policy_module(ldap_additional, 0.0.2) require { type slapd_db_t; type slapd_t; } allow slapd_t slapd_db_t:file map;