allow kernel app_efs_file:dir search; allow kernel app_efs_file:file open; allow kernel sensor_factoryapp_efs_file:file open; allow kernel efs_file:dir search; allow kernel device:chr_file { getattr setattr unlink create }; allow kernel device:dir create_dir_perms; allow kernel self:capability { sys_rawio mknod }; allow kernel sysfs_virtual:dir search; allow kernel block_device:dir search;