Policy: /usr/bin/cvs, Emulation: netbsd
	netbsd-__sysctl: permit
	netbsd-mmap: permit
	netbsd-munmap: permit
	netbsd-mprotect: permit
	netbsd-issetugid: permit
	netbsd-fstat: true then permit
	netbsd-close: permit
	netbsd-lseek: permit
	netbsd-fchdir: permit
	netbsd-chdir: permit
	netbsd-pipe: permit
	netbsd-fsread: true then permit
	netbsd-fswrite: true then permit
	netbsd-fcntl: permit
	netbsd-fstatfs: permit
	netbsd-fstatvfs1: permit
	netbsd-getdirentries: true then permit
	netbsd-gettimeofday: permit
	netbsd-read: permit
	netbsd-write: permit
	netbsd-break: permit
	netbsd-chmod: permit
	netbsd-fchmod: permit
	netbsd-mquery: true then permit
	netbsd-sigprocmask: true then permit
	netbsd-sigaction: true then permit
	netbsd-getpid: permit
	netbsd-fork: permit
	netbsd-select: permit
	netbsd-dup2: permit
	netbsd-kill: permit
	netbsd-exit: permit
	netbsd-wait4: permit
	netbsd-nanosleep: permit
	netbsd-umask: permit
	netbsd-utimes: permit
	netbsd-getuid: permit
	netbsd-geteuid: permit
	netbsd-pread: permit
	netbsd-rename: permit
	netbsd-fsync: permit

	netbsd-fsread: filename eq "/var/run/ld.so.hints" then permit
	netbsd-fsread: filename eq "/usr/lib" then permit
	netbsd-fsread: filename match "/usr/lib/libkrb5.so.*" then permit
	netbsd-fsread: filename match "/usr/lib/libc.so.*" then permit
	netbsd-fsread: filename match "/usr/lib/libgssapi.so.*" then permit
	netbsd-fsread: filename match "/usr/lib/libcrypto.so.*" then permit
	netbsd-fsread: filename match "/usr/lib/libz.so.*" then permit
	netbsd-fsread: filename match "/usr/lib/libdes.so.*" then permit

	netbsd-fsread: filename eq "/" then permit
	netbsd-fsread: filename eq "/etc/malloc.conf" then permit
	netbsd-fsread: filename match "/usr/share/zoneinfo/*" then permit
	netbsd-fsread: filename eq "/dev/null" then permit

	netbsd-fsread: filename eq "/home/cvsJail/symacx/home/cvsoc/.cvsrc" then permit
	netbsd-fsread: filename eq "/home/cvsJail/symacx/cvs/CVSROOT" then permit
	netbsd-fsread: filename match "/home/cvsJail/symacx/cvs/CVSROOT/*" then permit
	netbsd-fsread: filename eq "/home/cvsJail/symacx/cvs" then permit

	netbsd-fsread: filename eq "/tmp" then permit
	netbsd-fswrite: filename eq "/tmp" then permit
	netbsd-fswrite: filename match "/tmp/*" then permit
	netbsd-chdir: filename eq "/tmp" then permit
	netbsd-chdir: filename match "/tmp/*" then permit
	netbsd-chmod: filename match "/tmp/*" and mode eq "*" then permit
	netbsd-rename: filename inpath "/tmp/" then permit

	netbsd-__fstat13: permit
	netbsd-__sigprocmask14: permit
	netbsd-__sigaction_sigtramp: permit
	netbsd-getegid: permit
	netbsd-getgroups: permit
	netbsd-getdents: permit
	netbsd-__getcwd: permit