="85191">
 <summary>
 Relabel packets to syncthing_discovery_client the packet type.
 </summary>
@@ -62658,7 +63278,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_syncthing_discovery_server_packets" lineno="84790">
+<interface name="corenet_send_syncthing_discovery_server_packets" lineno="85211">
 <summary>
 Send syncthing_discovery_server packets.
 </summary>
@@ -62669,7 +63289,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_syncthing_discovery_server_packets" lineno="84809">
+<interface name="corenet_dontaudit_send_syncthing_discovery_server_packets" lineno="85230">
 <summary>
 Do not audit attempts to send syncthing_discovery_server packets.
 </summary>
@@ -62680,7 +63300,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_syncthing_discovery_server_packets" lineno="84828">
+<interface name="corenet_receive_syncthing_discovery_server_packets" lineno="85249">
 <summary>
 Receive syncthing_discovery_server packets.
 </summary>
@@ -62691,7 +63311,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_syncthing_discovery_server_packets" lineno="84847">
+<interface name="corenet_dontaudit_receive_syncthing_discovery_server_packets" lineno="85268">
 <summary>
 Do not audit attempts to receive syncthing_discovery_server packets.
 </summary>
@@ -62702,7 +63322,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_syncthing_discovery_server_packets" lineno="84866">
+<interface name="corenet_sendrecv_syncthing_discovery_server_packets" lineno="85287">
 <summary>
 Send and receive syncthing_discovery_server packets.
 </summary>
@@ -62713,7 +63333,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_syncthing_discovery_server_packets" lineno="84882">
+<interface name="corenet_dontaudit_sendrecv_syncthing_discovery_server_packets" lineno="85303">
 <summary>
 Do not audit attempts to send and receive syncthing_discovery_server packets.
 </summary>
@@ -62724,7 +63344,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_syncthing_discovery_server_packets" lineno="84897">
+<interface name="corenet_relabelto_syncthing_discovery_server_packets" lineno="85318">
 <summary>
 Relabel packets to syncthing_discovery_server the packet type.
 </summary>
@@ -62734,7 +63354,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_sype_transport_port" lineno="84919">
+<interface name="corenet_tcp_sendrecv_sype_transport_port" lineno="85340">
 <summary>
 Send and receive TCP traffic on the sype_transport port.
 </summary>
@@ -62745,7 +63365,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_sype_transport_port" lineno="84934">
+<interface name="corenet_udp_send_sype_transport_port" lineno="85355">
 <summary>
 Send UDP traffic on the sype_transport port.
 </summary>
@@ -62756,7 +63376,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_sype_transport_port" lineno="84949">
+<interface name="corenet_dontaudit_udp_send_sype_transport_port" lineno="85370">
 <summary>
 Do not audit attempts to send UDP traffic on the sype_transport port.
 </summary>
@@ -62767,7 +63387,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_sype_transport_port" lineno="84964">
+<interface name="corenet_udp_receive_sype_transport_port" lineno="85385">
 <summary>
 Receive UDP traffic on the sype_transport port.
 </summary>
@@ -62778,7 +63398,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_sype_transport_port" lineno="84979">
+<interface name="corenet_dontaudit_udp_receive_sype_transport_port" lineno="85400">
 <summary>
 Do not audit attempts to receive UDP traffic on the sype_transport port.
 </summary>
@@ -62789,7 +63409,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_sype_transport_port" lineno="84994">
+<interface name="corenet_udp_sendrecv_sype_transport_port" lineno="85415">
 <summary>
 Send and receive UDP traffic on the sype_transport port.
 </summary>
@@ -62800,7 +63420,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_sype_transport_port" lineno="85010">
+<interface name="corenet_dontaudit_udp_sendrecv_sype_transport_port" lineno="85431">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the sype_transport port.
@@ -62812,7 +63432,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_sype_transport_port" lineno="85025">
+<interface name="corenet_tcp_bind_sype_transport_port" lineno="85446">
 <summary>
 Bind TCP sockets to the sype_transport port.
 </summary>
@@ -62823,7 +63443,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_sype_transport_port" lineno="85045">
+<interface name="corenet_udp_bind_sype_transport_port" lineno="85466">
 <summary>
 Bind UDP sockets to the sype_transport port.
 </summary>
@@ -62834,7 +63454,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_sype_transport_port" lineno="85064">
+<interface name="corenet_tcp_connect_sype_transport_port" lineno="85485">
 <summary>
 Make a TCP connection to the sype_transport port.
 </summary>
@@ -62844,7 +63464,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_sype_transport_client_packets" lineno="85084">
+<interface name="corenet_send_sype_transport_client_packets" lineno="85505">
 <summary>
 Send sype_transport_client packets.
 </summary>
@@ -62855,7 +63475,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_sype_transport_client_packets" lineno="85103">
+<interface name="corenet_dontaudit_send_sype_transport_client_packets" lineno="85524">
 <summary>
 Do not audit attempts to send sype_transport_client packets.
 </summary>
@@ -62866,7 +63486,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_sype_transport_client_packets" lineno="85122">
+<interface name="corenet_receive_sype_transport_client_packets" lineno="85543">
 <summary>
 Receive sype_transport_client packets.
 </summary>
@@ -62877,7 +63497,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_sype_transport_client_packets" lineno="85141">
+<interface name="corenet_dontaudit_receive_sype_transport_client_packets" lineno="85562">
 <summary>
 Do not audit attempts to receive sype_transport_client packets.
 </summary>
@@ -62888,7 +63508,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_sype_transport_client_packets" lineno="85160">
+<interface name="corenet_sendrecv_sype_transport_client_packets" lineno="85581">
 <summary>
 Send and receive sype_transport_client packets.
 </summary>
@@ -62899,7 +63519,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_sype_transport_client_packets" lineno="85176">
+<interface name="corenet_dontaudit_sendrecv_sype_transport_client_packets" lineno="85597">
 <summary>
 Do not audit attempts to send and receive sype_transport_client packets.
 </summary>
@@ -62910,7 +63530,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_sype_transport_client_packets" lineno="85191">
+<interface name="corenet_relabelto_sype_transport_client_packets" lineno="85612">
 <summary>
 Relabel packets to sype_transport_client the packet type.
 </summary>
@@ -62920,7 +63540,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_sype_transport_server_packets" lineno="85211">
+<interface name="corenet_send_sype_transport_server_packets" lineno="85632">
 <summary>
 Send sype_transport_server packets.
 </summary>
@@ -62931,7 +63551,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_sype_transport_server_packets" lineno="85230">
+<interface name="corenet_dontaudit_send_sype_transport_server_packets" lineno="85651">
 <summary>
 Do not audit attempts to send sype_transport_server packets.
 </summary>
@@ -62942,7 +63562,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_sype_transport_server_packets" lineno="85249">
+<interface name="corenet_receive_sype_transport_server_packets" lineno="85670">
 <summary>
 Receive sype_transport_server packets.
 </summary>
@@ -62953,7 +63573,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_sype_transport_server_packets" lineno="85268">
+<interface name="corenet_dontaudit_receive_sype_transport_server_packets" lineno="85689">
 <summary>
 Do not audit attempts to receive sype_transport_server packets.
 </summary>
@@ -62964,7 +63584,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_sype_transport_server_packets" lineno="85287">
+<interface name="corenet_sendrecv_sype_transport_server_packets" lineno="85708">
 <summary>
 Send and receive sype_transport_server packets.
 </summary>
@@ -62975,7 +63595,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_sype_transport_server_packets" lineno="85303">
+<interface name="corenet_dontaudit_sendrecv_sype_transport_server_packets" lineno="85724">
 <summary>
 Do not audit attempts to send and receive sype_transport_server packets.
 </summary>
@@ -62986,7 +63606,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_sype_transport_server_packets" lineno="85318">
+<interface name="corenet_relabelto_sype_transport_server_packets" lineno="85739">
 <summary>
 Relabel packets to sype_transport_server the packet type.
 </summary>
@@ -62996,7 +63616,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_syslogd_port" lineno="85340">
+<interface name="corenet_tcp_sendrecv_syslogd_port" lineno="85761">
 <summary>
 Send and receive TCP traffic on the syslogd port.
 </summary>
@@ -63007,7 +63627,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_syslogd_port" lineno="85355">
+<interface name="corenet_udp_send_syslogd_port" lineno="85776">
 <summary>
 Send UDP traffic on the syslogd port.
 </summary>
@@ -63018,7 +63638,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_syslogd_port" lineno="85370">
+<interface name="corenet_dontaudit_udp_send_syslogd_port" lineno="85791">
 <summary>
 Do not audit attempts to send UDP traffic on the syslogd port.
 </summary>
@@ -63029,7 +63649,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_syslogd_port" lineno="85385">
+<interface name="corenet_udp_receive_syslogd_port" lineno="85806">
 <summary>
 Receive UDP traffic on the syslogd port.
 </summary>
@@ -63040,7 +63660,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_syslogd_port" lineno="85400">
+<interface name="corenet_dontaudit_udp_receive_syslogd_port" lineno="85821">
 <summary>
 Do not audit attempts to receive UDP traffic on the syslogd port.
 </summary>
@@ -63051,7 +63671,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_syslogd_port" lineno="85415">
+<interface name="corenet_udp_sendrecv_syslogd_port" lineno="85836">
 <summary>
 Send and receive UDP traffic on the syslogd port.
 </summary>
@@ -63062,7 +63682,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_syslogd_port" lineno="85431">
+<interface name="corenet_dontaudit_udp_sendrecv_syslogd_port" lineno="85852">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the syslogd port.
@@ -63074,7 +63694,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_syslogd_port" lineno="85446">
+<interface name="corenet_tcp_bind_syslogd_port" lineno="85867">
 <summary>
 Bind TCP sockets to the syslogd port.
 </summary>
@@ -63085,7 +63705,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_syslogd_port" lineno="85466">
+<interface name="corenet_udp_bind_syslogd_port" lineno="85887">
 <summary>
 Bind UDP sockets to the syslogd port.
 </summary>
@@ -63096,7 +63716,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_syslogd_port" lineno="85485">
+<interface name="corenet_tcp_connect_syslogd_port" lineno="85906">
 <summary>
 Make a TCP connection to the syslogd port.
 </summary>
@@ -63106,7 +63726,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_syslogd_client_packets" lineno="85505">
+<interface name="corenet_send_syslogd_client_packets" lineno="85926">
 <summary>
 Send syslogd_client packets.
 </summary>
@@ -63117,7 +63737,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_syslogd_client_packets" lineno="85524">
+<interface name="corenet_dontaudit_send_syslogd_client_packets" lineno="85945">
 <summary>
 Do not audit attempts to send syslogd_client packets.
 </summary>
@@ -63128,7 +63748,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_syslogd_client_packets" lineno="85543">
+<interface name="corenet_receive_syslogd_client_packets" lineno="85964">
 <summary>
 Receive syslogd_client packets.
 </summary>
@@ -63139,7 +63759,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_syslogd_client_packets" lineno="85562">
+<interface name="corenet_dontaudit_receive_syslogd_client_packets" lineno="85983">
 <summary>
 Do not audit attempts to receive syslogd_client packets.
 </summary>
@@ -63150,7 +63770,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_syslogd_client_packets" lineno="85581">
+<interface name="corenet_sendrecv_syslogd_client_packets" lineno="86002">
 <summary>
 Send and receive syslogd_client packets.
 </summary>
@@ -63161,7 +63781,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_syslogd_client_packets" lineno="85597">
+<interface name="corenet_dontaudit_sendrecv_syslogd_client_packets" lineno="86018">
 <summary>
 Do not audit attempts to send and receive syslogd_client packets.
 </summary>
@@ -63172,7 +63792,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_syslogd_client_packets" lineno="85612">
+<interface name="corenet_relabelto_syslogd_client_packets" lineno="86033">
 <summary>
 Relabel packets to syslogd_client the packet type.
 </summary>
@@ -63182,7 +63802,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_syslogd_server_packets" lineno="85632">
+<interface name="corenet_send_syslogd_server_packets" lineno="86053">
 <summary>
 Send syslogd_server packets.
 </summary>
@@ -63193,7 +63813,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_syslogd_server_packets" lineno="85651">
+<interface name="corenet_dontaudit_send_syslogd_server_packets" lineno="86072">
 <summary>
 Do not audit attempts to send syslogd_server packets.
 </summary>
@@ -63204,7 +63824,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_syslogd_server_packets" lineno="85670">
+<interface name="corenet_receive_syslogd_server_packets" lineno="86091">
 <summary>
 Receive syslogd_server packets.
 </summary>
@@ -63215,7 +63835,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_syslogd_server_packets" lineno="85689">
+<interface name="corenet_dontaudit_receive_syslogd_server_packets" lineno="86110">
 <summary>
 Do not audit attempts to receive syslogd_server packets.
 </summary>
@@ -63226,7 +63846,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_syslogd_server_packets" lineno="85708">
+<interface name="corenet_sendrecv_syslogd_server_packets" lineno="86129">
 <summary>
 Send and receive syslogd_server packets.
 </summary>
@@ -63237,7 +63857,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_syslogd_server_packets" lineno="85724">
+<interface name="corenet_dontaudit_sendrecv_syslogd_server_packets" lineno="86145">
 <summary>
 Do not audit attempts to send and receive syslogd_server packets.
 </summary>
@@ -63248,7 +63868,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_syslogd_server_packets" lineno="85739">
+<interface name="corenet_relabelto_syslogd_server_packets" lineno="86160">
 <summary>
 Relabel packets to syslogd_server the packet type.
 </summary>
@@ -63258,7 +63878,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_syslog_tls_port" lineno="85761">
+<interface name="corenet_tcp_sendrecv_syslog_tls_port" lineno="86182">
 <summary>
 Send and receive TCP traffic on the syslog_tls port.
 </summary>
@@ -63269,7 +63889,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_syslog_tls_port" lineno="85776">
+<interface name="corenet_udp_send_syslog_tls_port" lineno="86197">
 <summary>
 Send UDP traffic on the syslog_tls port.
 </summary>
@@ -63280,7 +63900,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_syslog_tls_port" lineno="85791">
+<interface name="corenet_dontaudit_udp_send_syslog_tls_port" lineno="86212">
 <summary>
 Do not audit attempts to send UDP traffic on the syslog_tls port.
 </summary>
@@ -63291,7 +63911,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_syslog_tls_port" lineno="85806">
+<interface name="corenet_udp_receive_syslog_tls_port" lineno="86227">
 <summary>
 Receive UDP traffic on the syslog_tls port.
 </summary>
@@ -63302,7 +63922,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_syslog_tls_port" lineno="85821">
+<interface name="corenet_dontaudit_udp_receive_syslog_tls_port" lineno="86242">
 <summary>
 Do not audit attempts to receive UDP traffic on the syslog_tls port.
 </summary>
@@ -63313,7 +63933,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_syslog_tls_port" lineno="85836">
+<interface name="corenet_udp_sendrecv_syslog_tls_port" lineno="86257">
 <summary>
 Send and receive UDP traffic on the syslog_tls port.
 </summary>
@@ -63324,7 +63944,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_syslog_tls_port" lineno="85852">
+<interface name="corenet_dontaudit_udp_sendrecv_syslog_tls_port" lineno="86273">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the syslog_tls port.
@@ -63336,7 +63956,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_syslog_tls_port" lineno="85867">
+<interface name="corenet_tcp_bind_syslog_tls_port" lineno="86288">
 <summary>
 Bind TCP sockets to the syslog_tls port.
 </summary>
@@ -63347,7 +63967,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_syslog_tls_port" lineno="85887">
+<interface name="corenet_udp_bind_syslog_tls_port" lineno="86308">
 <summary>
 Bind UDP sockets to the syslog_tls port.
 </summary>
@@ -63358,7 +63978,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_syslog_tls_port" lineno="85906">
+<interface name="corenet_tcp_connect_syslog_tls_port" lineno="86327">
 <summary>
 Make a TCP connection to the syslog_tls port.
 </summary>
@@ -63368,7 +63988,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_syslog_tls_client_packets" lineno="85926">
+<interface name="corenet_send_syslog_tls_client_packets" lineno="86347">
 <summary>
 Send syslog_tls_client packets.
 </summary>
@@ -63379,7 +63999,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_syslog_tls_client_packets" lineno="85945">
+<interface name="corenet_dontaudit_send_syslog_tls_client_packets" lineno="86366">
 <summary>
 Do not audit attempts to send syslog_tls_client packets.
 </summary>
@@ -63390,7 +64010,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_syslog_tls_client_packets" lineno="85964">
+<interface name="corenet_receive_syslog_tls_client_packets" lineno="86385">
 <summary>
 Receive syslog_tls_client packets.
 </summary>
@@ -63401,7 +64021,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_syslog_tls_client_packets" lineno="85983">
+<interface name="corenet_dontaudit_receive_syslog_tls_client_packets" lineno="86404">
 <summary>
 Do not audit attempts to receive syslog_tls_client packets.
 </summary>
@@ -63412,7 +64032,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_syslog_tls_client_packets" lineno="86002">
+<interface name="corenet_sendrecv_syslog_tls_client_packets" lineno="86423">
 <summary>
 Send and receive syslog_tls_client packets.
 </summary>
@@ -63423,7 +64043,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_syslog_tls_client_packets" lineno="86018">
+<interface name="corenet_dontaudit_sendrecv_syslog_tls_client_packets" lineno="86439">
 <summary>
 Do not audit attempts to send and receive syslog_tls_client packets.
 </summary>
@@ -63434,7 +64054,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_syslog_tls_client_packets" lineno="86033">
+<interface name="corenet_relabelto_syslog_tls_client_packets" lineno="86454">
 <summary>
 Relabel packets to syslog_tls_client the packet type.
 </summary>
@@ -63444,7 +64064,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_syslog_tls_server_packets" lineno="86053">
+<interface name="corenet_send_syslog_tls_server_packets" lineno="86474">
 <summary>
 Send syslog_tls_server packets.
 </summary>
@@ -63455,7 +64075,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_syslog_tls_server_packets" lineno="86072">
+<interface name="corenet_dontaudit_send_syslog_tls_server_packets" lineno="86493">
 <summary>
 Do not audit attempts to send syslog_tls_server packets.
 </summary>
@@ -63466,7 +64086,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_syslog_tls_server_packets" lineno="86091">
+<interface name="corenet_receive_syslog_tls_server_packets" lineno="86512">
 <summary>
 Receive syslog_tls_server packets.
 </summary>
@@ -63477,7 +64097,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_syslog_tls_server_packets" lineno="86110">
+<interface name="corenet_dontaudit_receive_syslog_tls_server_packets" lineno="86531">
 <summary>
 Do not audit attempts to receive syslog_tls_server packets.
 </summary>
@@ -63488,7 +64108,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_syslog_tls_server_packets" lineno="86129">
+<interface name="corenet_sendrecv_syslog_tls_server_packets" lineno="86550">
 <summary>
 Send and receive syslog_tls_server packets.
 </summary>
@@ -63499,7 +64119,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_syslog_tls_server_packets" lineno="86145">
+<interface name="corenet_dontaudit_sendrecv_syslog_tls_server_packets" lineno="86566">
 <summary>
 Do not audit attempts to send and receive syslog_tls_server packets.
 </summary>
@@ -63510,7 +64130,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_syslog_tls_server_packets" lineno="86160">
+<interface name="corenet_relabelto_syslog_tls_server_packets" lineno="86581">
 <summary>
 Relabel packets to syslog_tls_server the packet type.
 </summary>
@@ -63520,7 +64140,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_tcs_port" lineno="86182">
+<interface name="corenet_tcp_sendrecv_tcs_port" lineno="86603">
 <summary>
 Send and receive TCP traffic on the tcs port.
 </summary>
@@ -63531,7 +64151,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_tcs_port" lineno="86197">
+<interface name="corenet_udp_send_tcs_port" lineno="86618">
 <summary>
 Send UDP traffic on the tcs port.
 </summary>
@@ -63542,7 +64162,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_tcs_port" lineno="86212">
+<interface name="corenet_dontaudit_udp_send_tcs_port" lineno="86633">
 <summary>
 Do not audit attempts to send UDP traffic on the tcs port.
 </summary>
@@ -63553,7 +64173,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_tcs_port" lineno="86227">
+<interface name="corenet_udp_receive_tcs_port" lineno="86648">
 <summary>
 Receive UDP traffic on the tcs port.
 </summary>
@@ -63564,7 +64184,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_tcs_port" lineno="86242">
+<interface name="corenet_dontaudit_udp_receive_tcs_port" lineno="86663">
 <summary>
 Do not audit attempts to receive UDP traffic on the tcs port.
 </summary>
@@ -63575,7 +64195,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_tcs_port" lineno="86257">
+<interface name="corenet_udp_sendrecv_tcs_port" lineno="86678">
 <summary>
 Send and receive UDP traffic on the tcs port.
 </summary>
@@ -63586,7 +64206,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_tcs_port" lineno="86273">
+<interface name="corenet_dontaudit_udp_sendrecv_tcs_port" lineno="86694">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the tcs port.
@@ -63598,7 +64218,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_tcs_port" lineno="86288">
+<interface name="corenet_tcp_bind_tcs_port" lineno="86709">
 <summary>
 Bind TCP sockets to the tcs port.
 </summary>
@@ -63609,7 +64229,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_tcs_port" lineno="86308">
+<interface name="corenet_udp_bind_tcs_port" lineno="86729">
 <summary>
 Bind UDP sockets to the tcs port.
 </summary>
@@ -63620,7 +64240,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_tcs_port" lineno="86327">
+<interface name="corenet_tcp_connect_tcs_port" lineno="86748">
 <summary>
 Make a TCP connection to the tcs port.
 </summary>
@@ -63630,7 +64250,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_tcs_client_packets" lineno="86347">
+<interface name="corenet_send_tcs_client_packets" lineno="86768">
 <summary>
 Send tcs_client packets.
 </summary>
@@ -63641,7 +64261,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_tcs_client_packets" lineno="86366">
+<interface name="corenet_dontaudit_send_tcs_client_packets" lineno="86787">
 <summary>
 Do not audit attempts to send tcs_client packets.
 </summary>
@@ -63652,7 +64272,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_tcs_client_packets" lineno="86385">
+<interface name="corenet_receive_tcs_client_packets" lineno="86806">
 <summary>
 Receive tcs_client packets.
 </summary>
@@ -63663,7 +64283,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_tcs_client_packets" lineno="86404">
+<interface name="corenet_dontaudit_receive_tcs_client_packets" lineno="86825">
 <summary>
 Do not audit attempts to receive tcs_client packets.
 </summary>
@@ -63674,7 +64294,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_tcs_client_packets" lineno="86423">
+<interface name="corenet_sendrecv_tcs_client_packets" lineno="86844">
 <summary>
 Send and receive tcs_client packets.
 </summary>
@@ -63685,7 +64305,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_tcs_client_packets" lineno="86439">
+<interface name="corenet_dontaudit_sendrecv_tcs_client_packets" lineno="86860">
 <summary>
 Do not audit attempts to send and receive tcs_client packets.
 </summary>
@@ -63696,7 +64316,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_tcs_client_packets" lineno="86454">
+<interface name="corenet_relabelto_tcs_client_packets" lineno="86875">
 <summary>
 Relabel packets to tcs_client the packet type.
 </summary>
@@ -63706,7 +64326,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_tcs_server_packets" lineno="86474">
+<interface name="corenet_send_tcs_server_packets" lineno="86895">
 <summary>
 Send tcs_server packets.
 </summary>
@@ -63717,7 +64337,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_tcs_server_packets" lineno="86493">
+<interface name="corenet_dontaudit_send_tcs_server_packets" lineno="86914">
 <summary>
 Do not audit attempts to send tcs_server packets.
 </summary>
@@ -63728,7 +64348,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_tcs_server_packets" lineno="86512">
+<interface name="corenet_receive_tcs_server_packets" lineno="86933">
 <summary>
 Receive tcs_server packets.
 </summary>
@@ -63739,7 +64359,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_tcs_server_packets" lineno="86531">
+<interface name="corenet_dontaudit_receive_tcs_server_packets" lineno="86952">
 <summary>
 Do not audit attempts to receive tcs_server packets.
 </summary>
@@ -63750,7 +64370,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_tcs_server_packets" lineno="86550">
+<interface name="corenet_sendrecv_tcs_server_packets" lineno="86971">
 <summary>
 Send and receive tcs_server packets.
 </summary>
@@ -63761,7 +64381,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_tcs_server_packets" lineno="86566">
+<interface name="corenet_dontaudit_sendrecv_tcs_server_packets" lineno="86987">
 <summary>
 Do not audit attempts to send and receive tcs_server packets.
 </summary>
@@ -63772,7 +64392,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_tcs_server_packets" lineno="86581">
+<interface name="corenet_relabelto_tcs_server_packets" lineno="87002">
 <summary>
 Relabel packets to tcs_server the packet type.
 </summary>
@@ -63782,7 +64402,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_telnetd_port" lineno="86603">
+<interface name="corenet_tcp_sendrecv_telnetd_port" lineno="87024">
 <summary>
 Send and receive TCP traffic on the telnetd port.
 </summary>
@@ -63793,7 +64413,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_telnetd_port" lineno="86618">
+<interface name="corenet_udp_send_telnetd_port" lineno="87039">
 <summary>
 Send UDP traffic on the telnetd port.
 </summary>
@@ -63804,7 +64424,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_telnetd_port" lineno="86633">
+<interface name="corenet_dontaudit_udp_send_telnetd_port" lineno="87054">
 <summary>
 Do not audit attempts to send UDP traffic on the telnetd port.
 </summary>
@@ -63815,7 +64435,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_telnetd_port" lineno="86648">
+<interface name="corenet_udp_receive_telnetd_port" lineno="87069">
 <summary>
 Receive UDP traffic on the telnetd port.
 </summary>
@@ -63826,7 +64446,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_telnetd_port" lineno="86663">
+<interface name="corenet_dontaudit_udp_receive_telnetd_port" lineno="87084">
 <summary>
 Do not audit attempts to receive UDP traffic on the telnetd port.
 </summary>
@@ -63837,7 +64457,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_telnetd_port" lineno="86678">
+<interface name="corenet_udp_sendrecv_telnetd_port" lineno="87099">
 <summary>
 Send and receive UDP traffic on the telnetd port.
 </summary>
@@ -63848,7 +64468,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_telnetd_port" lineno="86694">
+<interface name="corenet_dontaudit_udp_sendrecv_telnetd_port" lineno="87115">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the telnetd port.
@@ -63860,7 +64480,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_telnetd_port" lineno="86709">
+<interface name="corenet_tcp_bind_telnetd_port" lineno="87130">
 <summary>
 Bind TCP sockets to the telnetd port.
 </summary>
@@ -63871,7 +64491,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_telnetd_port" lineno="86729">
+<interface name="corenet_udp_bind_telnetd_port" lineno="87150">
 <summary>
 Bind UDP sockets to the telnetd port.
 </summary>
@@ -63882,7 +64502,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_telnetd_port" lineno="86748">
+<interface name="corenet_tcp_connect_telnetd_port" lineno="87169">
 <summary>
 Make a TCP connection to the telnetd port.
 </summary>
@@ -63892,7 +64512,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_telnetd_client_packets" lineno="86768">
+<interface name="corenet_send_telnetd_client_packets" lineno="87189">
 <summary>
 Send telnetd_client packets.
 </summary>
@@ -63903,7 +64523,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_telnetd_client_packets" lineno="86787">
+<interface name="corenet_dontaudit_send_telnetd_client_packets" lineno="87208">
 <summary>
 Do not audit attempts to send telnetd_client packets.
 </summary>
@@ -63914,7 +64534,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_telnetd_client_packets" lineno="86806">
+<interface name="corenet_receive_telnetd_client_packets" lineno="87227">
 <summary>
 Receive telnetd_client packets.
 </summary>
@@ -63925,7 +64545,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_telnetd_client_packets" lineno="86825">
+<interface name="corenet_dontaudit_receive_telnetd_client_packets" lineno="87246">
 <summary>
 Do not audit attempts to receive telnetd_client packets.
 </summary>
@@ -63936,7 +64556,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_telnetd_client_packets" lineno="86844">
+<interface name="corenet_sendrecv_telnetd_client_packets" lineno="87265">
 <summary>
 Send and receive telnetd_client packets.
 </summary>
@@ -63947,7 +64567,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_telnetd_client_packets" lineno="86860">
+<interface name="corenet_dontaudit_sendrecv_telnetd_client_packets" lineno="87281">
 <summary>
 Do not audit attempts to send and receive telnetd_client packets.
 </summary>
@@ -63958,7 +64578,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_telnetd_client_packets" lineno="86875">
+<interface name="corenet_relabelto_telnetd_client_packets" lineno="87296">
 <summary>
 Relabel packets to telnetd_client the packet type.
 </summary>
@@ -63968,7 +64588,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_telnetd_server_packets" lineno="86895">
+<interface name="corenet_send_telnetd_server_packets" lineno="87316">
 <summary>
 Send telnetd_server packets.
 </summary>
@@ -63979,7 +64599,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_telnetd_server_packets" lineno="86914">
+<interface name="corenet_dontaudit_send_telnetd_server_packets" lineno="87335">
 <summary>
 Do not audit attempts to send telnetd_server packets.
 </summary>
@@ -63990,7 +64610,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_telnetd_server_packets" lineno="86933">
+<interface name="corenet_receive_telnetd_server_packets" lineno="87354">
 <summary>
 Receive telnetd_server packets.
 </summary>
@@ -64001,7 +64621,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_telnetd_server_packets" lineno="86952">
+<interface name="corenet_dontaudit_receive_telnetd_server_packets" lineno="87373">
 <summary>
 Do not audit attempts to receive telnetd_server packets.
 </summary>
@@ -64012,7 +64632,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_telnetd_server_packets" lineno="86971">
+<interface name="corenet_sendrecv_telnetd_server_packets" lineno="87392">
 <summary>
 Send and receive telnetd_server packets.
 </summary>
@@ -64023,7 +64643,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_telnetd_server_packets" lineno="86987">
+<interface name="corenet_dontaudit_sendrecv_telnetd_server_packets" lineno="87408">
 <summary>
 Do not audit attempts to send and receive telnetd_server packets.
 </summary>
@@ -64034,7 +64654,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_telnetd_server_packets" lineno="87002">
+<interface name="corenet_relabelto_telnetd_server_packets" lineno="87423">
 <summary>
 Relabel packets to telnetd_server the packet type.
 </summary>
@@ -64044,7 +64664,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_tftp_port" lineno="87024">
+<interface name="corenet_tcp_sendrecv_tftp_port" lineno="87445">
 <summary>
 Send and receive TCP traffic on the tftp port.
 </summary>
@@ -64055,7 +64675,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_tftp_port" lineno="87039">
+<interface name="corenet_udp_send_tftp_port" lineno="87460">
 <summary>
 Send UDP traffic on the tftp port.
 </summary>
@@ -64066,7 +64686,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_tftp_port" lineno="87054">
+<interface name="corenet_dontaudit_udp_send_tftp_port" lineno="87475">
 <summary>
 Do not audit attempts to send UDP traffic on the tftp port.
 </summary>
@@ -64077,7 +64697,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_tftp_port" lineno="87069">
+<interface name="corenet_udp_receive_tftp_port" lineno="87490">
 <summary>
 Receive UDP traffic on the tftp port.
 </summary>
@@ -64088,7 +64708,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_tftp_port" lineno="87084">
+<interface name="corenet_dontaudit_udp_receive_tftp_port" lineno="87505">
 <summary>
 Do not audit attempts to receive UDP traffic on the tftp port.
 </summary>
@@ -64099,7 +64719,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_tftp_port" lineno="87099">
+<interface name="corenet_udp_sendrecv_tftp_port" lineno="87520">
 <summary>
 Send and receive UDP traffic on the tftp port.
 </summary>
@@ -64110,7 +64730,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_tftp_port" lineno="87115">
+<interface name="corenet_dontaudit_udp_sendrecv_tftp_port" lineno="87536">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the tftp port.
@@ -64122,7 +64742,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_tftp_port" lineno="87130">
+<interface name="corenet_tcp_bind_tftp_port" lineno="87551">
 <summary>
 Bind TCP sockets to the tftp port.
 </summary>
@@ -64133,7 +64753,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_tftp_port" lineno="87150">
+<interface name="corenet_udp_bind_tftp_port" lineno="87571">
 <summary>
 Bind UDP sockets to the tftp port.
 </summary>
@@ -64144,7 +64764,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_tftp_port" lineno="87169">
+<interface name="corenet_tcp_connect_tftp_port" lineno="87590">
 <summary>
 Make a TCP connection to the tftp port.
 </summary>
@@ -64154,7 +64774,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_tftp_client_packets" lineno="87189">
+<interface name="corenet_send_tftp_client_packets" lineno="87610">
 <summary>
 Send tftp_client packets.
 </summary>
@@ -64165,7 +64785,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_tftp_client_packets" lineno="87208">
+<interface name="corenet_dontaudit_send_tftp_client_packets" lineno="87629">
 <summary>
 Do not audit attempts to send tftp_client packets.
 </summary>
@@ -64176,7 +64796,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_tftp_client_packets" lineno="87227">
+<interface name="corenet_receive_tftp_client_packets" lineno="87648">
 <summary>
 Receive tftp_client packets.
 </summary>
@@ -64187,7 +64807,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_tftp_client_packets" lineno="87246">
+<interface name="corenet_dontaudit_receive_tftp_client_packets" lineno="87667">
 <summary>
 Do not audit attempts to receive tftp_client packets.
 </summary>
@@ -64198,7 +64818,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_tftp_client_packets" lineno="87265">
+<interface name="corenet_sendrecv_tftp_client_packets" lineno="87686">
 <summary>
 Send and receive tftp_client packets.
 </summary>
@@ -64209,7 +64829,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_tftp_client_packets" lineno="87281">
+<interface name="corenet_dontaudit_sendrecv_tftp_client_packets" lineno="87702">
 <summary>
 Do not audit attempts to send and receive tftp_client packets.
 </summary>
@@ -64220,7 +64840,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_tftp_client_packets" lineno="87296">
+<interface name="corenet_relabelto_tftp_client_packets" lineno="87717">
 <summary>
 Relabel packets to tftp_client the packet type.
 </summary>
@@ -64230,7 +64850,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_tftp_server_packets" lineno="87316">
+<interface name="corenet_send_tftp_server_packets" lineno="87737">
 <summary>
 Send tftp_server packets.
 </summary>
@@ -64241,7 +64861,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_tftp_server_packets" lineno="87335">
+<interface name="corenet_dontaudit_send_tftp_server_packets" lineno="87756">
 <summary>
 Do not audit attempts to send tftp_server packets.
 </summary>
@@ -64252,7 +64872,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_tftp_server_packets" lineno="87354">
+<interface name="corenet_receive_tftp_server_packets" lineno="87775">
 <summary>
 Receive tftp_server packets.
 </summary>
@@ -64263,7 +64883,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_tftp_server_packets" lineno="87373">
+<interface name="corenet_dontaudit_receive_tftp_server_packets" lineno="87794">
 <summary>
 Do not audit attempts to receive tftp_server packets.
 </summary>
@@ -64274,7 +64894,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_tftp_server_packets" lineno="87392">
+<interface name="corenet_sendrecv_tftp_server_packets" lineno="87813">
 <summary>
 Send and receive tftp_server packets.
 </summary>
@@ -64285,7 +64905,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_tftp_server_packets" lineno="87408">
+<interface name="corenet_dontaudit_sendrecv_tftp_server_packets" lineno="87829">
 <summary>
 Do not audit attempts to send and receive tftp_server packets.
 </summary>
@@ -64296,7 +64916,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_tftp_server_packets" lineno="87423">
+<interface name="corenet_relabelto_tftp_server_packets" lineno="87844">
 <summary>
 Relabel packets to tftp_server the packet type.
 </summary>
@@ -64306,7 +64926,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_tor_port" lineno="87445">
+<interface name="corenet_tcp_sendrecv_tor_port" lineno="87866">
 <summary>
 Send and receive TCP traffic on the tor port.
 </summary>
@@ -64317,7 +64937,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_tor_port" lineno="87460">
+<interface name="corenet_udp_send_tor_port" lineno="87881">
 <summary>
 Send UDP traffic on the tor port.
 </summary>
@@ -64328,7 +64948,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_tor_port" lineno="87475">
+<interface name="corenet_dontaudit_udp_send_tor_port" lineno="87896">
 <summary>
 Do not audit attempts to send UDP traffic on the tor port.
 </summary>
@@ -64339,7 +64959,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_tor_port" lineno="87490">
+<interface name="corenet_udp_receive_tor_port" lineno="87911">
 <summary>
 Receive UDP traffic on the tor port.
 </summary>
@@ -64350,7 +64970,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_tor_port" lineno="87505">
+<interface name="corenet_dontaudit_udp_receive_tor_port" lineno="87926">
 <summary>
 Do not audit attempts to receive UDP traffic on the tor port.
 </summary>
@@ -64361,7 +64981,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_tor_port" lineno="87520">
+<interface name="corenet_udp_sendrecv_tor_port" lineno="87941">
 <summary>
 Send and receive UDP traffic on the tor port.
 </summary>
@@ -64372,7 +64992,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_tor_port" lineno="87536">
+<interface name="corenet_dontaudit_udp_sendrecv_tor_port" lineno="87957">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the tor port.
@@ -64384,7 +65004,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_tor_port" lineno="87551">
+<interface name="corenet_tcp_bind_tor_port" lineno="87972">
 <summary>
 Bind TCP sockets to the tor port.
 </summary>
@@ -64395,7 +65015,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_tor_port" lineno="87571">
+<interface name="corenet_udp_bind_tor_port" lineno="87992">
 <summary>
 Bind UDP sockets to the tor port.
 </summary>
@@ -64406,7 +65026,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_tor_port" lineno="87590">
+<interface name="corenet_tcp_connect_tor_port" lineno="88011">
 <summary>
 Make a TCP connection to the tor port.
 </summary>
@@ -64416,7 +65036,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_tor_client_packets" lineno="87610">
+<interface name="corenet_send_tor_client_packets" lineno="88031">
 <summary>
 Send tor_client packets.
 </summary>
@@ -64427,7 +65047,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_tor_client_packets" lineno="87629">
+<interface name="corenet_dontaudit_send_tor_client_packets" lineno="88050">
 <summary>
 Do not audit attempts to send tor_client packets.
 </summary>
@@ -64438,7 +65058,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_tor_client_packets" lineno="87648">
+<interface name="corenet_receive_tor_client_packets" lineno="88069">
 <summary>
 Receive tor_client packets.
 </summary>
@@ -64449,7 +65069,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_tor_client_packets" lineno="87667">
+<interface name="corenet_dontaudit_receive_tor_client_packets" lineno="88088">
 <summary>
 Do not audit attempts to receive tor_client packets.
 </summary>
@@ -64460,7 +65080,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_tor_client_packets" lineno="87686">
+<interface name="corenet_sendrecv_tor_client_packets" lineno="88107">
 <summary>
 Send and receive tor_client packets.
 </summary>
@@ -64471,7 +65091,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_tor_client_packets" lineno="87702">
+<interface name="corenet_dontaudit_sendrecv_tor_client_packets" lineno="88123">
 <summary>
 Do not audit attempts to send and receive tor_client packets.
 </summary>
@@ -64482,7 +65102,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_tor_client_packets" lineno="87717">
+<interface name="corenet_relabelto_tor_client_packets" lineno="88138">
 <summary>
 Relabel packets to tor_client the packet type.
 </summary>
@@ -64492,7 +65112,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_tor_server_packets" lineno="87737">
+<interface name="corenet_send_tor_server_packets" lineno="88158">
 <summary>
 Send tor_server packets.
 </summary>
@@ -64503,7 +65123,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_tor_server_packets" lineno="87756">
+<interface name="corenet_dontaudit_send_tor_server_packets" lineno="88177">
 <summary>
 Do not audit attempts to send tor_server packets.
 </summary>
@@ -64514,7 +65134,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_tor_server_packets" lineno="87775">
+<interface name="corenet_receive_tor_server_packets" lineno="88196">
 <summary>
 Receive tor_server packets.
 </summary>
@@ -64525,7 +65145,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_tor_server_packets" lineno="87794">
+<interface name="corenet_dontaudit_receive_tor_server_packets" lineno="88215">
 <summary>
 Do not audit attempts to receive tor_server packets.
 </summary>
@@ -64536,7 +65156,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_tor_server_packets" lineno="87813">
+<interface name="corenet_sendrecv_tor_server_packets" lineno="88234">
 <summary>
 Send and receive tor_server packets.
 </summary>
@@ -64547,7 +65167,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_tor_server_packets" lineno="87829">
+<interface name="corenet_dontaudit_sendrecv_tor_server_packets" lineno="88250">
 <summary>
 Do not audit attempts to send and receive tor_server packets.
 </summary>
@@ -64558,7 +65178,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_tor_server_packets" lineno="87844">
+<interface name="corenet_relabelto_tor_server_packets" lineno="88265">
 <summary>
 Relabel packets to tor_server the packet type.
 </summary>
@@ -64568,7 +65188,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_traceroute_port" lineno="87866">
+<interface name="corenet_tcp_sendrecv_traceroute_port" lineno="88287">
 <summary>
 Send and receive TCP traffic on the traceroute port.
 </summary>
@@ -64579,7 +65199,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_traceroute_port" lineno="87881">
+<interface name="corenet_udp_send_traceroute_port" lineno="88302">
 <summary>
 Send UDP traffic on the traceroute port.
 </summary>
@@ -64590,7 +65210,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_traceroute_port" lineno="87896">
+<interface name="corenet_dontaudit_udp_send_traceroute_port" lineno="88317">
 <summary>
 Do not audit attempts to send UDP traffic on the traceroute port.
 </summary>
@@ -64601,7 +65221,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_traceroute_port" lineno="87911">
+<interface name="corenet_udp_receive_traceroute_port" lineno="88332">
 <summary>
 Receive UDP traffic on the traceroute port.
 </summary>
@@ -64612,7 +65232,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_traceroute_port" lineno="87926">
+<interface name="corenet_dontaudit_udp_receive_traceroute_port" lineno="88347">
 <summary>
 Do not audit attempts to receive UDP traffic on the traceroute port.
 </summary>
@@ -64623,7 +65243,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_traceroute_port" lineno="87941">
+<interface name="corenet_udp_sendrecv_traceroute_port" lineno="88362">
 <summary>
 Send and receive UDP traffic on the traceroute port.
 </summary>
@@ -64634,7 +65254,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_traceroute_port" lineno="87957">
+<interface name="corenet_dontaudit_udp_sendrecv_traceroute_port" lineno="88378">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the traceroute port.
@@ -64646,7 +65266,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_traceroute_port" lineno="87972">
+<interface name="corenet_tcp_bind_traceroute_port" lineno="88393">
 <summary>
 Bind TCP sockets to the traceroute port.
 </summary>
@@ -64657,7 +65277,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_traceroute_port" lineno="87992">
+<interface name="corenet_udp_bind_traceroute_port" lineno="88413">
 <summary>
 Bind UDP sockets to the traceroute port.
 </summary>
@@ -64668,7 +65288,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_traceroute_port" lineno="88011">
+<interface name="corenet_tcp_connect_traceroute_port" lineno="88432">
 <summary>
 Make a TCP connection to the traceroute port.
 </summary>
@@ -64678,7 +65298,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_traceroute_client_packets" lineno="88031">
+<interface name="corenet_send_traceroute_client_packets" lineno="88452">
 <summary>
 Send traceroute_client packets.
 </summary>
@@ -64689,7 +65309,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_traceroute_client_packets" lineno="88050">
+<interface name="corenet_dontaudit_send_traceroute_client_packets" lineno="88471">
 <summary>
 Do not audit attempts to send traceroute_client packets.
 </summary>
@@ -64700,7 +65320,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_traceroute_client_packets" lineno="88069">
+<interface name="corenet_receive_traceroute_client_packets" lineno="88490">
 <summary>
 Receive traceroute_client packets.
 </summary>
@@ -64711,7 +65331,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_traceroute_client_packets" lineno="88088">
+<interface name="corenet_dontaudit_receive_traceroute_client_packets" lineno="88509">
 <summary>
 Do not audit attempts to receive traceroute_client packets.
 </summary>
@@ -64722,7 +65342,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_traceroute_client_packets" lineno="88107">
+<interface name="corenet_sendrecv_traceroute_client_packets" lineno="88528">
 <summary>
 Send and receive traceroute_client packets.
 </summary>
@@ -64733,7 +65353,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_traceroute_client_packets" lineno="88123">
+<interface name="corenet_dontaudit_sendrecv_traceroute_client_packets" lineno="88544">
 <summary>
 Do not audit attempts to send and receive traceroute_client packets.
 </summary>
@@ -64744,7 +65364,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_traceroute_client_packets" lineno="88138">
+<interface name="corenet_relabelto_traceroute_client_packets" lineno="88559">
 <summary>
 Relabel packets to traceroute_client the packet type.
 </summary>
@@ -64754,7 +65374,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_traceroute_server_packets" lineno="88158">
+<interface name="corenet_send_traceroute_server_packets" lineno="88579">
 <summary>
 Send traceroute_server packets.
 </summary>
@@ -64765,7 +65385,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_traceroute_server_packets" lineno="88177">
+<interface name="corenet_dontaudit_send_traceroute_server_packets" lineno="88598">
 <summary>
 Do not audit attempts to send traceroute_server packets.
 </summary>
@@ -64776,7 +65396,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_traceroute_server_packets" lineno="88196">
+<interface name="corenet_receive_traceroute_server_packets" lineno="88617">
 <summary>
 Receive traceroute_server packets.
 </summary>
@@ -64787,7 +65407,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_traceroute_server_packets" lineno="88215">
+<interface name="corenet_dontaudit_receive_traceroute_server_packets" lineno="88636">
 <summary>
 Do not audit attempts to receive traceroute_server packets.
 </summary>
@@ -64798,7 +65418,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_traceroute_server_packets" lineno="88234">
+<interface name="corenet_sendrecv_traceroute_server_packets" lineno="88655">
 <summary>
 Send and receive traceroute_server packets.
 </summary>
@@ -64809,7 +65429,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_traceroute_server_packets" lineno="88250">
+<interface name="corenet_dontaudit_sendrecv_traceroute_server_packets" lineno="88671">
 <summary>
 Do not audit attempts to send and receive traceroute_server packets.
 </summary>
@@ -64820,7 +65440,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_traceroute_server_packets" lineno="88265">
+<interface name="corenet_relabelto_traceroute_server_packets" lineno="88686">
 <summary>
 Relabel packets to traceroute_server the packet type.
 </summary>
@@ -64830,7 +65450,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_transproxy_port" lineno="88287">
+<interface name="corenet_tcp_sendrecv_transproxy_port" lineno="88708">
 <summary>
 Send and receive TCP traffic on the transproxy port.
 </summary>
@@ -64841,7 +65461,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_transproxy_port" lineno="88302">
+<interface name="corenet_udp_send_transproxy_port" lineno="88723">
 <summary>
 Send UDP traffic on the transproxy port.
 </summary>
@@ -64852,7 +65472,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_transproxy_port" lineno="88317">
+<interface name="corenet_dontaudit_udp_send_transproxy_port" lineno="88738">
 <summary>
 Do not audit attempts to send UDP traffic on the transproxy port.
 </summary>
@@ -64863,7 +65483,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_transproxy_port" lineno="88332">
+<interface name="corenet_udp_receive_transproxy_port" lineno="88753">
 <summary>
 Receive UDP traffic on the transproxy port.
 </summary>
@@ -64874,7 +65494,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_transproxy_port" lineno="88347">
+<interface name="corenet_dontaudit_udp_receive_transproxy_port" lineno="88768">
 <summary>
 Do not audit attempts to receive UDP traffic on the transproxy port.
 </summary>
@@ -64885,7 +65505,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_transproxy_port" lineno="88362">
+<interface name="corenet_udp_sendrecv_transproxy_port" lineno="88783">
 <summary>
 Send and receive UDP traffic on the transproxy port.
 </summary>
@@ -64896,7 +65516,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_transproxy_port" lineno="88378">
+<interface name="corenet_dontaudit_udp_sendrecv_transproxy_port" lineno="88799">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the transproxy port.
@@ -64908,7 +65528,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_transproxy_port" lineno="88393">
+<interface name="corenet_tcp_bind_transproxy_port" lineno="88814">
 <summary>
 Bind TCP sockets to the transproxy port.
 </summary>
@@ -64919,7 +65539,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_transproxy_port" lineno="88413">
+<interface name="corenet_udp_bind_transproxy_port" lineno="88834">
 <summary>
 Bind UDP sockets to the transproxy port.
 </summary>
@@ -64930,7 +65550,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_transproxy_port" lineno="88432">
+<interface name="corenet_tcp_connect_transproxy_port" lineno="88853">
 <summary>
 Make a TCP connection to the transproxy port.
 </summary>
@@ -64940,7 +65560,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_transproxy_client_packets" lineno="88452">
+<interface name="corenet_send_transproxy_client_packets" lineno="88873">
 <summary>
 Send transproxy_client packets.
 </summary>
@@ -64951,7 +65571,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_transproxy_client_packets" lineno="88471">
+<interface name="corenet_dontaudit_send_transproxy_client_packets" lineno="88892">
 <summary>
 Do not audit attempts to send transproxy_client packets.
 </summary>
@@ -64962,7 +65582,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_transproxy_client_packets" lineno="88490">
+<interface name="corenet_receive_transproxy_client_packets" lineno="88911">
 <summary>
 Receive transproxy_client packets.
 </summary>
@@ -64973,7 +65593,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_transproxy_client_packets" lineno="88509">
+<interface name="corenet_dontaudit_receive_transproxy_client_packets" lineno="88930">
 <summary>
 Do not audit attempts to receive transproxy_client packets.
 </summary>
@@ -64984,7 +65604,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_transproxy_client_packets" lineno="88528">
+<interface name="corenet_sendrecv_transproxy_client_packets" lineno="88949">
 <summary>
 Send and receive transproxy_client packets.
 </summary>
@@ -64995,7 +65615,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_transproxy_client_packets" lineno="88544">
+<interface name="corenet_dontaudit_sendrecv_transproxy_client_packets" lineno="88965">
 <summary>
 Do not audit attempts to send and receive transproxy_client packets.
 </summary>
@@ -65006,7 +65626,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_transproxy_client_packets" lineno="88559">
+<interface name="corenet_relabelto_transproxy_client_packets" lineno="88980">
 <summary>
 Relabel packets to transproxy_client the packet type.
 </summary>
@@ -65016,7 +65636,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_transproxy_server_packets" lineno="88579">
+<interface name="corenet_send_transproxy_server_packets" lineno="89000">
 <summary>
 Send transproxy_server packets.
 </summary>
@@ -65027,7 +65647,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_transproxy_server_packets" lineno="88598">
+<interface name="corenet_dontaudit_send_transproxy_server_packets" lineno="89019">
 <summary>
 Do not audit attempts to send transproxy_server packets.
 </summary>
@@ -65038,7 +65658,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_transproxy_server_packets" lineno="88617">
+<interface name="corenet_receive_transproxy_server_packets" lineno="89038">
 <summary>
 Receive transproxy_server packets.
 </summary>
@@ -65049,7 +65669,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_transproxy_server_packets" lineno="88636">
+<interface name="corenet_dontaudit_receive_transproxy_server_packets" lineno="89057">
 <summary>
 Do not audit attempts to receive transproxy_server packets.
 </summary>
@@ -65060,7 +65680,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_transproxy_server_packets" lineno="88655">
+<interface name="corenet_sendrecv_transproxy_server_packets" lineno="89076">
 <summary>
 Send and receive transproxy_server packets.
 </summary>
@@ -65071,7 +65691,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_transproxy_server_packets" lineno="88671">
+<interface name="corenet_dontaudit_sendrecv_transproxy_server_packets" lineno="89092">
 <summary>
 Do not audit attempts to send and receive transproxy_server packets.
 </summary>
@@ -65082,7 +65702,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_transproxy_server_packets" lineno="88686">
+<interface name="corenet_relabelto_transproxy_server_packets" lineno="89107">
 <summary>
 Relabel packets to transproxy_server the packet type.
 </summary>
@@ -65092,7 +65712,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_trisoap_port" lineno="88708">
+<interface name="corenet_tcp_sendrecv_trisoap_port" lineno="89129">
 <summary>
 Send and receive TCP traffic on the trisoap port.
 </summary>
@@ -65103,7 +65723,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_trisoap_port" lineno="88723">
+<interface name="corenet_udp_send_trisoap_port" lineno="89144">
 <summary>
 Send UDP traffic on the trisoap port.
 </summary>
@@ -65114,7 +65734,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_trisoap_port" lineno="88738">
+<interface name="corenet_dontaudit_udp_send_trisoap_port" lineno="89159">
 <summary>
 Do not audit attempts to send UDP traffic on the trisoap port.
 </summary>
@@ -65125,7 +65745,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_trisoap_port" lineno="88753">
+<interface name="corenet_udp_receive_trisoap_port" lineno="89174">
 <summary>
 Receive UDP traffic on the trisoap port.
 </summary>
@@ -65136,7 +65756,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_trisoap_port" lineno="88768">
+<interface name="corenet_dontaudit_udp_receive_trisoap_port" lineno="89189">
 <summary>
 Do not audit attempts to receive UDP traffic on the trisoap port.
 </summary>
@@ -65147,7 +65767,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_trisoap_port" lineno="88783">
+<interface name="corenet_udp_sendrecv_trisoap_port" lineno="89204">
 <summary>
 Send and receive UDP traffic on the trisoap port.
 </summary>
@@ -65158,7 +65778,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_trisoap_port" lineno="88799">
+<interface name="corenet_dontaudit_udp_sendrecv_trisoap_port" lineno="89220">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the trisoap port.
@@ -65170,7 +65790,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_trisoap_port" lineno="88814">
+<interface name="corenet_tcp_bind_trisoap_port" lineno="89235">
 <summary>
 Bind TCP sockets to the trisoap port.
 </summary>
@@ -65181,7 +65801,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_trisoap_port" lineno="88834">
+<interface name="corenet_udp_bind_trisoap_port" lineno="89255">
 <summary>
 Bind UDP sockets to the trisoap port.
 </summary>
@@ -65192,7 +65812,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_trisoap_port" lineno="88853">
+<interface name="corenet_tcp_connect_trisoap_port" lineno="89274">
 <summary>
 Make a TCP connection to the trisoap port.
 </summary>
@@ -65202,7 +65822,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_trisoap_client_packets" lineno="88873">
+<interface name="corenet_send_trisoap_client_packets" lineno="89294">
 <summary>
 Send trisoap_client packets.
 </summary>
@@ -65213,7 +65833,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_trisoap_client_packets" lineno="88892">
+<interface name="corenet_dontaudit_send_trisoap_client_packets" lineno="89313">
 <summary>
 Do not audit attempts to send trisoap_client packets.
 </summary>
@@ -65224,7 +65844,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_trisoap_client_packets" lineno="88911">
+<interface name="corenet_receive_trisoap_client_packets" lineno="89332">
 <summary>
 Receive trisoap_client packets.
 </summary>
@@ -65235,7 +65855,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_trisoap_client_packets" lineno="88930">
+<interface name="corenet_dontaudit_receive_trisoap_client_packets" lineno="89351">
 <summary>
 Do not audit attempts to receive trisoap_client packets.
 </summary>
@@ -65246,7 +65866,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_trisoap_client_packets" lineno="88949">
+<interface name="corenet_sendrecv_trisoap_client_packets" lineno="89370">
 <summary>
 Send and receive trisoap_client packets.
 </summary>
@@ -65257,7 +65877,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_trisoap_client_packets" lineno="88965">
+<interface name="corenet_dontaudit_sendrecv_trisoap_client_packets" lineno="89386">
 <summary>
 Do not audit attempts to send and receive trisoap_client packets.
 </summary>
@@ -65268,7 +65888,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_trisoap_client_packets" lineno="88980">
+<interface name="corenet_relabelto_trisoap_client_packets" lineno="89401">
 <summary>
 Relabel packets to trisoap_client the packet type.
 </summary>
@@ -65278,7 +65898,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_trisoap_server_packets" lineno="89000">
+<interface name="corenet_send_trisoap_server_packets" lineno="89421">
 <summary>
 Send trisoap_server packets.
 </summary>
@@ -65289,7 +65909,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_trisoap_server_packets" lineno="89019">
+<interface name="corenet_dontaudit_send_trisoap_server_packets" lineno="89440">
 <summary>
 Do not audit attempts to send trisoap_server packets.
 </summary>
@@ -65300,7 +65920,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_trisoap_server_packets" lineno="89038">
+<interface name="corenet_receive_trisoap_server_packets" lineno="89459">
 <summary>
 Receive trisoap_server packets.
 </summary>
@@ -65311,7 +65931,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_trisoap_server_packets" lineno="89057">
+<interface name="corenet_dontaudit_receive_trisoap_server_packets" lineno="89478">
 <summary>
 Do not audit attempts to receive trisoap_server packets.
 </summary>
@@ -65322,7 +65942,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_trisoap_server_packets" lineno="89076">
+<interface name="corenet_sendrecv_trisoap_server_packets" lineno="89497">
 <summary>
 Send and receive trisoap_server packets.
 </summary>
@@ -65333,7 +65953,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_trisoap_server_packets" lineno="89092">
+<interface name="corenet_dontaudit_sendrecv_trisoap_server_packets" lineno="89513">
 <summary>
 Do not audit attempts to send and receive trisoap_server packets.
 </summary>
@@ -65344,7 +65964,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_trisoap_server_packets" lineno="89107">
+<interface name="corenet_relabelto_trisoap_server_packets" lineno="89528">
 <summary>
 Relabel packets to trisoap_server the packet type.
 </summary>
@@ -65354,7 +65974,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_trivnet1_port" lineno="89129">
+<interface name="corenet_tcp_sendrecv_trivnet1_port" lineno="89550">
 <summary>
 Send and receive TCP traffic on the trivnet1 port.
 </summary>
@@ -65365,7 +65985,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_trivnet1_port" lineno="89144">
+<interface name="corenet_udp_send_trivnet1_port" lineno="89565">
 <summary>
 Send UDP traffic on the trivnet1 port.
 </summary>
@@ -65376,7 +65996,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_trivnet1_port" lineno="89159">
+<interface name="corenet_dontaudit_udp_send_trivnet1_port" lineno="89580">
 <summary>
 Do not audit attempts to send UDP traffic on the trivnet1 port.
 </summary>
@@ -65387,7 +66007,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_trivnet1_port" lineno="89174">
+<interface name="corenet_udp_receive_trivnet1_port" lineno="89595">
 <summary>
 Receive UDP traffic on the trivnet1 port.
 </summary>
@@ -65398,7 +66018,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_trivnet1_port" lineno="89189">
+<interface name="corenet_dontaudit_udp_receive_trivnet1_port" lineno="89610">
 <summary>
 Do not audit attempts to receive UDP traffic on the trivnet1 port.
 </summary>
@@ -65409,7 +66029,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_trivnet1_port" lineno="89204">
+<interface name="corenet_udp_sendrecv_trivnet1_port" lineno="89625">
 <summary>
 Send and receive UDP traffic on the trivnet1 port.
 </summary>
@@ -65420,7 +66040,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_trivnet1_port" lineno="89220">
+<interface name="corenet_dontaudit_udp_sendrecv_trivnet1_port" lineno="89641">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the trivnet1 port.
@@ -65432,7 +66052,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_trivnet1_port" lineno="89235">
+<interface name="corenet_tcp_bind_trivnet1_port" lineno="89656">
 <summary>
 Bind TCP sockets to the trivnet1 port.
 </summary>
@@ -65443,7 +66063,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_trivnet1_port" lineno="89255">
+<interface name="corenet_udp_bind_trivnet1_port" lineno="89676">
 <summary>
 Bind UDP sockets to the trivnet1 port.
 </summary>
@@ -65454,7 +66074,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_trivnet1_port" lineno="89274">
+<interface name="corenet_tcp_connect_trivnet1_port" lineno="89695">
 <summary>
 Make a TCP connection to the trivnet1 port.
 </summary>
@@ -65464,7 +66084,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_trivnet1_client_packets" lineno="89294">
+<interface name="corenet_send_trivnet1_client_packets" lineno="89715">
 <summary>
 Send trivnet1_client packets.
 </summary>
@@ -65475,7 +66095,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_trivnet1_client_packets" lineno="89313">
+<interface name="corenet_dontaudit_send_trivnet1_client_packets" lineno="89734">
 <summary>
 Do not audit attempts to send trivnet1_client packets.
 </summary>
@@ -65486,7 +66106,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_trivnet1_client_packets" lineno="89332">
+<interface name="corenet_receive_trivnet1_client_packets" lineno="89753">
 <summary>
 Receive trivnet1_client packets.
 </summary>
@@ -65497,7 +66117,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_trivnet1_client_packets" lineno="89351">
+<interface name="corenet_dontaudit_receive_trivnet1_client_packets" lineno="89772">
 <summary>
 Do not audit attempts to receive trivnet1_client packets.
 </summary>
@@ -65508,7 +66128,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_trivnet1_client_packets" lineno="89370">
+<interface name="corenet_sendrecv_trivnet1_client_packets" lineno="89791">
 <summary>
 Send and receive trivnet1_client packets.
 </summary>
@@ -65519,7 +66139,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_trivnet1_client_packets" lineno="89386">
+<interface name="corenet_dontaudit_sendrecv_trivnet1_client_packets" lineno="89807">
 <summary>
 Do not audit attempts to send and receive trivnet1_client packets.
 </summary>
@@ -65530,7 +66150,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_trivnet1_client_packets" lineno="89401">
+<interface name="corenet_relabelto_trivnet1_client_packets" lineno="89822">
 <summary>
 Relabel packets to trivnet1_client the packet type.
 </summary>
@@ -65540,7 +66160,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_trivnet1_server_packets" lineno="89421">
+<interface name="corenet_send_trivnet1_server_packets" lineno="89842">
 <summary>
 Send trivnet1_server packets.
 </summary>
@@ -65551,7 +66171,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_trivnet1_server_packets" lineno="89440">
+<interface name="corenet_dontaudit_send_trivnet1_server_packets" lineno="89861">
 <summary>
 Do not audit attempts to send trivnet1_server packets.
 </summary>
@@ -65562,7 +66182,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_trivnet1_server_packets" lineno="89459">
+<interface name="corenet_receive_trivnet1_server_packets" lineno="89880">
 <summary>
 Receive trivnet1_server packets.
 </summary>
@@ -65573,7 +66193,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_trivnet1_server_packets" lineno="89478">
+<interface name="corenet_dontaudit_receive_trivnet1_server_packets" lineno="89899">
 <summary>
 Do not audit attempts to receive trivnet1_server packets.
 </summary>
@@ -65584,7 +66204,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_trivnet1_server_packets" lineno="89497">
+<interface name="corenet_sendrecv_trivnet1_server_packets" lineno="89918">
 <summary>
 Send and receive trivnet1_server packets.
 </summary>
@@ -65595,7 +66215,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_trivnet1_server_packets" lineno="89513">
+<interface name="corenet_dontaudit_sendrecv_trivnet1_server_packets" lineno="89934">
 <summary>
 Do not audit attempts to send and receive trivnet1_server packets.
 </summary>
@@ -65606,7 +66226,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_trivnet1_server_packets" lineno="89528">
+<interface name="corenet_relabelto_trivnet1_server_packets" lineno="89949">
 <summary>
 Relabel packets to trivnet1_server the packet type.
 </summary>
@@ -65616,7 +66236,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_ups_port" lineno="89550">
+<interface name="corenet_tcp_sendrecv_ups_port" lineno="89971">
 <summary>
 Send and receive TCP traffic on the ups port.
 </summary>
@@ -65627,7 +66247,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_ups_port" lineno="89565">
+<interface name="corenet_udp_send_ups_port" lineno="89986">
 <summary>
 Send UDP traffic on the ups port.
 </summary>
@@ -65638,7 +66258,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_ups_port" lineno="89580">
+<interface name="corenet_dontaudit_udp_send_ups_port" lineno="90001">
 <summary>
 Do not audit attempts to send UDP traffic on the ups port.
 </summary>
@@ -65649,7 +66269,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_ups_port" lineno="89595">
+<interface name="corenet_udp_receive_ups_port" lineno="90016">
 <summary>
 Receive UDP traffic on the ups port.
 </summary>
@@ -65660,7 +66280,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_ups_port" lineno="89610">
+<interface name="corenet_dontaudit_udp_receive_ups_port" lineno="90031">
 <summary>
 Do not audit attempts to receive UDP traffic on the ups port.
 </summary>
@@ -65671,7 +66291,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_ups_port" lineno="89625">
+<interface name="corenet_udp_sendrecv_ups_port" lineno="90046">
 <summary>
 Send and receive UDP traffic on the ups port.
 </summary>
@@ -65682,7 +66302,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_ups_port" lineno="89641">
+<interface name="corenet_dontaudit_udp_sendrecv_ups_port" lineno="90062">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the ups port.
@@ -65694,7 +66314,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_ups_port" lineno="89656">
+<interface name="corenet_tcp_bind_ups_port" lineno="90077">
 <summary>
 Bind TCP sockets to the ups port.
 </summary>
@@ -65705,7 +66325,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_ups_port" lineno="89676">
+<interface name="corenet_udp_bind_ups_port" lineno="90097">
 <summary>
 Bind UDP sockets to the ups port.
 </summary>
@@ -65716,7 +66336,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_ups_port" lineno="89695">
+<interface name="corenet_tcp_connect_ups_port" lineno="90116">
 <summary>
 Make a TCP connection to the ups port.
 </summary>
@@ -65726,7 +66346,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_ups_client_packets" lineno="89715">
+<interface name="corenet_send_ups_client_packets" lineno="90136">
 <summary>
 Send ups_client packets.
 </summary>
@@ -65737,7 +66357,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_ups_client_packets" lineno="89734">
+<interface name="corenet_dontaudit_send_ups_client_packets" lineno="90155">
 <summary>
 Do not audit attempts to send ups_client packets.
 </summary>
@@ -65748,7 +66368,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_ups_client_packets" lineno="89753">
+<interface name="corenet_receive_ups_client_packets" lineno="90174">
 <summary>
 Receive ups_client packets.
 </summary>
@@ -65759,7 +66379,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_ups_client_packets" lineno="89772">
+<interface name="corenet_dontaudit_receive_ups_client_packets" lineno="90193">
 <summary>
 Do not audit attempts to receive ups_client packets.
 </summary>
@@ -65770,7 +66390,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_ups_client_packets" lineno="89791">
+<interface name="corenet_sendrecv_ups_client_packets" lineno="90212">
 <summary>
 Send and receive ups_client packets.
 </summary>
@@ -65781,7 +66401,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_ups_client_packets" lineno="89807">
+<interface name="corenet_dontaudit_sendrecv_ups_client_packets" lineno="90228">
 <summary>
 Do not audit attempts to send and receive ups_client packets.
 </summary>
@@ -65792,7 +66412,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_ups_client_packets" lineno="89822">
+<interface name="corenet_relabelto_ups_client_packets" lineno="90243">
 <summary>
 Relabel packets to ups_client the packet type.
 </summary>
@@ -65802,7 +66422,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_ups_server_packets" lineno="89842">
+<interface name="corenet_send_ups_server_packets" lineno="90263">
 <summary>
 Send ups_server packets.
 </summary>
@@ -65813,7 +66433,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_ups_server_packets" lineno="89861">
+<interface name="corenet_dontaudit_send_ups_server_packets" lineno="90282">
 <summary>
 Do not audit attempts to send ups_server packets.
 </summary>
@@ -65824,7 +66444,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_ups_server_packets" lineno="89880">
+<interface name="corenet_receive_ups_server_packets" lineno="90301">
 <summary>
 Receive ups_server packets.
 </summary>
@@ -65835,7 +66455,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_ups_server_packets" lineno="89899">
+<interface name="corenet_dontaudit_receive_ups_server_packets" lineno="90320">
 <summary>
 Do not audit attempts to receive ups_server packets.
 </summary>
@@ -65846,7 +66466,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_ups_server_packets" lineno="89918">
+<interface name="corenet_sendrecv_ups_server_packets" lineno="90339">
 <summary>
 Send and receive ups_server packets.
 </summary>
@@ -65857,7 +66477,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_ups_server_packets" lineno="89934">
+<interface name="corenet_dontaudit_sendrecv_ups_server_packets" lineno="90355">
 <summary>
 Do not audit attempts to send and receive ups_server packets.
 </summary>
@@ -65868,7 +66488,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_ups_server_packets" lineno="89949">
+<interface name="corenet_relabelto_ups_server_packets" lineno="90370">
 <summary>
 Relabel packets to ups_server the packet type.
 </summary>
@@ -65878,7 +66498,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_utcpserver_port" lineno="89971">
+<interface name="corenet_tcp_sendrecv_utcpserver_port" lineno="90392">
 <summary>
 Send and receive TCP traffic on the utcpserver port.
 </summary>
@@ -65889,7 +66509,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_utcpserver_port" lineno="89986">
+<interface name="corenet_udp_send_utcpserver_port" lineno="90407">
 <summary>
 Send UDP traffic on the utcpserver port.
 </summary>
@@ -65900,7 +66520,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_utcpserver_port" lineno="90001">
+<interface name="corenet_dontaudit_udp_send_utcpserver_port" lineno="90422">
 <summary>
 Do not audit attempts to send UDP traffic on the utcpserver port.
 </summary>
@@ -65911,7 +66531,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_utcpserver_port" lineno="90016">
+<interface name="corenet_udp_receive_utcpserver_port" lineno="90437">
 <summary>
 Receive UDP traffic on the utcpserver port.
 </summary>
@@ -65922,7 +66542,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_utcpserver_port" lineno="90031">
+<interface name="corenet_dontaudit_udp_receive_utcpserver_port" lineno="90452">
 <summary>
 Do not audit attempts to receive UDP traffic on the utcpserver port.
 </summary>
@@ -65933,7 +66553,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_utcpserver_port" lineno="90046">
+<interface name="corenet_udp_sendrecv_utcpserver_port" lineno="90467">
 <summary>
 Send and receive UDP traffic on the utcpserver port.
 </summary>
@@ -65944,7 +66564,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_utcpserver_port" lineno="90062">
+<interface name="corenet_dontaudit_udp_sendrecv_utcpserver_port" lineno="90483">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the utcpserver port.
@@ -65956,7 +66576,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_utcpserver_port" lineno="90077">
+<interface name="corenet_tcp_bind_utcpserver_port" lineno="90498">
 <summary>
 Bind TCP sockets to the utcpserver port.
 </summary>
@@ -65967,7 +66587,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_utcpserver_port" lineno="90097">
+<interface name="corenet_udp_bind_utcpserver_port" lineno="90518">
 <summary>
 Bind UDP sockets to the utcpserver port.
 </summary>
@@ -65978,7 +66598,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_utcpserver_port" lineno="90116">
+<interface name="corenet_tcp_connect_utcpserver_port" lineno="90537">
 <summary>
 Make a TCP connection to the utcpserver port.
 </summary>
@@ -65988,7 +66608,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_utcpserver_client_packets" lineno="90136">
+<interface name="corenet_send_utcpserver_client_packets" lineno="90557">
 <summary>
 Send utcpserver_client packets.
 </summary>
@@ -65999,7 +66619,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_utcpserver_client_packets" lineno="90155">
+<interface name="corenet_dontaudit_send_utcpserver_client_packets" lineno="90576">
 <summary>
 Do not audit attempts to send utcpserver_client packets.
 </summary>
@@ -66010,7 +66630,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_utcpserver_client_packets" lineno="90174">
+<interface name="corenet_receive_utcpserver_client_packets" lineno="90595">
 <summary>
 Receive utcpserver_client packets.
 </summary>
@@ -66021,7 +66641,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_utcpserver_client_packets" lineno="90193">
+<interface name="corenet_dontaudit_receive_utcpserver_client_packets" lineno="90614">
 <summary>
 Do not audit attempts to receive utcpserver_client packets.
 </summary>
@@ -66032,7 +66652,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_utcpserver_client_packets" lineno="90212">
+<interface name="corenet_sendrecv_utcpserver_client_packets" lineno="90633">
 <summary>
 Send and receive utcpserver_client packets.
 </summary>
@@ -66043,7 +66663,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_utcpserver_client_packets" lineno="90228">
+<interface name="corenet_dontaudit_sendrecv_utcpserver_client_packets" lineno="90649">
 <summary>
 Do not audit attempts to send and receive utcpserver_client packets.
 </summary>
@@ -66054,7 +66674,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_utcpserver_client_packets" lineno="90243">
+<interface name="corenet_relabelto_utcpserver_client_packets" lineno="90664">
 <summary>
 Relabel packets to utcpserver_client the packet type.
 </summary>
@@ -66064,7 +66684,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_utcpserver_server_packets" lineno="90263">
+<interface name="corenet_send_utcpserver_server_packets" lineno="90684">
 <summary>
 Send utcpserver_server packets.
 </summary>
@@ -66075,7 +66695,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_utcpserver_server_packets" lineno="90282">
+<interface name="corenet_dontaudit_send_utcpserver_server_packets" lineno="90703">
 <summary>
 Do not audit attempts to send utcpserver_server packets.
 </summary>
@@ -66086,7 +66706,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_utcpserver_server_packets" lineno="90301">
+<interface name="corenet_receive_utcpserver_server_packets" lineno="90722">
 <summary>
 Receive utcpserver_server packets.
 </summary>
@@ -66097,7 +66717,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_utcpserver_server_packets" lineno="90320">
+<interface name="corenet_dontaudit_receive_utcpserver_server_packets" lineno="90741">
 <summary>
 Do not audit attempts to receive utcpserver_server packets.
 </summary>
@@ -66108,7 +66728,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_utcpserver_server_packets" lineno="90339">
+<interface name="corenet_sendrecv_utcpserver_server_packets" lineno="90760">
 <summary>
 Send and receive utcpserver_server packets.
 </summary>
@@ -66119,7 +66739,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_utcpserver_server_packets" lineno="90355">
+<interface name="corenet_dontaudit_sendrecv_utcpserver_server_packets" lineno="90776">
 <summary>
 Do not audit attempts to send and receive utcpserver_server packets.
 </summary>
@@ -66130,7 +66750,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_utcpserver_server_packets" lineno="90370">
+<interface name="corenet_relabelto_utcpserver_server_packets" lineno="90791">
 <summary>
 Relabel packets to utcpserver_server the packet type.
 </summary>
@@ -66140,7 +66760,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_uucpd_port" lineno="90392">
+<interface name="corenet_tcp_sendrecv_uucpd_port" lineno="90813">
 <summary>
 Send and receive TCP traffic on the uucpd port.
 </summary>
@@ -66151,7 +66771,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_uucpd_port" lineno="90407">
+<interface name="corenet_udp_send_uucpd_port" lineno="90828">
 <summary>
 Send UDP traffic on the uucpd port.
 </summary>
@@ -66162,7 +66782,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_uucpd_port" lineno="90422">
+<interface name="corenet_dontaudit_udp_send_uucpd_port" lineno="90843">
 <summary>
 Do not audit attempts to send UDP traffic on the uucpd port.
 </summary>
@@ -66173,7 +66793,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_uucpd_port" lineno="90437">
+<interface name="corenet_udp_receive_uucpd_port" lineno="90858">
 <summary>
 Receive UDP traffic on the uucpd port.
 </summary>
@@ -66184,7 +66804,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_uucpd_port" lineno="90452">
+<interface name="corenet_dontaudit_udp_receive_uucpd_port" lineno="90873">
 <summary>
 Do not audit attempts to receive UDP traffic on the uucpd port.
 </summary>
@@ -66195,7 +66815,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_uucpd_port" lineno="90467">
+<interface name="corenet_udp_sendrecv_uucpd_port" lineno="90888">
 <summary>
 Send and receive UDP traffic on the uucpd port.
 </summary>
@@ -66206,7 +66826,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_uucpd_port" lineno="90483">
+<interface name="corenet_dontaudit_udp_sendrecv_uucpd_port" lineno="90904">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the uucpd port.
@@ -66218,7 +66838,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_uucpd_port" lineno="90498">
+<interface name="corenet_tcp_bind_uucpd_port" lineno="90919">
 <summary>
 Bind TCP sockets to the uucpd port.
 </summary>
@@ -66229,7 +66849,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_uucpd_port" lineno="90518">
+<interface name="corenet_udp_bind_uucpd_port" lineno="90939">
 <summary>
 Bind UDP sockets to the uucpd port.
 </summary>
@@ -66240,7 +66860,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_uucpd_port" lineno="90537">
+<interface name="corenet_tcp_connect_uucpd_port" lineno="90958">
 <summary>
 Make a TCP connection to the uucpd port.
 </summary>
@@ -66250,7 +66870,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_uucpd_client_packets" lineno="90557">
+<interface name="corenet_send_uucpd_client_packets" lineno="90978">
 <summary>
 Send uucpd_client packets.
 </summary>
@@ -66261,7 +66881,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_uucpd_client_packets" lineno="90576">
+<interface name="corenet_dontaudit_send_uucpd_client_packets" lineno="90997">
 <summary>
 Do not audit attempts to send uucpd_client packets.
 </summary>
@@ -66272,7 +66892,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_uucpd_client_packets" lineno="90595">
+<interface name="corenet_receive_uucpd_client_packets" lineno="91016">
 <summary>
 Receive uucpd_client packets.
 </summary>
@@ -66283,7 +66903,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_uucpd_client_packets" lineno="90614">
+<interface name="corenet_dontaudit_receive_uucpd_client_packets" lineno="91035">
 <summary>
 Do not audit attempts to receive uucpd_client packets.
 </summary>
@@ -66294,7 +66914,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_uucpd_client_packets" lineno="90633">
+<interface name="corenet_sendrecv_uucpd_client_packets" lineno="91054">
 <summary>
 Send and receive uucpd_client packets.
 </summary>
@@ -66305,7 +66925,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_uucpd_client_packets" lineno="90649">
+<interface name="corenet_dontaudit_sendrecv_uucpd_client_packets" lineno="91070">
 <summary>
 Do not audit attempts to send and receive uucpd_client packets.
 </summary>
@@ -66316,7 +66936,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_uucpd_client_packets" lineno="90664">
+<interface name="corenet_relabelto_uucpd_client_packets" lineno="91085">
 <summary>
 Relabel packets to uucpd_client the packet type.
 </summary>
@@ -66326,7 +66946,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_uucpd_server_packets" lineno="90684">
+<interface name="corenet_send_uucpd_server_packets" lineno="91105">
 <summary>
 Send uucpd_server packets.
 </summary>
@@ -66337,7 +66957,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_uucpd_server_packets" lineno="90703">
+<interface name="corenet_dontaudit_send_uucpd_server_packets" lineno="91124">
 <summary>
 Do not audit attempts to send uucpd_server packets.
 </summary>
@@ -66348,7 +66968,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_uucpd_server_packets" lineno="90722">
+<interface name="corenet_receive_uucpd_server_packets" lineno="91143">
 <summary>
 Receive uucpd_server packets.
 </summary>
@@ -66359,7 +66979,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_uucpd_server_packets" lineno="90741">
+<interface name="corenet_dontaudit_receive_uucpd_server_packets" lineno="91162">
 <summary>
 Do not audit attempts to receive uucpd_server packets.
 </summary>
@@ -66370,7 +66990,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_uucpd_server_packets" lineno="90760">
+<interface name="corenet_sendrecv_uucpd_server_packets" lineno="91181">
 <summary>
 Send and receive uucpd_server packets.
 </summary>
@@ -66381,7 +67001,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_uucpd_server_packets" lineno="90776">
+<interface name="corenet_dontaudit_sendrecv_uucpd_server_packets" lineno="91197">
 <summary>
 Do not audit attempts to send and receive uucpd_server packets.
 </summary>
@@ -66392,7 +67012,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_uucpd_server_packets" lineno="90791">
+<interface name="corenet_relabelto_uucpd_server_packets" lineno="91212">
 <summary>
 Relabel packets to uucpd_server the packet type.
 </summary>
@@ -66402,7 +67022,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_varnishd_port" lineno="90813">
+<interface name="corenet_tcp_sendrecv_varnishd_port" lineno="91234">
 <summary>
 Send and receive TCP traffic on the varnishd port.
 </summary>
@@ -66413,7 +67033,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_varnishd_port" lineno="90828">
+<interface name="corenet_udp_send_varnishd_port" lineno="91249">
 <summary>
 Send UDP traffic on the varnishd port.
 </summary>
@@ -66424,7 +67044,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_varnishd_port" lineno="90843">
+<interface name="corenet_dontaudit_udp_send_varnishd_port" lineno="91264">
 <summary>
 Do not audit attempts to send UDP traffic on the varnishd port.
 </summary>
@@ -66435,7 +67055,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_varnishd_port" lineno="90858">
+<interface name="corenet_udp_receive_varnishd_port" lineno="91279">
 <summary>
 Receive UDP traffic on the varnishd port.
 </summary>
@@ -66446,7 +67066,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_varnishd_port" lineno="90873">
+<interface name="corenet_dontaudit_udp_receive_varnishd_port" lineno="91294">
 <summary>
 Do not audit attempts to receive UDP traffic on the varnishd port.
 </summary>
@@ -66457,7 +67077,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_varnishd_port" lineno="90888">
+<interface name="corenet_udp_sendrecv_varnishd_port" lineno="91309">
 <summary>
 Send and receive UDP traffic on the varnishd port.
 </summary>
@@ -66468,7 +67088,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_varnishd_port" lineno="90904">
+<interface name="corenet_dontaudit_udp_sendrecv_varnishd_port" lineno="91325">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the varnishd port.
@@ -66480,7 +67100,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_varnishd_port" lineno="90919">
+<interface name="corenet_tcp_bind_varnishd_port" lineno="91340">
 <summary>
 Bind TCP sockets to the varnishd port.
 </summary>
@@ -66491,7 +67111,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_varnishd_port" lineno="90939">
+<interface name="corenet_udp_bind_varnishd_port" lineno="91360">
 <summary>
 Bind UDP sockets to the varnishd port.
 </summary>
@@ -66502,7 +67122,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_varnishd_port" lineno="90958">
+<interface name="corenet_tcp_connect_varnishd_port" lineno="91379">
 <summary>
 Make a TCP connection to the varnishd port.
 </summary>
@@ -66512,7 +67132,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_varnishd_client_packets" lineno="90978">
+<interface name="corenet_send_varnishd_client_packets" lineno="91399">
 <summary>
 Send varnishd_client packets.
 </summary>
@@ -66523,7 +67143,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_varnishd_client_packets" lineno="90997">
+<interface name="corenet_dontaudit_send_varnishd_client_packets" lineno="91418">
 <summary>
 Do not audit attempts to send varnishd_client packets.
 </summary>
@@ -66534,7 +67154,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_varnishd_client_packets" lineno="91016">
+<interface name="corenet_receive_varnishd_client_packets" lineno="91437">
 <summary>
 Receive varnishd_client packets.
 </summary>
@@ -66545,7 +67165,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_varnishd_client_packets" lineno="91035">
+<interface name="corenet_dontaudit_receive_varnishd_client_packets" lineno="91456">
 <summary>
 Do not audit attempts to receive varnishd_client packets.
 </summary>
@@ -66556,7 +67176,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_varnishd_client_packets" lineno="91054">
+<interface name="corenet_sendrecv_varnishd_client_packets" lineno="91475">
 <summary>
 Send and receive varnishd_client packets.
 </summary>
@@ -66567,7 +67187,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_varnishd_client_packets" lineno="91070">
+<interface name="corenet_dontaudit_sendrecv_varnishd_client_packets" lineno="91491">
 <summary>
 Do not audit attempts to send and receive varnishd_client packets.
 </summary>
@@ -66578,7 +67198,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_varnishd_client_packets" lineno="91085">
+<interface name="corenet_relabelto_varnishd_client_packets" lineno="91506">
 <summary>
 Relabel packets to varnishd_client the packet type.
 </summary>
@@ -66588,7 +67208,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_varnishd_server_packets" lineno="91105">
+<interface name="corenet_send_varnishd_server_packets" lineno="91526">
 <summary>
 Send varnishd_server packets.
 </summary>
@@ -66599,7 +67219,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_varnishd_server_packets" lineno="91124">
+<interface name="corenet_dontaudit_send_varnishd_server_packets" lineno="91545">
 <summary>
 Do not audit attempts to send varnishd_server packets.
 </summary>
@@ -66610,7 +67230,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_varnishd_server_packets" lineno="91143">
+<interface name="corenet_receive_varnishd_server_packets" lineno="91564">
 <summary>
 Receive varnishd_server packets.
 </summary>
@@ -66621,7 +67241,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_varnishd_server_packets" lineno="91162">
+<interface name="corenet_dontaudit_receive_varnishd_server_packets" lineno="91583">
 <summary>
 Do not audit attempts to receive varnishd_server packets.
 </summary>
@@ -66632,7 +67252,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_varnishd_server_packets" lineno="91181">
+<interface name="corenet_sendrecv_varnishd_server_packets" lineno="91602">
 <summary>
 Send and receive varnishd_server packets.
 </summary>
@@ -66643,7 +67263,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_varnishd_server_packets" lineno="91197">
+<interface name="corenet_dontaudit_sendrecv_varnishd_server_packets" lineno="91618">
 <summary>
 Do not audit attempts to send and receive varnishd_server packets.
 </summary>
@@ -66654,7 +67274,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_varnishd_server_packets" lineno="91212">
+<interface name="corenet_relabelto_varnishd_server_packets" lineno="91633">
 <summary>
 Relabel packets to varnishd_server the packet type.
 </summary>
@@ -66664,7 +67284,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_virt_port" lineno="91234">
+<interface name="corenet_tcp_sendrecv_virt_port" lineno="91655">
 <summary>
 Send and receive TCP traffic on the virt port.
 </summary>
@@ -66675,7 +67295,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_virt_port" lineno="91249">
+<interface name="corenet_udp_send_virt_port" lineno="91670">
 <summary>
 Send UDP traffic on the virt port.
 </summary>
@@ -66686,7 +67306,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_virt_port" lineno="91264">
+<interface name="corenet_dontaudit_udp_send_virt_port" lineno="91685">
 <summary>
 Do not audit attempts to send UDP traffic on the virt port.
 </summary>
@@ -66697,7 +67317,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_virt_port" lineno="91279">
+<interface name="corenet_udp_receive_virt_port" lineno="91700">
 <summary>
 Receive UDP traffic on the virt port.
 </summary>
@@ -66708,7 +67328,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_virt_port" lineno="91294">
+<interface name="corenet_dontaudit_udp_receive_virt_port" lineno="91715">
 <summary>
 Do not audit attempts to receive UDP traffic on the virt port.
 </summary>
@@ -66719,7 +67339,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_virt_port" lineno="91309">
+<interface name="corenet_udp_sendrecv_virt_port" lineno="91730">
 <summary>
 Send and receive UDP traffic on the virt port.
 </summary>
@@ -66730,7 +67350,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_virt_port" lineno="91325">
+<interface name="corenet_dontaudit_udp_sendrecv_virt_port" lineno="91746">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the virt port.
@@ -66742,7 +67362,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_virt_port" lineno="91340">
+<interface name="corenet_tcp_bind_virt_port" lineno="91761">
 <summary>
 Bind TCP sockets to the virt port.
 </summary>
@@ -66753,7 +67373,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_virt_port" lineno="91360">
+<interface name="corenet_udp_bind_virt_port" lineno="91781">
 <summary>
 Bind UDP sockets to the virt port.
 </summary>
@@ -66764,7 +67384,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_virt_port" lineno="91379">
+<interface name="corenet_tcp_connect_virt_port" lineno="91800">
 <summary>
 Make a TCP connection to the virt port.
 </summary>
@@ -66774,7 +67394,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_virt_client_packets" lineno="91399">
+<interface name="corenet_send_virt_client_packets" lineno="91820">
 <summary>
 Send virt_client packets.
 </summary>
@@ -66785,7 +67405,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_virt_client_packets" lineno="91418">
+<interface name="corenet_dontaudit_send_virt_client_packets" lineno="91839">
 <summary>
 Do not audit attempts to send virt_client packets.
 </summary>
@@ -66796,7 +67416,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_virt_client_packets" lineno="91437">
+<interface name="corenet_receive_virt_client_packets" lineno="91858">
 <summary>
 Receive virt_client packets.
 </summary>
@@ -66807,7 +67427,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_virt_client_packets" lineno="91456">
+<interface name="corenet_dontaudit_receive_virt_client_packets" lineno="91877">
 <summary>
 Do not audit attempts to receive virt_client packets.
 </summary>
@@ -66818,7 +67438,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_virt_client_packets" lineno="91475">
+<interface name="corenet_sendrecv_virt_client_packets" lineno="91896">
 <summary>
 Send and receive virt_client packets.
 </summary>
@@ -66829,7 +67449,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_virt_client_packets" lineno="91491">
+<interface name="corenet_dontaudit_sendrecv_virt_client_packets" lineno="91912">
 <summary>
 Do not audit attempts to send and receive virt_client packets.
 </summary>
@@ -66840,7 +67460,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_virt_client_packets" lineno="91506">
+<interface name="corenet_relabelto_virt_client_packets" lineno="91927">
 <summary>
 Relabel packets to virt_client the packet type.
 </summary>
@@ -66850,7 +67470,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_virt_server_packets" lineno="91526">
+<interface name="corenet_send_virt_server_packets" lineno="91947">
 <summary>
 Send virt_server packets.
 </summary>
@@ -66861,7 +67481,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_virt_server_packets" lineno="91545">
+<interface name="corenet_dontaudit_send_virt_server_packets" lineno="91966">
 <summary>
 Do not audit attempts to send virt_server packets.
 </summary>
@@ -66872,7 +67492,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_virt_server_packets" lineno="91564">
+<interface name="corenet_receive_virt_server_packets" lineno="91985">
 <summary>
 Receive virt_server packets.
 </summary>
@@ -66883,7 +67503,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_virt_server_packets" lineno="91583">
+<interface name="corenet_dontaudit_receive_virt_server_packets" lineno="92004">
 <summary>
 Do not audit attempts to receive virt_server packets.
 </summary>
@@ -66894,7 +67514,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_virt_server_packets" lineno="91602">
+<interface name="corenet_sendrecv_virt_server_packets" lineno="92023">
 <summary>
 Send and receive virt_server packets.
 </summary>
@@ -66905,7 +67525,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_virt_server_packets" lineno="91618">
+<interface name="corenet_dontaudit_sendrecv_virt_server_packets" lineno="92039">
 <summary>
 Do not audit attempts to send and receive virt_server packets.
 </summary>
@@ -66916,7 +67536,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_virt_server_packets" lineno="91633">
+<interface name="corenet_relabelto_virt_server_packets" lineno="92054">
 <summary>
 Relabel packets to virt_server the packet type.
 </summary>
@@ -66926,7 +67546,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_virtual_places_port" lineno="91655">
+<interface name="corenet_tcp_sendrecv_virtual_places_port" lineno="92076">
 <summary>
 Send and receive TCP traffic on the virtual_places port.
 </summary>
@@ -66937,7 +67557,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_virtual_places_port" lineno="91670">
+<interface name="corenet_udp_send_virtual_places_port" lineno="92091">
 <summary>
 Send UDP traffic on the virtual_places port.
 </summary>
@@ -66948,7 +67568,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_virtual_places_port" lineno="91685">
+<interface name="corenet_dontaudit_udp_send_virtual_places_port" lineno="92106">
 <summary>
 Do not audit attempts to send UDP traffic on the virtual_places port.
 </summary>
@@ -66959,7 +67579,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_virtual_places_port" lineno="91700">
+<interface name="corenet_udp_receive_virtual_places_port" lineno="92121">
 <summary>
 Receive UDP traffic on the virtual_places port.
 </summary>
@@ -66970,7 +67590,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_virtual_places_port" lineno="91715">
+<interface name="corenet_dontaudit_udp_receive_virtual_places_port" lineno="92136">
 <summary>
 Do not audit attempts to receive UDP traffic on the virtual_places port.
 </summary>
@@ -66981,7 +67601,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_virtual_places_port" lineno="91730">
+<interface name="corenet_udp_sendrecv_virtual_places_port" lineno="92151">
 <summary>
 Send and receive UDP traffic on the virtual_places port.
 </summary>
@@ -66992,7 +67612,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_virtual_places_port" lineno="91746">
+<interface name="corenet_dontaudit_udp_sendrecv_virtual_places_port" lineno="92167">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the virtual_places port.
@@ -67004,7 +67624,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_virtual_places_port" lineno="91761">
+<interface name="corenet_tcp_bind_virtual_places_port" lineno="92182">
 <summary>
 Bind TCP sockets to the virtual_places port.
 </summary>
@@ -67015,7 +67635,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_virtual_places_port" lineno="91781">
+<interface name="corenet_udp_bind_virtual_places_port" lineno="92202">
 <summary>
 Bind UDP sockets to the virtual_places port.
 </summary>
@@ -67026,7 +67646,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_virtual_places_port" lineno="91800">
+<interface name="corenet_tcp_connect_virtual_places_port" lineno="92221">
 <summary>
 Make a TCP connection to the virtual_places port.
 </summary>
@@ -67036,7 +67656,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_virtual_places_client_packets" lineno="91820">
+<interface name="corenet_send_virtual_places_client_packets" lineno="92241">
 <summary>
 Send virtual_places_client packets.
 </summary>
@@ -67047,7 +67667,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_virtual_places_client_packets" lineno="91839">
+<interface name="corenet_dontaudit_send_virtual_places_client_packets" lineno="92260">
 <summary>
 Do not audit attempts to send virtual_places_client packets.
 </summary>
@@ -67058,7 +67678,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_virtual_places_client_packets" lineno="91858">
+<interface name="corenet_receive_virtual_places_client_packets" lineno="92279">
 <summary>
 Receive virtual_places_client packets.
 </summary>
@@ -67069,7 +67689,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_virtual_places_client_packets" lineno="91877">
+<interface name="corenet_dontaudit_receive_virtual_places_client_packets" lineno="92298">
 <summary>
 Do not audit attempts to receive virtual_places_client packets.
 </summary>
@@ -67080,7 +67700,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_virtual_places_client_packets" lineno="91896">
+<interface name="corenet_sendrecv_virtual_places_client_packets" lineno="92317">
 <summary>
 Send and receive virtual_places_client packets.
 </summary>
@@ -67091,7 +67711,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_virtual_places_client_packets" lineno="91912">
+<interface name="corenet_dontaudit_sendrecv_virtual_places_client_packets" lineno="92333">
 <summary>
 Do not audit attempts to send and receive virtual_places_client packets.
 </summary>
@@ -67102,7 +67722,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_virtual_places_client_packets" lineno="91927">
+<interface name="corenet_relabelto_virtual_places_client_packets" lineno="92348">
 <summary>
 Relabel packets to virtual_places_client the packet type.
 </summary>
@@ -67112,7 +67732,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_virtual_places_server_packets" lineno="91947">
+<interface name="corenet_send_virtual_places_server_packets" lineno="92368">
 <summary>
 Send virtual_places_server packets.
 </summary>
@@ -67123,7 +67743,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_virtual_places_server_packets" lineno="91966">
+<interface name="corenet_dontaudit_send_virtual_places_server_packets" lineno="92387">
 <summary>
 Do not audit attempts to send virtual_places_server packets.
 </summary>
@@ -67134,7 +67754,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_virtual_places_server_packets" lineno="91985">
+<interface name="corenet_receive_virtual_places_server_packets" lineno="92406">
 <summary>
 Receive virtual_places_server packets.
 </summary>
@@ -67145,7 +67765,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_virtual_places_server_packets" lineno="92004">
+<interface name="corenet_dontaudit_receive_virtual_places_server_packets" lineno="92425">
 <summary>
 Do not audit attempts to receive virtual_places_server packets.
 </summary>
@@ -67156,7 +67776,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_virtual_places_server_packets" lineno="92023">
+<interface name="corenet_sendrecv_virtual_places_server_packets" lineno="92444">
 <summary>
 Send and receive virtual_places_server packets.
 </summary>
@@ -67167,7 +67787,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_virtual_places_server_packets" lineno="92039">
+<interface name="corenet_dontaudit_sendrecv_virtual_places_server_packets" lineno="92460">
 <summary>
 Do not audit attempts to send and receive virtual_places_server packets.
 </summary>
@@ -67178,7 +67798,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_virtual_places_server_packets" lineno="92054">
+<interface name="corenet_relabelto_virtual_places_server_packets" lineno="92475">
 <summary>
 Relabel packets to virtual_places_server the packet type.
 </summary>
@@ -67188,7 +67808,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_virt_migration_port" lineno="92076">
+<interface name="corenet_tcp_sendrecv_virt_migration_port" lineno="92497">
 <summary>
 Send and receive TCP traffic on the virt_migration port.
 </summary>
@@ -67199,7 +67819,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_virt_migration_port" lineno="92091">
+<interface name="corenet_udp_send_virt_migration_port" lineno="92512">
 <summary>
 Send UDP traffic on the virt_migration port.
 </summary>
@@ -67210,7 +67830,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_virt_migration_port" lineno="92106">
+<interface name="corenet_dontaudit_udp_send_virt_migration_port" lineno="92527">
 <summary>
 Do not audit attempts to send UDP traffic on the virt_migration port.
 </summary>
@@ -67221,7 +67841,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_virt_migration_port" lineno="92121">
+<interface name="corenet_udp_receive_virt_migration_port" lineno="92542">
 <summary>
 Receive UDP traffic on the virt_migration port.
 </summary>
@@ -67232,7 +67852,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_virt_migration_port" lineno="92136">
+<interface name="corenet_dontaudit_udp_receive_virt_migration_port" lineno="92557">
 <summary>
 Do not audit attempts to receive UDP traffic on the virt_migration port.
 </summary>
@@ -67243,7 +67863,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_virt_migration_port" lineno="92151">
+<interface name="corenet_udp_sendrecv_virt_migration_port" lineno="92572">
 <summary>
 Send and receive UDP traffic on the virt_migration port.
 </summary>
@@ -67254,7 +67874,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_virt_migration_port" lineno="92167">
+<interface name="corenet_dontaudit_udp_sendrecv_virt_migration_port" lineno="92588">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the virt_migration port.
@@ -67266,7 +67886,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_virt_migration_port" lineno="92182">
+<interface name="corenet_tcp_bind_virt_migration_port" lineno="92603">
 <summary>
 Bind TCP sockets to the virt_migration port.
 </summary>
@@ -67277,7 +67897,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_virt_migration_port" lineno="92202">
+<interface name="corenet_udp_bind_virt_migration_port" lineno="92623">
 <summary>
 Bind UDP sockets to the virt_migration port.
 </summary>
@@ -67288,7 +67908,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_virt_migration_port" lineno="92221">
+<interface name="corenet_tcp_connect_virt_migration_port" lineno="92642">
 <summary>
 Make a TCP connection to the virt_migration port.
 </summary>
@@ -67298,7 +67918,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_virt_migration_client_packets" lineno="92241">
+<interface name="corenet_send_virt_migration_client_packets" lineno="92662">
 <summary>
 Send virt_migration_client packets.
 </summary>
@@ -67309,7 +67929,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_virt_migration_client_packets" lineno="92260">
+<interface name="corenet_dontaudit_send_virt_migration_client_packets" lineno="92681">
 <summary>
 Do not audit attempts to send virt_migration_client packets.
 </summary>
@@ -67320,7 +67940,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_virt_migration_client_packets" lineno="92279">
+<interface name="corenet_receive_virt_migration_client_packets" lineno="92700">
 <summary>
 Receive virt_migration_client packets.
 </summary>
@@ -67331,7 +67951,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_virt_migration_client_packets" lineno="92298">
+<interface name="corenet_dontaudit_receive_virt_migration_client_packets" lineno="92719">
 <summary>
 Do not audit attempts to receive virt_migration_client packets.
 </summary>
@@ -67342,7 +67962,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_virt_migration_client_packets" lineno="92317">
+<interface name="corenet_sendrecv_virt_migration_client_packets" lineno="92738">
 <summary>
 Send and receive virt_migration_client packets.
 </summary>
@@ -67353,7 +67973,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_virt_migration_client_packets" lineno="92333">
+<interface name="corenet_dontaudit_sendrecv_virt_migration_client_packets" lineno="92754">
 <summary>
 Do not audit attempts to send and receive virt_migration_client packets.
 </summary>
@@ -67364,7 +67984,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_virt_migration_client_packets" lineno="92348">
+<interface name="corenet_relabelto_virt_migration_client_packets" lineno="92769">
 <summary>
 Relabel packets to virt_migration_client the packet type.
 </summary>
@@ -67374,7 +67994,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_virt_migration_server_packets" lineno="92368">
+<interface name="corenet_send_virt_migration_server_packets" lineno="92789">
 <summary>
 Send virt_migration_server packets.
 </summary>
@@ -67385,7 +68005,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_virt_migration_server_packets" lineno="92387">
+<interface name="corenet_dontaudit_send_virt_migration_server_packets" lineno="92808">
 <summary>
 Do not audit attempts to send virt_migration_server packets.
 </summary>
@@ -67396,7 +68016,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_virt_migration_server_packets" lineno="92406">
+<interface name="corenet_receive_virt_migration_server_packets" lineno="92827">
 <summary>
 Receive virt_migration_server packets.
 </summary>
@@ -67407,7 +68027,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_virt_migration_server_packets" lineno="92425">
+<interface name="corenet_dontaudit_receive_virt_migration_server_packets" lineno="92846">
 <summary>
 Do not audit attempts to receive virt_migration_server packets.
 </summary>
@@ -67418,7 +68038,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_virt_migration_server_packets" lineno="92444">
+<interface name="corenet_sendrecv_virt_migration_server_packets" lineno="92865">
 <summary>
 Send and receive virt_migration_server packets.
 </summary>
@@ -67429,7 +68049,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_virt_migration_server_packets" lineno="92460">
+<interface name="corenet_dontaudit_sendrecv_virt_migration_server_packets" lineno="92881">
 <summary>
 Do not audit attempts to send and receive virt_migration_server packets.
 </summary>
@@ -67440,7 +68060,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_virt_migration_server_packets" lineno="92475">
+<interface name="corenet_relabelto_virt_migration_server_packets" lineno="92896">
 <summary>
 Relabel packets to virt_migration_server the packet type.
 </summary>
@@ -67450,7 +68070,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_vnc_port" lineno="92497">
+<interface name="corenet_tcp_sendrecv_vnc_port" lineno="92918">
 <summary>
 Send and receive TCP traffic on the vnc port.
 </summary>
@@ -67461,7 +68081,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_vnc_port" lineno="92512">
+<interface name="corenet_udp_send_vnc_port" lineno="92933">
 <summary>
 Send UDP traffic on the vnc port.
 </summary>
@@ -67472,7 +68092,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_vnc_port" lineno="92527">
+<interface name="corenet_dontaudit_udp_send_vnc_port" lineno="92948">
 <summary>
 Do not audit attempts to send UDP traffic on the vnc port.
 </summary>
@@ -67483,7 +68103,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_vnc_port" lineno="92542">
+<interface name="corenet_udp_receive_vnc_port" lineno="92963">
 <summary>
 Receive UDP traffic on the vnc port.
 </summary>
@@ -67494,7 +68114,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_vnc_port" lineno="92557">
+<interface name="corenet_dontaudit_udp_receive_vnc_port" lineno="92978">
 <summary>
 Do not audit attempts to receive UDP traffic on the vnc port.
 </summary>
@@ -67505,7 +68125,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_vnc_port" lineno="92572">
+<interface name="corenet_udp_sendrecv_vnc_port" lineno="92993">
 <summary>
 Send and receive UDP traffic on the vnc port.
 </summary>
@@ -67516,7 +68136,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_vnc_port" lineno="92588">
+<interface name="corenet_dontaudit_udp_sendrecv_vnc_port" lineno="93009">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the vnc port.
@@ -67528,7 +68148,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_vnc_port" lineno="92603">
+<interface name="corenet_tcp_bind_vnc_port" lineno="93024">
 <summary>
 Bind TCP sockets to the vnc port.
 </summary>
@@ -67539,7 +68159,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_vnc_port" lineno="92623">
+<interface name="corenet_udp_bind_vnc_port" lineno="93044">
 <summary>
 Bind UDP sockets to the vnc port.
 </summary>
@@ -67550,7 +68170,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_vnc_port" lineno="92642">
+<interface name="corenet_tcp_connect_vnc_port" lineno="93063">
 <summary>
 Make a TCP connection to the vnc port.
 </summary>
@@ -67560,7 +68180,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_vnc_client_packets" lineno="92662">
+<interface name="corenet_send_vnc_client_packets" lineno="93083">
 <summary>
 Send vnc_client packets.
 </summary>
@@ -67571,7 +68191,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_vnc_client_packets" lineno="92681">
+<interface name="corenet_dontaudit_send_vnc_client_packets" lineno="93102">
 <summary>
 Do not audit attempts to send vnc_client packets.
 </summary>
@@ -67582,7 +68202,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_vnc_client_packets" lineno="92700">
+<interface name="corenet_receive_vnc_client_packets" lineno="93121">
 <summary>
 Receive vnc_client packets.
 </summary>
@@ -67593,7 +68213,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_vnc_client_packets" lineno="92719">
+<interface name="corenet_dontaudit_receive_vnc_client_packets" lineno="93140">
 <summary>
 Do not audit attempts to receive vnc_client packets.
 </summary>
@@ -67604,7 +68224,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_vnc_client_packets" lineno="92738">
+<interface name="corenet_sendrecv_vnc_client_packets" lineno="93159">
 <summary>
 Send and receive vnc_client packets.
 </summary>
@@ -67615,7 +68235,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_vnc_client_packets" lineno="92754">
+<interface name="corenet_dontaudit_sendrecv_vnc_client_packets" lineno="93175">
 <summary>
 Do not audit attempts to send and receive vnc_client packets.
 </summary>
@@ -67626,7 +68246,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_vnc_client_packets" lineno="92769">
+<interface name="corenet_relabelto_vnc_client_packets" lineno="93190">
 <summary>
 Relabel packets to vnc_client the packet type.
 </summary>
@@ -67636,7 +68256,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_vnc_server_packets" lineno="92789">
+<interface name="corenet_send_vnc_server_packets" lineno="93210">
 <summary>
 Send vnc_server packets.
 </summary>
@@ -67647,7 +68267,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_vnc_server_packets" lineno="92808">
+<interface name="corenet_dontaudit_send_vnc_server_packets" lineno="93229">
 <summary>
 Do not audit attempts to send vnc_server packets.
 </summary>
@@ -67658,7 +68278,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_vnc_server_packets" lineno="92827">
+<interface name="corenet_receive_vnc_server_packets" lineno="93248">
 <summary>
 Receive vnc_server packets.
 </summary>
@@ -67669,7 +68289,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_vnc_server_packets" lineno="92846">
+<interface name="corenet_dontaudit_receive_vnc_server_packets" lineno="93267">
 <summary>
 Do not audit attempts to receive vnc_server packets.
 </summary>
@@ -67680,7 +68300,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_vnc_server_packets" lineno="92865">
+<interface name="corenet_sendrecv_vnc_server_packets" lineno="93286">
 <summary>
 Send and receive vnc_server packets.
 </summary>
@@ -67691,7 +68311,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_vnc_server_packets" lineno="92881">
+<interface name="corenet_dontaudit_sendrecv_vnc_server_packets" lineno="93302">
 <summary>
 Do not audit attempts to send and receive vnc_server packets.
 </summary>
@@ -67702,7 +68322,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_vnc_server_packets" lineno="92896">
+<interface name="corenet_relabelto_vnc_server_packets" lineno="93317">
 <summary>
 Relabel packets to vnc_server the packet type.
 </summary>
@@ -67712,7 +68332,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_wccp_port" lineno="92918">
+<interface name="corenet_tcp_sendrecv_wccp_port" lineno="93339">
 <summary>
 Send and receive TCP traffic on the wccp port.
 </summary>
@@ -67723,7 +68343,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_wccp_port" lineno="92933">
+<interface name="corenet_udp_send_wccp_port" lineno="93354">
 <summary>
 Send UDP traffic on the wccp port.
 </summary>
@@ -67734,7 +68354,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_wccp_port" lineno="92948">
+<interface name="corenet_dontaudit_udp_send_wccp_port" lineno="93369">
 <summary>
 Do not audit attempts to send UDP traffic on the wccp port.
 </summary>
@@ -67745,7 +68365,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_wccp_port" lineno="92963">
+<interface name="corenet_udp_receive_wccp_port" lineno="93384">
 <summary>
 Receive UDP traffic on the wccp port.
 </summary>
@@ -67756,7 +68376,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_wccp_port" lineno="92978">
+<interface name="corenet_dontaudit_udp_receive_wccp_port" lineno="93399">
 <summary>
 Do not audit attempts to receive UDP traffic on the wccp port.
 </summary>
@@ -67767,7 +68387,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_wccp_port" lineno="92993">
+<interface name="corenet_udp_sendrecv_wccp_port" lineno="93414">
 <summary>
 Send and receive UDP traffic on the wccp port.
 </summary>
@@ -67778,7 +68398,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_wccp_port" lineno="93009">
+<interface name="corenet_dontaudit_udp_sendrecv_wccp_port" lineno="93430">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the wccp port.
@@ -67790,7 +68410,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_wccp_port" lineno="93024">
+<interface name="corenet_tcp_bind_wccp_port" lineno="93445">
 <summary>
 Bind TCP sockets to the wccp port.
 </summary>
@@ -67801,7 +68421,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_wccp_port" lineno="93044">
+<interface name="corenet_udp_bind_wccp_port" lineno="93465">
 <summary>
 Bind UDP sockets to the wccp port.
 </summary>
@@ -67812,7 +68432,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_wccp_port" lineno="93063">
+<interface name="corenet_tcp_connect_wccp_port" lineno="93484">
 <summary>
 Make a TCP connection to the wccp port.
 </summary>
@@ -67822,7 +68442,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_wccp_client_packets" lineno="93083">
+<interface name="corenet_send_wccp_client_packets" lineno="93504">
 <summary>
 Send wccp_client packets.
 </summary>
@@ -67833,7 +68453,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_wccp_client_packets" lineno="93102">
+<interface name="corenet_dontaudit_send_wccp_client_packets" lineno="93523">
 <summary>
 Do not audit attempts to send wccp_client packets.
 </summary>
@@ -67844,7 +68464,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_wccp_client_packets" lineno="93121">
+<interface name="corenet_receive_wccp_client_packets" lineno="93542">
 <summary>
 Receive wccp_client packets.
 </summary>
@@ -67855,7 +68475,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_wccp_client_packets" lineno="93140">
+<interface name="corenet_dontaudit_receive_wccp_client_packets" lineno="93561">
 <summary>
 Do not audit attempts to receive wccp_client packets.
 </summary>
@@ -67866,7 +68486,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_wccp_client_packets" lineno="93159">
+<interface name="corenet_sendrecv_wccp_client_packets" lineno="93580">
 <summary>
 Send and receive wccp_client packets.
 </summary>
@@ -67877,7 +68497,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_wccp_client_packets" lineno="93175">
+<interface name="corenet_dontaudit_sendrecv_wccp_client_packets" lineno="93596">
 <summary>
 Do not audit attempts to send and receive wccp_client packets.
 </summary>
@@ -67888,7 +68508,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_wccp_client_packets" lineno="93190">
+<interface name="corenet_relabelto_wccp_client_packets" lineno="93611">
 <summary>
 Relabel packets to wccp_client the packet type.
 </summary>
@@ -67898,7 +68518,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_wccp_server_packets" lineno="93210">
+<interface name="corenet_send_wccp_server_packets" lineno="93631">
 <summary>
 Send wccp_server packets.
 </summary>
@@ -67909,7 +68529,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_wccp_server_packets" lineno="93229">
+<interface name="corenet_dontaudit_send_wccp_server_packets" lineno="93650">
 <summary>
 Do not audit attempts to send wccp_server packets.
 </summary>
@@ -67920,7 +68540,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_wccp_server_packets" lineno="93248">
+<interface name="corenet_receive_wccp_server_packets" lineno="93669">
 <summary>
 Receive wccp_server packets.
 </summary>
@@ -67931,7 +68551,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_wccp_server_packets" lineno="93267">
+<interface name="corenet_dontaudit_receive_wccp_server_packets" lineno="93688">
 <summary>
 Do not audit attempts to receive wccp_server packets.
 </summary>
@@ -67942,7 +68562,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_wccp_server_packets" lineno="93286">
+<interface name="corenet_sendrecv_wccp_server_packets" lineno="93707">
 <summary>
 Send and receive wccp_server packets.
 </summary>
@@ -67953,7 +68573,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_wccp_server_packets" lineno="93302">
+<interface name="corenet_dontaudit_sendrecv_wccp_server_packets" lineno="93723">
 <summary>
 Do not audit attempts to send and receive wccp_server packets.
 </summary>
@@ -67964,7 +68584,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_wccp_server_packets" lineno="93317">
+<interface name="corenet_relabelto_wccp_server_packets" lineno="93738">
 <summary>
 Relabel packets to wccp_server the packet type.
 </summary>
@@ -67974,7 +68594,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_websm_port" lineno="93339">
+<interface name="corenet_tcp_sendrecv_websm_port" lineno="93760">
 <summary>
 Send and receive TCP traffic on the websm port.
 </summary>
@@ -67985,7 +68605,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_websm_port" lineno="93354">
+<interface name="corenet_udp_send_websm_port" lineno="93775">
 <summary>
 Send UDP traffic on the websm port.
 </summary>
@@ -67996,7 +68616,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_websm_port" lineno="93369">
+<interface name="corenet_dontaudit_udp_send_websm_port" lineno="93790">
 <summary>
 Do not audit attempts to send UDP traffic on the websm port.
 </summary>
@@ -68007,7 +68627,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_websm_port" lineno="93384">
+<interface name="corenet_udp_receive_websm_port" lineno="93805">
 <summary>
 Receive UDP traffic on the websm port.
 </summary>
@@ -68018,7 +68638,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_websm_port" lineno="93399">
+<interface name="corenet_dontaudit_udp_receive_websm_port" lineno="93820">
 <summary>
 Do not audit attempts to receive UDP traffic on the websm port.
 </summary>
@@ -68029,7 +68649,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_websm_port" lineno="93414">
+<interface name="corenet_udp_sendrecv_websm_port" lineno="93835">
 <summary>
 Send and receive UDP traffic on the websm port.
 </summary>
@@ -68040,7 +68660,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_websm_port" lineno="93430">
+<interface name="corenet_dontaudit_udp_sendrecv_websm_port" lineno="93851">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the websm port.
@@ -68052,7 +68672,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_websm_port" lineno="93445">
+<interface name="corenet_tcp_bind_websm_port" lineno="93866">
 <summary>
 Bind TCP sockets to the websm port.
 </summary>
@@ -68063,7 +68683,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_websm_port" lineno="93465">
+<interface name="corenet_udp_bind_websm_port" lineno="93886">
 <summary>
 Bind UDP sockets to the websm port.
 </summary>
@@ -68074,7 +68694,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_websm_port" lineno="93484">
+<interface name="corenet_tcp_connect_websm_port" lineno="93905">
 <summary>
 Make a TCP connection to the websm port.
 </summary>
@@ -68084,7 +68704,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_websm_client_packets" lineno="93504">
+<interface name="corenet_send_websm_client_packets" lineno="93925">
 <summary>
 Send websm_client packets.
 </summary>
@@ -68095,7 +68715,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_websm_client_packets" lineno="93523">
+<interface name="corenet_dontaudit_send_websm_client_packets" lineno="93944">
 <summary>
 Do not audit attempts to send websm_client packets.
 </summary>
@@ -68106,7 +68726,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_websm_client_packets" lineno="93542">
+<interface name="corenet_receive_websm_client_packets" lineno="93963">
 <summary>
 Receive websm_client packets.
 </summary>
@@ -68117,7 +68737,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_websm_client_packets" lineno="93561">
+<interface name="corenet_dontaudit_receive_websm_client_packets" lineno="93982">
 <summary>
 Do not audit attempts to receive websm_client packets.
 </summary>
@@ -68128,7 +68748,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_websm_client_packets" lineno="93580">
+<interface name="corenet_sendrecv_websm_client_packets" lineno="94001">
 <summary>
 Send and receive websm_client packets.
 </summary>
@@ -68139,7 +68759,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_websm_client_packets" lineno="93596">
+<interface name="corenet_dontaudit_sendrecv_websm_client_packets" lineno="94017">
 <summary>
 Do not audit attempts to send and receive websm_client packets.
 </summary>
@@ -68150,7 +68770,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_websm_client_packets" lineno="93611">
+<interface name="corenet_relabelto_websm_client_packets" lineno="94032">
 <summary>
 Relabel packets to websm_client the packet type.
 </summary>
@@ -68160,7 +68780,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_websm_server_packets" lineno="93631">
+<interface name="corenet_send_websm_server_packets" lineno="94052">
 <summary>
 Send websm_server packets.
 </summary>
@@ -68171,7 +68791,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_websm_server_packets" lineno="93650">
+<interface name="corenet_dontaudit_send_websm_server_packets" lineno="94071">
 <summary>
 Do not audit attempts to send websm_server packets.
 </summary>
@@ -68182,7 +68802,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_websm_server_packets" lineno="93669">
+<interface name="corenet_receive_websm_server_packets" lineno="94090">
 <summary>
 Receive websm_server packets.
 </summary>
@@ -68193,7 +68813,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_websm_server_packets" lineno="93688">
+<interface name="corenet_dontaudit_receive_websm_server_packets" lineno="94109">
 <summary>
 Do not audit attempts to receive websm_server packets.
 </summary>
@@ -68204,7 +68824,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_websm_server_packets" lineno="93707">
+<interface name="corenet_sendrecv_websm_server_packets" lineno="94128">
 <summary>
 Send and receive websm_server packets.
 </summary>
@@ -68215,7 +68835,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_websm_server_packets" lineno="93723">
+<interface name="corenet_dontaudit_sendrecv_websm_server_packets" lineno="94144">
 <summary>
 Do not audit attempts to send and receive websm_server packets.
 </summary>
@@ -68226,7 +68846,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_websm_server_packets" lineno="93738">
+<interface name="corenet_relabelto_websm_server_packets" lineno="94159">
 <summary>
 Relabel packets to websm_server the packet type.
 </summary>
@@ -68236,7 +68856,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_whois_port" lineno="93760">
+<interface name="corenet_tcp_sendrecv_whois_port" lineno="94181">
 <summary>
 Send and receive TCP traffic on the whois port.
 </summary>
@@ -68247,7 +68867,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_whois_port" lineno="93775">
+<interface name="corenet_udp_send_whois_port" lineno="94196">
 <summary>
 Send UDP traffic on the whois port.
 </summary>
@@ -68258,7 +68878,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_whois_port" lineno="93790">
+<interface name="corenet_dontaudit_udp_send_whois_port" lineno="94211">
 <summary>
 Do not audit attempts to send UDP traffic on the whois port.
 </summary>
@@ -68269,7 +68889,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_whois_port" lineno="93805">
+<interface name="corenet_udp_receive_whois_port" lineno="94226">
 <summary>
 Receive UDP traffic on the whois port.
 </summary>
@@ -68280,7 +68900,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_whois_port" lineno="93820">
+<interface name="corenet_dontaudit_udp_receive_whois_port" lineno="94241">
 <summary>
 Do not audit attempts to receive UDP traffic on the whois port.
 </summary>
@@ -68291,7 +68911,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_whois_port" lineno="93835">
+<interface name="corenet_udp_sendrecv_whois_port" lineno="94256">
 <summary>
 Send and receive UDP traffic on the whois port.
 </summary>
@@ -68302,7 +68922,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_whois_port" lineno="93851">
+<interface name="corenet_dontaudit_udp_sendrecv_whois_port" lineno="94272">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the whois port.
@@ -68314,7 +68934,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_whois_port" lineno="93866">
+<interface name="corenet_tcp_bind_whois_port" lineno="94287">
 <summary>
 Bind TCP sockets to the whois port.
 </summary>
@@ -68325,7 +68945,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_whois_port" lineno="93886">
+<interface name="corenet_udp_bind_whois_port" lineno="94307">
 <summary>
 Bind UDP sockets to the whois port.
 </summary>
@@ -68336,7 +68956,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_whois_port" lineno="93905">
+<interface name="corenet_tcp_connect_whois_port" lineno="94326">
 <summary>
 Make a TCP connection to the whois port.
 </summary>
@@ -68346,7 +68966,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_whois_client_packets" lineno="93925">
+<interface name="corenet_send_whois_client_packets" lineno="94346">
 <summary>
 Send whois_client packets.
 </summary>
@@ -68357,7 +68977,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_whois_client_packets" lineno="93944">
+<interface name="corenet_dontaudit_send_whois_client_packets" lineno="94365">
 <summary>
 Do not audit attempts to send whois_client packets.
 </summary>
@@ -68368,7 +68988,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_whois_client_packets" lineno="93963">
+<interface name="corenet_receive_whois_client_packets" lineno="94384">
 <summary>
 Receive whois_client packets.
 </summary>
@@ -68379,7 +68999,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_whois_client_packets" lineno="93982">
+<interface name="corenet_dontaudit_receive_whois_client_packets" lineno="94403">
 <summary>
 Do not audit attempts to receive whois_client packets.
 </summary>
@@ -68390,7 +69010,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_whois_client_packets" lineno="94001">
+<interface name="corenet_sendrecv_whois_client_packets" lineno="94422">
 <summary>
 Send and receive whois_client packets.
 </summary>
@@ -68401,7 +69021,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_whois_client_packets" lineno="94017">
+<interface name="corenet_dontaudit_sendrecv_whois_client_packets" lineno="94438">
 <summary>
 Do not audit attempts to send and receive whois_client packets.
 </summary>
@@ -68412,7 +69032,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_whois_client_packets" lineno="94032">
+<interface name="corenet_relabelto_whois_client_packets" lineno="94453">
 <summary>
 Relabel packets to whois_client the packet type.
 </summary>
@@ -68422,7 +69042,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_whois_server_packets" lineno="94052">
+<interface name="corenet_send_whois_server_packets" lineno="94473">
 <summary>
 Send whois_server packets.
 </summary>
@@ -68433,7 +69053,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_whois_server_packets" lineno="94071">
+<interface name="corenet_dontaudit_send_whois_server_packets" lineno="94492">
 <summary>
 Do not audit attempts to send whois_server packets.
 </summary>
@@ -68444,7 +69064,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_whois_server_packets" lineno="94090">
+<interface name="corenet_receive_whois_server_packets" lineno="94511">
 <summary>
 Receive whois_server packets.
 </summary>
@@ -68455,7 +69075,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_whois_server_packets" lineno="94109">
+<interface name="corenet_dontaudit_receive_whois_server_packets" lineno="94530">
 <summary>
 Do not audit attempts to receive whois_server packets.
 </summary>
@@ -68466,7 +69086,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_whois_server_packets" lineno="94128">
+<interface name="corenet_sendrecv_whois_server_packets" lineno="94549">
 <summary>
 Send and receive whois_server packets.
 </summary>
@@ -68477,7 +69097,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_whois_server_packets" lineno="94144">
+<interface name="corenet_dontaudit_sendrecv_whois_server_packets" lineno="94565">
 <summary>
 Do not audit attempts to send and receive whois_server packets.
 </summary>
@@ -68488,7 +69108,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_whois_server_packets" lineno="94159">
+<interface name="corenet_relabelto_whois_server_packets" lineno="94580">
 <summary>
 Relabel packets to whois_server the packet type.
 </summary>
@@ -68498,7 +69118,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_winshadow_port" lineno="94181">
+<interface name="corenet_tcp_sendrecv_winshadow_port" lineno="94602">
 <summary>
 Send and receive TCP traffic on the winshadow port.
 </summary>
@@ -68509,7 +69129,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_winshadow_port" lineno="94196">
+<interface name="corenet_udp_send_winshadow_port" lineno="94617">
 <summary>
 Send UDP traffic on the winshadow port.
 </summary>
@@ -68520,7 +69140,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_winshadow_port" lineno="94211">
+<interface name="corenet_dontaudit_udp_send_winshadow_port" lineno="94632">
 <summary>
 Do not audit attempts to send UDP traffic on the winshadow port.
 </summary>
@@ -68531,7 +69151,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_winshadow_port" lineno="94226">
+<interface name="corenet_udp_receive_winshadow_port" lineno="94647">
 <summary>
 Receive UDP traffic on the winshadow port.
 </summary>
@@ -68542,7 +69162,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_winshadow_port" lineno="94241">
+<interface name="corenet_dontaudit_udp_receive_winshadow_port" lineno="94662">
 <summary>
 Do not audit attempts to receive UDP traffic on the winshadow port.
 </summary>
@@ -68553,7 +69173,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_winshadow_port" lineno="94256">
+<interface name="corenet_udp_sendrecv_winshadow_port" lineno="94677">
 <summary>
 Send and receive UDP traffic on the winshadow port.
 </summary>
@@ -68564,7 +69184,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_winshadow_port" lineno="94272">
+<interface name="corenet_dontaudit_udp_sendrecv_winshadow_port" lineno="94693">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the winshadow port.
@@ -68576,7 +69196,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_winshadow_port" lineno="94287">
+<interface name="corenet_tcp_bind_winshadow_port" lineno="94708">
 <summary>
 Bind TCP sockets to the winshadow port.
 </summary>
@@ -68587,7 +69207,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_winshadow_port" lineno="94307">
+<interface name="corenet_udp_bind_winshadow_port" lineno="94728">
 <summary>
 Bind UDP sockets to the winshadow port.
 </summary>
@@ -68598,7 +69218,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_winshadow_port" lineno="94326">
+<interface name="corenet_tcp_connect_winshadow_port" lineno="94747">
 <summary>
 Make a TCP connection to the winshadow port.
 </summary>
@@ -68608,7 +69228,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_winshadow_client_packets" lineno="94346">
+<interface name="corenet_send_winshadow_client_packets" lineno="94767">
 <summary>
 Send winshadow_client packets.
 </summary>
@@ -68619,7 +69239,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_winshadow_client_packets" lineno="94365">
+<interface name="corenet_dontaudit_send_winshadow_client_packets" lineno="94786">
 <summary>
 Do not audit attempts to send winshadow_client packets.
 </summary>
@@ -68630,7 +69250,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_winshadow_client_packets" lineno="94384">
+<interface name="corenet_receive_winshadow_client_packets" lineno="94805">
 <summary>
 Receive winshadow_client packets.
 </summary>
@@ -68641,7 +69261,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_winshadow_client_packets" lineno="94403">
+<interface name="corenet_dontaudit_receive_winshadow_client_packets" lineno="94824">
 <summary>
 Do not audit attempts to receive winshadow_client packets.
 </summary>
@@ -68652,7 +69272,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_winshadow_client_packets" lineno="94422">
+<interface name="corenet_sendrecv_winshadow_client_packets" lineno="94843">
 <summary>
 Send and receive winshadow_client packets.
 </summary>
@@ -68663,7 +69283,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_winshadow_client_packets" lineno="94438">
+<interface name="corenet_dontaudit_sendrecv_winshadow_client_packets" lineno="94859">
 <summary>
 Do not audit attempts to send and receive winshadow_client packets.
 </summary>
@@ -68674,7 +69294,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_winshadow_client_packets" lineno="94453">
+<interface name="corenet_relabelto_winshadow_client_packets" lineno="94874">
 <summary>
 Relabel packets to winshadow_client the packet type.
 </summary>
@@ -68684,7 +69304,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_winshadow_server_packets" lineno="94473">
+<interface name="corenet_send_winshadow_server_packets" lineno="94894">
 <summary>
 Send winshadow_server packets.
 </summary>
@@ -68695,7 +69315,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_winshadow_server_packets" lineno="94492">
+<interface name="corenet_dontaudit_send_winshadow_server_packets" lineno="94913">
 <summary>
 Do not audit attempts to send winshadow_server packets.
 </summary>
@@ -68706,7 +69326,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_winshadow_server_packets" lineno="94511">
+<interface name="corenet_receive_winshadow_server_packets" lineno="94932">
 <summary>
 Receive winshadow_server packets.
 </summary>
@@ -68717,7 +69337,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_winshadow_server_packets" lineno="94530">
+<interface name="corenet_dontaudit_receive_winshadow_server_packets" lineno="94951">
 <summary>
 Do not audit attempts to receive winshadow_server packets.
 </summary>
@@ -68728,7 +69348,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_winshadow_server_packets" lineno="94549">
+<interface name="corenet_sendrecv_winshadow_server_packets" lineno="94970">
 <summary>
 Send and receive winshadow_server packets.
 </summary>
@@ -68739,7 +69359,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_winshadow_server_packets" lineno="94565">
+<interface name="corenet_dontaudit_sendrecv_winshadow_server_packets" lineno="94986">
 <summary>
 Do not audit attempts to send and receive winshadow_server packets.
 </summary>
@@ -68750,7 +69370,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_winshadow_server_packets" lineno="94580">
+<interface name="corenet_relabelto_winshadow_server_packets" lineno="95001">
 <summary>
 Relabel packets to winshadow_server the packet type.
 </summary>
@@ -68760,7 +69380,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_wsdapi_port" lineno="94602">
+<interface name="corenet_tcp_sendrecv_wsdapi_port" lineno="95023">
 <summary>
 Send and receive TCP traffic on the wsdapi port.
 </summary>
@@ -68771,7 +69391,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_wsdapi_port" lineno="94617">
+<interface name="corenet_udp_send_wsdapi_port" lineno="95038">
 <summary>
 Send UDP traffic on the wsdapi port.
 </summary>
@@ -68782,7 +69402,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_wsdapi_port" lineno="94632">
+<interface name="corenet_dontaudit_udp_send_wsdapi_port" lineno="95053">
 <summary>
 Do not audit attempts to send UDP traffic on the wsdapi port.
 </summary>
@@ -68793,7 +69413,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_wsdapi_port" lineno="94647">
+<interface name="corenet_udp_receive_wsdapi_port" lineno="95068">
 <summary>
 Receive UDP traffic on the wsdapi port.
 </summary>
@@ -68804,7 +69424,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_wsdapi_port" lineno="94662">
+<interface name="corenet_dontaudit_udp_receive_wsdapi_port" lineno="95083">
 <summary>
 Do not audit attempts to receive UDP traffic on the wsdapi port.
 </summary>
@@ -68815,7 +69435,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_wsdapi_port" lineno="94677">
+<interface name="corenet_udp_sendrecv_wsdapi_port" lineno="95098">
 <summary>
 Send and receive UDP traffic on the wsdapi port.
 </summary>
@@ -68826,7 +69446,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_wsdapi_port" lineno="94693">
+<interface name="corenet_dontaudit_udp_sendrecv_wsdapi_port" lineno="95114">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the wsdapi port.
@@ -68838,7 +69458,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_wsdapi_port" lineno="94708">
+<interface name="corenet_tcp_bind_wsdapi_port" lineno="95129">
 <summary>
 Bind TCP sockets to the wsdapi port.
 </summary>
@@ -68849,7 +69469,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_wsdapi_port" lineno="94728">
+<interface name="corenet_udp_bind_wsdapi_port" lineno="95149">
 <summary>
 Bind UDP sockets to the wsdapi port.
 </summary>
@@ -68860,7 +69480,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_wsdapi_port" lineno="94747">
+<interface name="corenet_tcp_connect_wsdapi_port" lineno="95168">
 <summary>
 Make a TCP connection to the wsdapi port.
 </summary>
@@ -68870,7 +69490,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_wsdapi_client_packets" lineno="94767">
+<interface name="corenet_send_wsdapi_client_packets" lineno="95188">
 <summary>
 Send wsdapi_client packets.
 </summary>
@@ -68881,7 +69501,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_wsdapi_client_packets" lineno="94786">
+<interface name="corenet_dontaudit_send_wsdapi_client_packets" lineno="95207">
 <summary>
 Do not audit attempts to send wsdapi_client packets.
 </summary>
@@ -68892,7 +69512,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_wsdapi_client_packets" lineno="94805">
+<interface name="corenet_receive_wsdapi_client_packets" lineno="95226">
 <summary>
 Receive wsdapi_client packets.
 </summary>
@@ -68903,7 +69523,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_wsdapi_client_packets" lineno="94824">
+<interface name="corenet_dontaudit_receive_wsdapi_client_packets" lineno="95245">
 <summary>
 Do not audit attempts to receive wsdapi_client packets.
 </summary>
@@ -68914,7 +69534,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_wsdapi_client_packets" lineno="94843">
+<interface name="corenet_sendrecv_wsdapi_client_packets" lineno="95264">
 <summary>
 Send and receive wsdapi_client packets.
 </summary>
@@ -68925,7 +69545,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_wsdapi_client_packets" lineno="94859">
+<interface name="corenet_dontaudit_sendrecv_wsdapi_client_packets" lineno="95280">
 <summary>
 Do not audit attempts to send and receive wsdapi_client packets.
 </summary>
@@ -68936,7 +69556,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_wsdapi_client_packets" lineno="94874">
+<interface name="corenet_relabelto_wsdapi_client_packets" lineno="95295">
 <summary>
 Relabel packets to wsdapi_client the packet type.
 </summary>
@@ -68946,7 +69566,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_wsdapi_server_packets" lineno="94894">
+<interface name="corenet_send_wsdapi_server_packets" lineno="95315">
 <summary>
 Send wsdapi_server packets.
 </summary>
@@ -68957,7 +69577,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_wsdapi_server_packets" lineno="94913">
+<interface name="corenet_dontaudit_send_wsdapi_server_packets" lineno="95334">
 <summary>
 Do not audit attempts to send wsdapi_server packets.
 </summary>
@@ -68968,7 +69588,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_wsdapi_server_packets" lineno="94932">
+<interface name="corenet_receive_wsdapi_server_packets" lineno="95353">
 <summary>
 Receive wsdapi_server packets.
 </summary>
@@ -68979,7 +69599,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_wsdapi_server_packets" lineno="94951">
+<interface name="corenet_dontaudit_receive_wsdapi_server_packets" lineno="95372">
 <summary>
 Do not audit attempts to receive wsdapi_server packets.
 </summary>
@@ -68990,7 +69610,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_wsdapi_server_packets" lineno="94970">
+<interface name="corenet_sendrecv_wsdapi_server_packets" lineno="95391">
 <summary>
 Send and receive wsdapi_server packets.
 </summary>
@@ -69001,7 +69621,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_wsdapi_server_packets" lineno="94986">
+<interface name="corenet_dontaudit_sendrecv_wsdapi_server_packets" lineno="95407">
 <summary>
 Do not audit attempts to send and receive wsdapi_server packets.
 </summary>
@@ -69012,7 +69632,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_wsdapi_server_packets" lineno="95001">
+<interface name="corenet_relabelto_wsdapi_server_packets" lineno="95422">
 <summary>
 Relabel packets to wsdapi_server the packet type.
 </summary>
@@ -69022,7 +69642,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_wsicopy_port" lineno="95023">
+<interface name="corenet_tcp_sendrecv_wsicopy_port" lineno="95444">
 <summary>
 Send and receive TCP traffic on the wsicopy port.
 </summary>
@@ -69033,7 +69653,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_wsicopy_port" lineno="95038">
+<interface name="corenet_udp_send_wsicopy_port" lineno="95459">
 <summary>
 Send UDP traffic on the wsicopy port.
 </summary>
@@ -69044,7 +69664,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_wsicopy_port" lineno="95053">
+<interface name="corenet_dontaudit_udp_send_wsicopy_port" lineno="95474">
 <summary>
 Do not audit attempts to send UDP traffic on the wsicopy port.
 </summary>
@@ -69055,7 +69675,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_wsicopy_port" lineno="95068">
+<interface name="corenet_udp_receive_wsicopy_port" lineno="95489">
 <summary>
 Receive UDP traffic on the wsicopy port.
 </summary>
@@ -69066,7 +69686,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_wsicopy_port" lineno="95083">
+<interface name="corenet_dontaudit_udp_receive_wsicopy_port" lineno="95504">
 <summary>
 Do not audit attempts to receive UDP traffic on the wsicopy port.
 </summary>
@@ -69077,7 +69697,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_wsicopy_port" lineno="95098">
+<interface name="corenet_udp_sendrecv_wsicopy_port" lineno="95519">
 <summary>
 Send and receive UDP traffic on the wsicopy port.
 </summary>
@@ -69088,7 +69708,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_wsicopy_port" lineno="95114">
+<interface name="corenet_dontaudit_udp_sendrecv_wsicopy_port" lineno="95535">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the wsicopy port.
@@ -69100,7 +69720,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_wsicopy_port" lineno="95129">
+<interface name="corenet_tcp_bind_wsicopy_port" lineno="95550">
 <summary>
 Bind TCP sockets to the wsicopy port.
 </summary>
@@ -69111,7 +69731,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_wsicopy_port" lineno="95149">
+<interface name="corenet_udp_bind_wsicopy_port" lineno="95570">
 <summary>
 Bind UDP sockets to the wsicopy port.
 </summary>
@@ -69122,7 +69742,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_wsicopy_port" lineno="95168">
+<interface name="corenet_tcp_connect_wsicopy_port" lineno="95589">
 <summary>
 Make a TCP connection to the wsicopy port.
 </summary>
@@ -69132,7 +69752,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_wsicopy_client_packets" lineno="95188">
+<interface name="corenet_send_wsicopy_client_packets" lineno="95609">
 <summary>
 Send wsicopy_client packets.
 </summary>
@@ -69143,7 +69763,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_wsicopy_client_packets" lineno="95207">
+<interface name="corenet_dontaudit_send_wsicopy_client_packets" lineno="95628">
 <summary>
 Do not audit attempts to send wsicopy_client packets.
 </summary>
@@ -69154,7 +69774,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_wsicopy_client_packets" lineno="95226">
+<interface name="corenet_receive_wsicopy_client_packets" lineno="95647">
 <summary>
 Receive wsicopy_client packets.
 </summary>
@@ -69165,7 +69785,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_wsicopy_client_packets" lineno="95245">
+<interface name="corenet_dontaudit_receive_wsicopy_client_packets" lineno="95666">
 <summary>
 Do not audit attempts to receive wsicopy_client packets.
 </summary>
@@ -69176,7 +69796,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_wsicopy_client_packets" lineno="95264">
+<interface name="corenet_sendrecv_wsicopy_client_packets" lineno="95685">
 <summary>
 Send and receive wsicopy_client packets.
 </summary>
@@ -69187,7 +69807,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_wsicopy_client_packets" lineno="95280">
+<interface name="corenet_dontaudit_sendrecv_wsicopy_client_packets" lineno="95701">
 <summary>
 Do not audit attempts to send and receive wsicopy_client packets.
 </summary>
@@ -69198,7 +69818,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_wsicopy_client_packets" lineno="95295">
+<interface name="corenet_relabelto_wsicopy_client_packets" lineno="95716">
 <summary>
 Relabel packets to wsicopy_client the packet type.
 </summary>
@@ -69208,7 +69828,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_wsicopy_server_packets" lineno="95315">
+<interface name="corenet_send_wsicopy_server_packets" lineno="95736">
 <summary>
 Send wsicopy_server packets.
 </summary>
@@ -69219,7 +69839,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_wsicopy_server_packets" lineno="95334">
+<interface name="corenet_dontaudit_send_wsicopy_server_packets" lineno="95755">
 <summary>
 Do not audit attempts to send wsicopy_server packets.
 </summary>
@@ -69230,7 +69850,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_wsicopy_server_packets" lineno="95353">
+<interface name="corenet_receive_wsicopy_server_packets" lineno="95774">
 <summary>
 Receive wsicopy_server packets.
 </summary>
@@ -69241,7 +69861,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_wsicopy_server_packets" lineno="95372">
+<interface name="corenet_dontaudit_receive_wsicopy_server_packets" lineno="95793">
 <summary>
 Do not audit attempts to receive wsicopy_server packets.
 </summary>
@@ -69252,7 +69872,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_wsicopy_server_packets" lineno="95391">
+<interface name="corenet_sendrecv_wsicopy_server_packets" lineno="95812">
 <summary>
 Send and receive wsicopy_server packets.
 </summary>
@@ -69263,7 +69883,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_wsicopy_server_packets" lineno="95407">
+<interface name="corenet_dontaudit_sendrecv_wsicopy_server_packets" lineno="95828">
 <summary>
 Do not audit attempts to send and receive wsicopy_server packets.
 </summary>
@@ -69274,7 +69894,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_wsicopy_server_packets" lineno="95422">
+<interface name="corenet_relabelto_wsicopy_server_packets" lineno="95843">
 <summary>
 Relabel packets to wsicopy_server the packet type.
 </summary>
@@ -69284,7 +69904,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_xdmcp_port" lineno="95444">
+<interface name="corenet_tcp_sendrecv_xdmcp_port" lineno="95865">
 <summary>
 Send and receive TCP traffic on the xdmcp port.
 </summary>
@@ -69295,7 +69915,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_xdmcp_port" lineno="95459">
+<interface name="corenet_udp_send_xdmcp_port" lineno="95880">
 <summary>
 Send UDP traffic on the xdmcp port.
 </summary>
@@ -69306,7 +69926,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_xdmcp_port" lineno="95474">
+<interface name="corenet_dontaudit_udp_send_xdmcp_port" lineno="95895">
 <summary>
 Do not audit attempts to send UDP traffic on the xdmcp port.
 </summary>
@@ -69317,7 +69937,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_xdmcp_port" lineno="95489">
+<interface name="corenet_udp_receive_xdmcp_port" lineno="95910">
 <summary>
 Receive UDP traffic on the xdmcp port.
 </summary>
@@ -69328,7 +69948,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_xdmcp_port" lineno="95504">
+<interface name="corenet_dontaudit_udp_receive_xdmcp_port" lineno="95925">
 <summary>
 Do not audit attempts to receive UDP traffic on the xdmcp port.
 </summary>
@@ -69339,7 +69959,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_xdmcp_port" lineno="95519">
+<interface name="corenet_udp_sendrecv_xdmcp_port" lineno="95940">
 <summary>
 Send and receive UDP traffic on the xdmcp port.
 </summary>
@@ -69350,7 +69970,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_xdmcp_port" lineno="95535">
+<interface name="corenet_dontaudit_udp_sendrecv_xdmcp_port" lineno="95956">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the xdmcp port.
@@ -69362,7 +69982,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_xdmcp_port" lineno="95550">
+<interface name="corenet_tcp_bind_xdmcp_port" lineno="95971">
 <summary>
 Bind TCP sockets to the xdmcp port.
 </summary>
@@ -69373,7 +69993,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_xdmcp_port" lineno="95570">
+<interface name="corenet_udp_bind_xdmcp_port" lineno="95991">
 <summary>
 Bind UDP sockets to the xdmcp port.
 </summary>
@@ -69384,7 +70004,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_xdmcp_port" lineno="95589">
+<interface name="corenet_tcp_connect_xdmcp_port" lineno="96010">
 <summary>
 Make a TCP connection to the xdmcp port.
 </summary>
@@ -69394,7 +70014,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_xdmcp_client_packets" lineno="95609">
+<interface name="corenet_send_xdmcp_client_packets" lineno="96030">
 <summary>
 Send xdmcp_client packets.
 </summary>
@@ -69405,7 +70025,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_xdmcp_client_packets" lineno="95628">
+<interface name="corenet_dontaudit_send_xdmcp_client_packets" lineno="96049">
 <summary>
 Do not audit attempts to send xdmcp_client packets.
 </summary>
@@ -69416,7 +70036,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_xdmcp_client_packets" lineno="95647">
+<interface name="corenet_receive_xdmcp_client_packets" lineno="96068">
 <summary>
 Receive xdmcp_client packets.
 </summary>
@@ -69427,7 +70047,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_xdmcp_client_packets" lineno="95666">
+<interface name="corenet_dontaudit_receive_xdmcp_client_packets" lineno="96087">
 <summary>
 Do not audit attempts to receive xdmcp_client packets.
 </summary>
@@ -69438,7 +70058,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_xdmcp_client_packets" lineno="95685">
+<interface name="corenet_sendrecv_xdmcp_client_packets" lineno="96106">
 <summary>
 Send and receive xdmcp_client packets.
 </summary>
@@ -69449,7 +70069,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_xdmcp_client_packets" lineno="95701">
+<interface name="corenet_dontaudit_sendrecv_xdmcp_client_packets" lineno="96122">
 <summary>
 Do not audit attempts to send and receive xdmcp_client packets.
 </summary>
@@ -69460,7 +70080,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_xdmcp_client_packets" lineno="95716">
+<interface name="corenet_relabelto_xdmcp_client_packets" lineno="96137">
 <summary>
 Relabel packets to xdmcp_client the packet type.
 </summary>
@@ -69470,7 +70090,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_xdmcp_server_packets" lineno="95736">
+<interface name="corenet_send_xdmcp_server_packets" lineno="96157">
 <summary>
 Send xdmcp_server packets.
 </summary>
@@ -69481,7 +70101,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_xdmcp_server_packets" lineno="95755">
+<interface name="corenet_dontaudit_send_xdmcp_server_packets" lineno="96176">
 <summary>
 Do not audit attempts to send xdmcp_server packets.
 </summary>
@@ -69492,7 +70112,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_xdmcp_server_packets" lineno="95774">
+<interface name="corenet_receive_xdmcp_server_packets" lineno="96195">
 <summary>
 Receive xdmcp_server packets.
 </summary>
@@ -69503,7 +70123,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_xdmcp_server_packets" lineno="95793">
+<interface name="corenet_dontaudit_receive_xdmcp_server_packets" lineno="96214">
 <summary>
 Do not audit attempts to receive xdmcp_server packets.
 </summary>
@@ -69514,7 +70134,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_xdmcp_server_packets" lineno="95812">
+<interface name="corenet_sendrecv_xdmcp_server_packets" lineno="96233">
 <summary>
 Send and receive xdmcp_server packets.
 </summary>
@@ -69525,7 +70145,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_xdmcp_server_packets" lineno="95828">
+<interface name="corenet_dontaudit_sendrecv_xdmcp_server_packets" lineno="96249">
 <summary>
 Do not audit attempts to send and receive xdmcp_server packets.
 </summary>
@@ -69536,7 +70156,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_xdmcp_server_packets" lineno="95843">
+<interface name="corenet_relabelto_xdmcp_server_packets" lineno="96264">
 <summary>
 Relabel packets to xdmcp_server the packet type.
 </summary>
@@ -69546,7 +70166,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_xen_port" lineno="95865">
+<interface name="corenet_tcp_sendrecv_xen_port" lineno="96286">
 <summary>
 Send and receive TCP traffic on the xen port.
 </summary>
@@ -69557,7 +70177,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_xen_port" lineno="95880">
+<interface name="corenet_udp_send_xen_port" lineno="96301">
 <summary>
 Send UDP traffic on the xen port.
 </summary>
@@ -69568,7 +70188,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_xen_port" lineno="95895">
+<interface name="corenet_dontaudit_udp_send_xen_port" lineno="96316">
 <summary>
 Do not audit attempts to send UDP traffic on the xen port.
 </summary>
@@ -69579,7 +70199,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_xen_port" lineno="95910">
+<interface name="corenet_udp_receive_xen_port" lineno="96331">
 <summary>
 Receive UDP traffic on the xen port.
 </summary>
@@ -69590,7 +70210,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_xen_port" lineno="95925">
+<interface name="corenet_dontaudit_udp_receive_xen_port" lineno="96346">
 <summary>
 Do not audit attempts to receive UDP traffic on the xen port.
 </summary>
@@ -69601,7 +70221,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_xen_port" lineno="95940">
+<interface name="corenet_udp_sendrecv_xen_port" lineno="96361">
 <summary>
 Send and receive UDP traffic on the xen port.
 </summary>
@@ -69612,7 +70232,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_xen_port" lineno="95956">
+<interface name="corenet_dontaudit_udp_sendrecv_xen_port" lineno="96377">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the xen port.
@@ -69624,7 +70244,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_xen_port" lineno="95971">
+<interface name="corenet_tcp_bind_xen_port" lineno="96392">
 <summary>
 Bind TCP sockets to the xen port.
 </summary>
@@ -69635,7 +70255,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_xen_port" lineno="95991">
+<interface name="corenet_udp_bind_xen_port" lineno="96412">
 <summary>
 Bind UDP sockets to the xen port.
 </summary>
@@ -69646,7 +70266,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_xen_port" lineno="96010">
+<interface name="corenet_tcp_connect_xen_port" lineno="96431">
 <summary>
 Make a TCP connection to the xen port.
 </summary>
@@ -69656,7 +70276,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_xen_client_packets" lineno="96030">
+<interface name="corenet_send_xen_client_packets" lineno="96451">
 <summary>
 Send xen_client packets.
 </summary>
@@ -69667,7 +70287,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_xen_client_packets" lineno="96049">
+<interface name="corenet_dontaudit_send_xen_client_packets" lineno="96470">
 <summary>
 Do not audit attempts to send xen_client packets.
 </summary>
@@ -69678,7 +70298,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_xen_client_packets" lineno="96068">
+<interface name="corenet_receive_xen_client_packets" lineno="96489">
 <summary>
 Receive xen_client packets.
 </summary>
@@ -69689,7 +70309,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_xen_client_packets" lineno="96087">
+<interface name="corenet_dontaudit_receive_xen_client_packets" lineno="96508">
 <summary>
 Do not audit attempts to receive xen_client packets.
 </summary>
@@ -69700,7 +70320,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_xen_client_packets" lineno="96106">
+<interface name="corenet_sendrecv_xen_client_packets" lineno="96527">
 <summary>
 Send and receive xen_client packets.
 </summary>
@@ -69711,7 +70331,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_xen_client_packets" lineno="96122">
+<interface name="corenet_dontaudit_sendrecv_xen_client_packets" lineno="96543">
 <summary>
 Do not audit attempts to send and receive xen_client packets.
 </summary>
@@ -69722,7 +70342,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_xen_client_packets" lineno="96137">
+<interface name="corenet_relabelto_xen_client_packets" lineno="96558">
 <summary>
 Relabel packets to xen_client the packet type.
 </summary>
@@ -69732,7 +70352,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_xen_server_packets" lineno="96157">
+<interface name="corenet_send_xen_server_packets" lineno="96578">
 <summary>
 Send xen_server packets.
 </summary>
@@ -69743,7 +70363,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_xen_server_packets" lineno="96176">
+<interface name="corenet_dontaudit_send_xen_server_packets" lineno="96597">
 <summary>
 Do not audit attempts to send xen_server packets.
 </summary>
@@ -69754,7 +70374,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_xen_server_packets" lineno="96195">
+<interface name="corenet_receive_xen_server_packets" lineno="96616">
 <summary>
 Receive xen_server packets.
 </summary>
@@ -69765,7 +70385,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_xen_server_packets" lineno="96214">
+<interface name="corenet_dontaudit_receive_xen_server_packets" lineno="96635">
 <summary>
 Do not audit attempts to receive xen_server packets.
 </summary>
@@ -69776,7 +70396,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_xen_server_packets" lineno="96233">
+<interface name="corenet_sendrecv_xen_server_packets" lineno="96654">
 <summary>
 Send and receive xen_server packets.
 </summary>
@@ -69787,7 +70407,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_xen_server_packets" lineno="96249">
+<interface name="corenet_dontaudit_sendrecv_xen_server_packets" lineno="96670">
 <summary>
 Do not audit attempts to send and receive xen_server packets.
 </summary>
@@ -69798,7 +70418,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_xen_server_packets" lineno="96264">
+<interface name="corenet_relabelto_xen_server_packets" lineno="96685">
 <summary>
 Relabel packets to xen_server the packet type.
 </summary>
@@ -69808,7 +70428,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_xfs_port" lineno="96286">
+<interface name="corenet_tcp_sendrecv_xfs_port" lineno="96707">
 <summary>
 Send and receive TCP traffic on the xfs port.
 </summary>
@@ -69819,7 +70439,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_xfs_port" lineno="96301">
+<interface name="corenet_udp_send_xfs_port" lineno="96722">
 <summary>
 Send UDP traffic on the xfs port.
 </summary>
@@ -69830,7 +70450,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_xfs_port" lineno="96316">
+<interface name="corenet_dontaudit_udp_send_xfs_port" lineno="96737">
 <summary>
 Do not audit attempts to send UDP traffic on the xfs port.
 </summary>
@@ -69841,7 +70461,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_xfs_port" lineno="96331">
+<interface name="corenet_udp_receive_xfs_port" lineno="96752">
 <summary>
 Receive UDP traffic on the xfs port.
 </summary>
@@ -69852,7 +70472,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_xfs_port" lineno="96346">
+<interface name="corenet_dontaudit_udp_receive_xfs_port" lineno="96767">
 <summary>
 Do not audit attempts to receive UDP traffic on the xfs port.
 </summary>
@@ -69863,7 +70483,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_xfs_port" lineno="96361">
+<interface name="corenet_udp_sendrecv_xfs_port" lineno="96782">
 <summary>
 Send and receive UDP traffic on the xfs port.
 </summary>
@@ -69874,7 +70494,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_xfs_port" lineno="96377">
+<interface name="corenet_dontaudit_udp_sendrecv_xfs_port" lineno="96798">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the xfs port.
@@ -69886,7 +70506,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_xfs_port" lineno="96392">
+<interface name="corenet_tcp_bind_xfs_port" lineno="96813">
 <summary>
 Bind TCP sockets to the xfs port.
 </summary>
@@ -69897,7 +70517,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_xfs_port" lineno="96412">
+<interface name="corenet_udp_bind_xfs_port" lineno="96833">
 <summary>
 Bind UDP sockets to the xfs port.
 </summary>
@@ -69908,7 +70528,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_xfs_port" lineno="96431">
+<interface name="corenet_tcp_connect_xfs_port" lineno="96852">
 <summary>
 Make a TCP connection to the xfs port.
 </summary>
@@ -69918,7 +70538,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_xfs_client_packets" lineno="96451">
+<interface name="corenet_send_xfs_client_packets" lineno="96872">
 <summary>
 Send xfs_client packets.
 </summary>
@@ -69929,7 +70549,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_xfs_client_packets" lineno="96470">
+<interface name="corenet_dontaudit_send_xfs_client_packets" lineno="96891">
 <summary>
 Do not audit attempts to send xfs_client packets.
 </summary>
@@ -69940,7 +70560,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_xfs_client_packets" lineno="96489">
+<interface name="corenet_receive_xfs_client_packets" lineno="96910">
 <summary>
 Receive xfs_client packets.
 </summary>
@@ -69951,7 +70571,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_xfs_client_packets" lineno="96508">
+<interface name="corenet_dontaudit_receive_xfs_client_packets" lineno="96929">
 <summary>
 Do not audit attempts to receive xfs_client packets.
 </summary>
@@ -69962,7 +70582,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_xfs_client_packets" lineno="96527">
+<interface name="corenet_sendrecv_xfs_client_packets" lineno="96948">
 <summary>
 Send and receive xfs_client packets.
 </summary>
@@ -69973,7 +70593,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_xfs_client_packets" lineno="96543">
+<interface name="corenet_dontaudit_sendrecv_xfs_client_packets" lineno="96964">
 <summary>
 Do not audit attempts to send and receive xfs_client packets.
 </summary>
@@ -69984,7 +70604,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_xfs_client_packets" lineno="96558">
+<interface name="corenet_relabelto_xfs_client_packets" lineno="96979">
 <summary>
 Relabel packets to xfs_client the packet type.
 </summary>
@@ -69994,7 +70614,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_xfs_server_packets" lineno="96578">
+<interface name="corenet_send_xfs_server_packets" lineno="96999">
 <summary>
 Send xfs_server packets.
 </summary>
@@ -70005,7 +70625,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_xfs_server_packets" lineno="96597">
+<interface name="corenet_dontaudit_send_xfs_server_packets" lineno="97018">
 <summary>
 Do not audit attempts to send xfs_server packets.
 </summary>
@@ -70016,7 +70636,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_xfs_server_packets" lineno="96616">
+<interface name="corenet_receive_xfs_server_packets" lineno="97037">
 <summary>
 Receive xfs_server packets.
 </summary>
@@ -70027,7 +70647,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_xfs_server_packets" lineno="96635">
+<interface name="corenet_dontaudit_receive_xfs_server_packets" lineno="97056">
 <summary>
 Do not audit attempts to receive xfs_server packets.
 </summary>
@@ -70038,7 +70658,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_xfs_server_packets" lineno="96654">
+<interface name="corenet_sendrecv_xfs_server_packets" lineno="97075">
 <summary>
 Send and receive xfs_server packets.
 </summary>
@@ -70049,7 +70669,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_xfs_server_packets" lineno="96670">
+<interface name="corenet_dontaudit_sendrecv_xfs_server_packets" lineno="97091">
 <summary>
 Do not audit attempts to send and receive xfs_server packets.
 </summary>
@@ -70060,7 +70680,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_xfs_server_packets" lineno="96685">
+<interface name="corenet_relabelto_xfs_server_packets" lineno="97106">
 <summary>
 Relabel packets to xfs_server the packet type.
 </summary>
@@ -70070,7 +70690,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_xserver_port" lineno="96707">
+<interface name="corenet_tcp_sendrecv_xserver_port" lineno="97128">
 <summary>
 Send and receive TCP traffic on the xserver port.
 </summary>
@@ -70081,7 +70701,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_xserver_port" lineno="96722">
+<interface name="corenet_udp_send_xserver_port" lineno="97143">
 <summary>
 Send UDP traffic on the xserver port.
 </summary>
@@ -70092,7 +70712,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_xserver_port" lineno="96737">
+<interface name="corenet_dontaudit_udp_send_xserver_port" lineno="97158">
 <summary>
 Do not audit attempts to send UDP traffic on the xserver port.
 </summary>
@@ -70103,7 +70723,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_xserver_port" lineno="96752">
+<interface name="corenet_udp_receive_xserver_port" lineno="97173">
 <summary>
 Receive UDP traffic on the xserver port.
 </summary>
@@ -70114,7 +70734,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_xserver_port" lineno="96767">
+<interface name="corenet_dontaudit_udp_receive_xserver_port" lineno="97188">
 <summary>
 Do not audit attempts to receive UDP traffic on the xserver port.
 </summary>
@@ -70125,7 +70745,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_xserver_port" lineno="96782">
+<interface name="corenet_udp_sendrecv_xserver_port" lineno="97203">
 <summary>
 Send and receive UDP traffic on the xserver port.
 </summary>
@@ -70136,7 +70756,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_xserver_port" lineno="96798">
+<interface name="corenet_dontaudit_udp_sendrecv_xserver_port" lineno="97219">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the xserver port.
@@ -70148,7 +70768,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_xserver_port" lineno="96813">
+<interface name="corenet_tcp_bind_xserver_port" lineno="97234">
 <summary>
 Bind TCP sockets to the xserver port.
 </summary>
@@ -70159,7 +70779,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_xserver_port" lineno="96833">
+<interface name="corenet_udp_bind_xserver_port" lineno="97254">
 <summary>
 Bind UDP sockets to the xserver port.
 </summary>
@@ -70170,7 +70790,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_xserver_port" lineno="96852">
+<interface name="corenet_tcp_connect_xserver_port" lineno="97273">
 <summary>
 Make a TCP connection to the xserver port.
 </summary>
@@ -70180,7 +70800,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_xserver_client_packets" lineno="96872">
+<interface name="corenet_send_xserver_client_packets" lineno="97293">
 <summary>
 Send xserver_client packets.
 </summary>
@@ -70191,7 +70811,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_xserver_client_packets" lineno="96891">
+<interface name="corenet_dontaudit_send_xserver_client_packets" lineno="97312">
 <summary>
 Do not audit attempts to send xserver_client packets.
 </summary>
@@ -70202,7 +70822,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_xserver_client_packets" lineno="96910">
+<interface name="corenet_receive_xserver_client_packets" lineno="97331">
 <summary>
 Receive xserver_client packets.
 </summary>
@@ -70213,7 +70833,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_xserver_client_packets" lineno="96929">
+<interface name="corenet_dontaudit_receive_xserver_client_packets" lineno="97350">
 <summary>
 Do not audit attempts to receive xserver_client packets.
 </summary>
@@ -70224,7 +70844,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_xserver_client_packets" lineno="96948">
+<interface name="corenet_sendrecv_xserver_client_packets" lineno="97369">
 <summary>
 Send and receive xserver_client packets.
 </summary>
@@ -70235,7 +70855,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_xserver_client_packets" lineno="96964">
+<interface name="corenet_dontaudit_sendrecv_xserver_client_packets" lineno="97385">
 <summary>
 Do not audit attempts to send and receive xserver_client packets.
 </summary>
@@ -70246,7 +70866,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_xserver_client_packets" lineno="96979">
+<interface name="corenet_relabelto_xserver_client_packets" lineno="97400">
 <summary>
 Relabel packets to xserver_client the packet type.
 </summary>
@@ -70256,7 +70876,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_xserver_server_packets" lineno="96999">
+<interface name="corenet_send_xserver_server_packets" lineno="97420">
 <summary>
 Send xserver_server packets.
 </summary>
@@ -70267,7 +70887,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_xserver_server_packets" lineno="97018">
+<interface name="corenet_dontaudit_send_xserver_server_packets" lineno="97439">
 <summary>
 Do not audit attempts to send xserver_server packets.
 </summary>
@@ -70278,7 +70898,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_xserver_server_packets" lineno="97037">
+<interface name="corenet_receive_xserver_server_packets" lineno="97458">
 <summary>
 Receive xserver_server packets.
 </summary>
@@ -70289,7 +70909,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_xserver_server_packets" lineno="97056">
+<interface name="corenet_dontaudit_receive_xserver_server_packets" lineno="97477">
 <summary>
 Do not audit attempts to receive xserver_server packets.
 </summary>
@@ -70300,7 +70920,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_xserver_server_packets" lineno="97075">
+<interface name="corenet_sendrecv_xserver_server_packets" lineno="97496">
 <summary>
 Send and receive xserver_server packets.
 </summary>
@@ -70311,7 +70931,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_xserver_server_packets" lineno="97091">
+<interface name="corenet_dontaudit_sendrecv_xserver_server_packets" lineno="97512">
 <summary>
 Do not audit attempts to send and receive xserver_server packets.
 </summary>
@@ -70322,7 +70942,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_xserver_server_packets" lineno="97106">
+<interface name="corenet_relabelto_xserver_server_packets" lineno="97527">
 <summary>
 Relabel packets to xserver_server the packet type.
 </summary>
@@ -70332,7 +70952,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_zarafa_port" lineno="97128">
+<interface name="corenet_tcp_sendrecv_zarafa_port" lineno="97549">
 <summary>
 Send and receive TCP traffic on the zarafa port.
 </summary>
@@ -70343,7 +70963,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_zarafa_port" lineno="97143">
+<interface name="corenet_udp_send_zarafa_port" lineno="97564">
 <summary>
 Send UDP traffic on the zarafa port.
 </summary>
@@ -70354,7 +70974,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_zarafa_port" lineno="97158">
+<interface name="corenet_dontaudit_udp_send_zarafa_port" lineno="97579">
 <summary>
 Do not audit attempts to send UDP traffic on the zarafa port.
 </summary>
@@ -70365,7 +70985,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_zarafa_port" lineno="97173">
+<interface name="corenet_udp_receive_zarafa_port" lineno="97594">
 <summary>
 Receive UDP traffic on the zarafa port.
 </summary>
@@ -70376,7 +70996,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_zarafa_port" lineno="97188">
+<interface name="corenet_dontaudit_udp_receive_zarafa_port" lineno="97609">
 <summary>
 Do not audit attempts to receive UDP traffic on the zarafa port.
 </summary>
@@ -70387,7 +71007,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_zarafa_port" lineno="97203">
+<interface name="corenet_udp_sendrecv_zarafa_port" lineno="97624">
 <summary>
 Send and receive UDP traffic on the zarafa port.
 </summary>
@@ -70398,7 +71018,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_zarafa_port" lineno="97219">
+<interface name="corenet_dontaudit_udp_sendrecv_zarafa_port" lineno="97640">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the zarafa port.
@@ -70410,7 +71030,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_zarafa_port" lineno="97234">
+<interface name="corenet_tcp_bind_zarafa_port" lineno="97655">
 <summary>
 Bind TCP sockets to the zarafa port.
 </summary>
@@ -70421,7 +71041,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_zarafa_port" lineno="97254">
+<interface name="corenet_udp_bind_zarafa_port" lineno="97675">
 <summary>
 Bind UDP sockets to the zarafa port.
 </summary>
@@ -70432,7 +71052,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_zarafa_port" lineno="97273">
+<interface name="corenet_tcp_connect_zarafa_port" lineno="97694">
 <summary>
 Make a TCP connection to the zarafa port.
 </summary>
@@ -70442,7 +71062,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_zarafa_client_packets" lineno="97293">
+<interface name="corenet_send_zarafa_client_packets" lineno="97714">
 <summary>
 Send zarafa_client packets.
 </summary>
@@ -70453,7 +71073,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_zarafa_client_packets" lineno="97312">
+<interface name="corenet_dontaudit_send_zarafa_client_packets" lineno="97733">
 <summary>
 Do not audit attempts to send zarafa_client packets.
 </summary>
@@ -70464,7 +71084,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_zarafa_client_packets" lineno="97331">
+<interface name="corenet_receive_zarafa_client_packets" lineno="97752">
 <summary>
 Receive zarafa_client packets.
 </summary>
@@ -70475,7 +71095,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_zarafa_client_packets" lineno="97350">
+<interface name="corenet_dontaudit_receive_zarafa_client_packets" lineno="97771">
 <summary>
 Do not audit attempts to receive zarafa_client packets.
 </summary>
@@ -70486,7 +71106,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_zarafa_client_packets" lineno="97369">
+<interface name="corenet_sendrecv_zarafa_client_packets" lineno="97790">
 <summary>
 Send and receive zarafa_client packets.
 </summary>
@@ -70497,7 +71117,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_zarafa_client_packets" lineno="97385">
+<interface name="corenet_dontaudit_sendrecv_zarafa_client_packets" lineno="97806">
 <summary>
 Do not audit attempts to send and receive zarafa_client packets.
 </summary>
@@ -70508,7 +71128,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_zarafa_client_packets" lineno="97400">
+<interface name="corenet_relabelto_zarafa_client_packets" lineno="97821">
 <summary>
 Relabel packets to zarafa_client the packet type.
 </summary>
@@ -70518,7 +71138,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_zarafa_server_packets" lineno="97420">
+<interface name="corenet_send_zarafa_server_packets" lineno="97841">
 <summary>
 Send zarafa_server packets.
 </summary>
@@ -70529,7 +71149,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_zarafa_server_packets" lineno="97439">
+<interface name="corenet_dontaudit_send_zarafa_server_packets" lineno="97860">
 <summary>
 Do not audit attempts to send zarafa_server packets.
 </summary>
@@ -70540,7 +71160,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_zarafa_server_packets" lineno="97458">
+<interface name="corenet_receive_zarafa_server_packets" lineno="97879">
 <summary>
 Receive zarafa_server packets.
 </summary>
@@ -70551,7 +71171,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_zarafa_server_packets" lineno="97477">
+<interface name="corenet_dontaudit_receive_zarafa_server_packets" lineno="97898">
 <summary>
 Do not audit attempts to receive zarafa_server packets.
 </summary>
@@ -70562,7 +71182,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_zarafa_server_packets" lineno="97496">
+<interface name="corenet_sendrecv_zarafa_server_packets" lineno="97917">
 <summary>
 Send and receive zarafa_server packets.
 </summary>
@@ -70573,7 +71193,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_zarafa_server_packets" lineno="97512">
+<interface name="corenet_dontaudit_sendrecv_zarafa_server_packets" lineno="97933">
 <summary>
 Do not audit attempts to send and receive zarafa_server packets.
 </summary>
@@ -70584,7 +71204,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_zarafa_server_packets" lineno="97527">
+<interface name="corenet_relabelto_zarafa_server_packets" lineno="97948">
 <summary>
 Relabel packets to zarafa_server the packet type.
 </summary>
@@ -70594,7 +71214,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_zabbix_port" lineno="97549">
+<interface name="corenet_tcp_sendrecv_zabbix_port" lineno="97970">
 <summary>
 Send and receive TCP traffic on the zabbix port.
 </summary>
@@ -70605,7 +71225,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_zabbix_port" lineno="97564">
+<interface name="corenet_udp_send_zabbix_port" lineno="97985">
 <summary>
 Send UDP traffic on the zabbix port.
 </summary>
@@ -70616,7 +71236,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_zabbix_port" lineno="97579">
+<interface name="corenet_dontaudit_udp_send_zabbix_port" lineno="98000">
 <summary>
 Do not audit attempts to send UDP traffic on the zabbix port.
 </summary>
@@ -70627,7 +71247,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_zabbix_port" lineno="97594">
+<interface name="corenet_udp_receive_zabbix_port" lineno="98015">
 <summary>
 Receive UDP traffic on the zabbix port.
 </summary>
@@ -70638,7 +71258,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_zabbix_port" lineno="97609">
+<interface name="corenet_dontaudit_udp_receive_zabbix_port" lineno="98030">
 <summary>
 Do not audit attempts to receive UDP traffic on the zabbix port.
 </summary>
@@ -70649,7 +71269,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_zabbix_port" lineno="97624">
+<interface name="corenet_udp_sendrecv_zabbix_port" lineno="98045">
 <summary>
 Send and receive UDP traffic on the zabbix port.
 </summary>
@@ -70660,7 +71280,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_zabbix_port" lineno="97640">
+<interface name="corenet_dontaudit_udp_sendrecv_zabbix_port" lineno="98061">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the zabbix port.
@@ -70672,7 +71292,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_zabbix_port" lineno="97655">
+<interface name="corenet_tcp_bind_zabbix_port" lineno="98076">
 <summary>
 Bind TCP sockets to the zabbix port.
 </summary>
@@ -70683,7 +71303,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_zabbix_port" lineno="97675">
+<interface name="corenet_udp_bind_zabbix_port" lineno="98096">
 <summary>
 Bind UDP sockets to the zabbix port.
 </summary>
@@ -70694,7 +71314,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_zabbix_port" lineno="97694">
+<interface name="corenet_tcp_connect_zabbix_port" lineno="98115">
 <summary>
 Make a TCP connection to the zabbix port.
 </summary>
@@ -70704,7 +71324,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_zabbix_client_packets" lineno="97714">
+<interface name="corenet_send_zabbix_client_packets" lineno="98135">
 <summary>
 Send zabbix_client packets.
 </summary>
@@ -70715,7 +71335,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_zabbix_client_packets" lineno="97733">
+<interface name="corenet_dontaudit_send_zabbix_client_packets" lineno="98154">
 <summary>
 Do not audit attempts to send zabbix_client packets.
 </summary>
@@ -70726,7 +71346,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_zabbix_client_packets" lineno="97752">
+<interface name="corenet_receive_zabbix_client_packets" lineno="98173">
 <summary>
 Receive zabbix_client packets.
 </summary>
@@ -70737,7 +71357,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_zabbix_client_packets" lineno="97771">
+<interface name="corenet_dontaudit_receive_zabbix_client_packets" lineno="98192">
 <summary>
 Do not audit attempts to receive zabbix_client packets.
 </summary>
@@ -70748,7 +71368,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_zabbix_client_packets" lineno="97790">
+<interface name="corenet_sendrecv_zabbix_client_packets" lineno="98211">
 <summary>
 Send and receive zabbix_client packets.
 </summary>
@@ -70759,7 +71379,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_zabbix_client_packets" lineno="97806">
+<interface name="corenet_dontaudit_sendrecv_zabbix_client_packets" lineno="98227">
 <summary>
 Do not audit attempts to send and receive zabbix_client packets.
 </summary>
@@ -70770,7 +71390,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_zabbix_client_packets" lineno="97821">
+<interface name="corenet_relabelto_zabbix_client_packets" lineno="98242">
 <summary>
 Relabel packets to zabbix_client the packet type.
 </summary>
@@ -70780,7 +71400,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_zabbix_server_packets" lineno="97841">
+<interface name="corenet_send_zabbix_server_packets" lineno="98262">
 <summary>
 Send zabbix_server packets.
 </summary>
@@ -70791,7 +71411,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_zabbix_server_packets" lineno="97860">
+<interface name="corenet_dontaudit_send_zabbix_server_packets" lineno="98281">
 <summary>
 Do not audit attempts to send zabbix_server packets.
 </summary>
@@ -70802,7 +71422,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_zabbix_server_packets" lineno="97879">
+<interface name="corenet_receive_zabbix_server_packets" lineno="98300">
 <summary>
 Receive zabbix_server packets.
 </summary>
@@ -70813,7 +71433,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_zabbix_server_packets" lineno="97898">
+<interface name="corenet_dontaudit_receive_zabbix_server_packets" lineno="98319">
 <summary>
 Do not audit attempts to receive zabbix_server packets.
 </summary>
@@ -70824,7 +71444,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_zabbix_server_packets" lineno="97917">
+<interface name="corenet_sendrecv_zabbix_server_packets" lineno="98338">
 <summary>
 Send and receive zabbix_server packets.
 </summary>
@@ -70835,7 +71455,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_zabbix_server_packets" lineno="97933">
+<interface name="corenet_dontaudit_sendrecv_zabbix_server_packets" lineno="98354">
 <summary>
 Do not audit attempts to send and receive zabbix_server packets.
 </summary>
@@ -70846,7 +71466,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_zabbix_server_packets" lineno="97948">
+<interface name="corenet_relabelto_zabbix_server_packets" lineno="98369">
 <summary>
 Relabel packets to zabbix_server the packet type.
 </summary>
@@ -70856,7 +71476,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_zabbix_agent_port" lineno="97970">
+<interface name="corenet_tcp_sendrecv_zabbix_agent_port" lineno="98391">
 <summary>
 Send and receive TCP traffic on the zabbix_agent port.
 </summary>
@@ -70867,7 +71487,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_zabbix_agent_port" lineno="97985">
+<interface name="corenet_udp_send_zabbix_agent_port" lineno="98406">
 <summary>
 Send UDP traffic on the zabbix_agent port.
 </summary>
@@ -70878,7 +71498,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_zabbix_agent_port" lineno="98000">
+<interface name="corenet_dontaudit_udp_send_zabbix_agent_port" lineno="98421">
 <summary>
 Do not audit attempts to send UDP traffic on the zabbix_agent port.
 </summary>
@@ -70889,7 +71509,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_zabbix_agent_port" lineno="98015">
+<interface name="corenet_udp_receive_zabbix_agent_port" lineno="98436">
 <summary>
 Receive UDP traffic on the zabbix_agent port.
 </summary>
@@ -70900,7 +71520,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_zabbix_agent_port" lineno="98030">
+<interface name="corenet_dontaudit_udp_receive_zabbix_agent_port" lineno="98451">
 <summary>
 Do not audit attempts to receive UDP traffic on the zabbix_agent port.
 </summary>
@@ -70911,7 +71531,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_zabbix_agent_port" lineno="98045">
+<interface name="corenet_udp_sendrecv_zabbix_agent_port" lineno="98466">
 <summary>
 Send and receive UDP traffic on the zabbix_agent port.
 </summary>
@@ -70922,7 +71542,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_zabbix_agent_port" lineno="98061">
+<interface name="corenet_dontaudit_udp_sendrecv_zabbix_agent_port" lineno="98482">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the zabbix_agent port.
@@ -70934,7 +71554,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_zabbix_agent_port" lineno="98076">
+<interface name="corenet_tcp_bind_zabbix_agent_port" lineno="98497">
 <summary>
 Bind TCP sockets to the zabbix_agent port.
 </summary>
@@ -70945,7 +71565,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_zabbix_agent_port" lineno="98096">
+<interface name="corenet_udp_bind_zabbix_agent_port" lineno="98517">
 <summary>
 Bind UDP sockets to the zabbix_agent port.
 </summary>
@@ -70956,7 +71576,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_zabbix_agent_port" lineno="98115">
+<interface name="corenet_tcp_connect_zabbix_agent_port" lineno="98536">
 <summary>
 Make a TCP connection to the zabbix_agent port.
 </summary>
@@ -70966,7 +71586,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_zabbix_agent_client_packets" lineno="98135">
+<interface name="corenet_send_zabbix_agent_client_packets" lineno="98556">
 <summary>
 Send zabbix_agent_client packets.
 </summary>
@@ -70977,7 +71597,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_zabbix_agent_client_packets" lineno="98154">
+<interface name="corenet_dontaudit_send_zabbix_agent_client_packets" lineno="98575">
 <summary>
 Do not audit attempts to send zabbix_agent_client packets.
 </summary>
@@ -70988,7 +71608,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_zabbix_agent_client_packets" lineno="98173">
+<interface name="corenet_receive_zabbix_agent_client_packets" lineno="98594">
 <summary>
 Receive zabbix_agent_client packets.
 </summary>
@@ -70999,7 +71619,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_zabbix_agent_client_packets" lineno="98192">
+<interface name="corenet_dontaudit_receive_zabbix_agent_client_packets" lineno="98613">
 <summary>
 Do not audit attempts to receive zabbix_agent_client packets.
 </summary>
@@ -71010,7 +71630,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_zabbix_agent_client_packets" lineno="98211">
+<interface name="corenet_sendrecv_zabbix_agent_client_packets" lineno="98632">
 <summary>
 Send and receive zabbix_agent_client packets.
 </summary>
@@ -71021,7 +71641,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_zabbix_agent_client_packets" lineno="98227">
+<interface name="corenet_dontaudit_sendrecv_zabbix_agent_client_packets" lineno="98648">
 <summary>
 Do not audit attempts to send and receive zabbix_agent_client packets.
 </summary>
@@ -71032,7 +71652,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_zabbix_agent_client_packets" lineno="98242">
+<interface name="corenet_relabelto_zabbix_agent_client_packets" lineno="98663">
 <summary>
 Relabel packets to zabbix_agent_client the packet type.
 </summary>
@@ -71042,7 +71662,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_zabbix_agent_server_packets" lineno="98262">
+<interface name="corenet_send_zabbix_agent_server_packets" lineno="98683">
 <summary>
 Send zabbix_agent_server packets.
 </summary>
@@ -71053,7 +71673,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_zabbix_agent_server_packets" lineno="98281">
+<interface name="corenet_dontaudit_send_zabbix_agent_server_packets" lineno="98702">
 <summary>
 Do not audit attempts to send zabbix_agent_server packets.
 </summary>
@@ -71064,7 +71684,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_zabbix_agent_server_packets" lineno="98300">
+<interface name="corenet_receive_zabbix_agent_server_packets" lineno="98721">
 <summary>
 Receive zabbix_agent_server packets.
 </summary>
@@ -71075,7 +71695,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_zabbix_agent_server_packets" lineno="98319">
+<interface name="corenet_dontaudit_receive_zabbix_agent_server_packets" lineno="98740">
 <summary>
 Do not audit attempts to receive zabbix_agent_server packets.
 </summary>
@@ -71086,7 +71706,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_zabbix_agent_server_packets" lineno="98338">
+<interface name="corenet_sendrecv_zabbix_agent_server_packets" lineno="98759">
 <summary>
 Send and receive zabbix_agent_server packets.
 </summary>
@@ -71097,7 +71717,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_zabbix_agent_server_packets" lineno="98354">
+<interface name="corenet_dontaudit_sendrecv_zabbix_agent_server_packets" lineno="98775">
 <summary>
 Do not audit attempts to send and receive zabbix_agent_server packets.
 </summary>
@@ -71108,7 +71728,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_zabbix_agent_server_packets" lineno="98369">
+<interface name="corenet_relabelto_zabbix_agent_server_packets" lineno="98790">
 <summary>
 Relabel packets to zabbix_agent_server the packet type.
 </summary>
@@ -71118,7 +71738,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_zookeeper_client_port" lineno="98391">
+<interface name="corenet_tcp_sendrecv_zookeeper_client_port" lineno="98812">
 <summary>
 Send and receive TCP traffic on the zookeeper_client port.
 </summary>
@@ -71129,7 +71749,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_zookeeper_client_port" lineno="98406">
+<interface name="corenet_udp_send_zookeeper_client_port" lineno="98827">
 <summary>
 Send UDP traffic on the zookeeper_client port.
 </summary>
@@ -71140,7 +71760,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_zookeeper_client_port" lineno="98421">
+<interface name="corenet_dontaudit_udp_send_zookeeper_client_port" lineno="98842">
 <summary>
 Do not audit attempts to send UDP traffic on the zookeeper_client port.
 </summary>
@@ -71151,7 +71771,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_zookeeper_client_port" lineno="98436">
+<interface name="corenet_udp_receive_zookeeper_client_port" lineno="98857">
 <summary>
 Receive UDP traffic on the zookeeper_client port.
 </summary>
@@ -71162,7 +71782,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_zookeeper_client_port" lineno="98451">
+<interface name="corenet_dontaudit_udp_receive_zookeeper_client_port" lineno="98872">
 <summary>
 Do not audit attempts to receive UDP traffic on the zookeeper_client port.
 </summary>
@@ -71173,7 +71793,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_zookeeper_client_port" lineno="98466">
+<interface name="corenet_udp_sendrecv_zookeeper_client_port" lineno="98887">
 <summary>
 Send and receive UDP traffic on the zookeeper_client port.
 </summary>
@@ -71184,7 +71804,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_zookeeper_client_port" lineno="98482">
+<interface name="corenet_dontaudit_udp_sendrecv_zookeeper_client_port" lineno="98903">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the zookeeper_client port.
@@ -71196,7 +71816,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_zookeeper_client_port" lineno="98497">
+<interface name="corenet_tcp_bind_zookeeper_client_port" lineno="98918">
 <summary>
 Bind TCP sockets to the zookeeper_client port.
 </summary>
@@ -71207,7 +71827,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_zookeeper_client_port" lineno="98517">
+<interface name="corenet_udp_bind_zookeeper_client_port" lineno="98938">
 <summary>
 Bind UDP sockets to the zookeeper_client port.
 </summary>
@@ -71218,7 +71838,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_zookeeper_client_port" lineno="98536">
+<interface name="corenet_tcp_connect_zookeeper_client_port" lineno="98957">
 <summary>
 Make a TCP connection to the zookeeper_client port.
 </summary>
@@ -71228,7 +71848,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_zookeeper_client_client_packets" lineno="98556">
+<interface name="corenet_send_zookeeper_client_client_packets" lineno="98977">
 <summary>
 Send zookeeper_client_client packets.
 </summary>
@@ -71239,7 +71859,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_zookeeper_client_client_packets" lineno="98575">
+<interface name="corenet_dontaudit_send_zookeeper_client_client_packets" lineno="98996">
 <summary>
 Do not audit attempts to send zookeeper_client_client packets.
 </summary>
@@ -71250,7 +71870,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_zookeeper_client_client_packets" lineno="98594">
+<interface name="corenet_receive_zookeeper_client_client_packets" lineno="99015">
 <summary>
 Receive zookeeper_client_client packets.
 </summary>
@@ -71261,7 +71881,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_zookeeper_client_client_packets" lineno="98613">
+<interface name="corenet_dontaudit_receive_zookeeper_client_client_packets" lineno="99034">
 <summary>
 Do not audit attempts to receive zookeeper_client_client packets.
 </summary>
@@ -71272,7 +71892,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_zookeeper_client_client_packets" lineno="98632">
+<interface name="corenet_sendrecv_zookeeper_client_client_packets" lineno="99053">
 <summary>
 Send and receive zookeeper_client_client packets.
 </summary>
@@ -71283,7 +71903,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_zookeeper_client_client_packets" lineno="98648">
+<interface name="corenet_dontaudit_sendrecv_zookeeper_client_client_packets" lineno="99069">
 <summary>
 Do not audit attempts to send and receive zookeeper_client_client packets.
 </summary>
@@ -71294,7 +71914,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_zookeeper_client_client_packets" lineno="98663">
+<interface name="corenet_relabelto_zookeeper_client_client_packets" lineno="99084">
 <summary>
 Relabel packets to zookeeper_client_client the packet type.
 </summary>
@@ -71304,7 +71924,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_zookeeper_client_server_packets" lineno="98683">
+<interface name="corenet_send_zookeeper_client_server_packets" lineno="99104">
 <summary>
 Send zookeeper_client_server packets.
 </summary>
@@ -71315,7 +71935,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_zookeeper_client_server_packets" lineno="98702">
+<interface name="corenet_dontaudit_send_zookeeper_client_server_packets" lineno="99123">
 <summary>
 Do not audit attempts to send zookeeper_client_server packets.
 </summary>
@@ -71326,7 +71946,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_zookeeper_client_server_packets" lineno="98721">
+<interface name="corenet_receive_zookeeper_client_server_packets" lineno="99142">
 <summary>
 Receive zookeeper_client_server packets.
 </summary>
@@ -71337,7 +71957,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_zookeeper_client_server_packets" lineno="98740">
+<interface name="corenet_dontaudit_receive_zookeeper_client_server_packets" lineno="99161">
 <summary>
 Do not audit attempts to receive zookeeper_client_server packets.
 </summary>
@@ -71348,7 +71968,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_zookeeper_client_server_packets" lineno="98759">
+<interface name="corenet_sendrecv_zookeeper_client_server_packets" lineno="99180">
 <summary>
 Send and receive zookeeper_client_server packets.
 </summary>
@@ -71359,7 +71979,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_zookeeper_client_server_packets" lineno="98775">
+<interface name="corenet_dontaudit_sendrecv_zookeeper_client_server_packets" lineno="99196">
 <summary>
 Do not audit attempts to send and receive zookeeper_client_server packets.
 </summary>
@@ -71370,7 +71990,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_zookeeper_client_server_packets" lineno="98790">
+<interface name="corenet_relabelto_zookeeper_client_server_packets" lineno="99211">
 <summary>
 Relabel packets to zookeeper_client_server the packet type.
 </summary>
@@ -71380,7 +72000,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_zookeeper_election_port" lineno="98812">
+<interface name="corenet_tcp_sendrecv_zookeeper_election_port" lineno="99233">
 <summary>
 Send and receive TCP traffic on the zookeeper_election port.
 </summary>
@@ -71391,7 +72011,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_zookeeper_election_port" lineno="98827">
+<interface name="corenet_udp_send_zookeeper_election_port" lineno="99248">
 <summary>
 Send UDP traffic on the zookeeper_election port.
 </summary>
@@ -71402,7 +72022,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_zookeeper_election_port" lineno="98842">
+<interface name="corenet_dontaudit_udp_send_zookeeper_election_port" lineno="99263">
 <summary>
 Do not audit attempts to send UDP traffic on the zookeeper_election port.
 </summary>
@@ -71413,7 +72033,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_zookeeper_election_port" lineno="98857">
+<interface name="corenet_udp_receive_zookeeper_election_port" lineno="99278">
 <summary>
 Receive UDP traffic on the zookeeper_election port.
 </summary>
@@ -71424,7 +72044,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_zookeeper_election_port" lineno="98872">
+<interface name="corenet_dontaudit_udp_receive_zookeeper_election_port" lineno="99293">
 <summary>
 Do not audit attempts to receive UDP traffic on the zookeeper_election port.
 </summary>
@@ -71435,7 +72055,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_zookeeper_election_port" lineno="98887">
+<interface name="corenet_udp_sendrecv_zookeeper_election_port" lineno="99308">
 <summary>
 Send and receive UDP traffic on the zookeeper_election port.
 </summary>
@@ -71446,7 +72066,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_zookeeper_election_port" lineno="98903">
+<interface name="corenet_dontaudit_udp_sendrecv_zookeeper_election_port" lineno="99324">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the zookeeper_election port.
@@ -71458,7 +72078,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_zookeeper_election_port" lineno="98918">
+<interface name="corenet_tcp_bind_zookeeper_election_port" lineno="99339">
 <summary>
 Bind TCP sockets to the zookeeper_election port.
 </summary>
@@ -71469,7 +72089,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_zookeeper_election_port" lineno="98938">
+<interface name="corenet_udp_bind_zookeeper_election_port" lineno="99359">
 <summary>
 Bind UDP sockets to the zookeeper_election port.
 </summary>
@@ -71480,7 +72100,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_zookeeper_election_port" lineno="98957">
+<interface name="corenet_tcp_connect_zookeeper_election_port" lineno="99378">
 <summary>
 Make a TCP connection to the zookeeper_election port.
 </summary>
@@ -71490,7 +72110,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_zookeeper_election_client_packets" lineno="98977">
+<interface name="corenet_send_zookeeper_election_client_packets" lineno="99398">
 <summary>
 Send zookeeper_election_client packets.
 </summary>
@@ -71501,7 +72121,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_zookeeper_election_client_packets" lineno="98996">
+<interface name="corenet_dontaudit_send_zookeeper_election_client_packets" lineno="99417">
 <summary>
 Do not audit attempts to send zookeeper_election_client packets.
 </summary>
@@ -71512,7 +72132,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_zookeeper_election_client_packets" lineno="99015">
+<interface name="corenet_receive_zookeeper_election_client_packets" lineno="99436">
 <summary>
 Receive zookeeper_election_client packets.
 </summary>
@@ -71523,7 +72143,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_zookeeper_election_client_packets" lineno="99034">
+<interface name="corenet_dontaudit_receive_zookeeper_election_client_packets" lineno="99455">
 <summary>
 Do not audit attempts to receive zookeeper_election_client packets.
 </summary>
@@ -71534,7 +72154,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_zookeeper_election_client_packets" lineno="99053">
+<interface name="corenet_sendrecv_zookeeper_election_client_packets" lineno="99474">
 <summary>
 Send and receive zookeeper_election_client packets.
 </summary>
@@ -71545,7 +72165,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_zookeeper_election_client_packets" lineno="99069">
+<interface name="corenet_dontaudit_sendrecv_zookeeper_election_client_packets" lineno="99490">
 <summary>
 Do not audit attempts to send and receive zookeeper_election_client packets.
 </summary>
@@ -71556,7 +72176,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_zookeeper_election_client_packets" lineno="99084">
+<interface name="corenet_relabelto_zookeeper_election_client_packets" lineno="99505">
 <summary>
 Relabel packets to zookeeper_election_client the packet type.
 </summary>
@@ -71566,7 +72186,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_zookeeper_election_server_packets" lineno="99104">
+<interface name="corenet_send_zookeeper_election_server_packets" lineno="99525">
 <summary>
 Send zookeeper_election_server packets.
 </summary>
@@ -71577,7 +72197,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_zookeeper_election_server_packets" lineno="99123">
+<interface name="corenet_dontaudit_send_zookeeper_election_server_packets" lineno="99544">
 <summary>
 Do not audit attempts to send zookeeper_election_server packets.
 </summary>
@@ -71588,7 +72208,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_zookeeper_election_server_packets" lineno="99142">
+<interface name="corenet_receive_zookeeper_election_server_packets" lineno="99563">
 <summary>
 Receive zookeeper_election_server packets.
 </summary>
@@ -71599,7 +72219,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_zookeeper_election_server_packets" lineno="99161">
+<interface name="corenet_dontaudit_receive_zookeeper_election_server_packets" lineno="99582">
 <summary>
 Do not audit attempts to receive zookeeper_election_server packets.
 </summary>
@@ -71610,7 +72230,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_zookeeper_election_server_packets" lineno="99180">
+<interface name="corenet_sendrecv_zookeeper_election_server_packets" lineno="99601">
 <summary>
 Send and receive zookeeper_election_server packets.
 </summary>
@@ -71621,7 +72241,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_zookeeper_election_server_packets" lineno="99196">
+<interface name="corenet_dontaudit_sendrecv_zookeeper_election_server_packets" lineno="99617">
 <summary>
 Do not audit attempts to send and receive zookeeper_election_server packets.
 </summary>
@@ -71632,7 +72252,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_zookeeper_election_server_packets" lineno="99211">
+<interface name="corenet_relabelto_zookeeper_election_server_packets" lineno="99632">
 <summary>
 Relabel packets to zookeeper_election_server the packet type.
 </summary>
@@ -71642,7 +72262,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_zookeeper_leader_port" lineno="99233">
+<interface name="corenet_tcp_sendrecv_zookeeper_leader_port" lineno="99654">
 <summary>
 Send and receive TCP traffic on the zookeeper_leader port.
 </summary>
@@ -71653,7 +72273,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_zookeeper_leader_port" lineno="99248">
+<interface name="corenet_udp_send_zookeeper_leader_port" lineno="99669">
 <summary>
 Send UDP traffic on the zookeeper_leader port.
 </summary>
@@ -71664,7 +72284,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_zookeeper_leader_port" lineno="99263">
+<interface name="corenet_dontaudit_udp_send_zookeeper_leader_port" lineno="99684">
 <summary>
 Do not audit attempts to send UDP traffic on the zookeeper_leader port.
 </summary>
@@ -71675,7 +72295,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_zookeeper_leader_port" lineno="99278">
+<interface name="corenet_udp_receive_zookeeper_leader_port" lineno="99699">
 <summary>
 Receive UDP traffic on the zookeeper_leader port.
 </summary>
@@ -71686,7 +72306,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_zookeeper_leader_port" lineno="99293">
+<interface name="corenet_dontaudit_udp_receive_zookeeper_leader_port" lineno="99714">
 <summary>
 Do not audit attempts to receive UDP traffic on the zookeeper_leader port.
 </summary>
@@ -71697,7 +72317,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_zookeeper_leader_port" lineno="99308">
+<interface name="corenet_udp_sendrecv_zookeeper_leader_port" lineno="99729">
 <summary>
 Send and receive UDP traffic on the zookeeper_leader port.
 </summary>
@@ -71708,7 +72328,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_zookeeper_leader_port" lineno="99324">
+<interface name="corenet_dontaudit_udp_sendrecv_zookeeper_leader_port" lineno="99745">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the zookeeper_leader port.
@@ -71720,7 +72340,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_zookeeper_leader_port" lineno="99339">
+<interface name="corenet_tcp_bind_zookeeper_leader_port" lineno="99760">
 <summary>
 Bind TCP sockets to the zookeeper_leader port.
 </summary>
@@ -71731,7 +72351,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_zookeeper_leader_port" lineno="99359">
+<interface name="corenet_udp_bind_zookeeper_leader_port" lineno="99780">
 <summary>
 Bind UDP sockets to the zookeeper_leader port.
 </summary>
@@ -71742,7 +72362,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_zookeeper_leader_port" lineno="99378">
+<interface name="corenet_tcp_connect_zookeeper_leader_port" lineno="99799">
 <summary>
 Make a TCP connection to the zookeeper_leader port.
 </summary>
@@ -71752,7 +72372,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_zookeeper_leader_client_packets" lineno="99398">
+<interface name="corenet_send_zookeeper_leader_client_packets" lineno="99819">
 <summary>
 Send zookeeper_leader_client packets.
 </summary>
@@ -71763,7 +72383,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_zookeeper_leader_client_packets" lineno="99417">
+<interface name="corenet_dontaudit_send_zookeeper_leader_client_packets" lineno="99838">
 <summary>
 Do not audit attempts to send zookeeper_leader_client packets.
 </summary>
@@ -71774,7 +72394,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_zookeeper_leader_client_packets" lineno="99436">
+<interface name="corenet_receive_zookeeper_leader_client_packets" lineno="99857">
 <summary>
 Receive zookeeper_leader_client packets.
 </summary>
@@ -71785,7 +72405,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_zookeeper_leader_client_packets" lineno="99455">
+<interface name="corenet_dontaudit_receive_zookeeper_leader_client_packets" lineno="99876">
 <summary>
 Do not audit attempts to receive zookeeper_leader_client packets.
 </summary>
@@ -71796,7 +72416,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_zookeeper_leader_client_packets" lineno="99474">
+<interface name="corenet_sendrecv_zookeeper_leader_client_packets" lineno="99895">
 <summary>
 Send and receive zookeeper_leader_client packets.
 </summary>
@@ -71807,7 +72427,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_zookeeper_leader_client_packets" lineno="99490">
+<interface name="corenet_dontaudit_sendrecv_zookeeper_leader_client_packets" lineno="99911">
 <summary>
 Do not audit attempts to send and receive zookeeper_leader_client packets.
 </summary>
@@ -71818,7 +72438,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_zookeeper_leader_client_packets" lineno="99505">
+<interface name="corenet_relabelto_zookeeper_leader_client_packets" lineno="99926">
 <summary>
 Relabel packets to zookeeper_leader_client the packet type.
 </summary>
@@ -71828,7 +72448,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_zookeeper_leader_server_packets" lineno="99525">
+<interface name="corenet_send_zookeeper_leader_server_packets" lineno="99946">
 <summary>
 Send zookeeper_leader_server packets.
 </summary>
@@ -71839,7 +72459,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_zookeeper_leader_server_packets" lineno="99544">
+<interface name="corenet_dontaudit_send_zookeeper_leader_server_packets" lineno="99965">
 <summary>
 Do not audit attempts to send zookeeper_leader_server packets.
 </summary>
@@ -71850,7 +72470,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_zookeeper_leader_server_packets" lineno="99563">
+<interface name="corenet_receive_zookeeper_leader_server_packets" lineno="99984">
 <summary>
 Receive zookeeper_leader_server packets.
 </summary>
@@ -71861,7 +72481,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_zookeeper_leader_server_packets" lineno="99582">
+<interface name="corenet_dontaudit_receive_zookeeper_leader_server_packets" lineno="100003">
 <summary>
 Do not audit attempts to receive zookeeper_leader_server packets.
 </summary>
@@ -71872,7 +72492,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_zookeeper_leader_server_packets" lineno="99601">
+<interface name="corenet_sendrecv_zookeeper_leader_server_packets" lineno="100022">
 <summary>
 Send and receive zookeeper_leader_server packets.
 </summary>
@@ -71883,7 +72503,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_zookeeper_leader_server_packets" lineno="99617">
+<interface name="corenet_dontaudit_sendrecv_zookeeper_leader_server_packets" lineno="100038">
 <summary>
 Do not audit attempts to send and receive zookeeper_leader_server packets.
 </summary>
@@ -71894,7 +72514,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_zookeeper_leader_server_packets" lineno="99632">
+<interface name="corenet_relabelto_zookeeper_leader_server_packets" lineno="100053">
 <summary>
 Relabel packets to zookeeper_leader_server the packet type.
 </summary>
@@ -71904,7 +72524,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_zebra_port" lineno="99654">
+<interface name="corenet_tcp_sendrecv_zebra_port" lineno="100075">
 <summary>
 Send and receive TCP traffic on the zebra port.
 </summary>
@@ -71915,7 +72535,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_zebra_port" lineno="99669">
+<interface name="corenet_udp_send_zebra_port" lineno="100090">
 <summary>
 Send UDP traffic on the zebra port.
 </summary>
@@ -71926,7 +72546,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_zebra_port" lineno="99684">
+<interface name="corenet_dontaudit_udp_send_zebra_port" lineno="100105">
 <summary>
 Do not audit attempts to send UDP traffic on the zebra port.
 </summary>
@@ -71937,7 +72557,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_zebra_port" lineno="99699">
+<interface name="corenet_udp_receive_zebra_port" lineno="100120">
 <summary>
 Receive UDP traffic on the zebra port.
 </summary>
@@ -71948,7 +72568,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_zebra_port" lineno="99714">
+<interface name="corenet_dontaudit_udp_receive_zebra_port" lineno="100135">
 <summary>
 Do not audit attempts to receive UDP traffic on the zebra port.
 </summary>
@@ -71959,7 +72579,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_zebra_port" lineno="99729">
+<interface name="corenet_udp_sendrecv_zebra_port" lineno="100150">
 <summary>
 Send and receive UDP traffic on the zebra port.
 </summary>
@@ -71970,7 +72590,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_zebra_port" lineno="99745">
+<interface name="corenet_dontaudit_udp_sendrecv_zebra_port" lineno="100166">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the zebra port.
@@ -71982,7 +72602,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_zebra_port" lineno="99760">
+<interface name="corenet_tcp_bind_zebra_port" lineno="100181">
 <summary>
 Bind TCP sockets to the zebra port.
 </summary>
@@ -71993,7 +72613,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_zebra_port" lineno="99780">
+<interface name="corenet_udp_bind_zebra_port" lineno="100201">
 <summary>
 Bind UDP sockets to the zebra port.
 </summary>
@@ -72004,7 +72624,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_zebra_port" lineno="99799">
+<interface name="corenet_tcp_connect_zebra_port" lineno="100220">
 <summary>
 Make a TCP connection to the zebra port.
 </summary>
@@ -72014,7 +72634,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_zebra_client_packets" lineno="99819">
+<interface name="corenet_send_zebra_client_packets" lineno="100240">
 <summary>
 Send zebra_client packets.
 </summary>
@@ -72025,7 +72645,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_zebra_client_packets" lineno="99838">
+<interface name="corenet_dontaudit_send_zebra_client_packets" lineno="100259">
 <summary>
 Do not audit attempts to send zebra_client packets.
 </summary>
@@ -72036,7 +72656,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_zebra_client_packets" lineno="99857">
+<interface name="corenet_receive_zebra_client_packets" lineno="100278">
 <summary>
 Receive zebra_client packets.
 </summary>
@@ -72047,7 +72667,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_zebra_client_packets" lineno="99876">
+<interface name="corenet_dontaudit_receive_zebra_client_packets" lineno="100297">
 <summary>
 Do not audit attempts to receive zebra_client packets.
 </summary>
@@ -72058,7 +72678,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_zebra_client_packets" lineno="99895">
+<interface name="corenet_sendrecv_zebra_client_packets" lineno="100316">
 <summary>
 Send and receive zebra_client packets.
 </summary>
@@ -72069,7 +72689,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_zebra_client_packets" lineno="99911">
+<interface name="corenet_dontaudit_sendrecv_zebra_client_packets" lineno="100332">
 <summary>
 Do not audit attempts to send and receive zebra_client packets.
 </summary>
@@ -72080,7 +72700,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_zebra_client_packets" lineno="99926">
+<interface name="corenet_relabelto_zebra_client_packets" lineno="100347">
 <summary>
 Relabel packets to zebra_client the packet type.
 </summary>
@@ -72090,7 +72710,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_zebra_server_packets" lineno="99946">
+<interface name="corenet_send_zebra_server_packets" lineno="100367">
 <summary>
 Send zebra_server packets.
 </summary>
@@ -72101,7 +72721,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_zebra_server_packets" lineno="99965">
+<interface name="corenet_dontaudit_send_zebra_server_packets" lineno="100386">
 <summary>
 Do not audit attempts to send zebra_server packets.
 </summary>
@@ -72112,7 +72732,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_zebra_server_packets" lineno="99984">
+<interface name="corenet_receive_zebra_server_packets" lineno="100405">
 <summary>
 Receive zebra_server packets.
 </summary>
@@ -72123,7 +72743,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_zebra_server_packets" lineno="100003">
+<interface name="corenet_dontaudit_receive_zebra_server_packets" lineno="100424">
 <summary>
 Do not audit attempts to receive zebra_server packets.
 </summary>
@@ -72134,7 +72754,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_zebra_server_packets" lineno="100022">
+<interface name="corenet_sendrecv_zebra_server_packets" lineno="100443">
 <summary>
 Send and receive zebra_server packets.
 </summary>
@@ -72145,7 +72765,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_zebra_server_packets" lineno="100038">
+<interface name="corenet_dontaudit_sendrecv_zebra_server_packets" lineno="100459">
 <summary>
 Do not audit attempts to send and receive zebra_server packets.
 </summary>
@@ -72156,7 +72776,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_zebra_server_packets" lineno="100053">
+<interface name="corenet_relabelto_zebra_server_packets" lineno="100474">
 <summary>
 Relabel packets to zebra_server the packet type.
 </summary>
@@ -72166,7 +72786,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_zented_port" lineno="100075">
+<interface name="corenet_tcp_sendrecv_zented_port" lineno="100496">
 <summary>
 Send and receive TCP traffic on the zented port.
 </summary>
@@ -72177,7 +72797,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_zented_port" lineno="100090">
+<interface name="corenet_udp_send_zented_port" lineno="100511">
 <summary>
 Send UDP traffic on the zented port.
 </summary>
@@ -72188,7 +72808,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_zented_port" lineno="100105">
+<interface name="corenet_dontaudit_udp_send_zented_port" lineno="100526">
 <summary>
 Do not audit attempts to send UDP traffic on the zented port.
 </summary>
@@ -72199,7 +72819,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_zented_port" lineno="100120">
+<interface name="corenet_udp_receive_zented_port" lineno="100541">
 <summary>
 Receive UDP traffic on the zented port.
 </summary>
@@ -72210,7 +72830,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_zented_port" lineno="100135">
+<interface name="corenet_dontaudit_udp_receive_zented_port" lineno="100556">
 <summary>
 Do not audit attempts to receive UDP traffic on the zented port.
 </summary>
@@ -72221,7 +72841,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_zented_port" lineno="100150">
+<interface name="corenet_udp_sendrecv_zented_port" lineno="100571">
 <summary>
 Send and receive UDP traffic on the zented port.
 </summary>
@@ -72232,7 +72852,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_zented_port" lineno="100166">
+<interface name="corenet_dontaudit_udp_sendrecv_zented_port" lineno="100587">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the zented port.
@@ -72244,7 +72864,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_zented_port" lineno="100181">
+<interface name="corenet_tcp_bind_zented_port" lineno="100602">
 <summary>
 Bind TCP sockets to the zented port.
 </summary>
@@ -72255,7 +72875,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_zented_port" lineno="100201">
+<interface name="corenet_udp_bind_zented_port" lineno="100622">
 <summary>
 Bind UDP sockets to the zented port.
 </summary>
@@ -72266,7 +72886,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_zented_port" lineno="100220">
+<interface name="corenet_tcp_connect_zented_port" lineno="100641">
 <summary>
 Make a TCP connection to the zented port.
 </summary>
@@ -72276,7 +72896,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_zented_client_packets" lineno="100240">
+<interface name="corenet_send_zented_client_packets" lineno="100661">
 <summary>
 Send zented_client packets.
 </summary>
@@ -72287,7 +72907,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_zented_client_packets" lineno="100259">
+<interface name="corenet_dontaudit_send_zented_client_packets" lineno="100680">
 <summary>
 Do not audit attempts to send zented_client packets.
 </summary>
@@ -72298,7 +72918,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_zented_client_packets" lineno="100278">
+<interface name="corenet_receive_zented_client_packets" lineno="100699">
 <summary>
 Receive zented_client packets.
 </summary>
@@ -72309,7 +72929,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_zented_client_packets" lineno="100297">
+<interface name="corenet_dontaudit_receive_zented_client_packets" lineno="100718">
 <summary>
 Do not audit attempts to receive zented_client packets.
 </summary>
@@ -72320,7 +72940,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_zented_client_packets" lineno="100316">
+<interface name="corenet_sendrecv_zented_client_packets" lineno="100737">
 <summary>
 Send and receive zented_client packets.
 </summary>
@@ -72331,7 +72951,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_zented_client_packets" lineno="100332">
+<interface name="corenet_dontaudit_sendrecv_zented_client_packets" lineno="100753">
 <summary>
 Do not audit attempts to send and receive zented_client packets.
 </summary>
@@ -72342,7 +72962,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_zented_client_packets" lineno="100347">
+<interface name="corenet_relabelto_zented_client_packets" lineno="100768">
 <summary>
 Relabel packets to zented_client the packet type.
 </summary>
@@ -72352,7 +72972,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_zented_server_packets" lineno="100367">
+<interface name="corenet_send_zented_server_packets" lineno="100788">
 <summary>
 Send zented_server packets.
 </summary>
@@ -72363,7 +72983,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_zented_server_packets" lineno="100386">
+<interface name="corenet_dontaudit_send_zented_server_packets" lineno="100807">
 <summary>
 Do not audit attempts to send zented_server packets.
 </summary>
@@ -72374,7 +72994,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_zented_server_packets" lineno="100405">
+<interface name="corenet_receive_zented_server_packets" lineno="100826">
 <summary>
 Receive zented_server packets.
 </summary>
@@ -72385,7 +73005,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_zented_server_packets" lineno="100424">
+<interface name="corenet_dontaudit_receive_zented_server_packets" lineno="100845">
 <summary>
 Do not audit attempts to receive zented_server packets.
 </summary>
@@ -72396,7 +73016,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_zented_server_packets" lineno="100443">
+<interface name="corenet_sendrecv_zented_server_packets" lineno="100864">
 <summary>
 Send and receive zented_server packets.
 </summary>
@@ -72407,7 +73027,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_zented_server_packets" lineno="100459">
+<interface name="corenet_dontaudit_sendrecv_zented_server_packets" lineno="100880">
 <summary>
 Do not audit attempts to send and receive zented_server packets.
 </summary>
@@ -72418,7 +73038,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_zented_server_packets" lineno="100474">
+<interface name="corenet_relabelto_zented_server_packets" lineno="100895">
 <summary>
 Relabel packets to zented_server the packet type.
 </summary>
@@ -72428,7 +73048,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_zope_port" lineno="100496">
+<interface name="corenet_tcp_sendrecv_zope_port" lineno="100917">
 <summary>
 Send and receive TCP traffic on the zope port.
 </summary>
@@ -72439,7 +73059,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_zope_port" lineno="100511">
+<interface name="corenet_udp_send_zope_port" lineno="100932">
 <summary>
 Send UDP traffic on the zope port.
 </summary>
@@ -72450,7 +73070,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_send_zope_port" lineno="100526">
+<interface name="corenet_dontaudit_udp_send_zope_port" lineno="100947">
 <summary>
 Do not audit attempts to send UDP traffic on the zope port.
 </summary>
@@ -72461,7 +73081,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_receive_zope_port" lineno="100541">
+<interface name="corenet_udp_receive_zope_port" lineno="100962">
 <summary>
 Receive UDP traffic on the zope port.
 </summary>
@@ -72472,7 +73092,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_receive_zope_port" lineno="100556">
+<interface name="corenet_dontaudit_udp_receive_zope_port" lineno="100977">
 <summary>
 Do not audit attempts to receive UDP traffic on the zope port.
 </summary>
@@ -72483,7 +73103,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_sendrecv_zope_port" lineno="100571">
+<interface name="corenet_udp_sendrecv_zope_port" lineno="100992">
 <summary>
 Send and receive UDP traffic on the zope port.
 </summary>
@@ -72494,7 +73114,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_udp_sendrecv_zope_port" lineno="100587">
+<interface name="corenet_dontaudit_udp_sendrecv_zope_port" lineno="101008">
 <summary>
 Do not audit attempts to send and receive
 UDP traffic on the zope port.
@@ -72506,7 +73126,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_bind_zope_port" lineno="100602">
+<interface name="corenet_tcp_bind_zope_port" lineno="101023">
 <summary>
 Bind TCP sockets to the zope port.
 </summary>
@@ -72517,7 +73137,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_udp_bind_zope_port" lineno="100622">
+<interface name="corenet_udp_bind_zope_port" lineno="101043">
 <summary>
 Bind UDP sockets to the zope port.
 </summary>
@@ -72528,7 +73148,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_tcp_connect_zope_port" lineno="100641">
+<interface name="corenet_tcp_connect_zope_port" lineno="101062">
 <summary>
 Make a TCP connection to the zope port.
 </summary>
@@ -72538,7 +73158,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_zope_client_packets" lineno="100661">
+<interface name="corenet_send_zope_client_packets" lineno="101082">
 <summary>
 Send zope_client packets.
 </summary>
@@ -72549,7 +73169,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_zope_client_packets" lineno="100680">
+<interface name="corenet_dontaudit_send_zope_client_packets" lineno="101101">
 <summary>
 Do not audit attempts to send zope_client packets.
 </summary>
@@ -72560,7 +73180,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_zope_client_packets" lineno="100699">
+<interface name="corenet_receive_zope_client_packets" lineno="101120">
 <summary>
 Receive zope_client packets.
 </summary>
@@ -72571,7 +73191,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_zope_client_packets" lineno="100718">
+<interface name="corenet_dontaudit_receive_zope_client_packets" lineno="101139">
 <summary>
 Do not audit attempts to receive zope_client packets.
 </summary>
@@ -72582,7 +73202,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_zope_client_packets" lineno="100737">
+<interface name="corenet_sendrecv_zope_client_packets" lineno="101158">
 <summary>
 Send and receive zope_client packets.
 </summary>
@@ -72593,7 +73213,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_zope_client_packets" lineno="100753">
+<interface name="corenet_dontaudit_sendrecv_zope_client_packets" lineno="101174">
 <summary>
 Do not audit attempts to send and receive zope_client packets.
 </summary>
@@ -72604,7 +73224,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_zope_client_packets" lineno="100768">
+<interface name="corenet_relabelto_zope_client_packets" lineno="101189">
 <summary>
 Relabel packets to zope_client the packet type.
 </summary>
@@ -72614,7 +73234,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_send_zope_server_packets" lineno="100788">
+<interface name="corenet_send_zope_server_packets" lineno="101209">
 <summary>
 Send zope_server packets.
 </summary>
@@ -72625,7 +73245,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_send_zope_server_packets" lineno="100807">
+<interface name="corenet_dontaudit_send_zope_server_packets" lineno="101228">
 <summary>
 Do not audit attempts to send zope_server packets.
 </summary>
@@ -72636,7 +73256,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_receive_zope_server_packets" lineno="100826">
+<interface name="corenet_receive_zope_server_packets" lineno="101247">
 <summary>
 Receive zope_server packets.
 </summary>
@@ -72647,7 +73267,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_receive_zope_server_packets" lineno="100845">
+<interface name="corenet_dontaudit_receive_zope_server_packets" lineno="101266">
 <summary>
 Do not audit attempts to receive zope_server packets.
 </summary>
@@ -72658,7 +73278,7 @@ Domain allowed access.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_sendrecv_zope_server_packets" lineno="100864">
+<interface name="corenet_sendrecv_zope_server_packets" lineno="101285">
 <summary>
 Send and receive zope_server packets.
 </summary>
@@ -72669,7 +73289,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_dontaudit_sendrecv_zope_server_packets" lineno="100880">
+<interface name="corenet_dontaudit_sendrecv_zope_server_packets" lineno="101301">
 <summary>
 Do not audit attempts to send and receive zope_server packets.
 </summary>
@@ -72680,7 +73300,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="corenet_relabelto_zope_server_packets" lineno="100895">
+<interface name="corenet_relabelto_zope_server_packets" lineno="101316">
 <summary>
 Relabel packets to zope_server the packet type.
 </summary>
@@ -72690,7 +73310,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="corenet_tcp_sendrecv_lo_if" lineno="100918">
+<interface name="corenet_tcp_sendrecv_lo_if" lineno="101339">
 <summary>
 Send and receive TCP network traffic on the lo interface.
 </summary>
@@ -72701,7 +73321,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_udp_send_lo_if" lineno="100937">
+<interface name="corenet_udp_send_lo_if" lineno="101358">
 <summary>
 Send UDP network traffic on the lo interface.
 </summary>
@@ -72712,7 +73332,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_udp_receive_lo_if" lineno="100956">
+<interface name="corenet_udp_receive_lo_if" lineno="101377">
 <summary>
 Receive UDP network traffic on the lo interface.
 </summary>
@@ -72723,7 +73343,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_udp_sendrecv_lo_if" lineno="100975">
+<interface name="corenet_udp_sendrecv_lo_if" lineno="101396">
 <summary>
 Send and receive UDP network traffic on the lo interface.
 </summary>
@@ -72734,7 +73354,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="corenet_raw_send_lo_if" lineno="100991">
+<interface name="corenet_raw_send_lo_if" lineno="101412">
 <summary>
 Send raw IP packets on the lo interface.
 </summary>
@@ -72745,7 +73365,7 @@ Domain allowed access.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="corenet_raw_receive_lo_if" lineno="101010">
+<interface name="corenet_raw_receive_lo_if" lineno="101431">
 <summary>
 Receive raw IP packets on the lo interface.
 </summary>
@@ -72756,7 +73376,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="corenet_raw_sendrecv_lo_if" lineno="101029">
+<interface name="corenet_raw_sendrecv_lo_if" lineno="101450">
 <summary>
 Send and receive raw IP packets on the lo interface.
 </summary>
@@ -72853,7 +73473,17 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_watch_dev_dirs" lineno="121">
+<interface name="dev_remount_fs" lineno="121">
+<summary>
+Remount device filesystems.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="dev_watch_dev_dirs" lineno="139">
 <summary>
 Watch the directories in /dev.
 </summary>
@@ -72863,7 +73493,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_mounton" lineno="139">
+<interface name="dev_mounton" lineno="157">
 <summary>
 Mount a filesystem on /dev
 </summary>
@@ -72873,7 +73503,7 @@ Domain allow access.
 </summary>
 </param>
 </interface>
-<interface name="dev_relabel_all_dev_nodes" lineno="158">
+<interface name="dev_relabel_all_dev_nodes" lineno="176">
 <summary>
 Allow full relabeling (to and from) of all device nodes.
 </summary>
@@ -72884,7 +73514,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="dev_relabel_all_dev_files" lineno="184">
+<interface name="dev_relabel_all_dev_files" lineno="202">
 <summary>
 Allow full relabeling (to and from) of all device files.
 </summary>
@@ -72895,7 +73525,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="dev_list_all_dev_nodes" lineno="202">
+<interface name="dev_list_all_dev_nodes" lineno="220">
 <summary>
 List all of the device nodes in a device directory.
 </summary>
@@ -72905,7 +73535,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_setattr_generic_dirs" lineno="221">
+<interface name="dev_setattr_generic_dirs" lineno="239">
 <summary>
 Set the attributes of /dev directories.
 </summary>
@@ -72915,7 +73545,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_dontaudit_list_all_dev_nodes" lineno="239">
+<interface name="dev_dontaudit_list_all_dev_nodes" lineno="257">
 <summary>
 Dontaudit attempts to list all device nodes.
 </summary>
@@ -72925,7 +73555,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="dev_add_entry_generic_dirs" lineno="257">
+<interface name="dev_add_entry_generic_dirs" lineno="275">
 <summary>
 Add entries to directories in /dev.
 </summary>
@@ -72935,7 +73565,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_remove_entry_generic_dirs" lineno="275">
+<interface name="dev_remove_entry_generic_dirs" lineno="293">
 <summary>
 Remove entries from directories in /dev.
 </summary>
@@ -72945,7 +73575,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_create_generic_dirs" lineno="293">
+<interface name="dev_create_generic_dirs" lineno="311">
 <summary>
 Create a directory in the device directory.
 </summary>
@@ -72955,7 +73585,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_delete_generic_dirs" lineno="312">
+<interface name="dev_delete_generic_dirs" lineno="330">
 <summary>
 Delete a directory in the device directory.
 </summary>
@@ -72965,7 +73595,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_manage_generic_dirs" lineno="330">
+<interface name="dev_manage_generic_dirs" lineno="348">
 <summary>
 Manage of directories in /dev.
 </summary>
@@ -72975,7 +73605,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_relabel_generic_dev_dirs" lineno="348">
+<interface name="dev_relabel_generic_dev_dirs" lineno="366">
 <summary>
 Allow full relabeling (to and from) of directories in /dev.
 </summary>
@@ -72985,7 +73615,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_dontaudit_getattr_generic_files" lineno="366">
+<interface name="dev_dontaudit_getattr_generic_files" lineno="384">
 <summary>
 dontaudit getattr generic files in /dev.
 </summary>
@@ -72995,7 +73625,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="dev_read_generic_files" lineno="384">
+<interface name="dev_read_generic_files" lineno="402">
 <summary>
 Read generic files in /dev.
 </summary>
@@ -73005,7 +73635,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="dev_rw_generic_files" lineno="402">
+<interface name="dev_rw_generic_files" lineno="420">
 <summary>
 Read and write generic files in /dev.
 </summary>
@@ -73015,7 +73645,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_delete_generic_files" lineno="420">
+<interface name="dev_delete_generic_files" lineno="438">
 <summary>
 Delete generic files in /dev.
 </summary>
@@ -73025,7 +73655,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_manage_generic_files" lineno="438">
+<interface name="dev_manage_generic_files" lineno="456">
 <summary>
 Create a file in the device directory.
 </summary>
@@ -73035,7 +73665,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_dontaudit_getattr_generic_pipes" lineno="456">
+<interface name="dev_dontaudit_getattr_generic_pipes" lineno="474">
 <summary>
 Dontaudit getattr on generic pipes.
 </summary>
@@ -73045,7 +73675,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="dev_write_generic_sockets" lineno="474">
+<interface name="dev_write_generic_sockets" lineno="492">
 <summary>
 Write generic socket files in /dev.
 </summary>
@@ -73055,7 +73685,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="dev_getattr_generic_blk_files" lineno="492">
+<interface name="dev_getattr_generic_blk_files" lineno="510">
 <summary>
 Allow getattr on generic block devices.
 </summary>
@@ -73065,7 +73695,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_dontaudit_getattr_generic_blk_files" lineno="510">
+<interface name="dev_dontaudit_getattr_generic_blk_files" lineno="528">
 <summary>
 Dontaudit getattr on generic block devices.
 </summary>
@@ -73075,7 +73705,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="dev_setattr_generic_blk_files" lineno="529">
+<interface name="dev_setattr_generic_blk_files" lineno="547">
 <summary>
 Set the attributes on generic
 block devices.
@@ -73086,7 +73716,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_dontaudit_setattr_generic_blk_files" lineno="547">
+<interface name="dev_dontaudit_setattr_generic_blk_files" lineno="565">
 <summary>
 Dontaudit setattr on generic block devices.
 </summary>
@@ -73096,7 +73726,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="dev_create_generic_blk_files" lineno="565">
+<interface name="dev_create_generic_blk_files" lineno="583">
 <summary>
 Create generic block device files.
 </summary>
@@ -73106,7 +73736,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_delete_generic_blk_files" lineno="583">
+<interface name="dev_delete_generic_blk_files" lineno="601">
 <summary>
 Delete generic block device files.
 </summary>
@@ -73116,7 +73746,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_getattr_generic_chr_files" lineno="601">
+<interface name="dev_getattr_generic_chr_files" lineno="619">
 <summary>
 Allow getattr for generic character device files.
 </summary>
@@ -73126,7 +73756,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_dontaudit_getattr_generic_chr_files" lineno="619">
+<interface name="dev_dontaudit_getattr_generic_chr_files" lineno="637">
 <summary>
 Dontaudit getattr for generic character device files.
 </summary>
@@ -73136,7 +73766,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="dev_setattr_generic_chr_files" lineno="638">
+<interface name="dev_setattr_generic_chr_files" lineno="656">
 <summary>
 Set the attributes for generic
 character device files.
@@ -73147,7 +73777,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_dontaudit_setattr_generic_chr_files" lineno="656">
+<interface name="dev_dontaudit_setattr_generic_chr_files" lineno="674">
 <summary>
 Dontaudit setattr for generic character device files.
 </summary>
@@ -73157,7 +73787,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="dev_read_generic_chr_files" lineno="674">
+<interface name="dev_read_generic_chr_files" lineno="692">
 <summary>
 Read generic character device files.
 </summary>
@@ -73167,7 +73797,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_rw_generic_chr_files" lineno="692">
+<interface name="dev_rw_generic_chr_files" lineno="710">
 <summary>
 Read and write generic character device files.
 </summary>
@@ -73177,7 +73807,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_rw_generic_blk_files" lineno="710">
+<interface name="dev_rw_generic_blk_files" lineno="728">
 <summary>
 Read and write generic block device files.
 </summary>
@@ -73187,7 +73817,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_dontaudit_rw_generic_chr_files" lineno="728">
+<interface name="dev_dontaudit_rw_generic_chr_files" lineno="746">
 <summary>
 Dontaudit attempts to read/write generic character device files.
 </summary>
@@ -73197,7 +73827,7 @@ Domain to dontaudit access.
 </summary>
 </param>
 </interface>
-<interface name="dev_create_generic_chr_files" lineno="746">
+<interface name="dev_create_generic_chr_files" lineno="764">
 <summary>
 Create generic character device files.
 </summary>
@@ -73207,7 +73837,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_delete_generic_chr_files" lineno="764">
+<interface name="dev_delete_generic_chr_files" lineno="782">
 <summary>
 Delete generic character device files.
 </summary>
@@ -73217,7 +73847,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_relabelfrom_generic_chr_files" lineno="782">
+<interface name="dev_relabelfrom_generic_chr_files" lineno="800">
 <summary>
 Relabel from generic character device files.
 </summary>
@@ -73227,7 +73857,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_dontaudit_setattr_generic_symlinks" lineno="801">
+<interface name="dev_dontaudit_setattr_generic_symlinks" lineno="819">
 <summary>
 Do not audit attempts to set the attributes
 of symbolic links in device directories (/dev).
@@ -73238,7 +73868,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="dev_read_generic_symlinks" lineno="819">
+<interface name="dev_read_generic_symlinks" lineno="837">
 <summary>
 Read symbolic links in device directories.
 </summary>
@@ -73248,7 +73878,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_create_generic_symlinks" lineno="837">
+<interface name="dev_create_generic_symlinks" lineno="855">
 <summary>
 Create symbolic links in device directories.
 </summary>
@@ -73258,7 +73888,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_delete_generic_symlinks" lineno="855">
+<interface name="dev_delete_generic_symlinks" lineno="873">
 <summary>
 Delete symbolic links in device directories.
 </summary>
@@ -73268,7 +73898,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_manage_generic_symlinks" lineno="873">
+<interface name="dev_manage_generic_symlinks" lineno="891">
 <summary>
 Create, delete, read, and write symbolic links in device directories.
 </summary>
@@ -73278,7 +73908,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_relabel_generic_symlinks" lineno="891">
+<interface name="dev_relabel_generic_symlinks" lineno="909">
 <summary>
 Relabel symbolic links in device directories.
 </summary>
@@ -73288,7 +73918,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_write_generic_sock_files" lineno="909">
+<interface name="dev_write_generic_sock_files" lineno="927">
 <summary>
 Write generic sock files in /dev.
 </summary>
@@ -73298,7 +73928,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_manage_all_dev_nodes" lineno="927">
+<interface name="dev_manage_all_dev_nodes" lineno="945">
 <summary>
 Create, delete, read, and write device nodes in device directories.
 </summary>
@@ -73308,7 +73938,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_dontaudit_rw_generic_dev_nodes" lineno="968">
+<interface name="dev_dontaudit_rw_generic_dev_nodes" lineno="986">
 <summary>
 Dontaudit getattr for generic device files.
 </summary>
@@ -73318,7 +73948,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="dev_manage_generic_blk_files" lineno="986">
+<interface name="dev_manage_generic_blk_files" lineno="1004">
 <summary>
 Create, delete, read, and write block device files.
 </summary>
@@ -73328,7 +73958,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_manage_generic_chr_files" lineno="1004">
+<interface name="dev_manage_generic_chr_files" lineno="1022">
 <summary>
 Create, delete, read, and write character device files.
 </summary>
@@ -73338,7 +73968,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_filetrans" lineno="1039">
+<interface name="dev_filetrans" lineno="1057">
 <summary>
 Create, read, and write device nodes. The node
 will be transitioned to the type provided.
@@ -73365,7 +73995,7 @@ The name of the object being created.
 </summary>
 </param>
 </interface>
-<interface name="dev_tmpfs_filetrans_dev" lineno="1074">
+<interface name="dev_tmpfs_filetrans_dev" lineno="1092">
 <summary>
 Create, read, and write device nodes. The node
 will be transitioned to the type provided.  This is
@@ -73389,7 +74019,7 @@ The name of the object being created.
 </summary>
 </param>
 </interface>
-<interface name="dev_getattr_all_blk_files" lineno="1093">
+<interface name="dev_getattr_all_blk_files" lineno="1111">
 <summary>
 Getattr on all block file device nodes.
 </summary>
@@ -73400,7 +74030,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="dev_dontaudit_getattr_all_blk_files" lineno="1112">
+<interface name="dev_dontaudit_getattr_all_blk_files" lineno="1130">
 <summary>
 Dontaudit getattr on all block file device nodes.
 </summary>
@@ -73410,7 +74040,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="dev_getattr_all_chr_files" lineno="1132">
+<interface name="dev_getattr_all_chr_files" lineno="1150">
 <summary>
 Getattr on all character file device nodes.
 </summary>
@@ -73421,7 +74051,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="dev_dontaudit_getattr_all_chr_files" lineno="1151">
+<interface name="dev_dontaudit_getattr_all_chr_files" lineno="1169">
 <summary>
 Dontaudit getattr on all character file device nodes.
 </summary>
@@ -73431,7 +74061,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="dev_setattr_all_blk_files" lineno="1171">
+<interface name="dev_setattr_all_blk_files" lineno="1189">
 <summary>
 Setattr on all block file device nodes.
 </summary>
@@ -73442,7 +74072,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="dev_setattr_all_chr_files" lineno="1191">
+<interface name="dev_setattr_all_chr_files" lineno="1209">
 <summary>
 Setattr on all character file device nodes.
 </summary>
@@ -73453,7 +74083,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="dev_dontaudit_read_all_blk_files" lineno="1210">
+<interface name="dev_dontaudit_read_all_blk_files" lineno="1228">
 <summary>
 Dontaudit read on all block file device nodes.
 </summary>
@@ -73463,7 +74093,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="dev_dontaudit_write_all_blk_files" lineno="1228">
+<interface name="dev_dontaudit_write_all_blk_files" lineno="1246">
 <summary>
 Dontaudit write on all block file device nodes.
 </summary>
@@ -73473,7 +74103,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="dev_dontaudit_read_all_chr_files" lineno="1246">
+<interface name="dev_dontaudit_read_all_chr_files" lineno="1264">
 <summary>
 Dontaudit read on all character file device nodes.
 </summary>
@@ -73483,7 +74113,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="dev_dontaudit_write_all_chr_files" lineno="1264">
+<interface name="dev_dontaudit_write_all_chr_files" lineno="1282">
 <summary>
 Dontaudit write on all character file device nodes.
 </summary>
@@ -73493,7 +74123,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="dev_create_all_blk_files" lineno="1282">
+<interface name="dev_create_all_blk_files" lineno="1300">
 <summary>
 Create all block device files.
 </summary>
@@ -73503,7 +74133,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_create_all_chr_files" lineno="1301">
+<interface name="dev_create_all_chr_files" lineno="1319">
 <summary>
 Create all character device files.
 </summary>
@@ -73513,7 +74143,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_delete_all_blk_files" lineno="1320">
+<interface name="dev_delete_all_blk_files" lineno="1338">
 <summary>
 Delete all block device files.
 </summary>
@@ -73523,7 +74153,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_delete_all_chr_files" lineno="1339">
+<interface name="dev_delete_all_chr_files" lineno="1357">
 <summary>
 Delete all character device files.
 </summary>
@@ -73533,7 +74163,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_rename_all_blk_files" lineno="1358">
+<interface name="dev_rename_all_blk_files" lineno="1376">
 <summary>
 Rename all block device files.
 </summary>
@@ -73543,7 +74173,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_rename_all_chr_files" lineno="1377">
+<interface name="dev_rename_all_chr_files" lineno="1395">
 <summary>
 Rename all character device files.
 </summary>
@@ -73553,7 +74183,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_manage_all_blk_files" lineno="1396">
+<interface name="dev_manage_all_blk_files" lineno="1414">
 <summary>
 Read, write, create, and delete all block device files.
 </summary>
@@ -73563,7 +74193,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_manage_all_chr_files" lineno="1421">
+<interface name="dev_manage_all_chr_files" lineno="1439">
 <summary>
 Read, write, create, and delete all character device files.
 </summary>
@@ -73573,7 +74203,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_getattr_acpi_bios_dev" lineno="1442">
+<interface name="dev_getattr_acpi_bios_dev" lineno="1460">
 <summary>
 Get the attributes of the apm bios device node.
 </summary>
@@ -73583,7 +74213,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_dontaudit_getattr_acpi_bios_dev" lineno="1461">
+<interface name="dev_dontaudit_getattr_acpi_bios_dev" lineno="1479">
 <summary>
 Do not audit attempts to get the attributes of
 the apm bios device node.
@@ -73594,7 +74224,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="dev_setattr_acpi_bios_dev" lineno="1479">
+<interface name="dev_setattr_acpi_bios_dev" lineno="1497">
 <summary>
 Set the attributes of the apm bios device node.
 </summary>
@@ -73604,7 +74234,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_dontaudit_setattr_acpi_bios_dev" lineno="1498">
+<interface name="dev_dontaudit_setattr_acpi_bios_dev" lineno="1516">
 <summary>
 Do not audit attempts to set the attributes of
 the apm bios device node.
@@ -73615,7 +74245,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="dev_rw_acpi_bios" lineno="1516">
+<interface name="dev_rw_acpi_bios" lineno="1534">
 <summary>
 Read and write the apm bios.
 </summary>
@@ -73625,7 +74255,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_getattr_agp_dev" lineno="1534">
+<interface name="dev_getattr_agp_dev" lineno="1552">
 <summary>
 Getattr the agp devices.
 </summary>
@@ -73635,7 +74265,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_rw_agp" lineno="1552">
+<interface name="dev_rw_agp" lineno="1570">
 <summary>
 Read and write the agp devices.
 </summary>
@@ -73645,7 +74275,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_getattr_autofs_dev" lineno="1571">
+<interface name="dev_getattr_autofs_dev" lineno="1589">
 <summary>
 Get the attributes of the autofs device node.
 </summary>
@@ -73655,7 +74285,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_dontaudit_getattr_autofs_dev" lineno="1590">
+<interface name="dev_dontaudit_getattr_autofs_dev" lineno="1608">
 <summary>
 Do not audit attempts to get the attributes of
 the autofs device node.
@@ -73666,7 +74296,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="dev_setattr_autofs_dev" lineno="1608">
+<interface name="dev_setattr_autofs_dev" lineno="1626">
 <summary>
 Set the attributes of the autofs device node.
 </summary>
@@ -73676,7 +74306,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_dontaudit_setattr_autofs_dev" lineno="1627">
+<interface name="dev_dontaudit_setattr_autofs_dev" lineno="1645">
 <summary>
 Do not audit attempts to set the attributes of
 the autofs device node.
@@ -73687,7 +74317,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="dev_rw_autofs" lineno="1645">
+<interface name="dev_rw_autofs" lineno="1663">
 <summary>
 Read and write the autofs device.
 </summary>
@@ -73697,7 +74327,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_relabel_autofs_dev" lineno="1663">
+<interface name="dev_relabel_autofs_dev" lineno="1681">
 <summary>
 Relabel the autofs device node.
 </summary>
@@ -73707,7 +74337,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_rw_cachefiles" lineno="1682">
+<interface name="dev_rw_cachefiles" lineno="1700">
 <summary>
 Read and write cachefiles character
 device nodes.
@@ -73718,7 +74348,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_rw_cardmgr" lineno="1700">
+<interface name="dev_rw_cardmgr" lineno="1718">
 <summary>
 Read and write the PCMCIA card manager device.
 </summary>
@@ -73728,7 +74358,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_dontaudit_rw_cardmgr" lineno="1719">
+<interface name="dev_dontaudit_rw_cardmgr" lineno="1737">
 <summary>
 Do not audit attempts to read and
 write the PCMCIA card manager device.
@@ -73739,7 +74369,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="dev_create_cardmgr_dev" lineno="1739">
+<interface name="dev_create_cardmgr_dev" lineno="1757">
 <summary>
 Create, read, write, and delete
 the PCMCIA card manager device
@@ -73751,7 +74381,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_manage_cardmgr_dev" lineno="1759">
+<interface name="dev_manage_cardmgr_dev" lineno="1777">
 <summary>
 Create, read, write, and delete
 the PCMCIA card manager device.
@@ -73762,7 +74392,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_filetrans_cardmgr" lineno="1785">
+<interface name="dev_filetrans_cardmgr" lineno="1803">
 <summary>
 Automatic type transition to the type
 for PCMCIA card manager device nodes when
@@ -73779,7 +74409,7 @@ The name of the object being created.
 </summary>
 </param>
 </interface>
-<interface name="dev_getattr_cpu_dev" lineno="1804">
+<interface name="dev_getattr_cpu_dev" lineno="1822">
 <summary>
 Get the attributes of the CPU
 microcode and id interfaces.
@@ -73790,7 +74420,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_setattr_cpu_dev" lineno="1823">
+<interface name="dev_setattr_cpu_dev" lineno="1841">
 <summary>
 Set the attributes of the CPU
 microcode and id interfaces.
@@ -73801,7 +74431,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_read_cpuid" lineno="1841">
+<interface name="dev_read_cpuid" lineno="1859">
 <summary>
 Read the CPU identity.
 </summary>
@@ -73811,7 +74441,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_rw_cpu_microcode" lineno="1860">
+<interface name="dev_rw_cpu_microcode" lineno="1878">
 <summary>
 Read and write the the CPU microcode device. This
 is required to load CPU microcode.
@@ -73822,7 +74452,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_read_crash" lineno="1878">
+<interface name="dev_read_crash" lineno="1896">
 <summary>
 Read the kernel crash device
 </summary>
@@ -73832,7 +74462,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_rw_crypto" lineno="1896">
+<interface name="dev_rw_crypto" lineno="1914">
 <summary>
 Read and write the the hardware SSL accelerator.
 </summary>
@@ -73842,7 +74472,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_setattr_dlm_control" lineno="1914">
+<interface name="dev_setattr_dlm_control" lineno="1932">
 <summary>
 Set the attributes of the dlm control devices.
 </summary>
@@ -73852,7 +74482,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_rw_dlm_control" lineno="1932">
+<interface name="dev_rw_dlm_control" lineno="1950">
 <summary>
 Read and write the the dlm control device
 </summary>
@@ -73862,7 +74492,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_getattr_dri_dev" lineno="1950">
+<interface name="dev_getattr_dri_dev" lineno="1968">
 <summary>
 getattr the dri devices.
 </summary>
@@ -73872,7 +74502,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_setattr_dri_dev" lineno="1968">
+<interface name="dev_setattr_dri_dev" lineno="1986">
 <summary>
 Setattr the dri devices.
 </summary>
@@ -73882,7 +74512,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_ioctl_dri_dev" lineno="1986">
+<interface name="dev_ioctl_dri_dev" lineno="2004">
 <summary>
 IOCTL the dri devices.
 </summary>
@@ -73892,7 +74522,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_rw_dri" lineno="2004">
+<interface name="dev_rw_dri" lineno="2022">
 <summary>
 Read and write the dri devices.
 </summary>
@@ -73902,7 +74532,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_dontaudit_rw_dri" lineno="2023">
+<interface name="dev_dontaudit_rw_dri" lineno="2041">
 <summary>
 Dontaudit read and write on the dri devices.
 </summary>
@@ -73912,7 +74542,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="dev_manage_dri_dev" lineno="2041">
+<interface name="dev_manage_dri_dev" lineno="2059">
 <summary>
 Create, read, write, and delete the dri devices.
 </summary>
@@ -73922,7 +74552,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_filetrans_dri" lineno="2066">
+<interface name="dev_filetrans_dri" lineno="2084">
 <summary>
 Automatic type transition to the type
 for DRI device nodes when created in /dev.
@@ -73938,7 +74568,7 @@ The name of the object being created.
 </summary>
 </param>
 </interface>
-<interface name="dev_filetrans_input_dev" lineno="2090">
+<interface name="dev_filetrans_input_dev" lineno="2108">
 <summary>
 Automatic type transition to the type
 for event device nodes when created in /dev.
@@ -73954,7 +74584,7 @@ The name of the object being created.
 </summary>
 </param>
 </interface>
-<interface name="dev_getattr_input_dev" lineno="2108">
+<interface name="dev_getattr_input_dev" lineno="2126">
 <summary>
 Get the attributes of the event devices.
 </summary>
@@ -73964,7 +74594,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_setattr_input_dev" lineno="2127">
+<interface name="dev_setattr_input_dev" lineno="2145">
 <summary>
 Set the attributes of the event devices.
 </summary>
@@ -73974,7 +74604,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_read_input" lineno="2146">
+<interface name="dev_read_input" lineno="2164">
 <summary>
 Read input event devices (/dev/input).
 </summary>
@@ -73984,7 +74614,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_rw_input_dev" lineno="2164">
+<interface name="dev_rw_input_dev" lineno="2182">
 <summary>
 Read and write input event devices (/dev/input).
 </summary>
@@ -73994,7 +74624,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_manage_input_dev" lineno="2182">
+<interface name="dev_manage_input_dev" lineno="2200">
 <summary>
 Create, read, write, and delete input event devices (/dev/input).
 </summary>
@@ -74004,7 +74634,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_ioctl_input_dev" lineno="2200">
+<interface name="dev_ioctl_input_dev" lineno="2218">
 <summary>
 IOCTL the input event devices (/dev/input).
 </summary>
@@ -74014,7 +74644,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_rw_ipmi_dev" lineno="2218">
+<interface name="dev_rw_ipmi_dev" lineno="2236">
 <summary>
 Read and write ipmi devices (/dev/ipmi*).
 </summary>
@@ -74024,7 +74654,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_getattr_framebuffer_dev" lineno="2236">
+<interface name="dev_getattr_framebuffer_dev" lineno="2254">
 <summary>
 Get the attributes of the framebuffer device node.
 </summary>
@@ -74034,7 +74664,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_setattr_framebuffer_dev" lineno="2254">
+<interface name="dev_setattr_framebuffer_dev" lineno="2272">
 <summary>
 Set the attributes of the framebuffer device node.
 </summary>
@@ -74044,7 +74674,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_dontaudit_setattr_framebuffer_dev" lineno="2273">
+<interface name="dev_dontaudit_setattr_framebuffer_dev" lineno="2291">
 <summary>
 Dot not audit attempts to set the attributes
 of the framebuffer device node.
@@ -74055,7 +74685,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="dev_read_framebuffer" lineno="2291">
+<interface name="dev_read_framebuffer" lineno="2309">
 <summary>
 Read the framebuffer.
 </summary>
@@ -74065,7 +74695,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_dontaudit_read_framebuffer" lineno="2309">
+<interface name="dev_dontaudit_read_framebuffer" lineno="2327">
 <summary>
 Do not audit attempts to read the framebuffer.
 </summary>
@@ -74075,7 +74705,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="dev_write_framebuffer" lineno="2327">
+<interface name="dev_write_framebuffer" lineno="2345">
 <summary>
 Write the framebuffer.
 </summary>
@@ -74085,7 +74715,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_rw_framebuffer" lineno="2345">
+<interface name="dev_rw_framebuffer" lineno="2363">
 <summary>
 Read and write the framebuffer.
 </summary>
@@ -74095,7 +74725,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_read_kmsg" lineno="2363">
+<interface name="dev_read_kmsg" lineno="2381">
 <summary>
 Read the kernel messages
 </summary>
@@ -74105,7 +74735,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_dontaudit_read_kmsg" lineno="2381">
+<interface name="dev_dontaudit_read_kmsg" lineno="2399">
 <summary>
 Do not audit attempts to read the kernel messages
 </summary>
@@ -74115,7 +74745,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="dev_write_kmsg" lineno="2399">
+<interface name="dev_write_kmsg" lineno="2417">
 <summary>
 Write to the kernel messages device
 </summary>
@@ -74125,7 +74755,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_rw_kmsg" lineno="2417">
+<interface name="dev_rw_kmsg" lineno="2435">
 <summary>
 Read and write to the kernel messages device
 </summary>
@@ -74135,7 +74765,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_mounton_kmsg" lineno="2435">
+<interface name="dev_mounton_kmsg" lineno="2453">
 <summary>
 Mount on the kernel messages device
 </summary>
@@ -74145,7 +74775,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_getattr_ksm_dev" lineno="2453">
+<interface name="dev_getattr_ksm_dev" lineno="2471">
 <summary>
 Get the attributes of the ksm devices.
 </summary>
@@ -74155,7 +74785,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_setattr_ksm_dev" lineno="2471">
+<interface name="dev_setattr_ksm_dev" lineno="2489">
 <summary>
 Set the attributes of the ksm devices.
 </summary>
@@ -74165,7 +74795,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_read_ksm" lineno="2489">
+<interface name="dev_read_ksm" lineno="2507">
 <summary>
 Read the ksm devices.
 </summary>
@@ -74175,7 +74805,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_rw_ksm" lineno="2507">
+<interface name="dev_rw_ksm" lineno="2525">
 <summary>
 Read and write to ksm devices.
 </summary>
@@ -74185,7 +74815,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_getattr_kvm_dev" lineno="2525">
+<interface name="dev_getattr_kvm_dev" lineno="2543">
 <summary>
 Get the attributes of the kvm devices.
 </summary>
@@ -74195,7 +74825,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_setattr_kvm_dev" lineno="2543">
+<interface name="dev_setattr_kvm_dev" lineno="2561">
 <summary>
 Set the attributes of the kvm devices.
 </summary>
@@ -74205,7 +74835,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_read_kvm" lineno="2561">
+<interface name="dev_read_kvm" lineno="2579">
 <summary>
 Read the kvm devices.
 </summary>
@@ -74215,7 +74845,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_rw_kvm" lineno="2579">
+<interface name="dev_rw_kvm" lineno="2597">
 <summary>
 Read and write to kvm devices.
 </summary>
@@ -74225,7 +74855,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_read_lirc" lineno="2597">
+<interface name="dev_read_lirc" lineno="2615">
 <summary>
 Read the lirc device.
 </summary>
@@ -74235,7 +74865,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_rw_lirc" lineno="2615">
+<interface name="dev_rw_lirc" lineno="2633">
 <summary>
 Read and write the lirc device.
 </summary>
@@ -74245,7 +74875,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_filetrans_lirc" lineno="2639">
+<interface name="dev_filetrans_lirc" lineno="2657">
 <summary>
 Automatic type transition to the type
 for lirc device nodes when created in /dev.
@@ -74261,7 +74891,7 @@ The name of the object being created.
 </summary>
 </param>
 </interface>
-<interface name="dev_rw_loop_control" lineno="2657">
+<interface name="dev_rw_loop_control" lineno="2675">
 <summary>
 Read and write the loop-control device.
 </summary>
@@ -74271,7 +74901,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_getattr_lvm_control" lineno="2675">
+<interface name="dev_getattr_lvm_control" lineno="2693">
 <summary>
 Get the attributes of the lvm comtrol device.
 </summary>
@@ -74281,7 +74911,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_read_lvm_control" lineno="2693">
+<interface name="dev_read_lvm_control" lineno="2711">
 <summary>
 Read the lvm comtrol device.
 </summary>
@@ -74291,7 +74921,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_rw_lvm_control" lineno="2711">
+<interface name="dev_rw_lvm_control" lineno="2729">
 <summary>
 Read and write the lvm control device.
 </summary>
@@ -74301,7 +74931,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_dontaudit_rw_lvm_control" lineno="2729">
+<interface name="dev_dontaudit_rw_lvm_control" lineno="2747">
 <summary>
 Do not audit attempts to read and write lvm control device.
 </summary>
@@ -74311,7 +74941,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="dev_delete_lvm_control_dev" lineno="2747">
+<interface name="dev_delete_lvm_control_dev" lineno="2765">
 <summary>
 Delete the lvm control device.
 </summary>
@@ -74321,7 +74951,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_dontaudit_getattr_memory_dev" lineno="2765">
+<interface name="dev_dontaudit_getattr_memory_dev" lineno="2783">
 <summary>
 dontaudit getattr raw memory devices (e.g. /dev/mem).
 </summary>
@@ -74331,7 +74961,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="dev_read_raw_memory" lineno="2786">
+<interface name="dev_read_raw_memory" lineno="2804">
 <summary>
 Read raw memory devices (e.g. /dev/mem).
 This is extremely dangerous as it can bypass the
@@ -74344,7 +74974,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_read_raw_memory_cond" lineno="2816">
+<interface name="dev_read_raw_memory_cond" lineno="2834">
 <summary>
 Read raw memory devices (e.g. /dev/mem) if a tunable is set.
 This is extremely dangerous as it can bypass the
@@ -74362,7 +74992,7 @@ Tunable to depend on
 </summary>
 </param>
 </interface>
-<interface name="dev_dontaudit_read_raw_memory" lineno="2843">
+<interface name="dev_dontaudit_read_raw_memory" lineno="2861">
 <summary>
 Do not audit attempts to read raw memory devices
 (e.g. /dev/mem).
@@ -74376,7 +75006,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="dev_write_raw_memory" lineno="2864">
+<interface name="dev_write_raw_memory" lineno="2882">
 <summary>
 Write raw memory devices (e.g. /dev/mem).
 This is extremely dangerous as it can bypass the
@@ -74389,7 +75019,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_write_raw_memory_cond" lineno="2894">
+<interface name="dev_write_raw_memory_cond" lineno="2912">
 <summary>
 Write raw memory devices (e.g. /dev/mem) if a tunable is set.
 This is extremely dangerous as it can bypass the
@@ -74407,7 +75037,7 @@ Tunable to depend on
 </summary>
 </param>
 </interface>
-<interface name="dev_rx_raw_memory" lineno="2920">
+<interface name="dev_rx_raw_memory" lineno="2938">
 <summary>
 Read and execute raw memory devices (e.g. /dev/mem).
 This is extremely dangerous as it can bypass the
@@ -74420,7 +75050,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_wx_raw_memory" lineno="2942">
+<interface name="dev_wx_raw_memory" lineno="2960">
 <summary>
 Write and execute raw memory devices (e.g. /dev/mem).
 This is extremely dangerous as it can bypass the
@@ -74433,7 +75063,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_wx_raw_memory_cond" lineno="2969">
+<interface name="dev_wx_raw_memory_cond" lineno="2987">
 <summary>
 Write and execute raw memory devices (e.g. /dev/mem) if a tunable is set.
 This is extremely dangerous as it can bypass the
@@ -74451,7 +75081,7 @@ Tunable to depend on
 </summary>
 </param>
 </interface>
-<interface name="dev_getattr_misc_dev" lineno="2992">
+<interface name="dev_getattr_misc_dev" lineno="3010">
 <summary>
 Get the attributes of miscellaneous devices.
 </summary>
@@ -74461,7 +75091,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_dontaudit_getattr_misc_dev" lineno="3011">
+<interface name="dev_dontaudit_getattr_misc_dev" lineno="3029">
 <summary>
 Do not audit attempts to get the attributes
 of miscellaneous devices.
@@ -74472,7 +75102,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="dev_setattr_misc_dev" lineno="3029">
+<interface name="dev_setattr_misc_dev" lineno="3047">
 <summary>
 Set the attributes of miscellaneous devices.
 </summary>
@@ -74482,7 +75112,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_dontaudit_setattr_misc_dev" lineno="3048">
+<interface name="dev_dontaudit_setattr_misc_dev" lineno="3066">
 <summary>
 Do not audit attempts to set the attributes
 of miscellaneous devices.
@@ -74493,7 +75123,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="dev_read_misc" lineno="3066">
+<interface name="dev_read_misc" lineno="3084">
 <summary>
 Read miscellaneous devices.
 </summary>
@@ -74503,7 +75133,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_write_misc" lineno="3084">
+<interface name="dev_write_misc" lineno="3102">
 <summary>
 Write miscellaneous devices.
 </summary>
@@ -74513,7 +75143,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_dontaudit_rw_misc" lineno="3102">
+<interface name="dev_dontaudit_rw_misc" lineno="3120">
 <summary>
 Do not audit attempts to read and write miscellaneous devices.
 </summary>
@@ -74523,7 +75153,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_getattr_modem_dev" lineno="3120">
+<interface name="dev_getattr_modem_dev" lineno="3138">
 <summary>
 Get the attributes of the modem devices.
 </summary>
@@ -74533,7 +75163,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_setattr_modem_dev" lineno="3138">
+<interface name="dev_setattr_modem_dev" lineno="3156">
 <summary>
 Set the attributes of the modem devices.
 </summary>
@@ -74543,7 +75173,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_read_modem" lineno="3156">
+<interface name="dev_read_modem" lineno="3174">
 <summary>
 Read the modem devices.
 </summary>
@@ -74553,7 +75183,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_rw_modem" lineno="3174">
+<interface name="dev_rw_modem" lineno="3192">
 <summary>
 Read and write to modem devices.
 </summary>
@@ -74563,7 +75193,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_getattr_mouse_dev" lineno="3192">
+<interface name="dev_getattr_mouse_dev" lineno="3210">
 <summary>
 Get the attributes of the mouse devices.
 </summary>
@@ -74573,7 +75203,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_setattr_mouse_dev" lineno="3210">
+<interface name="dev_setattr_mouse_dev" lineno="3228">
 <summary>
 Set the attributes of the mouse devices.
 </summary>
@@ -74583,7 +75213,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_read_mouse" lineno="3228">
+<interface name="dev_read_mouse" lineno="3246">
 <summary>
 Read the mouse devices.
 </summary>
@@ -74593,7 +75223,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_rw_mouse" lineno="3246">
+<interface name="dev_rw_mouse" lineno="3264">
 <summary>
 Read and write to mouse devices.
 </summary>
@@ -74603,7 +75233,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_getattr_mtrr_dev" lineno="3265">
+<interface name="dev_getattr_mtrr_dev" lineno="3283">
 <summary>
 Get the attributes of the memory type range
 registers (MTRR) device.
@@ -74614,7 +75244,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_dontaudit_write_mtrr" lineno="3285">
+<interface name="dev_dontaudit_write_mtrr" lineno="3303">
 <summary>
 Do not audit attempts to write the memory type
 range registers (MTRR).
@@ -74625,7 +75255,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="dev_rw_mtrr" lineno="3304">
+<interface name="dev_rw_mtrr" lineno="3322">
 <summary>
 Read and write the memory type range registers (MTRR).
 </summary>
@@ -74635,7 +75265,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_getattr_netcontrol_dev" lineno="3323">
+<interface name="dev_getattr_netcontrol_dev" lineno="3341">
 <summary>
 Get the attributes of the network control device  (Deprecated)
 </summary>
@@ -74645,7 +75275,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_read_netcontrol" lineno="3338">
+<interface name="dev_read_netcontrol" lineno="3356">
 <summary>
 Read the network control identity.  (Deprecated)
 </summary>
@@ -74655,7 +75285,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_rw_netcontrol" lineno="3353">
+<interface name="dev_rw_netcontrol" lineno="3371">
 <summary>
 Read and write the the network control device.  (Deprecated)
 </summary>
@@ -74665,7 +75295,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_getattr_null_dev" lineno="3368">
+<interface name="dev_getattr_null_dev" lineno="3386">
 <summary>
 Get the attributes of the null device nodes.
 </summary>
@@ -74675,7 +75305,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_setattr_null_dev" lineno="3386">
+<interface name="dev_setattr_null_dev" lineno="3404">
 <summary>
 Set the attributes of the null device nodes.
 </summary>
@@ -74685,7 +75315,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_dontaudit_setattr_null_dev" lineno="3405">
+<interface name="dev_dontaudit_setattr_null_dev" lineno="3423">
 <summary>
 Do not audit attempts to set the attributes of
 the null device nodes.
@@ -74696,7 +75326,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="dev_delete_null" lineno="3423">
+<interface name="dev_delete_null" lineno="3441">
 <summary>
 Delete the null device (/dev/null).
 </summary>
@@ -74706,7 +75336,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_rw_null" lineno="3441">
+<interface name="dev_rw_null" lineno="3459">
 <summary>
 Read and write to the null device (/dev/null).
 </summary>
@@ -74716,7 +75346,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_create_null_dev" lineno="3459">
+<interface name="dev_create_null_dev" lineno="3477">
 <summary>
 Create the null device (/dev/null).
 </summary>
@@ -74726,7 +75356,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_manage_null_service" lineno="3478">
+<interface name="dev_manage_null_service" lineno="3496">
 <summary>
 Manage services with script type null_device_t for when
 /lib/systemd/system/something.service is a link to /dev/null
@@ -74737,7 +75367,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_dontaudit_getattr_nvram_dev" lineno="3498">
+<interface name="dev_dontaudit_getattr_nvram_dev" lineno="3516">
 <summary>
 Do not audit attempts to get the attributes
 of the BIOS non-volatile RAM device.
@@ -74748,7 +75378,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="dev_rw_nvram" lineno="3516">
+<interface name="dev_rw_nvram" lineno="3534">
 <summary>
 Read and write BIOS non-volatile RAM.
 </summary>
@@ -74758,7 +75388,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_getattr_printer_dev" lineno="3534">
+<interface name="dev_getattr_printer_dev" lineno="3552">
 <summary>
 Get the attributes of the printer device nodes.
 </summary>
@@ -74768,7 +75398,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_setattr_printer_dev" lineno="3552">
+<interface name="dev_setattr_printer_dev" lineno="3570">
 <summary>
 Set the attributes of the printer device nodes.
 </summary>
@@ -74778,7 +75408,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_append_printer" lineno="3571">
+<interface name="dev_append_printer" lineno="3589">
 <summary>
 Append the printer device.
 </summary>
@@ -74788,7 +75418,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_rw_printer" lineno="3589">
+<interface name="dev_rw_printer" lineno="3607">
 <summary>
 Read and write the printer device.
 </summary>
@@ -74798,7 +75428,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_getattr_pmqos_dev" lineno="3607">
+<interface name="dev_getattr_pmqos_dev" lineno="3625">
 <summary>
 Get the attributes of PM QoS devices
 </summary>
@@ -74808,7 +75438,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_read_pmqos" lineno="3625">
+<interface name="dev_read_pmqos" lineno="3643">
 <summary>
 Read the PM QoS devices.
 </summary>
@@ -74818,7 +75448,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_rw_pmqos" lineno="3643">
+<interface name="dev_rw_pmqos" lineno="3661">
 <summary>
 Read and write the the PM QoS devices.
 </summary>
@@ -74828,7 +75458,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_getattr_qemu_dev" lineno="3662">
+<interface name="dev_getattr_qemu_dev" lineno="3680">
 <summary>
 Get the attributes of the QEMU
 microcode and id interfaces.
@@ -74839,7 +75469,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_setattr_qemu_dev" lineno="3681">
+<interface name="dev_setattr_qemu_dev" lineno="3699">
 <summary>
 Set the attributes of the QEMU
 microcode and id interfaces.
@@ -74850,7 +75480,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_read_qemu" lineno="3699">
+<interface name="dev_read_qemu" lineno="3717">
 <summary>
 Read the QEMU device
 </summary>
@@ -74860,7 +75490,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_rw_qemu" lineno="3717">
+<interface name="dev_rw_qemu" lineno="3735">
 <summary>
 Read and write the the QEMU device.
 </summary>
@@ -74870,7 +75500,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_read_rand" lineno="3751">
+<interface name="dev_read_rand" lineno="3769">
 <summary>
 Read from random number generator
 devices (e.g., /dev/random).
@@ -74896,7 +75526,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="dev_dontaudit_read_rand" lineno="3770">
+<interface name="dev_dontaudit_read_rand" lineno="3788">
 <summary>
 Do not audit attempts to read from random
 number generator devices (e.g., /dev/random)
@@ -74907,7 +75537,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="dev_dontaudit_append_rand" lineno="3789">
+<interface name="dev_dontaudit_append_rand" lineno="3807">
 <summary>
 Do not audit attempts to append to random
 number generator devices (e.g., /dev/random)
@@ -74918,7 +75548,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="dev_write_rand" lineno="3809">
+<interface name="dev_write_rand" lineno="3827">
 <summary>
 Write to the random device (e.g., /dev/random). This adds
 entropy used to generate the random data read from the
@@ -74930,7 +75560,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_create_rand_dev" lineno="3827">
+<interface name="dev_create_rand_dev" lineno="3845">
 <summary>
 Create the random device (/dev/random).
 </summary>
@@ -74940,7 +75570,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_read_realtime_clock" lineno="3845">
+<interface name="dev_read_realtime_clock" lineno="3863">
 <summary>
 Read the realtime clock (/dev/rtc).
 </summary>
@@ -74950,7 +75580,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_write_realtime_clock" lineno="3863">
+<interface name="dev_write_realtime_clock" lineno="3881">
 <summary>
 Set the realtime clock (/dev/rtc).
 </summary>
@@ -74960,7 +75590,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_rw_realtime_clock" lineno="3883">
+<interface name="dev_rw_realtime_clock" lineno="3901">
 <summary>
 Read and set the realtime clock (/dev/rtc).
 </summary>
@@ -74970,7 +75600,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_getattr_scanner_dev" lineno="3898">
+<interface name="dev_getattr_scanner_dev" lineno="3916">
 <summary>
 Get the attributes of the scanner device.
 </summary>
@@ -74980,7 +75610,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_dontaudit_getattr_scanner_dev" lineno="3917">
+<interface name="dev_dontaudit_getattr_scanner_dev" lineno="3935">
 <summary>
 Do not audit attempts to get the attributes of
 the scanner device.
@@ -74991,7 +75621,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="dev_setattr_scanner_dev" lineno="3935">
+<interface name="dev_setattr_scanner_dev" lineno="3953">
 <summary>
 Set the attributes of the scanner device.
 </summary>
@@ -75001,7 +75631,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_dontaudit_setattr_scanner_dev" lineno="3954">
+<interface name="dev_dontaudit_setattr_scanner_dev" lineno="3972">
 <summary>
 Do not audit attempts to set the attributes of
 the scanner device.
@@ -75012,7 +75642,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="dev_rw_scanner" lineno="3972">
+<interface name="dev_rw_scanner" lineno="3990">
 <summary>
 Read and write the scanner device.
 </summary>
@@ -75022,7 +75652,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_getattr_sound_dev" lineno="3990">
+<interface name="dev_getattr_sound_dev" lineno="4008">
 <summary>
 Get the attributes of the sound devices.
 </summary>
@@ -75032,7 +75662,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_setattr_sound_dev" lineno="4008">
+<interface name="dev_setattr_sound_dev" lineno="4026">
 <summary>
 Set the attributes of the sound devices.
 </summary>
@@ -75042,7 +75672,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_read_sound" lineno="4026">
+<interface name="dev_read_sound" lineno="4044">
 <summary>
 Read the sound devices.
 </summary>
@@ -75052,7 +75682,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_write_sound" lineno="4045">
+<interface name="dev_write_sound" lineno="4063">
 <summary>
 Write the sound devices.
 </summary>
@@ -75062,7 +75692,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_read_sound_mixer" lineno="4064">
+<interface name="dev_read_sound_mixer" lineno="4082">
 <summary>
 Read the sound mixer devices.
 </summary>
@@ -75072,7 +75702,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_write_sound_mixer" lineno="4083">
+<interface name="dev_write_sound_mixer" lineno="4101">
 <summary>
 Write the sound mixer devices.
 </summary>
@@ -75082,7 +75712,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_getattr_power_mgmt_dev" lineno="4102">
+<interface name="dev_getattr_power_mgmt_dev" lineno="4120">
 <summary>
 Get the attributes of the the power management device.
 </summary>
@@ -75092,7 +75722,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_setattr_power_mgmt_dev" lineno="4120">
+<interface name="dev_setattr_power_mgmt_dev" lineno="4138">
 <summary>
 Set the attributes of the the power management device.
 </summary>
@@ -75102,7 +75732,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_rw_power_management" lineno="4138">
+<interface name="dev_rw_power_management" lineno="4156">
 <summary>
 Read and write the the power management device.
 </summary>
@@ -75112,7 +75742,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_getattr_smartcard_dev" lineno="4156">
+<interface name="dev_getattr_smartcard_dev" lineno="4174">
 <summary>
 Getattr on smartcard devices
 </summary>
@@ -75122,7 +75752,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_dontaudit_getattr_smartcard_dev" lineno="4175">
+<interface name="dev_dontaudit_getattr_smartcard_dev" lineno="4193">
 <summary>
 dontaudit getattr on smartcard devices
 </summary>
@@ -75132,7 +75762,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="dev_rw_smartcard" lineno="4194">
+<interface name="dev_rw_smartcard" lineno="4212">
 <summary>
 Read and write smartcard devices.
 </summary>
@@ -75142,7 +75772,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_manage_smartcard" lineno="4212">
+<interface name="dev_manage_smartcard" lineno="4230">
 <summary>
 Create, read, write, and delete smartcard devices.
 </summary>
@@ -75152,7 +75782,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_rw_sysdig" lineno="4230">
+<interface name="dev_rw_sysdig" lineno="4248">
 <summary>
 Read, write and map the sysdig device.
 </summary>
@@ -75162,9 +75792,9 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_mounton_sysfs" lineno="4249">
+<interface name="dev_mounton_sysfs" lineno="4267">
 <summary>
-Mount a filesystem on sysfs.
+Mount a filesystem on sysfs.  (Deprecated)
 </summary>
 <param name="domain">
 <summary>
@@ -75172,7 +75802,7 @@ Domain allow access.
 </summary>
 </param>
 </interface>
-<interface name="dev_associate_sysfs" lineno="4267">
+<interface name="dev_associate_sysfs" lineno="4282">
 <summary>
 Associate a file to a sysfs filesystem.
 </summary>
@@ -75182,7 +75812,7 @@ The type of the file to be associated to sysfs.
 </summary>
 </param>
 </interface>
-<interface name="dev_getattr_sysfs_dirs" lineno="4285">
+<interface name="dev_getattr_sysfs_dirs" lineno="4300">
 <summary>
 Get the attributes of sysfs directories.
 </summary>
@@ -75192,7 +75822,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_getattr_sysfs" lineno="4303">
+<interface name="dev_getattr_sysfs" lineno="4318">
 <summary>
 Get the attributes of sysfs filesystem
 </summary>
@@ -75202,7 +75832,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_mount_sysfs" lineno="4321">
+<interface name="dev_mount_sysfs" lineno="4336">
 <summary>
 mount a sysfs filesystem
 </summary>
@@ -75212,7 +75842,17 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_dontaudit_getattr_sysfs" lineno="4339">
+<interface name="dev_remount_sysfs" lineno="4354">
+<summary>
+Remount a sysfs filesystem.
+</summary>
+<param name="domain">
+<summary>
+Domain allow access.
+</summary>
+</param>
+</interface>
+<interface name="dev_dontaudit_getattr_sysfs" lineno="4372">
 <summary>
 Do not audit getting the attributes of sysfs filesystem
 </summary>
@@ -75222,7 +75862,7 @@ Domain to dontaudit access from
 </summary>
 </param>
 </interface>
-<interface name="dev_dontaudit_read_sysfs" lineno="4357">
+<interface name="dev_dontaudit_read_sysfs" lineno="4390">
 <summary>
 Dont audit attempts to read hardware state information
 </summary>
@@ -75232,9 +75872,9 @@ Domain for which the attempts do not need to be audited
 </summary>
 </param>
 </interface>
-<interface name="dev_mounton_sysfs_dirs" lineno="4377">
+<interface name="dev_mounton_sysfs_dirs" lineno="4410">
 <summary>
-mounton sysfs directories.
+Mount on sysfs directories.
 </summary>
 <param name="domain">
 <summary>
@@ -75242,7 +75882,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_search_sysfs" lineno="4395">
+<interface name="dev_search_sysfs" lineno="4428">
 <summary>
 Search the sysfs directories.
 </summary>
@@ -75252,7 +75892,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_dontaudit_search_sysfs" lineno="4413">
+<interface name="dev_dontaudit_search_sysfs" lineno="4446">
 <summary>
 Do not audit attempts to search sysfs.
 </summary>
@@ -75262,7 +75902,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="dev_list_sysfs" lineno="4431">
+<interface name="dev_list_sysfs" lineno="4464">
 <summary>
 List the contents of the sysfs directories.
 </summary>
@@ -75272,7 +75912,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_write_sysfs_dirs" lineno="4450">
+<interface name="dev_write_sysfs_dirs" lineno="4483">
 <summary>
 Write in a sysfs directories.
 </summary>
@@ -75282,7 +75922,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_dontaudit_write_sysfs_dirs" lineno="4468">
+<interface name="dev_dontaudit_write_sysfs_dirs" lineno="4501">
 <summary>
 Do not audit attempts to write in a sysfs directory.
 </summary>
@@ -75292,7 +75932,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="dev_dontaudit_write_sysfs_files" lineno="4486">
+<interface name="dev_dontaudit_write_sysfs_files" lineno="4519">
 <summary>
 Do not audit attempts to write to a sysfs file.
 </summary>
@@ -75302,7 +75942,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="dev_manage_sysfs_dirs" lineno="4505">
+<interface name="dev_manage_sysfs_dirs" lineno="4538">
 <summary>
 Create, read, write, and delete sysfs
 directories.
@@ -75313,7 +75953,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_read_sysfs" lineno="4532">
+<interface name="dev_read_sysfs" lineno="4565">
 <summary>
 Read hardware state information.
 </summary>
@@ -75332,7 +75972,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="dev_write_sysfs" lineno="4560">
+<interface name="dev_write_sysfs" lineno="4593">
 <summary>
 Write to hardware state information.
 </summary>
@@ -75349,7 +75989,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="dev_rw_sysfs" lineno="4579">
+<interface name="dev_rw_sysfs" lineno="4612">
 <summary>
 Allow caller to modify hardware state information.
 </summary>
@@ -75359,7 +75999,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_create_sysfs_files" lineno="4600">
+<interface name="dev_create_sysfs_files" lineno="4633">
 <summary>
 Add a sysfs file
 </summary>
@@ -75369,7 +76009,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_relabel_sysfs_dirs" lineno="4618">
+<interface name="dev_relabel_sysfs_dirs" lineno="4651">
 <summary>
 Relabel hardware state directories.
 </summary>
@@ -75379,7 +76019,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_relabel_all_sysfs" lineno="4636">
+<interface name="dev_relabel_all_sysfs" lineno="4669">
 <summary>
 Relabel from/to all sysfs types.
 </summary>
@@ -75389,7 +76029,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_setattr_all_sysfs" lineno="4656">
+<interface name="dev_setattr_all_sysfs" lineno="4689">
 <summary>
 Set the attributes of sysfs files, directories and symlinks.
 </summary>
@@ -75399,7 +76039,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_rw_tpm" lineno="4676">
+<interface name="dev_rw_tpm" lineno="4709">
 <summary>
 Read and write the TPM device.
 </summary>
@@ -75409,7 +76049,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_read_urand" lineno="4717">
+<interface name="dev_read_urand" lineno="4750">
 <summary>
 Read from pseudo random number generator devices (e.g., /dev/urandom).
 </summary>
@@ -75442,7 +76082,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="dev_dontaudit_read_urand" lineno="4736">
+<interface name="dev_dontaudit_read_urand" lineno="4769">
 <summary>
 Do not audit attempts to read from pseudo
 random devices (e.g., /dev/urandom)
@@ -75453,7 +76093,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="dev_write_urand" lineno="4755">
+<interface name="dev_write_urand" lineno="4788">
 <summary>
 Write to the pseudo random device (e.g., /dev/urandom). This
 sets the random number generator seed.
@@ -75464,7 +76104,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_create_urand_dev" lineno="4773">
+<interface name="dev_create_urand_dev" lineno="4806">
 <summary>
 Create the urandom device (/dev/urandom).
 </summary>
@@ -75474,7 +76114,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_getattr_generic_usb_dev" lineno="4791">
+<interface name="dev_getattr_generic_usb_dev" lineno="4824">
 <summary>
 Getattr generic the USB devices.
 </summary>
@@ -75484,7 +76124,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_setattr_generic_usb_dev" lineno="4809">
+<interface name="dev_setattr_generic_usb_dev" lineno="4842">
 <summary>
 Setattr generic the USB devices.
 </summary>
@@ -75494,7 +76134,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_read_generic_usb_dev" lineno="4827">
+<interface name="dev_read_generic_usb_dev" lineno="4860">
 <summary>
 Read generic the USB devices.
 </summary>
@@ -75504,7 +76144,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_rw_generic_usb_dev" lineno="4845">
+<interface name="dev_rw_generic_usb_dev" lineno="4878">
 <summary>
 Read and write generic the USB devices.
 </summary>
@@ -75514,7 +76154,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_relabel_generic_usb_dev" lineno="4863">
+<interface name="dev_relabel_generic_usb_dev" lineno="4896">
 <summary>
 Relabel generic the USB devices.
 </summary>
@@ -75524,7 +76164,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_read_usbmon_dev" lineno="4881">
+<interface name="dev_read_usbmon_dev" lineno="4914">
 <summary>
 Read USB monitor devices.
 </summary>
@@ -75534,7 +76174,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_write_usbmon_dev" lineno="4899">
+<interface name="dev_write_usbmon_dev" lineno="4932">
 <summary>
 Write USB monitor devices.
 </summary>
@@ -75544,7 +76184,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_mount_usbfs" lineno="4917">
+<interface name="dev_mount_usbfs" lineno="4950">
 <summary>
 Mount a usbfs filesystem.
 </summary>
@@ -75554,7 +76194,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_associate_usbfs" lineno="4935">
+<interface name="dev_associate_usbfs" lineno="4968">
 <summary>
 Associate a file to a usbfs filesystem.
 </summary>
@@ -75564,7 +76204,7 @@ The type of the file to be associated to usbfs.
 </summary>
 </param>
 </interface>
-<interface name="dev_getattr_usbfs_dirs" lineno="4953">
+<interface name="dev_getattr_usbfs_dirs" lineno="4986">
 <summary>
 Get the attributes of a directory in the usb filesystem.
 </summary>
@@ -75574,7 +76214,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_dontaudit_getattr_usbfs_dirs" lineno="4972">
+<interface name="dev_dontaudit_getattr_usbfs_dirs" lineno="5005">
 <summary>
 Do not audit attempts to get the attributes
 of a directory in the usb filesystem.
@@ -75585,7 +76225,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="dev_search_usbfs" lineno="4990">
+<interface name="dev_search_usbfs" lineno="5023">
 <summary>
 Search the directory containing USB hardware information.
 </summary>
@@ -75595,7 +76235,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_list_usbfs" lineno="5008">
+<interface name="dev_list_usbfs" lineno="5041">
 <summary>
 Allow caller to get a list of usb hardware.
 </summary>
@@ -75605,7 +76245,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_setattr_usbfs_files" lineno="5029">
+<interface name="dev_setattr_usbfs_files" lineno="5062">
 <summary>
 Set the attributes of usbfs filesystem.
 </summary>
@@ -75615,7 +76255,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_read_usbfs" lineno="5049">
+<interface name="dev_read_usbfs" lineno="5082">
 <summary>
 Read USB hardware information using
 the usbfs filesystem interface.
@@ -75626,7 +76266,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_rw_usbfs" lineno="5069">
+<interface name="dev_rw_usbfs" lineno="5102">
 <summary>
 Allow caller to modify usb hardware configuration files.
 </summary>
@@ -75636,7 +76276,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_getattr_video_dev" lineno="5089">
+<interface name="dev_getattr_video_dev" lineno="5122">
 <summary>
 Get the attributes of video4linux devices.
 </summary>
@@ -75646,7 +76286,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_rw_userio_dev" lineno="5107">
+<interface name="dev_rw_userio_dev" lineno="5140">
 <summary>
 Read and write userio device.
 </summary>
@@ -75656,7 +76296,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_dontaudit_getattr_video_dev" lineno="5126">
+<interface name="dev_dontaudit_getattr_video_dev" lineno="5159">
 <summary>
 Do not audit attempts to get the attributes
 of video4linux device nodes.
@@ -75667,7 +76307,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="dev_setattr_video_dev" lineno="5144">
+<interface name="dev_setattr_video_dev" lineno="5177">
 <summary>
 Set the attributes of video4linux device nodes.
 </summary>
@@ -75677,7 +76317,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_dontaudit_setattr_video_dev" lineno="5163">
+<interface name="dev_dontaudit_setattr_video_dev" lineno="5196">
 <summary>
 Do not audit attempts to set the attributes
 of video4linux device nodes.
@@ -75688,7 +76328,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="dev_read_video_dev" lineno="5181">
+<interface name="dev_read_video_dev" lineno="5214">
 <summary>
 Read the video4linux devices.
 </summary>
@@ -75698,7 +76338,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_write_video_dev" lineno="5199">
+<interface name="dev_write_video_dev" lineno="5232">
 <summary>
 Write the video4linux devices.
 </summary>
@@ -75708,7 +76348,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_rw_vfio_dev" lineno="5217">
+<interface name="dev_rw_vfio_dev" lineno="5250">
 <summary>
 Read and write vfio devices.
 </summary>
@@ -75718,7 +76358,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_relabelfrom_vfio_dev" lineno="5235">
+<interface name="dev_relabelfrom_vfio_dev" lineno="5268">
 <summary>
 Relabel vfio devices.
 </summary>
@@ -75728,7 +76368,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_rw_vhost" lineno="5253">
+<interface name="dev_rw_vhost" lineno="5286">
 <summary>
 Allow read/write the vhost devices
 </summary>
@@ -75738,7 +76378,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_rw_vmware" lineno="5271">
+<interface name="dev_rw_vmware" lineno="5304">
 <summary>
 Read and write VMWare devices.
 </summary>
@@ -75748,7 +76388,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_rwx_vmware" lineno="5289">
+<interface name="dev_rwx_vmware" lineno="5322">
 <summary>
 Read, write, and mmap VMWare devices.
 </summary>
@@ -75758,7 +76398,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_read_watchdog" lineno="5308">
+<interface name="dev_read_watchdog" lineno="5341">
 <summary>
 Read from watchdog devices.
 </summary>
@@ -75768,7 +76408,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_write_watchdog" lineno="5326">
+<interface name="dev_write_watchdog" lineno="5359">
 <summary>
 Write to watchdog devices.
 </summary>
@@ -75778,7 +76418,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_read_wireless" lineno="5344">
+<interface name="dev_read_wireless" lineno="5377">
 <summary>
 Read the wireless device.
 </summary>
@@ -75788,7 +76428,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_rw_wireless" lineno="5362">
+<interface name="dev_rw_wireless" lineno="5395">
 <summary>
 Read and write the the wireless device.
 </summary>
@@ -75798,7 +76438,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_manage_wireless" lineno="5380">
+<interface name="dev_manage_wireless" lineno="5413">
 <summary>
 manage the wireless device.
 </summary>
@@ -75808,7 +76448,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_rw_xen" lineno="5398">
+<interface name="dev_rw_xen" lineno="5431">
 <summary>
 Read and write Xen devices.
 </summary>
@@ -75818,7 +76458,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_manage_xen" lineno="5417">
+<interface name="dev_manage_xen" lineno="5450">
 <summary>
 Create, read, write, and delete Xen devices.
 </summary>
@@ -75828,7 +76468,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_filetrans_xen" lineno="5441">
+<interface name="dev_filetrans_xen" lineno="5474">
 <summary>
 Automatic type transition to the type
 for xen device nodes when created in /dev.
@@ -75844,7 +76484,7 @@ The name of the object being created.
 </summary>
 </param>
 </interface>
-<interface name="dev_getattr_xserver_misc_dev" lineno="5459">
+<interface name="dev_getattr_xserver_misc_dev" lineno="5492">
 <summary>
 Get the attributes of X server miscellaneous devices.
 </summary>
@@ -75854,7 +76494,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_setattr_xserver_misc_dev" lineno="5477">
+<interface name="dev_setattr_xserver_misc_dev" lineno="5510">
 <summary>
 Set the attributes of X server miscellaneous devices.
 </summary>
@@ -75864,7 +76504,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_rw_xserver_misc" lineno="5495">
+<interface name="dev_rw_xserver_misc" lineno="5528">
 <summary>
 Read and write X server miscellaneous devices.
 </summary>
@@ -75874,7 +76514,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_map_xserver_misc" lineno="5513">
+<interface name="dev_map_xserver_misc" lineno="5546">
 <summary>
 Map X server miscellaneous devices.
 </summary>
@@ -75884,7 +76524,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_rw_zero" lineno="5531">
+<interface name="dev_rw_zero" lineno="5564">
 <summary>
 Read and write to the zero device (/dev/zero).
 </summary>
@@ -75894,7 +76534,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_rwx_zero" lineno="5549">
+<interface name="dev_rwx_zero" lineno="5582">
 <summary>
 Read, write, and execute the zero device (/dev/zero).
 </summary>
@@ -75904,7 +76544,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_execmod_zero" lineno="5568">
+<interface name="dev_execmod_zero" lineno="5601">
 <summary>
 Execmod the zero device (/dev/zero).
 </summary>
@@ -75914,7 +76554,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_create_zero_dev" lineno="5587">
+<interface name="dev_create_zero_dev" lineno="5620">
 <summary>
 Create the zero device (/dev/zero).
 </summary>
@@ -75924,7 +76564,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_read_cpu_online" lineno="5610">
+<interface name="dev_read_cpu_online" lineno="5643">
 <summary>
 Read cpu online hardware state information
 </summary>
@@ -75939,7 +76579,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_unconfined" lineno="5630">
+<interface name="dev_unconfined" lineno="5663">
 <summary>
 Unconfined access to devices.
 </summary>
@@ -75949,7 +76589,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_relabel_cpu_online" lineno="5650">
+<interface name="dev_relabel_cpu_online" lineno="5683">
 <summary>
 Relabel cpu online hardware state information.
 </summary>
@@ -75959,7 +76599,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dev_dontaudit_read_usbmon_dev" lineno="5669">
+<interface name="dev_dontaudit_read_usbmon_dev" lineno="5702">
 <summary>
 Dont audit attempts to read usbmon devices
 </summary>
@@ -83030,7 +83670,17 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_mounton_fusefs" lineno="2319">
+<interface name="fs_remount_fusefs" lineno="2319">
+<summary>
+Remount a FUSE filesystem.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="fs_mounton_fusefs" lineno="2337">
 <summary>
 Mounton a FUSEFS filesystem.
 </summary>
@@ -83040,7 +83690,43 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_search_fusefs" lineno="2339">
+<interface name="fs_fusefs_entry_type" lineno="2356">
+<summary>
+Make FUSEFS files an entrypoint for the
+specified domain.
+</summary>
+<param name="domain">
+<summary>
+The domain for which fusefs_t is an entrypoint.
+</summary>
+</param>
+</interface>
+<interface name="fs_fusefs_domtrans" lineno="2389">
+<summary>
+Execute FUSEFS files in a specified domain.
+</summary>
+<desc>
+<p>
+Execute FUSEFS files in a specified domain.
+</p>
+<p>
+No interprocess communication (signals, pipes,
+etc.) is provided by this interface since
+the domains are not owned by this module.
+</p>
+</desc>
+<param name="source_domain">
+<summary>
+Domain allowed to transition.
+</summary>
+</param>
+<param name="target_domain">
+<summary>
+Domain to transition to.
+</summary>
+</param>
+</interface>
+<interface name="fs_search_fusefs" lineno="2409">
 <summary>
 Search directories
 on a FUSEFS filesystem.
@@ -83052,7 +83738,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="fs_dontaudit_list_fusefs" lineno="2358">
+<interface name="fs_dontaudit_list_fusefs" lineno="2428">
 <summary>
 Do not audit attempts to list the contents
 of directories on a FUSEFS filesystem.
@@ -83063,7 +83749,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="fs_manage_fusefs_dirs" lineno="2378">
+<interface name="fs_manage_fusefs_dirs" lineno="2448">
 <summary>
 Create, read, write, and delete directories
 on a FUSEFS filesystem.
@@ -83075,7 +83761,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="fs_dontaudit_manage_fusefs_dirs" lineno="2398">
+<interface name="fs_dontaudit_manage_fusefs_dirs" lineno="2468">
 <summary>
 Do not audit attempts to create, read,
 write, and delete directories
@@ -83087,7 +83773,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="fs_read_fusefs_files" lineno="2417">
+<interface name="fs_read_fusefs_files" lineno="2487">
 <summary>
 Read, a FUSEFS filesystem.
 </summary>
@@ -83098,7 +83784,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="fs_exec_fusefs_files" lineno="2436">
+<interface name="fs_exec_fusefs_files" lineno="2506">
 <summary>
 Execute files on a FUSEFS filesystem.
 </summary>
@@ -83109,7 +83795,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="fs_manage_fusefs_files" lineno="2456">
+<interface name="fs_manage_fusefs_files" lineno="2526">
 <summary>
 Create, read, write, and delete files
 on a FUSEFS filesystem.
@@ -83121,7 +83807,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="fs_dontaudit_manage_fusefs_files" lineno="2476">
+<interface name="fs_dontaudit_manage_fusefs_files" lineno="2546">
 <summary>
 Do not audit attempts to create,
 read, write, and delete files
@@ -83133,7 +83819,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="fs_read_fusefs_symlinks" lineno="2494">
+<interface name="fs_read_fusefs_symlinks" lineno="2564">
 <summary>
 Read symbolic links on a FUSEFS filesystem.
 </summary>
@@ -83143,7 +83829,18 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_getattr_hugetlbfs" lineno="2514">
+<interface name="fs_manage_fusefs_symlinks" lineno="2584">
+<summary>
+Manage symlinks on a FUSEFS filesystem.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+<rolecap/>
+</interface>
+<interface name="fs_getattr_hugetlbfs" lineno="2603">
 <summary>
 Get the attributes of an hugetlbfs
 filesystem.
@@ -83154,7 +83851,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_list_hugetlbfs" lineno="2532">
+<interface name="fs_list_hugetlbfs" lineno="2621">
 <summary>
 List hugetlbfs.
 </summary>
@@ -83164,7 +83861,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_manage_hugetlbfs_dirs" lineno="2550">
+<interface name="fs_manage_hugetlbfs_dirs" lineno="2639">
 <summary>
 Manage hugetlbfs dirs.
 </summary>
@@ -83174,7 +83871,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_rw_inherited_hugetlbfs_files" lineno="2568">
+<interface name="fs_rw_inherited_hugetlbfs_files" lineno="2657">
 <summary>
 Read and write inherited hugetlbfs files.
 </summary>
@@ -83184,7 +83881,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_rw_hugetlbfs_files" lineno="2586">
+<interface name="fs_rw_hugetlbfs_files" lineno="2675">
 <summary>
 Read and write hugetlbfs files.
 </summary>
@@ -83194,7 +83891,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_mmap_rw_hugetlbfs_files" lineno="2604">
+<interface name="fs_mmap_rw_hugetlbfs_files" lineno="2693">
 <summary>
 Read, map and write hugetlbfs files.
 </summary>
@@ -83204,7 +83901,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_associate_hugetlbfs" lineno="2623">
+<interface name="fs_associate_hugetlbfs" lineno="2712">
 <summary>
 Allow the type to associate to hugetlbfs filesystems.
 </summary>
@@ -83214,7 +83911,7 @@ The type of the object to be associated.
 </summary>
 </param>
 </interface>
-<interface name="fs_search_inotifyfs" lineno="2641">
+<interface name="fs_search_inotifyfs" lineno="2730">
 <summary>
 Search inotifyfs filesystem.
 </summary>
@@ -83224,7 +83921,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_list_inotifyfs" lineno="2659">
+<interface name="fs_list_inotifyfs" lineno="2748">
 <summary>
 List inotifyfs filesystem.
 </summary>
@@ -83234,7 +83931,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_dontaudit_list_inotifyfs" lineno="2677">
+<interface name="fs_dontaudit_list_inotifyfs" lineno="2766">
 <summary>
 Dontaudit List inotifyfs filesystem.
 </summary>
@@ -83244,7 +83941,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="fs_hugetlbfs_filetrans" lineno="2711">
+<interface name="fs_hugetlbfs_filetrans" lineno="2800">
 <summary>
 Create an object in a hugetlbfs filesystem, with a private
 type using a type transition.
@@ -83270,7 +83967,7 @@ The name of the object being created.
 </summary>
 </param>
 </interface>
-<interface name="fs_mount_iso9660_fs" lineno="2731">
+<interface name="fs_mount_iso9660_fs" lineno="2820">
 <summary>
 Mount an iso9660 filesystem, which
 is usually used on CDs.
@@ -83281,7 +83978,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_remount_iso9660_fs" lineno="2751">
+<interface name="fs_remount_iso9660_fs" lineno="2840">
 <summary>
 Remount an iso9660 filesystem, which
 is usually used on CDs.  This allows
@@ -83293,7 +83990,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_relabelfrom_iso9660_fs" lineno="2770">
+<interface name="fs_relabelfrom_iso9660_fs" lineno="2859">
 <summary>
 Allow changing of the label of a
 filesystem with iso9660 type
@@ -83304,7 +84001,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_unmount_iso9660_fs" lineno="2789">
+<interface name="fs_unmount_iso9660_fs" lineno="2878">
 <summary>
 Unmount an iso9660 filesystem, which
 is usually used on CDs.
@@ -83315,7 +84012,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_getattr_iso9660_fs" lineno="2809">
+<interface name="fs_getattr_iso9660_fs" lineno="2898">
 <summary>
 Get the attributes of an iso9660
 filesystem, which is usually used on CDs.
@@ -83327,7 +84024,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="fs_getattr_iso9660_files" lineno="2828">
+<interface name="fs_getattr_iso9660_files" lineno="2917">
 <summary>
 Get the attributes of files on an iso9660
 filesystem, which is usually used on CDs.
@@ -83338,7 +84035,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_read_iso9660_files" lineno="2848">
+<interface name="fs_read_iso9660_files" lineno="2937">
 <summary>
 Read files on an iso9660 filesystem, which
 is usually used on CDs.
@@ -83349,7 +84046,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_mount_nfs" lineno="2868">
+<interface name="fs_mount_nfs" lineno="2957">
 <summary>
 Mount a NFS filesystem.
 </summary>
@@ -83359,7 +84056,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_remount_nfs" lineno="2887">
+<interface name="fs_remount_nfs" lineno="2976">
 <summary>
 Remount a NFS filesystem.  This allows
 some mount options to be changed.
@@ -83370,7 +84067,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_unmount_nfs" lineno="2905">
+<interface name="fs_unmount_nfs" lineno="2994">
 <summary>
 Unmount a NFS filesystem.
 </summary>
@@ -83380,7 +84077,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_getattr_nfs" lineno="2924">
+<interface name="fs_getattr_nfs" lineno="3013">
 <summary>
 Get the attributes of a NFS filesystem.
 </summary>
@@ -83391,7 +84088,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="fs_search_nfs" lineno="2942">
+<interface name="fs_search_nfs" lineno="3031">
 <summary>
 Search directories on a NFS filesystem.
 </summary>
@@ -83401,7 +84098,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_list_nfs" lineno="2960">
+<interface name="fs_list_nfs" lineno="3049">
 <summary>
 List NFS filesystem.
 </summary>
@@ -83411,7 +84108,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_dontaudit_list_nfs" lineno="2979">
+<interface name="fs_dontaudit_list_nfs" lineno="3068">
 <summary>
 Do not audit attempts to list the contents
 of directories on a NFS filesystem.
@@ -83422,7 +84119,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="fs_mounton_nfs" lineno="2997">
+<interface name="fs_mounton_nfs" lineno="3086">
 <summary>
 Mounton a NFS filesystem.
 </summary>
@@ -83432,7 +84129,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_read_nfs_files" lineno="3016">
+<interface name="fs_read_nfs_files" lineno="3105">
 <summary>
 Read files on a NFS filesystem.
 </summary>
@@ -83443,7 +84140,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="fs_dontaudit_read_nfs_files" lineno="3036">
+<interface name="fs_dontaudit_read_nfs_files" lineno="3125">
 <summary>
 Do not audit attempts to read
 files on a NFS filesystem.
@@ -83454,7 +84151,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="fs_write_nfs_files" lineno="3054">
+<interface name="fs_write_nfs_files" lineno="3143">
 <summary>
 Read files on a NFS filesystem.
 </summary>
@@ -83464,7 +84161,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_exec_nfs_files" lineno="3074">
+<interface name="fs_exec_nfs_files" lineno="3163">
 <summary>
 Execute files on a NFS filesystem.
 </summary>
@@ -83475,7 +84172,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="fs_append_nfs_files" lineno="3095">
+<interface name="fs_append_nfs_files" lineno="3184">
 <summary>
 Append files
 on a NFS filesystem.
@@ -83487,7 +84184,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="fs_dontaudit_append_nfs_files" lineno="3115">
+<interface name="fs_dontaudit_append_nfs_files" lineno="3204">
 <summary>
 dontaudit Append files
 on a NFS filesystem.
@@ -83499,7 +84196,7 @@ Domain to not audit.
 </param>
 <rolecap/>
 </interface>
-<interface name="fs_dontaudit_rw_nfs_files" lineno="3134">
+<interface name="fs_dontaudit_rw_nfs_files" lineno="3223">
 <summary>
 Do not audit attempts to read or
 write files on a NFS filesystem.
@@ -83510,7 +84207,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="fs_read_nfs_symlinks" lineno="3152">
+<interface name="fs_read_nfs_symlinks" lineno="3241">
 <summary>
 Read symbolic links on a NFS filesystem.
 </summary>
@@ -83520,7 +84217,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_dontaudit_read_nfs_symlinks" lineno="3171">
+<interface name="fs_dontaudit_read_nfs_symlinks" lineno="3260">
 <summary>
 Dontaudit read symbolic links on a NFS filesystem.
 </summary>
@@ -83530,7 +84227,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="fs_read_nfs_named_sockets" lineno="3189">
+<interface name="fs_read_nfs_named_sockets" lineno="3278">
 <summary>
 Read named sockets on a NFS filesystem.
 </summary>
@@ -83540,7 +84237,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_read_nfs_named_pipes" lineno="3208">
+<interface name="fs_read_nfs_named_pipes" lineno="3297">
 <summary>
 Read named pipes on a NFS network filesystem.
 </summary>
@@ -83551,7 +84248,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="fs_getattr_rpc_dirs" lineno="3227">
+<interface name="fs_getattr_rpc_dirs" lineno="3316">
 <summary>
 Get the attributes of directories of RPC
 file system pipes.
@@ -83562,7 +84259,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_search_rpc" lineno="3246">
+<interface name="fs_search_rpc" lineno="3335">
 <summary>
 Search directories of RPC file system pipes.
 </summary>
@@ -83572,7 +84269,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_search_removable" lineno="3264">
+<interface name="fs_search_removable" lineno="3353">
 <summary>
 Search removable storage directories.
 </summary>
@@ -83582,7 +84279,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_dontaudit_list_removable" lineno="3282">
+<interface name="fs_dontaudit_list_removable" lineno="3371">
 <summary>
 Do not audit attempts to list removable storage directories.
 </summary>
@@ -83592,7 +84289,7 @@ Domain not to audit.
 </summary>
 </param>
 </interface>
-<interface name="fs_read_removable_files" lineno="3300">
+<interface name="fs_read_removable_files" lineno="3389">
 <summary>
 Read removable storage files.
 </summary>
@@ -83602,7 +84299,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_dontaudit_read_removable_files" lineno="3318">
+<interface name="fs_dontaudit_read_removable_files" lineno="3407">
 <summary>
 Do not audit attempts to read removable storage files.
 </summary>
@@ -83612,7 +84309,7 @@ Domain not to audit.
 </summary>
 </param>
 </interface>
-<interface name="fs_dontaudit_write_removable_files" lineno="3336">
+<interface name="fs_dontaudit_write_removable_files" lineno="3425">
 <summary>
 Do not audit attempts to write removable storage files.
 </summary>
@@ -83622,7 +84319,7 @@ Domain not to audit.
 </summary>
 </param>
 </interface>
-<interface name="fs_read_removable_symlinks" lineno="3354">
+<interface name="fs_read_removable_symlinks" lineno="3443">
 <summary>
 Read removable storage symbolic links.
 </summary>
@@ -83632,7 +84329,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_read_removable_blk_files" lineno="3372">
+<interface name="fs_read_removable_blk_files" lineno="3461">
 <summary>
 Read block nodes on removable filesystems.
 </summary>
@@ -83642,7 +84339,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_rw_removable_blk_files" lineno="3391">
+<interface name="fs_rw_removable_blk_files" lineno="3480">
 <summary>
 Read and write block nodes on removable filesystems.
 </summary>
@@ -83652,7 +84349,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_list_rpc" lineno="3410">
+<interface name="fs_list_rpc" lineno="3499">
 <summary>
 Read directories of RPC file system pipes.
 </summary>
@@ -83662,7 +84359,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_read_rpc_files" lineno="3428">
+<interface name="fs_read_rpc_files" lineno="3517">
 <summary>
 Read files of RPC file system pipes.
 </summary>
@@ -83672,7 +84369,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_read_rpc_symlinks" lineno="3446">
+<interface name="fs_read_rpc_symlinks" lineno="3535">
 <summary>
 Read symbolic links of RPC file system pipes.
 </summary>
@@ -83682,7 +84379,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_read_rpc_sockets" lineno="3464">
+<interface name="fs_read_rpc_sockets" lineno="3553">
 <summary>
 Read sockets of RPC file system pipes.
 </summary>
@@ -83692,7 +84389,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_rw_rpc_sockets" lineno="3482">
+<interface name="fs_rw_rpc_sockets" lineno="3571">
 <summary>
 Read and write sockets of RPC file system pipes.
 </summary>
@@ -83702,7 +84399,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_manage_nfs_dirs" lineno="3502">
+<interface name="fs_manage_nfs_dirs" lineno="3591">
 <summary>
 Create, read, write, and delete directories
 on a NFS filesystem.
@@ -83714,7 +84411,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="fs_dontaudit_manage_nfs_dirs" lineno="3522">
+<interface name="fs_dontaudit_manage_nfs_dirs" lineno="3611">
 <summary>
 Do not audit attempts to create, read,
 write, and delete directories
@@ -83726,7 +84423,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="fs_manage_nfs_files" lineno="3542">
+<interface name="fs_manage_nfs_files" lineno="3631">
 <summary>
 Create, read, write, and delete files
 on a NFS filesystem.
@@ -83738,7 +84435,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="fs_dontaudit_manage_nfs_files" lineno="3562">
+<interface name="fs_dontaudit_manage_nfs_files" lineno="3651">
 <summary>
 Do not audit attempts to create,
 read, write, and delete files
@@ -83750,7 +84447,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="fs_manage_nfs_symlinks" lineno="3582">
+<interface name="fs_manage_nfs_symlinks" lineno="3671">
 <summary>
 Create, read, write, and delete symbolic links
 on a NFS network filesystem.
@@ -83762,7 +84459,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="fs_manage_nfs_named_pipes" lineno="3601">
+<interface name="fs_manage_nfs_named_pipes" lineno="3690">
 <summary>
 Create, read, write, and delete named pipes
 on a NFS filesystem.
@@ -83773,7 +84470,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_manage_nfs_named_sockets" lineno="3620">
+<interface name="fs_manage_nfs_named_sockets" lineno="3709">
 <summary>
 Create, read, write, and delete named sockets
 on a NFS filesystem.
@@ -83784,7 +84481,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_nfs_domtrans" lineno="3663">
+<interface name="fs_nfs_domtrans" lineno="3752">
 <summary>
 Execute a file on a NFS filesystem
 in the specified domain.
@@ -83819,7 +84516,7 @@ The type of the new process.
 </summary>
 </param>
 </interface>
-<interface name="fs_mount_nfsd_fs" lineno="3682">
+<interface name="fs_mount_nfsd_fs" lineno="3771">
 <summary>
 Mount a NFS server pseudo filesystem.
 </summary>
@@ -83829,7 +84526,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_remount_nfsd_fs" lineno="3701">
+<interface name="fs_remount_nfsd_fs" lineno="3790">
 <summary>
 Mount a NFS server pseudo filesystem.
 This allows some mount options to be changed.
@@ -83840,7 +84537,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_unmount_nfsd_fs" lineno="3719">
+<interface name="fs_unmount_nfsd_fs" lineno="3808">
 <summary>
 Unmount a NFS server pseudo filesystem.
 </summary>
@@ -83850,7 +84547,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_getattr_nfsd_fs" lineno="3738">
+<interface name="fs_getattr_nfsd_fs" lineno="3827">
 <summary>
 Get the attributes of a NFS server
 pseudo filesystem.
@@ -83861,7 +84558,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_search_nfsd_fs" lineno="3756">
+<interface name="fs_search_nfsd_fs" lineno="3845">
 <summary>
 Search NFS server directories.
 </summary>
@@ -83871,7 +84568,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_list_nfsd_fs" lineno="3774">
+<interface name="fs_list_nfsd_fs" lineno="3863">
 <summary>
 List NFS server directories.
 </summary>
@@ -83881,7 +84578,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_watch_nfsd_dirs" lineno="3792">
+<interface name="fs_watch_nfsd_dirs" lineno="3881">
 <summary>
 Watch NFS server directories.
 </summary>
@@ -83891,7 +84588,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_getattr_nfsd_files" lineno="3810">
+<interface name="fs_getattr_nfsd_files" lineno="3899">
 <summary>
 Getattr files on an nfsd filesystem
 </summary>
@@ -83901,7 +84598,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_rw_nfsd_fs" lineno="3828">
+<interface name="fs_rw_nfsd_fs" lineno="3917">
 <summary>
 Read and write NFS server files.
 </summary>
@@ -83911,7 +84608,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_read_nsfs_files" lineno="3846">
+<interface name="fs_read_nsfs_files" lineno="3935">
 <summary>
 Read nsfs inodes (e.g. /proc/pid/ns/uts)
 </summary>
@@ -83921,7 +84618,17 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_unmount_nsfs" lineno="3864">
+<interface name="fs_getattr_nsfs" lineno="3953">
+<summary>
+Get the attributes of an nsfs filesystem.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="fs_unmount_nsfs" lineno="3971">
 <summary>
 Unmount an nsfs filesystem.
 </summary>
@@ -83931,7 +84638,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_getattr_pstorefs" lineno="3882">
+<interface name="fs_getattr_pstorefs" lineno="3989">
 <summary>
 Get the attributes of a pstore filesystem.
 </summary>
@@ -83941,7 +84648,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_getattr_pstore_dirs" lineno="3901">
+<interface name="fs_getattr_pstore_dirs" lineno="4008">
 <summary>
 Get the attributes of directories
 of a pstore filesystem.
@@ -83952,7 +84659,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_create_pstore_dirs" lineno="3920">
+<interface name="fs_create_pstore_dirs" lineno="4027">
 <summary>
 Create pstore directories.
 </summary>
@@ -83962,7 +84669,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_relabel_pstore_dirs" lineno="3939">
+<interface name="fs_relabel_pstore_dirs" lineno="4046">
 <summary>
 Relabel to/from pstore_t directories.
 </summary>
@@ -83972,7 +84679,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_list_pstore_dirs" lineno="3958">
+<interface name="fs_list_pstore_dirs" lineno="4065">
 <summary>
 List the directories
 of a pstore filesystem.
@@ -83983,7 +84690,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_read_pstore_files" lineno="3977">
+<interface name="fs_read_pstore_files" lineno="4084">
 <summary>
 Read pstore_t files
 </summary>
@@ -83993,7 +84700,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_delete_pstore_files" lineno="3996">
+<interface name="fs_delete_pstore_files" lineno="4103">
 <summary>
 Delete the files
 of a pstore filesystem.
@@ -84004,7 +84711,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_associate_ramfs" lineno="4015">
+<interface name="fs_associate_ramfs" lineno="4122">
 <summary>
 Allow the type to associate to ramfs filesystems.
 </summary>
@@ -84014,7 +84721,7 @@ The type of the object to be associated.
 </summary>
 </param>
 </interface>
-<interface name="fs_mount_ramfs" lineno="4033">
+<interface name="fs_mount_ramfs" lineno="4140">
 <summary>
 Mount a RAM filesystem.
 </summary>
@@ -84024,7 +84731,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_remount_ramfs" lineno="4052">
+<interface name="fs_remount_ramfs" lineno="4159">
 <summary>
 Remount a RAM filesystem.  This allows
 some mount options to be changed.
@@ -84035,7 +84742,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_unmount_ramfs" lineno="4070">
+<interface name="fs_unmount_ramfs" lineno="4177">
 <summary>
 Unmount a RAM filesystem.
 </summary>
@@ -84045,7 +84752,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_getattr_ramfs" lineno="4088">
+<interface name="fs_getattr_ramfs" lineno="4195">
 <summary>
 Get the attributes of a RAM filesystem.
 </summary>
@@ -84055,7 +84762,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_search_ramfs" lineno="4106">
+<interface name="fs_search_ramfs" lineno="4213">
 <summary>
 Search directories on a ramfs
 </summary>
@@ -84065,7 +84772,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_dontaudit_search_ramfs" lineno="4124">
+<interface name="fs_dontaudit_search_ramfs" lineno="4231">
 <summary>
 Dontaudit Search directories on a ramfs
 </summary>
@@ -84075,7 +84782,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="fs_manage_ramfs_dirs" lineno="4143">
+<interface name="fs_manage_ramfs_dirs" lineno="4250">
 <summary>
 Create, read, write, and delete
 directories on a ramfs.
@@ -84086,7 +84793,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_dontaudit_read_ramfs_files" lineno="4161">
+<interface name="fs_dontaudit_read_ramfs_files" lineno="4268">
 <summary>
 Dontaudit read on a ramfs files.
 </summary>
@@ -84096,7 +84803,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="fs_dontaudit_read_ramfs_pipes" lineno="4179">
+<interface name="fs_dontaudit_read_ramfs_pipes" lineno="4286">
 <summary>
 Dontaudit read on a ramfs fifo_files.
 </summary>
@@ -84106,7 +84813,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="fs_manage_ramfs_files" lineno="4198">
+<interface name="fs_manage_ramfs_files" lineno="4305">
 <summary>
 Create, read, write, and delete
 files on a ramfs filesystem.
@@ -84117,7 +84824,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_write_ramfs_pipes" lineno="4216">
+<interface name="fs_write_ramfs_pipes" lineno="4323">
 <summary>
 Write to named pipe on a ramfs filesystem.
 </summary>
@@ -84127,7 +84834,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_dontaudit_write_ramfs_pipes" lineno="4235">
+<interface name="fs_dontaudit_write_ramfs_pipes" lineno="4342">
 <summary>
 Do not audit attempts to write to named
 pipes on a ramfs filesystem.
@@ -84138,7 +84845,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="fs_rw_ramfs_pipes" lineno="4253">
+<interface name="fs_rw_ramfs_pipes" lineno="4360">
 <summary>
 Read and write a named pipe on a ramfs filesystem.
 </summary>
@@ -84148,7 +84855,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_manage_ramfs_pipes" lineno="4272">
+<interface name="fs_manage_ramfs_pipes" lineno="4379">
 <summary>
 Create, read, write, and delete
 named pipes on a ramfs filesystem.
@@ -84159,7 +84866,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_write_ramfs_sockets" lineno="4290">
+<interface name="fs_write_ramfs_sockets" lineno="4397">
 <summary>
 Write to named socket on a ramfs filesystem.
 </summary>
@@ -84169,7 +84876,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_manage_ramfs_sockets" lineno="4309">
+<interface name="fs_manage_ramfs_sockets" lineno="4416">
 <summary>
 Create, read, write, and delete
 named sockets on a ramfs filesystem.
@@ -84180,7 +84887,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_mount_romfs" lineno="4327">
+<interface name="fs_mount_romfs" lineno="4434">
 <summary>
 Mount a ROM filesystem.
 </summary>
@@ -84190,7 +84897,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_remount_romfs" lineno="4346">
+<interface name="fs_remount_romfs" lineno="4453">
 <summary>
 Remount a ROM filesystem.  This allows
 some mount options to be changed.
@@ -84201,7 +84908,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_unmount_romfs" lineno="4364">
+<interface name="fs_unmount_romfs" lineno="4471">
 <summary>
 Unmount a ROM filesystem.
 </summary>
@@ -84211,7 +84918,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_getattr_romfs" lineno="4383">
+<interface name="fs_getattr_romfs" lineno="4490">
 <summary>
 Get the attributes of a ROM
 filesystem.
@@ -84222,7 +84929,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_mount_rpc_pipefs" lineno="4401">
+<interface name="fs_mount_rpc_pipefs" lineno="4508">
 <summary>
 Mount a RPC pipe filesystem.
 </summary>
@@ -84232,7 +84939,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_remount_rpc_pipefs" lineno="4420">
+<interface name="fs_remount_rpc_pipefs" lineno="4527">
 <summary>
 Remount a RPC pipe filesystem.  This
 allows some mount option to be changed.
@@ -84243,7 +84950,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_unmount_rpc_pipefs" lineno="4438">
+<interface name="fs_unmount_rpc_pipefs" lineno="4545">
 <summary>
 Unmount a RPC pipe filesystem.
 </summary>
@@ -84253,7 +84960,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_getattr_rpc_pipefs" lineno="4457">
+<interface name="fs_getattr_rpc_pipefs" lineno="4564">
 <summary>
 Get the attributes of a RPC pipe
 filesystem.
@@ -84264,7 +84971,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_rw_rpc_named_pipes" lineno="4475">
+<interface name="fs_rw_rpc_named_pipes" lineno="4582">
 <summary>
 Read and write RPC pipe filesystem named pipes.
 </summary>
@@ -84274,7 +84981,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_mount_tmpfs" lineno="4493">
+<interface name="fs_mount_tmpfs" lineno="4600">
 <summary>
 Mount a tmpfs filesystem.
 </summary>
@@ -84284,7 +84991,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_remount_tmpfs" lineno="4511">
+<interface name="fs_remount_tmpfs" lineno="4618">
 <summary>
 Remount a tmpfs filesystem.
 </summary>
@@ -84294,7 +85001,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_unmount_tmpfs" lineno="4529">
+<interface name="fs_unmount_tmpfs" lineno="4636">
 <summary>
 Unmount a tmpfs filesystem.
 </summary>
@@ -84304,7 +85011,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_dontaudit_getattr_tmpfs" lineno="4547">
+<interface name="fs_dontaudit_getattr_tmpfs" lineno="4654">
 <summary>
 Do not audit getting the attributes of a tmpfs filesystem
 </summary>
@@ -84314,7 +85021,7 @@ Domain to not audit
 </summary>
 </param>
 </interface>
-<interface name="fs_getattr_tmpfs" lineno="4567">
+<interface name="fs_getattr_tmpfs" lineno="4674">
 <summary>
 Get the attributes of a tmpfs
 filesystem.
@@ -84326,7 +85033,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="fs_associate_tmpfs" lineno="4585">
+<interface name="fs_associate_tmpfs" lineno="4692">
 <summary>
 Allow the type to associate to tmpfs filesystems.
 </summary>
@@ -84336,7 +85043,7 @@ The type of the object to be associated.
 </summary>
 </param>
 </interface>
-<interface name="fs_relabelfrom_tmpfs" lineno="4603">
+<interface name="fs_relabelfrom_tmpfs" lineno="4710">
 <summary>
 Relabel from tmpfs filesystem.
 </summary>
@@ -84346,7 +85053,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_getattr_tmpfs_dirs" lineno="4621">
+<interface name="fs_getattr_tmpfs_dirs" lineno="4728">
 <summary>
 Get the attributes of tmpfs directories.
 </summary>
@@ -84356,7 +85063,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_dontaudit_getattr_tmpfs_dirs" lineno="4640">
+<interface name="fs_dontaudit_getattr_tmpfs_dirs" lineno="4747">
 <summary>
 Do not audit attempts to get the attributes
 of tmpfs directories.
@@ -84367,7 +85074,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="fs_mounton_tmpfs" lineno="4658">
+<interface name="fs_mounton_tmpfs" lineno="4765">
 <summary>
 Mount on tmpfs directories.
 </summary>
@@ -84377,7 +85084,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_mounton_tmpfs_files" lineno="4676">
+<interface name="fs_mounton_tmpfs_files" lineno="4783">
 <summary>
 Mount on tmpfs files.
 </summary>
@@ -84387,7 +85094,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_setattr_tmpfs_dirs" lineno="4694">
+<interface name="fs_setattr_tmpfs_dirs" lineno="4801">
 <summary>
 Set the attributes of tmpfs directories.
 </summary>
@@ -84397,7 +85104,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_search_tmpfs" lineno="4712">
+<interface name="fs_search_tmpfs" lineno="4819">
 <summary>
 Search tmpfs directories.
 </summary>
@@ -84407,7 +85114,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_list_tmpfs" lineno="4730">
+<interface name="fs_list_tmpfs" lineno="4837">
 <summary>
 List the contents of generic tmpfs directories.
 </summary>
@@ -84417,7 +85124,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_dontaudit_list_tmpfs" lineno="4749">
+<interface name="fs_dontaudit_list_tmpfs" lineno="4856">
 <summary>
 Do not audit attempts to list the
 contents of generic tmpfs directories.
@@ -84428,7 +85135,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="fs_manage_tmpfs_dirs" lineno="4768">
+<interface name="fs_manage_tmpfs_dirs" lineno="4875">
 <summary>
 Create, read, write, and delete
 tmpfs directories
@@ -84439,7 +85146,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_dontaudit_write_tmpfs_dirs" lineno="4787">
+<interface name="fs_dontaudit_write_tmpfs_dirs" lineno="4894">
 <summary>
 Do not audit attempts to write
 tmpfs directories
@@ -84450,7 +85157,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="fs_relabelfrom_tmpfs_dirs" lineno="4805">
+<interface name="fs_relabelfrom_tmpfs_dirs" lineno="4912">
 <summary>
 Relabel from tmpfs_t dir
 </summary>
@@ -84460,7 +85167,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_relabel_tmpfs_dirs" lineno="4823">
+<interface name="fs_relabel_tmpfs_dirs" lineno="4930">
 <summary>
 Relabel directory on tmpfs filesystems.
 </summary>
@@ -84470,7 +85177,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_tmpfs_filetrans" lineno="4856">
+<interface name="fs_tmpfs_filetrans" lineno="4963">
 <summary>
 Create an object in a tmpfs filesystem, with a private
 type using a type transition.
@@ -84496,7 +85203,7 @@ The name of the object being created.
 </summary>
 </param>
 </interface>
-<interface name="fs_dontaudit_getattr_tmpfs_files" lineno="4876">
+<interface name="fs_dontaudit_getattr_tmpfs_files" lineno="4983">
 <summary>
 Do not audit attempts to getattr
 generic tmpfs files.
@@ -84507,7 +85214,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="fs_dontaudit_rw_tmpfs_files" lineno="4895">
+<interface name="fs_dontaudit_rw_tmpfs_files" lineno="5002">
 <summary>
 Do not audit attempts to read or write
 generic tmpfs files.
@@ -84518,7 +85225,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="fs_delete_tmpfs_symlinks" lineno="4913">
+<interface name="fs_delete_tmpfs_symlinks" lineno="5020">
 <summary>
 Delete tmpfs symbolic links.
 </summary>
@@ -84528,7 +85235,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_manage_auto_mountpoints" lineno="4932">
+<interface name="fs_manage_auto_mountpoints" lineno="5039">
 <summary>
 Create, read, write, and delete
 auto moutpoints.
@@ -84539,7 +85246,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_read_tmpfs_files" lineno="4950">
+<interface name="fs_read_tmpfs_files" lineno="5057">
 <summary>
 Read generic tmpfs files.
 </summary>
@@ -84549,7 +85256,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_rw_tmpfs_files" lineno="4968">
+<interface name="fs_rw_tmpfs_files" lineno="5075">
 <summary>
 Read and write generic tmpfs files.
 </summary>
@@ -84559,7 +85266,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_relabel_tmpfs_files" lineno="4986">
+<interface name="fs_relabel_tmpfs_files" lineno="5093">
 <summary>
 Relabel files on tmpfs filesystems.
 </summary>
@@ -84569,7 +85276,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_read_tmpfs_symlinks" lineno="5004">
+<interface name="fs_read_tmpfs_symlinks" lineno="5111">
 <summary>
 Read tmpfs link files.
 </summary>
@@ -84579,7 +85286,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_relabelfrom_tmpfs_sockets" lineno="5022">
+<interface name="fs_relabelfrom_tmpfs_sockets" lineno="5129">
 <summary>
 Relabelfrom socket files on tmpfs filesystems.
 </summary>
@@ -84589,7 +85296,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_relabelfrom_tmpfs_symlinks" lineno="5040">
+<interface name="fs_relabelfrom_tmpfs_symlinks" lineno="5147">
 <summary>
 Relabelfrom tmpfs link files.
 </summary>
@@ -84599,7 +85306,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_rw_tmpfs_chr_files" lineno="5058">
+<interface name="fs_rw_tmpfs_chr_files" lineno="5165">
 <summary>
 Read and write character nodes on tmpfs filesystems.
 </summary>
@@ -84609,7 +85316,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_dontaudit_use_tmpfs_chr_dev" lineno="5077">
+<interface name="fs_dontaudit_use_tmpfs_chr_dev" lineno="5184">
 <summary>
 dontaudit Read and write character nodes on tmpfs filesystems.
 </summary>
@@ -84619,7 +85326,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="fs_relabel_tmpfs_chr_files" lineno="5096">
+<interface name="fs_relabel_tmpfs_chr_files" lineno="5203">
 <summary>
 Relabel character nodes on tmpfs filesystems.
 </summary>
@@ -84629,7 +85336,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_relabel_tmpfs_chr_file" lineno="5115">
+<interface name="fs_relabel_tmpfs_chr_file" lineno="5222">
 <summary>
 Relabel character nodes on tmpfs filesystems.
 </summary>
@@ -84639,7 +85346,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_rw_tmpfs_blk_files" lineno="5130">
+<interface name="fs_rw_tmpfs_blk_files" lineno="5237">
 <summary>
 Read and write block nodes on tmpfs filesystems.
 </summary>
@@ -84649,7 +85356,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_relabel_tmpfs_blk_files" lineno="5149">
+<interface name="fs_relabel_tmpfs_blk_files" lineno="5256">
 <summary>
 Relabel block nodes on tmpfs filesystems.
 </summary>
@@ -84659,7 +85366,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_relabel_tmpfs_blk_file" lineno="5168">
+<interface name="fs_relabel_tmpfs_blk_file" lineno="5275">
 <summary>
 Relabel block nodes on tmpfs filesystems.
 </summary>
@@ -84669,7 +85376,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_relabel_tmpfs_fifo_files" lineno="5183">
+<interface name="fs_relabel_tmpfs_fifo_files" lineno="5290">
 <summary>
 Relabel named pipes on tmpfs filesystems.
 </summary>
@@ -84679,7 +85386,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_manage_tmpfs_files" lineno="5203">
+<interface name="fs_manage_tmpfs_files" lineno="5310">
 <summary>
 Read and write, create and delete generic
 files on tmpfs filesystems.
@@ -84690,7 +85397,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_manage_tmpfs_symlinks" lineno="5222">
+<interface name="fs_manage_tmpfs_symlinks" lineno="5329">
 <summary>
 Read and write, create and delete symbolic
 links on tmpfs filesystems.
@@ -84701,7 +85408,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_manage_tmpfs_sockets" lineno="5241">
+<interface name="fs_manage_tmpfs_sockets" lineno="5348">
 <summary>
 Read and write, create and delete socket
 files on tmpfs filesystems.
@@ -84712,7 +85419,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_manage_tmpfs_chr_files" lineno="5260">
+<interface name="fs_manage_tmpfs_chr_files" lineno="5367">
 <summary>
 Read and write, create and delete character
 nodes on tmpfs filesystems.
@@ -84723,7 +85430,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_manage_tmpfs_blk_files" lineno="5279">
+<interface name="fs_manage_tmpfs_blk_files" lineno="5386">
 <summary>
 Read and write, create and delete block nodes
 on tmpfs filesystems.
@@ -84734,7 +85441,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_getattr_tracefs" lineno="5297">
+<interface name="fs_getattr_tracefs" lineno="5404">
 <summary>
 Get the attributes of a trace filesystem.
 </summary>
@@ -84744,7 +85451,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_getattr_tracefs_dirs" lineno="5315">
+<interface name="fs_getattr_tracefs_dirs" lineno="5422">
 <summary>
 Get attributes of dirs on tracefs filesystem.
 </summary>
@@ -84754,7 +85461,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_search_tracefs" lineno="5333">
+<interface name="fs_search_tracefs" lineno="5440">
 <summary>
 search directories on a tracefs filesystem
 </summary>
@@ -84764,7 +85471,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_getattr_tracefs_files" lineno="5352">
+<interface name="fs_getattr_tracefs_files" lineno="5459">
 <summary>
 Get the attributes of files
 on a trace filesystem.
@@ -84775,7 +85482,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_mount_xenfs" lineno="5370">
+<interface name="fs_mount_xenfs" lineno="5477">
 <summary>
 Mount a XENFS filesystem.
 </summary>
@@ -84785,7 +85492,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_search_xenfs" lineno="5388">
+<interface name="fs_search_xenfs" lineno="5495">
 <summary>
 Search the XENFS filesystem.
 </summary>
@@ -84795,7 +85502,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_manage_xenfs_dirs" lineno="5408">
+<interface name="fs_manage_xenfs_dirs" lineno="5515">
 <summary>
 Create, read, write, and delete directories
 on a XENFS filesystem.
@@ -84807,7 +85514,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="fs_dontaudit_manage_xenfs_dirs" lineno="5428">
+<interface name="fs_dontaudit_manage_xenfs_dirs" lineno="5535">
 <summary>
 Do not audit attempts to create, read,
 write, and delete directories
@@ -84819,7 +85526,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="fs_manage_xenfs_files" lineno="5448">
+<interface name="fs_manage_xenfs_files" lineno="5555">
 <summary>
 Create, read, write, and delete files
 on a XENFS filesystem.
@@ -84831,7 +85538,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="fs_mmap_xenfs_files" lineno="5466">
+<interface name="fs_mmap_xenfs_files" lineno="5573">
 <summary>
 Map files a XENFS filesystem.
 </summary>
@@ -84841,7 +85548,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_dontaudit_manage_xenfs_files" lineno="5486">
+<interface name="fs_dontaudit_manage_xenfs_files" lineno="5593">
 <summary>
 Do not audit attempts to create,
 read, write, and delete files
@@ -84853,7 +85560,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="fs_mount_all_fs" lineno="5504">
+<interface name="fs_mount_all_fs" lineno="5611">
 <summary>
 Mount all filesystems.
 </summary>
@@ -84863,7 +85570,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_remount_all_fs" lineno="5523">
+<interface name="fs_remount_all_fs" lineno="5630">
 <summary>
 Remount all filesystems.  This
 allows some mount options to be changed.
@@ -84874,7 +85581,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_unmount_all_fs" lineno="5541">
+<interface name="fs_unmount_all_fs" lineno="5648">
 <summary>
 Unmount all filesystems.
 </summary>
@@ -84884,7 +85591,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_getattr_all_fs" lineno="5573">
+<interface name="fs_getattr_all_fs" lineno="5680">
 <summary>
 Get the attributes of all filesystems.
 </summary>
@@ -84908,7 +85615,7 @@ Domain allowed access.
 <infoflow type="read" weight="5"/>
 <rolecap/>
 </interface>
-<interface name="fs_dontaudit_getattr_all_fs" lineno="5593">
+<interface name="fs_dontaudit_getattr_all_fs" lineno="5700">
 <summary>
 Do not audit attempts to get the attributes
 all filesystems.
@@ -84919,7 +85626,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="fs_get_all_fs_quotas" lineno="5612">
+<interface name="fs_get_all_fs_quotas" lineno="5719">
 <summary>
 Get the quotas of all filesystems.
 </summary>
@@ -84930,7 +85637,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="fs_set_all_quotas" lineno="5631">
+<interface name="fs_set_all_quotas" lineno="5738">
 <summary>
 Set the quotas of all filesystems.
 </summary>
@@ -84941,7 +85648,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="fs_relabelfrom_all_fs" lineno="5649">
+<interface name="fs_relabelfrom_all_fs" lineno="5756">
 <summary>
 Relabelfrom all filesystems.
 </summary>
@@ -84951,7 +85658,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_getattr_all_dirs" lineno="5668">
+<interface name="fs_getattr_all_dirs" lineno="5775">
 <summary>
 Get the attributes of all directories
 with a filesystem type.
@@ -84962,7 +85669,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_search_all" lineno="5686">
+<interface name="fs_search_all" lineno="5793">
 <summary>
 Search all directories with a filesystem type.
 </summary>
@@ -84972,7 +85679,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_list_all" lineno="5704">
+<interface name="fs_list_all" lineno="5811">
 <summary>
 List all directories with a filesystem type.
 </summary>
@@ -84982,7 +85689,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_getattr_all_files" lineno="5723">
+<interface name="fs_getattr_all_files" lineno="5830">
 <summary>
 Get the attributes of all files with
 a filesystem type.
@@ -84993,7 +85700,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_dontaudit_getattr_all_files" lineno="5742">
+<interface name="fs_dontaudit_getattr_all_files" lineno="5849">
 <summary>
 Do not audit attempts to get the attributes
 of all files with a filesystem type.
@@ -85004,7 +85711,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="fs_getattr_all_symlinks" lineno="5761">
+<interface name="fs_getattr_all_symlinks" lineno="5868">
 <summary>
 Get the attributes of all symbolic links with
 a filesystem type.
@@ -85015,7 +85722,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_dontaudit_getattr_all_symlinks" lineno="5780">
+<interface name="fs_dontaudit_getattr_all_symlinks" lineno="5887">
 <summary>
 Do not audit attempts to get the attributes
 of all symbolic links with a filesystem type.
@@ -85026,7 +85733,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="fs_getattr_all_pipes" lineno="5799">
+<interface name="fs_getattr_all_pipes" lineno="5906">
 <summary>
 Get the attributes of all named pipes with
 a filesystem type.
@@ -85037,7 +85744,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_dontaudit_getattr_all_pipes" lineno="5818">
+<interface name="fs_dontaudit_getattr_all_pipes" lineno="5925">
 <summary>
 Do not audit attempts to get the attributes
 of all named pipes with a filesystem type.
@@ -85048,7 +85755,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="fs_getattr_all_sockets" lineno="5837">
+<interface name="fs_getattr_all_sockets" lineno="5944">
 <summary>
 Get the attributes of all named sockets with
 a filesystem type.
@@ -85059,7 +85766,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_dontaudit_getattr_all_sockets" lineno="5856">
+<interface name="fs_dontaudit_getattr_all_sockets" lineno="5963">
 <summary>
 Do not audit attempts to get the attributes
 of all named sockets with a filesystem type.
@@ -85070,7 +85777,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="fs_getattr_all_blk_files" lineno="5875">
+<interface name="fs_getattr_all_blk_files" lineno="5982">
 <summary>
 Get the attributes of all block device nodes with
 a filesystem type.
@@ -85081,7 +85788,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_getattr_all_chr_files" lineno="5894">
+<interface name="fs_getattr_all_chr_files" lineno="6001">
 <summary>
 Get the attributes of all character device nodes with
 a filesystem type.
@@ -85092,7 +85799,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="fs_unconfined" lineno="5912">
+<interface name="fs_unconfined" lineno="6019">
 <summary>
 Unconfined access to filesystems
 </summary>
@@ -85643,7 +86350,7 @@ Domain to not audit.
 </interface>
 <interface name="kernel_mounton_proc" lineno="960">
 <summary>
-Mount on proc directories.
+Mount on proc directories.  (Deprecated)
 </summary>
 <param name="domain">
 <summary>
@@ -85652,7 +86359,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="kernel_dontaudit_setattr_proc_dirs" lineno="979">
+<interface name="kernel_dontaudit_setattr_proc_dirs" lineno="976">
 <summary>
 Do not audit attempts to set the
 attributes of directories in /proc.
@@ -85663,7 +86370,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="kernel_search_proc" lineno="997">
+<interface name="kernel_search_proc" lineno="994">
 <summary>
 Search directories in /proc.
 </summary>
@@ -85673,7 +86380,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="kernel_list_proc" lineno="1015">
+<interface name="kernel_list_proc" lineno="1012">
 <summary>
 List the contents of directories in /proc.
 </summary>
@@ -85683,7 +86390,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="kernel_dontaudit_list_proc" lineno="1034">
+<interface name="kernel_dontaudit_list_proc" lineno="1031">
 <summary>
 Do not audit attempts to list the
 contents of directories in /proc.
@@ -85694,7 +86401,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="kernel_dontaudit_write_proc_dirs" lineno="1053">
+<interface name="kernel_dontaudit_write_proc_dirs" lineno="1050">
 <summary>
 Do not audit attempts to write the
 directories in /proc.
@@ -85705,9 +86412,9 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="kernel_mounton_proc_dirs" lineno="1071">
+<interface name="kernel_mounton_proc_dirs" lineno="1068">
 <summary>
-Mount the directories in /proc.
+Mount on the directories in /proc.
 </summary>
 <param name="domain">
 <summary>
@@ -85715,7 +86422,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="kernel_getattr_proc_files" lineno="1089">
+<interface name="kernel_getattr_proc_files" lineno="1086">
 <summary>
 Get the attributes of files in /proc.
 </summary>
@@ -85725,7 +86432,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="kernel_read_proc_symlinks" lineno="1116">
+<interface name="kernel_read_proc_symlinks" lineno="1113">
 <summary>
 Read generic symbolic links in /proc.
 </summary>
@@ -85744,7 +86451,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="kernel_read_system_state" lineno="1155">
+<interface name="kernel_read_system_state" lineno="1152">
 <summary>
 Allows caller to read system state information in /proc.
 </summary>
@@ -85775,7 +86482,7 @@ Domain allowed access.
 <infoflow type="read" weight="10"/>
 <rolecap/>
 </interface>
-<interface name="kernel_write_proc_files" lineno="1181">
+<interface name="kernel_write_proc_files" lineno="1178">
 <summary>
 Write to generic proc entries.
 </summary>
@@ -85786,7 +86493,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="kernel_dontaudit_read_system_state" lineno="1200">
+<interface name="kernel_dontaudit_read_system_state" lineno="1197">
 <summary>
 Do not audit attempts by caller to
 read system state information in proc.
@@ -85797,7 +86504,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="kernel_dontaudit_read_proc_symlinks" lineno="1219">
+<interface name="kernel_dontaudit_read_proc_symlinks" lineno="1216">
 <summary>
 Do not audit attempts by caller to
 read symbolic links in proc.
@@ -85808,7 +86515,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="kernel_rw_afs_state" lineno="1238">
+<interface name="kernel_rw_afs_state" lineno="1235">
 <summary>
 Allow caller to read and write state information for AFS.
 </summary>
@@ -85819,7 +86526,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="kernel_read_software_raid_state" lineno="1258">
+<interface name="kernel_read_software_raid_state" lineno="1255">
 <summary>
 Allow caller to read the state information for software raid.
 </summary>
@@ -85830,7 +86537,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="kernel_rw_software_raid_state" lineno="1278">
+<interface name="kernel_rw_software_raid_state" lineno="1275">
 <summary>
 Allow caller to read and set the state information for software raid.
 </summary>
@@ -85840,7 +86547,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="kernel_getattr_core_if" lineno="1298">
+<interface name="kernel_getattr_core_if" lineno="1295">
 <summary>
 Allows caller to get attributes of core kernel interface.
 </summary>
@@ -85850,7 +86557,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="kernel_dontaudit_getattr_core_if" lineno="1319">
+<interface name="kernel_dontaudit_getattr_core_if" lineno="1316">
 <summary>
 Do not audit attempts to get the attributes of
 core kernel interfaces.
@@ -85861,7 +86568,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="kernel_read_core_if" lineno="1337">
+<interface name="kernel_read_core_if" lineno="1334">
 <summary>
 Allows caller to read the core kernel interface.
 </summary>
@@ -85871,7 +86578,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="kernel_read_messages" lineno="1361">
+<interface name="kernel_read_messages" lineno="1358">
 <summary>
 Allow caller to read kernel messages
 using the /proc/kmsg interface.
@@ -85882,7 +86589,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="kernel_getattr_message_if" lineno="1383">
+<interface name="kernel_getattr_message_if" lineno="1380">
 <summary>
 Allow caller to get the attributes of kernel message
 interface (/proc/kmsg).
@@ -85893,7 +86600,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="kernel_dontaudit_getattr_message_if" lineno="1402">
+<interface name="kernel_dontaudit_getattr_message_if" lineno="1399">
 <summary>
 Do not audit attempts by caller to get the attributes of kernel
 message interfaces.
@@ -85904,7 +86611,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="kernel_mounton_message_if" lineno="1421">
+<interface name="kernel_mounton_message_if" lineno="1418">
 <summary>
 Mount on kernel message interfaces files.
 </summary>
@@ -85915,7 +86622,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="kernel_dontaudit_search_network_state" lineno="1442">
+<interface name="kernel_dontaudit_search_network_state" lineno="1439">
 <summary>
 Do not audit attempts to search the network
 state directory.
@@ -85927,7 +86634,7 @@ Domain to not audit.
 </param>
 
 </interface>
-<interface name="kernel_search_network_state" lineno="1461">
+<interface name="kernel_search_network_state" lineno="1458">
 <summary>
 Allow searching of network state directory.
 </summary>
@@ -85938,7 +86645,7 @@ Domain allowed access.
 </param>
 
 </interface>
-<interface name="kernel_read_network_state" lineno="1491">
+<interface name="kernel_read_network_state" lineno="1488">
 <summary>
 Read the network state information.
 </summary>
@@ -85960,7 +86667,7 @@ Domain allowed access.
 <infoflow type="read" weight="10"/>
 <rolecap/>
 </interface>
-<interface name="kernel_read_network_state_symlinks" lineno="1512">
+<interface name="kernel_read_network_state_symlinks" lineno="1509">
 <summary>
 Allow caller to read the network state symbolic links.
 </summary>
@@ -85970,7 +86677,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="kernel_search_xen_state" lineno="1533">
+<interface name="kernel_search_xen_state" lineno="1530">
 <summary>
 Allow searching of xen state directory.
 </summary>
@@ -85981,7 +86688,7 @@ Domain allowed access.
 </param>
 
 </interface>
-<interface name="kernel_dontaudit_search_xen_state" lineno="1553">
+<interface name="kernel_dontaudit_search_xen_state" lineno="1550">
 <summary>
 Do not audit attempts to search the xen
 state directory.
@@ -85993,7 +86700,7 @@ Domain to not audit.
 </param>
 
 </interface>
-<interface name="kernel_read_xen_state" lineno="1572">
+<interface name="kernel_read_xen_state" lineno="1569">
 <summary>
 Allow caller to read the xen state information.
 </summary>
@@ -86004,7 +86711,7 @@ Domain allowed access.
 </param>
 
 </interface>
-<interface name="kernel_read_xen_state_symlinks" lineno="1594">
+<interface name="kernel_read_xen_state_symlinks" lineno="1591">
 <summary>
 Allow caller to read the xen state symbolic links.
 </summary>
@@ -86015,7 +86722,7 @@ Domain allowed access.
 </param>
 
 </interface>
-<interface name="kernel_write_xen_state" lineno="1615">
+<interface name="kernel_write_xen_state" lineno="1612">
 <summary>
 Allow caller to write xen state information.
 </summary>
@@ -86026,7 +86733,7 @@ Domain allowed access.
 </param>
 
 </interface>
-<interface name="kernel_list_all_proc" lineno="1633">
+<interface name="kernel_list_all_proc" lineno="1630">
 <summary>
 Allow attempts to list all proc directories.
 </summary>
@@ -86036,7 +86743,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="kernel_dontaudit_list_all_proc" lineno="1652">
+<interface name="kernel_dontaudit_list_all_proc" lineno="1649">
 <summary>
 Do not audit attempts to list all proc directories.
 </summary>
@@ -86046,7 +86753,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="kernel_dontaudit_search_sysctl" lineno="1673">
+<interface name="kernel_dontaudit_search_sysctl" lineno="1670">
 <summary>
 Do not audit attempts by caller to search
 the base directory of sysctls.
@@ -86058,7 +86765,7 @@ Domain to not audit.
 </param>
 
 </interface>
-<interface name="kernel_mounton_sysctl_dirs" lineno="1692">
+<interface name="kernel_mounton_sysctl_dirs" lineno="1689">
 <summary>
 Mount on sysctl_t dirs.
 </summary>
@@ -86069,7 +86776,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="kernel_read_sysctl" lineno="1712">
+<interface name="kernel_read_sysctl" lineno="1709">
 <summary>
 Allow access to read sysctl directories.
 </summary>
@@ -86080,7 +86787,7 @@ Domain allowed access.
 </param>
 
 </interface>
-<interface name="kernel_mounton_sysctl_files" lineno="1732">
+<interface name="kernel_mounton_sysctl_files" lineno="1729">
 <summary>
 Mount on sysctl files.
 </summary>
@@ -86091,7 +86798,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="kernel_read_device_sysctls" lineno="1752">
+<interface name="kernel_read_device_sysctls" lineno="1749">
 <summary>
 Allow caller to read the device sysctls.
 </summary>
@@ -86102,7 +86809,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="kernel_rw_device_sysctls" lineno="1773">
+<interface name="kernel_rw_device_sysctls" lineno="1770">
 <summary>
 Read and write device sysctls.
 </summary>
@@ -86113,7 +86820,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="kernel_search_vm_sysctl" lineno="1793">
+<interface name="kernel_search_vm_sysctl" lineno="1790">
 <summary>
 Allow caller to search virtual memory sysctls.
 </summary>
@@ -86123,7 +86830,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="kernel_read_vm_sysctls" lineno="1812">
+<interface name="kernel_read_vm_sysctls" lineno="1809">
 <summary>
 Allow caller to read virtual memory sysctls.
 </summary>
@@ -86134,7 +86841,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="kernel_rw_vm_sysctls" lineno="1833">
+<interface name="kernel_rw_vm_sysctls" lineno="1830">
 <summary>
 Read and write virtual memory sysctls.
 </summary>
@@ -86145,7 +86852,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="kernel_search_network_sysctl" lineno="1855">
+<interface name="kernel_search_network_sysctl" lineno="1852">
 <summary>
 Search network sysctl directories.
 </summary>
@@ -86155,7 +86862,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="kernel_dontaudit_search_network_sysctl" lineno="1873">
+<interface name="kernel_dontaudit_search_network_sysctl" lineno="1870">
 <summary>
 Do not audit attempts by caller to search network sysctl directories.
 </summary>
@@ -86165,7 +86872,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="kernel_read_net_sysctls" lineno="1892">
+<interface name="kernel_read_net_sysctls" lineno="1889">
 <summary>
 Allow caller to read network sysctls.
 </summary>
@@ -86176,7 +86883,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="kernel_rw_net_sysctls" lineno="1913">
+<interface name="kernel_rw_net_sysctls" lineno="1910">
 <summary>
 Allow caller to modiry contents of sysctl network files.
 </summary>
@@ -86187,7 +86894,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="kernel_read_unix_sysctls" lineno="1935">
+<interface name="kernel_read_unix_sysctls" lineno="1932">
 <summary>
 Allow caller to read unix domain
 socket sysctls.
@@ -86199,7 +86906,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="kernel_rw_unix_sysctls" lineno="1957">
+<interface name="kernel_rw_unix_sysctls" lineno="1954">
 <summary>
 Read and write unix domain
 socket sysctls.
@@ -86211,7 +86918,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="kernel_read_hotplug_sysctls" lineno="1978">
+<interface name="kernel_read_hotplug_sysctls" lineno="1975">
 <summary>
 Read the hotplug sysctl.
 </summary>
@@ -86222,7 +86929,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="kernel_rw_hotplug_sysctls" lineno="1999">
+<interface name="kernel_rw_hotplug_sysctls" lineno="1996">
 <summary>
 Read and write the hotplug sysctl.
 </summary>
@@ -86233,7 +86940,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="kernel_read_modprobe_sysctls" lineno="2020">
+<interface name="kernel_read_modprobe_sysctls" lineno="2017">
 <summary>
 Read the modprobe sysctl.
 </summary>
@@ -86244,7 +86951,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="kernel_rw_modprobe_sysctls" lineno="2041">
+<interface name="kernel_rw_modprobe_sysctls" lineno="2038">
 <summary>
 Read and write the modprobe sysctl.
 </summary>
@@ -86255,7 +86962,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="kernel_dontaudit_search_kernel_sysctl" lineno="2061">
+<interface name="kernel_dontaudit_search_kernel_sysctl" lineno="2058">
 <summary>
 Do not audit attempts to search generic kernel sysctls.
 </summary>
@@ -86265,7 +86972,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="kernel_dontaudit_read_kernel_sysctl" lineno="2079">
+<interface name="kernel_dontaudit_read_kernel_sysctl" lineno="2076">
 <summary>
 Do not audit attempted reading of kernel sysctls
 </summary>
@@ -86275,7 +86982,7 @@ Domain to not audit accesses from
 </summary>
 </param>
 </interface>
-<interface name="kernel_read_crypto_sysctls" lineno="2097">
+<interface name="kernel_read_crypto_sysctls" lineno="2094">
 <summary>
 Read generic crypto sysctls.
 </summary>
@@ -86285,7 +86992,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="kernel_read_kernel_sysctls" lineno="2138">
+<interface name="kernel_read_kernel_sysctls" lineno="2135">
 <summary>
 Read general kernel sysctls.
 </summary>
@@ -86317,7 +87024,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="kernel_dontaudit_write_kernel_sysctl" lineno="2158">
+<interface name="kernel_dontaudit_write_kernel_sysctl" lineno="2155">
 <summary>
 Do not audit attempts to write generic kernel sysctls.
 </summary>
@@ -86327,7 +87034,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="kernel_rw_kernel_sysctl" lineno="2177">
+<interface name="kernel_rw_kernel_sysctl" lineno="2174">
 <summary>
 Read and write generic kernel sysctls.
 </summary>
@@ -86338,7 +87045,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="kernel_mounton_kernel_sysctl_files" lineno="2198">
+<interface name="kernel_mounton_kernel_sysctl_files" lineno="2195">
 <summary>
 Mount on kernel sysctl files.
 </summary>
@@ -86349,7 +87056,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="kernel_read_kernel_ns_lastpid_sysctls" lineno="2218">
+<interface name="kernel_read_kernel_ns_lastpid_sysctls" lineno="2215">
 <summary>
 Read kernel ns lastpid sysctls.
 </summary>
@@ -86360,7 +87067,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="kernel_dontaudit_write_kernel_ns_lastpid_sysctl" lineno="2238">
+<interface name="kernel_dontaudit_write_kernel_ns_lastpid_sysctl" lineno="2235">
 <summary>
 Do not audit attempts to write kernel ns lastpid sysctls.
 </summary>
@@ -86370,7 +87077,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="kernel_rw_kernel_ns_lastpid_sysctl" lineno="2257">
+<interface name="kernel_rw_kernel_ns_lastpid_sysctl" lineno="2254">
 <summary>
 Read and write kernel ns lastpid sysctls.
 </summary>
@@ -86381,7 +87088,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="kernel_search_fs_sysctls" lineno="2278">
+<interface name="kernel_search_fs_sysctls" lineno="2275">
 <summary>
 Search filesystem sysctl directories.
 </summary>
@@ -86392,7 +87099,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="kernel_read_fs_sysctls" lineno="2297">
+<interface name="kernel_read_fs_sysctls" lineno="2294">
 <summary>
 Read filesystem sysctls.
 </summary>
@@ -86403,7 +87110,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="kernel_rw_fs_sysctls" lineno="2318">
+<interface name="kernel_rw_fs_sysctls" lineno="2315">
 <summary>
 Read and write filesystem sysctls.
 </summary>
@@ -86414,7 +87121,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="kernel_read_irq_sysctls" lineno="2339">
+<interface name="kernel_read_irq_sysctls" lineno="2336">
 <summary>
 Read IRQ sysctls.
 </summary>
@@ -86425,7 +87132,19 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="kernel_rw_irq_sysctls" lineno="2360">
+<interface name="kernel_dontaudit_search_fs_sysctls" lineno="2358">
+<summary>
+Do not audit attempts to search
+filesystem sysctl directories.
+</summary>
+<param name="domain">
+<summary>
+Domain to not audit.
+</summary>
+</param>
+<rolecap/>
+</interface>
+<interface name="kernel_rw_irq_sysctls" lineno="2377">
 <summary>
 Read and write IRQ sysctls.
 </summary>
@@ -86436,7 +87155,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="kernel_read_rpc_sysctls" lineno="2381">
+<interface name="kernel_read_rpc_sysctls" lineno="2398">
 <summary>
 Read RPC sysctls.
 </summary>
@@ -86447,7 +87166,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="kernel_rw_rpc_sysctls" lineno="2402">
+<interface name="kernel_rw_rpc_sysctls" lineno="2419">
 <summary>
 Read and write RPC sysctls.
 </summary>
@@ -86458,7 +87177,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="kernel_dontaudit_list_all_sysctls" lineno="2422">
+<interface name="kernel_dontaudit_list_all_sysctls" lineno="2439">
 <summary>
 Do not audit attempts to list all sysctl directories.
 </summary>
@@ -86468,7 +87187,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="kernel_read_all_sysctls" lineno="2442">
+<interface name="kernel_read_all_sysctls" lineno="2459">
 <summary>
 Allow caller to read all sysctls.
 </summary>
@@ -86479,7 +87198,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="kernel_rw_all_sysctls" lineno="2465">
+<interface name="kernel_rw_all_sysctls" lineno="2482">
 <summary>
 Read and write all sysctls.
 </summary>
@@ -86490,7 +87209,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="kernel_associate_proc" lineno="2490">
+<interface name="kernel_associate_proc" lineno="2507">
 <summary>
 Associate a file to proc_t (/proc)
 </summary>
@@ -86501,7 +87220,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="kernel_kill_unlabeled" lineno="2507">
+<interface name="kernel_kill_unlabeled" lineno="2524">
 <summary>
 Send a kill signal to unlabeled processes.
 </summary>
@@ -86511,7 +87230,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="kernel_mount_unlabeled" lineno="2525">
+<interface name="kernel_mount_unlabeled" lineno="2542">
 <summary>
 Mount a kernel unlabeled filesystem.
 </summary>
@@ -86521,7 +87240,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="kernel_unmount_unlabeled" lineno="2543">
+<interface name="kernel_unmount_unlabeled" lineno="2560">
 <summary>
 Unmount a kernel unlabeled filesystem.
 </summary>
@@ -86531,7 +87250,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="kernel_signal_unlabeled" lineno="2561">
+<interface name="kernel_signal_unlabeled" lineno="2578">
 <summary>
 Send general signals to unlabeled processes.
 </summary>
@@ -86541,7 +87260,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="kernel_signull_unlabeled" lineno="2579">
+<interface name="kernel_signull_unlabeled" lineno="2596">
 <summary>
 Send a null signal to unlabeled processes.
 </summary>
@@ -86551,7 +87270,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="kernel_sigstop_unlabeled" lineno="2597">
+<interface name="kernel_sigstop_unlabeled" lineno="2614">
 <summary>
 Send a stop signal to unlabeled processes.
 </summary>
@@ -86561,7 +87280,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="kernel_sigchld_unlabeled" lineno="2615">
+<interface name="kernel_sigchld_unlabeled" lineno="2632">
 <summary>
 Send a child terminated signal to unlabeled processes.
 </summary>
@@ -86571,7 +87290,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="kernel_getattr_unlabeled_dirs" lineno="2633">
+<interface name="kernel_getattr_unlabeled_dirs" lineno="2650">
 <summary>
 Get the attributes of unlabeled directories.
 </summary>
@@ -86581,7 +87300,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="kernel_dontaudit_search_unlabeled" lineno="2651">
+<interface name="kernel_dontaudit_search_unlabeled" lineno="2668">
 <summary>
 Do not audit attempts to search unlabeled directories.
 </summary>
@@ -86591,7 +87310,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="kernel_list_unlabeled" lineno="2669">
+<interface name="kernel_list_unlabeled" lineno="2686">
 <summary>
 List unlabeled directories.
 </summary>
@@ -86601,7 +87320,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="kernel_read_unlabeled_state" lineno="2687">
+<interface name="kernel_read_unlabeled_state" lineno="2704">
 <summary>
 Read the process state (/proc/pid) of all unlabeled_t.
 </summary>
@@ -86611,7 +87330,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="kernel_dontaudit_list_unlabeled" lineno="2707">
+<interface name="kernel_dontaudit_list_unlabeled" lineno="2724">
 <summary>
 Do not audit attempts to list unlabeled directories.
 </summary>
@@ -86621,7 +87340,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="kernel_rw_unlabeled_dirs" lineno="2725">
+<interface name="kernel_rw_unlabeled_dirs" lineno="2742">
 <summary>
 Read and write unlabeled directories.
 </summary>
@@ -86631,7 +87350,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="kernel_delete_unlabeled_dirs" lineno="2743">
+<interface name="kernel_delete_unlabeled_dirs" lineno="2760">
 <summary>
 Delete unlabeled directories.
 </summary>
@@ -86641,7 +87360,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="kernel_manage_unlabeled_dirs" lineno="2761">
+<interface name="kernel_manage_unlabeled_dirs" lineno="2778">
 <summary>
 Create, read, write, and delete unlabeled directories.
 </summary>
@@ -86651,7 +87370,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="kernel_mounton_unlabeled_dirs" lineno="2779">
+<interface name="kernel_mounton_unlabeled_dirs" lineno="2796">
 <summary>
 Mount a filesystem on an unlabeled directory.
 </summary>
@@ -86661,7 +87380,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="kernel_read_unlabeled_files" lineno="2797">
+<interface name="kernel_read_unlabeled_files" lineno="2814">
 <summary>
 Read unlabeled files.
 </summary>
@@ -86671,7 +87390,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="kernel_rw_unlabeled_files" lineno="2815">
+<interface name="kernel_rw_unlabeled_files" lineno="2832">
 <summary>
 Read and write unlabeled files.
 </summary>
@@ -86681,7 +87400,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="kernel_delete_unlabeled_files" lineno="2833">
+<interface name="kernel_delete_unlabeled_files" lineno="2850">
 <summary>
 Delete unlabeled files.
 </summary>
@@ -86691,7 +87410,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="kernel_manage_unlabeled_files" lineno="2851">
+<interface name="kernel_manage_unlabeled_files" lineno="2868">
 <summary>
 Create, read, write, and delete unlabeled files.
 </summary>
@@ -86701,7 +87420,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="kernel_dontaudit_getattr_unlabeled_files" lineno="2870">
+<interface name="kernel_dontaudit_getattr_unlabeled_files" lineno="2887">
 <summary>
 Do not audit attempts by caller to get the
 attributes of an unlabeled file.
@@ -86712,7 +87431,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="kernel_dontaudit_read_unlabeled_files" lineno="2889">
+<interface name="kernel_dontaudit_read_unlabeled_files" lineno="2906">
 <summary>
 Do not audit attempts by caller to
 read an unlabeled file.
@@ -86723,7 +87442,33 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="kernel_delete_unlabeled_symlinks" lineno="2907">
+<interface name="kernel_unlabeled_filetrans" lineno="2940">
+<summary>
+Create an object in unlabeled directories
+with a private type.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+<param name="private type">
+<summary>
+The type of the object to be created.
+</summary>
+</param>
+<param name="object">
+<summary>
+The object class of the object being created.
+</summary>
+</param>
+<param name="name" optional="true">
+<summary>
+The name of the object being created.
+</summary>
+</param>
+</interface>
+<interface name="kernel_delete_unlabeled_symlinks" lineno="2958">
 <summary>
 Delete unlabeled symbolic links.
 </summary>
@@ -86733,7 +87478,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="kernel_manage_unlabeled_symlinks" lineno="2925">
+<interface name="kernel_manage_unlabeled_symlinks" lineno="2976">
 <summary>
 Create, read, write, and delete unlabeled symbolic links.
 </summary>
@@ -86743,7 +87488,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="kernel_dontaudit_getattr_unlabeled_symlinks" lineno="2944">
+<interface name="kernel_dontaudit_getattr_unlabeled_symlinks" lineno="2995">
 <summary>
 Do not audit attempts by caller to get the
 attributes of unlabeled symbolic links.
@@ -86754,7 +87499,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="kernel_dontaudit_getattr_unlabeled_pipes" lineno="2963">
+<interface name="kernel_dontaudit_getattr_unlabeled_pipes" lineno="3014">
 <summary>
 Do not audit attempts by caller to get the
 attributes of unlabeled named pipes.
@@ -86765,7 +87510,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="kernel_dontaudit_getattr_unlabeled_sockets" lineno="2982">
+<interface name="kernel_dontaudit_getattr_unlabeled_sockets" lineno="3033">
 <summary>
 Do not audit attempts by caller to get the
 attributes of unlabeled named sockets.
@@ -86776,7 +87521,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="kernel_dontaudit_getattr_unlabeled_blk_files" lineno="3001">
+<interface name="kernel_dontaudit_getattr_unlabeled_blk_files" lineno="3052">
 <summary>
 Do not audit attempts by caller to get attributes for
 unlabeled block devices.
@@ -86787,7 +87532,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="kernel_rw_unlabeled_blk_files" lineno="3019">
+<interface name="kernel_rw_unlabeled_blk_files" lineno="3070">
 <summary>
 Read and write unlabeled block device nodes.
 </summary>
@@ -86797,7 +87542,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="kernel_delete_unlabeled_blk_files" lineno="3037">
+<interface name="kernel_delete_unlabeled_blk_files" lineno="3088">
 <summary>
 Delete unlabeled block device nodes.
 </summary>
@@ -86807,7 +87552,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="kernel_manage_unlabeled_blk_files" lineno="3055">
+<interface name="kernel_manage_unlabeled_blk_files" lineno="3106">
 <summary>
 Create, read, write, and delete unlabeled block device nodes.
 </summary>
@@ -86817,7 +87562,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="kernel_dontaudit_getattr_unlabeled_chr_files" lineno="3074">
+<interface name="kernel_dontaudit_getattr_unlabeled_chr_files" lineno="3125">
 <summary>
 Do not audit attempts by caller to get attributes for
 unlabeled character devices.
@@ -86828,7 +87573,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="kernel_dontaudit_write_unlabeled_chr_files" lineno="3093">
+<interface name="kernel_dontaudit_write_unlabeled_chr_files" lineno="3144">
 <summary>
 Do not audit attempts to
 write unlabeled character devices.
@@ -86839,7 +87584,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="kernel_delete_unlabeled_chr_files" lineno="3111">
+<interface name="kernel_delete_unlabeled_chr_files" lineno="3162">
 <summary>
 Delete unlabeled character device nodes.
 </summary>
@@ -86849,7 +87594,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="kernel_manage_unlabeled_chr_files" lineno="3130">
+<interface name="kernel_manage_unlabeled_chr_files" lineno="3181">
 <summary>
 Create, read, write, and delete unlabeled character device nodes.
 </summary>
@@ -86859,7 +87604,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="kernel_relabelfrom_unlabeled_dirs" lineno="3148">
+<interface name="kernel_relabelfrom_unlabeled_dirs" lineno="3199">
 <summary>
 Allow caller to relabel unlabeled directories.
 </summary>
@@ -86869,7 +87614,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="kernel_relabelfrom_unlabeled_files" lineno="3166">
+<interface name="kernel_relabelfrom_unlabeled_files" lineno="3217">
 <summary>
 Allow caller to relabel unlabeled files.
 </summary>
@@ -86879,7 +87624,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="kernel_relabelfrom_unlabeled_symlinks" lineno="3185">
+<interface name="kernel_relabelfrom_unlabeled_symlinks" lineno="3236">
 <summary>
 Allow caller to relabel unlabeled symbolic links.
 </summary>
@@ -86889,7 +87634,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="kernel_relabelfrom_unlabeled_pipes" lineno="3204">
+<interface name="kernel_relabelfrom_unlabeled_pipes" lineno="3255">
 <summary>
 Allow caller to relabel unlabeled named pipes.
 </summary>
@@ -86899,7 +87644,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="kernel_delete_unlabeled_pipes" lineno="3223">
+<interface name="kernel_delete_unlabeled_pipes" lineno="3274">
 <summary>
 Delete unlabeled named pipes
 </summary>
@@ -86909,7 +87654,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="kernel_relabelfrom_unlabeled_sockets" lineno="3241">
+<interface name="kernel_relabelfrom_unlabeled_sockets" lineno="3292">
 <summary>
 Allow caller to relabel unlabeled named sockets.
 </summary>
@@ -86919,7 +87664,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="kernel_delete_unlabeled_sockets" lineno="3260">
+<interface name="kernel_delete_unlabeled_sockets" lineno="3311">
 <summary>
 Delete unlabeled named sockets.
 </summary>
@@ -86929,7 +87674,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="kernel_relabelfrom_unlabeled_blk_devs" lineno="3278">
+<interface name="kernel_relabelfrom_unlabeled_blk_devs" lineno="3329">
 <summary>
 Allow caller to relabel from unlabeled block devices.
 </summary>
@@ -86939,7 +87684,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="kernel_relabelfrom_unlabeled_chr_devs" lineno="3296">
+<interface name="kernel_relabelfrom_unlabeled_chr_devs" lineno="3347">
 <summary>
 Allow caller to relabel from unlabeled character devices.
 </summary>
@@ -86949,7 +87694,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="kernel_sendrecv_unlabeled_association" lineno="3329">
+<interface name="kernel_sendrecv_unlabeled_association" lineno="3380">
 <summary>
 Send and receive messages from an
 unlabeled IPSEC association.
@@ -86974,7 +87719,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="kernel_dontaudit_sendrecv_unlabeled_association" lineno="3362">
+<interface name="kernel_dontaudit_sendrecv_unlabeled_association" lineno="3413">
 <summary>
 Do not audit attempts to send and receive messages
 from an	unlabeled IPSEC association.
@@ -86999,7 +87744,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="kernel_tcp_recvfrom_unlabeled" lineno="3389">
+<interface name="kernel_tcp_recvfrom_unlabeled" lineno="3440">
 <summary>
 Receive TCP packets from an unlabeled connection.
 </summary>
@@ -87018,7 +87763,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="kernel_dontaudit_tcp_recvfrom_unlabeled" lineno="3418">
+<interface name="kernel_dontaudit_tcp_recvfrom_unlabeled" lineno="3469">
 <summary>
 Do not audit attempts to receive TCP packets from an unlabeled
 connection.
@@ -87039,7 +87784,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="kernel_udp_recvfrom_unlabeled" lineno="3445">
+<interface name="kernel_udp_recvfrom_unlabeled" lineno="3496">
 <summary>
 Receive UDP packets from an unlabeled connection.
 </summary>
@@ -87058,7 +87803,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="kernel_dontaudit_udp_recvfrom_unlabeled" lineno="3474">
+<interface name="kernel_dontaudit_udp_recvfrom_unlabeled" lineno="3525">
 <summary>
 Do not audit attempts to receive UDP packets from an unlabeled
 connection.
@@ -87079,7 +87824,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="kernel_raw_recvfrom_unlabeled" lineno="3501">
+<interface name="kernel_raw_recvfrom_unlabeled" lineno="3552">
 <summary>
 Receive Raw IP packets from an unlabeled connection.
 </summary>
@@ -87098,7 +87843,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="kernel_dontaudit_raw_recvfrom_unlabeled" lineno="3530">
+<interface name="kernel_dontaudit_raw_recvfrom_unlabeled" lineno="3581">
 <summary>
 Do not audit attempts to receive Raw IP packets from an unlabeled
 connection.
@@ -87119,7 +87864,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="kernel_sendrecv_unlabeled_packets" lineno="3560">
+<interface name="kernel_sendrecv_unlabeled_packets" lineno="3611">
 <summary>
 Send and receive unlabeled packets.
 </summary>
@@ -87141,7 +87886,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="kernel_recvfrom_unlabeled_peer" lineno="3588">
+<interface name="kernel_recvfrom_unlabeled_peer" lineno="3639">
 <summary>
 Receive packets from an unlabeled peer.
 </summary>
@@ -87161,7 +87906,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="kernel_dontaudit_recvfrom_unlabeled_peer" lineno="3616">
+<interface name="kernel_dontaudit_recvfrom_unlabeled_peer" lineno="3667">
 <summary>
 Do not audit attempts to receive packets from an unlabeled peer.
 </summary>
@@ -87181,7 +87926,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="kernel_relabelfrom_unlabeled_database" lineno="3634">
+<interface name="kernel_relabelfrom_unlabeled_database" lineno="3685">
 <summary>
 Relabel from unlabeled database objects.
 </summary>
@@ -87191,7 +87936,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="kernel_unconfined" lineno="3671">
+<interface name="kernel_unconfined" lineno="3722">
 <summary>
 Unconfined access to kernel module resources.
 </summary>
@@ -87201,7 +87946,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="kernel_read_vm_overcommit_sysctl" lineno="3691">
+<interface name="kernel_read_vm_overcommit_sysctl" lineno="3742">
 <summary>
 Read virtual memory overcommit sysctl.
 </summary>
@@ -87212,7 +87957,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="kernel_rw_vm_overcommit_sysctl" lineno="3711">
+<interface name="kernel_rw_vm_overcommit_sysctl" lineno="3762">
 <summary>
 Read and write virtual memory overcommit sysctl.
 </summary>
@@ -87223,7 +87968,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="kernel_ib_access_unlabeled_pkeys" lineno="3730">
+<interface name="kernel_ib_access_unlabeled_pkeys" lineno="3781">
 <summary>
 Access unlabeled infiniband pkeys.
 </summary>
@@ -87233,7 +87978,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="kernel_ib_manage_subnet_unlabeled_endports" lineno="3748">
+<interface name="kernel_ib_manage_subnet_unlabeled_endports" lineno="3799">
 <summary>
 Manage subnet on unlabeled Infiniband endports.
 </summary>
@@ -87288,7 +88033,7 @@ Domain target for user exemption.
 </param>
 <rolecap/>
 </interface>
-<interface name="mcs_file_write_all" lineno="66">
+<interface name="mcs_file_write_all" lineno="62">
 <summary>
 This domain is allowed to write files and directories
 regardless of their MCS category set.
@@ -87300,7 +88045,7 @@ Domain target for user exemption.
 </param>
 <rolecap/>
 </interface>
-<interface name="mcs_killall" lineno="86">
+<interface name="mcs_killall" lineno="78">
 <summary>
 This domain is allowed to sigkill and sigstop
 all domains regardless of their MCS category set.
@@ -87312,7 +88057,7 @@ Domain target for user exemption.
 </param>
 <rolecap/>
 </interface>
-<interface name="mcs_ptrace_all" lineno="106">
+<interface name="mcs_ptrace_all" lineno="94">
 <summary>
 This domain is allowed to ptrace
 all domains regardless of their MCS
@@ -87324,7 +88069,7 @@ Domain target for user exemption.
 </summary>
 </param>
 </interface>
-<interface name="mcs_process_set_categories" lineno="126">
+<interface name="mcs_process_set_categories" lineno="110">
 <summary>
 Make specified domain MCS trusted
 for setting any category set for
@@ -90955,22 +91700,33 @@ The prefix to be used for deriving type names.
 </summary>
 </param>
 </template>
-<interface name="apache_role" lineno="120">
+<template name="apache_role" lineno="131">
 <summary>
 Role access for apache.
 </summary>
-<param name="role">
+<param name="role_prefix">
 <summary>
-Role allowed access
+The prefix of the user role (e.g., user
+is the prefix for user_r).
 </summary>
 </param>
-<param name="domain">
+<param name="user_domain">
 <summary>
 User domain for the role.
 </summary>
 </param>
-</interface>
-<interface name="apache_read_user_scripts" lineno="175">
+<param name="user_exec_domain">
+<summary>
+User exec domain for execute and transition access.
+</summary>
+</param>
+<param name="role">
+<summary>
+Role allowed access
+</summary>
+</param>
+</template>
+<interface name="apache_read_user_scripts" lineno="190">
 <summary>
 Read user httpd script executable files.
 </summary>
@@ -90980,7 +91736,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="apache_read_user_content" lineno="195">
+<interface name="apache_read_user_content" lineno="210">
 <summary>
 Read user httpd content.
 </summary>
@@ -90990,7 +91746,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="apache_domtrans" lineno="215">
+<interface name="apache_domtrans" lineno="230">
 <summary>
 Execute httpd with a domain transition.
 </summary>
@@ -91000,7 +91756,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="apache_initrc_domtrans" lineno="234">
+<interface name="apache_initrc_domtrans" lineno="249">
 <summary>
 Execute httpd server in the httpd domain.
 </summary>
@@ -91010,7 +91766,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="apache_signal" lineno="252">
+<interface name="apache_signal" lineno="267">
 <summary>
 Send generic signals to httpd.
 </summary>
@@ -91020,7 +91776,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="apache_signull" lineno="270">
+<interface name="apache_signull" lineno="285">
 <summary>
 Send null signals to httpd.
 </summary>
@@ -91030,7 +91786,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="apache_sigchld" lineno="288">
+<interface name="apache_sigchld" lineno="303">
 <summary>
 Send child terminated signals to httpd.
 </summary>
@@ -91040,7 +91796,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="apache_use_fds" lineno="307">
+<interface name="apache_use_fds" lineno="322">
 <summary>
 Inherit and use file descriptors
 from httpd.
@@ -91051,7 +91807,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="apache_dontaudit_rw_fifo_file" lineno="326">
+<interface name="apache_dontaudit_rw_fifo_file" lineno="341">
 <summary>
 Do not audit attempts to read and
 write httpd unnamed pipes.
@@ -91062,7 +91818,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="apache_dontaudit_rw_stream_sockets" lineno="345">
+<interface name="apache_dontaudit_rw_stream_sockets" lineno="360">
 <summary>
 Do not audit attempts to read and
 write httpd unix domain stream sockets.
@@ -91073,7 +91829,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="apache_rw_stream_sockets" lineno="364">
+<interface name="apache_rw_stream_sockets" lineno="379">
 <summary>
 Read and write httpd unix domain
 stream sockets.
@@ -91084,7 +91840,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="apache_dontaudit_rw_tcp_sockets" lineno="383">
+<interface name="apache_dontaudit_rw_tcp_sockets" lineno="398">
 <summary>
 Do not audit attempts to read and
 write httpd TCP sockets.
@@ -91095,7 +91851,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="apache_reload" lineno="401">
+<interface name="apache_reload" lineno="416">
 <summary>
 Reload the httpd service (systemd).
 </summary>
@@ -91105,7 +91861,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="apache_read_all_ra_content" lineno="420">
+<interface name="apache_read_all_ra_content" lineno="435">
 <summary>
 Read all appendable content
 </summary>
@@ -91115,7 +91871,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="apache_append_all_ra_content" lineno="439">
+<interface name="apache_append_all_ra_content" lineno="454">
 <summary>
 Append to all appendable web content
 </summary>
@@ -91125,7 +91881,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="apache_read_all_rw_content" lineno="457">
+<interface name="apache_read_all_rw_content" lineno="472">
 <summary>
 Read all read/write content
 </summary>
@@ -91135,7 +91891,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="apache_manage_all_rw_content" lineno="476">
+<interface name="apache_manage_all_rw_content" lineno="491">
 <summary>
 Manage all read/write content
 </summary>
@@ -91145,7 +91901,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="apache_read_all_content" lineno="495">
+<interface name="apache_read_all_content" lineno="510">
 <summary>
 Read all web content.
 </summary>
@@ -91155,7 +91911,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="apache_search_all_content" lineno="517">
+<interface name="apache_search_all_content" lineno="532">
 <summary>
 Search all apache content.
 </summary>
@@ -91165,7 +91921,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="apache_list_all_content" lineno="535">
+<interface name="apache_list_all_content" lineno="550">
 <summary>
 List all apache content.
 </summary>
@@ -91175,7 +91931,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="apache_manage_all_content" lineno="555">
+<interface name="apache_manage_all_content" lineno="570">
 <summary>
 Create, read, write, and delete
 all httpd content.
@@ -91187,7 +91943,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="apache_setattr_cache_dirs" lineno="579">
+<interface name="apache_setattr_cache_dirs" lineno="594">
 <summary>
 Set attributes httpd cache directories.
 </summary>
@@ -91197,7 +91953,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="apache_list_cache" lineno="597">
+<interface name="apache_list_cache" lineno="612">
 <summary>
 List httpd cache directories.
 </summary>
@@ -91207,7 +91963,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="apache_rw_cache_files" lineno="615">
+<interface name="apache_rw_cache_files" lineno="630">
 <summary>
 Read and write httpd cache files.
 </summary>
@@ -91217,7 +91973,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="apache_delete_cache_dirs" lineno="633">
+<interface name="apache_delete_cache_dirs" lineno="648">
 <summary>
 Delete httpd cache directories.
 </summary>
@@ -91227,7 +91983,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="apache_delete_cache_files" lineno="651">
+<interface name="apache_delete_cache_files" lineno="666">
 <summary>
 Delete httpd cache files.
 </summary>
@@ -91237,7 +91993,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="apache_read_config" lineno="670">
+<interface name="apache_read_config" lineno="685">
 <summary>
 Read httpd configuration files.
 </summary>
@@ -91248,7 +92004,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="apache_search_config" lineno="691">
+<interface name="apache_search_config" lineno="706">
 <summary>
 Search httpd configuration directories.
 </summary>
@@ -91258,7 +92014,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="apache_manage_config" lineno="711">
+<interface name="apache_manage_config" lineno="726">
 <summary>
 Create, read, write, and delete
 httpd configuration files.
@@ -91269,7 +92025,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="apache_domtrans_helper" lineno="733">
+<interface name="apache_domtrans_helper" lineno="748">
 <summary>
 Execute the Apache helper program
 with a domain transition.
@@ -91280,7 +92036,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="apache_run_helper" lineno="760">
+<interface name="apache_run_helper" lineno="775">
 <summary>
 Execute the Apache helper program with
 a domain transition, and allow the
@@ -91298,7 +92054,7 @@ Role allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="apache_read_log" lineno="780">
+<interface name="apache_read_log" lineno="795">
 <summary>
 Read httpd log files.
 </summary>
@@ -91309,7 +92065,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="apache_append_log" lineno="801">
+<interface name="apache_append_log" lineno="816">
 <summary>
 Append httpd log files.
 </summary>
@@ -91319,7 +92075,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="apache_dontaudit_append_log" lineno="822">
+<interface name="apache_dontaudit_append_log" lineno="837">
 <summary>
 Do not audit attempts to append
 httpd log files.
@@ -91330,7 +92086,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="apache_manage_log" lineno="841">
+<interface name="apache_manage_log" lineno="856">
 <summary>
 Create, read, write, and delete
 httpd log files.
@@ -91341,7 +92097,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="apache_write_log" lineno="862">
+<interface name="apache_write_log" lineno="877">
 <summary>
 Write apache log files.
 </summary>
@@ -91351,7 +92107,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="apache_dontaudit_search_modules" lineno="882">
+<interface name="apache_dontaudit_search_modules" lineno="897">
 <summary>
 Do not audit attempts to search
 httpd module directories.
@@ -91362,7 +92118,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="apache_list_modules" lineno="900">
+<interface name="apache_list_modules" lineno="915">
 <summary>
 List httpd module directories.
 </summary>
@@ -91372,7 +92128,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="apache_exec_modules" lineno="918">
+<interface name="apache_exec_modules" lineno="933">
 <summary>
 Execute httpd module files.
 </summary>
@@ -91382,7 +92138,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="apache_read_module_files" lineno="938">
+<interface name="apache_read_module_files" lineno="953">
 <summary>
 Read httpd module files.
 </summary>
@@ -91392,7 +92148,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="apache_domtrans_rotatelogs" lineno="958">
+<interface name="apache_domtrans_rotatelogs" lineno="973">
 <summary>
 Execute a domain transition to
 run httpd_rotatelogs.
@@ -91403,7 +92159,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="apache_list_sys_content" lineno="977">
+<interface name="apache_list_sys_content" lineno="992">
 <summary>
 List httpd system content directories.
 </summary>
@@ -91413,7 +92169,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="apache_manage_sys_content" lineno="998">
+<interface name="apache_manage_sys_content" lineno="1013">
 <summary>
 Create, read, write, and delete
 httpd system content files.
@@ -91425,7 +92181,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="apache_manage_sys_rw_content" lineno="1020">
+<interface name="apache_manage_sys_rw_content" lineno="1035">
 <summary>
 Create, read, write, and delete
 httpd system rw content.
@@ -91436,7 +92192,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="apache_domtrans_sys_script" lineno="1042">
+<interface name="apache_domtrans_sys_script" lineno="1057">
 <summary>
 Execute all httpd scripts in the
 system script domain.
@@ -91447,7 +92203,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="apache_dontaudit_rw_sys_script_stream_sockets" lineno="1065">
+<interface name="apache_dontaudit_rw_sys_script_stream_sockets" lineno="1080">
 <summary>
 Do not audit attempts to read and
 write httpd system script unix
@@ -91459,7 +92215,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="apache_domtrans_all_scripts" lineno="1084">
+<interface name="apache_domtrans_all_scripts" lineno="1099">
 <summary>
 Execute all user scripts in the user
 script domain.
@@ -91470,7 +92226,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="apache_run_all_scripts" lineno="1109">
+<interface name="apache_run_all_scripts" lineno="1124">
 <summary>
 Execute all user scripts in the user
 script domain. Add user script domains
@@ -91487,7 +92243,7 @@ Role allowed access.
 </summary>
 </param>
 </interface>
-<interface name="apache_read_squirrelmail_data" lineno="1128">
+<interface name="apache_read_squirrelmail_data" lineno="1143">
 <summary>
 Read httpd squirrelmail data files.
 </summary>
@@ -91497,7 +92253,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="apache_append_squirrelmail_data" lineno="1146">
+<interface name="apache_append_squirrelmail_data" lineno="1161">
 <summary>
 Append httpd squirrelmail data files.
 </summary>
@@ -91507,7 +92263,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="apache_delete_squirrelmail_spool" lineno="1164">
+<interface name="apache_delete_squirrelmail_spool" lineno="1179">
 <summary>
 delete httpd squirrelmail spool files.
 </summary>
@@ -91517,7 +92273,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="apache_search_sys_content" lineno="1182">
+<interface name="apache_search_sys_content" lineno="1197">
 <summary>
 Search httpd system content.
 </summary>
@@ -91527,7 +92283,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="apache_read_sys_content" lineno="1201">
+<interface name="apache_read_sys_content" lineno="1216">
 <summary>
 Read httpd system content.
 </summary>
@@ -91537,7 +92293,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="apache_search_sys_scripts" lineno="1221">
+<interface name="apache_search_sys_scripts" lineno="1236">
 <summary>
 Search httpd system CGI directories.
 </summary>
@@ -91547,7 +92303,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="apache_manage_all_user_content" lineno="1241">
+<interface name="apache_manage_all_user_content" lineno="1256">
 <summary>
 Create, read, write, and delete all
 user httpd content.
@@ -91559,7 +92315,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="apache_search_sys_script_state" lineno="1262">
+<interface name="apache_search_sys_script_state" lineno="1277">
 <summary>
 Search system script state directories.
 </summary>
@@ -91569,7 +92325,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="apache_read_tmp_files" lineno="1280">
+<interface name="apache_read_tmp_files" lineno="1295">
 <summary>
 Read httpd tmp files.
 </summary>
@@ -91579,7 +92335,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="apache_dontaudit_write_tmp_files" lineno="1300">
+<interface name="apache_dontaudit_write_tmp_files" lineno="1315">
 <summary>
 Do not audit attempts to write
 httpd tmp files.
@@ -91590,7 +92346,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="apache_delete_lib_files" lineno="1318">
+<interface name="apache_delete_lib_files" lineno="1333">
 <summary>
 Delete httpd_var_lib_t files
 </summary>
@@ -91600,7 +92356,7 @@ Domain that can delete the files
 </summary>
 </param>
 </interface>
-<interface name="apache_cgi_domain" lineno="1349">
+<interface name="apache_cgi_domain" lineno="1364">
 <summary>
 Execute CGI in the specified domain.
 </summary>
@@ -91622,7 +92378,7 @@ Type of the executable to enter the cgi domain.
 </summary>
 </param>
 </interface>
-<interface name="apache_admin" lineno="1377">
+<interface name="apache_admin" lineno="1392">
 <summary>
 All of the rules required to
 administrate an apache environment.
@@ -92814,22 +93570,33 @@ Role allowed access.
 </module>
 <module name="bluetooth" filename="policy/modules/services/bluetooth.if">
 <summary>Bluetooth tools and system services.</summary>
-<interface name="bluetooth_role" lineno="18">
+<template name="bluetooth_role" lineno="29">
 <summary>
 Role access for bluetooth.
 </summary>
-<param name="role">
+<param name="role_prefix">
 <summary>
-Role allowed access
+The prefix of the user role (e.g., user
+is the prefix for user_r).
 </summary>
 </param>
-<param name="domain">
+<param name="user_domain">
 <summary>
-User domain for the role
+User domain for the role.
 </summary>
 </param>
-</interface>
-<interface name="bluetooth_stream_connect" lineno="63">
+<param name="user_exec_domain">
+<summary>
+User exec domain for execute and transition access.
+</summary>
+</param>
+<param name="role">
+<summary>
+Role allowed access
+</summary>
+</param>
+</template>
+<interface name="bluetooth_stream_connect" lineno="78">
 <summary>
 Connect to bluetooth over a unix domain
 stream socket.
@@ -92840,7 +93607,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="bluetooth_domtrans" lineno="84">
+<interface name="bluetooth_domtrans" lineno="99">
 <summary>
 Execute bluetooth in the bluetooth domain.
 </summary>
@@ -92850,7 +93617,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="bluetooth_read_config" lineno="103">
+<interface name="bluetooth_read_config" lineno="118">
 <summary>
 Read bluetooth configuration files.
 </summary>
@@ -92860,7 +93627,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="bluetooth_dbus_chat" lineno="122">
+<interface name="bluetooth_dbus_chat" lineno="137">
 <summary>
 Send and receive messages from
 bluetooth over dbus.
@@ -92871,7 +93638,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="bluetooth_dontaudit_read_helper_state" lineno="143">
+<interface name="bluetooth_dontaudit_read_helper_state" lineno="158">
 <summary>
 Do not audit attempts to read
 bluetooth process state files.
@@ -92882,7 +93649,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="bluetooth_admin" lineno="169">
+<interface name="bluetooth_admin" lineno="184">
 <summary>
 All of the rules required to
 administrate an bluetooth environment.
@@ -94150,6 +94917,790 @@ Domain allowed access.
 <rolecap/>
 </interface>
 </module>
+<module name="container" filename="policy/modules/services/container.if">
+<summary>Policy for containers</summary>
+<template name="container_domain_template" lineno="13">
+<summary>
+The template to define a container domain.
+</summary>
+<param name="domain_prefix">
+<summary>
+Domain prefix to be used.
+</summary>
+</param>
+</template>
+<template name="container_engine_domain_template" lineno="38">
+<summary>
+The template to define a container
+engine domain.
+</summary>
+<param name="domain_prefix">
+<summary>
+Domain prefix to be used.
+</summary>
+</param>
+</template>
+<interface name="container_system_engine" lineno="75">
+<summary>
+Allow the specified container engine
+domain all the rules required to
+function as a system container engine.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="container_user_engine" lineno="95">
+<summary>
+Allow the specified container engine
+domain all the rules required to
+function as a user container engine.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<template name="container_base_role" lineno="131">
+<summary>
+Base role access for containers. This
+grants all the rules necessary for
+common container usage.
+</summary>
+<param name="role_prefix">
+<summary>
+The prefix of the user role (e.g., user
+is the prefix for user_r).
+</summary>
+</param>
+<param name="user_domain">
+<summary>
+User domain for the role.
+</summary>
+</param>
+<param name="user_exec_domain">
+<summary>
+User exec domain for execute and transition access.
+</summary>
+</param>
+<param name="role">
+<summary>
+Role allowed access.
+</summary>
+</param>
+</template>
+<template name="container_system_role" lineno="187">
+<summary>
+Role access for system containers.
+</summary>
+<param name="role_prefix">
+<summary>
+The prefix of the user role (e.g., user
+is the prefix for user_r).
+</summary>
+</param>
+<param name="user_domain">
+<summary>
+User domain for the role.
+</summary>
+</param>
+<param name="user_exec_domain">
+<summary>
+User exec domain for execute and transition access.
+</summary>
+</param>
+<param name="role">
+<summary>
+Role allowed access.
+</summary>
+</param>
+</template>
+<template name="container_user_role" lineno="229">
+<summary>
+Role access for user containers.
+</summary>
+<param name="role_prefix">
+<summary>
+The prefix of the user role (e.g., user
+is the prefix for user_r).
+</summary>
+</param>
+<param name="user_domain">
+<summary>
+User domain for the role.
+</summary>
+</param>
+<param name="user_exec_domain">
+<summary>
+User exec domain for execute and transition access.
+</summary>
+</param>
+<param name="role">
+<summary>
+Role allowed access.
+</summary>
+</param>
+</template>
+<interface name="container_domtrans_generic_engine" lineno="307">
+<summary>
+Execute generic container engines in the
+container engine domain.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed to transition.
+</summary>
+</param>
+</interface>
+<interface name="container_run_generic_engine" lineno="333">
+<summary>
+Execute generic container engines in the
+container engine domain, and allow the
+specified role the container domain.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed to transition
+</summary>
+</param>
+<param name="role">
+<summary>
+The role to be allowed the container domain.
+</summary>
+</param>
+</interface>
+<interface name="container_engine_executable_file" lineno="353">
+<summary>
+Make the specified type usable for files
+that are executables for container engines.
+</summary>
+<param name="type">
+<summary>
+Type to be used for files.
+</summary>
+</param>
+</interface>
+<interface name="container_generic_engine_domtrans" lineno="380">
+<summary>
+Execute a generic container engine
+executable with an automatic transition
+to a private type.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed to transition.
+</summary>
+</param>
+<param name="target_domain">
+<summary>
+The type of the new process.
+</summary>
+</param>
+</interface>
+<interface name="container_engine_executable_entrypoint" lineno="401">
+<summary>
+Allow the generic container engine
+executables to be an entrypoint
+for the specified domain.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="container_engine_dbus_chat" lineno="420">
+<summary>
+Send and receive messages from
+container engines over dbus.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="container_runtime_named_socket_activation" lineno="443">
+<summary>
+Allow the specified domain to be started
+by systemd socket activation using a
+named socket labeled the container
+runtime type.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="container_manage_engine_tmp_files" lineno="462">
+<summary>
+Allow the specified domain to manage
+container engine temporary files.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="container_manage_engine_tmp_sock_files" lineno="482">
+<summary>
+Allow the specified domain to manage
+container engine temporary named sockets.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="container_engine_tmp_filetrans" lineno="514">
+<summary>
+Allow the specified domain to create
+objects in generic temporary directories
+with an automatic type transition to
+the container engine temporary file type.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+<param name="object">
+<summary>
+The object class of the object being created.
+</summary>
+</param>
+<param name="name" optional="true">
+<summary>
+The name of the object being created.
+</summary>
+</param>
+</interface>
+<interface name="container_read_system_container_state" lineno="533">
+<summary>
+Read the process state (/proc/pid)
+of all system containers.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="container_read_user_container_state" lineno="552">
+<summary>
+Read the process state (/proc/pid)
+of all user containers.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="container_manage_all_containers" lineno="572">
+<summary>
+All of the permissions necessary
+for a container engine to manage
+container processes.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="container_domtrans" lineno="592">
+<summary>
+Allow the specified domain to
+perform a type transition to
+container domains.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed to transition.
+</summary>
+</param>
+</interface>
+<interface name="container_stream_connect_system_containers" lineno="611">
+<summary>
+Connect to a system container domain
+over a unix stream socket.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="container_stream_connect_user_containers" lineno="633">
+<summary>
+Connect to a user container domain
+over a unix stream socket.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="container_stream_connect_all_containers" lineno="655">
+<summary>
+Connect to a container domain
+over a unix stream socket.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="container_signal_all_containers" lineno="678">
+<summary>
+Allow the specified domain to
+send all signals to a container
+domain.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed to transition.
+</summary>
+</param>
+</interface>
+<interface name="container_setattr_container_ptys" lineno="696">
+<summary>
+Set the attributes of container ptys.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="container_use_container_ptys" lineno="714">
+<summary>
+Read and write container ptys.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="container_mountpoint" lineno="733">
+<summary>
+Make the specified type usable as a mountpoint
+for containers.
+</summary>
+<param name="file_type">
+<summary>
+Type to be used as a mountpoint.
+</summary>
+</param>
+</interface>
+<interface name="container_manage_config_files" lineno="752">
+<summary>
+Allow the specified domain to
+manage container config files.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="container_file_root_filetrans" lineno="773">
+<summary>
+Allow the specified domain to
+create container files in the
+root directory with a type
+transition.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="container_manage_dirs" lineno="792">
+<summary>
+Allow the specified domain to
+manage container file directories.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="container_manage_files" lineno="811">
+<summary>
+Allow the specified domain to
+manage container files.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="container_manage_lnk_files" lineno="830">
+<summary>
+Allow the specified domain to
+manage container lnk files.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="container_manage_fifo_files" lineno="849">
+<summary>
+Allow the specified domain to
+manage container fifo files.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="container_manage_sock_files" lineno="868">
+<summary>
+Allow the specified domain to
+manage container sock files.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="container_rw_chr_files" lineno="887">
+<summary>
+Allow the specified domain to read
+and write container chr files.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="container_dontaudit_rw_chr_files" lineno="906">
+<summary>
+Do not audit attempts to read
+and write container chr files.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="container_manage_chr_files" lineno="925">
+<summary>
+Allow the specified domain to
+manage container chr files.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="container_manage_home_config" lineno="944">
+<summary>
+Allow the specified domain to
+manage container config home content.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="container_config_home_filetrans" lineno="976">
+<summary>
+Allow the specified domain to create
+objects in an xdg_config directory
+with an automatic type transition to
+the container config home type.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+<param name="object">
+<summary>
+The object class of the object being created.
+</summary>
+</param>
+<param name="name" optional="true">
+<summary>
+The name of the object being created.
+</summary>
+</param>
+</interface>
+<interface name="container_manage_home_data_files" lineno="996">
+<summary>
+Allow the specified domain to
+manage container data home files.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="container_manage_home_data_fifo_files" lineno="1016">
+<summary>
+Allow the specified domain to
+manage container data home named
+pipes.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="container_manage_home_data_sock_files" lineno="1036">
+<summary>
+Allow the specified domain to
+manage container data home named
+sockets.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="container_relabel_all_content" lineno="1056">
+<summary>
+Allow the specified domain to
+relabel container files and
+directories.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="container_relabel_fs" lineno="1075">
+<summary>
+Allow the specified domain to
+relabel container filesystems.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="container_getattr_fs" lineno="1095">
+<summary>
+Allow the specified domain to
+get the attributes of container
+filesystems.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="container_search_runtime" lineno="1114">
+<summary>
+Allow the specified domain to search
+runtime container directories.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="container_manage_runtime_files" lineno="1134">
+<summary>
+Allow the specified domain to manage
+runtime container files.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="container_manage_runtime_fifo_files" lineno="1153">
+<summary>
+Allow the specified domain to manage
+runtime container named pipes.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="container_manage_runtime_sock_files" lineno="1172">
+<summary>
+Allow the specified domain to manage
+runtime container named sockets.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="container_manage_user_runtime_files" lineno="1191">
+<summary>
+Allow the specified domain to manage
+user runtime container files.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="container_rw_user_runtime_sock_files" lineno="1210">
+<summary>
+Allow the specified domain to read and
+write user runtime container named sockets.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="container_search_var_lib" lineno="1229">
+<summary>
+Allow the specified domain to search
+container directories in /var/lib.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="container_manage_var_lib_files" lineno="1249">
+<summary>
+Allow the specified domain to manage
+container files in /var/lib.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="container_manage_var_lib_fifo_files" lineno="1268">
+<summary>
+Allow the specified domain to manage
+container named pipes in /var/lib.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="container_manage_var_lib_sock_files" lineno="1287">
+<summary>
+Allow the specified domain to manage
+container named sockets in /var/lib.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="container_unlabeled_var_lib_filetrans" lineno="1318">
+<summary>
+Allow the specified domain to create
+objects in unlabeled directories with
+an automatic type transition to the
+container var lib type.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+<param name="object">
+<summary>
+The object class of the object being created.
+</summary>
+</param>
+<param name="name" optional="true">
+<summary>
+The name of the object being created.
+</summary>
+</param>
+</interface>
+<interface name="container_admin" lineno="1346">
+<summary>
+All of the rules required to
+administrate a container
+environment.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+<param name="role">
+<summary>
+Role allowed access.
+</summary>
+</param>
+<rolecap/>
+</interface>
+<tunable name="container_manage_cgroup" dftval="false">
+<desc>
+<p>
+Allow containers to manage cgroups.
+This is required for systemd to run inside
+containers.
+</p>
+</desc>
+</tunable>
+<tunable name="container_mounton_non_security" dftval="false">
+<desc>
+<p>
+Allow container engines to mount on all non-security files.
+</p>
+</desc>
+</tunable>
+<tunable name="container_use_nfs" dftval="false">
+<desc>
+<p>
+Allow containers to use NFS filesystems.
+</p>
+</desc>
+</tunable>
+<tunable name="container_use_samba" dftval="false">
+<desc>
+<p>
+Allow containers to use CIFS filesystems.
+</p>
+</desc>
+</tunable>
+</module>
 <module name="corosync" filename="policy/modules/services/corosync.if">
 <summary>Corosync Cluster Engine.</summary>
 <interface name="corosync_domtrans" lineno="13">
@@ -94445,53 +95996,86 @@ Domain prefix to be used.
 </summary>
 </param>
 </template>
-<interface name="cron_role" lineno="59">
+<template name="cron_role" lineno="70">
 <summary>
 Role access for cron.
 </summary>
-<param name="role">
+<param name="role_prefix">
 <summary>
-Role allowed access.
+The prefix of the user role (e.g., user
+is the prefix for user_r).
 </summary>
 </param>
-<param name="domain">
+<param name="user_domain">
 <summary>
 User domain for the role.
 </summary>
 </param>
+<param name="user_exec_domain">
+<summary>
+User exec domain for execute and transition access.
+</summary>
+</param>
+<param name="role">
+<summary>
+Role allowed access
+</summary>
+</param>
 <rolecap/>
-</interface>
-<interface name="cron_unconfined_role" lineno="140">
+</template>
+<template name="cron_unconfined_role" lineno="162">
 <summary>
 Role access for unconfined cron.
 </summary>
-<param name="role">
+<param name="role_prefix">
 <summary>
-Role allowed access.
+The prefix of the user role (e.g., user
+is the prefix for user_r).
 </summary>
 </param>
-<param name="domain">
+<param name="user_domain">
 <summary>
 User domain for the role.
 </summary>
 </param>
-</interface>
-<interface name="cron_admin_role" lineno="221">
+<param name="user_exec_domain">
 <summary>
-Role access for admin cron.
+User exec domain for execute and transition access.
 </summary>
+</param>
 <param name="role">
 <summary>
-Role allowed access.
+Role allowed access
 </summary>
 </param>
-<param name="domain">
+</template>
+<template name="cron_admin_role" lineno="254">
+<summary>
+Role access for admin cron.
+</summary>
+<param name="role_prefix">
+<summary>
+The prefix of the user role (e.g., user
+is the prefix for user_r).
+</summary>
+</param>
+<param name="user_domain">
 <summary>
 User domain for the role.
 </summary>
 </param>
-</interface>
-<interface name="cron_system_entry" lineno="312">
+<param name="user_exec_domain">
+<summary>
+User exec domain for execute and transition access.
+</summary>
+</param>
+<param name="role">
+<summary>
+Role allowed access
+</summary>
+</param>
+</template>
+<interface name="cron_system_entry" lineno="345">
 <summary>
 Make the specified program domain
 accessible from the system cron jobs.
@@ -94507,7 +96091,7 @@ The type of the file used as an entrypoint to this domain.
 </summary>
 </param>
 </interface>
-<interface name="cron_domtrans" lineno="333">
+<interface name="cron_domtrans" lineno="366">
 <summary>
 Execute cron in the cron system domain.
 </summary>
@@ -94517,7 +96101,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="cron_exec" lineno="352">
+<interface name="cron_exec" lineno="385">
 <summary>
 Execute crond in the caller domain.
 </summary>
@@ -94527,7 +96111,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="cron_initrc_domtrans" lineno="371">
+<interface name="cron_initrc_domtrans" lineno="404">
 <summary>
 Execute crond server in the crond domain.
 </summary>
@@ -94537,7 +96121,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="cron_use_fds" lineno="389">
+<interface name="cron_use_fds" lineno="422">
 <summary>
 Use crond file descriptors.
 </summary>
@@ -94547,7 +96131,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="cron_sigchld" lineno="407">
+<interface name="cron_sigchld" lineno="440">
 <summary>
 Send child terminated signals to crond.
 </summary>
@@ -94557,7 +96141,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="cron_setattr_log_files" lineno="425">
+<interface name="cron_setattr_log_files" lineno="458">
 <summary>
 Set the attributes of cron log files.
 </summary>
@@ -94567,7 +96151,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="cron_create_log_files" lineno="443">
+<interface name="cron_create_log_files" lineno="476">
 <summary>
 Create cron log files.
 </summary>
@@ -94577,7 +96161,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="cron_write_log_files" lineno="461">
+<interface name="cron_write_log_files" lineno="494">
 <summary>
 Write to cron log files.
 </summary>
@@ -94587,7 +96171,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="cron_manage_log_files" lineno="480">
+<interface name="cron_manage_log_files" lineno="513">
 <summary>
 Create, read, write and delete
 cron log files.
@@ -94598,7 +96182,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="cron_generic_log_filetrans_log" lineno="511">
+<interface name="cron_generic_log_filetrans_log" lineno="544">
 <summary>
 Create specified objects in generic
 log directories with the cron log file type.
@@ -94619,7 +96203,7 @@ The name of the object being created.
 </summary>
 </param>
 </interface>
-<interface name="cron_read_pipes" lineno="529">
+<interface name="cron_read_pipes" lineno="562">
 <summary>
 Read cron daemon unnamed pipes.
 </summary>
@@ -94629,7 +96213,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="cron_dontaudit_write_pipes" lineno="548">
+<interface name="cron_dontaudit_write_pipes" lineno="581">
 <summary>
 Do not audit attempts to write
 cron daemon unnamed pipes.
@@ -94640,7 +96224,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="cron_rw_pipes" lineno="566">
+<interface name="cron_rw_pipes" lineno="599">
 <summary>
 Read and write crond unnamed pipes.
 </summary>
@@ -94650,7 +96234,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="cron_rw_tcp_sockets" lineno="584">
+<interface name="cron_rw_tcp_sockets" lineno="617">
 <summary>
 Read and write crond TCP sockets.
 </summary>
@@ -94660,7 +96244,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="cron_dontaudit_rw_tcp_sockets" lineno="603">
+<interface name="cron_dontaudit_rw_tcp_sockets" lineno="636">
 <summary>
 Do not audit attempts to read and
 write cron daemon TCP sockets.
@@ -94671,7 +96255,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="cron_search_spool" lineno="621">
+<interface name="cron_search_spool" lineno="654">
 <summary>
 Search cron spool directories.
 </summary>
@@ -94681,7 +96265,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="cron_manage_pid_files" lineno="641">
+<interface name="cron_manage_pid_files" lineno="674">
 <summary>
 Create, read, write, and delete
 crond pid files.  (Deprecated)
@@ -94692,7 +96276,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="cron_anacron_domtrans_system_job" lineno="656">
+<interface name="cron_anacron_domtrans_system_job" lineno="689">
 <summary>
 Execute anacron in the cron
 system domain.
@@ -94703,7 +96287,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="cron_use_system_job_fds" lineno="675">
+<interface name="cron_use_system_job_fds" lineno="708">
 <summary>
 Use system cron job file descriptors.
 </summary>
@@ -94713,7 +96297,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="cron_manage_system_spool" lineno="693">
+<interface name="cron_manage_system_spool" lineno="726">
 <summary>
 Create, read, write, and delete the system spool.
 </summary>
@@ -94723,7 +96307,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="cron_read_system_spool" lineno="712">
+<interface name="cron_read_system_spool" lineno="745">
 <summary>
 Read the system spool.
 </summary>
@@ -94733,7 +96317,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="cron_rw_tmp_files" lineno="732">
+<interface name="cron_rw_tmp_files" lineno="765">
 <summary>
 Read and write crond temporary files.
 </summary>
@@ -94743,7 +96327,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="cron_read_system_job_lib_files" lineno="750">
+<interface name="cron_read_system_job_lib_files" lineno="783">
 <summary>
 Read system cron job lib files.
 </summary>
@@ -94753,7 +96337,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="cron_manage_system_job_lib_files" lineno="770">
+<interface name="cron_manage_system_job_lib_files" lineno="803">
 <summary>
 Create, read, write, and delete
 system cron job lib files.
@@ -94764,7 +96348,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="cron_write_system_job_pipes" lineno="789">
+<interface name="cron_write_system_job_pipes" lineno="822">
 <summary>
 Write system cron job unnamed pipes.
 </summary>
@@ -94774,7 +96358,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="cron_rw_system_job_pipes" lineno="808">
+<interface name="cron_rw_system_job_pipes" lineno="841">
 <summary>
 Read and write system cron job
 unnamed pipes.
@@ -94785,7 +96369,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="cron_rw_system_job_stream_sockets" lineno="827">
+<interface name="cron_rw_system_job_stream_sockets" lineno="860">
 <summary>
 Read and write inherited system cron
 job unix domain stream sockets.
@@ -94796,7 +96380,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="cron_read_system_job_tmp_files" lineno="845">
+<interface name="cron_read_system_job_tmp_files" lineno="878">
 <summary>
 Read system cron job temporary files.
 </summary>
@@ -94806,7 +96390,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="cron_dontaudit_append_system_job_tmp_files" lineno="865">
+<interface name="cron_dontaudit_append_system_job_tmp_files" lineno="898">
 <summary>
 Do not audit attempts to append temporary
 system cron job files.
@@ -94817,7 +96401,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="cron_rw_inherited_system_job_tmp_files" lineno="883">
+<interface name="cron_rw_inherited_system_job_tmp_files" lineno="916">
 <summary>
 Read and write to inherited system cron job temporary files.
 </summary>
@@ -94827,7 +96411,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="cron_dontaudit_write_system_job_tmp_files" lineno="902">
+<interface name="cron_dontaudit_write_system_job_tmp_files" lineno="935">
 <summary>
 Do not audit attempts to write temporary
 system cron job files.
@@ -94838,7 +96422,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="cron_exec_crontab" lineno="921">
+<interface name="cron_exec_crontab" lineno="954">
 <summary>
 Execute crontab in the caller domain.
 </summary>
@@ -94849,7 +96433,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="cron_admin" lineno="947">
+<interface name="cron_admin" lineno="980">
 <summary>
 All of the rules required to
 administrate a cron environment.
@@ -95366,7 +96950,7 @@ User domain for the role
 </summary>
 </param>
 </template>
-<interface name="dbus_system_bus_client" lineno="139">
+<interface name="dbus_system_bus_client" lineno="140">
 <summary>
 Template for creating connections to
 the system bus.
@@ -95377,7 +96961,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dbus_connect_all_session_bus" lineno="178">
+<interface name="dbus_connect_all_session_bus" lineno="179">
 <summary>
 Acquire service on all DBUS
 session busses.
@@ -95388,7 +96972,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<template name="dbus_connect_spec_session_bus" lineno="204">
+<template name="dbus_connect_spec_session_bus" lineno="205">
 <summary>
 Acquire service on specified
 DBUS session bus.
@@ -95405,7 +96989,7 @@ Domain allowed access.
 </summary>
 </param>
 </template>
-<interface name="dbus_all_session_bus_client" lineno="224">
+<interface name="dbus_all_session_bus_client" lineno="225">
 <summary>
 Creating connections to all
 DBUS session busses.
@@ -95416,7 +97000,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<template name="dbus_spec_session_bus_client" lineno="256">
+<template name="dbus_spec_session_bus_client" lineno="257">
 <summary>
 Creating connections to specified
 DBUS session bus.
@@ -95433,7 +97017,7 @@ Domain allowed access.
 </summary>
 </param>
 </template>
-<interface name="dbus_send_all_session_bus" lineno="283">
+<interface name="dbus_send_all_session_bus" lineno="284">
 <summary>
 Send messages to all DBUS
 session busses.
@@ -95444,7 +97028,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<template name="dbus_send_spec_session_bus" lineno="309">
+<template name="dbus_send_spec_session_bus" lineno="310">
 <summary>
 Send messages to specified
 DBUS session busses.
@@ -95461,7 +97045,29 @@ Domain allowed access.
 </summary>
 </param>
 </template>
-<interface name="dbus_read_config" lineno="328">
+<interface name="dbus_getattr_session_runtime_socket" lineno="330">
+<summary>
+Allow the specified domain to get the
+attributes of the session dbus sock file.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="dbus_write_session_runtime_socket" lineno="349">
+<summary>
+Allow the specified domain to write to
+the session dbus sock file.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="dbus_read_config" lineno="367">
 <summary>
 Read dbus configuration content.
 </summary>
@@ -95471,7 +97077,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dbus_read_lib_files" lineno="347">
+<interface name="dbus_read_lib_files" lineno="386">
 <summary>
 Read system dbus lib files.
 </summary>
@@ -95481,7 +97087,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dbus_relabel_lib_dirs" lineno="367">
+<interface name="dbus_relabel_lib_dirs" lineno="406">
 <summary>
 Relabel system dbus lib directory.
 </summary>
@@ -95491,7 +97097,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dbus_manage_lib_files" lineno="387">
+<interface name="dbus_manage_lib_files" lineno="426">
 <summary>
 Create, read, write, and delete
 system dbus lib files.
@@ -95502,7 +97108,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dbus_all_session_domain" lineno="413">
+<interface name="dbus_all_session_domain" lineno="452">
 <summary>
 Allow a application domain to be
 started by the specified session bus.
@@ -95519,7 +97125,7 @@ entry point to this domain.
 </summary>
 </param>
 </interface>
-<template name="dbus_spec_session_domain" lineno="447">
+<template name="dbus_spec_session_domain" lineno="486">
 <summary>
 Allow a application domain to be
 started by the specified session bus.
@@ -95542,7 +97148,7 @@ entry point to this domain.
 </summary>
 </param>
 </template>
-<interface name="dbus_connect_system_bus" lineno="468">
+<interface name="dbus_connect_system_bus" lineno="507">
 <summary>
 Acquire service on the DBUS system bus.
 </summary>
@@ -95552,7 +97158,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dbus_send_system_bus" lineno="487">
+<interface name="dbus_send_system_bus" lineno="526">
 <summary>
 Send messages to the DBUS system bus.
 </summary>
@@ -95562,7 +97168,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dbus_system_bus_unconfined" lineno="506">
+<interface name="dbus_system_bus_unconfined" lineno="545">
 <summary>
 Unconfined access to DBUS system bus.
 </summary>
@@ -95572,7 +97178,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dbus_system_domain" lineno="531">
+<interface name="dbus_system_domain" lineno="570">
 <summary>
 Create a domain for processes which
 can be started by the DBUS system bus.
@@ -95588,7 +97194,7 @@ Type of the program to be used as an entry point to this domain.
 </summary>
 </param>
 </interface>
-<interface name="dbus_use_system_bus_fds" lineno="571">
+<interface name="dbus_use_system_bus_fds" lineno="610">
 <summary>
 Use and inherit DBUS system bus
 file descriptors.
@@ -95599,7 +97205,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dbus_dontaudit_system_bus_rw_tcp_sockets" lineno="590">
+<interface name="dbus_dontaudit_system_bus_rw_tcp_sockets" lineno="629">
 <summary>
 Do not audit attempts to read and
 write DBUS system bus TCP sockets.
@@ -95610,7 +97216,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="dbus_watch_system_bus_runtime_dirs" lineno="608">
+<interface name="dbus_watch_system_bus_runtime_dirs" lineno="647">
 <summary>
 Watch system bus runtime directories.
 </summary>
@@ -95620,7 +97226,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dbus_list_system_bus_runtime" lineno="626">
+<interface name="dbus_list_system_bus_runtime" lineno="665">
 <summary>
 List system bus runtime directories.
 </summary>
@@ -95630,7 +97236,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dbus_watch_system_bus_runtime_named_sockets" lineno="644">
+<interface name="dbus_watch_system_bus_runtime_named_sockets" lineno="683">
 <summary>
 Watch system bus runtime named sockets.
 </summary>
@@ -95640,7 +97246,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dbus_read_system_bus_runtime_named_sockets" lineno="662">
+<interface name="dbus_read_system_bus_runtime_named_sockets" lineno="701">
 <summary>
 Read system bus runtime named sockets.
 </summary>
@@ -95650,7 +97256,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dbus_unconfined" lineno="680">
+<interface name="dbus_unconfined" lineno="719">
 <summary>
 Unconfined access to DBUS.
 </summary>
@@ -95660,7 +97266,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dbus_generic_pid_filetrans_system_dbusd_var_run" lineno="710">
+<interface name="dbus_generic_pid_filetrans_system_dbusd_var_run" lineno="749">
 <summary>
 Create resources in /run or /var/run with the system_dbusd_runtime_t
 label. This method is deprecated in favor of the init_daemon_run_dir
@@ -95682,7 +97288,7 @@ Optional file name used for the resource
 </summary>
 </param>
 </interface>
-<interface name="dbus_create_system_dbusd_var_run_dirs" lineno="724">
+<interface name="dbus_create_system_dbusd_var_run_dirs" lineno="763">
 <summary>
 Create directories with the system_dbusd_runtime_t label
 </summary>
@@ -95999,22 +97605,33 @@ Role allowed access.
 </module>
 <module name="dirmngr" filename="policy/modules/services/dirmngr.if">
 <summary>Server for managing and downloading certificate revocation lists.</summary>
-<interface name="dirmngr_role" lineno="18">
+<template name="dirmngr_role" lineno="29">
 <summary>
 Role access for dirmngr.
 </summary>
-<param name="role">
+<param name="role_prefix">
 <summary>
-Role allowed access.
+The prefix of the user role (e.g., user
+is the prefix for user_r).
 </summary>
 </param>
-<param name="domain">
+<param name="user_domain">
 <summary>
 User domain for the role.
 </summary>
 </param>
-</interface>
-<interface name="dirmngr_domtrans" lineno="47">
+<param name="user_exec_domain">
+<summary>
+User exec domain for execute and transition access.
+</summary>
+</param>
+<param name="role">
+<summary>
+Role allowed access
+</summary>
+</param>
+</template>
+<interface name="dirmngr_domtrans" lineno="62">
 <summary>
 Execute dirmngr in the dirmngr domain.
 </summary>
@@ -96024,7 +97641,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="dirmngr_exec" lineno="66">
+<interface name="dirmngr_exec" lineno="81">
 <summary>
 Execute the dirmngr in the caller domain.
 </summary>
@@ -96034,7 +97651,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dirmngr_stream_connect" lineno="85">
+<interface name="dirmngr_stream_connect" lineno="100">
 <summary>
 Connect to dirmngr socket
 </summary>
@@ -96044,7 +97661,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="dirmngr_admin" lineno="114">
+<interface name="dirmngr_admin" lineno="129">
 <summary>
 All of the rules required to
 administrate an dirmngr environment.
@@ -96367,6 +97984,147 @@ Role allowed access.
 <rolecap/>
 </interface>
 </module>
+<module name="docker" filename="policy/modules/services/docker.if">
+<summary>Policy for docker</summary>
+<interface name="docker_domtrans_cli" lineno="13">
+<summary>
+Execute docker CLI in the docker CLI domain.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed to transition.
+</summary>
+</param>
+</interface>
+<interface name="docker_run_cli" lineno="39">
+<summary>
+Execute docker CLI in the docker CLI
+domain, and allow the specified role
+the docker CLI domain.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed to transition.
+</summary>
+</param>
+<param name="role">
+<summary>
+The role to be allowed the docker domain.
+</summary>
+</param>
+</interface>
+<interface name="docker_domtrans_user_daemon" lineno="59">
+<summary>
+Execute docker in the docker user domain.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed to transition.
+</summary>
+</param>
+</interface>
+<interface name="docker_run_user_daemon" lineno="85">
+<summary>
+Execute docker in the docker user
+domain, and allow the specified
+role the docker user domain.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed to transition.
+</summary>
+</param>
+<param name="role">
+<summary>
+The role to be allowed the docker domain.
+</summary>
+</param>
+</interface>
+<interface name="docker_domtrans_user_cli" lineno="106">
+<summary>
+Execute docker CLI in the docker CLI
+user domain.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed to transition.
+</summary>
+</param>
+</interface>
+<interface name="docker_run_user_cli" lineno="133">
+<summary>
+Execute docker CLI in the docker CLI
+user domain, and allow the specified
+role the docker CLI user domain.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed to transition.
+</summary>
+</param>
+<param name="role">
+<summary>
+The role to be allowed the docker
+user domain.
+</summary>
+</param>
+</interface>
+<template name="docker_user_role" lineno="170">
+<summary>
+Role access for rootless docker.
+</summary>
+<param name="role_prefix">
+<summary>
+The prefix of the user role (e.g., user
+is the prefix for user_r).
+</summary>
+</param>
+<param name="user_domain">
+<summary>
+User domain for the role.
+</summary>
+</param>
+<param name="user_exec_domain">
+<summary>
+User exec domain for execute and transition access.
+</summary>
+</param>
+<param name="role">
+<summary>
+Role allowed access.
+</summary>
+</param>
+<rolecap/>
+</template>
+<interface name="docker_signal_user_daemon" lineno="205">
+<summary>
+Send signals to the rootless docker daemon.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed to transition.
+</summary>
+</param>
+</interface>
+<interface name="docker_admin" lineno="231">
+<summary>
+All of the rules required to
+administrate a docker
+environment.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+<param name="role">
+<summary>
+Role allowed access.
+</summary>
+</param>
+<rolecap/>
+</interface>
+</module>
 <module name="dovecot" filename="policy/modules/services/dovecot.if">
 <summary>POP and IMAP mail server.</summary>
 <interface name="dovecot_stream_connect" lineno="14">
@@ -97299,22 +99057,33 @@ Role allowed access.
 </module>
 <module name="git" filename="policy/modules/services/git.if">
 <summary>GIT revision control system.</summary>
-<interface name="git_role" lineno="18">
+<template name="git_role" lineno="29">
 <summary>
 Role access for Git session.
 </summary>
-<param name="role">
+<param name="role_prefix">
 <summary>
-Role allowed access.
+The prefix of the user role (e.g., user
+is the prefix for user_r).
 </summary>
 </param>
-<param name="domain">
+<param name="user_domain">
 <summary>
 User domain for the role.
 </summary>
 </param>
-</interface>
-<template name="git_client_role_template" lineno="71">
+<param name="user_exec_domain">
+<summary>
+User exec domain for execute and transition access.
+</summary>
+</param>
+<param name="role">
+<summary>
+Role allowed access
+</summary>
+</param>
+</template>
+<template name="git_client_role_template" lineno="91">
 <summary>
 Role access for Git client.
 </summary>
@@ -97324,18 +99093,23 @@ The prefix of the user role (e.g., user
 is the prefix for user_r).
 </summary>
 </param>
-<param name="user_role">
+<param name="user_domain">
 <summary>
-The role associated with the user domain.
+User domain for the role.
 </summary>
 </param>
-<param name="user_domain">
+<param name="user_exec_domain">
 <summary>
-The type of the user domain.
+User exec domain for execute and transition access.
+</summary>
+</param>
+<param name="role">
+<summary>
+Role allowed access
 </summary>
 </param>
 </template>
-<interface name="git_read_generic_sys_content_files" lineno="127">
+<interface name="git_read_generic_sys_content_files" lineno="151">
 <summary>
 Read generic system content files.
 </summary>
@@ -97869,23 +99643,34 @@ Domain prefix to be used.
 </summary>
 </param>
 </template>
-<interface name="hadoop_role" lineno="109">
+<template name="hadoop_role" lineno="120">
 <summary>
 Role access for hadoop.
 </summary>
-<param name="role">
+<param name="role_prefix">
 <summary>
-Role allowed access.
+The prefix of the user role (e.g., user
+is the prefix for user_r).
 </summary>
 </param>
-<param name="domain">
+<param name="user_domain">
 <summary>
-Domain allowed access.
+User domain for the role.
+</summary>
+</param>
+<param name="user_exec_domain">
+<summary>
+User exec domain for execute and transition access.
+</summary>
+</param>
+<param name="role">
+<summary>
+Role allowed access
 </summary>
 </param>
 <rolecap/>
-</interface>
-<interface name="hadoop_domtrans" lineno="141">
+</template>
+<interface name="hadoop_domtrans" lineno="157">
 <summary>
 Execute hadoop in the
 hadoop domain.
@@ -97896,7 +99681,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="hadoop_recvfrom" lineno="160">
+<interface name="hadoop_recvfrom" lineno="176">
 <summary>
 Receive from hadoop peer.
 </summary>
@@ -97906,7 +99691,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="hadoop_domtrans_zookeeper_client" lineno="179">
+<interface name="hadoop_domtrans_zookeeper_client" lineno="195">
 <summary>
 Execute zookeeper client in the
 zookeeper client domain.
@@ -97917,7 +99702,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="hadoop_recvfrom_zookeeper_client" lineno="198">
+<interface name="hadoop_recvfrom_zookeeper_client" lineno="214">
 <summary>
 Receive from zookeeper peer.
 </summary>
@@ -97927,7 +99712,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="hadoop_domtrans_zookeeper_server" lineno="217">
+<interface name="hadoop_domtrans_zookeeper_server" lineno="233">
 <summary>
 Execute zookeeper server in the
 zookeeper server domain.
@@ -97938,7 +99723,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="hadoop_recvfrom_zookeeper_server" lineno="236">
+<interface name="hadoop_recvfrom_zookeeper_server" lineno="252">
 <summary>
 Receive from zookeeper server peer.
 </summary>
@@ -97948,7 +99733,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="hadoop_initrc_domtrans_zookeeper_server" lineno="255">
+<interface name="hadoop_initrc_domtrans_zookeeper_server" lineno="271">
 <summary>
 Execute zookeeper server in the
 zookeeper domain.
@@ -97959,7 +99744,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="hadoop_recvfrom_datanode" lineno="273">
+<interface name="hadoop_recvfrom_datanode" lineno="289">
 <summary>
 Receive from datanode peer.
 </summary>
@@ -97969,7 +99754,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="hadoop_read_config" lineno="291">
+<interface name="hadoop_read_config" lineno="307">
 <summary>
 Read hadoop configuration files.
 </summary>
@@ -97979,7 +99764,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="hadoop_exec_config" lineno="310">
+<interface name="hadoop_exec_config" lineno="326">
 <summary>
 Execute hadoop configuration files.
 </summary>
@@ -97989,7 +99774,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="hadoop_recvfrom_jobtracker" lineno="329">
+<interface name="hadoop_recvfrom_jobtracker" lineno="345">
 <summary>
 Receive from jobtracker peer.
 </summary>
@@ -97999,7 +99784,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="hadoop_match_lan_spd" lineno="347">
+<interface name="hadoop_match_lan_spd" lineno="363">
 <summary>
 Match hadoop lan association.
 </summary>
@@ -98009,7 +99794,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="hadoop_recvfrom_namenode" lineno="365">
+<interface name="hadoop_recvfrom_namenode" lineno="381">
 <summary>
 Receive from namenode peer.
 </summary>
@@ -98019,7 +99804,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="hadoop_recvfrom_secondarynamenode" lineno="383">
+<interface name="hadoop_recvfrom_secondarynamenode" lineno="399">
 <summary>
 Receive from secondary namenode peer.
 </summary>
@@ -98029,7 +99814,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="hadoop_recvfrom_tasktracker" lineno="401">
+<interface name="hadoop_recvfrom_tasktracker" lineno="417">
 <summary>
 Receive from tasktracker peer.
 </summary>
@@ -98039,7 +99824,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="hadoop_admin" lineno="426">
+<interface name="hadoop_admin" lineno="442">
 <summary>
 All of the rules required to
 administrate an hadoop environment.
@@ -99397,22 +101182,33 @@ Role allowed access.
 </module>
 <module name="lpd" filename="policy/modules/services/lpd.if">
 <summary>Line printer daemon.</summary>
-<interface name="lpd_role" lineno="18">
+<template name="lpd_role" lineno="29">
 <summary>
 Role access for lpd.
 </summary>
-<param name="role">
+<param name="role_prefix">
 <summary>
-Role allowed access.
+The prefix of the user role (e.g., user
+is the prefix for user_r).
 </summary>
 </param>
-<param name="domain">
+<param name="user_domain">
 <summary>
 User domain for the role.
 </summary>
 </param>
-</interface>
-<interface name="lpd_domtrans_checkpc" lineno="58">
+<param name="user_exec_domain">
+<summary>
+User exec domain for execute and transition access.
+</summary>
+</param>
+<param name="role">
+<summary>
+Role allowed access
+</summary>
+</param>
+</template>
+<interface name="lpd_domtrans_checkpc" lineno="73">
 <summary>
 Execute lpd in the lpd domain.
 </summary>
@@ -99422,7 +101218,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="lpd_run_checkpc" lineno="85">
+<interface name="lpd_run_checkpc" lineno="100">
 <summary>
 Execute amrecover in the lpd
 domain, and allow the specified
@@ -99440,7 +101236,7 @@ Role allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="lpd_list_spool" lineno="104">
+<interface name="lpd_list_spool" lineno="119">
 <summary>
 List printer spool directories.
 </summary>
@@ -99450,7 +101246,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="lpd_read_spool" lineno="123">
+<interface name="lpd_read_spool" lineno="138">
 <summary>
 Read printer spool files.
 </summary>
@@ -99460,7 +101256,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="lpd_manage_spool" lineno="143">
+<interface name="lpd_manage_spool" lineno="158">
 <summary>
 Create, read, write, and delete
 printer spool content.
@@ -99471,7 +101267,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="lpd_relabel_spool" lineno="164">
+<interface name="lpd_relabel_spool" lineno="179">
 <summary>
 Relabel spool files.
 </summary>
@@ -99481,7 +101277,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="lpd_read_config" lineno="184">
+<interface name="lpd_read_config" lineno="199">
 <summary>
 Read printer configuration files.
 </summary>
@@ -99492,7 +101288,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="lpd_domtrans_lpr" lineno="203">
+<interface name="lpd_domtrans_lpr" lineno="218">
 <summary>
 Transition to a user lpr domain.
 </summary>
@@ -99502,7 +101298,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="lpd_run_lpr" lineno="229">
+<interface name="lpd_run_lpr" lineno="244">
 <summary>
 Execute lpr in the lpr domain, and
 allow the specified role the lpr domain.
@@ -99519,7 +101315,7 @@ Role allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="lpd_exec_lpr" lineno="248">
+<interface name="lpd_exec_lpr" lineno="263">
 <summary>
 Execute lpr in the caller domain.
 </summary>
@@ -100375,22 +102171,33 @@ Domain prefix to be used.
 </summary>
 </param>
 </template>
-<interface name="mta_role" lineno="77">
+<template name="mta_role" lineno="88">
 <summary>
 Role access for mta.
 </summary>
-<param name="role">
+<param name="role_prefix">
 <summary>
-Role allowed access.
+The prefix of the user role (e.g., user
+is the prefix for user_r).
 </summary>
 </param>
-<param name="domain">
+<param name="user_domain">
 <summary>
 User domain for the role.
 </summary>
 </param>
-</interface>
-<interface name="mta_mailserver" lineno="137">
+<param name="user_exec_domain">
+<summary>
+User exec domain for execute and transition access.
+</summary>
+</param>
+<param name="role">
+<summary>
+Role allowed access
+</summary>
+</param>
+</template>
+<interface name="mta_mailserver" lineno="152">
 <summary>
 Make the specified domain usable for a mail server.
 </summary>
@@ -100405,7 +102212,7 @@ Type of the program to be used as an entry point to this domain.
 </summary>
 </param>
 </interface>
-<interface name="mta_agent_executable" lineno="156">
+<interface name="mta_agent_executable" lineno="171">
 <summary>
 Make the specified type a MTA executable file.
 </summary>
@@ -100415,7 +102222,7 @@ Type to be used as a mail client.
 </summary>
 </param>
 </interface>
-<interface name="mta_read_mail_home_files" lineno="176">
+<interface name="mta_read_mail_home_files" lineno="191">
 <summary>
 Read mta mail home files.
 </summary>
@@ -100425,7 +102232,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="mta_manage_mail_home_files" lineno="196">
+<interface name="mta_manage_mail_home_files" lineno="211">
 <summary>
 Create, read, write, and delete
 mta mail home files.
@@ -100436,7 +102243,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="mta_home_filetrans_mail_home" lineno="227">
+<interface name="mta_home_filetrans_mail_home" lineno="242">
 <summary>
 Create specified objects in user home
 directories with the generic mail
@@ -100458,7 +102265,7 @@ The name of the object being created.
 </summary>
 </param>
 </interface>
-<interface name="mta_manage_mail_home_rw_content" lineno="246">
+<interface name="mta_manage_mail_home_rw_content" lineno="261">
 <summary>
 Create, read, write, and delete
 mta mail home rw content.
@@ -100469,7 +102276,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="mta_home_filetrans_mail_home_rw" lineno="280">
+<interface name="mta_home_filetrans_mail_home_rw" lineno="295">
 <summary>
 Create specified objects in user home
 directories with the generic mail
@@ -100491,7 +102298,7 @@ The name of the object being created.
 </summary>
 </param>
 </interface>
-<interface name="mta_system_content" lineno="298">
+<interface name="mta_system_content" lineno="313">
 <summary>
 Make the specified type by a system MTA.
 </summary>
@@ -100501,7 +102308,7 @@ Type to be used as a mail client.
 </summary>
 </param>
 </interface>
-<interface name="mta_sendmail_mailserver" lineno="331">
+<interface name="mta_sendmail_mailserver" lineno="346">
 <summary>
 Modified mailserver interface for
 sendmail daemon use.
@@ -100526,7 +102333,7 @@ The type to be used for the mail server.
 </summary>
 </param>
 </interface>
-<interface name="mta_use_mailserver_fds" lineno="352">
+<interface name="mta_use_mailserver_fds" lineno="367">
 <summary>
 Inherit FDs from mailserver_domain domains
 </summary>
@@ -100536,7 +102343,7 @@ Type for a list server or delivery agent that inherits fds
 </summary>
 </param>
 </interface>
-<interface name="mta_mailserver_sender" lineno="371">
+<interface name="mta_mailserver_sender" lineno="386">
 <summary>
 Make a type a mailserver type used
 for sending mail.
@@ -100547,7 +102354,7 @@ Mail server domain type used for sending mail.
 </summary>
 </param>
 </interface>
-<interface name="mta_mailserver_delivery" lineno="390">
+<interface name="mta_mailserver_delivery" lineno="405">
 <summary>
 Make a type a mailserver type used
 for delivering mail to local users.
@@ -100558,7 +102365,7 @@ Mail server domain type used for delivering mail.
 </summary>
 </param>
 </interface>
-<interface name="mta_mailserver_user_agent" lineno="410">
+<interface name="mta_mailserver_user_agent" lineno="425">
 <summary>
 Make a type a mailserver type used
 for sending mail on behalf of local
@@ -100570,7 +102377,7 @@ Mail server domain type used for sending local mail.
 </summary>
 </param>
 </interface>
-<interface name="mta_send_mail" lineno="428">
+<interface name="mta_send_mail" lineno="443">
 <summary>
 Send mail from the system.
 </summary>
@@ -100580,7 +102387,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="mta_sendmail_domtrans" lineno="473">
+<interface name="mta_sendmail_domtrans" lineno="488">
 <summary>
 Execute send mail in a specified domain.
 </summary>
@@ -100605,7 +102412,7 @@ Domain to transition to.
 </summary>
 </param>
 </interface>
-<interface name="mta_signal_system_mail" lineno="495">
+<interface name="mta_signal_system_mail" lineno="510">
 <summary>
 Send signals to system mail.
 </summary>
@@ -100615,7 +102422,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="mta_kill_system_mail" lineno="513">
+<interface name="mta_kill_system_mail" lineno="528">
 <summary>
 Send kill signals to system mail.
 </summary>
@@ -100625,7 +102432,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="mta_sendmail_exec" lineno="531">
+<interface name="mta_sendmail_exec" lineno="546">
 <summary>
 Execute sendmail in the caller domain.
 </summary>
@@ -100635,7 +102442,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="mta_sendmail_entry_point" lineno="551">
+<interface name="mta_sendmail_entry_point" lineno="566">
 <summary>
 Make sendmail usable as an entry
 point for the domain.
@@ -100646,7 +102453,7 @@ Domain to be entered.
 </summary>
 </param>
 </interface>
-<interface name="mta_read_config" lineno="570">
+<interface name="mta_read_config" lineno="585">
 <summary>
 Read mail server configuration content.
 </summary>
@@ -100657,7 +102464,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="mta_write_config" lineno="592">
+<interface name="mta_write_config" lineno="607">
 <summary>
 Write mail server configuration files.
 </summary>
@@ -100668,7 +102475,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="mta_read_aliases" lineno="611">
+<interface name="mta_read_aliases" lineno="626">
 <summary>
 Read mail address alias files.
 </summary>
@@ -100678,7 +102485,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="mta_map_aliases" lineno="639">
+<interface name="mta_map_aliases" lineno="654">
 <summary>
 Read mail address alias files.
 </summary>
@@ -100688,7 +102495,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="mta_manage_aliases" lineno="658">
+<interface name="mta_manage_aliases" lineno="673">
 <summary>
 Create, read, write, and delete
 mail address alias content.
@@ -100699,7 +102506,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="mta_etc_filetrans_aliases" lineno="700">
+<interface name="mta_etc_filetrans_aliases" lineno="715">
 <summary>
 Create specified object in generic
 etc directories with the mail address
@@ -100721,7 +102528,7 @@ The name of the object being created.
 </summary>
 </param>
 </interface>
-<interface name="mta_spec_filetrans_aliases" lineno="735">
+<interface name="mta_spec_filetrans_aliases" lineno="750">
 <summary>
 Create specified objects in specified
 directories with a type transition to
@@ -100748,7 +102555,7 @@ The name of the object being created.
 </summary>
 </param>
 </interface>
-<interface name="mta_rw_aliases" lineno="754">
+<interface name="mta_rw_aliases" lineno="769">
 <summary>
 Read and write mail alias files.
 </summary>
@@ -100759,7 +102566,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="mta_dontaudit_rw_delivery_tcp_sockets" lineno="784">
+<interface name="mta_dontaudit_rw_delivery_tcp_sockets" lineno="799">
 <summary>
 Do not audit attempts to read
 and write TCP sockets of mail
@@ -100771,7 +102578,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="mta_list_spool" lineno="802">
+<interface name="mta_list_spool" lineno="817">
 <summary>
 Allow listing the mail spool.
 </summary>
@@ -100781,7 +102588,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="mta_read_spool_symlinks" lineno="820">
+<interface name="mta_read_spool_symlinks" lineno="835">
 <summary>
 Allow reading mail spool symlinks.
 </summary>
@@ -100791,7 +102598,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="mta_dontaudit_read_spool_symlinks" lineno="839">
+<interface name="mta_dontaudit_read_spool_symlinks" lineno="854">
 <summary>
 Do not audit attempts to read
 mail spool symlinks.
@@ -100802,7 +102609,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="mta_getattr_spool" lineno="857">
+<interface name="mta_getattr_spool" lineno="872">
 <summary>
 Get attributes of mail spool content.
 </summary>
@@ -100812,7 +102619,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="mta_dontaudit_getattr_spool_files" lineno="879">
+<interface name="mta_dontaudit_getattr_spool_files" lineno="894">
 <summary>
 Do not audit attempts to get
 attributes of mail spool files.
@@ -100823,7 +102630,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="mta_spool_filetrans" lineno="917">
+<interface name="mta_spool_filetrans" lineno="932">
 <summary>
 Create specified objects in the
 mail spool directory with a
@@ -100850,7 +102657,7 @@ The name of the object being created.
 </summary>
 </param>
 </interface>
-<interface name="mta_read_spool_files" lineno="936">
+<interface name="mta_read_spool_files" lineno="951">
 <summary>
 Read mail spool files.
 </summary>
@@ -100860,7 +102667,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="mta_rw_spool" lineno="956">
+<interface name="mta_rw_spool" lineno="971">
 <summary>
 Read and write mail spool files.
 </summary>
@@ -100870,7 +102677,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="mta_append_spool" lineno="977">
+<interface name="mta_append_spool" lineno="992">
 <summary>
 Create, read, and write mail spool files.
 </summary>
@@ -100880,7 +102687,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="mta_delete_spool" lineno="998">
+<interface name="mta_delete_spool" lineno="1013">
 <summary>
 Delete mail spool files.
 </summary>
@@ -100890,7 +102697,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="mta_manage_spool" lineno="1018">
+<interface name="mta_manage_spool" lineno="1033">
 <summary>
 Create, read, write, and delete
 mail spool content.
@@ -100901,7 +102708,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="mta_watch_spool" lineno="1040">
+<interface name="mta_watch_spool" lineno="1055">
 <summary>
 Watch mail spool content.
 </summary>
@@ -100911,7 +102718,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="mta_queue_filetrans" lineno="1075">
+<interface name="mta_queue_filetrans" lineno="1090">
 <summary>
 Create specified objects in the
 mail queue spool directory with a
@@ -100938,7 +102745,7 @@ The name of the object being created.
 </summary>
 </param>
 </interface>
-<interface name="mta_search_queue" lineno="1094">
+<interface name="mta_search_queue" lineno="1109">
 <summary>
 Search mail queue directories.
 </summary>
@@ -100948,7 +102755,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="mta_list_queue" lineno="1113">
+<interface name="mta_list_queue" lineno="1128">
 <summary>
 List mail queue directories.
 </summary>
@@ -100958,7 +102765,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="mta_read_queue" lineno="1132">
+<interface name="mta_read_queue" lineno="1147">
 <summary>
 Read mail queue files.
 </summary>
@@ -100968,7 +102775,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="mta_dontaudit_rw_queue" lineno="1152">
+<interface name="mta_dontaudit_rw_queue" lineno="1167">
 <summary>
 Do not audit attempts to read and
 write mail queue content.
@@ -100979,7 +102786,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="mta_manage_queue" lineno="1172">
+<interface name="mta_manage_queue" lineno="1187">
 <summary>
 Create, read, write, and delete
 mail queue content.
@@ -100990,7 +102797,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="mta_read_sendmail_bin" lineno="1192">
+<interface name="mta_read_sendmail_bin" lineno="1207">
 <summary>
 Read sendmail binary.
 </summary>
@@ -101000,7 +102807,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="mta_rw_user_mail_stream_sockets" lineno="1211">
+<interface name="mta_rw_user_mail_stream_sockets" lineno="1226">
 <summary>
 Read and write unix domain stream
 sockets of all base mail domains.
@@ -102637,6 +104444,45 @@ Domain allowed access.
 </param>
 </interface>
 </module>
+<module name="obfs4proxy" filename="policy/modules/services/obfs4proxy.if">
+<summary>obfs4proxy.</summary>
+<interface name="obfs4proxy_domtrans" lineno="13">
+<summary>
+Execute a domain transition to run obfs4proxy.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed to transition.
+</summary>
+</param>
+</interface>
+<interface name="obfs4proxy_signal" lineno="32">
+<summary>
+Send terminated signals to obfs4proxy.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<tunable name="obfs4proxy_bind_all_unreserved_ports" dftval="false">
+<desc>
+<p>
+Determine whether obfs4proxy can bind
+tcp sockets to all unreserved ports.
+</p>
+</desc>
+</tunable>
+<tunable name="obfs4proxy_bind_http_ports" dftval="false">
+<desc>
+<p>
+Determine whether obfs4proxy can bind
+tcp sockets to all http ports.
+</p>
+</desc>
+</tunable>
+</module>
 <module name="oddjob" filename="policy/modules/services/oddjob.if">
 <summary>D-BUS service which runs odd jobs on behalf of client applications.</summary>
 <interface name="oddjob_domtrans" lineno="13">
@@ -103503,6 +105349,166 @@ Role allowed access.
 <rolecap/>
 </interface>
 </module>
+<module name="podman" filename="policy/modules/services/podman.if">
+<summary>Policy for podman</summary>
+<interface name="podman_domtrans" lineno="13">
+<summary>
+Execute podman in the podman domain.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed to transition.
+</summary>
+</param>
+</interface>
+<interface name="podman_run" lineno="39">
+<summary>
+Execute podman in the podman domain,
+and allow the specified role the
+podman domain.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed to transition.
+</summary>
+</param>
+<param name="role">
+<summary>
+The role to be allowed the podman domain.
+</summary>
+</param>
+</interface>
+<interface name="podman_domtrans_user" lineno="60">
+<summary>
+Execute podman in the podman user
+domain (rootless podman).
+</summary>
+<param name="domain">
+<summary>
+Domain allowed to transition.
+</summary>
+</param>
+</interface>
+<interface name="podman_run_user" lineno="87">
+<summary>
+Execute podman in the podman user
+domain, and allow the specified role
+the podman user domain (rootless
+podman).
+</summary>
+<param name="domain">
+<summary>
+Domain allowed to transition.
+</summary>
+</param>
+<param name="role">
+<summary>
+The role to be allowed the podman domain.
+</summary>
+</param>
+</interface>
+<interface name="podman_domtrans_conmon" lineno="107">
+<summary>
+Execute conmon in the conmon domain.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed to transition.
+</summary>
+</param>
+</interface>
+<interface name="podman_run_conmon" lineno="133">
+<summary>
+Execute conmon in the conmon domain,
+and allow the specified role the
+conmon domain.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed to transition.
+</summary>
+</param>
+<param name="role">
+<summary>
+The role to be allowed the conmon domain.
+</summary>
+</param>
+</interface>
+<interface name="podman_domtrans_conmon_user" lineno="154">
+<summary>
+Execute conmon in the conmon user
+domain (rootless podman).
+</summary>
+<param name="domain">
+<summary>
+Domain allowed to transition.
+</summary>
+</param>
+</interface>
+<interface name="podman_run_conmon_user" lineno="181">
+<summary>
+Execute conmon in the conmon user
+domain, and allow the specified role
+the conmon user domain (rootless
+podman).
+</summary>
+<param name="domain">
+<summary>
+Domain allowed to transition.
+</summary>
+</param>
+<param name="role">
+<summary>
+The role to be allowed the conmon domain.
+</summary>
+</param>
+</interface>
+<template name="podman_user_role" lineno="218">
+<summary>
+Role access for rootless podman.
+</summary>
+<param name="role_prefix">
+<summary>
+The prefix of the user role (e.g., user
+is the prefix for user_r).
+</summary>
+</param>
+<param name="user_domain">
+<summary>
+User domain for the role.
+</summary>
+</param>
+<param name="user_exec_domain">
+<summary>
+User exec domain for execute and transition access.
+</summary>
+</param>
+<param name="role">
+<summary>
+Role allowed access.
+</summary>
+</param>
+<rolecap/>
+</template>
+<interface name="podman_admin" lineno="255">
+<summary>
+All of the rules required to
+administrate a podman
+environment.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+<param name="role">
+<summary>
+Role allowed access.
+</summary>
+</param>
+<rolecap/>
+</interface>
+</module>
 <module name="policykit" filename="policy/modules/services/policykit.if">
 <summary>Policy framework for controlling privileges for system-wide services.</summary>
 <interface name="policykit_dbus_chat" lineno="14">
@@ -104187,22 +106193,33 @@ Role allowed access.
 </module>
 <module name="postgresql" filename="policy/modules/services/postgresql.if">
 <summary>PostgreSQL relational database</summary>
-<interface name="postgresql_role" lineno="18">
+<template name="postgresql_role" lineno="29">
 <summary>
 Role access for SE-PostgreSQL.
 </summary>
-<param name="user_role">
+<param name="role_prefix">
 <summary>
-The role associated with the user domain.
+The prefix of the user role (e.g., user
+is the prefix for user_r).
 </summary>
 </param>
 <param name="user_domain">
 <summary>
-The type of the user domain.
+User domain for the role.
 </summary>
 </param>
-</interface>
-<interface name="postgresql_loadable_module" lineno="109">
+<param name="user_exec_domain">
+<summary>
+User exec domain for execute and transition access.
+</summary>
+</param>
+<param name="role">
+<summary>
+Role allowed access
+</summary>
+</param>
+</template>
+<interface name="postgresql_loadable_module" lineno="125">
 <summary>
 Marks as a SE-PostgreSQL loadable shared library module
 </summary>
@@ -104212,7 +106229,7 @@ Type marked as a database object type.
 </summary>
 </param>
 </interface>
-<interface name="postgresql_database_object" lineno="127">
+<interface name="postgresql_database_object" lineno="143">
 <summary>
 Marks as a SE-PostgreSQL database object type
 </summary>
@@ -104222,7 +106239,7 @@ Type marked as a database object type.
 </summary>
 </param>
 </interface>
-<interface name="postgresql_schema_object" lineno="145">
+<interface name="postgresql_schema_object" lineno="161">
 <summary>
 Marks as a SE-PostgreSQL schema object type
 </summary>
@@ -104232,7 +106249,7 @@ Type marked as a schema object type.
 </summary>
 </param>
 </interface>
-<interface name="postgresql_table_object" lineno="163">
+<interface name="postgresql_table_object" lineno="179">
 <summary>
 Marks as a SE-PostgreSQL table/column/tuple object type
 </summary>
@@ -104242,7 +106259,7 @@ Type marked as a table/column/tuple object type.
 </summary>
 </param>
 </interface>
-<interface name="postgresql_system_table_object" lineno="181">
+<interface name="postgresql_system_table_object" lineno="197">
 <summary>
 Marks as a SE-PostgreSQL system table/column/tuple object type
 </summary>
@@ -104252,7 +106269,7 @@ Type marked as a table/column/tuple object type.
 </summary>
 </param>
 </interface>
-<interface name="postgresql_sequence_object" lineno="200">
+<interface name="postgresql_sequence_object" lineno="216">
 <summary>
 Marks as a SE-PostgreSQL sequence type
 </summary>
@@ -104262,7 +106279,7 @@ Type marked as a sequence type.
 </summary>
 </param>
 </interface>
-<interface name="postgresql_view_object" lineno="218">
+<interface name="postgresql_view_object" lineno="234">
 <summary>
 Marks as a SE-PostgreSQL view object type
 </summary>
@@ -104272,7 +106289,7 @@ Type marked as a view object type.
 </summary>
 </param>
 </interface>
-<interface name="postgresql_procedure_object" lineno="236">
+<interface name="postgresql_procedure_object" lineno="252">
 <summary>
 Marks as a SE-PostgreSQL procedure object type
 </summary>
@@ -104282,7 +106299,7 @@ Type marked as a procedure object type.
 </summary>
 </param>
 </interface>
-<interface name="postgresql_trusted_procedure_object" lineno="254">
+<interface name="postgresql_trusted_procedure_object" lineno="270">
 <summary>
 Marks as a SE-PostgreSQL trusted procedure object type
 </summary>
@@ -104292,7 +106309,7 @@ Type marked as a trusted procedure object type.
 </summary>
 </param>
 </interface>
-<interface name="postgresql_language_object" lineno="274">
+<interface name="postgresql_language_object" lineno="290">
 <summary>
 Marks as a SE-PostgreSQL procedural language object type
 </summary>
@@ -104302,7 +106319,7 @@ Type marked as a procedural language object type.
 </summary>
 </param>
 </interface>
-<interface name="postgresql_blob_object" lineno="292">
+<interface name="postgresql_blob_object" lineno="308">
 <summary>
 Marks as a SE-PostgreSQL binary large object type
 </summary>
@@ -104312,7 +106329,7 @@ Type marked as a database binary large object type.
 </summary>
 </param>
 </interface>
-<interface name="postgresql_search_db" lineno="310">
+<interface name="postgresql_search_db" lineno="326">
 <summary>
 Allow the specified domain to search postgresql's database directory.
 </summary>
@@ -104322,7 +106339,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="postgresql_manage_db" lineno="327">
+<interface name="postgresql_manage_db" lineno="343">
 <summary>
 Allow the specified domain to manage postgresql's database.
 </summary>
@@ -104332,7 +106349,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="postgresql_exec" lineno="347">
+<interface name="postgresql_exec" lineno="363">
 <summary>
 Execute postgresql in the calling domain.
 </summary>
@@ -104342,7 +106359,7 @@ Domain allowed access
 </summary>
 </param>
 </interface>
-<interface name="postgresql_domtrans" lineno="365">
+<interface name="postgresql_domtrans" lineno="381">
 <summary>
 Execute postgresql in the postgresql domain.
 </summary>
@@ -104352,7 +106369,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="postgresql_signal" lineno="383">
+<interface name="postgresql_signal" lineno="399">
 <summary>
 Allow domain to signal postgresql
 </summary>
@@ -104362,7 +106379,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="postgresql_read_config" lineno="401">
+<interface name="postgresql_read_config" lineno="417">
 <summary>
 Allow the specified domain to read postgresql's etc.
 </summary>
@@ -104373,7 +106390,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="postgresql_tcp_connect" lineno="422">
+<interface name="postgresql_tcp_connect" lineno="438">
 <summary>
 Allow the specified domain to connect to postgresql with a tcp socket.
 </summary>
@@ -104383,7 +106400,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="postgresql_stream_connect" lineno="443">
+<interface name="postgresql_stream_connect" lineno="459">
 <summary>
 Allow the specified domain to connect to postgresql with a unix socket.
 </summary>
@@ -104394,7 +106411,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="postgresql_unpriv_client" lineno="465">
+<interface name="postgresql_unpriv_client" lineno="481">
 <summary>
 Allow the specified domain unprivileged accesses to unifined database objects
 managed by SE-PostgreSQL,
@@ -104405,7 +106422,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="postgresql_unconfined" lineno="557">
+<interface name="postgresql_unconfined" lineno="573">
 <summary>
 Allow the specified domain unconfined accesses to any database objects
 managed by SE-PostgreSQL,
@@ -104416,7 +106433,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="postgresql_admin" lineno="581">
+<interface name="postgresql_admin" lineno="597">
 <summary>
 All of the rules required to administrate an postgresql environment
 </summary>
@@ -105231,22 +107248,33 @@ Role allowed access.
 </module>
 <module name="pyzor" filename="policy/modules/services/pyzor.if">
 <summary>Pyzor is a distributed, collaborative spam detection and filtering network.</summary>
-<interface name="pyzor_role" lineno="18">
+<template name="pyzor_role" lineno="29">
 <summary>
 Role access for pyzor.
 </summary>
-<param name="role">
+<param name="role_prefix">
 <summary>
-Role allowed access
+The prefix of the user role (e.g., user
+is the prefix for user_r).
 </summary>
 </param>
-<param name="domain">
+<param name="user_domain">
 <summary>
-User domain for the role
+User domain for the role.
 </summary>
 </param>
-</interface>
-<interface name="pyzor_signal" lineno="49">
+<param name="user_exec_domain">
+<summary>
+User exec domain for execute and transition access.
+</summary>
+</param>
+<param name="role">
+<summary>
+Role allowed access
+</summary>
+</param>
+</template>
+<interface name="pyzor_signal" lineno="64">
 <summary>
 Send generic signals to pyzor.
 </summary>
@@ -105256,7 +107284,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="pyzor_domtrans" lineno="67">
+<interface name="pyzor_domtrans" lineno="82">
 <summary>
 Execute pyzor with a domain transition.
 </summary>
@@ -105266,7 +107294,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="pyzor_exec" lineno="86">
+<interface name="pyzor_exec" lineno="101">
 <summary>
 Execute pyzor in the caller domain.
 </summary>
@@ -105276,7 +107304,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="pyzor_admin" lineno="112">
+<interface name="pyzor_admin" lineno="127">
 <summary>
 All of the rules required to
 administrate an pyzor environment.
@@ -105563,22 +107591,33 @@ Domain prefix to be used.
 </summary>
 </param>
 </template>
-<interface name="razor_role" lineno="51">
+<template name="razor_role" lineno="62">
 <summary>
 Role access for razor.
 </summary>
-<param name="role">
+<param name="role_prefix">
 <summary>
-Role allowed access.
+The prefix of the user role (e.g., user
+is the prefix for user_r).
 </summary>
 </param>
-<param name="domain">
+<param name="user_domain">
 <summary>
 User domain for the role.
 </summary>
 </param>
-</interface>
-<interface name="razor_domtrans" lineno="82">
+<param name="user_exec_domain">
+<summary>
+User exec domain for execute and transition access.
+</summary>
+</param>
+<param name="role">
+<summary>
+Role allowed access
+</summary>
+</param>
+</template>
+<interface name="razor_domtrans" lineno="97">
 <summary>
 Execute razor in the system razor domain.
 </summary>
@@ -105588,7 +107627,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="razor_manage_home_content" lineno="102">
+<interface name="razor_manage_home_content" lineno="117">
 <summary>
 Create, read, write, and delete
 razor home content.
@@ -105599,7 +107638,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="razor_read_lib_files" lineno="123">
+<interface name="razor_read_lib_files" lineno="138">
 <summary>
 Read razor lib files.
 </summary>
@@ -106007,6 +108046,73 @@ Role allowed access.
 <rolecap/>
 </interface>
 </module>
+<module name="rootlesskit" filename="policy/modules/services/rootlesskit.if">
+<summary>Policy for RootlessKit</summary>
+<interface name="rootlesskit_exec" lineno="13">
+<summary>
+Execute rootlesskit in the caller domain.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="rootlesskit_domtrans" lineno="31">
+<summary>
+Execute rootlesskit in the rootlesskit domain.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed to transition.
+</summary>
+</param>
+</interface>
+<interface name="rootlesskit_run" lineno="57">
+<summary>
+Execute rootlesskit in the rootlesskit
+domain, and allow the specified role
+the rootlesskit domain.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed to transition.
+</summary>
+</param>
+<param name="role">
+<summary>
+The role to be allowed the rootlesskit domain.
+</summary>
+</param>
+</interface>
+<template name="rootlesskit_role" lineno="94">
+<summary>
+Role access for rootlesskit.
+</summary>
+<param name="role_prefix">
+<summary>
+The prefix of the user role (e.g., user
+is the prefix for user_r).
+</summary>
+</param>
+<param name="user_domain">
+<summary>
+User domain for the role.
+</summary>
+</param>
+<param name="user_exec_domain">
+<summary>
+User exec domain for execute and transition access.
+</summary>
+</param>
+<param name="role">
+<summary>
+Role allowed access.
+</summary>
+</param>
+<rolecap/>
+</template>
+</module>
 <module name="rpc" filename="policy/modules/services/rpc.if">
 <summary>Remote Procedure Call Daemon.</summary>
 <interface name="rpc_stub" lineno="13">
@@ -108037,22 +110143,33 @@ Role allowed access.
 </module>
 <module name="spamassassin" filename="policy/modules/services/spamassassin.if">
 <summary>Filter used for removing unsolicited email.</summary>
-<interface name="spamassassin_role" lineno="18">
+<template name="spamassassin_role" lineno="29">
 <summary>
 Role access for spamassassin.
 </summary>
-<param name="role">
+<param name="role_prefix">
 <summary>
-Role allowed access.
+The prefix of the user role (e.g., user
+is the prefix for user_r).
 </summary>
 </param>
-<param name="domain">
+<param name="user_domain">
 <summary>
 User domain for the role.
 </summary>
 </param>
-</interface>
-<interface name="spamassassin_run_update" lineno="57">
+<param name="user_exec_domain">
+<summary>
+User exec domain for execute and transition access.
+</summary>
+</param>
+<param name="role">
+<summary>
+Role allowed access
+</summary>
+</param>
+</template>
+<interface name="spamassassin_run_update" lineno="73">
 <summary>
 Execute sa-update in the spamd-update domain,
 and allow the specified role
@@ -108070,7 +110187,7 @@ Role allowed access.
 </summary>
 </param>
 </interface>
-<interface name="spamassassin_exec" lineno="77">
+<interface name="spamassassin_exec" lineno="93">
 <summary>
 Execute the standalone spamassassin
 program in the caller directory.
@@ -108081,7 +110198,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="spamassassin_signal_spamd" lineno="96">
+<interface name="spamassassin_signal_spamd" lineno="112">
 <summary>
 Send generic signals to spamd.
 </summary>
@@ -108091,7 +110208,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="spamassassin_reload" lineno="115">
+<interface name="spamassassin_reload" lineno="131">
 <summary>
 reload SA service
 </summary>
@@ -108102,7 +110219,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="spamassassin_status" lineno="135">
+<interface name="spamassassin_status" lineno="151">
 <summary>
 Get SA service status
 </summary>
@@ -108113,7 +110230,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="spamassassin_exec_spamd" lineno="154">
+<interface name="spamassassin_exec_spamd" lineno="170">
 <summary>
 Execute spamd in the caller domain.
 </summary>
@@ -108123,7 +110240,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="spamassassin_domtrans_client" lineno="173">
+<interface name="spamassassin_domtrans_client" lineno="189">
 <summary>
 Execute spamc in the spamc domain.
 </summary>
@@ -108133,7 +110250,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="spamassassin_exec_client" lineno="192">
+<interface name="spamassassin_exec_client" lineno="208">
 <summary>
 Execute spamc in the caller domain.
 </summary>
@@ -108143,7 +110260,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="spamassassin_kill_client" lineno="211">
+<interface name="spamassassin_kill_client" lineno="227">
 <summary>
 Send kill signals to spamc.
 </summary>
@@ -108153,7 +110270,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="spamassassin_domtrans_local_client" lineno="230">
+<interface name="spamassassin_domtrans_local_client" lineno="246">
 <summary>
 Execute spamassassin standalone client
 in the user spamassassin domain.
@@ -108164,7 +110281,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="spamassassin_manage_spamd_home_content" lineno="250">
+<interface name="spamassassin_manage_spamd_home_content" lineno="266">
 <summary>
 Create, read, write, and delete
 spamd home content.
@@ -108175,7 +110292,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="spamassassin_relabel_spamd_home_content" lineno="271">
+<interface name="spamassassin_relabel_spamd_home_content" lineno="287">
 <summary>
 Relabel spamd home content.
 </summary>
@@ -108185,7 +110302,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="spamassassin_home_filetrans_spamd_home" lineno="303">
+<interface name="spamassassin_home_filetrans_spamd_home" lineno="319">
 <summary>
 Create objects in user home
 directories with the spamd home type.
@@ -108206,7 +110323,7 @@ The name of the object being created.
 </summary>
 </param>
 </interface>
-<interface name="spamassassin_read_lib_files" lineno="321">
+<interface name="spamassassin_read_lib_files" lineno="337">
 <summary>
 Read spamd lib files.
 </summary>
@@ -108216,7 +110333,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="spamassassin_manage_lib_files" lineno="341">
+<interface name="spamassassin_manage_lib_files" lineno="357">
 <summary>
 Create, read, write, and delete
 spamd lib files.
@@ -108227,7 +110344,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="spamassassin_read_spamd_pid_files" lineno="360">
+<interface name="spamassassin_read_spamd_pid_files" lineno="376">
 <summary>
 Read spamd pid files.  (Deprecated)
 </summary>
@@ -108237,7 +110354,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="spamassassin_read_spamd_runtime_files" lineno="375">
+<interface name="spamassassin_read_spamd_runtime_files" lineno="391">
 <summary>
 Read spamd runtime files.
 </summary>
@@ -108247,7 +110364,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="spamassassin_read_spamd_tmp_files" lineno="394">
+<interface name="spamassassin_read_spamd_tmp_files" lineno="410">
 <summary>
 Read temporary spamd files.
 </summary>
@@ -108257,7 +110374,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="spamassassin_dontaudit_getattr_spamd_tmp_sockets" lineno="413">
+<interface name="spamassassin_dontaudit_getattr_spamd_tmp_sockets" lineno="429">
 <summary>
 Do not audit attempts to get
 attributes of temporary spamd sockets.
@@ -108268,7 +110385,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="spamassassin_stream_connect_spamd" lineno="432">
+<interface name="spamassassin_stream_connect_spamd" lineno="448">
 <summary>
 Connect to spamd with a unix
 domain stream socket.
@@ -108279,7 +110396,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="spamassassin_admin" lineno="458">
+<interface name="spamassassin_admin" lineno="474">
 <summary>
 All of the rules required to
 administrate an spamassassin environment.
@@ -108516,7 +110633,7 @@ The role associated with the user domain.
 </summary>
 </param>
 </template>
-<template name="ssh_server_template" lineno="168">
+<template name="ssh_server_template" lineno="172">
 <summary>
 The template to define a ssh server.
 </summary>
@@ -108536,28 +110653,33 @@ is the prefix for sshd_t).
 </summary>
 </param>
 </template>
-<template name="ssh_role_template" lineno="299">
+<template name="ssh_role_template" lineno="309">
 <summary>
 Role access for ssh
 </summary>
 <param name="role_prefix">
 <summary>
-The prefix of the role (e.g., user
+The prefix of the user role (e.g., user
 is the prefix for user_r).
 </summary>
 </param>
-<param name="role">
+<param name="user_domain">
 <summary>
-Role allowed access
+User domain for the role.
 </summary>
 </param>
-<param name="domain">
+<param name="user_exec_domain">
 <summary>
-User domain for the role
+User exec domain for execute and transition access.
+</summary>
+</param>
+<param name="role">
+<summary>
+Role allowed access
 </summary>
 </param>
 </template>
-<interface name="ssh_sigchld" lineno="456">
+<interface name="ssh_sigchld" lineno="474">
 <summary>
 Send a SIGCHLD signal to the ssh server.
 </summary>
@@ -108567,7 +110689,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="ssh_signal" lineno="474">
+<interface name="ssh_signal" lineno="492">
 <summary>
 Send a generic signal to the ssh server.
 </summary>
@@ -108577,7 +110699,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="ssh_signull" lineno="492">
+<interface name="ssh_signull" lineno="510">
 <summary>
 Send a null signal to sshd processes.
 </summary>
@@ -108587,7 +110709,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="ssh_read_pipes" lineno="510">
+<interface name="ssh_read_pipes" lineno="528">
 <summary>
 Read a ssh server unnamed pipe.
 </summary>
@@ -108597,7 +110719,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="ssh_rw_pipes" lineno="527">
+<interface name="ssh_rw_pipes" lineno="545">
 <summary>
 Read and write a ssh server unnamed pipe.
 </summary>
@@ -108607,7 +110729,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="ssh_rw_stream_sockets" lineno="545">
+<interface name="ssh_rw_stream_sockets" lineno="563">
 <summary>
 Read and write ssh server unix domain stream sockets.
 </summary>
@@ -108617,7 +110739,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="ssh_rw_tcp_sockets" lineno="563">
+<interface name="ssh_rw_tcp_sockets" lineno="581">
 <summary>
 Read and write ssh server TCP sockets.
 </summary>
@@ -108627,7 +110749,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="ssh_dontaudit_rw_tcp_sockets" lineno="582">
+<interface name="ssh_dontaudit_rw_tcp_sockets" lineno="600">
 <summary>
 Do not audit attempts to read and write
 ssh server TCP sockets.
@@ -108638,7 +110760,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="ssh_exec_sshd" lineno="600">
+<interface name="ssh_exec_sshd" lineno="618">
 <summary>
 Execute the ssh daemon in the caller domain.
 </summary>
@@ -108648,7 +110770,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="ssh_domtrans" lineno="619">
+<interface name="ssh_domtrans" lineno="637">
 <summary>
 Execute the ssh daemon sshd domain.
 </summary>
@@ -108658,7 +110780,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="ssh_client_domtrans" lineno="637">
+<interface name="ssh_client_domtrans" lineno="655">
 <summary>
 Execute the ssh client in the ssh client domain.
 </summary>
@@ -108668,7 +110790,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="ssh_exec" lineno="655">
+<interface name="ssh_exec" lineno="673">
 <summary>
 Execute the ssh client in the caller domain.
 </summary>
@@ -108678,7 +110800,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="ssh_setattr_key_files" lineno="674">
+<interface name="ssh_setattr_key_files" lineno="692">
 <summary>
 Set the attributes of sshd key files.
 </summary>
@@ -108688,7 +110810,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="ssh_agent_exec" lineno="693">
+<interface name="ssh_agent_exec" lineno="711">
 <summary>
 Execute the ssh agent client in the caller domain.
 </summary>
@@ -108698,7 +110820,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="ssh_read_user_home_files" lineno="712">
+<interface name="ssh_read_user_home_files" lineno="730">
 <summary>
 Read ssh home directory content
 </summary>
@@ -108708,7 +110830,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="ssh_domtrans_keygen" lineno="733">
+<interface name="ssh_domtrans_keygen" lineno="751">
 <summary>
 Execute the ssh key generator in the ssh keygen domain.
 </summary>
@@ -108718,7 +110840,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="ssh_dontaudit_read_server_keys" lineno="751">
+<interface name="ssh_dontaudit_read_server_keys" lineno="769">
 <summary>
 Read ssh server keys
 </summary>
@@ -108728,7 +110850,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="ssh_manage_home_files" lineno="769">
+<interface name="ssh_manage_home_files" lineno="787">
 <summary>
 Manage ssh home directory content
 </summary>
@@ -108738,7 +110860,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="ssh_delete_tmp" lineno="788">
+<interface name="ssh_delete_tmp" lineno="806">
 <summary>
 Delete from the ssh temp files.
 </summary>
@@ -108748,7 +110870,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="ssh_dontaudit_agent_tmp" lineno="807">
+<interface name="ssh_dontaudit_agent_tmp" lineno="825">
 <summary>
 dontaudit access to ssh agent tmp dirs
 </summary>
@@ -109417,6 +111539,16 @@ Role allowed access.
 </param>
 <rolecap/>
 </interface>
+<interface name="tor_rw_pt_state_var_files" lineno="73">
+<summary>
+Read and write Tor pluggable transport state var files.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
 <tunable name="tor_bind_all_unreserved_ports" dftval="false">
 <desc>
 <p>
@@ -110286,17 +112418,7 @@ Domain prefix to be used.
 </summary>
 </param>
 </template>
-<template name="virt_lxc_domain_template" lineno="102">
-<summary>
-The template to define a virt lxc domain.
-</summary>
-<param name="domain_prefix">
-<summary>
-Domain prefix to be used.
-</summary>
-</param>
-</template>
-<interface name="virt_image" lineno="126">
+<interface name="virt_image" lineno="102">
 <summary>
 Make the specified type virt image type.
 </summary>
@@ -110306,7 +112428,7 @@ Type to be used as a virtual image.
 </summary>
 </param>
 </interface>
-<interface name="virt_domtrans" lineno="146">
+<interface name="virt_domtrans" lineno="122">
 <summary>
 Execute a domain transition to run virtd.
 </summary>
@@ -110316,7 +112438,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="virt_domtrans_qmf" lineno="165">
+<interface name="virt_domtrans_qmf" lineno="141">
 <summary>
 Execute a domain transition to run virt qmf.
 </summary>
@@ -110326,7 +112448,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="virt_domtrans_bridgehelper" lineno="185">
+<interface name="virt_domtrans_bridgehelper" lineno="161">
 <summary>
 Execute a domain transition to
 run virt bridgehelper.
@@ -110337,7 +112459,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="virt_domtrans_leaseshelper" lineno="205">
+<interface name="virt_domtrans_leaseshelper" lineno="181">
 <summary>
 Execute a domain transition to
 run virt leaseshelper.
@@ -110348,7 +112470,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="virt_run_bridgehelper" lineno="231">
+<interface name="virt_run_bridgehelper" lineno="207">
 <summary>
 Execute bridgehelper in the bridgehelper
 domain, and allow the specified role
@@ -110365,7 +112487,7 @@ Role allowed access.
 </summary>
 </param>
 </interface>
-<interface name="virt_run_virt_domain" lineno="257">
+<interface name="virt_run_virt_domain" lineno="233">
 <summary>
 Execute virt domain in the their
 domain, and allow the specified
@@ -110382,7 +112504,7 @@ Role allowed access.
 </summary>
 </param>
 </interface>
-<interface name="virt_signal_all_virt_domains" lineno="281">
+<interface name="virt_signal_all_virt_domains" lineno="257">
 <summary>
 Send generic signals to all virt domains.
 </summary>
@@ -110392,7 +112514,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="virt_kill_all_virt_domains" lineno="299">
+<interface name="virt_kill_all_virt_domains" lineno="275">
 <summary>
 Send kill signals to all virt domains.
 </summary>
@@ -110402,24 +112524,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="virt_run_svirt_lxc_domain" lineno="324">
-<summary>
-Execute svirt lxc domains in their
-domain, and allow the specified
-role that svirt lxc domain.
-</summary>
-<param name="domain">
-<summary>
-Domain allowed to transition.
-</summary>
-</param>
-<param name="role">
-<summary>
-Role allowed access.
-</summary>
-</param>
-</interface>
-<interface name="virt_getattr_virtd_exec_files" lineno="348">
+<interface name="virt_getattr_virtd_exec_files" lineno="293">
 <summary>
 Get attributes of virtd executable files.
 </summary>
@@ -110429,7 +112534,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="virt_stream_connect" lineno="367">
+<interface name="virt_stream_connect" lineno="312">
 <summary>
 Connect to virt with a unix
 domain stream socket.
@@ -110440,7 +112545,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="virt_attach_tun_iface" lineno="386">
+<interface name="virt_attach_tun_iface" lineno="331">
 <summary>
 Attach to virt tun devices.
 </summary>
@@ -110450,7 +112555,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="virt_read_config" lineno="405">
+<interface name="virt_read_config" lineno="350">
 <summary>
 Read virt configuration content.
 </summary>
@@ -110460,7 +112565,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="virt_manage_config" lineno="428">
+<interface name="virt_manage_config" lineno="373">
 <summary>
 Create, read, write, and delete
 virt configuration content.
@@ -110471,7 +112576,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="virt_read_content" lineno="450">
+<interface name="virt_read_content" lineno="395">
 <summary>
 Read virt content.
 </summary>
@@ -110481,7 +112586,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="virt_manage_virt_content" lineno="486">
+<interface name="virt_manage_virt_content" lineno="431">
 <summary>
 Create, read, write, and delete
 virt content.
@@ -110492,7 +112597,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="virt_relabel_virt_content" lineno="522">
+<interface name="virt_relabel_virt_content" lineno="467">
 <summary>
 Relabel virt content.
 </summary>
@@ -110502,7 +112607,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="virt_home_filetrans_virt_content" lineno="557">
+<interface name="virt_home_filetrans_virt_content" lineno="502">
 <summary>
 Create specified objects in user home
 directories with the virt content type.
@@ -110523,7 +112628,7 @@ The name of the object being created.
 </summary>
 </param>
 </interface>
-<interface name="virt_manage_svirt_home_content" lineno="576">
+<interface name="virt_manage_svirt_home_content" lineno="521">
 <summary>
 Create, read, write, and delete
 svirt home content.
@@ -110534,7 +112639,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="virt_relabel_svirt_home_content" lineno="611">
+<interface name="virt_relabel_svirt_home_content" lineno="556">
 <summary>
 Relabel svirt home content.
 </summary>
@@ -110544,7 +112649,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="virt_home_filetrans_svirt_home" lineno="645">
+<interface name="virt_home_filetrans_svirt_home" lineno="590">
 <summary>
 Create specified objects in user home
 directories with the svirt home type.
@@ -110565,7 +112670,7 @@ The name of the object being created.
 </summary>
 </param>
 </interface>
-<interface name="virt_home_filetrans" lineno="680">
+<interface name="virt_home_filetrans" lineno="625">
 <summary>
 Create specified objects in generic
 virt home directories with private
@@ -110592,7 +112697,7 @@ The name of the object being created.
 </summary>
 </param>
 </interface>
-<interface name="virt_manage_home_files" lineno="700">
+<interface name="virt_manage_home_files" lineno="645">
 <summary>
 Create, read, write, and delete
 virt home files.
@@ -110603,7 +112708,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="virt_manage_generic_virt_home_content" lineno="720">
+<interface name="virt_manage_generic_virt_home_content" lineno="665">
 <summary>
 Create, read, write, and delete
 virt home content.
@@ -110614,7 +112719,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="virt_relabel_generic_virt_home_content" lineno="755">
+<interface name="virt_relabel_generic_virt_home_content" lineno="700">
 <summary>
 Relabel virt home content.
 </summary>
@@ -110624,7 +112729,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="virt_home_filetrans_virt_home" lineno="790">
+<interface name="virt_home_filetrans_virt_home" lineno="735">
 <summary>
 Create specified objects in user home
 directories with the generic virt
@@ -110646,7 +112751,7 @@ The name of the object being created.
 </summary>
 </param>
 </interface>
-<interface name="virt_read_pid_files" lineno="808">
+<interface name="virt_read_pid_files" lineno="753">
 <summary>
 Read virt pid files.  (Depprecated)
 </summary>
@@ -110656,7 +112761,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="virt_manage_pid_files" lineno="824">
+<interface name="virt_manage_pid_files" lineno="769">
 <summary>
 Create, read, write, and delete
 virt pid files.  (Deprecated)
@@ -110667,7 +112772,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="virt_read_runtime_files" lineno="838">
+<interface name="virt_read_runtime_files" lineno="783">
 <summary>
 Read virt runtime files.
 </summary>
@@ -110677,7 +112782,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="virt_runtime_filetrans" lineno="873">
+<interface name="virt_runtime_filetrans" lineno="818">
 <summary>
 Create an object in the libvirt runtime directory, with a private type.
 </summary>
@@ -110703,7 +112808,7 @@ The name of the object being created.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="virt_search_lib" lineno="891">
+<interface name="virt_search_lib" lineno="836">
 <summary>
 Search virt lib directories.
 </summary>
@@ -110713,7 +112818,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="virt_read_lib_files" lineno="910">
+<interface name="virt_read_lib_files" lineno="855">
 <summary>
 Read virt lib files.
 </summary>
@@ -110723,7 +112828,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="virt_manage_lib_files" lineno="931">
+<interface name="virt_manage_lib_files" lineno="876">
 <summary>
 Create, read, write, and delete
 virt lib files.
@@ -110734,7 +112839,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="virt_pid_filetrans" lineno="967">
+<interface name="virt_pid_filetrans" lineno="912">
 <summary>
 Create objects in virt pid
 directories with a private type.  (Deprecated)
@@ -110761,7 +112866,7 @@ The name of the object being created.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="virt_read_log" lineno="983">
+<interface name="virt_read_log" lineno="928">
 <summary>
 Read virt log files.
 </summary>
@@ -110772,7 +112877,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="virt_append_log" lineno="1002">
+<interface name="virt_append_log" lineno="947">
 <summary>
 Append virt log files.
 </summary>
@@ -110782,7 +112887,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="virt_manage_log" lineno="1022">
+<interface name="virt_manage_log" lineno="967">
 <summary>
 Create, read, write, and delete
 virt log files.
@@ -110793,7 +112898,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="virt_search_images" lineno="1043">
+<interface name="virt_search_images" lineno="988">
 <summary>
 Search virt image directories.
 </summary>
@@ -110803,7 +112908,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="virt_read_images" lineno="1062">
+<interface name="virt_read_images" lineno="1007">
 <summary>
 Read virt image files.
 </summary>
@@ -110813,7 +112918,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="virt_rw_all_image_chr_files" lineno="1098">
+<interface name="virt_rw_all_image_chr_files" lineno="1043">
 <summary>
 Read and write all virt image
 character files.
@@ -110824,7 +112929,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="virt_manage_virt_cache" lineno="1119">
+<interface name="virt_manage_virt_cache" lineno="1064">
 <summary>
 Create, read, write, and delete
 virt cache content.
@@ -110835,7 +112940,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="virt_manage_images" lineno="1141">
+<interface name="virt_manage_images" lineno="1086">
 <summary>
 Create, read, write, and delete
 virt image files.
@@ -110846,7 +112951,101 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="virt_admin" lineno="1183">
+<interface name="virt_lxc_use_fds" lineno="1122">
+<summary>
+Inherit and use virtd lxc
+file descriptors.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="virt_lxc_sigchld" lineno="1140">
+<summary>
+Send a SIGCHLD to virtd lxc.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="virt_lxc_rw_pipes" lineno="1158">
+<summary>
+Read and write virtd lxc unamed pipes.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="virt_lxc_stream_connect" lineno="1177">
+<summary>
+Connect to virtd lxc over
+a unix stream socket.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="virt_lxc_list_runtime" lineno="1197">
+<summary>
+List the contents of virtd lxc
+directories.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="virt_lxc_read_runtime" lineno="1215">
+<summary>
+Read virtd lxc runtime files.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="virt_virsh_use_fds" lineno="1234">
+<summary>
+Inherit and use virsh file
+descriptors.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="virt_virsh_sigchld" lineno="1252">
+<summary>
+Send a SIGCHLD to virsh.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="virt_virsh_rw_pipes" lineno="1270">
+<summary>
+Read and write virsh unamed pipes.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="virt_admin" lineno="1295">
 <summary>
 All of the rules required to
 administrate an virt environment.
@@ -111154,39 +113353,61 @@ Role allowed access.
 </module>
 <module name="xserver" filename="policy/modules/services/xserver.if">
 <summary>X Windows Server</summary>
-<interface name="xserver_restricted_role" lineno="19">
+<template name="xserver_restricted_role" lineno="30">
 <summary>
 Rules required for using the X Windows server
 and environment, for restricted users.
 </summary>
-<param name="role">
+<param name="role_prefix">
 <summary>
-Role allowed access.
+The prefix of the user role (e.g., user
+is the prefix for user_r).
 </summary>
 </param>
-<param name="domain">
+<param name="user_domain">
 <summary>
-Domain allowed access.
+User domain for the role.
 </summary>
 </param>
-</interface>
-<interface name="xserver_role" lineno="140">
+<param name="user_exec_domain">
+<summary>
+User exec domain for execute and transition access.
+</summary>
+</param>
+<param name="role">
+<summary>
+Role allowed access
+</summary>
+</param>
+</template>
+<template name="xserver_role" lineno="168">
 <summary>
 Rules required for using the X Windows server
 and environment.
 </summary>
-<param name="role">
+<param name="role_prefix">
 <summary>
-Role allowed access.
+The prefix of the user role (e.g., user
+is the prefix for user_r).
 </summary>
 </param>
-<param name="domain">
+<param name="user_domain">
 <summary>
-Domain allowed access.
+User domain for the role.
 </summary>
 </param>
-</interface>
-<interface name="xserver_ro_session" lineno="209">
+<param name="user_exec_domain">
+<summary>
+User exec domain for execute and transition access.
+</summary>
+</param>
+<param name="role">
+<summary>
+Role allowed access
+</summary>
+</param>
+</template>
+<interface name="xserver_ro_session" lineno="241">
 <summary>
 Create sessions on the X server, with read-only
 access to the X server shared
@@ -111203,7 +113424,7 @@ The type of the domain SYSV tmpfs files.
 </summary>
 </param>
 </interface>
-<interface name="xserver_rw_session" lineno="251">
+<interface name="xserver_rw_session" lineno="283">
 <summary>
 Create sessions on the X server, with read and write
 access to the X server shared
@@ -111220,7 +113441,7 @@ The type of the domain SYSV tmpfs files.
 </summary>
 </param>
 </interface>
-<interface name="xserver_non_drawing_client" lineno="271">
+<interface name="xserver_non_drawing_client" lineno="303">
 <summary>
 Create non-drawing client sessions on an X server.
 </summary>
@@ -111230,7 +113451,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<template name="xserver_common_x_domain_template" lineno="310">
+<template name="xserver_common_x_domain_template" lineno="342">
 <summary>
 Interface to provide X object permissions on a given X server to
 an X client domain.  Provides the minimal set required by a basic
@@ -111248,7 +113469,7 @@ Client domain allowed access.
 </summary>
 </param>
 </template>
-<template name="xserver_object_types_template" lineno="369">
+<template name="xserver_object_types_template" lineno="401">
 <summary>
 Template for creating the set of types used
 in an X windows domain.
@@ -111260,7 +113481,7 @@ is the prefix for user_t).
 </summary>
 </param>
 </template>
-<template name="xserver_user_x_domain_template" lineno="411">
+<template name="xserver_user_x_domain_template" lineno="443">
 <summary>
 Interface to provide X object permissions on a given X server to
 an X client domain.  Provides the minimal set required by a basic
@@ -111283,7 +113504,7 @@ The type of the domain SYSV tmpfs files.
 </summary>
 </param>
 </template>
-<interface name="xserver_use_user_fonts" lineno="478">
+<interface name="xserver_use_user_fonts" lineno="510">
 <summary>
 Read user fonts, user font configuration,
 and manage the user font cache.
@@ -111304,7 +113525,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xserver_domtrans_xauth" lineno="510">
+<interface name="xserver_domtrans_xauth" lineno="542">
 <summary>
 Transition to the Xauthority domain.
 </summary>
@@ -111314,7 +113535,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="xserver_user_home_dir_filetrans_user_xauth" lineno="533">
+<interface name="xserver_user_home_dir_filetrans_user_xauth" lineno="565">
 <summary>
 Create a Xauthority file in the user home directory.
 </summary>
@@ -111329,7 +113550,7 @@ The name of the object being created.
 </summary>
 </param>
 </interface>
-<interface name="xserver_user_home_dir_filetrans_user_iceauth" lineno="557">
+<interface name="xserver_user_home_dir_filetrans_user_iceauth" lineno="589">
 <summary>
 Create a ICEauthority file in
 the user home directory.
@@ -111345,7 +113566,7 @@ The name of the object being created.
 </summary>
 </param>
 </interface>
-<interface name="xserver_user_home_dir_filetrans_user_xsession_log" lineno="576">
+<interface name="xserver_user_home_dir_filetrans_user_xsession_log" lineno="608">
 <summary>
 Create a .xsession-errors log
 file in the user home directory.
@@ -111356,7 +113577,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xserver_read_user_xauth" lineno="594">
+<interface name="xserver_read_user_xauth" lineno="626">
 <summary>
 Read all users .Xauthority.
 </summary>
@@ -111366,7 +113587,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xserver_read_user_dmrc" lineno="613">
+<interface name="xserver_read_user_dmrc" lineno="645">
 <summary>
 Read all users .dmrc.
 </summary>
@@ -111376,7 +113597,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xserver_read_user_iceauth" lineno="632">
+<interface name="xserver_read_user_iceauth" lineno="664">
 <summary>
 Read all users .ICEauthority.
 </summary>
@@ -111386,7 +113607,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xserver_setattr_console_pipes" lineno="651">
+<interface name="xserver_setattr_console_pipes" lineno="683">
 <summary>
 Set the attributes of the X windows console named pipes.
 </summary>
@@ -111396,7 +113617,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xserver_rw_console" lineno="669">
+<interface name="xserver_rw_console" lineno="701">
 <summary>
 Read and write the X windows console named pipe.
 </summary>
@@ -111406,7 +113627,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xserver_create_console_pipes" lineno="687">
+<interface name="xserver_create_console_pipes" lineno="719">
 <summary>
 Create the X windows console named pipes.
 </summary>
@@ -111416,7 +113637,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xserver_relabel_console_pipes" lineno="705">
+<interface name="xserver_relabel_console_pipes" lineno="737">
 <summary>
 relabel the X windows console named pipes.
 </summary>
@@ -111426,7 +113647,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xserver_use_xdm_fds" lineno="723">
+<interface name="xserver_use_xdm_fds" lineno="755">
 <summary>
 Use file descriptors for xdm.
 </summary>
@@ -111436,7 +113657,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xserver_dontaudit_use_xdm_fds" lineno="742">
+<interface name="xserver_dontaudit_use_xdm_fds" lineno="774">
 <summary>
 Do not audit attempts to inherit
 XDM file descriptors.
@@ -111447,7 +113668,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="xserver_sigchld_xdm" lineno="760">
+<interface name="xserver_sigchld_xdm" lineno="792">
 <summary>
 Allow domain to send sigchld to xdm_t
 </summary>
@@ -111457,7 +113678,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xserver_rw_xdm_pipes" lineno="778">
+<interface name="xserver_rw_xdm_pipes" lineno="810">
 <summary>
 Read and write XDM unnamed pipes.
 </summary>
@@ -111467,7 +113688,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xserver_dontaudit_rw_xdm_pipes" lineno="797">
+<interface name="xserver_dontaudit_rw_xdm_pipes" lineno="829">
 <summary>
 Do not audit attempts to read and write
 XDM unnamed pipes.
@@ -111478,7 +113699,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="xserver_dbus_chat_xdm" lineno="817">
+<interface name="xserver_dbus_chat_xdm" lineno="849">
 <summary>
 Send and receive messages from
 xdm over dbus.
@@ -111489,7 +113710,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xserver_read_xdm_state" lineno="837">
+<interface name="xserver_read_xdm_state" lineno="869">
 <summary>
 Read xdm process state files.
 </summary>
@@ -111499,7 +113720,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xserver_setsched_xdm" lineno="859">
+<interface name="xserver_setsched_xdm" lineno="891">
 <summary>
 Set the priority of the X Display
 Manager (XDM).
@@ -111510,7 +113731,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xserver_stream_connect_xdm" lineno="878">
+<interface name="xserver_stream_connect_xdm" lineno="910">
 <summary>
 Connect to XDM over a unix domain
 stream socket.
@@ -111521,7 +113742,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xserver_read_xdm_rw_config" lineno="897">
+<interface name="xserver_read_xdm_rw_config" lineno="929">
 <summary>
 Read xdm-writable configuration files.
 </summary>
@@ -111531,7 +113752,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xserver_setattr_xdm_tmp_dirs" lineno="916">
+<interface name="xserver_setattr_xdm_tmp_dirs" lineno="948">
 <summary>
 Set the attributes of XDM temporary directories.
 </summary>
@@ -111541,7 +113762,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xserver_create_xdm_tmp_sockets" lineno="935">
+<interface name="xserver_create_xdm_tmp_sockets" lineno="967">
 <summary>
 Create a named socket in a XDM
 temporary directory.
@@ -111552,7 +113773,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xserver_delete_xdm_tmp_sockets" lineno="956">
+<interface name="xserver_delete_xdm_tmp_sockets" lineno="988">
 <summary>
 Delete a named socket in a XDM
 temporary directory.
@@ -111563,7 +113784,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xserver_read_xdm_pid" lineno="975">
+<interface name="xserver_read_xdm_pid" lineno="1007">
 <summary>
 Read XDM pid files.  (Deprecated)
 </summary>
@@ -111573,7 +113794,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xserver_read_xdm_runtime_files" lineno="990">
+<interface name="xserver_read_xdm_runtime_files" lineno="1022">
 <summary>
 Read XDM runtime files.
 </summary>
@@ -111583,7 +113804,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xserver_read_xdm_lib_files" lineno="1009">
+<interface name="xserver_read_xdm_lib_files" lineno="1041">
 <summary>
 Read XDM var lib files.
 </summary>
@@ -111593,7 +113814,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xserver_xsession_entry_type" lineno="1027">
+<interface name="xserver_xsession_entry_type" lineno="1059">
 <summary>
 Make an X session script an entrypoint for the specified domain.
 </summary>
@@ -111603,7 +113824,7 @@ The domain for which the shell is an entrypoint.
 </summary>
 </param>
 </interface>
-<interface name="xserver_xsession_spec_domtrans" lineno="1064">
+<interface name="xserver_xsession_spec_domtrans" lineno="1096">
 <summary>
 Execute an X session in the target domain.  This
 is an explicit transition, requiring the
@@ -111632,7 +113853,7 @@ The type of the shell process.
 </summary>
 </param>
 </interface>
-<interface name="xserver_write_inherited_xsession_log" lineno="1083">
+<interface name="xserver_write_inherited_xsession_log" lineno="1115">
 <summary>
 Write to inherited  xsession log
 files such as .xsession-errors.
@@ -111643,7 +113864,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xserver_rw_xsession_log" lineno="1103">
+<interface name="xserver_rw_xsession_log" lineno="1135">
 <summary>
 Read and write xsession log
 files such as .xsession-errors.
@@ -111654,7 +113875,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xserver_manage_xsession_log" lineno="1122">
+<interface name="xserver_manage_xsession_log" lineno="1154">
 <summary>
 Manage xsession log files such
 as .xsession-errors.
@@ -111665,7 +113886,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xserver_write_inherited_log" lineno="1141">
+<interface name="xserver_write_inherited_log" lineno="1173">
 <summary>
 Write to inherited X server log
 files like /var/log/lightdm/lightdm.log
@@ -111676,7 +113897,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xserver_getattr_log" lineno="1159">
+<interface name="xserver_getattr_log" lineno="1191">
 <summary>
 Get the attributes of X server logs.
 </summary>
@@ -111686,7 +113907,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xserver_dontaudit_write_log" lineno="1179">
+<interface name="xserver_dontaudit_write_log" lineno="1211">
 <summary>
 Do not audit attempts to write the X server
 log files.
@@ -111697,7 +113918,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="xserver_delete_log" lineno="1197">
+<interface name="xserver_delete_log" lineno="1229">
 <summary>
 Delete X server log files.
 </summary>
@@ -111707,7 +113928,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xserver_read_xkb_libs" lineno="1218">
+<interface name="xserver_read_xkb_libs" lineno="1250">
 <summary>
 Read X keyboard extension libraries.
 </summary>
@@ -111717,7 +113938,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xserver_create_xdm_tmp_dirs" lineno="1239">
+<interface name="xserver_create_xdm_tmp_dirs" lineno="1271">
 <summary>
 Create xdm temporary directories.
 </summary>
@@ -111727,7 +113948,7 @@ Domain to allow access.
 </summary>
 </param>
 </interface>
-<interface name="xserver_read_xdm_tmp_files" lineno="1257">
+<interface name="xserver_read_xdm_tmp_files" lineno="1289">
 <summary>
 Read xdm temporary files.
 </summary>
@@ -111737,7 +113958,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xserver_dontaudit_read_xdm_tmp_files" lineno="1276">
+<interface name="xserver_dontaudit_read_xdm_tmp_files" lineno="1308">
 <summary>
 Do not audit attempts to read xdm temporary files.
 </summary>
@@ -111747,7 +113968,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="xserver_rw_xdm_tmp_files" lineno="1295">
+<interface name="xserver_rw_xdm_tmp_files" lineno="1327">
 <summary>
 Read write xdm temporary files.
 </summary>
@@ -111757,7 +113978,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xserver_manage_xdm_tmp_files" lineno="1314">
+<interface name="xserver_manage_xdm_tmp_files" lineno="1346">
 <summary>
 Create, read, write, and delete xdm temporary files.
 </summary>
@@ -111767,7 +113988,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xserver_dontaudit_getattr_xdm_tmp_sockets" lineno="1333">
+<interface name="xserver_dontaudit_getattr_xdm_tmp_sockets" lineno="1365">
 <summary>
 Do not audit attempts to get the attributes of
 xdm temporary named sockets.
@@ -111778,7 +113999,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="xserver_list_xdm_tmp" lineno="1351">
+<interface name="xserver_list_xdm_tmp" lineno="1383">
 <summary>
 list xdm_tmp_t directories
 </summary>
@@ -111788,7 +114009,7 @@ Domain to allow
 </summary>
 </param>
 </interface>
-<interface name="xserver_domtrans" lineno="1369">
+<interface name="xserver_domtrans" lineno="1401">
 <summary>
 Execute the X server in the X server domain.
 </summary>
@@ -111798,7 +114019,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="xserver_signal" lineno="1388">
+<interface name="xserver_signal" lineno="1420">
 <summary>
 Signal X servers
 </summary>
@@ -111808,7 +114029,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xserver_kill" lineno="1406">
+<interface name="xserver_kill" lineno="1438">
 <summary>
 Kill X servers
 </summary>
@@ -111818,7 +114039,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xserver_read_state" lineno="1424">
+<interface name="xserver_read_state" lineno="1456">
 <summary>
 Allow reading xserver_t files to get cgroup and sessionid
 </summary>
@@ -111828,7 +114049,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xserver_rw_shm" lineno="1444">
+<interface name="xserver_rw_shm" lineno="1476">
 <summary>
 Read and write X server Sys V Shared
 memory segments.
@@ -111839,7 +114060,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xserver_dontaudit_rw_tcp_sockets" lineno="1463">
+<interface name="xserver_dontaudit_rw_tcp_sockets" lineno="1495">
 <summary>
 Do not audit attempts to read and write to
 X server sockets.
@@ -111850,7 +114071,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="xserver_dontaudit_rw_stream_sockets" lineno="1482">
+<interface name="xserver_dontaudit_rw_stream_sockets" lineno="1514">
 <summary>
 Do not audit attempts to read and write X server
 unix domain stream sockets.
@@ -111861,7 +114082,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="xserver_stream_connect" lineno="1501">
+<interface name="xserver_stream_connect" lineno="1533">
 <summary>
 Connect to the X server over a unix domain
 stream socket.
@@ -111872,7 +114093,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xserver_read_tmp_files" lineno="1520">
+<interface name="xserver_read_tmp_files" lineno="1552">
 <summary>
 Read X server temporary files.
 </summary>
@@ -111882,7 +114103,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xserver_dbus_chat" lineno="1539">
+<interface name="xserver_dbus_chat" lineno="1571">
 <summary>
 talk to xserver_t by dbus
 </summary>
@@ -111892,7 +114113,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xserver_manage_core_devices" lineno="1561">
+<interface name="xserver_manage_core_devices" lineno="1593">
 <summary>
 Interface to provide X object permissions on a given X server to
 an X client domain.  Gives the domain permission to read the
@@ -111904,7 +114125,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xserver_unconfined" lineno="1584">
+<interface name="xserver_unconfined" lineno="1616">
 <summary>
 Interface to provide X object permissions on a given X server to
 an X client domain.  Gives the domain complete control over the
@@ -111916,7 +114137,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xserver_rw_xdm_keys" lineno="1604">
+<interface name="xserver_rw_xdm_keys" lineno="1636">
 <summary>
 Manage keys for xdm.
 </summary>
@@ -111926,7 +114147,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xserver_link_xdm_keys" lineno="1622">
+<interface name="xserver_link_xdm_keys" lineno="1654">
 <summary>
 Manage keys for xdm.
 </summary>
@@ -111936,7 +114157,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xserver_rw_mesa_shader_cache" lineno="1640">
+<interface name="xserver_rw_mesa_shader_cache" lineno="1672">
 <summary>
 Read and write the mesa shader cache.
 </summary>
@@ -111946,7 +114167,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xserver_manage_mesa_shader_cache" lineno="1661">
+<interface name="xserver_manage_mesa_shader_cache" lineno="1693">
 <summary>
 Manage the mesa shader cache.
 </summary>
@@ -112366,22 +114587,33 @@ Domain to not audit.
 </module>
 <module name="authlogin" filename="policy/modules/system/authlogin.if">
 <summary>Common policy for authentication and user login.</summary>
-<interface name="auth_role" lineno="18">
+<template name="auth_role" lineno="29">
 <summary>
 Role access for password authentication.
 </summary>
-<param name="role">
+<param name="role_prefix">
 <summary>
-Role allowed access.
+The prefix of the user role (e.g., user
+is the prefix for user_r).
 </summary>
 </param>
-<param name="domain">
+<param name="user_domain">
 <summary>
-Domain allowed access.
+User domain for the role.
 </summary>
 </param>
-</interface>
-<interface name="auth_use_pam" lineno="43">
+<param name="user_exec_domain">
+<summary>
+User exec domain for execute and transition access.
+</summary>
+</param>
+<param name="role">
+<summary>
+Role allowed access
+</summary>
+</param>
+</template>
+<interface name="auth_use_pam" lineno="54">
 <summary>
 Use PAM for authentication.
 </summary>
@@ -112391,7 +114623,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="auth_use_pam_systemd" lineno="92">
+<interface name="auth_use_pam_systemd" lineno="103">
 <summary>
 Use the pam module systemd during authentication.
 </summary>
@@ -112401,7 +114633,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="auth_use_pam_motd_dynamic" lineno="110">
+<interface name="auth_use_pam_motd_dynamic" lineno="121">
 <summary>
 Use the pam module motd with dynamic support during authentication.
 This module comes from Ubuntu (https://bugs.launchpad.net/ubuntu/+source/pam/+bug/399071)
@@ -112413,7 +114645,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="auth_login_pgm_domain" lineno="134">
+<interface name="auth_login_pgm_domain" lineno="145">
 <summary>
 Make the specified domain used for a login program.
 </summary>
@@ -112423,7 +114655,7 @@ Domain type used for a login program domain.
 </summary>
 </param>
 </interface>
-<interface name="auth_login_entry_type" lineno="221">
+<interface name="auth_login_entry_type" lineno="232">
 <summary>
 Use the login program as an entry point program.
 </summary>
@@ -112433,7 +114665,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="auth_domtrans_login_program" lineno="244">
+<interface name="auth_domtrans_login_program" lineno="255">
 <summary>
 Execute a login_program in the target domain.
 </summary>
@@ -112448,7 +114680,7 @@ The type of the login_program process.
 </summary>
 </param>
 </interface>
-<interface name="auth_ranged_domtrans_login_program" lineno="274">
+<interface name="auth_ranged_domtrans_login_program" lineno="285">
 <summary>
 Execute a login_program in the target domain,
 with a range transition.
@@ -112469,7 +114701,7 @@ Range of the login program.
 </summary>
 </param>
 </interface>
-<interface name="auth_search_cache" lineno="300">
+<interface name="auth_search_cache" lineno="311">
 <summary>
 Search authentication cache
 </summary>
@@ -112479,7 +114711,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="auth_read_cache" lineno="318">
+<interface name="auth_read_cache" lineno="329">
 <summary>
 Read authentication cache
 </summary>
@@ -112489,7 +114721,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="auth_rw_cache" lineno="336">
+<interface name="auth_rw_cache" lineno="347">
 <summary>
 Read/Write authentication cache
 </summary>
@@ -112499,7 +114731,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="auth_manage_cache" lineno="354">
+<interface name="auth_manage_cache" lineno="365">
 <summary>
 Manage authentication cache
 </summary>
@@ -112509,7 +114741,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="auth_var_filetrans_cache" lineno="373">
+<interface name="auth_var_filetrans_cache" lineno="384">
 <summary>
 Automatic transition from cache_t to cache.
 </summary>
@@ -112519,7 +114751,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="auth_domtrans_chk_passwd" lineno="391">
+<interface name="auth_domtrans_chk_passwd" lineno="402">
 <summary>
 Run unix_chkpwd to check a password.
 </summary>
@@ -112529,7 +114761,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="auth_domtrans_chkpwd" lineno="435">
+<interface name="auth_domtrans_chkpwd" lineno="446">
 <summary>
 Run unix_chkpwd to check a password.
 Stripped down version to be called within boolean
@@ -112540,7 +114772,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="auth_run_chk_passwd" lineno="457">
+<interface name="auth_run_chk_passwd" lineno="468">
 <summary>
 Execute chkpwd programs in the chkpwd domain.
 </summary>
@@ -112555,7 +114787,7 @@ The role to allow the chkpwd domain.
 </summary>
 </param>
 </interface>
-<interface name="auth_domtrans_upd_passwd" lineno="476">
+<interface name="auth_domtrans_upd_passwd" lineno="487">
 <summary>
 Execute a domain transition to run unix_update.
 </summary>
@@ -112565,7 +114797,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="auth_run_upd_passwd" lineno="501">
+<interface name="auth_run_upd_passwd" lineno="512">
 <summary>
 Execute updpwd programs in the updpwd domain.
 </summary>
@@ -112580,7 +114812,7 @@ The role to allow the updpwd domain.
 </summary>
 </param>
 </interface>
-<interface name="auth_getattr_shadow" lineno="520">
+<interface name="auth_getattr_shadow" lineno="531">
 <summary>
 Get the attributes of the shadow passwords file.
 </summary>
@@ -112590,7 +114822,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="auth_dontaudit_getattr_shadow" lineno="540">
+<interface name="auth_dontaudit_getattr_shadow" lineno="551">
 <summary>
 Do not audit attempts to get the attributes
 of the shadow passwords file.
@@ -112601,7 +114833,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="auth_read_shadow" lineno="562">
+<interface name="auth_read_shadow" lineno="573">
 <summary>
 Read the shadow passwords file (/etc/shadow)
 </summary>
@@ -112611,7 +114843,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="auth_map_shadow" lineno="577">
+<interface name="auth_map_shadow" lineno="588">
 <summary>
 Map the shadow passwords file (/etc/shadow)
 </summary>
@@ -112621,7 +114853,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="auth_can_read_shadow_passwords" lineno="603">
+<interface name="auth_can_read_shadow_passwords" lineno="614">
 <summary>
 Pass shadow assertion for reading.
 </summary>
@@ -112640,7 +114872,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="auth_tunable_read_shadow" lineno="629">
+<interface name="auth_tunable_read_shadow" lineno="640">
 <summary>
 Read the shadow password file.
 </summary>
@@ -112658,7 +114890,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="auth_dontaudit_read_shadow" lineno="649">
+<interface name="auth_dontaudit_read_shadow" lineno="660">
 <summary>
 Do not audit attempts to read the shadow
 password file (/etc/shadow).
@@ -112669,7 +114901,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="auth_rw_shadow" lineno="667">
+<interface name="auth_rw_shadow" lineno="678">
 <summary>
 Read and write the shadow password file (/etc/shadow).
 </summary>
@@ -112679,7 +114911,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="auth_manage_shadow" lineno="690">
+<interface name="auth_manage_shadow" lineno="701">
 <summary>
 Create, read, write, and delete the shadow
 password file.
@@ -112690,7 +114922,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="auth_etc_filetrans_shadow" lineno="716">
+<interface name="auth_etc_filetrans_shadow" lineno="727">
 <summary>
 Automatic transition from etc to shadow.
 </summary>
@@ -112705,7 +114937,7 @@ The name of the object being created.
 </summary>
 </param>
 </interface>
-<interface name="auth_relabelto_shadow" lineno="735">
+<interface name="auth_relabelto_shadow" lineno="746">
 <summary>
 Relabel to the shadow
 password file type.
@@ -112716,7 +114948,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="auth_relabel_shadow" lineno="757">
+<interface name="auth_relabel_shadow" lineno="768">
 <summary>
 Relabel from and to the shadow
 password file type.
@@ -112727,7 +114959,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="auth_rw_shadow_lock" lineno="778">
+<interface name="auth_rw_shadow_lock" lineno="789">
 <summary>
 Read/Write shadow lock files.
 </summary>
@@ -112737,7 +114969,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="auth_append_faillog" lineno="796">
+<interface name="auth_append_faillog" lineno="807">
 <summary>
 Append to the login failure log.
 </summary>
@@ -112747,7 +114979,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="auth_create_faillog_files" lineno="815">
+<interface name="auth_create_faillog_files" lineno="826">
 <summary>
 Create fail log lock (in /run/faillock).
 </summary>
@@ -112757,7 +114989,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="auth_rw_faillog" lineno="833">
+<interface name="auth_rw_faillog" lineno="844">
 <summary>
 Read and write the login failure log.
 </summary>
@@ -112767,7 +114999,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="auth_manage_faillog" lineno="852">
+<interface name="auth_manage_faillog" lineno="863">
 <summary>
 Manage the login failure logs.
 </summary>
@@ -112777,7 +115009,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="auth_setattr_faillog_files" lineno="871">
+<interface name="auth_setattr_faillog_files" lineno="882">
 <summary>
 Setattr the login failure logs.
 </summary>
@@ -112787,7 +115019,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="auth_read_lastlog" lineno="890">
+<interface name="auth_read_lastlog" lineno="901">
 <summary>
 Read the last logins log.
 </summary>
@@ -112798,7 +115030,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="auth_append_lastlog" lineno="909">
+<interface name="auth_append_lastlog" lineno="920">
 <summary>
 Append only to the last logins log.
 </summary>
@@ -112808,7 +115040,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="auth_relabel_lastlog" lineno="928">
+<interface name="auth_relabel_lastlog" lineno="939">
 <summary>
 relabel the last logins log.
 </summary>
@@ -112818,7 +115050,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="auth_rw_lastlog" lineno="947">
+<interface name="auth_rw_lastlog" lineno="958">
 <summary>
 Read and write to the last logins log.
 </summary>
@@ -112828,7 +115060,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="auth_manage_lastlog" lineno="966">
+<interface name="auth_manage_lastlog" lineno="977">
 <summary>
 Manage the last logins log.
 </summary>
@@ -112838,7 +115070,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="auth_domtrans_pam" lineno="985">
+<interface name="auth_domtrans_pam" lineno="996">
 <summary>
 Execute pam programs in the pam domain.
 </summary>
@@ -112848,7 +115080,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="auth_signal_pam" lineno="1003">
+<interface name="auth_signal_pam" lineno="1014">
 <summary>
 Send generic signals to pam processes.
 </summary>
@@ -112858,7 +115090,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="auth_run_pam" lineno="1026">
+<interface name="auth_run_pam" lineno="1037">
 <summary>
 Execute pam programs in the PAM domain.
 </summary>
@@ -112873,7 +115105,7 @@ The role to allow the PAM domain.
 </summary>
 </param>
 </interface>
-<interface name="auth_exec_pam" lineno="1045">
+<interface name="auth_exec_pam" lineno="1056">
 <summary>
 Execute the pam program.
 </summary>
@@ -112883,7 +115115,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="auth_read_var_auth" lineno="1064">
+<interface name="auth_read_var_auth" lineno="1075">
 <summary>
 Read var auth files. Used by various other applications
 and pam applets etc.
@@ -112894,7 +115126,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="auth_rw_var_auth" lineno="1084">
+<interface name="auth_rw_var_auth" lineno="1095">
 <summary>
 Read and write var auth files. Used by various other applications
 and pam applets etc.
@@ -112905,7 +115137,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="auth_manage_var_auth" lineno="1104">
+<interface name="auth_manage_var_auth" lineno="1115">
 <summary>
 Manage var auth files. Used by various other applications
 and pam applets etc.
@@ -112916,7 +115148,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="auth_read_pam_pid" lineno="1125">
+<interface name="auth_read_pam_pid" lineno="1136">
 <summary>
 Read PAM PID files.  (Deprecated)
 </summary>
@@ -112926,7 +115158,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="auth_dontaudit_read_pam_pid" lineno="1140">
+<interface name="auth_dontaudit_read_pam_pid" lineno="1151">
 <summary>
 Do not audit attempts to read PAM PID files.  (Deprecated)
 </summary>
@@ -112936,7 +115168,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="auth_pid_filetrans_pam_var_run" lineno="1168">
+<interface name="auth_pid_filetrans_pam_var_run" lineno="1179">
 <summary>
 Create specified objects in
 pid directories with the pam var
@@ -112959,7 +115191,7 @@ The name of the object being created.
 </summary>
 </param>
 </interface>
-<interface name="auth_delete_pam_pid" lineno="1183">
+<interface name="auth_delete_pam_pid" lineno="1194">
 <summary>
 Delete pam PID files.  (Deprecated)
 </summary>
@@ -112969,7 +115201,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="auth_manage_pam_pid" lineno="1198">
+<interface name="auth_manage_pam_pid" lineno="1209">
 <summary>
 Manage pam PID files.  (Deprecated)
 </summary>
@@ -112979,7 +115211,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="auth_manage_pam_runtime_dirs" lineno="1214">
+<interface name="auth_manage_pam_runtime_dirs" lineno="1225">
 <summary>
 Manage pam runtime dirs.
 </summary>
@@ -112989,7 +115221,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="auth_runtime_filetrans_pam_runtime" lineno="1245">
+<interface name="auth_runtime_filetrans_pam_runtime" lineno="1256">
 <summary>
 Create specified objects in
 pid directories with the pam runtime
@@ -113011,7 +115243,7 @@ The name of the object being created.
 </summary>
 </param>
 </interface>
-<interface name="auth_read_pam_runtime_files" lineno="1263">
+<interface name="auth_read_pam_runtime_files" lineno="1274">
 <summary>
 Read PAM runtime files.
 </summary>
@@ -113021,7 +115253,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="auth_dontaudit_read_pam_runtime_files" lineno="1283">
+<interface name="auth_dontaudit_read_pam_runtime_files" lineno="1294">
 <summary>
 Do not audit attempts to read PAM runtime files.
 </summary>
@@ -113031,7 +115263,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="auth_delete_pam_runtime_files" lineno="1301">
+<interface name="auth_delete_pam_runtime_files" lineno="1312">
 <summary>
 Delete pam runtime files.
 </summary>
@@ -113041,7 +115273,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="auth_manage_pam_runtime_files" lineno="1320">
+<interface name="auth_manage_pam_runtime_files" lineno="1331">
 <summary>
 Create, read, write, and delete pam runtime files.
 </summary>
@@ -113051,7 +115283,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="auth_domtrans_pam_console" lineno="1339">
+<interface name="auth_domtrans_pam_console" lineno="1350">
 <summary>
 Execute pam_console with a domain transition.
 </summary>
@@ -113061,7 +115293,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="auth_search_pam_console_data" lineno="1358">
+<interface name="auth_search_pam_console_data" lineno="1369">
 <summary>
 Search the contents of the
 pam_console data directory.
@@ -113072,7 +115304,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="auth_list_pam_console_data" lineno="1378">
+<interface name="auth_list_pam_console_data" lineno="1389">
 <summary>
 List the contents of the pam_console
 data directory.
@@ -113083,7 +115315,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="auth_create_pam_console_data_dirs" lineno="1397">
+<interface name="auth_create_pam_console_data_dirs" lineno="1408">
 <summary>
 Create pam var console pid directories.
 </summary>
@@ -113093,7 +115325,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="auth_relabel_pam_console_data_dirs" lineno="1416">
+<interface name="auth_relabel_pam_console_data_dirs" lineno="1427">
 <summary>
 Relabel pam_console data directories.
 </summary>
@@ -113103,7 +115335,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="auth_read_pam_console_data" lineno="1434">
+<interface name="auth_read_pam_console_data" lineno="1445">
 <summary>
 Read pam_console data files.
 </summary>
@@ -113113,7 +115345,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="auth_manage_pam_console_data" lineno="1455">
+<interface name="auth_manage_pam_console_data" lineno="1466">
 <summary>
 Create, read, write, and delete
 pam_console data files.
@@ -113124,7 +115356,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="auth_delete_pam_console_data" lineno="1475">
+<interface name="auth_delete_pam_console_data" lineno="1486">
 <summary>
 Delete pam_console data.
 </summary>
@@ -113134,7 +115366,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="auth_pid_filetrans_pam_var_console" lineno="1508">
+<interface name="auth_pid_filetrans_pam_var_console" lineno="1519">
 <summary>
 Create specified objects in
 pid directories with the pam var
@@ -113157,7 +115389,7 @@ The name of the object being created.
 </summary>
 </param>
 </interface>
-<interface name="auth_runtime_filetrans_pam_var_console" lineno="1536">
+<interface name="auth_runtime_filetrans_pam_var_console" lineno="1547">
 <summary>
 Create specified objects in generic
 runtime directories with the pam var
@@ -113180,7 +115412,7 @@ The name of the object being created.
 </summary>
 </param>
 </interface>
-<interface name="auth_domtrans_utempter" lineno="1554">
+<interface name="auth_domtrans_utempter" lineno="1565">
 <summary>
 Execute utempter programs in the utempter domain.
 </summary>
@@ -113190,7 +115422,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="auth_run_utempter" lineno="1577">
+<interface name="auth_run_utempter" lineno="1588">
 <summary>
 Execute utempter programs in the utempter domain.
 </summary>
@@ -113205,7 +115437,7 @@ The role to allow the utempter domain.
 </summary>
 </param>
 </interface>
-<interface name="auth_dontaudit_exec_utempter" lineno="1596">
+<interface name="auth_dontaudit_exec_utempter" lineno="1607">
 <summary>
 Do not audit attempts to execute utempter executable.
 </summary>
@@ -113215,7 +115447,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="auth_setattr_login_records" lineno="1614">
+<interface name="auth_setattr_login_records" lineno="1625">
 <summary>
 Set the attributes of login record files.
 </summary>
@@ -113225,7 +115457,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="auth_read_login_records" lineno="1634">
+<interface name="auth_read_login_records" lineno="1645">
 <summary>
 Read login records files (/var/log/wtmp).
 </summary>
@@ -113236,7 +115468,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="auth_dontaudit_read_login_records" lineno="1655">
+<interface name="auth_dontaudit_read_login_records" lineno="1666">
 <summary>
 Do not audit attempts to read login records
 files (/var/log/wtmp).
@@ -113248,7 +115480,7 @@ Domain to not audit.
 </param>
 <rolecap/>
 </interface>
-<interface name="auth_dontaudit_write_login_records" lineno="1674">
+<interface name="auth_dontaudit_write_login_records" lineno="1685">
 <summary>
 Do not audit attempts to write to
 login records files.
@@ -113259,7 +115491,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="auth_append_login_records" lineno="1692">
+<interface name="auth_append_login_records" lineno="1703">
 <summary>
 Append to login records (wtmp).
 </summary>
@@ -113269,7 +115501,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="auth_write_login_records" lineno="1711">
+<interface name="auth_write_login_records" lineno="1722">
 <summary>
 Write to login records (wtmp).
 </summary>
@@ -113279,7 +115511,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="auth_rw_login_records" lineno="1729">
+<interface name="auth_rw_login_records" lineno="1740">
 <summary>
 Read and write login records.
 </summary>
@@ -113289,7 +115521,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="auth_log_filetrans_login_records" lineno="1749">
+<interface name="auth_log_filetrans_login_records" lineno="1760">
 <summary>
 Create a login records in the log directory
 using a type transition.
@@ -113300,7 +115532,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="auth_manage_login_records" lineno="1768">
+<interface name="auth_manage_login_records" lineno="1779">
 <summary>
 Create, read, write, and delete login
 records files.
@@ -113311,7 +115543,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="auth_relabel_login_records" lineno="1787">
+<interface name="auth_relabel_login_records" lineno="1798">
 <summary>
 Relabel login record files.
 </summary>
@@ -113321,7 +115553,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="auth_use_nsswitch" lineno="1815">
+<interface name="auth_use_nsswitch" lineno="1826">
 <summary>
 Use nsswitch to look up user, password, group, or
 host information.
@@ -113341,7 +115573,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="auth_unconfined" lineno="1843">
+<interface name="auth_unconfined" lineno="1854">
 <summary>
 Unconfined access to the authlogin module.
 </summary>
@@ -114342,7 +116574,17 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_stream_connect" lineno="935">
+<interface name="init_setsched" lineno="935">
+<summary>
+Set the nice level of init.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="init_stream_connect" lineno="953">
 <summary>
 Connect to init with a unix socket.
 </summary>
@@ -114352,7 +116594,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_unix_stream_socket_connectto" lineno="956">
+<interface name="init_unix_stream_socket_connectto" lineno="974">
 <summary>
 Connect to init with a unix socket.
 Without any additional permissions.
@@ -114363,7 +116605,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_use_fds" lineno="1014">
+<interface name="init_use_fds" lineno="1032">
 <summary>
 Inherit and use file descriptors from init.
 </summary>
@@ -114413,7 +116655,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="1"/>
 </interface>
-<interface name="init_dontaudit_use_fds" lineno="1033">
+<interface name="init_dontaudit_use_fds" lineno="1051">
 <summary>
 Do not audit attempts to inherit file
 descriptors from init.
@@ -114424,7 +116666,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="init_dgram_send" lineno="1052">
+<interface name="init_dgram_send" lineno="1070">
 <summary>
 Send messages to init unix datagram sockets.
 </summary>
@@ -114435,7 +116677,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="init_rw_inherited_stream_socket" lineno="1072">
+<interface name="init_rw_inherited_stream_socket" lineno="1090">
 <summary>
 Read and write to inherited init unix streams.
 </summary>
@@ -114445,7 +116687,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_rw_stream_sockets" lineno="1091">
+<interface name="init_rw_stream_sockets" lineno="1109">
 <summary>
 Allow the specified domain to read/write to
 init with unix domain stream sockets.
@@ -114456,7 +116698,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_start_system" lineno="1109">
+<interface name="init_start_system" lineno="1127">
 <summary>
 start service (systemd).
 </summary>
@@ -114466,7 +116708,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_stop_system" lineno="1127">
+<interface name="init_stop_system" lineno="1145">
 <summary>
 stop service (systemd).
 </summary>
@@ -114476,7 +116718,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_get_system_status" lineno="1145">
+<interface name="init_get_system_status" lineno="1163">
 <summary>
 Get all service status (systemd).
 </summary>
@@ -114486,7 +116728,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_enable" lineno="1163">
+<interface name="init_enable" lineno="1181">
 <summary>
 Enable all systemd services (systemd).
 </summary>
@@ -114496,7 +116738,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_disable" lineno="1181">
+<interface name="init_disable" lineno="1199">
 <summary>
 Disable all services (systemd).
 </summary>
@@ -114506,7 +116748,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_reload" lineno="1199">
+<interface name="init_reload" lineno="1217">
 <summary>
 Reload all services (systemd).
 </summary>
@@ -114516,7 +116758,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_reboot_system" lineno="1217">
+<interface name="init_reboot_system" lineno="1235">
 <summary>
 Reboot the system (systemd).
 </summary>
@@ -114526,7 +116768,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_shutdown_system" lineno="1235">
+<interface name="init_shutdown_system" lineno="1253">
 <summary>
 Shutdown (halt) the system (systemd).
 </summary>
@@ -114536,7 +116778,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_service_status" lineno="1253">
+<interface name="init_service_status" lineno="1271">
 <summary>
 Allow specified domain to get init status
 </summary>
@@ -114546,7 +116788,7 @@ Domain to allow access.
 </summary>
 </param>
 </interface>
-<interface name="init_service_start" lineno="1272">
+<interface name="init_service_start" lineno="1290">
 <summary>
 Allow specified domain to get init start
 </summary>
@@ -114556,7 +116798,7 @@ Domain to allow access.
 </summary>
 </param>
 </interface>
-<interface name="init_dbus_chat" lineno="1292">
+<interface name="init_dbus_chat" lineno="1310">
 <summary>
 Send and receive messages from
 systemd over dbus.
@@ -114567,7 +116809,17 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_read_var_lib_links" lineno="1312">
+<interface name="init_run_bpf" lineno="1330">
+<summary>
+Run init BPF programs.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="init_read_var_lib_links" lineno="1349">
 <summary>
 read/follow symlinks under /var/lib/systemd/
 </summary>
@@ -114577,7 +116829,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_list_var_lib_dirs" lineno="1331">
+<interface name="init_list_var_lib_dirs" lineno="1368">
 <summary>
 List /var/lib/systemd/ dir
 </summary>
@@ -114587,7 +116839,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_relabel_var_lib_dirs" lineno="1349">
+<interface name="init_relabel_var_lib_dirs" lineno="1386">
 <summary>
 Relabel dirs in /var/lib/systemd/.
 </summary>
@@ -114597,7 +116849,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_manage_var_lib_files" lineno="1367">
+<interface name="init_manage_var_lib_files" lineno="1404">
 <summary>
 Manage files in /var/lib/systemd/.
 </summary>
@@ -114607,7 +116859,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_var_lib_filetrans" lineno="1402">
+<interface name="init_var_lib_filetrans" lineno="1439">
 <summary>
 Create files in /var/lib/systemd
 with an automatic type transition.
@@ -114633,7 +116885,7 @@ The name of the object being created.
 </summary>
 </param>
 </interface>
-<interface name="init_search_pids" lineno="1421">
+<interface name="init_search_pids" lineno="1458">
 <summary>
 Allow search  directory in the /run/systemd directory.  (Deprecated)
 </summary>
@@ -114643,7 +116895,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_list_pids" lineno="1436">
+<interface name="init_list_pids" lineno="1473">
 <summary>
 Allow listing of the /run/systemd directory.  (Deprecated)
 </summary>
@@ -114653,7 +116905,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_manage_pid_symlinks" lineno="1451">
+<interface name="init_manage_pid_symlinks" lineno="1488">
 <summary>
 Create symbolic links in the /run/systemd directory.  (Deprecated)
 </summary>
@@ -114663,7 +116915,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_create_pid_files" lineno="1466">
+<interface name="init_create_pid_files" lineno="1503">
 <summary>
 Create files in the /run/systemd directory.  (Deprecated)
 </summary>
@@ -114673,7 +116925,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_write_pid_files" lineno="1481">
+<interface name="init_write_pid_files" lineno="1518">
 <summary>
 Write files in the /run/systemd directory.  (Deprecated)
 </summary>
@@ -114683,7 +116935,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_manage_pid_dirs" lineno="1497">
+<interface name="init_manage_pid_dirs" lineno="1534">
 <summary>
 Create, read, write, and delete
 directories in the /run/systemd directory.  (Deprecated)
@@ -114694,7 +116946,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_pid_filetrans" lineno="1527">
+<interface name="init_pid_filetrans" lineno="1564">
 <summary>
 Create files in an init PID directory.  (Deprecated)
 </summary>
@@ -114719,7 +116971,7 @@ The name of the object being created.
 </summary>
 </param>
 </interface>
-<interface name="init_search_runtime" lineno="1542">
+<interface name="init_search_runtime" lineno="1579">
 <summary>
 Search init runtime directories, e.g. /run/systemd.
 </summary>
@@ -114729,7 +116981,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_list_runtime" lineno="1560">
+<interface name="init_list_runtime" lineno="1597">
 <summary>
 List init runtime directories, e.g. /run/systemd.
 </summary>
@@ -114739,7 +116991,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_manage_runtime_dirs" lineno="1580">
+<interface name="init_manage_runtime_dirs" lineno="1617">
 <summary>
 Create, read, write, and delete
 directories in the /run/systemd directory.
@@ -114750,7 +117002,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_runtime_filetrans" lineno="1613">
+<interface name="init_runtime_filetrans" lineno="1650">
 <summary>
 Create files in an init runtime directory with a private type.
 </summary>
@@ -114775,7 +117027,7 @@ The name of the object being created.
 </summary>
 </param>
 </interface>
-<interface name="init_write_runtime_files" lineno="1632">
+<interface name="init_write_runtime_files" lineno="1669">
 <summary>
 Write init runtime files, e.g. in /run/systemd.
 </summary>
@@ -114785,7 +117037,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_create_runtime_files" lineno="1650">
+<interface name="init_create_runtime_files" lineno="1687">
 <summary>
 Create init runtime files, e.g. in /run/systemd.
 </summary>
@@ -114795,7 +117047,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_manage_runtime_symlinks" lineno="1668">
+<interface name="init_manage_runtime_symlinks" lineno="1705">
 <summary>
 Create init runtime symbolic links, e.g. in /run/systemd.
 </summary>
@@ -114805,7 +117057,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_getattr_initctl" lineno="1686">
+<interface name="init_getattr_initctl" lineno="1723">
 <summary>
 Get the attributes of initctl.
 </summary>
@@ -114815,7 +117067,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_dontaudit_getattr_initctl" lineno="1707">
+<interface name="init_dontaudit_getattr_initctl" lineno="1744">
 <summary>
 Do not audit attempts to get the
 attributes of initctl.
@@ -114826,7 +117078,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="init_write_initctl" lineno="1725">
+<interface name="init_write_initctl" lineno="1762">
 <summary>
 Write to initctl.
 </summary>
@@ -114836,7 +117088,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_telinit" lineno="1746">
+<interface name="init_telinit" lineno="1783">
 <summary>
 Use telinit (Read and write initctl).
 </summary>
@@ -114847,7 +117099,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="init_rw_initctl" lineno="1779">
+<interface name="init_rw_initctl" lineno="1816">
 <summary>
 Read and write initctl.
 </summary>
@@ -114857,7 +117109,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_dontaudit_rw_initctl" lineno="1800">
+<interface name="init_dontaudit_rw_initctl" lineno="1837">
 <summary>
 Do not audit attempts to read and
 write initctl.
@@ -114868,7 +117120,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="init_script_file_entry_type" lineno="1819">
+<interface name="init_script_file_entry_type" lineno="1856">
 <summary>
 Make init scripts an entry point for
 the specified domain.
@@ -114879,7 +117131,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_spec_domtrans_script" lineno="1842">
+<interface name="init_spec_domtrans_script" lineno="1879">
 <summary>
 Execute init scripts with a specified domain transition.
 </summary>
@@ -114889,7 +117141,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="init_domtrans_script" lineno="1869">
+<interface name="init_domtrans_script" lineno="1906">
 <summary>
 Execute init scripts with an automatic domain transition.
 </summary>
@@ -114899,7 +117151,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="init_domtrans_labeled_script" lineno="1904">
+<interface name="init_domtrans_labeled_script" lineno="1941">
 <summary>
 Execute labelled init scripts with an automatic domain transition.
 </summary>
@@ -114909,7 +117161,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="init_script_file_domtrans" lineno="1950">
+<interface name="init_script_file_domtrans" lineno="1987">
 <summary>
 Execute a init script in a specified domain.
 </summary>
@@ -114934,7 +117186,7 @@ Domain to transition to.
 </summary>
 </param>
 </interface>
-<interface name="init_kill_scripts" lineno="1969">
+<interface name="init_kill_scripts" lineno="2006">
 <summary>
 Send a kill signal to init scripts.
 </summary>
@@ -114944,7 +117196,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_manage_script_service" lineno="1987">
+<interface name="init_manage_script_service" lineno="2024">
 <summary>
 Allow manage service for initrc_exec_t scripts
 </summary>
@@ -114954,7 +117206,7 @@ Target domain
 </summary>
 </param>
 </interface>
-<interface name="init_labeled_script_domtrans" lineno="2012">
+<interface name="init_labeled_script_domtrans" lineno="2049">
 <summary>
 Transition to the init script domain
 on a specified labeled init script.
@@ -114970,7 +117222,7 @@ Labeled init script file.
 </summary>
 </param>
 </interface>
-<interface name="init_all_labeled_script_domtrans" lineno="2034">
+<interface name="init_all_labeled_script_domtrans" lineno="2071">
 <summary>
 Transition to the init script domain
 for all labeled init script types
@@ -114981,7 +117233,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="init_get_script_status" lineno="2052">
+<interface name="init_get_script_status" lineno="2089">
 <summary>
 Allow getting service status of initrc_exec_t scripts
 </summary>
@@ -114991,7 +117243,7 @@ Target domain
 </summary>
 </param>
 </interface>
-<interface name="init_startstop_service" lineno="2092">
+<interface name="init_startstop_service" lineno="2129">
 <summary>
 Allow the role to start and stop
 labeled services.
@@ -115022,7 +117274,7 @@ Systemd unit file type.
 </summary>
 </param>
 </interface>
-<interface name="init_run_daemon" lineno="2148">
+<interface name="init_run_daemon" lineno="2185">
 <summary>
 Start and stop daemon programs directly.
 </summary>
@@ -115044,7 +117296,7 @@ The role to be performing this action.
 </summary>
 </param>
 </interface>
-<interface name="init_startstop_all_script_services" lineno="2170">
+<interface name="init_startstop_all_script_services" lineno="2207">
 <summary>
 Start and stop init_script_file_type services
 </summary>
@@ -115054,7 +117306,7 @@ domain that can start and stop the services
 </summary>
 </param>
 </interface>
-<interface name="init_read_state" lineno="2189">
+<interface name="init_read_state" lineno="2226">
 <summary>
 Read the process state (/proc/pid) of init.
 </summary>
@@ -115064,7 +117316,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_dontaudit_read_state" lineno="2209">
+<interface name="init_dontaudit_read_state" lineno="2246">
 <summary>
 Dontaudit read the process state (/proc/pid) of init.
 </summary>
@@ -115074,7 +117326,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="init_ptrace" lineno="2230">
+<interface name="init_ptrace" lineno="2267">
 <summary>
 Ptrace init
 </summary>
@@ -115085,7 +117337,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="init_getattr" lineno="2249">
+<interface name="init_getattr" lineno="2286">
 <summary>
 get init process stats
 </summary>
@@ -115096,7 +117348,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="init_read_script_pipes" lineno="2267">
+<interface name="init_read_script_pipes" lineno="2304">
 <summary>
 Read an init script unnamed pipe.
 </summary>
@@ -115106,7 +117358,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_write_script_pipes" lineno="2285">
+<interface name="init_write_script_pipes" lineno="2322">
 <summary>
 Write an init script unnamed pipe.
 </summary>
@@ -115116,7 +117368,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_getattr_script_files" lineno="2303">
+<interface name="init_getattr_script_files" lineno="2340">
 <summary>
 Get the attribute of init script entrypoint files.
 </summary>
@@ -115126,7 +117378,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_read_script_files" lineno="2322">
+<interface name="init_read_script_files" lineno="2359">
 <summary>
 Read init scripts.
 </summary>
@@ -115136,7 +117388,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_exec_script_files" lineno="2341">
+<interface name="init_exec_script_files" lineno="2378">
 <summary>
 Execute init scripts in the caller domain.
 </summary>
@@ -115146,7 +117398,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_getattr_all_script_files" lineno="2360">
+<interface name="init_getattr_all_script_files" lineno="2397">
 <summary>
 Get the attribute of all init script entrypoint files.
 </summary>
@@ -115156,7 +117408,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_read_all_script_files" lineno="2379">
+<interface name="init_read_all_script_files" lineno="2416">
 <summary>
 Read all init script files.
 </summary>
@@ -115166,7 +117418,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_dontaudit_read_all_script_files" lineno="2403">
+<interface name="init_dontaudit_read_all_script_files" lineno="2440">
 <summary>
 Dontaudit read all init script files.
 </summary>
@@ -115176,7 +117428,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="init_exec_all_script_files" lineno="2421">
+<interface name="init_exec_all_script_files" lineno="2458">
 <summary>
 Execute all init scripts in the caller domain.
 </summary>
@@ -115186,7 +117438,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_read_script_state" lineno="2440">
+<interface name="init_read_script_state" lineno="2477">
 <summary>
 Read the process state (/proc/pid) of the init scripts.
 </summary>
@@ -115196,7 +117448,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_use_script_fds" lineno="2459">
+<interface name="init_use_script_fds" lineno="2496">
 <summary>
 Inherit and use init script file descriptors.
 </summary>
@@ -115206,7 +117458,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_dontaudit_use_script_fds" lineno="2478">
+<interface name="init_dontaudit_use_script_fds" lineno="2515">
 <summary>
 Do not audit attempts to inherit
 init script file descriptors.
@@ -115217,7 +117469,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="init_search_script_keys" lineno="2496">
+<interface name="init_search_script_keys" lineno="2533">
 <summary>
 Search init script keys.
 </summary>
@@ -115227,7 +117479,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_getpgid_script" lineno="2514">
+<interface name="init_getpgid_script" lineno="2551">
 <summary>
 Get the process group ID of init scripts.
 </summary>
@@ -115237,7 +117489,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_sigchld_script" lineno="2532">
+<interface name="init_sigchld_script" lineno="2569">
 <summary>
 Send SIGCHLD signals to init scripts.
 </summary>
@@ -115247,7 +117499,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_signal_script" lineno="2550">
+<interface name="init_signal_script" lineno="2587">
 <summary>
 Send generic signals to init scripts.
 </summary>
@@ -115257,7 +117509,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_signull_script" lineno="2568">
+<interface name="init_signull_script" lineno="2605">
 <summary>
 Send null signals to init scripts.
 </summary>
@@ -115267,7 +117519,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_rw_script_pipes" lineno="2586">
+<interface name="init_rw_script_pipes" lineno="2623">
 <summary>
 Read and write init script unnamed pipes.
 </summary>
@@ -115277,7 +117529,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_stream_connect_script" lineno="2605">
+<interface name="init_stream_connect_script" lineno="2642">
 <summary>
 Allow the specified domain to connect to
 init scripts with a unix socket.
@@ -115288,7 +117540,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_rw_script_stream_sockets" lineno="2624">
+<interface name="init_rw_script_stream_sockets" lineno="2661">
 <summary>
 Allow the specified domain to read/write to
 init scripts with a unix domain stream sockets.
@@ -115299,7 +117551,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_dontaudit_stream_connect_script" lineno="2643">
+<interface name="init_dontaudit_stream_connect_script" lineno="2680">
 <summary>
 Dont audit the specified domain connecting to
 init scripts with a unix domain stream socket.
@@ -115310,7 +117562,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="init_dbus_send_script" lineno="2660">
+<interface name="init_dbus_send_script" lineno="2697">
 <summary>
 Send messages to init scripts over dbus.
 </summary>
@@ -115320,7 +117572,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_dbus_chat_script" lineno="2680">
+<interface name="init_dbus_chat_script" lineno="2717">
 <summary>
 Send and receive messages from
 init scripts over dbus.
@@ -115331,7 +117583,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_use_script_ptys" lineno="2709">
+<interface name="init_use_script_ptys" lineno="2746">
 <summary>
 Read and write the init script pty.
 </summary>
@@ -115350,7 +117602,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_use_inherited_script_ptys" lineno="2728">
+<interface name="init_use_inherited_script_ptys" lineno="2765">
 <summary>
 Read and write inherited init script ptys.
 </summary>
@@ -115360,7 +117612,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_dontaudit_use_script_ptys" lineno="2750">
+<interface name="init_dontaudit_use_script_ptys" lineno="2787">
 <summary>
 Do not audit attempts to read and
 write the init script pty.
@@ -115371,7 +117623,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="init_getattr_script_status_files" lineno="2769">
+<interface name="init_getattr_script_status_files" lineno="2806">
 <summary>
 Get the attributes of init script
 status files.
@@ -115382,7 +117634,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_dontaudit_read_script_status_files" lineno="2788">
+<interface name="init_dontaudit_read_script_status_files" lineno="2825">
 <summary>
 Do not audit attempts to read init script
 status files.
@@ -115393,7 +117645,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="init_search_run" lineno="2807">
+<interface name="init_search_run" lineno="2844">
 <summary>
 Search the /run/systemd directory.
 </summary>
@@ -115403,7 +117655,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_read_script_tmp_files" lineno="2826">
+<interface name="init_read_script_tmp_files" lineno="2863">
 <summary>
 Read init script temporary data.
 </summary>
@@ -115413,7 +117665,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_rw_inherited_script_tmp_files" lineno="2845">
+<interface name="init_rw_inherited_script_tmp_files" lineno="2882">
 <summary>
 Read and write init script inherited temporary data.
 </summary>
@@ -115423,7 +117675,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_rw_script_tmp_files" lineno="2863">
+<interface name="init_rw_script_tmp_files" lineno="2900">
 <summary>
 Read and write init script temporary data.
 </summary>
@@ -115433,7 +117685,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_script_tmp_filetrans" lineno="2898">
+<interface name="init_script_tmp_filetrans" lineno="2935">
 <summary>
 Create files in a init script
 temporary data directory.
@@ -115459,7 +117711,7 @@ The name of the object being created.
 </summary>
 </param>
 </interface>
-<interface name="init_getattr_utmp" lineno="2917">
+<interface name="init_getattr_utmp" lineno="2954">
 <summary>
 Get the attributes of init script process id files.
 </summary>
@@ -115469,7 +117721,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_read_utmp" lineno="2935">
+<interface name="init_read_utmp" lineno="2972">
 <summary>
 Read utmp.
 </summary>
@@ -115479,7 +117731,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_dontaudit_write_utmp" lineno="2954">
+<interface name="init_dontaudit_write_utmp" lineno="2991">
 <summary>
 Do not audit attempts to write utmp.
 </summary>
@@ -115489,7 +117741,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="init_write_utmp" lineno="2972">
+<interface name="init_write_utmp" lineno="3009">
 <summary>
 Write to utmp.
 </summary>
@@ -115499,7 +117751,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_dontaudit_lock_utmp" lineno="2992">
+<interface name="init_dontaudit_lock_utmp" lineno="3029">
 <summary>
 Do not audit attempts to lock
 init script pid files.
@@ -115510,7 +117762,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="init_rw_utmp" lineno="3010">
+<interface name="init_rw_utmp" lineno="3047">
 <summary>
 Read and write utmp.
 </summary>
@@ -115520,7 +117772,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_dontaudit_rw_utmp" lineno="3029">
+<interface name="init_dontaudit_rw_utmp" lineno="3066">
 <summary>
 Do not audit attempts to read and write utmp.
 </summary>
@@ -115530,7 +117782,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="init_manage_utmp" lineno="3047">
+<interface name="init_manage_utmp" lineno="3084">
 <summary>
 Create, read, write, and delete utmp.
 </summary>
@@ -115540,7 +117792,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_watch_utmp" lineno="3066">
+<interface name="init_watch_utmp" lineno="3103">
 <summary>
 Add a watch on utmp.
 </summary>
@@ -115550,7 +117802,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_relabel_utmp" lineno="3084">
+<interface name="init_relabel_utmp" lineno="3121">
 <summary>
 Relabel utmp.
 </summary>
@@ -115560,7 +117812,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_runtime_filetrans_utmp" lineno="3103">
+<interface name="init_runtime_filetrans_utmp" lineno="3140">
 <summary>
 Create files in /var/run with the
 utmp file type.
@@ -115571,7 +117823,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_create_runtime_dirs" lineno="3121">
+<interface name="init_create_runtime_dirs" lineno="3158">
 <summary>
 Create a directory in the /run/systemd directory.
 </summary>
@@ -115581,7 +117833,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_read_runtime_files" lineno="3140">
+<interface name="init_read_runtime_files" lineno="3177">
 <summary>
 Read init_runtime_t files
 </summary>
@@ -115591,7 +117843,7 @@ domain
 </summary>
 </param>
 </interface>
-<interface name="init_rename_runtime_files" lineno="3158">
+<interface name="init_rename_runtime_files" lineno="3195">
 <summary>
 Rename init_runtime_t files
 </summary>
@@ -115601,7 +117853,7 @@ domain
 </summary>
 </param>
 </interface>
-<interface name="init_setattr_runtime_files" lineno="3176">
+<interface name="init_setattr_runtime_files" lineno="3213">
 <summary>
 Setattr init_runtime_t files
 </summary>
@@ -115611,7 +117863,7 @@ domain
 </summary>
 </param>
 </interface>
-<interface name="init_delete_runtime_files" lineno="3194">
+<interface name="init_delete_runtime_files" lineno="3231">
 <summary>
 Delete init_runtime_t files
 </summary>
@@ -115621,7 +117873,7 @@ domain
 </summary>
 </param>
 </interface>
-<interface name="init_write_runtime_socket" lineno="3213">
+<interface name="init_write_runtime_socket" lineno="3250">
 <summary>
 Allow the specified domain to write to
 init sock file.
@@ -115632,7 +117884,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_read_runtime_pipes" lineno="3231">
+<interface name="init_read_runtime_pipes" lineno="3268">
 <summary>
 Read init unnamed pipes.
 </summary>
@@ -115642,7 +117894,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_read_runtime_symlinks" lineno="3249">
+<interface name="init_read_runtime_symlinks" lineno="3286">
 <summary>
 read systemd unit symlinks (usually under /run/systemd/units/)
 </summary>
@@ -115652,7 +117904,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_tcp_recvfrom_all_daemons" lineno="3267">
+<interface name="init_tcp_recvfrom_all_daemons" lineno="3304">
 <summary>
 Allow the specified domain to connect to daemon with a tcp socket
 </summary>
@@ -115662,7 +117914,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_udp_recvfrom_all_daemons" lineno="3285">
+<interface name="init_udp_recvfrom_all_daemons" lineno="3322">
 <summary>
 Allow the specified domain to connect to daemon with a udp socket
 </summary>
@@ -115672,7 +117924,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_read_script_status_files" lineno="3304">
+<interface name="init_read_script_status_files" lineno="3341">
 <summary>
 Allow reading the init script state files
 </summary>
@@ -115682,7 +117934,7 @@ Domain allowed access
 </summary>
 </param>
 </interface>
-<interface name="init_relabelto_script_state" lineno="3322">
+<interface name="init_relabelto_script_state" lineno="3359">
 <summary>
 Label to init script status files
 </summary>
@@ -115692,7 +117944,7 @@ Domain allowed access
 </summary>
 </param>
 </interface>
-<interface name="init_script_readable_type" lineno="3341">
+<interface name="init_script_readable_type" lineno="3378">
 <summary>
 Mark as a readable type for the initrc_t domain
 </summary>
@@ -115702,7 +117954,7 @@ Type that initrc_t needs read access to
 </summary>
 </param>
 </interface>
-<interface name="init_search_units" lineno="3359">
+<interface name="init_search_units" lineno="3396">
 <summary>
 Search systemd unit dirs.
 </summary>
@@ -115712,7 +117964,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_list_unit_dirs" lineno="3384">
+<interface name="init_list_unit_dirs" lineno="3421">
 <summary>
 List systemd unit dirs.
 </summary>
@@ -115722,7 +117974,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_read_generic_units_files" lineno="3404">
+<interface name="init_read_generic_units_files" lineno="3441">
 <summary>
 Read systemd unit files
 </summary>
@@ -115732,7 +117984,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_read_generic_units_symlinks" lineno="3422">
+<interface name="init_read_generic_units_symlinks" lineno="3459">
 <summary>
 Read systemd unit links
 </summary>
@@ -115742,7 +117994,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_get_generic_units_status" lineno="3440">
+<interface name="init_get_generic_units_status" lineno="3477">
 <summary>
 Get status of generic systemd units.
 </summary>
@@ -115752,7 +118004,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_start_generic_units" lineno="3459">
+<interface name="init_start_generic_units" lineno="3496">
 <summary>
 Start generic systemd units.
 </summary>
@@ -115762,7 +118014,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_stop_generic_units" lineno="3478">
+<interface name="init_stop_generic_units" lineno="3515">
 <summary>
 Stop generic systemd units.
 </summary>
@@ -115772,7 +118024,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="init_reload_generic_units" lineno="3497">
+<interface name="init_reload_generic_units" lineno="3534">
 <summary>
 Reload generic systemd units.
 </summary>
@@ -115782,7 +118034,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_get_all_units_status" lineno="3516">
+<interface name="init_get_all_units_status" lineno="3553">
 <summary>
 Get status of all systemd units.
 </summary>
@@ -115792,7 +118044,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_manage_all_units" lineno="3535">
+<interface name="init_manage_all_units" lineno="3572">
 <summary>
 All perms on all systemd units.
 </summary>
@@ -115802,7 +118054,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_start_all_units" lineno="3555">
+<interface name="init_start_all_units" lineno="3592">
 <summary>
 Start all systemd units.
 </summary>
@@ -115812,7 +118064,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_stop_all_units" lineno="3574">
+<interface name="init_stop_all_units" lineno="3611">
 <summary>
 Stop all systemd units.
 </summary>
@@ -115822,7 +118074,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="init_reload_all_units" lineno="3593">
+<interface name="init_reload_all_units" lineno="3630">
 <summary>
 Reload all systemd units.
 </summary>
@@ -115832,7 +118084,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_manage_all_unit_files" lineno="3612">
+<interface name="init_manage_all_unit_files" lineno="3649">
 <summary>
 Manage systemd unit dirs and the files in them
 </summary>
@@ -115842,7 +118094,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="init_linkable_keyring" lineno="3633">
+<interface name="init_linkable_keyring" lineno="3670">
 <summary>
 Associate the specified domain to be a domain whose
 keyring init should be allowed to link.
@@ -115853,7 +118105,7 @@ Domain whose keyring init should be allowed to link.
 </summary>
 </param>
 </interface>
-<interface name="init_admin" lineno="3651">
+<interface name="init_admin" lineno="3688">
 <summary>
 Allow unconfined access to send instructions to init
 </summary>
@@ -115863,7 +118115,7 @@ Target domain
 </summary>
 </param>
 </interface>
-<interface name="init_getrlimit" lineno="3683">
+<interface name="init_getrlimit" lineno="3720">
 <summary>
 Allow getting init_t rlimit
 </summary>
@@ -116574,7 +118826,17 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="libs_manage_shared_libs" lineno="403">
+<interface name="libs_manage_lib_symlinks" lineno="402">
+<summary>
+Manage generic symlinks in library directories.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="libs_manage_shared_libs" lineno="421">
 <summary>
 Create, read, write, and delete shared libraries.
 </summary>
@@ -116584,7 +118846,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="libs_use_shared_libs" lineno="421">
+<interface name="libs_use_shared_libs" lineno="439">
 <summary>
 Load and execute functions from shared libraries.
 </summary>
@@ -116594,7 +118856,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="libs_legacy_use_shared_libs" lineno="444">
+<interface name="libs_legacy_use_shared_libs" lineno="462">
 <summary>
 Load and execute functions from shared libraries,
 with legacy support.
@@ -116605,7 +118867,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="libs_relabel_shared_libs" lineno="465">
+<interface name="libs_relabel_shared_libs" lineno="483">
 <summary>
 Relabel to and from the type used for
 shared libraries.
@@ -116616,7 +118878,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="libs_generic_etc_filetrans_ld_so_cache" lineno="498">
+<interface name="libs_generic_etc_filetrans_ld_so_cache" lineno="516">
 <summary>
 Create an object in etc with a type transition to
 the ld_so_cache_t type
@@ -116639,7 +118901,7 @@ Name of the resource created for which a type transition occurs
 </summary>
 </param>
 </interface>
-<interface name="libs_lib_filetrans" lineno="532">
+<interface name="libs_lib_filetrans" lineno="550">
 <summary>
 Create an object in the generic lib location with a type transition
 to the provided type
@@ -116665,7 +118927,7 @@ Name of the resource created for which a type transition should occur
 </summary>
 </param>
 </interface>
-<interface name="libs_relabel_lib_dirs" lineno="553">
+<interface name="libs_relabel_lib_dirs" lineno="571">
 <summary>
 Relabel to and from the type used
 for generic lib directories.
@@ -116689,7 +118951,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="locallogin_read_state" lineno="35">
+<interface name="locallogin_read_state" lineno="31">
 <summary>
 Allow calling domain to read locallogin state.
 </summary>
@@ -116699,7 +118961,7 @@ Domain allowed permission.
 </summary>
 </param>
 </interface>
-<interface name="locallogin_use_fds" lineno="56">
+<interface name="locallogin_use_fds" lineno="52">
 <summary>
 Allow processes to inherit local login file descriptors.
 </summary>
@@ -116709,7 +118971,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="locallogin_dontaudit_use_fds" lineno="74">
+<interface name="locallogin_dontaudit_use_fds" lineno="70">
 <summary>
 Do not audit attempts to inherit local login file descriptors.
 </summary>
@@ -116719,7 +118981,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="locallogin_signull" lineno="92">
+<interface name="locallogin_signull" lineno="88">
 <summary>
 Send a null signal to local login processes.
 </summary>
@@ -116729,7 +118991,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="locallogin_search_keys" lineno="110">
+<interface name="locallogin_search_keys" lineno="106">
 <summary>
 Search for key.
 </summary>
@@ -116739,7 +119001,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="locallogin_link_keys" lineno="128">
+<interface name="locallogin_link_keys" lineno="124">
 <summary>
 Allow link to the local_login key ring.
 </summary>
@@ -116749,7 +119011,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="locallogin_domtrans_sulogin" lineno="146">
+<interface name="locallogin_domtrans_sulogin" lineno="142">
 <summary>
 Execute single-user logins in the single-user login domain.
 </summary>
@@ -116961,7 +119223,7 @@ Type of the program to be used as an entry point to this domain.
 </summary>
 </param>
 </interface>
-<interface name="logging_stream_connect_dispatcher" lineno="335">
+<interface name="logging_stream_connect_dispatcher" lineno="337">
 <summary>
 Connect to the audit dispatcher over an unix stream socket.
 </summary>
@@ -116971,7 +119233,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="logging_manage_audit_config" lineno="355">
+<interface name="logging_manage_audit_config" lineno="357">
 <summary>
 Manage the auditd configuration files.
 </summary>
@@ -116982,7 +119244,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="logging_manage_audit_log" lineno="377">
+<interface name="logging_manage_audit_log" lineno="379">
 <summary>
 Manage the audit log.
 </summary>
@@ -116993,7 +119255,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="logging_domtrans_klog" lineno="399">
+<interface name="logging_domtrans_klog" lineno="401">
 <summary>
 Execute klogd in the klog domain.
 </summary>
@@ -117003,7 +119265,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="logging_check_exec_syslog" lineno="418">
+<interface name="logging_check_exec_syslog" lineno="420">
 <summary>
 Check if syslogd is executable.
 </summary>
@@ -117013,7 +119275,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="logging_domtrans_syslog" lineno="437">
+<interface name="logging_domtrans_syslog" lineno="439">
 <summary>
 Execute syslogd in the syslog domain.
 </summary>
@@ -117023,7 +119285,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="logging_startstop_syslog" lineno="459">
+<interface name="logging_startstop_syslog" lineno="461">
 <summary>
 Allow specified domain to start/stop syslog units
 </summary>
@@ -117033,7 +119295,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="logging_status_syslog" lineno="478">
+<interface name="logging_status_syslog" lineno="480">
 <summary>
 Allow specified domain to check status of syslog unit
 </summary>
@@ -117043,7 +119305,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="logging_setattr_syslogd_tmp_files" lineno="498">
+<interface name="logging_setattr_syslogd_tmp_files" lineno="500">
 <summary>
 Set the attributes of syslog temporary files.
 </summary>
@@ -117054,7 +119316,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="logging_audit_socket_activation" lineno="517">
+<interface name="logging_audit_socket_activation" lineno="519">
 <summary>
 Allow the domain to create the audit socket
 for syslogd.
@@ -117065,7 +119327,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="logging_relabel_syslogd_tmp_files" lineno="536">
+<interface name="logging_relabel_syslogd_tmp_files" lineno="538">
 <summary>
 Relabel to and from syslog temporary file type.
 </summary>
@@ -117076,7 +119338,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="logging_setattr_syslogd_tmp_dirs" lineno="555">
+<interface name="logging_setattr_syslogd_tmp_dirs" lineno="557">
 <summary>
 Set the attributes of syslog temporary directories.
 </summary>
@@ -117087,7 +119349,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="logging_relabel_syslogd_tmp_dirs" lineno="574">
+<interface name="logging_relabel_syslogd_tmp_dirs" lineno="576">
 <summary>
 Relabel to and from syslog temporary directory type.
 </summary>
@@ -117098,7 +119360,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="logging_log_filetrans" lineno="635">
+<interface name="logging_log_filetrans" lineno="637">
 <summary>
 Create an object in the log directory, with a private type.
 </summary>
@@ -117151,7 +119413,7 @@ The name of the object being created.
 </param>
 <infoflow type="write" weight="10"/>
 </interface>
-<interface name="logging_send_syslog_msg" lineno="677">
+<interface name="logging_send_syslog_msg" lineno="679">
 <summary>
 Send system log messages.
 </summary>
@@ -117183,7 +119445,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="logging_use_syslogd_fd" lineno="719">
+<interface name="logging_use_syslogd_fd" lineno="721">
 <summary>
 Allow domain to use a file descriptor
 from syslogd.
@@ -117194,7 +119456,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="logging_relabelto_devlog_sock_files" lineno="738">
+<interface name="logging_relabelto_devlog_sock_files" lineno="740">
 <summary>
 Allow domain to relabelto devlog sock_files
 </summary>
@@ -117205,7 +119467,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="logging_create_devlog" lineno="756">
+<interface name="logging_create_devlog" lineno="758">
 <summary>
 Connect to the syslog control unix stream socket.
 </summary>
@@ -117215,7 +119477,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="logging_read_audit_config" lineno="777">
+<interface name="logging_read_audit_config" lineno="779">
 <summary>
 Read the auditd configuration files.
 </summary>
@@ -117226,7 +119488,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="logging_dontaudit_search_audit_config" lineno="800">
+<interface name="logging_dontaudit_search_audit_config" lineno="802">
 <summary>
 dontaudit search of auditd configuration files.
 </summary>
@@ -117237,7 +119499,7 @@ Domain to not audit.
 </param>
 <rolecap/>
 </interface>
-<interface name="logging_read_syslog_config" lineno="819">
+<interface name="logging_read_syslog_config" lineno="821">
 <summary>
 Read syslog configuration files.
 </summary>
@@ -117248,7 +119510,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="logging_watch_runtime_dirs" lineno="837">
+<interface name="logging_watch_runtime_dirs" lineno="839">
 <summary>
 Watch syslog runtime dirs.
 </summary>
@@ -117258,7 +119520,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="logging_delete_devlog_socket" lineno="856">
+<interface name="logging_delete_devlog_socket" lineno="858">
 <summary>
 Delete the syslog socket files
 </summary>
@@ -117269,7 +119531,7 @@ Domain allowed access
 </param>
 <rolecap/>
 </interface>
-<interface name="logging_manage_pid_sockets" lineno="874">
+<interface name="logging_manage_pid_sockets" lineno="876">
 <summary>
 Create, read, write, and delete syslog PID sockets.  (Deprecated)
 </summary>
@@ -117279,7 +119541,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="logging_manage_runtime_sockets" lineno="889">
+<interface name="logging_manage_runtime_sockets" lineno="891">
 <summary>
 Create, read, write, and delete syslog PID sockets.
 </summary>
@@ -117289,7 +119551,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="logging_search_logs" lineno="910">
+<interface name="logging_search_logs" lineno="912">
 <summary>
 Allows the domain to open a file in the
 log directory, but does not allow the listing
@@ -117301,7 +119563,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="logging_dontaudit_search_logs" lineno="930">
+<interface name="logging_dontaudit_search_logs" lineno="932">
 <summary>
 Do not audit attempts to search the var log directory.
 </summary>
@@ -117311,7 +119573,7 @@ Domain not to audit.
 </summary>
 </param>
 </interface>
-<interface name="logging_list_logs" lineno="948">
+<interface name="logging_list_logs" lineno="950">
 <summary>
 List the contents of the generic log directory (/var/log).
 </summary>
@@ -117321,7 +119583,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="logging_rw_generic_log_dirs" lineno="968">
+<interface name="logging_rw_generic_log_dirs" lineno="970">
 <summary>
 Read and write the generic log directory (/var/log).
 </summary>
@@ -117331,7 +119593,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="logging_search_all_logs" lineno="989">
+<interface name="logging_search_all_logs" lineno="991">
 <summary>
 Search through all log dirs.
 </summary>
@@ -117342,7 +119604,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="logging_setattr_all_log_dirs" lineno="1008">
+<interface name="logging_setattr_all_log_dirs" lineno="1010">
 <summary>
 Set attributes on all log dirs.
 </summary>
@@ -117353,7 +119615,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="logging_dontaudit_getattr_all_logs" lineno="1027">
+<interface name="logging_dontaudit_getattr_all_logs" lineno="1029">
 <summary>
 Do not audit attempts to get the attributes
 of any log files.
@@ -117364,7 +119626,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="logging_getattr_all_logs" lineno="1045">
+<interface name="logging_getattr_all_logs" lineno="1047">
 <summary>
 Read the attributes of any log file
 </summary>
@@ -117374,7 +119636,7 @@ Domain allowed access
 </summary>
 </param>
 </interface>
-<interface name="logging_append_all_logs" lineno="1063">
+<interface name="logging_append_all_logs" lineno="1065">
 <summary>
 Append to all log files.
 </summary>
@@ -117384,7 +119646,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="logging_append_all_inherited_logs" lineno="1084">
+<interface name="logging_append_all_inherited_logs" lineno="1086">
 <summary>
 Append to all log files.
 </summary>
@@ -117394,7 +119656,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="logging_read_all_logs" lineno="1103">
+<interface name="logging_read_all_logs" lineno="1105">
 <summary>
 Read all log files.
 </summary>
@@ -117405,7 +119667,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="logging_watch_all_logs" lineno="1124">
+<interface name="logging_watch_all_logs" lineno="1126">
 <summary>
 Watch all log files.
 </summary>
@@ -117416,7 +119678,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="logging_exec_all_logs" lineno="1144">
+<interface name="logging_exec_all_logs" lineno="1146">
 <summary>
 Execute all log files in the caller domain.
 </summary>
@@ -117426,7 +119688,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="logging_rw_all_logs" lineno="1164">
+<interface name="logging_rw_all_logs" lineno="1166">
 <summary>
 read/write to all log files.
 </summary>
@@ -117436,7 +119698,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="logging_manage_all_logs" lineno="1184">
+<interface name="logging_manage_all_logs" lineno="1186">
 <summary>
 Create, read, write, and delete all log files.
 </summary>
@@ -117447,7 +119709,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="logging_manage_generic_log_dirs" lineno="1205">
+<interface name="logging_manage_generic_log_dirs" lineno="1207">
 <summary>
 Create, read, write, and delete generic log directories.
 </summary>
@@ -117458,7 +119720,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="logging_relabel_generic_log_dirs" lineno="1225">
+<interface name="logging_relabel_generic_log_dirs" lineno="1227">
 <summary>
 Relabel from and to generic log directory type.
 </summary>
@@ -117469,7 +119731,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="logging_read_generic_logs" lineno="1245">
+<interface name="logging_read_generic_logs" lineno="1247">
 <summary>
 Read generic log files.
 </summary>
@@ -117480,7 +119742,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="logging_mmap_generic_logs" lineno="1266">
+<interface name="logging_mmap_generic_logs" lineno="1268">
 <summary>
 Map generic log files.
 </summary>
@@ -117491,7 +119753,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="logging_write_generic_logs" lineno="1284">
+<interface name="logging_write_generic_logs" lineno="1286">
 <summary>
 Write generic log files.
 </summary>
@@ -117501,7 +119763,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="logging_dontaudit_write_generic_logs" lineno="1305">
+<interface name="logging_dontaudit_write_generic_logs" lineno="1307">
 <summary>
 Dontaudit Write generic log files.
 </summary>
@@ -117511,7 +119773,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="logging_rw_generic_logs" lineno="1323">
+<interface name="logging_rw_generic_logs" lineno="1325">
 <summary>
 Read and write generic log files.
 </summary>
@@ -117521,7 +119783,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="logging_manage_generic_logs" lineno="1346">
+<interface name="logging_manage_generic_logs" lineno="1348">
 <summary>
 Create, read, write, and delete
 generic log files.
@@ -117533,7 +119795,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="logging_watch_generic_logs_dir" lineno="1365">
+<interface name="logging_watch_generic_logs_dir" lineno="1367">
 <summary>
 Watch generic log dirs.
 </summary>
@@ -117543,7 +119805,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="logging_admin_audit" lineno="1390">
+<interface name="logging_admin_audit" lineno="1392">
 <summary>
 All of the rules required to administrate
 the audit environment
@@ -117560,7 +119822,7 @@ User role allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="logging_admin_syslog" lineno="1434">
+<interface name="logging_admin_syslog" lineno="1436">
 <summary>
 All of the rules required to administrate
 the syslog environment
@@ -117577,7 +119839,7 @@ User role allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="logging_admin" lineno="1490">
+<interface name="logging_admin" lineno="1492">
 <summary>
 All of the rules required to administrate
 the logging environment
@@ -117594,7 +119856,7 @@ User role allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="logging_syslog_managed_log_file" lineno="1513">
+<interface name="logging_syslog_managed_log_file" lineno="1515">
 <summary>
 Mark the type as a syslog managed log file
 and introduce the proper file transition when
@@ -117612,7 +119874,7 @@ Name to use for the file
 </summary>
 </param>
 </interface>
-<interface name="logging_syslog_managed_log_dir" lineno="1552">
+<interface name="logging_syslog_managed_log_dir" lineno="1554">
 <summary>
 Mark the type as a syslog managed log dir
 and introduce the proper file transition when
@@ -117639,7 +119901,7 @@ Name to use for the directory
 </summary>
 </param>
 </interface>
-<interface name="logging_mmap_journal" lineno="1574">
+<interface name="logging_mmap_journal" lineno="1576">
 <summary>
 Map files in /run/log/journal/ directory.
 </summary>
@@ -118082,7 +120344,17 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="miscfiles_setattr_localization" lineno="529">
+<interface name="miscfiles_getattr_localization" lineno="529">
+<summary>
+Allow process to get the attributes of localization info
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="miscfiles_setattr_localization" lineno="549">
 <summary>
 Allow process to setattr localization info
 </summary>
@@ -118092,7 +120364,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="miscfiles_read_localization" lineno="561">
+<interface name="miscfiles_read_localization" lineno="581">
 <summary>
 Allow process to read localization information.
 </summary>
@@ -118114,7 +120386,7 @@ Domain allowed access.
 </param>
 <infoflow type="read" weight="10"/>
 </interface>
-<interface name="miscfiles_rw_localization" lineno="584">
+<interface name="miscfiles_rw_localization" lineno="604">
 <summary>
 Allow process to write localization info
 </summary>
@@ -118124,7 +120396,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="miscfiles_relabel_localization" lineno="604">
+<interface name="miscfiles_relabel_localization" lineno="624">
 <summary>
 Allow process to relabel localization info
 </summary>
@@ -118134,7 +120406,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="miscfiles_legacy_read_localization" lineno="623">
+<interface name="miscfiles_legacy_read_localization" lineno="643">
 <summary>
 Allow process to read legacy time localization info
 </summary>
@@ -118144,7 +120416,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="miscfiles_watch_localization" lineno="642">
+<interface name="miscfiles_watch_localization" lineno="662">
 <summary>
 Watch time localization info
 </summary>
@@ -118154,7 +120426,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="miscfiles_search_man_pages" lineno="660">
+<interface name="miscfiles_search_man_pages" lineno="680">
 <summary>
 Search man pages.
 </summary>
@@ -118164,7 +120436,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="miscfiles_dontaudit_search_man_pages" lineno="679">
+<interface name="miscfiles_dontaudit_search_man_pages" lineno="699">
 <summary>
 Do not audit attempts to search man pages.
 </summary>
@@ -118174,7 +120446,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="miscfiles_read_man_pages" lineno="698">
+<interface name="miscfiles_read_man_pages" lineno="718">
 <summary>
 Read man pages
 </summary>
@@ -118185,7 +120457,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="miscfiles_delete_man_pages" lineno="720">
+<interface name="miscfiles_delete_man_pages" lineno="740">
 <summary>
 Delete man pages
 </summary>
@@ -118195,7 +120467,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="miscfiles_manage_man_pages" lineno="742">
+<interface name="miscfiles_manage_man_pages" lineno="762">
 <summary>
 Create, read, write, and delete man pages
 </summary>
@@ -118205,7 +120477,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="miscfiles_read_man_cache" lineno="763">
+<interface name="miscfiles_read_man_cache" lineno="783">
 <summary>
 Read man cache content.
 </summary>
@@ -118215,7 +120487,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="miscfiles_map_man_cache" lineno="784">
+<interface name="miscfiles_map_man_cache" lineno="804">
 <summary>
 Map man cache content.
 </summary>
@@ -118225,7 +120497,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="miscfiles_manage_man_cache" lineno="803">
+<interface name="miscfiles_manage_man_cache" lineno="823">
 <summary>
 Create, read, write, and delete
 man cache content.
@@ -118236,7 +120508,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="miscfiles_relabel_man_cache" lineno="824">
+<interface name="miscfiles_relabel_man_cache" lineno="844">
 <summary>
 Relabel from and to man cache.
 </summary>
@@ -118246,7 +120518,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="miscfiles_read_public_files" lineno="845">
+<interface name="miscfiles_read_public_files" lineno="865">
 <summary>
 Read public files used for file
 transfer services.
@@ -118258,7 +120530,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="miscfiles_manage_public_files" lineno="867">
+<interface name="miscfiles_manage_public_files" lineno="887">
 <summary>
 Create, read, write, and delete public files
 and directories used for file transfer services.
@@ -118270,7 +120542,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="miscfiles_watch_public_dirs" lineno="887">
+<interface name="miscfiles_watch_public_dirs" lineno="907">
 <summary>
 Watch public files
 </summary>
@@ -118280,7 +120552,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="miscfiles_read_tetex_data" lineno="905">
+<interface name="miscfiles_read_tetex_data" lineno="925">
 <summary>
 Read TeX data
 </summary>
@@ -118290,7 +120562,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="miscfiles_exec_tetex_data" lineno="929">
+<interface name="miscfiles_exec_tetex_data" lineno="949">
 <summary>
 Execute TeX data programs in the caller domain.
 </summary>
@@ -118300,7 +120572,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="miscfiles_domain_entry_test_files" lineno="953">
+<interface name="miscfiles_domain_entry_test_files" lineno="973">
 <summary>
 Let test files be an entry point for
 a specified domain.
@@ -118311,7 +120583,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="miscfiles_read_test_files" lineno="971">
+<interface name="miscfiles_read_test_files" lineno="991">
 <summary>
 Read test files and directories.
 </summary>
@@ -118321,7 +120593,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="miscfiles_exec_test_files" lineno="990">
+<interface name="miscfiles_exec_test_files" lineno="1010">
 <summary>
 Execute test files.
 </summary>
@@ -118331,7 +120603,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="miscfiles_etc_filetrans_localization" lineno="1010">
+<interface name="miscfiles_etc_filetrans_localization" lineno="1030">
 <summary>
 Create files in etc directories
 with localization file type.
@@ -118342,7 +120614,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="miscfiles_manage_localization" lineno="1030">
+<interface name="miscfiles_manage_localization" lineno="1050">
 <summary>
 Create, read, write, and delete localization
 </summary>
@@ -119906,7 +122178,44 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="sysnet_read_dhcp_config" lineno="731">
+<interface name="sysnet_create_netns_dirs" lineno="732">
+<summary>
+Create the /run/netns directory with
+an automatic type transition.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="sysnet_netns_filetrans" lineno="766">
+<summary>
+Create an object in the /run/netns
+directory with a private type.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+<param name="private type">
+<summary>
+The type of the object to be created.
+</summary>
+</param>
+<param name="object">
+<summary>
+The object class of the object being created.
+</summary>
+</param>
+<param name="name" optional="true">
+<summary>
+The name of the object being created.
+</summary>
+</param>
+</interface>
+<interface name="sysnet_read_dhcp_config" lineno="787">
 <summary>
 Read the DHCP configuration files.
 </summary>
@@ -119916,7 +122225,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="sysnet_search_dhcp_state" lineno="751">
+<interface name="sysnet_search_dhcp_state" lineno="807">
 <summary>
 Search the DHCP state data directory.
 </summary>
@@ -119926,7 +122235,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="sysnet_dhcp_state_filetrans" lineno="795">
+<interface name="sysnet_dhcp_state_filetrans" lineno="851">
 <summary>
 Create DHCP state data.
 </summary>
@@ -119961,7 +122270,7 @@ The name of the object being created.
 </summary>
 </param>
 </interface>
-<interface name="sysnet_dns_name_resolve" lineno="815">
+<interface name="sysnet_dns_name_resolve" lineno="871">
 <summary>
 Perform a DNS name resolution.
 </summary>
@@ -119972,7 +122281,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="sysnet_use_ldap" lineno="865">
+<interface name="sysnet_use_ldap" lineno="921">
 <summary>
 Connect and use a LDAP server.
 </summary>
@@ -119982,7 +122291,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="sysnet_use_portmap" lineno="892">
+<interface name="sysnet_use_portmap" lineno="948">
 <summary>
 Connect and use remote port mappers.
 </summary>
@@ -119992,7 +122301,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="sysnet_dhcpc_script_entry" lineno="926">
+<interface name="sysnet_dhcpc_script_entry" lineno="982">
 <summary>
 Make the specified program domain
 accessable from the DHCP hooks/scripts.
@@ -120044,7 +122353,7 @@ The type for the user pty
 </summary>
 </param>
 </template>
-<template name="systemd_user_daemon_domain" lineno="194">
+<template name="systemd_user_daemon_domain" lineno="205">
 <summary>
 Allow the specified domain to be started as a daemon by the
 specified systemd user instance.
@@ -120065,7 +122374,7 @@ Domain to allow the systemd user domain to run.
 </summary>
 </param>
 </template>
-<interface name="systemd_user_activated_sock_file" lineno="215">
+<interface name="systemd_user_activated_sock_file" lineno="226">
 <summary>
 Associate the specified file type to be a type whose sock files
 can be managed by systemd user instances for socket activation.
@@ -120076,7 +122385,7 @@ File type to be associated.
 </summary>
 </param>
 </interface>
-<interface name="systemd_user_unix_stream_activated_socket" lineno="240">
+<interface name="systemd_user_unix_stream_activated_socket" lineno="251">
 <summary>
 Associate the specified domain to be a domain whose unix stream
 sockets and sock files can be managed by systemd user instances
@@ -120093,7 +122402,24 @@ File type of the domain's sock files to be associated.
 </summary>
 </param>
 </interface>
-<template name="systemd_user_app_status" lineno="265">
+<template name="systemd_user_send_systemd_notify" lineno="277">
+<summary>
+Allow the target domain the permissions necessary
+to use systemd notify when started by the specified
+systemd user instance.
+</summary>
+<param name="prefix">
+<summary>
+Prefix for the user domain.
+</summary>
+</param>
+<param name="domain">
+<summary>
+Domain to be allowed systemd notify permissions.
+</summary>
+</param>
+</template>
+<template name="systemd_user_app_status" lineno="305">
 <summary>
 Allow the target domain to be monitored and have its output
 captured by the specified systemd user instance domain.
@@ -120109,7 +122435,87 @@ Domain to allow the systemd user instance to monitor.
 </summary>
 </param>
 </template>
-<interface name="systemd_search_conf_home_content" lineno="300">
+<template name="systemd_read_user_manager_state" lineno="345">
+<summary>
+Read the process state (/proc/pid) of
+the specified systemd user instance.
+</summary>
+<param name="prefix">
+<summary>
+Prefix for the user domain.
+</summary>
+</param>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</template>
+<template name="systemd_user_manager_system_start" lineno="369">
+<summary>
+Send a start request to the specified
+systemd user instance system object.
+</summary>
+<param name="prefix">
+<summary>
+Prefix for the user domain.
+</summary>
+</param>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</template>
+<template name="systemd_user_manager_system_stop" lineno="393">
+<summary>
+Send a stop request to the specified
+systemd user instance system object.
+</summary>
+<param name="prefix">
+<summary>
+Prefix for the user domain.
+</summary>
+</param>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</template>
+<template name="systemd_user_manager_system_status" lineno="417">
+<summary>
+Get the status of the specified
+systemd user instance system object.
+</summary>
+<param name="prefix">
+<summary>
+Prefix for the user domain.
+</summary>
+</param>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</template>
+<template name="systemd_user_manager_dbus_chat" lineno="441">
+<summary>
+Send and receive messages from the
+specified systemd user instance over dbus.
+</summary>
+<param name="prefix">
+<summary>
+Prefix for the user domain.
+</summary>
+</param>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</template>
+<interface name="systemd_search_conf_home_content" lineno="462">
 <summary>
 Allow the specified domain to search systemd config home
 content.
@@ -120120,7 +122526,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_manage_conf_home_content" lineno="319">
+<interface name="systemd_manage_conf_home_content" lineno="481">
 <summary>
 Allow the specified domain to manage systemd config home
 content.
@@ -120131,7 +122537,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_relabel_conf_home_content" lineno="340">
+<interface name="systemd_relabel_conf_home_content" lineno="502">
 <summary>
 Allow the specified domain to relabel systemd config home
 content.
@@ -120142,7 +122548,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_search_data_home_content" lineno="361">
+<interface name="systemd_search_data_home_content" lineno="523">
 <summary>
 Allow the specified domain to search systemd data home
 content.
@@ -120153,7 +122559,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_manage_data_home_content" lineno="380">
+<interface name="systemd_manage_data_home_content" lineno="542">
 <summary>
 Allow the specified domain to manage systemd data home
 content.
@@ -120164,7 +122570,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_relabel_data_home_content" lineno="401">
+<interface name="systemd_relabel_data_home_content" lineno="563">
 <summary>
 Allow the specified domain to relabel systemd data home
 content.
@@ -120175,7 +122581,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_search_user_runtime" lineno="422">
+<interface name="systemd_search_user_runtime" lineno="584">
 <summary>
 Allow the specified domain to search systemd user runtime
 content.
@@ -120186,7 +122592,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_read_user_runtime_files" lineno="440">
+<interface name="systemd_read_user_runtime_files" lineno="602">
 <summary>
 Allow the specified domain to read systemd user runtime files.
 </summary>
@@ -120196,7 +122602,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_read_user_runtime_lnk_files" lineno="458">
+<interface name="systemd_read_user_runtime_lnk_files" lineno="620">
 <summary>
 Allow the specified domain to read systemd user runtime lnk files.
 </summary>
@@ -120206,7 +122612,18 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_read_user_unit_files" lineno="477">
+<interface name="systemd_write_user_runtime_socket" lineno="639">
+<summary>
+Allow the specified domain to write to
+the systemd user runtime named socket.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="systemd_read_user_unit_files" lineno="658">
 <summary>
 Allow the specified domain to read system-wide systemd
 user unit files.
@@ -120217,7 +122634,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_read_user_runtime_units" lineno="497">
+<interface name="systemd_read_user_runtime_units" lineno="678">
 <summary>
 Allow the specified domain to read systemd user runtime unit files.
 </summary>
@@ -120227,7 +122644,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_search_user_runtime_unit_dirs" lineno="517">
+<interface name="systemd_search_user_runtime_unit_dirs" lineno="698">
 <summary>
 Allow the specified domain to search systemd user runtime unit
 directories.
@@ -120238,7 +122655,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_list_user_runtime_unit_dirs" lineno="536">
+<interface name="systemd_list_user_runtime_unit_dirs" lineno="717">
 <summary>
 Allow the specified domain to list the contents of systemd
 user runtime unit directories.
@@ -120249,7 +122666,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_status_user_runtime_units" lineno="554">
+<interface name="systemd_status_user_runtime_units" lineno="735">
 <summary>
 Allow the specified domain to get the status of systemd user runtime units.
 </summary>
@@ -120259,7 +122676,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_start_user_runtime_units" lineno="573">
+<interface name="systemd_start_user_runtime_units" lineno="754">
 <summary>
 Allow the specified domain to start systemd user runtime units.
 </summary>
@@ -120269,7 +122686,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_stop_user_runtime_units" lineno="592">
+<interface name="systemd_stop_user_runtime_units" lineno="773">
 <summary>
 Allow the specified domain to stop systemd user runtime units.
 </summary>
@@ -120279,7 +122696,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_reload_user_runtime_units" lineno="611">
+<interface name="systemd_reload_user_runtime_units" lineno="792">
 <summary>
 Allow the specified domain to reload systemd user runtime units.
 </summary>
@@ -120289,7 +122706,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_log_parse_environment" lineno="631">
+<interface name="systemd_log_parse_environment" lineno="812">
 <summary>
 Make the specified type usable as an
 log parse environment type.
@@ -120300,7 +122717,7 @@ Type to be used as a log parse environment type.
 </summary>
 </param>
 </interface>
-<interface name="systemd_use_nss" lineno="651">
+<interface name="systemd_use_nss" lineno="832">
 <summary>
 Allow domain to use systemd's Name Service Switch (NSS) module.
 This module provides UNIX user and group name resolution for dynamic users
@@ -120312,7 +122729,7 @@ Domain allowed access
 </summary>
 </param>
 </interface>
-<interface name="systemd_PrivateDevices" lineno="678">
+<interface name="systemd_PrivateDevices" lineno="859">
 <summary>
 Allow domain to be used as a systemd service with a unit
 that uses PrivateDevices=yes in section [Service].
@@ -120323,7 +122740,7 @@ Domain allowed access
 </summary>
 </param>
 </interface>
-<interface name="systemd_read_hwdb" lineno="695">
+<interface name="systemd_read_hwdb" lineno="876">
 <summary>
 Allow domain to read udev hwdb file
 </summary>
@@ -120333,7 +122750,7 @@ domain allowed access
 </summary>
 </param>
 </interface>
-<interface name="systemd_map_hwdb" lineno="713">
+<interface name="systemd_map_hwdb" lineno="894">
 <summary>
 Allow domain to map udev hwdb file
 </summary>
@@ -120343,7 +122760,7 @@ domain allowed access
 </summary>
 </param>
 </interface>
-<interface name="systemd_read_logind_pids" lineno="731">
+<interface name="systemd_read_logind_pids" lineno="912">
 <summary>
 Read systemd_login PID files.  (Deprecated)
 </summary>
@@ -120353,7 +122770,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_manage_logind_pid_pipes" lineno="746">
+<interface name="systemd_manage_logind_pid_pipes" lineno="927">
 <summary>
 Manage systemd_login PID pipes.  (Deprecated)
 </summary>
@@ -120363,7 +122780,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_write_logind_pid_pipes" lineno="761">
+<interface name="systemd_write_logind_pid_pipes" lineno="942">
 <summary>
 Write systemd_login named pipe.  (Deprecated)
 </summary>
@@ -120373,7 +122790,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_watch_logind_runtime_dirs" lineno="776">
+<interface name="systemd_watch_logind_runtime_dirs" lineno="957">
 <summary>
 Watch systemd-logind runtime dirs.
 </summary>
@@ -120383,7 +122800,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_read_logind_runtime_files" lineno="795">
+<interface name="systemd_read_logind_runtime_files" lineno="976">
 <summary>
 Read systemd-logind runtime files.
 </summary>
@@ -120393,7 +122810,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_manage_logind_runtime_pipes" lineno="815">
+<interface name="systemd_manage_logind_runtime_pipes" lineno="996">
 <summary>
 Manage systemd-logind runtime pipes.
 </summary>
@@ -120403,7 +122820,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_write_logind_runtime_pipes" lineno="834">
+<interface name="systemd_write_logind_runtime_pipes" lineno="1015">
 <summary>
 Write systemd-logind runtime named pipe.
 </summary>
@@ -120413,7 +122830,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_use_logind_fds" lineno="855">
+<interface name="systemd_use_logind_fds" lineno="1036">
 <summary>
 Use inherited systemd
 logind file descriptors.
@@ -120424,7 +122841,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_watch_logind_sessions_dirs" lineno="873">
+<interface name="systemd_watch_logind_sessions_dirs" lineno="1054">
 <summary>
 Watch logind sessions dirs.
 </summary>
@@ -120434,7 +122851,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_read_logind_sessions_files" lineno="892">
+<interface name="systemd_read_logind_sessions_files" lineno="1073">
 <summary>
 Read logind sessions files.
 </summary>
@@ -120444,7 +122861,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_write_inherited_logind_sessions_pipes" lineno="913">
+<interface name="systemd_write_inherited_logind_sessions_pipes" lineno="1094">
 <summary>
 Write inherited logind sessions pipes.
 </summary>
@@ -120454,7 +122871,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_write_inherited_logind_inhibit_pipes" lineno="933">
+<interface name="systemd_write_inherited_logind_inhibit_pipes" lineno="1114">
 <summary>
 Write inherited logind inhibit pipes.
 </summary>
@@ -120464,7 +122881,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_dbus_chat_logind" lineno="954">
+<interface name="systemd_dbus_chat_logind" lineno="1135">
 <summary>
 Send and receive messages from
 systemd logind over dbus.
@@ -120475,7 +122892,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_status_logind" lineno="974">
+<interface name="systemd_status_logind" lineno="1155">
 <summary>
 Get the system status information from systemd_login
 </summary>
@@ -120485,7 +122902,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_signull_logind" lineno="993">
+<interface name="systemd_signull_logind" lineno="1174">
 <summary>
 Send systemd_login a null signal.
 </summary>
@@ -120495,7 +122912,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_manage_userdb_runtime_dirs" lineno="1011">
+<interface name="systemd_manage_userdb_runtime_dirs" lineno="1192">
 <summary>
 Manage systemd userdb runtime directories.
 </summary>
@@ -120505,7 +122922,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_manage_userdb_runtime_sock_files" lineno="1029">
+<interface name="systemd_manage_userdb_runtime_sock_files" lineno="1210">
 <summary>
 Manage socket files under /run/systemd/userdb .
 </summary>
@@ -120515,7 +122932,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_stream_connect_userdb" lineno="1047">
+<interface name="systemd_stream_connect_userdb" lineno="1228">
 <summary>
 Connect to /run/systemd/userdb/io.systemd.DynamicUser .
 </summary>
@@ -120525,7 +122942,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_read_machines" lineno="1068">
+<interface name="systemd_read_machines" lineno="1249">
 <summary>
 Allow reading /run/systemd/machines
 </summary>
@@ -120535,7 +122952,7 @@ Domain that can access the machines files
 </summary>
 </param>
 </interface>
-<interface name="systemd_connect_machined" lineno="1087">
+<interface name="systemd_connect_machined" lineno="1268">
 <summary>
 Allow connecting to /run/systemd/userdb/io.systemd.Machine socket
 </summary>
@@ -120545,7 +122962,18 @@ Domain that can access the socket
 </summary>
 </param>
 </interface>
-<interface name="systemd_dbus_chat_hostnamed" lineno="1106">
+<interface name="systemd_dbus_chat_machined" lineno="1287">
+<summary>
+Send and receive messages from
+systemd machined over dbus.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="systemd_dbus_chat_hostnamed" lineno="1308">
 <summary>
 Send and receive messages from
 systemd hostnamed over dbus.
@@ -120556,7 +122984,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_use_passwd_agent_fds" lineno="1126">
+<interface name="systemd_use_passwd_agent_fds" lineno="1328">
 <summary>
 allow systemd_passwd_agent to inherit fds
 </summary>
@@ -120566,7 +122994,7 @@ Domain that owns the fds
 </summary>
 </param>
 </interface>
-<interface name="systemd_run_passwd_agent" lineno="1149">
+<interface name="systemd_run_passwd_agent" lineno="1351">
 <summary>
 allow systemd_passwd_agent to be run by admin
 </summary>
@@ -120581,7 +123009,7 @@ role that it runs in
 </summary>
 </param>
 </interface>
-<interface name="systemd_use_passwd_agent" lineno="1170">
+<interface name="systemd_use_passwd_agent" lineno="1372">
 <summary>
 Allow a systemd_passwd_agent_t process to interact with a daemon
 that needs a password from the sysadmin.
@@ -120592,7 +123020,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_filetrans_passwd_runtime_dirs" lineno="1194">
+<interface name="systemd_filetrans_passwd_runtime_dirs" lineno="1396">
 <summary>
 Transition to systemd_passwd_runtime_t when creating dirs
 </summary>
@@ -120602,7 +123030,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_filetrans_userdb_runtime_dirs" lineno="1215">
+<interface name="systemd_filetrans_userdb_runtime_dirs" lineno="1417">
 <summary>
 Transition to systemd_userdb_runtime_t when
 creating the userdb directory inside an init runtime
@@ -120614,7 +123042,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_manage_passwd_runtime_symlinks" lineno="1233">
+<interface name="systemd_manage_passwd_runtime_symlinks" lineno="1435">
 <summary>
 Allow to domain to create systemd-passwd symlink
 </summary>
@@ -120624,7 +123052,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_watch_passwd_runtime_dirs" lineno="1251">
+<interface name="systemd_watch_passwd_runtime_dirs" lineno="1453">
 <summary>
 Allow a domain to watch systemd-passwd runtime dirs.
 </summary>
@@ -120634,7 +123062,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_manage_all_units" lineno="1269">
+<interface name="systemd_manage_all_units" lineno="1471">
 <summary>
 manage systemd unit dirs and the files in them  (Deprecated)
 </summary>
@@ -120644,7 +123072,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_list_journal_dirs" lineno="1284">
+<interface name="systemd_list_journal_dirs" lineno="1486">
 <summary>
 Allow domain to list the contents of systemd_journal_t dirs
 </summary>
@@ -120654,7 +123082,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_read_journal_files" lineno="1302">
+<interface name="systemd_read_journal_files" lineno="1504">
 <summary>
 Allow domain to read systemd_journal_t files
 </summary>
@@ -120664,7 +123092,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_manage_journal_files" lineno="1321">
+<interface name="systemd_manage_journal_files" lineno="1523">
 <summary>
 Allow domain to create/manage systemd_journal_t files
 </summary>
@@ -120674,7 +123102,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_watch_journal_dirs" lineno="1341">
+<interface name="systemd_watch_journal_dirs" lineno="1543">
 <summary>
 Allow domain to add a watch on systemd_journal_t directories
 </summary>
@@ -120684,7 +123112,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_relabelto_journal_dirs" lineno="1359">
+<interface name="systemd_relabelto_journal_dirs" lineno="1561">
 <summary>
 Relabel to systemd-journald directory type.
 </summary>
@@ -120694,7 +123122,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_relabelto_journal_files" lineno="1378">
+<interface name="systemd_relabelto_journal_files" lineno="1580">
 <summary>
 Relabel to systemd-journald file type.
 </summary>
@@ -120704,7 +123132,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_read_networkd_units" lineno="1398">
+<interface name="systemd_read_networkd_units" lineno="1600">
 <summary>
 Allow domain to read systemd_networkd_t unit files
 </summary>
@@ -120714,7 +123142,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_manage_networkd_units" lineno="1418">
+<interface name="systemd_manage_networkd_units" lineno="1620">
 <summary>
 Allow domain to create/manage systemd_networkd_t unit files
 </summary>
@@ -120724,7 +123152,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_enabledisable_networkd" lineno="1438">
+<interface name="systemd_enabledisable_networkd" lineno="1640">
 <summary>
 Allow specified domain to enable systemd-networkd units
 </summary>
@@ -120734,7 +123162,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_startstop_networkd" lineno="1457">
+<interface name="systemd_startstop_networkd" lineno="1659">
 <summary>
 Allow specified domain to start systemd-networkd units
 </summary>
@@ -120744,7 +123172,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_dbus_chat_networkd" lineno="1477">
+<interface name="systemd_dbus_chat_networkd" lineno="1679">
 <summary>
 Send and receive messages from
 systemd networkd over dbus.
@@ -120755,7 +123183,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_status_networkd" lineno="1497">
+<interface name="systemd_status_networkd" lineno="1699">
 <summary>
 Allow specified domain to get status of systemd-networkd
 </summary>
@@ -120765,7 +123193,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_relabelfrom_networkd_tun_sockets" lineno="1516">
+<interface name="systemd_relabelfrom_networkd_tun_sockets" lineno="1718">
 <summary>
 Relabel systemd_networkd tun socket.
 </summary>
@@ -120775,7 +123203,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_rw_networkd_netlink_route_sockets" lineno="1534">
+<interface name="systemd_rw_networkd_netlink_route_sockets" lineno="1736">
 <summary>
 Read/Write from systemd_networkd netlink route socket.
 </summary>
@@ -120785,7 +123213,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_list_networkd_runtime" lineno="1552">
+<interface name="systemd_list_networkd_runtime" lineno="1754">
 <summary>
 Allow domain to list dirs under /run/systemd/netif
 </summary>
@@ -120795,7 +123223,7 @@ domain permitted the access
 </summary>
 </param>
 </interface>
-<interface name="systemd_watch_networkd_runtime_dirs" lineno="1571">
+<interface name="systemd_watch_networkd_runtime_dirs" lineno="1773">
 <summary>
 Watch directories under /run/systemd/netif
 </summary>
@@ -120805,7 +123233,7 @@ Domain permitted the access
 </summary>
 </param>
 </interface>
-<interface name="systemd_read_networkd_runtime" lineno="1590">
+<interface name="systemd_read_networkd_runtime" lineno="1792">
 <summary>
 Allow domain to read files generated by systemd_networkd
 </summary>
@@ -120815,7 +123243,7 @@ domain allowed access
 </summary>
 </param>
 </interface>
-<interface name="systemd_read_logind_state" lineno="1609">
+<interface name="systemd_read_logind_state" lineno="1811">
 <summary>
 Allow systemd_logind_t to read process state for cgroup file
 </summary>
@@ -120825,7 +123253,51 @@ Domain systemd_logind_t may access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_start_power_units" lineno="1628">
+<interface name="systemd_start_user_manager_units" lineno="1831">
+<summary>
+Allow the specified domain to start systemd
+user manager units (systemd --user).
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="systemd_stop_user_manager_units" lineno="1851">
+<summary>
+Allow the specified domain to stop systemd
+user manager units (systemd --user).
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="systemd_reload_user_manager_units" lineno="1871">
+<summary>
+Allow the specified domain to reload systemd
+user manager units (systemd --user).
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="systemd_status_user_manager_units" lineno="1891">
+<summary>
+Get the status of systemd user manager
+units (systemd --user).
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="systemd_start_power_units" lineno="1910">
 <summary>
 Allow specified domain to start power units
 </summary>
@@ -120835,7 +123307,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="systemd_status_power_units" lineno="1647">
+<interface name="systemd_status_power_units" lineno="1929">
 <summary>
 Get the system status information about power units
 </summary>
@@ -120845,7 +123317,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_stream_connect_socket_proxyd" lineno="1666">
+<interface name="systemd_stream_connect_socket_proxyd" lineno="1948">
 <summary>
 Allows connections to the systemd-socket-proxyd's socket.
 </summary>
@@ -120855,7 +123327,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_tmpfiles_conf_file" lineno="1685">
+<interface name="systemd_tmpfiles_conf_file" lineno="1967">
 <summary>
 Make the specified type usable for
 systemd tmpfiles config files.
@@ -120866,7 +123338,7 @@ Type to be used for systemd tmpfiles config files.
 </summary>
 </param>
 </interface>
-<interface name="systemd_tmpfiles_creator" lineno="1706">
+<interface name="systemd_tmpfiles_creator" lineno="1988">
 <summary>
 Allow the specified domain to create
 the tmpfiles config directory with
@@ -120878,7 +123350,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_tmpfiles_conf_filetrans" lineno="1742">
+<interface name="systemd_tmpfiles_conf_filetrans" lineno="2024">
 <summary>
 Create an object in the systemd tmpfiles config
 directory, with a private type
@@ -120905,7 +123377,7 @@ The name of the object being created.
 </summary>
 </param>
 </interface>
-<interface name="systemd_list_tmpfiles_conf" lineno="1761">
+<interface name="systemd_list_tmpfiles_conf" lineno="2043">
 <summary>
 Allow domain to list systemd tmpfiles config directory
 </summary>
@@ -120915,7 +123387,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_relabelto_tmpfiles_conf_dirs" lineno="1779">
+<interface name="systemd_relabelto_tmpfiles_conf_dirs" lineno="2061">
 <summary>
 Allow domain to relabel to systemd tmpfiles config directory
 </summary>
@@ -120925,7 +123397,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_relabelto_tmpfiles_conf_files" lineno="1797">
+<interface name="systemd_relabelto_tmpfiles_conf_files" lineno="2079">
 <summary>
 Allow domain to relabel to systemd tmpfiles config files
 </summary>
@@ -120935,7 +123407,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_tmpfilesd_managed" lineno="1815">
+<interface name="systemd_tmpfilesd_managed" lineno="2097">
 <summary>
 Allow systemd_tmpfiles_t to manage filesystem objects
 </summary>
@@ -120945,7 +123417,7 @@ Type of object to manage
 </summary>
 </param>
 </interface>
-<interface name="systemd_dbus_chat_resolved" lineno="1842">
+<interface name="systemd_dbus_chat_resolved" lineno="2124">
 <summary>
 Send and receive messages from
 systemd resolved over dbus.
@@ -120956,7 +123428,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_read_resolved_runtime" lineno="1862">
+<interface name="systemd_read_resolved_runtime" lineno="2144">
 <summary>
 Allow domain to read resolv.conf file generated by systemd_resolved
 </summary>
@@ -120966,7 +123438,7 @@ domain allowed access
 </summary>
 </param>
 </interface>
-<interface name="systemd_getattr_updated_runtime" lineno="1880">
+<interface name="systemd_getattr_updated_runtime" lineno="2162">
 <summary>
 Allow domain to getattr on .updated file (generated by systemd-update-done
 </summary>
@@ -120976,7 +123448,7 @@ domain allowed access
 </summary>
 </param>
 </interface>
-<interface name="systemd_search_all_user_keys" lineno="1898">
+<interface name="systemd_search_all_user_keys" lineno="2180">
 <summary>
 Search keys for the all systemd --user domains.
 </summary>
@@ -120986,7 +123458,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_create_all_user_keys" lineno="1916">
+<interface name="systemd_create_all_user_keys" lineno="2198">
 <summary>
 Create keys for the all systemd --user domains.
 </summary>
@@ -120996,7 +123468,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_write_all_user_keys" lineno="1934">
+<interface name="systemd_write_all_user_keys" lineno="2216">
 <summary>
 Write keys for the all systemd --user domains.
 </summary>
@@ -121006,7 +123478,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_domtrans_sysusers" lineno="1953">
+<interface name="systemd_domtrans_sysusers" lineno="2235">
 <summary>
 Execute systemd-sysusers in the
 systemd sysusers domain.
@@ -121017,7 +123489,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="systemd_run_sysusers" lineno="1978">
+<interface name="systemd_run_sysusers" lineno="2260">
 <summary>
 Run systemd-sysusers with a domain transition.
 </summary>
@@ -121033,7 +123505,7 @@ Role allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="systemd_use_inherited_machined_ptys" lineno="1998">
+<interface name="systemd_use_inherited_machined_ptys" lineno="2280">
 <summary>
 receive and use a systemd_machined_devpts_t file handle
 </summary>
@@ -121084,14 +123556,6 @@ labelled ones.
 </p>
 </desc>
 </tunable>
-<tunable name="systemd_tmpfilesd_factory" dftval="false">
-<desc>
-<p>
-Allow systemd-tmpfilesd to populate missing configuration files from factory
-template directory.
-</p>
-</desc>
-</tunable>
 </module>
 <module name="tmpfiles" filename="policy/modules/system/tmpfiles.if">
 <summary>Policy for tmpfiles, a boot-time temporary file handler</summary>
@@ -121685,7 +124149,7 @@ Domain to make unconfined.
 </summary>
 </param>
 </interface>
-<interface name="unconfined_domain" lineno="150">
+<interface name="unconfined_domain" lineno="154">
 <summary>
 Make the specified domain unconfined and
 audit executable heap usage.
@@ -121713,7 +124177,7 @@ Domain to make unconfined.
 </summary>
 </param>
 </interface>
-<interface name="unconfined_domtrans" lineno="168">
+<interface name="unconfined_domtrans" lineno="172">
 <summary>
 Transition to the unconfined domain.
 </summary>
@@ -121723,7 +124187,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="unconfined_run" lineno="191">
+<interface name="unconfined_run" lineno="195">
 <summary>
 Execute specified programs in the unconfined domain.
 </summary>
@@ -121738,7 +124202,7 @@ The role to allow the unconfined domain.
 </summary>
 </param>
 </interface>
-<interface name="unconfined_shell_domtrans" lineno="210">
+<interface name="unconfined_shell_domtrans" lineno="214">
 <summary>
 Transition to the unconfined domain by executing a shell.
 </summary>
@@ -121748,7 +124212,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="unconfined_domtrans_to" lineno="248">
+<interface name="unconfined_domtrans_to" lineno="252">
 <summary>
 Allow unconfined to execute the specified program in
 the specified domain.
@@ -121775,7 +124239,7 @@ Domain entry point file.
 </summary>
 </param>
 </interface>
-<interface name="unconfined_run_to" lineno="285">
+<interface name="unconfined_run_to" lineno="289">
 <summary>
 Allow unconfined to execute the specified program in
 the specified domain.  Allow the specified domain the
@@ -121804,7 +124268,7 @@ Domain entry point file.
 </summary>
 </param>
 </interface>
-<interface name="unconfined_use_fds" lineno="306">
+<interface name="unconfined_use_fds" lineno="310">
 <summary>
 Inherit file descriptors from the unconfined domain.
 </summary>
@@ -121814,7 +124278,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="unconfined_sigchld" lineno="324">
+<interface name="unconfined_sigchld" lineno="328">
 <summary>
 Send a SIGCHLD signal to the unconfined domain.
 </summary>
@@ -121824,7 +124288,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="unconfined_signull" lineno="342">
+<interface name="unconfined_signull" lineno="346">
 <summary>
 Send a SIGNULL signal to the unconfined domain.
 </summary>
@@ -121834,7 +124298,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="unconfined_signal" lineno="360">
+<interface name="unconfined_signal" lineno="364">
 <summary>
 Send generic signals to the unconfined domain.
 </summary>
@@ -121844,7 +124308,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="unconfined_read_pipes" lineno="378">
+<interface name="unconfined_read_pipes" lineno="382">
 <summary>
 Read unconfined domain unnamed pipes.
 </summary>
@@ -121854,7 +124318,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="unconfined_dontaudit_read_pipes" lineno="396">
+<interface name="unconfined_dontaudit_read_pipes" lineno="400">
 <summary>
 Do not audit attempts to read unconfined domain unnamed pipes.
 </summary>
@@ -121864,7 +124328,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="unconfined_rw_pipes" lineno="414">
+<interface name="unconfined_rw_pipes" lineno="418">
 <summary>
 Read and write unconfined domain unnamed pipes.
 </summary>
@@ -121874,7 +124338,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="unconfined_dontaudit_rw_pipes" lineno="433">
+<interface name="unconfined_dontaudit_rw_pipes" lineno="437">
 <summary>
 Do not audit attempts to read and write
 unconfined domain unnamed pipes.
@@ -121885,7 +124349,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="unconfined_stream_connect" lineno="452">
+<interface name="unconfined_stream_connect" lineno="456">
 <summary>
 Connect to the unconfined domain using
 a unix domain stream socket.
@@ -121896,7 +124360,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="unconfined_dontaudit_rw_stream_sockets" lineno="471">
+<interface name="unconfined_dontaudit_rw_stream_sockets" lineno="475">
 <summary>
 Do not audit attempts to read and write
 unconfined domain stream.
@@ -121907,7 +124371,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="unconfined_dontaudit_rw_tcp_sockets" lineno="500">
+<interface name="unconfined_dontaudit_rw_tcp_sockets" lineno="504">
 <summary>
 Do not audit attempts to read or write
 unconfined domain tcp sockets.
@@ -121928,7 +124392,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="unconfined_search_keys" lineno="518">
+<interface name="unconfined_search_keys" lineno="522">
 <summary>
 Search keys for the unconfined domain.
 </summary>
@@ -121938,7 +124402,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="unconfined_create_keys" lineno="536">
+<interface name="unconfined_create_keys" lineno="540">
 <summary>
 Create keys for the unconfined domain.
 </summary>
@@ -121948,7 +124412,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="unconfined_write_keys" lineno="554">
+<interface name="unconfined_write_keys" lineno="558">
 <summary>
 Write keys for the unconfined domain.
 </summary>
@@ -121958,7 +124422,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="unconfined_dbus_send" lineno="572">
+<interface name="unconfined_dbus_send" lineno="576">
 <summary>
 Send messages to the unconfined domain over dbus.
 </summary>
@@ -121968,7 +124432,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="unconfined_dbus_chat" lineno="592">
+<interface name="unconfined_dbus_chat" lineno="596">
 <summary>
 Send and receive messages from
 unconfined_t over dbus.
@@ -121979,7 +124443,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="unconfined_dbus_connect" lineno="613">
+<interface name="unconfined_dbus_connect" lineno="617">
 <summary>
 Connect to the the unconfined DBUS
 for service (acquire_svc).
@@ -122115,7 +124579,7 @@ The user domain
 </param>
 <rolebase/>
 </interface>
-<interface name="userdom_manage_tmp_role" lineno="463">
+<interface name="userdom_manage_tmp_role" lineno="472">
 <summary>
 Manage user temporary files
 </summary>
@@ -122131,7 +124595,7 @@ Domain allowed access.
 </param>
 <rolebase/>
 </interface>
-<interface name="userdom_exec_user_tmp_files" lineno="490">
+<interface name="userdom_exec_user_tmp_files" lineno="499">
 <summary>
 The execute access user temporary files.
 </summary>
@@ -122142,7 +124606,7 @@ Domain allowed access.
 </param>
 <rolebase/>
 </interface>
-<interface name="userdom_manage_tmpfs_role" lineno="526">
+<interface name="userdom_manage_tmpfs_role" lineno="535">
 <summary>
 Role access for the user tmpfs type
 that the user has full access.
@@ -122168,7 +124632,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<template name="userdom_basic_networking_template" lineno="552">
+<template name="userdom_basic_networking_template" lineno="561">
 <summary>
 The template allowing the user basic
 network permissions
@@ -122181,7 +124645,7 @@ is the prefix for user_t).
 </param>
 <rolebase/>
 </template>
-<template name="userdom_change_password_template" lineno="592">
+<template name="userdom_change_password_template" lineno="601">
 <summary>
 The template for allowing the user to change passwords.
 </summary>
@@ -122193,7 +124657,7 @@ is the prefix for user_t).
 </param>
 <rolebase/>
 </template>
-<template name="userdom_common_user_template" lineno="622">
+<template name="userdom_common_user_template" lineno="631">
 <summary>
 The template containing rules common to unprivileged
 users and administrative users.
@@ -122211,7 +124675,7 @@ is the prefix for user_t).
 </summary>
 </param>
 </template>
-<template name="userdom_login_user_template" lineno="945">
+<template name="userdom_login_user_template" lineno="954">
 <summary>
 The template for creating a login user.
 </summary>
@@ -122229,7 +124693,7 @@ is the prefix for user_t).
 </summary>
 </param>
 </template>
-<template name="userdom_restricted_user_template" lineno="1068">
+<template name="userdom_restricted_user_template" lineno="1077">
 <summary>
 The template for creating a unprivileged login user.
 </summary>
@@ -122247,7 +124711,7 @@ is the prefix for user_t).
 </summary>
 </param>
 </template>
-<template name="userdom_restricted_xwindows_user_template" lineno="1109">
+<template name="userdom_restricted_xwindows_user_template" lineno="1118">
 <summary>
 The template for creating a unprivileged xwindows login user.
 </summary>
@@ -122268,7 +124732,7 @@ is the prefix for user_t).
 </summary>
 </param>
 </template>
-<template name="userdom_unpriv_user_template" lineno="1192">
+<template name="userdom_unpriv_user_template" lineno="1201">
 <summary>
 The template for creating a unprivileged user roughly
 equivalent to a regular linux user.
@@ -122291,7 +124755,7 @@ is the prefix for user_t).
 </summary>
 </param>
 </template>
-<template name="userdom_admin_user_template" lineno="1312">
+<template name="userdom_admin_user_template" lineno="1321">
 <summary>
 The template for creating an administrative user.
 </summary>
@@ -122320,7 +124784,7 @@ is the prefix for sysadm_t).
 </summary>
 </param>
 </template>
-<interface name="userdom_security_admin_template" lineno="1491">
+<interface name="userdom_security_admin_template" lineno="1501">
 <summary>
 Allow user to run as a secadm
 </summary>
@@ -122346,7 +124810,7 @@ The role  of the object to create.
 </summary>
 </param>
 </interface>
-<template name="userdom_xdg_user_template" lineno="1594">
+<template name="userdom_xdg_user_template" lineno="1604">
 <summary>
 Allow user to interact with xdg content types
 </summary>
@@ -122367,7 +124831,7 @@ Domain allowed access.
 </summary>
 </param>
 </template>
-<interface name="userdom_user_application_type" lineno="1643">
+<interface name="userdom_user_application_type" lineno="1653">
 <summary>
 Make the specified type usable as
 a user application domain type.
@@ -122378,7 +124842,7 @@ Type to be used as a user application domain.
 </summary>
 </param>
 </interface>
-<interface name="userdom_user_application_domain" lineno="1664">
+<interface name="userdom_user_application_domain" lineno="1674">
 <summary>
 Make the specified type usable as
 a user application domain.
@@ -122394,7 +124858,7 @@ Type to be used as the domain entry point.
 </summary>
 </param>
 </interface>
-<interface name="userdom_user_home_content" lineno="1681">
+<interface name="userdom_user_home_content" lineno="1691">
 <summary>
 Make the specified type usable in a
 user home directory.
@@ -122406,7 +124870,7 @@ user home directory.
 </summary>
 </param>
 </interface>
-<interface name="userdom_user_tmp_file" lineno="1707">
+<interface name="userdom_user_tmp_file" lineno="1717">
 <summary>
 Make the specified type usable as a
 user temporary file.
@@ -122418,7 +124882,7 @@ temporary directories.
 </summary>
 </param>
 </interface>
-<interface name="userdom_user_tmpfs_file" lineno="1724">
+<interface name="userdom_user_tmpfs_file" lineno="1734">
 <summary>
 Make the specified type usable as a
 user tmpfs file.
@@ -122430,7 +124894,7 @@ tmpfs directories.
 </summary>
 </param>
 </interface>
-<interface name="userdom_attach_admin_tun_iface" lineno="1739">
+<interface name="userdom_attach_admin_tun_iface" lineno="1749">
 <summary>
 Allow domain to attach to TUN devices created by administrative users.
 </summary>
@@ -122440,7 +124904,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_setattr_user_ptys" lineno="1758">
+<interface name="userdom_setattr_user_ptys" lineno="1768">
 <summary>
 Set the attributes of a user pty.
 </summary>
@@ -122450,7 +124914,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_create_user_pty" lineno="1776">
+<interface name="userdom_create_user_pty" lineno="1786">
 <summary>
 Create a user pty.
 </summary>
@@ -122460,7 +124924,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_getattr_user_home_dirs" lineno="1794">
+<interface name="userdom_getattr_user_home_dirs" lineno="1804">
 <summary>
 Get the attributes of user home directories.
 </summary>
@@ -122470,7 +124934,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_dontaudit_getattr_user_home_dirs" lineno="1813">
+<interface name="userdom_dontaudit_getattr_user_home_dirs" lineno="1823">
 <summary>
 Do not audit attempts to get the attributes of user home directories.
 </summary>
@@ -122480,7 +124944,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="userdom_search_user_home_dirs" lineno="1831">
+<interface name="userdom_search_user_home_dirs" lineno="1841">
 <summary>
 Search user home directories.
 </summary>
@@ -122490,7 +124954,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_dontaudit_search_user_home_dirs" lineno="1858">
+<interface name="userdom_dontaudit_search_user_home_dirs" lineno="1868">
 <summary>
 Do not audit attempts to search user home directories.
 </summary>
@@ -122508,7 +124972,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="userdom_list_user_home_dirs" lineno="1876">
+<interface name="userdom_list_user_home_dirs" lineno="1886">
 <summary>
 List user home directories.
 </summary>
@@ -122518,7 +124982,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_dontaudit_list_user_home_dirs" lineno="1895">
+<interface name="userdom_dontaudit_list_user_home_dirs" lineno="1905">
 <summary>
 Do not audit attempts to list user home subdirectories.
 </summary>
@@ -122528,7 +124992,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="userdom_create_user_home_dirs" lineno="1913">
+<interface name="userdom_create_user_home_dirs" lineno="1923">
 <summary>
 Create user home directories.
 </summary>
@@ -122538,7 +125002,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_manage_user_home_dirs" lineno="1931">
+<interface name="userdom_manage_user_home_dirs" lineno="1941">
 <summary>
 Manage user home directories.
 </summary>
@@ -122548,7 +125012,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_relabelto_user_home_dirs" lineno="1949">
+<interface name="userdom_relabelto_user_home_dirs" lineno="1959">
 <summary>
 Relabel to user home directories.
 </summary>
@@ -122558,7 +125022,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_home_filetrans_user_home_dir" lineno="1973">
+<interface name="userdom_home_filetrans_user_home_dir" lineno="1983">
 <summary>
 Create directories in the home dir root with
 the user home directory type.
@@ -122574,7 +125038,7 @@ The name of the object being created.
 </summary>
 </param>
 </interface>
-<interface name="userdom_user_home_domtrans" lineno="2010">
+<interface name="userdom_user_home_domtrans" lineno="2020">
 <summary>
 Do a domain transition to the specified
 domain when executing a program in the
@@ -122603,7 +125067,7 @@ Domain to transition to.
 </summary>
 </param>
 </interface>
-<interface name="userdom_dontaudit_search_user_home_content" lineno="2030">
+<interface name="userdom_dontaudit_search_user_home_content" lineno="2040">
 <summary>
 Do not audit attempts to search user home content directories.
 </summary>
@@ -122613,7 +125077,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="userdom_list_all_user_home_content" lineno="2048">
+<interface name="userdom_list_all_user_home_content" lineno="2058">
 <summary>
 List all users home content directories.
 </summary>
@@ -122623,7 +125087,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_list_user_home_content" lineno="2067">
+<interface name="userdom_list_user_home_content" lineno="2077">
 <summary>
 List contents of users home directory.
 </summary>
@@ -122633,7 +125097,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_manage_user_home_content_dirs" lineno="2086">
+<interface name="userdom_manage_user_home_content_dirs" lineno="2096">
 <summary>
 Create, read, write, and delete directories
 in a user home subdirectory.
@@ -122644,7 +125108,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_delete_all_user_home_content_dirs" lineno="2105">
+<interface name="userdom_delete_all_user_home_content_dirs" lineno="2115">
 <summary>
 Delete all user home content directories.
 </summary>
@@ -122654,7 +125118,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_delete_user_home_content_dirs" lineno="2125">
+<interface name="userdom_delete_user_home_content_dirs" lineno="2135">
 <summary>
 Delete directories in a user home subdirectory.
 </summary>
@@ -122664,7 +125128,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_setattr_all_user_home_content_dirs" lineno="2143">
+<interface name="userdom_setattr_all_user_home_content_dirs" lineno="2153">
 <summary>
 Set attributes of all user home content directories.
 </summary>
@@ -122674,7 +125138,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_dontaudit_setattr_user_home_content_files" lineno="2163">
+<interface name="userdom_dontaudit_setattr_user_home_content_files" lineno="2173">
 <summary>
 Do not audit attempts to set the
 attributes of user home files.
@@ -122685,7 +125149,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="userdom_map_user_home_content_files" lineno="2181">
+<interface name="userdom_map_user_home_content_files" lineno="2191">
 <summary>
 Map user home files.
 </summary>
@@ -122695,7 +125159,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_mmap_user_home_content_files" lineno="2199">
+<interface name="userdom_mmap_user_home_content_files" lineno="2209">
 <summary>
 Mmap user home files.
 </summary>
@@ -122705,7 +125169,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_read_user_home_content_files" lineno="2218">
+<interface name="userdom_read_user_home_content_files" lineno="2228">
 <summary>
 Read user home files.
 </summary>
@@ -122715,7 +125179,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_dontaudit_read_user_home_content_files" lineno="2237">
+<interface name="userdom_dontaudit_read_user_home_content_files" lineno="2247">
 <summary>
 Do not audit attempts to read user home files.
 </summary>
@@ -122725,7 +125189,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="userdom_read_all_user_home_content" lineno="2256">
+<interface name="userdom_read_all_user_home_content" lineno="2266">
 <summary>
 Read all user home content, including application-specific resources.
 </summary>
@@ -122735,7 +125199,7 @@ Domain allowed access
 </summary>
 </param>
 </interface>
-<interface name="userdom_manage_all_user_home_content" lineno="2278">
+<interface name="userdom_manage_all_user_home_content" lineno="2288">
 <summary>
 Manage all user home content, including application-specific resources.
 </summary>
@@ -122745,7 +125209,7 @@ Domain allowed access
 </summary>
 </param>
 </interface>
-<interface name="userdom_map_all_user_home_content_files" lineno="2300">
+<interface name="userdom_map_all_user_home_content_files" lineno="2310">
 <summary>
 Map all user home content, including application-specific resources.
 </summary>
@@ -122755,7 +125219,7 @@ Domain allowed access
 </summary>
 </param>
 </interface>
-<interface name="userdom_dontaudit_append_user_home_content_files" lineno="2318">
+<interface name="userdom_dontaudit_append_user_home_content_files" lineno="2328">
 <summary>
 Do not audit attempts to append user home files.
 </summary>
@@ -122765,7 +125229,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="userdom_dontaudit_write_user_home_content_files" lineno="2336">
+<interface name="userdom_dontaudit_write_user_home_content_files" lineno="2346">
 <summary>
 Do not audit attempts to write user home files.
 </summary>
@@ -122775,7 +125239,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="userdom_delete_all_user_home_content_files" lineno="2354">
+<interface name="userdom_delete_all_user_home_content_files" lineno="2364">
 <summary>
 Delete all user home content files.
 </summary>
@@ -122785,7 +125249,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_delete_user_home_content_files" lineno="2374">
+<interface name="userdom_delete_user_home_content_files" lineno="2384">
 <summary>
 Delete files in a user home subdirectory.
 </summary>
@@ -122795,7 +125259,27 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_dontaudit_relabel_user_home_content_files" lineno="2392">
+<interface name="userdom_relabel_generic_user_home_dirs" lineno="2402">
+<summary>
+Relabel generic user home dirs.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="userdom_relabel_generic_user_home_files" lineno="2420">
+<summary>
+Relabel generic user home files.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="userdom_dontaudit_relabel_user_home_content_files" lineno="2438">
 <summary>
 Do not audit attempts to relabel user home files.
 </summary>
@@ -122805,7 +125289,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="userdom_read_user_home_content_symlinks" lineno="2410">
+<interface name="userdom_read_user_home_content_symlinks" lineno="2456">
 <summary>
 Read user home subdirectory symbolic links.
 </summary>
@@ -122815,7 +125299,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_exec_user_home_content_files" lineno="2430">
+<interface name="userdom_exec_user_home_content_files" lineno="2476">
 <summary>
 Execute user home files.
 </summary>
@@ -122826,7 +125310,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="userdom_dontaudit_exec_user_home_content_files" lineno="2457">
+<interface name="userdom_dontaudit_exec_user_home_content_files" lineno="2503">
 <summary>
 Do not audit attempts to execute user home files.
 </summary>
@@ -122836,7 +125320,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="userdom_manage_user_home_content_files" lineno="2476">
+<interface name="userdom_manage_user_home_content_files" lineno="2522">
 <summary>
 Create, read, write, and delete files
 in a user home subdirectory.
@@ -122847,7 +125331,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_dontaudit_manage_user_home_content_dirs" lineno="2497">
+<interface name="userdom_dontaudit_manage_user_home_content_dirs" lineno="2543">
 <summary>
 Do not audit attempts to create, read, write, and delete directories
 in a user home subdirectory.
@@ -122858,7 +125342,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="userdom_manage_user_home_content_symlinks" lineno="2516">
+<interface name="userdom_manage_user_home_content_symlinks" lineno="2562">
 <summary>
 Create, read, write, and delete symbolic links
 in a user home subdirectory.
@@ -122869,7 +125353,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_delete_all_user_home_content_symlinks" lineno="2536">
+<interface name="userdom_delete_all_user_home_content_symlinks" lineno="2582">
 <summary>
 Delete all user home content symbolic links.
 </summary>
@@ -122879,7 +125363,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_delete_user_home_content_symlinks" lineno="2556">
+<interface name="userdom_delete_user_home_content_symlinks" lineno="2602">
 <summary>
 Delete symbolic links in a user home directory.
 </summary>
@@ -122889,7 +125373,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_manage_user_home_content_pipes" lineno="2575">
+<interface name="userdom_manage_user_home_content_pipes" lineno="2621">
 <summary>
 Create, read, write, and delete named pipes
 in a user home subdirectory.
@@ -122900,7 +125384,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_manage_user_home_content_sockets" lineno="2596">
+<interface name="userdom_manage_user_home_content_sockets" lineno="2642">
 <summary>
 Create, read, write, and delete named sockets
 in a user home subdirectory.
@@ -122911,7 +125395,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_user_home_dir_filetrans" lineno="2633">
+<interface name="userdom_user_home_dir_filetrans" lineno="2679">
 <summary>
 Create objects in a user home directory
 with an automatic type transition to
@@ -122938,7 +125422,7 @@ The name of the object being created.
 </summary>
 </param>
 </interface>
-<interface name="userdom_user_home_content_filetrans" lineno="2670">
+<interface name="userdom_user_home_content_filetrans" lineno="2716">
 <summary>
 Create objects in a directory located
 in a user home directory with an
@@ -122966,7 +125450,7 @@ The name of the object being created.
 </summary>
 </param>
 </interface>
-<interface name="userdom_user_home_dir_filetrans_user_cert" lineno="2701">
+<interface name="userdom_user_home_dir_filetrans_user_cert" lineno="2747">
 <summary>
 Automatically use the user_cert_t label for selected resources
 created in a users home directory
@@ -122987,7 +125471,7 @@ Name of the resource that is being created
 </summary>
 </param>
 </interface>
-<interface name="userdom_user_home_dir_filetrans_user_home_content" lineno="2731">
+<interface name="userdom_user_home_dir_filetrans_user_home_content" lineno="2777">
 <summary>
 Create objects in a user home directory
 with an automatic type transition to
@@ -123009,7 +125493,27 @@ The name of the object being created.
 </summary>
 </param>
 </interface>
-<interface name="userdom_read_user_certs" lineno="2751">
+<interface name="userdom_exec_user_bin_files" lineno="2796">
+<summary>
+Execute user executable files.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="userdom_manage_user_bin" lineno="2816">
+<summary>
+Manage user executable files.
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access.
+</summary>
+</param>
+</interface>
+<interface name="userdom_read_user_certs" lineno="2838">
 <summary>
 Read user SSL certificates.
 </summary>
@@ -123020,7 +125524,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="userdom_dontaudit_manage_user_certs" lineno="2774">
+<interface name="userdom_dontaudit_manage_user_certs" lineno="2861">
 <summary>
 Do not audit attempts to manage
 the user SSL certificates.
@@ -123032,7 +125536,7 @@ Domain allowed access.
 </param>
 <rolecap/>
 </interface>
-<interface name="userdom_manage_user_certs" lineno="2794">
+<interface name="userdom_manage_user_certs" lineno="2881">
 <summary>
 Manage user SSL certificates.
 </summary>
@@ -123042,7 +125546,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_write_user_tmp_sockets" lineno="2815">
+<interface name="userdom_write_user_tmp_sockets" lineno="2902">
 <summary>
 Write to user temporary named sockets.
 </summary>
@@ -123052,7 +125556,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_list_user_tmp" lineno="2835">
+<interface name="userdom_list_user_tmp" lineno="2922">
 <summary>
 List user temporary directories.
 </summary>
@@ -123062,7 +125566,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_dontaudit_list_user_tmp" lineno="2857">
+<interface name="userdom_dontaudit_list_user_tmp" lineno="2944">
 <summary>
 Do not audit attempts to list user
 temporary directories.
@@ -123073,7 +125577,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="userdom_delete_user_tmp_dirs" lineno="2875">
+<interface name="userdom_delete_user_tmp_dirs" lineno="2962">
 <summary>
 Delete users temporary directories.
 </summary>
@@ -123083,7 +125587,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_dontaudit_manage_user_tmp_dirs" lineno="2894">
+<interface name="userdom_dontaudit_manage_user_tmp_dirs" lineno="2981">
 <summary>
 Do not audit attempts to manage users
 temporary directories.
@@ -123094,7 +125598,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="userdom_read_user_tmp_files" lineno="2912">
+<interface name="userdom_read_user_tmp_files" lineno="2999">
 <summary>
 Read user temporary files.
 </summary>
@@ -123104,7 +125608,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_map_user_tmp_files" lineno="2933">
+<interface name="userdom_map_user_tmp_files" lineno="3020">
 <summary>
 Map user temporary files.
 </summary>
@@ -123114,7 +125618,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_dontaudit_read_user_tmp_files" lineno="2952">
+<interface name="userdom_dontaudit_read_user_tmp_files" lineno="3039">
 <summary>
 Do not audit attempts to read users
 temporary files.
@@ -123125,7 +125629,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="userdom_dontaudit_append_user_tmp_files" lineno="2971">
+<interface name="userdom_dontaudit_append_user_tmp_files" lineno="3058">
 <summary>
 Do not audit attempts to append users
 temporary files.
@@ -123136,7 +125640,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="userdom_rw_user_tmp_files" lineno="2989">
+<interface name="userdom_rw_user_tmp_files" lineno="3076">
 <summary>
 Read and write user temporary files.
 </summary>
@@ -123146,7 +125650,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_delete_user_tmp_files" lineno="3010">
+<interface name="userdom_delete_user_tmp_files" lineno="3097">
 <summary>
 Delete users temporary files.
 </summary>
@@ -123156,7 +125660,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_dontaudit_manage_user_tmp_files" lineno="3029">
+<interface name="userdom_dontaudit_manage_user_tmp_files" lineno="3116">
 <summary>
 Do not audit attempts to manage users
 temporary files.
@@ -123167,7 +125671,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="userdom_read_user_tmp_symlinks" lineno="3047">
+<interface name="userdom_read_user_tmp_symlinks" lineno="3134">
 <summary>
 Read user temporary symbolic links.
 </summary>
@@ -123177,7 +125681,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_delete_user_tmp_symlinks" lineno="3068">
+<interface name="userdom_delete_user_tmp_symlinks" lineno="3155">
 <summary>
 Delete users temporary symbolic links.
 </summary>
@@ -123187,7 +125691,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_manage_user_tmp_dirs" lineno="3087">
+<interface name="userdom_manage_user_tmp_dirs" lineno="3174">
 <summary>
 Create, read, write, and delete user
 temporary directories.
@@ -123198,7 +125702,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_delete_user_tmp_named_pipes" lineno="3107">
+<interface name="userdom_delete_user_tmp_named_pipes" lineno="3194">
 <summary>
 Delete users temporary named pipes.
 </summary>
@@ -123208,7 +125712,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_manage_user_tmp_files" lineno="3126">
+<interface name="userdom_manage_user_tmp_files" lineno="3213">
 <summary>
 Create, read, write, and delete user
 temporary files.
@@ -123219,7 +125723,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_delete_user_tmp_named_sockets" lineno="3146">
+<interface name="userdom_delete_user_tmp_named_sockets" lineno="3233">
 <summary>
 Delete users temporary named sockets.
 </summary>
@@ -123229,7 +125733,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_manage_user_tmp_symlinks" lineno="3165">
+<interface name="userdom_manage_user_tmp_symlinks" lineno="3252">
 <summary>
 Create, read, write, and delete user
 temporary symbolic links.
@@ -123240,7 +125744,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_dontaudit_rw_user_tmp_pipes" lineno="3186">
+<interface name="userdom_dontaudit_rw_user_tmp_pipes" lineno="3273">
 <summary>
 Do not audit attempts to read and write
 temporary pipes.
@@ -123251,7 +125755,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_manage_user_tmp_pipes" lineno="3205">
+<interface name="userdom_manage_user_tmp_pipes" lineno="3292">
 <summary>
 Create, read, write, and delete user
 temporary named pipes.
@@ -123262,7 +125766,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_manage_user_tmp_sockets" lineno="3226">
+<interface name="userdom_manage_user_tmp_sockets" lineno="3313">
 <summary>
 Create, read, write, and delete user
 temporary named sockets.
@@ -123273,7 +125777,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_user_tmp_filetrans" lineno="3263">
+<interface name="userdom_user_tmp_filetrans" lineno="3350">
 <summary>
 Create objects in a user temporary directory
 with an automatic type transition to
@@ -123300,7 +125804,7 @@ The name of the object being created.
 </summary>
 </param>
 </interface>
-<interface name="userdom_tmp_filetrans_user_tmp" lineno="3295">
+<interface name="userdom_tmp_filetrans_user_tmp" lineno="3382">
 <summary>
 Create objects in the temporary directory
 with an automatic type transition to
@@ -123322,7 +125826,7 @@ The name of the object being created.
 </summary>
 </param>
 </interface>
-<interface name="userdom_map_user_tmpfs_files" lineno="3313">
+<interface name="userdom_map_user_tmpfs_files" lineno="3400">
 <summary>
 Map user tmpfs files.
 </summary>
@@ -123332,7 +125836,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_read_user_tmpfs_files" lineno="3331">
+<interface name="userdom_read_user_tmpfs_files" lineno="3418">
 <summary>
 Read user tmpfs files.
 </summary>
@@ -123342,7 +125846,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_dontaudit_read_user_tmpfs_files" lineno="3351">
+<interface name="userdom_dontaudit_read_user_tmpfs_files" lineno="3438">
 <summary>
 dontaudit Read attempts of user tmpfs files.
 </summary>
@@ -123352,7 +125856,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_relabel_user_tmpfs_dirs" lineno="3370">
+<interface name="userdom_relabel_user_tmpfs_dirs" lineno="3457">
 <summary>
 relabel to/from user tmpfs dirs
 </summary>
@@ -123362,7 +125866,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_relabel_user_tmpfs_files" lineno="3389">
+<interface name="userdom_relabel_user_tmpfs_files" lineno="3476">
 <summary>
 relabel to/from user tmpfs files
 </summary>
@@ -123372,7 +125876,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_user_runtime_content" lineno="3411">
+<interface name="userdom_user_runtime_content" lineno="3498">
 <summary>
 Make the specified type usable in
 the directory /run/user/%{USERID}/.
@@ -123384,7 +125888,7 @@ user_runtime_content_dir_t.
 </summary>
 </param>
 </interface>
-<interface name="userdom_search_user_runtime" lineno="3431">
+<interface name="userdom_search_user_runtime" lineno="3518">
 <summary>
 Search users runtime directories.
 </summary>
@@ -123394,7 +125898,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_search_user_runtime_root" lineno="3450">
+<interface name="userdom_search_user_runtime_root" lineno="3537">
 <summary>
 Search user runtime root directories.
 </summary>
@@ -123404,7 +125908,18 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_manage_user_runtime_root_dirs" lineno="3470">
+<interface name="userdom_dontaudit_search_user_runtime_root" lineno="3557">
+<summary>
+Do not audit attempts to search
+user runtime root directories.
+</summary>
+<param name="domain">
+<summary>
+Domain to not audit.
+</summary>
+</param>
+</interface>
+<interface name="userdom_manage_user_runtime_root_dirs" lineno="3576">
 <summary>
 Create, read, write, and delete user
 runtime root dirs.
@@ -123415,7 +125930,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_relabel_user_runtime_root_dirs" lineno="3489">
+<interface name="userdom_relabel_user_runtime_root_dirs" lineno="3595">
 <summary>
 Relabel to and from user runtime root dirs.
 </summary>
@@ -123425,7 +125940,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_manage_user_runtime_dirs" lineno="3508">
+<interface name="userdom_manage_user_runtime_dirs" lineno="3614">
 <summary>
 Create, read, write, and delete user
 runtime dirs.
@@ -123436,7 +125951,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_mounton_user_runtime_dirs" lineno="3528">
+<interface name="userdom_mounton_user_runtime_dirs" lineno="3634">
 <summary>
 Mount a filesystem on user runtime dir
 directories.
@@ -123447,7 +125962,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_relabelto_user_runtime_dirs" lineno="3546">
+<interface name="userdom_relabelto_user_runtime_dirs" lineno="3652">
 <summary>
 Relabel to user runtime directories.
 </summary>
@@ -123457,7 +125972,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_relabelfrom_user_runtime_dirs" lineno="3564">
+<interface name="userdom_relabelfrom_user_runtime_dirs" lineno="3670">
 <summary>
 Relabel from user runtime directories.
 </summary>
@@ -123467,7 +125982,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_delete_user_runtime_files" lineno="3582">
+<interface name="userdom_delete_user_runtime_files" lineno="3688">
 <summary>
 delete user runtime files
 </summary>
@@ -123477,7 +125992,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_search_all_user_runtime" lineno="3601">
+<interface name="userdom_search_all_user_runtime" lineno="3707">
 <summary>
 Search users runtime directories.
 </summary>
@@ -123487,7 +126002,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_list_all_user_runtime" lineno="3620">
+<interface name="userdom_list_all_user_runtime" lineno="3726">
 <summary>
 List user runtime directories.
 </summary>
@@ -123497,7 +126012,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_delete_all_user_runtime_dirs" lineno="3639">
+<interface name="userdom_delete_all_user_runtime_dirs" lineno="3745">
 <summary>
 delete user runtime directories
 </summary>
@@ -123507,7 +126022,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_delete_all_user_runtime_files" lineno="3657">
+<interface name="userdom_delete_all_user_runtime_files" lineno="3763">
 <summary>
 delete user runtime files
 </summary>
@@ -123517,7 +126032,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_delete_all_user_runtime_symlinks" lineno="3675">
+<interface name="userdom_delete_all_user_runtime_symlinks" lineno="3781">
 <summary>
 delete user runtime symlink files
 </summary>
@@ -123527,7 +126042,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_delete_all_user_runtime_named_pipes" lineno="3693">
+<interface name="userdom_delete_all_user_runtime_named_pipes" lineno="3799">
 <summary>
 delete user runtime fifo files
 </summary>
@@ -123537,7 +126052,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_delete_all_user_runtime_named_sockets" lineno="3711">
+<interface name="userdom_delete_all_user_runtime_named_sockets" lineno="3817">
 <summary>
 delete user runtime socket files
 </summary>
@@ -123547,7 +126062,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_delete_all_user_runtime_blk_files" lineno="3729">
+<interface name="userdom_delete_all_user_runtime_blk_files" lineno="3835">
 <summary>
 delete user runtime blk files
 </summary>
@@ -123557,7 +126072,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_delete_all_user_runtime_chr_files" lineno="3747">
+<interface name="userdom_delete_all_user_runtime_chr_files" lineno="3853">
 <summary>
 delete user runtime chr files
 </summary>
@@ -123567,7 +126082,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_pid_filetrans_user_runtime_root" lineno="3777">
+<interface name="userdom_pid_filetrans_user_runtime_root" lineno="3883">
 <summary>
 Create objects in the pid directory
 with an automatic type transition to
@@ -123589,7 +126104,7 @@ The name of the object being created.
 </summary>
 </param>
 </interface>
-<interface name="userdom_runtime_filetrans_user_runtime_root" lineno="3804">
+<interface name="userdom_runtime_filetrans_user_runtime_root" lineno="3910">
 <summary>
 Create objects in the runtime directory
 with an automatic type transition to
@@ -123611,7 +126126,7 @@ The name of the object being created.
 </summary>
 </param>
 </interface>
-<interface name="userdom_user_runtime_filetrans" lineno="3840">
+<interface name="userdom_user_runtime_filetrans" lineno="3946">
 <summary>
 Create objects in a user runtime
 directory with an automatic type
@@ -123639,7 +126154,7 @@ The name of the object being created.
 </summary>
 </param>
 </interface>
-<interface name="userdom_user_runtime_filetrans_user_tmp" lineno="3871">
+<interface name="userdom_user_runtime_filetrans_user_tmp" lineno="3977">
 <summary>
 Create objects in the user runtime directory
 with an automatic type transition to
@@ -123661,7 +126176,7 @@ The name of the object being created.
 </summary>
 </param>
 </interface>
-<interface name="userdom_user_runtime_root_filetrans_user_runtime" lineno="3901">
+<interface name="userdom_user_runtime_root_filetrans_user_runtime" lineno="4007">
 <summary>
 Create objects in the user runtime root
 directory with an automatic type transition
@@ -123683,7 +126198,7 @@ The name of the object being created.
 </summary>
 </param>
 </interface>
-<interface name="userdom_user_run_filetrans_user_runtime" lineno="3932">
+<interface name="userdom_user_run_filetrans_user_runtime" lineno="4038">
 <summary>
 Create objects in the user runtime root
 directory with an automatic type transition
@@ -123705,7 +126220,7 @@ The name of the object being created.
 </summary>
 </param>
 </interface>
-<interface name="userdom_rw_user_tmpfs_files" lineno="3950">
+<interface name="userdom_rw_user_tmpfs_files" lineno="4056">
 <summary>
 Read and write user tmpfs files.
 </summary>
@@ -123715,7 +126230,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_delete_user_tmpfs_files" lineno="3971">
+<interface name="userdom_delete_user_tmpfs_files" lineno="4077">
 <summary>
 Delete user tmpfs files.
 </summary>
@@ -123725,7 +126240,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_manage_user_tmpfs_files" lineno="3990">
+<interface name="userdom_manage_user_tmpfs_files" lineno="4096">
 <summary>
 Create, read, write, and delete user tmpfs files.
 </summary>
@@ -123735,7 +126250,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_getattr_user_ttys" lineno="4010">
+<interface name="userdom_getattr_user_ttys" lineno="4116">
 <summary>
 Get the attributes of a user domain tty.
 </summary>
@@ -123745,7 +126260,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_dontaudit_getattr_user_ttys" lineno="4028">
+<interface name="userdom_dontaudit_getattr_user_ttys" lineno="4134">
 <summary>
 Do not audit attempts to get the attributes of a user domain tty.
 </summary>
@@ -123755,7 +126270,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="userdom_setattr_user_ttys" lineno="4046">
+<interface name="userdom_setattr_user_ttys" lineno="4152">
 <summary>
 Set the attributes of a user domain tty.
 </summary>
@@ -123765,7 +126280,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_dontaudit_setattr_user_ttys" lineno="4064">
+<interface name="userdom_dontaudit_setattr_user_ttys" lineno="4170">
 <summary>
 Do not audit attempts to set the attributes of a user domain tty.
 </summary>
@@ -123775,7 +126290,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="userdom_use_user_ttys" lineno="4082">
+<interface name="userdom_use_user_ttys" lineno="4188">
 <summary>
 Read and write a user domain tty.
 </summary>
@@ -123785,7 +126300,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_use_user_ptys" lineno="4100">
+<interface name="userdom_use_user_ptys" lineno="4206">
 <summary>
 Read and write a user domain pty.
 </summary>
@@ -123795,7 +126310,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_use_inherited_user_terminals" lineno="4135">
+<interface name="userdom_use_inherited_user_terminals" lineno="4241">
 <summary>
 Read and write a user TTYs and PTYs.
 </summary>
@@ -123821,7 +126336,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="userdom_use_user_terminals" lineno="4176">
+<interface name="userdom_use_user_terminals" lineno="4282">
 <summary>
 Read, write and open a user TTYs and PTYs.
 </summary>
@@ -123853,7 +126368,7 @@ Domain allowed access.
 </param>
 <infoflow type="both" weight="10"/>
 </interface>
-<interface name="userdom_dontaudit_use_user_terminals" lineno="4192">
+<interface name="userdom_dontaudit_use_user_terminals" lineno="4298">
 <summary>
 Do not audit attempts to read and write
 a user domain tty and pty.
@@ -123864,7 +126379,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="userdom_spec_domtrans_all_users" lineno="4213">
+<interface name="userdom_spec_domtrans_all_users" lineno="4319">
 <summary>
 Execute a shell in all user domains.  This
 is an explicit transition, requiring the
@@ -123876,7 +126391,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="userdom_xsession_spec_domtrans_all_users" lineno="4236">
+<interface name="userdom_xsession_spec_domtrans_all_users" lineno="4342">
 <summary>
 Execute an Xserver session in all user domains.  This
 is an explicit transition, requiring the
@@ -123888,7 +126403,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="userdom_spec_domtrans_unpriv_users" lineno="4259">
+<interface name="userdom_spec_domtrans_unpriv_users" lineno="4365">
 <summary>
 Execute a shell in all unprivileged user domains.  This
 is an explicit transition, requiring the
@@ -123900,7 +126415,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="userdom_xsession_spec_domtrans_unpriv_users" lineno="4282">
+<interface name="userdom_xsession_spec_domtrans_unpriv_users" lineno="4388">
 <summary>
 Execute an Xserver session in all unprivileged user domains.  This
 is an explicit transition, requiring the
@@ -123912,7 +126427,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="userdom_rw_unpriv_user_semaphores" lineno="4303">
+<interface name="userdom_rw_unpriv_user_semaphores" lineno="4409">
 <summary>
 Read and write unpriviledged user SysV sempaphores.
 </summary>
@@ -123922,7 +126437,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_manage_unpriv_user_semaphores" lineno="4321">
+<interface name="userdom_manage_unpriv_user_semaphores" lineno="4427">
 <summary>
 Manage unpriviledged user SysV sempaphores.
 </summary>
@@ -123932,7 +126447,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_rw_unpriv_user_shared_mem" lineno="4340">
+<interface name="userdom_rw_unpriv_user_shared_mem" lineno="4446">
 <summary>
 Read and write unpriviledged user SysV shared
 memory segments.
@@ -123943,7 +126458,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_manage_unpriv_user_shared_mem" lineno="4359">
+<interface name="userdom_manage_unpriv_user_shared_mem" lineno="4465">
 <summary>
 Manage unpriviledged user SysV shared
 memory segments.
@@ -123954,7 +126469,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_bin_spec_domtrans_unpriv_users" lineno="4379">
+<interface name="userdom_bin_spec_domtrans_unpriv_users" lineno="4485">
 <summary>
 Execute bin_t in the unprivileged user domains. This
 is an explicit transition, requiring the
@@ -123966,7 +126481,7 @@ Domain allowed to transition.
 </summary>
 </param>
 </interface>
-<interface name="userdom_entry_spec_domtrans_unpriv_users" lineno="4402">
+<interface name="userdom_entry_spec_domtrans_unpriv_users" lineno="4508">
 <summary>
 Execute all entrypoint files in unprivileged user
 domains. This is an explicit transition, requiring the
@@ -123978,7 +126493,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_search_user_home_content" lineno="4423">
+<interface name="userdom_search_user_home_content" lineno="4529">
 <summary>
 Search users home directories.
 </summary>
@@ -123988,7 +126503,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_signull_unpriv_users" lineno="4442">
+<interface name="userdom_signull_unpriv_users" lineno="4548">
 <summary>
 Send signull to unprivileged user domains.
 </summary>
@@ -123998,7 +126513,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_signal_unpriv_users" lineno="4460">
+<interface name="userdom_signal_unpriv_users" lineno="4566">
 <summary>
 Send general signals to unprivileged user domains.
 </summary>
@@ -124008,7 +126523,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_use_unpriv_users_fds" lineno="4478">
+<interface name="userdom_use_unpriv_users_fds" lineno="4584">
 <summary>
 Inherit the file descriptors from unprivileged user domains.
 </summary>
@@ -124018,7 +126533,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_dontaudit_use_unpriv_user_fds" lineno="4506">
+<interface name="userdom_dontaudit_use_unpriv_user_fds" lineno="4612">
 <summary>
 Do not audit attempts to inherit the file descriptors
 from unprivileged user domains.
@@ -124038,7 +126553,7 @@ Domain to not audit.
 </param>
 <infoflow type="none"/>
 </interface>
-<interface name="userdom_dontaudit_use_user_ptys" lineno="4524">
+<interface name="userdom_dontaudit_use_user_ptys" lineno="4630">
 <summary>
 Do not audit attempts to use user ptys.
 </summary>
@@ -124048,7 +126563,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="userdom_relabelto_user_ptys" lineno="4542">
+<interface name="userdom_relabelto_user_ptys" lineno="4648">
 <summary>
 Relabel files to unprivileged user pty types.
 </summary>
@@ -124058,7 +126573,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_dontaudit_relabelfrom_user_ptys" lineno="4561">
+<interface name="userdom_dontaudit_relabelfrom_user_ptys" lineno="4667">
 <summary>
 Do not audit attempts to relabel files from
 user pty types.
@@ -124069,7 +126584,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="userdom_write_user_tmp_files" lineno="4579">
+<interface name="userdom_write_user_tmp_files" lineno="4685">
 <summary>
 Write all users files in /tmp
 </summary>
@@ -124079,7 +126594,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_dontaudit_write_user_tmp_files" lineno="4598">
+<interface name="userdom_dontaudit_write_user_tmp_files" lineno="4704">
 <summary>
 Do not audit attempts to write users
 temporary files.
@@ -124090,7 +126605,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="userdom_dontaudit_use_user_ttys" lineno="4616">
+<interface name="userdom_dontaudit_use_user_ttys" lineno="4722">
 <summary>
 Do not audit attempts to use user ttys.
 </summary>
@@ -124100,7 +126615,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="userdom_read_all_users_state" lineno="4634">
+<interface name="userdom_read_all_users_state" lineno="4740">
 <summary>
 Read the process state of all user domains.
 </summary>
@@ -124110,7 +126625,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_getattr_all_users" lineno="4654">
+<interface name="userdom_getattr_all_users" lineno="4760">
 <summary>
 Get the attributes of all user domains.
 </summary>
@@ -124120,7 +126635,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_use_all_users_fds" lineno="4672">
+<interface name="userdom_use_all_users_fds" lineno="4778">
 <summary>
 Inherit the file descriptors from all user domains
 </summary>
@@ -124130,7 +126645,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_dontaudit_use_all_users_fds" lineno="4691">
+<interface name="userdom_dontaudit_use_all_users_fds" lineno="4797">
 <summary>
 Do not audit attempts to inherit the file
 descriptors from any user domains.
@@ -124141,7 +126656,7 @@ Domain to not audit.
 </summary>
 </param>
 </interface>
-<interface name="userdom_signal_all_users" lineno="4709">
+<interface name="userdom_signal_all_users" lineno="4815">
 <summary>
 Send general signals to all user domains.
 </summary>
@@ -124151,7 +126666,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_sigchld_all_users" lineno="4727">
+<interface name="userdom_sigchld_all_users" lineno="4833">
 <summary>
 Send a SIGCHLD signal to all user domains.
 </summary>
@@ -124161,7 +126676,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_read_all_users_keys" lineno="4745">
+<interface name="userdom_read_all_users_keys" lineno="4851">
 <summary>
 Read keys for all user domains.
 </summary>
@@ -124171,7 +126686,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_write_all_users_keys" lineno="4763">
+<interface name="userdom_write_all_users_keys" lineno="4869">
 <summary>
 Write keys for all user domains.
 </summary>
@@ -124181,7 +126696,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_rw_all_users_keys" lineno="4781">
+<interface name="userdom_rw_all_users_keys" lineno="4887">
 <summary>
 Read and write keys for all user domains.
 </summary>
@@ -124191,7 +126706,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_create_all_users_keys" lineno="4799">
+<interface name="userdom_create_all_users_keys" lineno="4905">
 <summary>
 Create keys for all user domains.
 </summary>
@@ -124201,7 +126716,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_manage_all_users_keys" lineno="4817">
+<interface name="userdom_manage_all_users_keys" lineno="4923">
 <summary>
 Manage keys for all user domains.
 </summary>
@@ -124211,7 +126726,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_dbus_send_all_users" lineno="4835">
+<interface name="userdom_dbus_send_all_users" lineno="4941">
 <summary>
 Send a dbus message to all user domains.
 </summary>
@@ -124221,7 +126736,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_manage_user_tmp_chr_files" lineno="4857">
+<interface name="userdom_manage_user_tmp_chr_files" lineno="4963">
 <summary>
 Create, read, write, and delete user
 temporary character files.
@@ -124232,7 +126747,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="userdom_relabel_user_certs" lineno="4878">
+<interface name="userdom_relabel_user_certs" lineno="4984">
 <summary>
 Allow relabeling resources to user_cert_t
 </summary>
@@ -124242,7 +126757,7 @@ Domain allowed access
 </summary>
 </param>
 </interface>
-<interface name="userdom_dontaudit_rw_all_users_stream_sockets" lineno="4901">
+<interface name="userdom_dontaudit_rw_all_users_stream_sockets" lineno="5007">
 <summary>
 Do not audit attempts to read and write
 unserdomain stream.
@@ -124644,7 +127159,17 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xdg_watch_data_dirs" lineno="648">
+<interface name="xdg_search_data_dirs" lineno="648">
+<summary>
+Search through the xdg data home directories
+</summary>
+<param name="domain">
+<summary>
+Domain allowed access
+</summary>
+</param>
+</interface>
+<interface name="xdg_watch_data_dirs" lineno="666">
 <summary>
 Watch the xdg data home directories
 </summary>
@@ -124654,7 +127179,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xdg_watch_all_data_dirs" lineno="666">
+<interface name="xdg_watch_all_data_dirs" lineno="684">
 <summary>
 Watch all the xdg data home directories
 </summary>
@@ -124664,7 +127189,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xdg_read_data_files" lineno="684">
+<interface name="xdg_read_data_files" lineno="702">
 <summary>
 Read the xdg data home files
 </summary>
@@ -124674,7 +127199,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xdg_read_all_data_files" lineno="707">
+<interface name="xdg_read_all_data_files" lineno="725">
 <summary>
 Read all xdg_data_type files
 </summary>
@@ -124684,7 +127209,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xdg_data_filetrans" lineno="747">
+<interface name="xdg_data_filetrans" lineno="765">
 <summary>
 Create objects in an xdg_data directory
 with an automatic type transition to
@@ -124711,7 +127236,7 @@ Optional name of the file or directory created
 </summary>
 </param>
 </interface>
-<interface name="xdg_generic_user_home_dir_filetrans_data" lineno="780">
+<interface name="xdg_generic_user_home_dir_filetrans_data" lineno="798">
 <summary>
 Create objects in the user home dir with an automatic type transition to
 the xdg_data_t type.
@@ -124732,7 +127257,7 @@ Name of the directory created
 </summary>
 </param>
 </interface>
-<interface name="xdg_create_data_dirs" lineno="798">
+<interface name="xdg_create_data_dirs" lineno="816">
 <summary>
 Create xdg data home directories
 </summary>
@@ -124742,7 +127267,7 @@ Domain allowed access
 </summary>
 </param>
 </interface>
-<interface name="xdg_manage_data" lineno="816">
+<interface name="xdg_manage_data" lineno="834">
 <summary>
 Manage the xdg data home files
 </summary>
@@ -124752,7 +127277,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xdg_manage_all_data" lineno="841">
+<interface name="xdg_manage_all_data" lineno="859">
 <summary>
 Manage all the xdg data home files, regardless of their specific type
 </summary>
@@ -124762,7 +127287,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xdg_relabel_data" lineno="866">
+<interface name="xdg_relabel_data" lineno="884">
 <summary>
 Allow relabeling the xdg data home files
 </summary>
@@ -124772,7 +127297,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xdg_relabel_all_data" lineno="890">
+<interface name="xdg_relabel_all_data" lineno="908">
 <summary>
 Allow relabeling the xdg data home files, regardless of their type
 </summary>
@@ -124782,7 +127307,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xdg_watch_documents_dirs" lineno="914">
+<interface name="xdg_watch_documents_dirs" lineno="932">
 <summary>
 Watch the xdg documents home directories
 </summary>
@@ -124792,7 +127317,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xdg_generic_user_home_dir_filetrans_documents" lineno="943">
+<interface name="xdg_generic_user_home_dir_filetrans_documents" lineno="961">
 <summary>
 Create objects in the user home dir with an automatic type transition to
 the xdg_documents_t type.
@@ -124813,7 +127338,7 @@ Name of the directory created
 </summary>
 </param>
 </interface>
-<interface name="xdg_manage_documents" lineno="961">
+<interface name="xdg_manage_documents" lineno="979">
 <summary>
 Manage documents content
 </summary>
@@ -124823,7 +127348,7 @@ Domain allowed access
 </summary>
 </param>
 </interface>
-<interface name="xdg_relabel_documents" lineno="982">
+<interface name="xdg_relabel_documents" lineno="1000">
 <summary>
 Allow relabeling the documents resources
 </summary>
@@ -124833,7 +127358,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xdg_watch_downloads_dirs" lineno="1004">
+<interface name="xdg_watch_downloads_dirs" lineno="1022">
 <summary>
 Watch the xdg downloads home directories
 </summary>
@@ -124843,7 +127368,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xdg_read_downloads" lineno="1022">
+<interface name="xdg_read_downloads" lineno="1040">
 <summary>
 Read downloaded content
 </summary>
@@ -124853,7 +127378,7 @@ Domain allowed access
 </summary>
 </param>
 </interface>
-<interface name="xdg_create_downloads" lineno="1045">
+<interface name="xdg_create_downloads" lineno="1063">
 <summary>
 Create downloaded content
 </summary>
@@ -124863,7 +127388,7 @@ Domain allowed access
 </summary>
 </param>
 </interface>
-<interface name="xdg_write_downloads" lineno="1068">
+<interface name="xdg_write_downloads" lineno="1086">
 <summary>
 Write downloaded content
 </summary>
@@ -124873,7 +127398,7 @@ Domain allowed access
 </summary>
 </param>
 </interface>
-<interface name="xdg_generic_user_home_dir_filetrans_downloads" lineno="1102">
+<interface name="xdg_generic_user_home_dir_filetrans_downloads" lineno="1120">
 <summary>
 Create objects in the user home dir with an automatic type transition to
 the xdg_downloads_t type.
@@ -124894,7 +127419,7 @@ Name of the directory created
 </summary>
 </param>
 </interface>
-<interface name="xdg_manage_downloads" lineno="1120">
+<interface name="xdg_manage_downloads" lineno="1138">
 <summary>
 Manage downloaded content
 </summary>
@@ -124904,7 +127429,7 @@ Domain allowed access
 </summary>
 </param>
 </interface>
-<interface name="xdg_relabel_downloads" lineno="1141">
+<interface name="xdg_relabel_downloads" lineno="1159">
 <summary>
 Allow relabeling the downloads resources
 </summary>
@@ -124914,7 +127439,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xdg_watch_pictures_dirs" lineno="1163">
+<interface name="xdg_watch_pictures_dirs" lineno="1181">
 <summary>
 Watch the xdg pictures home directories
 </summary>
@@ -124924,7 +127449,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xdg_read_pictures" lineno="1181">
+<interface name="xdg_read_pictures" lineno="1199">
 <summary>
 Read user pictures content
 </summary>
@@ -124934,7 +127459,7 @@ Domain allowed access
 </summary>
 </param>
 </interface>
-<interface name="xdg_generic_user_home_dir_filetrans_pictures" lineno="1215">
+<interface name="xdg_generic_user_home_dir_filetrans_pictures" lineno="1233">
 <summary>
 Create objects in the user home dir with an automatic type transition to
 the xdg_pictures_t type.
@@ -124955,7 +127480,7 @@ Name of the directory created
 </summary>
 </param>
 </interface>
-<interface name="xdg_manage_pictures" lineno="1233">
+<interface name="xdg_manage_pictures" lineno="1251">
 <summary>
 Manage pictures content
 </summary>
@@ -124965,7 +127490,7 @@ Domain allowed access
 </summary>
 </param>
 </interface>
-<interface name="xdg_relabel_pictures" lineno="1254">
+<interface name="xdg_relabel_pictures" lineno="1272">
 <summary>
 Allow relabeling the pictures resources
 </summary>
@@ -124975,7 +127500,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xdg_watch_music_dirs" lineno="1276">
+<interface name="xdg_watch_music_dirs" lineno="1294">
 <summary>
 Watch the xdg music home directories
 </summary>
@@ -124985,7 +127510,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xdg_read_music" lineno="1294">
+<interface name="xdg_read_music" lineno="1312">
 <summary>
 Read user music content
 </summary>
@@ -124995,7 +127520,7 @@ Domain allowed access
 </summary>
 </param>
 </interface>
-<interface name="xdg_generic_user_home_dir_filetrans_music" lineno="1328">
+<interface name="xdg_generic_user_home_dir_filetrans_music" lineno="1346">
 <summary>
 Create objects in the user home dir with an automatic type transition to
 the xdg_pictures_t type.
@@ -125016,7 +127541,7 @@ Name of the directory created
 </summary>
 </param>
 </interface>
-<interface name="xdg_manage_music" lineno="1346">
+<interface name="xdg_manage_music" lineno="1364">
 <summary>
 Manage music content
 </summary>
@@ -125026,7 +127551,7 @@ Domain allowed access
 </summary>
 </param>
 </interface>
-<interface name="xdg_relabel_music" lineno="1367">
+<interface name="xdg_relabel_music" lineno="1385">
 <summary>
 Allow relabeling the music resources
 </summary>
@@ -125036,7 +127561,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xdg_watch_videos_dirs" lineno="1389">
+<interface name="xdg_watch_videos_dirs" lineno="1407">
 <summary>
 Watch the xdg video content
 </summary>
@@ -125046,7 +127571,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xdg_read_videos" lineno="1407">
+<interface name="xdg_read_videos" lineno="1425">
 <summary>
 Read user video content
 </summary>
@@ -125056,7 +127581,7 @@ Domain allowed access
 </summary>
 </param>
 </interface>
-<interface name="xdg_generic_user_home_dir_filetrans_videos" lineno="1441">
+<interface name="xdg_generic_user_home_dir_filetrans_videos" lineno="1459">
 <summary>
 Create objects in the user home dir with an automatic type transition to
 the xdg_videos_t type.
@@ -125077,7 +127602,7 @@ Name of the directory created
 </summary>
 </param>
 </interface>
-<interface name="xdg_manage_videos" lineno="1459">
+<interface name="xdg_manage_videos" lineno="1477">
 <summary>
 Manage video content
 </summary>
@@ -125087,7 +127612,7 @@ Domain allowed access
 </summary>
 </param>
 </interface>
-<interface name="xdg_relabel_videos" lineno="1480">
+<interface name="xdg_relabel_videos" lineno="1498">
 <summary>
 Allow relabeling the videos resources
 </summary>
@@ -125097,7 +127622,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xdg_cache_home_content" lineno="1506">
+<interface name="xdg_cache_home_content" lineno="1524">
 <summary>
 Mark the selected type as an xdg_cache_home_type
 </summary>
@@ -125107,7 +127632,7 @@ Type to give the xdg_cache_home_type attribute to
 </summary>
 </param>
 </interface>
-<interface name="xdg_config_home_content" lineno="1520">
+<interface name="xdg_config_home_content" lineno="1538">
 <summary>
 Mark the selected type as an xdg_config_home_type
 </summary>
@@ -125117,7 +127642,7 @@ Type to give the xdg_config_home_type attribute to
 </summary>
 </param>
 </interface>
-<interface name="xdg_data_home_content" lineno="1534">
+<interface name="xdg_data_home_content" lineno="1552">
 <summary>
 Mark the selected type as an xdg_data_home_type
 </summary>
@@ -125127,7 +127652,7 @@ Type to give the xdg_data_home_type attribute to
 </summary>
 </param>
 </interface>
-<interface name="xdg_read_cache_home_files" lineno="1548">
+<interface name="xdg_read_cache_home_files" lineno="1566">
 <summary>
 Read the xdg cache home files
 </summary>
@@ -125137,7 +127662,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xdg_read_all_cache_home_files" lineno="1562">
+<interface name="xdg_read_all_cache_home_files" lineno="1580">
 <summary>
 Read all xdg_cache_home_type files
 </summary>
@@ -125147,7 +127672,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xdg_cache_home_filetrans" lineno="1593">
+<interface name="xdg_cache_home_filetrans" lineno="1611">
 <summary>
 Create objects in an xdg_cache_home directory
 with an automatic type transition to
@@ -125174,7 +127699,7 @@ Name of the file or directory created
 </summary>
 </param>
 </interface>
-<interface name="xdg_generic_user_home_dir_filetrans_cache_home" lineno="1618">
+<interface name="xdg_generic_user_home_dir_filetrans_cache_home" lineno="1636">
 <summary>
 Create objects in the user home dir with an automatic type transition to
 the xdg_cache_home_t type.
@@ -125195,7 +127720,7 @@ Name of the directory created
 </summary>
 </param>
 </interface>
-<interface name="xdg_create_cache_home_dirs" lineno="1632">
+<interface name="xdg_create_cache_home_dirs" lineno="1650">
 <summary>
 Create xdg cache home directories
 </summary>
@@ -125205,7 +127730,7 @@ Domain allowed access
 </summary>
 </param>
 </interface>
-<interface name="xdg_manage_cache_home" lineno="1646">
+<interface name="xdg_manage_cache_home" lineno="1664">
 <summary>
 Manage the xdg cache home files
 </summary>
@@ -125215,7 +127740,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xdg_manage_all_cache_home" lineno="1660">
+<interface name="xdg_manage_all_cache_home" lineno="1678">
 <summary>
 Manage all the xdg cache home files regardless of their specific type
 </summary>
@@ -125225,7 +127750,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xdg_relabel_cache_home" lineno="1674">
+<interface name="xdg_relabel_cache_home" lineno="1692">
 <summary>
 Allow relabeling the xdg cache home files
 </summary>
@@ -125235,7 +127760,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xdg_relabel_all_cache_home" lineno="1688">
+<interface name="xdg_relabel_all_cache_home" lineno="1706">
 <summary>
 Allow relabeling the xdg cache home files, regardless of their specific type
 </summary>
@@ -125245,7 +127770,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xdg_search_config_home_dirs" lineno="1702">
+<interface name="xdg_search_config_home_dirs" lineno="1720">
 <summary>
 Search through the xdg config home directories
 </summary>
@@ -125255,7 +127780,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xdg_read_config_home_files" lineno="1716">
+<interface name="xdg_read_config_home_files" lineno="1734">
 <summary>
 Read the xdg config home files
 </summary>
@@ -125265,7 +127790,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xdg_read_all_config_home_files" lineno="1730">
+<interface name="xdg_read_all_config_home_files" lineno="1748">
 <summary>
 Read all xdg_config_home_type files
 </summary>
@@ -125275,7 +127800,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xdg_config_home_filetrans" lineno="1761">
+<interface name="xdg_config_home_filetrans" lineno="1779">
 <summary>
 Create objects in an xdg_config_home directory
 with an automatic type transition to
@@ -125302,7 +127827,7 @@ Name of the file or directory created
 </summary>
 </param>
 </interface>
-<interface name="xdg_generic_user_home_dir_filetrans_config_home" lineno="1786">
+<interface name="xdg_generic_user_home_dir_filetrans_config_home" lineno="1804">
 <summary>
 Create objects in the user home dir with an automatic type transition to
 the xdg_config_home_t type.
@@ -125323,7 +127848,7 @@ Name of the directory created
 </summary>
 </param>
 </interface>
-<interface name="xdg_create_config_home_dirs" lineno="1800">
+<interface name="xdg_create_config_home_dirs" lineno="1818">
 <summary>
 Create xdg config home directories
 </summary>
@@ -125333,7 +127858,7 @@ Domain allowed access
 </summary>
 </param>
 </interface>
-<interface name="xdg_manage_config_home" lineno="1814">
+<interface name="xdg_manage_config_home" lineno="1832">
 <summary>
 Manage the xdg config home files
 </summary>
@@ -125343,7 +127868,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xdg_manage_all_config_home" lineno="1828">
+<interface name="xdg_manage_all_config_home" lineno="1846">
 <summary>
 Manage all the xdg config home files regardless of their specific type
 </summary>
@@ -125353,7 +127878,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xdg_relabel_config_home" lineno="1842">
+<interface name="xdg_relabel_config_home" lineno="1860">
 <summary>
 Allow relabeling the xdg config home files
 </summary>
@@ -125363,7 +127888,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xdg_relabel_all_config_home" lineno="1856">
+<interface name="xdg_relabel_all_config_home" lineno="1874">
 <summary>
 Allow relabeling the xdg config home files, regardless of their specific type
 </summary>
@@ -125373,7 +127898,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xdg_read_data_home_files" lineno="1870">
+<interface name="xdg_read_data_home_files" lineno="1888">
 <summary>
 Read the xdg data home files
 </summary>
@@ -125383,7 +127908,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xdg_read_all_data_home_files" lineno="1884">
+<interface name="xdg_read_all_data_home_files" lineno="1902">
 <summary>
 Read all xdg_data_home_type files
 </summary>
@@ -125393,7 +127918,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xdg_data_home_filetrans" lineno="1915">
+<interface name="xdg_data_home_filetrans" lineno="1933">
 <summary>
 Create objects in an xdg_data_home directory
 with an automatic type transition to
@@ -125420,7 +127945,7 @@ Optional name of the file or directory created
 </summary>
 </param>
 </interface>
-<interface name="xdg_generic_user_home_dir_filetrans_data_home" lineno="1940">
+<interface name="xdg_generic_user_home_dir_filetrans_data_home" lineno="1958">
 <summary>
 Create objects in the user home dir with an automatic type transition to
 the xdg_data_home_t type.
@@ -125441,7 +127966,7 @@ Name of the directory created
 </summary>
 </param>
 </interface>
-<interface name="xdg_create_data_home_dirs" lineno="1954">
+<interface name="xdg_create_data_home_dirs" lineno="1972">
 <summary>
 Create xdg data home directories
 </summary>
@@ -125451,7 +127976,7 @@ Domain allowed access
 </summary>
 </param>
 </interface>
-<interface name="xdg_manage_data_home" lineno="1968">
+<interface name="xdg_manage_data_home" lineno="1986">
 <summary>
 Manage the xdg data home files
 </summary>
@@ -125461,7 +127986,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xdg_manage_all_data_home" lineno="1982">
+<interface name="xdg_manage_all_data_home" lineno="2000">
 <summary>
 Manage all the xdg data home files, regardless of their specific type
 </summary>
@@ -125471,7 +127996,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xdg_relabel_data_home" lineno="1996">
+<interface name="xdg_relabel_data_home" lineno="2014">
 <summary>
 Allow relabeling the xdg data home files
 </summary>
@@ -125481,7 +128006,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xdg_relabel_all_data_home" lineno="2010">
+<interface name="xdg_relabel_all_data_home" lineno="2028">
 <summary>
 Allow relabeling the xdg data home files, regardless of their type
 </summary>
@@ -125491,7 +128016,7 @@ Domain allowed access.
 </summary>
 </param>
 </interface>
-<interface name="xdg_read_downloads_home" lineno="2024">
+<interface name="xdg_read_downloads_home" lineno="2042">
 <summary>
 Read downloaded content
 </summary>
@@ -125501,7 +128026,7 @@ Domain allowed access
 </summary>
 </param>
 </interface>
-<interface name="xdg_read_videos_home" lineno="2038">
+<interface name="xdg_read_videos_home" lineno="2056">
 <summary>
 Read user video content
 </summary>
@@ -125511,7 +128036,7 @@ Domain allowed access
 </summary>
 </param>
 </interface>
-<interface name="xdg_read_pictures_home" lineno="2052">
+<interface name="xdg_read_pictures_home" lineno="2070">
 <summary>
 Read user pictures content
 </summary>
@@ -125521,7 +128046,7 @@ Domain allowed access
 </summary>
 </param>
 </interface>
-<interface name="xdg_read_music_home" lineno="2066">
+<interface name="xdg_read_music_home" lineno="2084">
 <summary>
 Read user music content
 </summary>
@@ -125531,7 +128056,7 @@ Domain allowed access
 </summary>
 </param>
 </interface>
-<interface name="xdg_create_downloads_home" lineno="2080">
+<interface name="xdg_create_downloads_home" lineno="2098">
 <summary>
 Create downloaded content
 </summary>
@@ -125541,7 +128066,7 @@ Domain allowed access
 </summary>
 </param>
 </interface>
-<interface name="xdg_write_downloads_home" lineno="2094">
+<interface name="xdg_write_downloads_home" lineno="2112">
 <summary>
 Write downloaded content
 </summary>
@@ -125551,7 +128076,7 @@ Domain allowed access
 </summary>
 </param>
 </interface>
-<interface name="xdg_manage_downloads_home" lineno="2108">
+<interface name="xdg_manage_downloads_home" lineno="2126">
 <summary>
 Manage downloaded content
 </summary>
@@ -125561,7 +128086,7 @@ Domain allowed access
 </summary>
 </param>
 </interface>
-<interface name="xdg_manage_documents_home" lineno="2122">
+<interface name="xdg_manage_documents_home" lineno="2140">
 <summary>
 Manage documents content
 </summary>
@@ -125571,7 +128096,7 @@ Domain allowed access
 </summary>
 </param>
 </interface>
-<interface name="xdg_manage_music_home" lineno="2136">
+<interface name="xdg_manage_music_home" lineno="2154">
 <summary>
 Manage music content
 </summary>
@@ -125581,7 +128106,7 @@ Domain allowed access
 </summary>
 </param>
 </interface>
-<interface name="xdg_manage_pictures_home" lineno="2150">
+<interface name="xdg_manage_pictures_home" lineno="2168">
 <summary>
 Manage pictures content
 </summary>
@@ -125591,7 +128116,7 @@ Domain allowed access
 </summary>
 </param>
 </interface>
-<interface name="xdg_manage_videos_home" lineno="2164">
+<interface name="xdg_manage_videos_home" lineno="2182">
 <summary>
 Manage video content
 </summary>

diff --git a/policy/booleans.conf b/policy/booleans.conf
index 368c5856..900fa523 100644
--- a/policy/booleans.conf
+++ b/policy/booleans.conf
@@ -128,6 +128,22 @@ puppet_manage_all_files = false
 # 
 rkhunter_connect_http = false
 
+#
+# Determine whether the user application exec
+# domain attribute should be respected for
+# shutdown access. If not enabled, only user
+# domains themselves may use shutdown.
+# 
+shutdown_allow_user_exec_domains = false
+
+#
+# Determine whether the user application
+# exec domain attribute should be respected
+# for su access. If not enabled, only user
+# domains themselves may use su.
+# 
+su_allow_user_exec_domains = false
+
 #
 # Determine whether all sudo domains
 # can connect to TCP HTTP ports. This
@@ -137,6 +153,14 @@ rkhunter_connect_http = false
 # 
 sudo_all_tcp_connect_http_port = false
 
+#
+# Determine whether the user application exec
+# domain attribute should be respected for sudo
+# access. If not enabled, only user domains
+# themselves may use sudo.
+# 
+sudo_allow_user_exec_domains = false
+
 #
 # Determine whether authorized users can control the daemon,
 # which requires usbguard-daemon to be able modify its rules in
@@ -1157,6 +1181,28 @@ allow_httpd_collectd_script_anon_write = false
 # 
 condor_tcp_network_connect = false
 
+#
+# Allow containers to manage cgroups.
+# This is required for systemd to run inside
+# containers.
+# 
+container_manage_cgroup = false
+
+#
+# Allow container engines to mount on all non-security files.
+# 
+container_mounton_non_security = false
+
+#
+# Allow containers to use NFS filesystems.
+# 
+container_use_nfs = false
+
+#
+# Allow containers to use CIFS filesystems.
+# 
+container_use_samba = false
+
 #
 # Determine whether system cron jobs
 # can relabel filesystem for
@@ -1506,6 +1552,18 @@ nscd_use_shm = false
 # 
 allow_httpd_nutups_cgi_script_anon_write = false
 
+#
+# Determine whether obfs4proxy can bind
+# tcp sockets to all unreserved ports.
+# 
+obfs4proxy_bind_all_unreserved_ports = false
+
+#
+# Determine whether obfs4proxy can bind
+# tcp sockets to all http ports.
+# 
+obfs4proxy_bind_http_ports = false
+
 #
 # Determine whether openvpn can
 # read generic user home content files.
@@ -2005,12 +2063,6 @@ systemd_socket_proxyd_bind_any = false
 # 
 systemd_socket_proxyd_connect_any = false
 
-#
-# Allow systemd-tmpfilesd to populate missing configuration files from factory
-# template directory.
-# 
-systemd_tmpfilesd_factory = false
-
 #
 # Determine whether tmpfiles can manage
 # all non-security sensitive resources.

diff --git a/policy/modules.conf b/policy/modules.conf
index 2a5a2aeb..f94f6cc4 100644
--- a/policy/modules.conf
+++ b/policy/modules.conf
@@ -1307,6 +1307,13 @@ condor = module
 # 
 consolesetup = module
 
+# Layer: services
+# Module: container
+#
+# Policy for containers
+# 
+container = module
+
 # Layer: services
 # Module: corosync
 #
@@ -1461,6 +1468,13 @@ dkim = module
 # 
 dnsmasq = module
 
+# Layer: services
+# Module: docker
+#
+# Policy for docker
+# 
+docker = module
+
 # Layer: services
 # Module: dovecot
 #
@@ -2000,6 +2014,13 @@ nx = module
 # 
 obex = module
 
+# Layer: services
+# Module: obfs4proxy
+#
+# obfs4proxy.
+# 
+obfs4proxy = module
+
 # Layer: services
 # Module: oddjob
 #
@@ -2105,6 +2126,13 @@ pkcs = module
 # 
 plymouthd = module
 
+# Layer: services
+# Module: podman
+#
+# Policy for podman
+# 
+podman = module
+
 # Layer: services
 # Module: policykit
 #
@@ -2329,6 +2357,13 @@ rlogin = module
 # 
 rngd = module
 
+# Layer: services
+# Module: rootlesskit
+#
+# Policy for RootlessKit
+# 
+rootlesskit = module
+
 # Layer: services
 # Module: rpc
 #

diff --git a/policy/modules/kernel/corenetwork.if b/policy/modules/kernel/corenetwork.if
index 086f0fe8..a0cb0bed 100644
--- a/policy/modules/kernel/corenetwork.if
+++ b/policy/modules/kernel/corenetwork.if
@@ -57540,6 +57540,427 @@ interface(`corenet_relabelto_ntp_server_packets',`
 
 
 
+########################################
+## <summary>
+##	Send and receive TCP traffic on the ntske port.
+## </summary>
+## <param name="domain">
+##	<summary>
+##	Domain allowed access.
+##	</summary>
+## </param>
+## <infoflow type="both" weight="10"/>
+#
+interface(`corenet_tcp_sendrecv_ntske_port',`
+	refpolicywarn(`$0() has been deprecated, please remove.')
+')
+
+########################################
+## <summary>
+##	Send UDP traffic on the ntske port.
+## </summary>
+## <param name="domain">
+##	<summary>
+##	Domain allowed access.
+##	</summary>
+## </param>
+## <infoflow type="write" weight="10"/>
+#
+interface(`corenet_udp_send_ntske_port',`
+	refpolicywarn(`$0() has been deprecated, please remove.')
+')
+
+########################################
+## <summary>
+##	Do not audit attempts to send UDP traffic on the ntske port.
+## </summary>
+## <param name="domain">
+##	<summary>
+##	Domain to not audit.
+##	</summary>
+## </param>
+## <infoflow type="none"/>
+#
+interface(`corenet_dontaudit_udp_send_ntske_port',`
+	refpolicywarn(`$0() has been deprecated, please remove.')
+')
+
+########################################
+## <summary>
+##	Receive UDP traffic on the ntske port.
+## </summary>
+## <param name="domain">
+##	<summary>
+##	Domain allowed access.
+##	</summary>
+## </param>
+## <infoflow type="read" weight="10"/>
+#
+interface(`corenet_udp_receive_ntske_port',`
+	refpolicywarn(`$0() has been deprecated, please remove.')
+')
+
+########################################
+## <summary>
+##	Do not audit attempts to receive UDP traffic on the ntske port.
+## </summary>
+## <param name="domain">
+##	<summary>
+##	Domain to not audit.
+##	</summary>
+## </param>
+## <infoflow type="none"/>
+#
+interface(`corenet_dontaudit_udp_receive_ntske_port',`
+	refpolicywarn(`$0() has been deprecated, please remove.')
+')
+
+########################################
+## <summary>
+##	Send and receive UDP traffic on the ntske port.
+## </summary>
+## <param name="domain">
+##	<summary>
+##	Domain allowed access.
+##	</summary>
+## </param>
+## <infoflow type="both" weight="10"/>
+#
+interface(`corenet_udp_sendrecv_ntske_port',`
+	refpolicywarn(`$0() has been deprecated, please remove.')
+')
+
+########################################
+## <summary>
+##	Do not audit attempts to send and receive
+##	UDP traffic on the ntske port.
+## </summary>
+## <param name="domain">
+##	<summary>
+##	Domain to not audit.
+##	</summary>
+## </param>
+## <infoflow type="none"/>
+#
+interface(`corenet_dontaudit_udp_sendrecv_ntske_port',`
+	refpolicywarn(`$0() has been deprecated, please remove.')
+')
+
+########################################
+## <summary>
+##	Bind TCP sockets to the ntske port.
+## </summary>
+## <param name="domain">
+##	<summary>
+##	Domain allowed access.
+##	</summary>
+## </param>
+## <infoflow type="none"/>
+#
+interface(`corenet_tcp_bind_ntske_port',`
+	gen_require(`
+		type ntske_port_t;
+	')
+
+	allow $1 ntske_port_t:tcp_socket name_bind;
+	
+')
+
+########################################
+## <summary>
+##	Bind UDP sockets to the ntske port.
+## </summary>
+## <param name="domain">
+##	<summary>
+##	Domain allowed access.
+##	</summary>
+## </param>
+## <infoflow type="none"/>
+#
+interface(`corenet_udp_bind_ntske_port',`
+	gen_require(`
+		type ntske_port_t;
+	')
+
+	allow $1 ntske_port_t:udp_socket name_bind;
+	
+')
+
+########################################
+## <summary>
+##	Make a TCP connection to the ntske port.
+## </summary>
+## <param name="domain">
+##	<summary>
+##	Domain allowed access.
+##	</summary>
+## </param>
+#
+interface(`corenet_tcp_connect_ntske_port',`
+	gen_require(`
+		type ntske_port_t;
+	')
+
+	allow $1 ntske_port_t:tcp_socket name_connect;
+')
+
+
+########################################
+## <summary>
+##	Send ntske_client packets.
+## </summary>
+## <param name="domain">
+##	<summary>
+##	Domain allowed access.
+##	</summary>
+## </param>
+## <infoflow type="write" weight="10"/>
+#
+interface(`corenet_send_ntske_client_packets',`
+	gen_require(`
+		type ntske_client_packet_t;
+	')
+
+	allow $1 ntske_client_packet_t:packet send;
+')
+
+########################################
+## <summary>
+##	Do not audit attempts to send ntske_client packets.
+## </summary>
+## <param name="domain">
+##	<summary>
+##	Domain to not audit.
+##	</summary>
+## </param>
+## <infoflow type="none"/>
+#
+interface(`corenet_dontaudit_send_ntske_client_packets',`
+	gen_require(`
+		type ntske_client_packet_t;
+	')
+
+	dontaudit $1 ntske_client_packet_t:packet send;
+')
+
+########################################
+## <summary>
+##	Receive ntske_client packets.
+## </summary>
+## <param name="domain">
+##	<summary>
+##	Domain allowed access.
+##	</summary>
+## </param>
+## <infoflow type="read" weight="10"/>
+#
+interface(`corenet_receive_ntske_client_packets',`
+	gen_require(`
+		type ntske_client_packet_t;
+	')
+
+	allow $1 ntske_client_packet_t:packet recv;
+')
+
+########################################
+## <summary>
+##	Do not audit attempts to receive ntske_client packets.
+## </summary>
+## <param name="domain">
+##	<summary>
+##	Domain allowed access.
+##	</summary>
+## </param>
+## <infoflow type="none"/>
+#
+interface(`corenet_dontaudit_receive_ntske_client_packets',`
+	gen_require(`
+		type ntske_client_packet_t;
+	')
+
+	dontaudit $1 ntske_client_packet_t:packet recv;
+')
+
+########################################
+## <summary>
+##	Send and receive ntske_client packets.
+## </summary>
+## <param name="domain">
+##	<summary>
+##	Domain allowed access.
+##	</summary>
+## </param>
+## <infoflow type="both" weight="10"/>
+#
+interface(`corenet_sendrecv_ntske_client_packets',`
+	corenet_send_ntske_client_packets($1)
+	corenet_receive_ntske_client_packets($1)
+')
+
+########################################
+## <summary>
+##	Do not audit attempts to send and receive ntske_client packets.
+## </summary>
+## <param name="domain">
+##	<summary>
+##	Domain to not audit.
+##	</summary>
+## </param>
+## <infoflow type="none"/>
+#
+interface(`corenet_dontaudit_sendrecv_ntske_client_packets',`
+	corenet_dontaudit_send_ntske_client_packets($1)
+	corenet_dontaudit_receive_ntske_client_packets($1)
+')
+
+########################################
+## <summary>
+##	Relabel packets to ntske_client the packet type.
+## </summary>
+## <param name="domain">
+##	<summary>
+##	Domain allowed access.
+##	</summary>
+## </param>
+#
+interface(`corenet_relabelto_ntske_client_packets',`
+	gen_require(`
+		type ntske_client_packet_t;
+	')
+
+	allow $1 ntske_client_packet_t:packet relabelto;
+')
+
+
+########################################
+## <summary>
+##	Send ntske_server packets.
+## </summary>
+## <param name="domain">
+##	<summary>
+##	Domain allowed access.
+##	</summary>
+## </param>
+## <infoflow type="write" weight="10"/>
+#
+interface(`corenet_send_ntske_server_packets',`
+	gen_require(`
+		type ntske_server_packet_t;
+	')
+
+	allow $1 ntske_server_packet_t:packet send;
+')
+
+########################################
+## <summary>
+##	Do not audit attempts to send ntske_server packets.
+## </summary>
+## <param name="domain">
+##	<summary>
+##	Domain to not audit.
+##	</summary>
+## </param>
+## <infoflow type="none"/>
+#
+interface(`corenet_dontaudit_send_ntske_server_packets',`
+	gen_require(`
+		type ntske_server_packet_t;
+	')
+
+	dontaudit $1 ntske_server_packet_t:packet send;
+')
+
+########################################
+## <summary>
+##	Receive ntske_server packets.
+## </summary>
+## <param name="domain">
+##	<summary>
+##	Domain allowed access.
+##	</summary>
+## </param>
+## <infoflow type="read" weight="10"/>
+#
+interface(`corenet_receive_ntske_server_packets',`
+	gen_require(`
+		type ntske_server_packet_t;
+	')
+
+	allow $1 ntske_server_packet_t:packet recv;
+')
+
+########################################
+## <summary>
+##	Do not audit attempts to receive ntske_server packets.
+## </summary>
+## <param name="domain">
+##	<summary>
+##	Domain allowed access.
+##	</summary>
+## </param>
+## <infoflow type="none"/>
+#
+interface(`corenet_dontaudit_receive_ntske_server_packets',`
+	gen_require(`
+		type ntske_server_packet_t;
+	')
+
+	dontaudit $1 ntske_server_packet_t:packet recv;
+')
+
+########################################
+## <summary>
+##	Send and receive ntske_server packets.
+## </summary>
+## <param name="domain">
+##	<summary>
+##	Domain allowed access.
+##	</summary>
+## </param>
+## <infoflow type="both" weight="10"/>
+#
+interface(`corenet_sendrecv_ntske_server_packets',`
+	corenet_send_ntske_server_packets($1)
+	corenet_receive_ntske_server_packets($1)
+')
+
+########################################
+## <summary>
+##	Do not audit attempts to send and receive ntske_server packets.
+## </summary>
+## <param name="domain">
+##	<summary>
+##	Domain to not audit.
+##	</summary>
+## </param>
+## <infoflow type="none"/>
+#
+interface(`corenet_dontaudit_sendrecv_ntske_server_packets',`
+	corenet_dontaudit_send_ntske_server_packets($1)
+	corenet_dontaudit_receive_ntske_server_packets($1)
+')
+
+########################################
+## <summary>
+##	Relabel packets to ntske_server the packet type.
+## </summary>
+## <param name="domain">
+##	<summary>
+##	Domain allowed access.
+##	</summary>
+## </param>
+#
+interface(`corenet_relabelto_ntske_server_packets',`
+	gen_require(`
+		type ntske_server_packet_t;
+	')
+
+	allow $1 ntske_server_packet_t:packet relabelto;
+')
+
+
+
+
 ########################################
 ## <summary>
 ##	Send and receive TCP traffic on the oa_system port.

diff --git a/policy/modules/kernel/corenetwork.te b/policy/modules/kernel/corenetwork.te
index 372deb5b..7632e589 100644
--- a/policy/modules/kernel/corenetwork.te
+++ b/policy/modules/kernel/corenetwork.te
@@ -2,7 +2,7 @@
 # This is a generated file!  Instead of modifying this file, the
 # corenetwork.te.in or corenetwork.te.m4 file should be modified.
 #
-policy_module(corenetwork, 1.29.0)
+policy_module(corenetwork)
 
 ########################################
 #
@@ -36,6 +36,11 @@ dev_node(ppp_device_t)
 type tun_tap_device_t;
 dev_node(tun_tap_device_t)
 
+# double quotes needed here to avoid a build error
+optional_policy(`
+	container_mountpoint(tun_tap_device_t)
+')
+
 ########################################
 #
 # Ports and packets
@@ -59,6 +64,7 @@ type icmp_packet_t, packet_type;
 #
 type netlabel_peer_t;
 sid netmsg gen_context(system_u:object_r:netlabel_peer_t,mls_systemhigh)
+mcs_constrained(netlabel_peer_t)
 
 #
 # port_t is the default type of INET port numbers.
@@ -1162,6 +1168,13 @@ typeattribute ntp_port_t reserved_port_type;
 portcon udp 123 gen_context(system_u:object_r:ntp_port_t,s0)
 
 
+type ntske_port_t, port_type, defined_port_type;
+type ntske_client_packet_t, packet_type, client_packet_type;
+type ntske_server_packet_t, packet_type, server_packet_type;
+typeattribute ntske_port_t unreserved_port_type;
+portcon tcp 4460 gen_context(system_u:object_r:ntske_port_t,s0)
+
+
 type oa_system_port_t, port_type, defined_port_type;
 type oa_system_client_packet_t, packet_type, client_packet_type;
 type oa_system_server_packet_t, packet_type, server_packet_type;