# kernel.te

# /vendor/firmware/
allow kernel vendor_firmware_file:dir r_dir_perms;
allow kernel vendor_firmware_file:file r_file_perms;
allow kernel app_efs_file:dir search;
allow kernel app_efs_file:file open;
allow kernel sensor_factoryapp_efs_file:file open;
allow kernel efs_file:dir search;

allow kernel device:chr_file { getattr setattr unlink create };
allow kernel device:dir create_dir_perms;
allow kernel self:capability { sys_rawio mknod };

allow kernel block_device:dir search;

allow kernel sysfs_sec_key:dir search;
r_dir_file(kernel, sysfs_virtual)