-c inet_dgram_socket_create grant
-c unix_socket_create grant
-c opaque_net_connect revoke
-c unix_dgram_socket_bind revoke
-c unix_dgram_socket_connect revoke
-c unix_stream_socket_bind revoke
-c unix_stream_socket_connect revoke
-c unix_vmklink_socket_connect revoke

-d supershellObj superDom file_exec grant
-d supportUtilObj superDom file_exec grant
-d esxtopObj esxtopDom file_exec grant

-p unix_dgram_socket_connect /dev/auditlog grant
-p unix_stream_socket_connect /var/run/nscd/socket grant
-p unix_dgram_socket_connect /dev/vmwSyslog grant

-r /
-r /.ash_history rw
-r /.profile r
-r /bin/esxtop x
-r /bin/supershell x
-r /bin/support-util x
-r /bin/vmkvsitools x
-r /bin/vsish x
-r /dev/char/mem/null w
-r /dev/char/pty/ r
-r /dev/char/tty/ rw
-r /dev/char/vmkdriver/random r
-r /dev/char/vmkdriver/urandom r
-r /etc/environment r
-r /etc/group r
-r /etc/issue r
-r /etc/localtime r
-r /etc/motd r
-r /etc/motd-dev rx
-r /etc/nsswitch.conf r
-r /etc/pam.d/login r
-r /etc/pam.d/other r
-r /etc/pam.d/system-auth r
-r /etc/pam.d/system-auth-generic r
-r /etc/pam.d/system-auth-tally r
-r /etc/passwd r
-r /etc/profile r
-r /etc/profile.local r
-r /etc/security/access.conf r
-r /etc/security/pam_env.conf r
-r /etc/shadow r
-r /etc/vmware/config r
-r /etc/vmware/settings r
-r /lib r
-r /lib64 x
-r /tmp rw
-r /usr/lib/vmware/busybox x
-r /usr/lib/vmware/likewise/lib64 x
-r /usr/lib64/ x
-r /var/run/utmp w

-s genericSys grant
-s ioctlSys grant
-s setpgidSys grant
-s adminSys grant
-s vsiReadSys grant
-s forkSys grant
-s execSys grant
-s cloneSys grant
-s openSys grant
-s mprotectSys grant
