resource foo {}

domain my_domain {
	auditallow(this, foo, file, [read]);
}