policy_module(syslog_additional, 0.0.1) require { type syslogd_t; type var_t; } allow syslogd_t var_t:sock_file unlink;