policy_module(httpd-unix-sock, 0.0.1)

require {
    type httpd_t;
    type unconfined_service_t;
}

files_search_pids(httpd_t);
files_write_generic_pid_pipes(httpd_t);
allow httpd_t unconfined_service_t:unix_stream_socket { getattr connectto };