module ping 1.0;

require {
	type unconfined_t;
	type port_t;
	class icmp_socket name_bind;
}

#============= unconfined_t ==============
allow unconfined_t port_t:icmp_socket name_bind;