Habitat Type Enforcement for SELinux on Fedora 28 - THIS IS UNVERIFIED!!! DON'T USE THIS!

my-hab.te

module my-hab 1.0;

require {
        type init_t;
        type tmp_t;
        type default_t;
        type http_port_t;
        class sock_file { create write };
        class process setpgid;
        class file { create execute execute_no_trans map open read rename setattr unlink write };
        class lnk_file read;
        class dir { create rename reparent rmdir setattr };
        class tcp_socket name_connect;
}

#============= init_t ==============

#!!!! This avc is allowed in the current policy
allow init_t default_t:dir { create rename reparent rmdir setattr };

#!!!! This avc is allowed in the current policy
allow init_t default_t:file { create execute execute_no_trans map open read rename setattr unlink write };

#!!!! This avc is allowed in the current policy
allow init_t default_t:lnk_file read;

#!!!! This avc is allowed in the current policy
allow init_t http_port_t:tcp_socket name_connect;
allow init_t self:process setpgid;

#!!!! This avc is allowed in the current policy
allow init_t tmp_t:sock_file { create write };