1# audit2allow
2allow kernel device:chr_file { create setattr };
3allow kernel device:dir { add_name create write };
4allow kernel self:capability mknod;
5allow kernel vendor_file:file { open read getattr};
6allow kernel vendor_file:dir read;
7allow kernel self:system module_request;
8allow vendor_init kernel:system module_request;
9allow kernel sepolicy_file:file getattr;
10allow kernel system_bootstrap_lib_file:dir getattr;
11allow kernel system_bootstrap_lib_file:file getattr;
12