Policy: /Applications/iTunes.app/Contents/MacOS/iTunes, Emulation: darwin
	darwin-#331: permit
	darwin-__sysctl: permit
	darwin-accept: permit
	darwin-bind: sockaddr eq "/var/tmp/SCDynamicStoreNotifyFileDescriptor-17667" then permit
	darwin-close: permit
	darwin-delete: permit
	darwin-exchangedata: permit
	darwin-exit: permit
	darwin-fcntl: permit
	darwin-fsread: filename eq "/" then permit
	darwin-fsread: filename sub "<non-existent filename>" then deny[enoent]
	darwin-fsread: filename eq "/Applications/iTunes.app" then permit
	darwin-fsread: filename match "/Applications/iTunes.app/*" then permit
	darwin-fsread: filename match "/Library/*" then permit
	darwin-fsread: filename match "/System/Library/*" then permit
	darwin-fsread: filename match "$HOME/Library/*" then permit
	darwin-fsread: filename match "$HOME/Music/*" then permit
	darwin-fsread: filename eq "/dev/urandom" then permit
	darwin-fsread: filename eq "/private/etc/localtime" then permit
	darwin-fsread: filename match "/usr/lib/*" then permit
	darwin-fsread: filename match "/usr/share/zoneinfo/*" then permit
	darwin-fstat: permit
	darwin-fswrite: filename match "/Library/Caches/com.apple.*" then permit
	darwin-fswrite: filename eq "$HOME/Library/Preferences/QuickTime Preferences" then permit
	darwin-fswrite: filename match "$HOME/Music/iTunes/*" then permit
	darwin-fsync: permit
	darwin-getattrlist: permit
	darwin-getdirentries: permit
	darwin-getdirentriesattr: permit
	darwin-getgid: permit
	darwin-getgroups: permit
	darwin-getlogin: permit
	darwin-getpid: permit
	darwin-getuid: permit
	darwin-ioctl: permit
	darwin-kdebug_trace: permit
	darwin-listen: permit
	darwin-lseek: permit
	darwin-mmap: permit
	darwin-modwatch: permit
	darwin-munmap: permit
	darwin-old_obs_getfsstat: permit
	darwin-pathconf: permit
	darwin-pipe: permit
	darwin-ptrace: permit
	darwin-read: permit
	darwin-setattrlist: permit
	darwin-shm_open: permit
	darwin-sigaction: permit
	darwin-socket: sockdom eq "AF_INET" and socktype eq "SOCK_DGRAM" then permit
	darwin-socket: sockdom eq "AF_UNIX" and socktype eq "SOCK_STREAM" then permit
	darwin-statfs: permit
	darwin-waitevent: permit
	darwin-watchevent: permit
	darwin-write: permit
	darwin-fswrite: filename match "$HOME/Library/Preferences/*" then permit
	darwin-chmod: filename match "$HOME/Library/Preferences/*" and mode eq "600" then permit
	darwin-rename: filename match "$HOME/Library/Preferences/*" and filename[1] match "$HOME/Library/Preferences/*" then permit