# for diag over socket userdebug_or_eng(` allow kernel self:socket create; ') allow kernel debugfs_wlan:dir search; dontaudit kernel kernel:system module_request; # Read FDs from /vendor/firmware allow kernel vendor_file:file r_file_perms; r_dir_file(kernel, vendor_firmware_file) allow kernel debugfs_ipc:dir search; allow kernel persist_file:dir search;