module zerotier-one 1.0;

require {
	type unconfined_t;
	type initrc_t;
	class memprotect mmap_zero;
}

#============= initrc_t ==============
allow initrc_t self:memprotect mmap_zero;

#============= unconfined_t ==============
allow unconfined_t self:memprotect mmap_zero;