1 # kdevtmpfs accesses devices before ueventd restorecon 2 allow kernel device: { blk_file chr_file } { create setattr }; 3 allow kernel device:dir { create write add_name }; 4 allow kernel self:capability mknod; 5 6