1allow domain qemu_device:chr_file rw_file_perms; 2 3get_prop(domain, vendor_qemu_prop) 4get_prop(domain, vendor_build_prop) 5