type vl53l1_daemon_main, domain; type vl53l1_daemon_main_exec, exec_type, vendor_file_type, file_type; init_daemon_domain(vl53l1_daemon_main) allow vl53l1_daemon_main self:{ netlink_generic_socket netlink_iscsi_socket netlink_kobject_uevent_socket netlink_socket } create_socket_perms_no_ioctl; allow vl53l1_daemon_main sysfs_vl53l1:dir search; allow vl53l1_daemon_main sysfs_vl53l1:file rw_file_perms;