allow kernel self:system syslog_read; # Allow kernel to read kmsg_device allow kernel kmsg_device:chr_file r_file_perms; # Allow kernel to search in block_device allow kernel block_device:dir search; # Allow kernel to read and write to oem_block_device allow kernel oem_block_device:blk_file rw_file_perms; # Allow kernel to read and write to param_block_device allow kernel param_block_device:blk_file rw_file_perms;