type diag_uart_log, domain; type diag_uart_log_exec, exec_type, file_type; init_daemon_domain(diag_uart_log) domain_trans(init, rootfs, diag_uart_log) allow diag_uart_log at_distributor:unix_stream_socket connectto; allow diag_uart_log self:capability setuid;