# pvrsrvinit type pvrsrvinit, domain; type pvrsrvinit_exec, exec_type, file_type; init_daemon_domain(pvrsrvinit) allow pvrsrvinit gpu_device:chr_file rw_file_perms; allow pvrsrvinit kernel:system module_request; allow pvrsrvinit self:capability { sys_module }; allow pvrsrvinit system_file:file x_file_perms; allow pvrsrvinit shell_exec:file rx_file_perms; allow pvrsrvinit pvrsrvinit_exec:file rx_file_perms; allow pvrsrvinit property_socket:sock_file write; allow pvrsrvinit init:unix_stream_socket connectto; allow pvrsrvinit block_device:dir search; allow pvrsrvinit gpu_device:chr_file { read write ioctl open };