policy_module(mod_lookup_identity, 1.0) require { type sssd_t; type httpd_t; class dbus send_msg; } allow httpd_t sssd_t:dbus send_msg; allow sssd_t httpd_t:dbus send_msg;