SELinux policy modules

webkit: plug-in process

	Conditionally confine the webkit plug-in process
	Basically currently only tested a bit with libflashplugin

	The easier work around for this would be to just label the
	webkitpluginprocess executable file with the mozilla plug-in
	executable file type

	The mozilla plugin domain is a bit too generic/coarse for my
	taste, and this module is a bit more least-privilege

gtalkplugin: Google Talk Plugin executable file

	The webkit plug-in process will run the Google Talk Plug-in
	with a domain transition to the private gtalkplugin domain

	I decided to run this process in a private domain because the
	webkit plug-in process domain is too coarse for my taste

myunconfineduser: Calls the webkitpp, and gtalkplugin per role templates

mymozilla: makes mozilla_plugin_tmpfs_t pulseaudio_tmpfs_content

	This allows pulseaudio clients to read and remove these tmpfs files