| allow kernel app_efs_file:dir search; | |
| allow kernel app_efs_file:file open; | |
| allow kernel sensor_factoryapp_efs_file:file open; | |
| allow kernel efs_file:dir search; | |
| allow kernel device:chr_file { getattr setattr unlink create }; | |
| allow kernel device:dir create_dir_perms; | |
| allow kernel self:capability { sys_rawio mknod }; | |
| allow kernel block_device:dir search; | |
| dontaudit kernel device:blk_file create; | |
| allow kernel sysfs_sec_key:dir search; | |
| r_dir_file(kernel, sysfs_virtual) |