1 type init-qcom-ipastart-sh, domain; 2 type init-qcom-ipastart-sh_exec, exec_type, vendor_file_type, file_type; 3 4 init_daemon_domain(init-qcom-ipastart-sh) 5 6 allow init-qcom-ipastart-sh vendor_shell_exec:file rx_file_perms; 7 allow init-qcom-ipastart-sh vendor_toolbox_exec:file rx_file_perms; 8 9 # Set /dev/ipa to 1 10 allow init-qcom-ipastart-sh ipa_dev:chr_file w_file_perms; 11