| allow kernel app_efs_file:dir search; | |
| allow kernel app_efs_file:file open; | |
| allow kernel sensor_factoryapp_efs_file:file open; | |
| allow kernel efs_file:dir search; | |
| allow kernel device:chr_file { getattr setattr unlink create }; | |
| allow kernel device:dir create_dir_perms; | |
| allow kernel self:capability { sys_rawio mknod }; | |
| allow kernel sysfs_virtual:dir search; | |
| allow kernel block_device:dir search; |