(block net_container
	(blockabstract net_container)

	(optional net_container_optional
		(typeattributeset container_net_domain (process))
	)
)

(block restricted_net_container
	(blockabstract restricted_net_container)

	(optional restricted_net_container_optional
		(allow process self create_tcp_socket_perms)
		(allow process self create_udp_socket_perms)
		(allow process self create_sctp_socket_perms)

		(call .read_lnk_files (process proc_t))

		(allow process node_t (node (recvfrom sendto)))

		(allow process node_t (udp_socket (node_bind)))
		(allow process node_t (tcp_socket (node_bind)))

		(allow process http_port_t (tcp_socket (name_connect)))
	)
)