allow {domain -appdomain -rs} sysfs_vendor_sched:file w_file_perms;
dontaudit domain file_type:file *;
dontaudit domain file_type:chr_file *;
dontaudit domain file_type:dir *;
dontaudit domain file_type:capability *;
dontaudit domain file_type:sock_file *;
dontaudit domain property_type:file *;
dontaudit domain property_type:property_service *;
dontaudit domain fs_type:chr_file *;
dontaudit domain fs_type:file *;
dontaudit domain fs_type:blk_file *;
dontaudit domain fs_type:dir *;
dontaudit domain fs_type:filesystem *;
dontaudit domain dev_type:file *;
dontaudit domain dev_type:chr_file *;
dontaudit domain dev_type:blk_file *;
dontaudit domain service_manager_type:service_manager *;
dontaudit domain domain:capability *;
dontaudit domain domain:binder *;
dontaudit domain domain:socket_class_set *;
dontaudit fs_type fs_type:filesystem *;