type abox, domain, mlstrustedsubject;
type abox_exec, exec_type, file_type, vendor_file_type;
init_daemon_domain(abox)

allow abox sysfs_abox_writable:file rw_file_perms;

allow abox self:netlink_kobject_uevent_socket create_socket_perms_no_ioctl;