resource foo {}

domain my_domain {
	dontaudit(this, foo, file, [read]);
}