1type init-insmod-sh, domain; 2type init-insmod-sh_exec, exec_type, vendor_file_type, file_type; 3 4init_daemon_domain(init-insmod-sh) 5 6allow init-insmod-sh vendor_shell_exec:file rx_file_perms; 7allow init-insmod-sh vendor_toolbox_exec:file rx_file_perms; 8 9# Set the vendor.all.modules.ready property 10set_prop(init-insmod-sh, vendor_device_prop) 11 12# Allow insmod 13allow init-insmod-sh self:capability sys_module; 14allow init-insmod-sh system_file:system module_load; 15 16allow init-insmod-sh vendor_file:system module_load; 17 18allow init-insmod-sh kernel:key search; 19 20# Caused by insmod wlan.ko. 21dontaudit init-insmod-sh debugfs_wlan:dir search; 22