Template: Network Client, Emulation: netbsd, Description: An application that functions as a network client.  This policy automatically allows name server lookups.
	netbsd-fsread: filename eq "/usr/libexec/ld.so" then permit
	netbsd-read: permit
	netbsd-mmap: permit
	netbsd-issetugid: permit
	netbsd-__sysctl: permit
	netbsd-fsread: filename eq "/var/run/ld.so.hints" then permit
	netbsd-fsread: filename match "/usr/lib/*" then permit
	netbsd-mprotect: permit
	netbsd-close: permit
	netbsd-munmap: permit
	netbsd-fsread: filename eq "/etc/pwd.db" then permit
	netbsd-gettimeofday: permit
	netbsd-fsread: filename eq "/etc/malloc.conf" then permit
	netbsd-break: permit
	netbsd-fsread: filename eq "/etc/services" then permit
	netbsd-fstat: permit
	netbsd-fsread: filename eq "/etc/resolv.conf" then permit
	netbsd-fsread: filename eq "/etc/hosts" then permit
	netbsd-fsread: filename eq "/dev/arandom" then permit
	netbsd-socket: permit
	netbsd-connect: sockaddr match "inet-*:53" then permit
	netbsd-sendto: true then permit
	netbsd-select: permit
	netbsd-recvfrom: permit
	netbsd-fsread: filename match "/usr/share/nls/*" then permit
	netbsd-writev: permit
	netbsd-exit: permit

