allow keystore kernel:system module_request; allow keystore log_device:chr_file { write open };