dontaudit untrusted_app_25 net_dns_prop:file read;
dontaudit untrusted_app_25 proc:file read;
allow untrusted_app_25 unlabeled:dir search;