policy_module(iptables_additional, 0.0.1)

require {
  type iptables_t;
  type var_lib_t;
}

init_read_script_pipes(iptables_t)
manage_files_pattern(iptables_t, var_lib_t, var_lib_t)