| allow postinstall dm_device:chr_file rw_file_perms; | |
| allow postinstall preloader_block_device:blk_file rw_file_perms; | |
| allow postinstall postinstall_block_device:blk_file rw_file_perms; | |
| allow postinstall sysfs_devices_block:dir search; | |
| allowxperm postinstall preloader_block_device:blk_file ioctl BLKROSET; | |
| allow postinstall block_device:dir search; | |
| allow postinstall self:capability sys_admin; |