(block tmp_container
	(blockabstract tmp_container)

	(optional tmp_container_optional
		(allow process tmpfile search_dir_perms)
		(allow process tmpfile read_file_perms)
	)
)

(block tmp_rw_container
	(blockabstract tmp_rw_container)

	(blockinherit tmp_container)

	(optional tmp_rw_container_optional
		(allow process tmpfile rw_dir_perms)
		(allow process tmpfile rw_file_perms)
	)
)