sepolicy/domain.te

allow domain sysfs_socinfo:dir r_dir_perms;
allow { domain -isolated_app } sysfs_socinfo:file r_file_perms;