resource all_files {}

domain all_processes {
	allow(all_processes, all_files, file, [read write open getattr append]);
}