1type init-display-sh, domain; 2type init-display-sh_exec, vendor_file_type, exec_type, file_type; 3init_daemon_domain(init-display-sh) 4 5allow init-display-sh self:capability sys_module; 6allow init-display-sh vendor_kernel_modules:system module_load; 7allow init-display-sh vendor_toolbox_exec:file execute_no_trans; 8 9dontaudit init-display-sh proc_cmdline:file r_file_perms; 10 11